last executing test programs: 11m29.237797563s ago: executing program 0 (id=573): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0x40086200, r1) (fail_nth: 4) 11m27.496350284s ago: executing program 0 (id=578): statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x4000003, 0x80, 0x100000}, 0x200, 0x81) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x1, 0x84) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x4) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/workqueue/scsi_tmf_0/affinity_scope\x00', 0x80400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x8, &(0x7f0000000000), 0x7, 0xa}, 0xfffffffb}, 0x5, 0x9, 0x0) 11m27.258085089s ago: executing program 0 (id=580): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') setsockopt$auto(r2, 0x7fff, 0x80000001, &(0x7f0000000000)='./cgroup.net/notify_on_release\x00', 0x8) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x4, 0x0, 0x4, 0xeb1, r3, 0x7ff7) gettid() lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(r0, r1, 0x2) ioctl$auto_BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x11, 0x2, 0x0) r4 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 11m25.313819112s ago: executing program 0 (id=585): mmap$auto(0x5, 0x4020009, 0x100000000000e1, 0xeb1, 0x401, 0xffff) open(&(0x7f0000000040)='./file0\x00', 0x163b42, 0x110) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/auth.rpcsec.context/flush\x00', 0x40880, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) fallocate$auto(0x8000000000000003, 0x4cc, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000380)='./file0\x00') mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r0, 0x0) 11m24.931153519s ago: executing program 0 (id=586): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0x40086201, r1) 11m24.148763177s ago: executing program 0 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x2, 0x40000f, 0x0, 0x0, 0x10000000003) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x1, 0xfffffffd, 0x2007fd, 0xffffffff, 0xfffffffb}, "0dd7fd00d6d51700001000"}) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) msync$auto(0x5, 0x7, 0x9) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2200000000000005, 0x40007f, 0x40eb2, r0, 0x300000000000) lseek$auto(r2, 0x7ff, 0x1) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="01a78fea000000", @ANYRES16=r3, @ANYBLOB="0100253d7000fddbdf2501000000040007800c00020006000000000000000c0004000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4045}, 0x8880) 11m8.879184399s ago: executing program 32 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x2, 0x40000f, 0x0, 0x0, 0x10000000003) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x1, 0xfffffffd, 0x2007fd, 0xffffffff, 0xfffffffb}, "0dd7fd00d6d51700001000"}) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) msync$auto(0x5, 0x7, 0x9) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2200000000000005, 0x40007f, 0x40eb2, r0, 0x300000000000) lseek$auto(r2, 0x7ff, 0x1) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="01a78fea000000", @ANYRES16=r3, @ANYBLOB="0100253d7000fddbdf2501000000040007800c00020006000000000000000c0004000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4045}, 0x8880) 8m59.984485173s ago: executing program 1 (id=941): openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r2) close_range$auto(0x0, r2, 0x7566583d) set_mempolicy$auto(0x4, 0x0, 0x5) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xb, 0x2, 0x5) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0xff, 0x0, 0xff, 0x6, 0x8, 0x80000000000000, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {0x3, 0x200}, 0x9, 0x1, 0x2, 0x7, 0x0, 0x8, 0x545, 0x1, 0x8c6a, 0x6}) (async) adjtimex$auto(&(0x7f0000000000)={0xff, 0x0, 0xff, 0x6, 0x8, 0x80000000000000, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {0x3, 0x200}, 0x9, 0x1, 0x2, 0x7, 0x0, 0x8, 0x545, 0x1, 0x8c6a, 0x6}) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x5, &(0x7f0000000180)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0xb, 0x8, 0x1, @relative_id=0x8, 0x1}, 0x92) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 8m58.866056319s ago: executing program 1 (id=943): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x3) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) r2 = socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r3 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) write$auto(r3, 0x0, 0x6) r4 = socket(0x2, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x7f, 0x7, 0x8000, 0x8fd6, 0x400000000000948f, 0x7, 0x15f4da0b, 0x3, 0x400000000000003, 0x860, 0x10000080000003, 0x3, 0xffffffff, 0x9, 0x8002000002, 0x4]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x40, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x2000000000000007, 0xd, 0x80000000000008, 0x8c3, 0x3, 0x400, 0x20000003, 0x6, 0x61, 0x2, 0x5, 0x6d40, 0x40000000004, 0xffffffffffffffff, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) geteuid() openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0xffffffffffffffff, r4, 0x4) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xc0000100, 0x400, 0x9}]}) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) pwrite64$auto(r1, 0x0, 0x4e, 0x3) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/5/name\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000540)=""/4093, 0xffd) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x814}, 0x8080) 8m58.589489308s ago: executing program 1 (id=944): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f642, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) socket(0xa, 0x3, 0x3c) pread64$auto(r1, 0x0, 0x20000000001, 0x240000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x1, 0x7, 0x4, 0x55a, @prog_cnt=0x1, 0x0, 0x98f, 0x3, 0x0, 0x8}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sysfs$auto(0x2, 0x23, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1c3043, 0xf7) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) 8m56.753366619s ago: executing program 1 (id=947): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.3/usb4/ep_00/uevent\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)=' ', 0x4) (async) epoll_pwait2$auto(r0, &(0x7f0000000000)={0x3c, 0x6}, 0x7, &(0x7f0000000080)={0x7, 0x4}, &(0x7f0000000100)={0x4}, 0x8) 8m56.325821782s ago: executing program 1 (id=948): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) (async) unshare$auto(0x40000080) (async) unshare$auto(0x9) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) r0 = socket(0x10, 0x4, 0x800009) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbeb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x1) socket(0x11, 0xfffffffffffffffe, 0xb) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async, rerun: 32) r2 = prctl$auto(0x3c, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0xffffffff, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\x87\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j\x1c\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xa2d\x04\xa9 1q\x97\xc4,\xa9\x1e\xc1\xbe\xa1q\x03\x00\x00\x00\x00\x00\x00\x00\x05\x90\xa2', 0x10000) (async) mmap$auto(0xfb, 0x2000c, 0x4000000000df, 0xeb1, r2, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x18380, 0x0) (async) unshare$auto(0x40000080) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="040025bd7000fbdbdf25380000000800770000040000"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x24008810) mmap$auto(0x100400000000000, 0x8001, 0x7, 0xfffffffffffff810, 0xfffffffffffffffa, 0x1000000008000) (async) madvise$auto(0x0, 0xffffffffffff0009, 0x13) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/ipvlan0/enhanced_dad\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) (async, rerun: 32) sendmsg$auto_NCSI_CMD_PKG_INFO(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 32) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x43403d05, 0x0) madvise$auto(0x0, 0x52, 0x9) 8m55.674562684s ago: executing program 1 (id=953): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x100000000004, 0x7ff) ptrace$auto(0x40000008, r0, 0x1, 0x4f) move_pages$auto(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0x3ff, 0x15, 0x0, 0x0) socket(0xf, 0x6, 0x2) r1 = socket(0x2b, 0x80000, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x24080001) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000de, 0x12, 0x401, 0xfffffffeffffffff) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000480)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6\xb5\xe2\x9b\xb0\xe4=\xf67\xe8\x14\xb2,\x9evv\x1d\xd3\xe6\x1c\x858\x97j\xa1n\x1c\x96sK*#>\xab\xfd\xaa!\x9b\x99`\xe1\xb0?\xed\xec\t\x04:7\n9\xa4\xff\x02!\xc4.\xa1', 0x7ff, 0x400) socket(0x29, 0x80001, 0x2) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x161980, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x10000000002}, 0x10) bpf$auto(0x2, 0x0, 0xb) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_event_trigger_fops_trace(r4, &(0x7f0000000340), 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) 8m40.440736927s ago: executing program 33 (id=953): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x100000000004, 0x7ff) ptrace$auto(0x40000008, r0, 0x1, 0x4f) move_pages$auto(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0x3ff, 0x15, 0x0, 0x0) socket(0xf, 0x6, 0x2) r1 = socket(0x2b, 0x80000, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x24080001) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000de, 0x12, 0x401, 0xfffffffeffffffff) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000480)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6\xb5\xe2\x9b\xb0\xe4=\xf67\xe8\x14\xb2,\x9evv\x1d\xd3\xe6\x1c\x858\x97j\xa1n\x1c\x96sK*#>\xab\xfd\xaa!\x9b\x99`\xe1\xb0?\xed\xec\t\x04:7\n9\xa4\xff\x02!\xc4.\xa1', 0x7ff, 0x400) socket(0x29, 0x80001, 0x2) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x161980, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x10000000002}, 0x10) bpf$auto(0x2, 0x0, 0xb) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_event_trigger_fops_trace(r4, &(0x7f0000000340), 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) 1m22.869719724s ago: executing program 3 (id=2140): mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x28840, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto_MADV_RANDOM(0x5, 0x1, 0x1) madvise$auto_MADV_RANDOM(0x7, 0x4, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x23, 0x80805, 0x0) (async, rerun: 64) capset$auto(0x0, 0x0) (async, rerun: 64) mincore$auto(0x0, 0x10000, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r1, 0x113, 0x1, 0x0, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) socket(0x11, 0x80003, 0x300) dup2$auto(0x0, 0x3) (async) sysfs$auto(0x1000006, 0x1, 0x0) fcntl$auto(0xffffffffffffffff, 0x7, 0x0) open(0x0, 0x2002, 0x1) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) r3 = fcntl$auto(r2, 0x44, 0xa553) read$auto(0x3, 0x0, 0x7fffffff) (async, rerun: 64) mmap$auto(0x9, 0x202000c, 0x5, 0x12, r3, 0x8000) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (async) prctl$auto(0x23, 0x7, 0x2008, 0xfffffffffffffffc, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) (async, rerun: 32) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async, rerun: 32) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/dev_snmp6/syz_tun\x00', 0x56000, 0x0) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) 1m21.308408896s ago: executing program 3 (id=2143): sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x1c}}, 0x880) connect$auto(0xffffffffffffffff, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x9) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000001c0)={0x1110, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x71, 0xbb, "79ee3c33d48768acef07e624444f890d43c7c4a4f9e0fd3be1c5e597298b25b64a4e7fdcd626b764677ec0e7e839bb63151bde815d2e5bf14b50abdb04e3584be412a4f68b9951323ab6c13519438de61a81f343581a11bdcc057628ec1d37c4fe4241ff066220e659745afe01"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x43, 0xba, "52cadab78b7f96c4ad9d1396dea024ce2bb9df9f1b60139fd1a778c358330251432a27f91d0db9087dd2842afad1e33ea9a14a31047f287efb7f85091cb27d"}, @NL80211_ATTR_BSSID={0x1d, 0xf5, "c6ac90d707519629a7fc1728180ee0cafe5f8fa2c67e74dc6a"}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x1004, 0xe8, "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"}]}, 0x1110}, 0x1, 0x0, 0x0, 0x1000}, 0x20000011) r1 = clone$auto(0x1, 0x6, &(0x7f0000001380)=0xb5, &(0x7f00000013c0)=0x3, 0x60b4f3b7) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r1, 0x100) r2 = openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/debug/ieee80211/phy18/short_retry_limit\x00', 0x400000, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000001440)='/proc/self/smaps_rollup\x00', 0x204001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002480)={'hsr0\x00', 0x0}) recvfrom$auto(r3, &(0x7f0000001480)="45a129f0c2c0e880cd8a8a248132d6dfdebd7a9f0622fe0f4f17191f5762ac3a57e4692578d4c437d795951a348e7c8c264fbec398f26534be278d806c6e8da5e0f6e6b0dc9024d59d6babae3b66c976d59340995f9d1ea5f45a0204f3ebfb296b6c05f58b113b5b4547f5bf7356389cc51fce097eb1b18be06d26df62507f4e586d1f77ea4d7f44d0dfda0e2f75ca126472e6d77375b1009a9c878b53fd9e4adb6f6d9328508ee31055b8db29fb72dd560c2e98df4203065ac261ed3dd93a41eb717938b5674086c0ded3f9a9974f072df2940615116aeba98ccc5d52a6cff1786eadab37f4f7424fa203c2c24b2ad1435d97fb6121360baeeebc56d17d54f1ced0c02c55ca74a1b47348862fb35fbe53caa08b2935351976ddea00405495f04fa69afed2a21372ad9491b67cdf47b55bc4bdd5bb48247c0c867951a5314d299597fcaa0b5894bddf718f6d4880215d2c519660a04d0fe7358ccbc0ef7d602ff6ce586328cfd4df3a08f9ab17e203ee627b1d246c46aeb1ff369cc32f6cfdae217a07676c71bcee1583ef6af34983aabe22c22b47bb6649ef6621987817c8ae810b6a86ab175ca4e7efb254685803436e0f9118c86a2ea0ea3178dedd57e1578b0994fac5a36ab606ed37e62c7d323be772f844e1f8faaefc3687f25a4dfb0ca007710eff607bc9863baff6b55c148658fb25a40115509e5c3b1b47ea38a5bfd9989b1eaaa0a9208dffafc5255188dcf7dfb4191ecbba4ba0017865ca872d2b4c1de9e690089ebdac5d6cadc80e1c63bd126c866945225d48de12dd9aea44b42ae590b6677f9dd8ae4bd6a9b9120b63d7a8878bda339e40cde9d32d86671467fe5541592088cedd72bfb04df2c55c3eed706e5f8626de24f65328510dc31c5bd2cca095f9317d85479450d152acf924fee03ea059d1a67a15a2035cd981ef64a1a4d29fbb6b9103b49a145dfe428e9d42c1a5c924c9bd50ffe9f3a54063826eb073041d2a03c573e7e0f0ec3416f4a7775a1213ab762e4a232dcc9936accb8aa907e9e392613dcb8ed744b6682460607f86dfe584b06016650ec703f353a7f0f6c58f4ef58ff860f3141745425c15fbcc07317a61ada604e3efecec9f5f93744d70176a805e517a2973fa22fc1a8f5b1ee123fef7faf3484978babe53970095d26bbda37a608872ff4ca1d528c5bc8811c2e1f1d79d8b4cc76ba1a8270d04da3398d5dd554ed453b3157002e1e52567329fe06a8e56a244ba5dbff0a288b5abe4886e400199998cb9880aa4305579772090a15bde1dad890cc1e6f602a0d58fbcfa8b4af8ee8f85eba40f4cdcfbdf1bb5380572eccb53c690805b03da5f72846c9a24cd98f8a8f759f9940a874452e5e9cd977163d8b5c5a984a4205932c516227ec17e84676544cd1397c0e2b9568aac6c32319ff8aa2c31af6fbdce31d3e16ce90c8afce055480517632f5cf69615ff87dd57b8232fe2926cf2f49d24b4a1056101f61dcb64adf11ad51969d19b7be745b5f9637b0d4eb0b1665570f8272f628fef225f73c37a83f96f6f1b681e5890f810beb8cbffe4ae1b938b0dcd859521ace18b9281be184b7730c7faafe9fbbae8b1f3a90f9975542c7b3a8a0e1172851b8571732d134fa2260a88ffbeeb73be500ed88624f6e26bcb65a58e7509a35db04608da7cf65cd5e36a9f090e03ad374485667e972e5c6fbfd295b3f163de70f69125fbbba8c58640ce4dc8379d5ff4daf9abf3771d9f4b814ba2cda49f25b28a6291a2e15dfd5afa55f6cc5257c3f6601e1a502be17ae6d16f7141d21df72e7f0bed9d30fc5fc7460c6eff5ccf15a311b33054b9315431f8bda393de65468804a4075a7e9717c38359260b91cb2bfb1774ad6d4c1688dabeb30cc5355c4583d129475aa0469c25f567cf7ad058a6b5427473d3c08a29894bfc63c3c358141d1f46054eb12cf3f9c560d6e822c9519d522742393985a1083864cf278d24376cd2533252fb89c3e84f4e775419692f54a81a7d6b67755cc85de55d20ff53bedf7cf489380e96f62e0ca18e6a4afd1a663ea11ea666c8bec7768b91ac0ee837460d21dab453eae272dfc1b47bd958957d51611f7b9e006223463170d67ee282e8631afb448d04d62755257bf7461cbfb553e541ae506b6abe40f05896a2e113be81ab1709dfb0cd1ff51d4b6c20edd32f34f2f8b9f0f78cdf224ae7cd71e13bafc7de4c29fdb18a4ec60245e8e6c44f14207508df1043419b67a3b259d0a8edaabc96f915d290e49b727e96c61bbf09b1b602c84005cc784b95b235004db2c590c1cc705428089040ec7a585a59d8589cfb76fe297d94be5febb9fefa9dc3ceb29f48450e9de677bcdd51cda1c2090b7d21cbb6ad60493a744fa4be707c48ccbe43cb7af12fe2f95537cd01c53f57e4b6ef3bad5437f34412c197ae5cf0e01fc747ca349f647e1435f83e8541960aa320f800caea4ec83f0eed1a4cc38c4cdeb102c2d44d8feda3892dcf302fc2f1a1d3f63ba11f3b6f6fa18dfab4f100ea7a70fc5cc0bda5ac404d28dffa669a50195743e729ae373c1f8cf28ad13ccffe5ec9c159edb361b67dcdad70121e6bd1d615a873d2c3469dfc0b9968d0e9880b76d977b217e93d0d9d3bf15d6f05b0939e4ec9d7e624f64d76b60be3bf68e413ee88bca49ff83c6493be5804b292d06355d644f2212a857c3a88fe900e37bfa0615c4002d17dc1955742b912c490c5c9bfe6264cb6912526c13570ea1703fe088cdca6692656f4fc6f30dc1f1e8fc822fe0e33b79e3a7b586b44529a90c41e537503fcf5895f812aec09739880d126417d71ef8a036d2506874c99c8651365ce7675732a53c57412b18e5d656f652dbca087cc802e3cc3ebb5006f8bef308380d11dc87f74b0b5329e7b421b65ffef1b51b8121a0326866374b6d9ba8c084fd19627791e9c7d991aaeff4ea606aa95657baf2be1d58bb4c3d9c4fe1e469100eeb93930a3b75fc71cc551311560170647c1cabeb8606754a8cbde2c49f312e7c35120f9e0e1c6d4c46c6cd45650e056b743227ab45d90efc944b6083fd224740b121db4901b1edb10cb018b4378f4fc0eb482d248e2e1c00230bee56b6c9538b3737c7c2061882209c233b307b033c308b942df6ea92b236c4805e2121f6b418eb3c0dba40cc6430b9957bfabf4ea9d76f07079fb1f07f3408ad8c371921d94f4f41cba3498a1549cc3649e676a281c704b98402ad8b30faf8701321cd5ebaef97be35246715d1ebd41ecce70512e886736c15975d4aba3fa445f13f17856df0ee3988346ba68a59a986cf55efb2312f2f28e284309eb45d8289c199a6992f774167e72002e6478574c07932f4d0883a2c1b075d2c3f2cf37be524ce606600280b8be277f76061494f5f4be26b08e62001b9508238f1802f4515ef7a59320deb480047c6868be466d97f2261b5d3df54a21bb90875362bbd71b646a5b2d000073e72b34e93220ee5e3e211c55701c28d6013d53634458d699c0cd17736f9446b19076e67e66e68fb62ba00995a5efcf9764f7b2fcce91437d9497e7cee3b38afed330734a78e09c4b8243eb880158e753db1b6971c6bec715d2334eb56a6830a94df1016680ccb07edf632051ab9e0eac08ae9bf181edb6890294865e356f82fd6a33b6e2d456d69003b7f894c29e975c80d22386b4df6f2ce632345a7161f1886766b97b097dfdf767860289ff964e97fbe2fea13cf2502e57bb92825fd08954c08930e98278246db2016eb2e5f67c5339cad82ba6fc69894bceae4b2eff60f82894b4a5a12932b1f39f05fd5029855a64ace551f41c81203195106dac5e2baf84515f47e61b7e80294d79ca733348c23da6e4955186c8ba3d6a6a106757e07af7fb1e3529181c430694246753c64b8ad40b2a440f56afd36d34dfdbb919fbe1b41987ce1ba9a10e7f1fdb60c3dfc23f81a579552c39e3cd0968af571d390b5ad0583bcaf9e9c78949863affe82d70e9ec2c60aa91a339f884c2763fbded2cc26ce352a7b8c4f94fe1c13f7a48d2e6726ee42ed6eac8966168c7298ab257938c793b07bc28097c329185999e828ed23c20a890912f192c84f89aa3d874ae90c97b4e296ffe5aaf921a252ce4b1e737bf1519ff0595267269cdc6f2e608c4045fecbc1193934c9602f5402daa6e41f2528750d8bd90e6025b4e0d396e90479d9cd8d7ac14b66d73ce28c5c55e763000ed5ff923223ab6523cd37633802b75b4008065265a9b661bbdaefb911a9eca58fb0f001fad4e2b0d6da2fd39b787327bcc8e5074920256c346c6944f3c19af641c9d44a0db30d781bd73e97b0860c352aa6bb58fab751b9821ee25bd207446100d9824bb7f23d083875660f9aa932fdf0160d2abc790215a64988e571b2f8c8491b91fe02039fb428de7c98f232ed3d1baa3e12ea7b7861318a5544f2ae299ab6ea7e2accd7aef1f4e65e03a0407b2371f2e210f105edf980be818eb4e77835a9878163faa5cb5e4b126a084615433e5a2f3ccfbd45b6cb67620c55ab584a02185320f43c67202797d342a9a9f0b5fc95ab840cbe23a8ede69e250963905dfde997fd678e806079bca8aba47252eff84c0768fe3a69b5f23053e41281876a7c9edcb5990cc5605ef668c5c47c01afec38190c3a5c0d680dd000da7fb89e10d8ce07874a268af8477f5dcd601fc9b445ee86efd8c87f7af57aa0bedb4ef3ca98690504f4be1313dd5d58b5935257854c00809b659e4984013891b7bc84d70dfb9b40d8a17ba1d40f5c798786a10352b6e39aa41eefbcadb0ac2adc2295302f013525f1c375be19a541d8054ab6d64eef47bc6e3ada6b6427968d4a0df2332789c234b8fcca1b498d81cce5e58a93ca345c67bcabef76f5505c573661bcd333aa6548622a2e69cf1cd1f3d4a500c0c182d9ac039cb6bcfef340a02cec91d2ddd9cea0248d2fbfb6712d60485280be795a959e7a8467743b599b5f0b79ff90d66bf99d9769579cc0ec9f1cc302831dd7b07b5a9ddec2319ed07e5a7ba07b5010d504ad1688036a7d9dc2b0e47168bd17fa965b7248859d522539fbaa134772c9b31bde2921fc73d49ec2b203e6edf64f0aa07f577aae7474cfb83d11d74d4efd150cf082863a710a5aeb58755324f80ecab4805811d1911e086bb5be8b583c099470b7e4b1c1ed34b997eab29cb8a16559a7e08efc7ad7679bb43423e7420b375fc8c9f8263d0763ac9d0c9ce4a73531279fcf6f7565cc20ffc71aa257a8835c135fee65cebf7f3b2e3ec8f02894aa005f54935b5c95a6db00a73738d7533a5b786d57c6c07465bee3d9aeb3dd3d0d065fdcb0c115930da9373faeef0d4a08e422d21702653a32d2767c0567518f32df208b265d54bf0e58384eab726e6acd2fe013ac5eda35f26926a3c0f425a1215cb67088a9c4abbc48542bf7ba4811b6baf18293c300d8e6071edde5a02c76377b05ca84dc638bb27614f2a6c4957e5862edd7561864401ec37b388e018dd8fd2b252e093aee83a28eda6bb5c82df145c0ccc23bca8eacc9d88d663925de550c81e82b5080bd314cd2af6a46b5f1807349de5ebce53d0f9eb4c4f479d7863ec74737d0542f867fb1089c3e54b911cbb520dc787870db1739cb8d795e91436afb3a3fae040d458b5d3fe7490afb9558c3bb35754666d10aaf4c1cd8bc71ffbd92199324db82912be88d556123acb6006496d89495ad9b30ec8b3af415947991143d309a9eb2f1ec2f932edda2772424c2ed3468fd408bbe8e2b3a3c2340733f2c4ff98c173", 0xdf8b, 0x6, &(0x7f00000024c0)=@can={0x1d, r4}, &(0x7f0000002500)=0x10001) rt_sigtimedwait$auto(&(0x7f0000002540)={0x7f}, &(0x7f0000002580)={@_si_pad}, &(0x7f0000002600)={0xb8a, 0xcf4}, 0x8) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000002640)="0418b403720eb093067283484501c0eff12790") r5 = dup$auto(r2) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x64, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x100}, @NL802154_ATTR_WPAN_PHY_NAME={0x38, 0x2, '/sys/kernel/debug/ieee80211/phy18/short_retry_limit\x00'}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}]}, 0x64}}, 0x814) r7 = fcntl$auto(r5, 0x5, r1) r8 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000002800)='/sys/kernel/debug/ieee80211/phy7/fragmentation_threshold\x00', 0x0, 0x0) close_range$auto(r5, r8, 0x80) write$auto_proc_clear_refs_operations_internal(r5, &(0x7f0000002840)="aa8d72d996d14a3719443eabde367a262526d578abba7d53aded28c6d3e9b00b6ad325894eda0a4241414c3262c8a975f6aed0ef59302c9d9dfae3aa032b87c094d0a81556c49459848e7960ac2faeb455d46231dccf8192cc2b4cc248a32a2a80e4fa72ade4c25f3abfc6abd6540662a779274ffa6fb03942a11f", 0x7b) semctl$auto(0x4, 0x289, 0x8, 0x6) r9 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000028c0)='/proc/self/pagemap\x00', 0x80000, 0x0) msgctl$auto_IPC_STAT(0x10000, 0x2, &(0x7f00000029c0)={{0xfff, 0xee00, 0xee01, 0x81, 0x1, 0x5, 0xc6b3}, &(0x7f0000002940)=0xf7, &(0x7f0000002980)=0xa, 0x1, 0x9, 0x4, 0x0, 0x9, 0x4, 0x3, 0x1, @inferred=r1, @inferred=r1}) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r7, &(0x7f0000003f80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003f40)={&(0x7f0000002a40)={0x14d0, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x1}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0xb75}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0xffff2a50}, @THERMAL_GENL_ATTR_TZ={0x1498, 0x1, 0x0, 0x1, [@nested={0x67, 0x44, 0x0, 0x1, [@nested={0x4, 0x37}, @generic="8ab79f30530ae5f39d7637d69c2eb9562588d72b91d02a8811b48822a944e720076686e1f095fa1bfc0d62beb8c752b5d92c110f117634064cca233c3ace68fd2c8cc63b05fc24eb95616d7de558daf37f719d093909ed3f8e6aab01315ca6"]}, @generic="8ea0f5830d7ec20d6a86aeebc6c93f57da6e20548f5ea7550c04681b6c54b29807213d420333efeb19a6f4cc7efc7d0edbcb26441bf7695876b361b672bb8bce6675da5af12ff9e05710cf7bac0df3c2be507b56b0a32479ee2d6eeca3945bb3d580e77a6653510e6aafb8ca510673709399e78e17ac5297b4b4", @typed={0x8, 0xbe, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@broadcast}, @generic="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", @nested={0xc8, 0x12a, 0x0, 0x1, [@generic="d2d80aafe1fd90fe6e552b1d9f9e0279a1bf44ddeee922897cf52380de00f98369aba4d2cc785752db82e311ca5cf767ec85ca65456bf41996cfa40ef5b79c74fca672db5119ef7aad3ba8c3baebad1e93f1710e802853687affa4ca8810e9c018e0caf03c617c4ea54d07594ca7e68e150e7838844af9c6a20d83b3752b2b76528095693d0ed5e283b59e736ba65972a20600098087869fee747d802dafea704b5eaf412ee89a4d5fefdce3957e76fc076544353df8e96edcf8ef36", @typed={0x8, 0x132, 0x0, 0x0, @pid=r1}]}, @generic="368b2b0f28a10ee4fe93fdc3fcae592a165d51198297f96b2f715e08761fb374c19ac627b92194b1f38b916936464c47485a8ab443aaff47f752755843d4ef3da583f3ef11e350770e2ff45c921c15ddb1988a5391371e249b75f45203596f4e613210e1671e761231f24d933d9336ef72d7fe744d7ad81478cac7591bf1a70e225c695555585d23233f58a809fa39fd5ad27e877093bdb7e63a1f9f7caf444b093ef036e05e6b6b765e68ad8c721a59c2ccffd28991436b376981708e2ed293f1944bf8108426cf8a2c95f7a04f1b865692519912e316113892eabdbdcba788faa87a509c543883094c1305fcd5925fb8a3032bee0854116f041a53215e6f3c23f5c484ef0fefc41d7b83af5d7dc18ad4a4171e92e463cb2f8fa653c5990484fc8a28fcd9ae6fdea9b465ac6070d2ec97bfb520a17d73172d53f9fe97b7ca4899f211908036c07daf53a544f698c87634c5c07c5701156578531dc7ea96ed583761c3ab999bb01ec7171dae909dc018e48f0bda6649965596a766d58f0985e1d501a1bb46268588f5765ac6c8701dc4aec05ee3f6159c3b110c62e125ff1dbadb5acc02f01b3890835f92717bfe925515653558236529d1b0e15382445c17294f7a6874cf2f041ebd5058fc1ecad6964edc416a8b02f63550b280fe729ff3e60f667b12b2f3ad074e9a0f38620bd201d5a28f0866abcd70085446d9a8095945d4e3cf797d6e9ebe4e7edafdd6d6fce2a8c94e3726f510f945a502229ed1fb41b7848f886af193a5f91829f3b3b475e81a7b0024043ef3a41ca19ed388585f09323880dde5a2f0b16174f2bf463259a3d449431da25092f0686d61911ab42bff025fd5e91e66e513f87516197644c003b6897b45429307e090262094cd441282b3aab7c4fbfbfa8ae128119d1bdb51cd3c60b6e466466d7cda6acf9e9ab7adc348a2b070c7468dab6a0669f4fe3bdccf5265ae5e390f3fd30578b295caeb4cf38826479d7799785ac3fe7590167b4b89014eeeb5eea8437ce884aa73edc6d8f9f2b83297c2e9251974a85b8af9ac9c4eb88eeeeca570ab94416d3a8ce7a756dc3fc5d86f66d21643cf7102d24cc3621b12d4b6580bc0dad527cfee682ba96aee76f4c15fbc4dc59a26db9da272ba5751d4091da16c8002cc38e4d5e6bf5a3d709094cb9d783cc2fdf12fa79aa91bb817ad35646ee639b35fb57bc7131db56f7c9998ce332d9115b06ceb1cbe0fdb3f00a3197e68ce813114a29fc8dcb27ac8bd8ede8654f4b272b095f5d28004a030a94268cb59416f1328dddb26a854e624eac04ef0361b26c41dcf80afc537622de289091e0771dcab05fe87ce548bec931431151147f9ea2d07ea232642328a0430839300ade60eef0f022ad3059a9b5c218ba20935dc733038f3424a72e40b8b87ba519c28ac5f243726d68a8189166678a88590de08dd002ff4d4dfb68a7afc6c42751efbd590a3c62522f3462f63edb1957a4886880fdf972680cb0d32023fb8cab85f4d61b282164da7d9104265a066b8501bd0951a875166481c38f1925c1212209c314946adcb5137084fa302618cfb7dafe2dd85f702dd8f789dea1a981746e8cff4293d8b5a556e0eba8f0a1df78432a1e85962262a2dcc927b912862e3388f028a93e8568e5233c95bd963aa62e2c246b0fc3120749ccf9a6ddbae89f834036c9386ae172c8a3012c979626230415ef33c6e56f0a47b15a044984bf0499dad5b53db01cbbd2d0bb8f486450db7db3b57fca9e198d03714c7efe0ec69998141876f7b49f00ba3c2e1e42991cfd3296ac1636f390a8f3e90cb88bc66e6b9de57e3caee48b006a7a669a9a2d66e8492891395944dea67c59bb309c17aedeeff8430372ecb8cc71bd0f4b9d30bfc3271fd50213787ccf7bfa831d2bcdfb359f5a63cc14040aec9bea1d404df486e9cd8ea9003035f8a7c3c530a5413061e7361b2d5baa2b75b1fd1ccf8a44754080f0c08478c42eed7b135f3118074e65cf200a2d40e695c2e5e0f02b252d6ce99f377042d7bc755e548bdf9cd7276917b579746302deaaf91d5f064e3b8224a2a2390023799259c5e8318a6ef21a5b9620549c0c6c1be9f6b924343f253bf61097e2724024f054db160b2008cbc95b7ee4f20a694996bbc0975ab5ebc1cd504d62ae77278a3954066c08b52871847577358dd4772333f1b3f08170ce45674507b18ceef9fddb51b4f9b29cde89c34a607f2189337faa3835dec9198a04da51e9b799109b90caa5e047f0a6643d8c55e92b6840d25fc805cbff2cd4929bbe922575cde8685449e416fa39d9e575e7fdbb4b012f6e66593a726af9f2f9939b800b7b3eda9385eca814f819f9cda2ba7860dd3c76b55a93ec40524580f0354e6154d15421c726a28f0ad95a62b3aa4e433e0ab14143676c174203680c6497175d71e76d547280eb2e1b26f656802cdd3ba62710b60f760d6b0f6b4f226617e2cc3b0e738eba81f23e5ca985ed6bf837c2144420e2aaf95375cdb03947c5b65203f19d111665690cb8c30a64445cc98ca5ffc0b2e5306ff51ac6cf1f09e1c017ba987b5b7d084e0892fbfba1eb8507da2659919c529437ade80d87da6e1c26fe1425ee32d6f8fe0db3b539400588880390fb71dbb197835569a69a841eb4b6c6a9431bb20467095368aebfe8299d2e621d0db35b4c250738d4f4717490648f934ed60473a258c7ab37e0eeb4a52385bb4a5eeb7381ee1662956496b529456ad36a3b87ed0178d8c310bbbc4cd8ae1bf339a6f43bb7fddb2abd7ba6c367a3019ec53cfb896a4183ad54bf15c898a1b5c77934b7f28ab02cbc50d01833c5d0d4922dcc96e7953ec3a4fae612ca803a7d66589b5b0890cf9117b5243d99b112896511515bc463ba576ea1da598fd62eed2f79c97b118429440405c61200b28feeee3f5838d0e65ec2b9bb0308597e0bfc1badeafd1757e92427ff5c202fe100b10deace3c13dc77949c78fe18b7e339e5727d0917f89c209fb9de5b1fef3bd755e8510399f9033bc0e75bd5af5fac90393c4dded0e039279b0b07593020a67ef47369ce8aa25539f068fdcea70e532a37da03cdf79da721f30fe106aa084eaa0dd7a501e80c0f22b8bc52ed653d1956c1b0bc9593c8cf6140de8f1fd890ef745cbe28bf74ec941c47cf31b7a570a8ed9aff5a104e1af7c0aace1fcfb918b22c4d35d2f4739296009cc4d148fa1201688b4cf2faf91dacffd2bfe54d3ba3bab578decb39ef8cdfc77210229e7ea05d5b60dc932c129d17db167eb0a53255f46d363aa16126cf840504722f2cbc6890df6d1a945678eee06c5c3db926522abf95eec846bc5e7bd1e9db5274a8e21d8be94883223eef2ebec5cb1a5a3937507da99bf9640a1a3e6e052d487ce8cf644bf563fbd821c67f296320ebbe2ae4b9317ca7f3d4b93a4df887203df6f30b2ba5be492accfb5aed468cd7d87685a9152a7a284bfff1f0de96a52fb6c51a56bf90c6bdaed326dda99392781262ed6183f1d01d6af3d857982fc8b4b98d4ef8022e0de679bbec1ab1019b551cb3b32c35e52880e9d56e83e073bf7bd2af0e745e3c47e78794ce77f570ac733239780e13576c3bf5888ae80a9675c2f36ba18a1441d6b8b285bf65a78abaf22f9bd951e6535efa26099ea58ceeab787b3dd67dcb07aa34bf6f5963b17fa0c165424760824975719ad73b4e0e2db4014723dbe0d2553cfc3753a1c4ff4b62f19086b2329320154e59d47df352d916347ce4b3c90d7f6ac905b2ef2b9e57a219330e9ef971e42ae393541102accdfc1cdbfeb67462c53d8855dec1d082271cbf2f8a2712ec3c66bc23e9091f3754eb1950d68f4d8c4f1fec954507ea9cff266f0e11d5099296e6af0eb26d1fe0d55489d3e8124d1e243b0c6b49d4c890bfcac3bc12cd7fae7122714048369e6feaf20442eb6ac17f602cf294a7dcfc3b0276bf5ce95916b3083a2f8c998cca77182968c61faea5176a191cf88b1c53a76bd7545213444269989e94e171fa9bf9c3c27a33d73159fad3ee5e444657b99d5d8969983ae6ef3ff744d017a3e2fc09b20c75a2be3c5961eac4c27485d058eb0df073f6946f7fab97de1bb761432e94b6bd83243f05629fee80e1e175e71b1b2dff84e5222709bd7ab5a57a76e9aeafa36c14486fcb078a51514587f9ccffe3092a39d5f240e133f8a3f5df022d4da27c027f23c86c34aec574e9de52c827ce0d2005739a0defcb25db09509f6f3648a21c6edbe6d1395597fae2873078dc4953f640380edcdb8e8adc2ed1247412b117eff8caaf1df9256cba4d4e4ba313d4fcc2da7ac8848ffbf98868f286a8ab82d0322d74774018a789b5e8f2a377266e19904bdbb37122a6e7878410c0e2b483702090e1a11b4660777f1840dd8cabad9518ef3de703774f2354d833a2ca382d5cc96c18a6bf451b87eedc64d61bd86cb6353eaf1abc5fa0de26ca4aff7ddaef50d0e3df982e73c18250909176d6faa94fa8dd1efd80fbc5fed8b6fb702b63f9b6a67ab2cb9fe20157bf6514d3ea9b2e5074c1668fc04d410fc2ec2cb337db1da70a716da1e3234670f4eb5970c72c89157da2f5e60aff64b413dece5c562b00d4319cea27531b6f25eee0cc3fbb0d9dfabb5f6d7ad0531d807b9e46983325aa3570d23efe833f90bc1321fda2f50649cdc70f72e1c1fa358c18ee36475ada78c01623a10a0600df0bd61dbe0a71459aa93f303f5980e2bf9e28c49b6fc357fbb2936423fdf09f56d1f3e2cde58973744e33dca3bf10b9c782f8bf50876bfc86af996bdaa8a872d76c25f97000aef54aa41c264561bd725d55a76b75f1a092f0962efb5e5dcfd3b9c9eb2f5557532546c6a532f723da980c601732028c02c0be7bc9dcb450478bcfb44d2d0d4339c8b183104ea5a9aadfe95637c708f7cfe45d2ac6178fa2d9323815c23771fd1c22e91e1b0105cd219ebb148cbc5c9caf6bd336a891d1fb589aedf5a5f554a5676148f06926cf1121008614cb6967a5ee6ab0fa0ef3cf38726aa47ec603880398262ec47f46d47fdfb72844b1e2342ae0a7725c4cfac7ef1660cfaa75f7410e7f28d7a8c589bdbee9c126ba0536bd2d30c9e7b7181b271082d67aba80bff5043c0cabf1f2db6300d97f1a22f0d50742084a9b54370e8bb1a8361681d0370af3ab40f9597a14245f28947c5fc5187028bc31d58cd180ad957a64fc133eaa1eed180eac80d1faaedf8066bb314e0be0380bd695775786d4026a4b0f8b78580f9f37b065d76af7c3b7c786af248c80cfd78b67158aef28e564eec657c8329c9d24d03caa826975223bf28a006ed00d36efd7fb73ba01fa992440f3111ba52e23238758ab8c13c79f62e72e89b6bc917570196127ff6b2be25ef332583589d03d42310ccb25cb65838f85b36a675ae2b6cfeeb5cd3935dcf8c7a316382d200b630b4769bcffff32e0c2de7b24d38944539729700d1935bfb100ca58f715aad176782adeb4a3168585f763a056f648c7583829d6421cd431c9e6307a3b2d54ee780c5852185253b9e04dbbddc23f60168e65de14010f7d2b1e3a6ff790527d8322f16e46eb04cd00ea3e782a0324d7da09d23503c14fe505f8af6ed738bf241bf179bb7014d953fb35e4cc31de083ad8ef7b9bbe500f3335906c3a9ef2d51e0c817edcd60b21a1349aa2d73c2bff33a88e3db7c0c2c97dc7c2e20fac43fb8e25648a152ec228ed091e73cc5d53384db7aa35f445d47568d817e6eeb6d2d6d3b9d4bf38dae4483e10c59d2eec98900c92d80d368e3", @nested={0x1e0, 0x119, 0x0, 0x1, [@generic="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", @typed={0x8, 0x86, 0x0, 0x0, @uid=r10}, @generic="ca92815c82d68cbfd2223c4cdabaaaecd8485052191f4c0a0f96c4b108f93848bb72fed9c8d424f1b082734a334caaa0db436aabccc062a817a01adf8f818e07583ea14f5a5d7ba9cd403a47fc8d2a0465940750d98ca7e6072e96bd9225e36217007080bc66cf07f85f873bad77f68fcaa8e68d96186a72acdbace9e5fc1d6909f6edee1573c3860afb7978d22a4753f880f9c350822dc3abe56d730fd86ee1068900c47af82a0ad09928a7ab99b26992f5edf3177270194f91e36ff8", @generic="a03dc1c4876b6a2ea9a5f6b8084fb6b62b64c8ec6875", @nested={0x4, 0x129}]}]}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0xfffffffb}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x4}]}, 0x14d0}, 0x1, 0x0, 0x0, 0x8841}, 0x20004000) sendmsg$auto_NL80211_CMD_SET_REG(r7, &(0x7f0000004240)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004200)={&(0x7f0000004000)={0x200, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x48, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x94}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xc6, 0xe8, "74a35ce563c5df93e4e22e3e3a751e9e33fd6af7c23843e1cca7d5c1bbfe00e0236d37dc2fbef43b70ffa862d89717112d984115afb30d69ab667f7c396b613b89f4cca4f7a8a1a0c96a8839ecfb37ee29780cde2ec2ec135ea1f486c72173c3ba7ba34522630bf4355c1e32d2838b62f6e0a580b837aa047dedd8229c6a6aae296f79d0f94170e1e40ea1a090b1544c989a7a4dcf8cb243563c2fa64a24e8908ecd723f73aafcdec921fd0f52ba942ec4d259e4a0e974a6ac9638117249b5eb7b8e"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x3ff}, @NL80211_ATTR_PMKID={0xbd, 0x55, "65abe1144ef15f056cf44c5c224b2dc14e0bfddb10f5f67d2d3f2b4e682d633a0f5ef2cb6d735454afbe589fefc729f5debf103b18be016a5b30f2fdcd378b6f91cc143b57de289421ec7f6a86be4ddd451fa7ec0252f9611c31875e5c829f21dd72b73a46791e9b2e5dbc0ddabedd02d40e2a15ecd5f43177e7e31668c1f132acd980712411d72beb3c944a99f195b85559fdd67dd79f2882680bbbe6a235d8b3548387dd926b82e55417458884965734dcbe6af7db1de828"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x43}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x80000) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f00000043c0)={@sival_int=0x9, @inferred=r8, 0x10000, @_sigev_thread={&(0x7f00000042c0)=&(0x7f0000004280)=0x6e, &(0x7f0000004300)="5598378256b11cb938fcad3578ffdaa41856be6c9c356b0dd9493e75c209138969c930def7e51ba6318c77fd48aedd95e57e00e94289705ffb7703377a0de06583f3c5cbe98e552178546818550b32bda2e68257c2238cfe421ea9cd86209321cb07d211de9306987cea78e8b3def2cfba68fb408182fcc9779ab85c37677d7c3e701561659830"}}, &(0x7f0000004400)=0x4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000004440), r11) writev$auto(r8, &(0x7f0000004540)={&(0x7f0000004480)="21123480152c1a9eefc003c3fa03cb53f130fdd6b01629cb336411b4cd0a8d5673dca3f74ddcfdaeb4e73c808ef2b5299cea07a33b856567c6ee0653392ac23927249c5388411c4e5ab62d16208883297d1f87e7f7a15ac0cf0c4d52bdc8edf8367d4523f742cd0e859448b0c6ce66575badfa9b428090f569d70ce7017dbd86489252db0638d53a5f5049562c4ec7098c2b962253fbba14e6f391f4693e2664177936b9118b96d391d37cda0b7c97", 0x100}, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000004580)='/dev/snd/midiC2D1\x00', 0x28842, 0x0) fsmount$auto(r9, 0x8, 0x5) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000004700)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004600)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x98}}, 0x20044) 1m20.180643908s ago: executing program 3 (id=2147): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x5, 0x2, 0x40eb4, 0x401, 0x300000000000) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) accept4$auto(r1, &(0x7f0000000c80)=@llc={0x1a, 0x110, 0xff, 0x1, 0xc1, 0x81, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000cc0)=0x1, 0x1) ioctl$auto_FS_IOC_RESVSP(r2, 0x40305828, 0x0) r3 = socket(0xa, 0x1, 0x100) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = socket(0x21, 0x3, 0x9) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000ac0)={0x2, 0x4000, 0x0, 0x1, 0x169f, "6664572c0cf7be35d38f622e"}) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto(r7, 0x29, 0x12, 0x0, 0x1) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r5) r9 = set_tid_address$auto(0x0) syz_open_procfs$namespace(r9, &(0x7f0000000080)) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000004640)={0x1ed8, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1800, 0x9, 0x0, 0x1, [@generic, @generic="32296a1908dd319128af6115f3c6d3ec6c333a54d3cae768814e54e6f518d37159", @nested={0x1714, 0x38, 0x0, 0x1, [@nested={0x4, 0x118}, @typed={0x7, 0xd5, 0x0, 0x0, @str='\'{\x00'}, @nested={0x163b, 0xa6, 0x0, 0x1, [@nested={0x73, 0x128, 0x0, 0x1, [@generic="61bc3d8441088809339ace378ea67bb20aa27802f0e9a28bcfbfd77416bac78f729aa2c3086e43033af9d64e405cec3ce5b99d4db1bf795d4238bdf88fe339d032069e516739ae4c5a0a52f22f35a205ab49c6b1c8749d92afafc99c54b6a8af1961c57a7ccf76ed8b135f55a89153"]}, @generic="b538591c0b62db358d20bb65fc7460ab2e3bf9fe4fb6a0d753e15da10e56cff669d32dcc0d64b3bf1cac70749d5e3513b791893e2fd94d0dcea1dcdd50070fc3f65246aaba0fcc", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0xa9, 0x0, 0x0, @fd=r2}, @nested={0x156b, 0xd3, 0x0, 0x1, [@nested={0x14d6, 0x6a, 0x0, 0x1, [@nested={0x156, 0x2f, 0x0, 0x1, [@generic="fcce83b94af3bd510ac8f0ad30f93bc59ac7f7666bff81ff918344b4a70aad8ac3e1", @nested={0x10f, 0x1d, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x5c}, @generic="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"]}, @nested={0x20, 0xb0, 0x0, 0x1, [@nested={0x4, 0xe5}, @nested={0x4, 0xd8}, @typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@local}]}]}, @nested={0x1096, 0x1, 0x0, 0x1, [@generic="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", @generic="8a4cf8fe9f8fc3dfb503b53c2b5f9611a85de829d9ed0772ac3f889e09ba9e17b242151ad4ae741115f6f96f52afd08231c5a3ef11a49850ad5c4fc7f6e1d009c2e22166cb8eaa10bad2801ca3f8c65a13b6998aaa403f78d51824e6f312b274594683e0c191857ae176c04b3a4bd2b2650b21a6e63b63860cf44d3438656ad659ab137a7b0c65db87bee7", @nested={0x4, 0x109}, @generic="5a901c"]}, @generic="87e728e2c62b992a02e2e4fb3785da948369eaf3f6fb10261ef534d132430634f03121dcd7d021f8988021cacce0d9fca9611792a24f1618c9f8c16ea6c91c40c2fea193ec08460cc3757970e0ea0ca3a09f2e07bb702befc6e5", @nested={0x280, 0xf0, 0x0, 0x1, [@typed={0xf7, 0x6d, 0x0, 0x0, @binary="d94ba5d66402c3903314ae70d33770c671fc147af76a8af61f8dcb065892d3b57eed109938e9f455658f073aeaa15e96cc1ceeb3c38d255031b0d0227c9a862b6544caba8409649d2506977e27ded73876ced3a48c61b5a870b962731b1ed68537b09d54f7a087883f024d16963f021676fca3d67fbec4c88eed93c7ecce9d864999f73cfdd6bf52cf0653223095774458beb81f9be92a4a172ba0601cbde68a06a2f83a298824e02c08e0e5afa5eb4ad2c89d6727476926df6021f0df91c4d779ba5cdde327cf868ce0d1dbecc3f8b7e10c9c75512ce0bb5fdd35f2c50703fb550e0be455b118af9bfd4436afe9a739326c40"}, @nested={0x122, 0x14c, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x128, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0xae}, @nested={0x4, 0x123}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0xfffffffe}, @generic="857dcf132968b68016ef56cce374903055759a17c10d5722f8183061969023bcb0108aa1a5c5c41e78aac4073e36c31a1477dcdce9f61a887bed8ef4119af1f7846504eaf5495aed74b460a74959996f829fb7c591e226fd2f4073dcc781eb9ceb012e3f90b17b89f70989e8237c6d1232fbd3118941280313df24e23344497423b6b47a91208cf2fbe55ba933c79b51073acc536f86b75e960a0b63e790d2221c8deeb79c67ad2ad7e9ca978de5b5271a05eb1b028f8e50c4a9846e4ac2226cf22257e7ca7f817816598d1c14165b4ec8937cee7dae727554d9439e8be1dbe0a7ba788812de0c9a85c819b2eec962a4712b", @nested={0x4, 0x2d}]}, @nested={0x5d, 0x14, 0x0, 0x1, [@generic="67a1f5510784efdab39590e7c157da941efc5bcd2c", @typed={0x8, 0x28, 0x0, 0x0, @pid=r9}, @typed={0x12, 0x52, 0x0, 0x0, @str='--,*{-(-]&*)(\x00'}, @typed={0x16, 0x13d, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @typed={0x8, 0x23, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0xef}, @typed={0x4, 0x144}]}]}, @typed={0x8, 0x150, 0x0, 0x0, @fd=r4}]}, @nested={0x4, 0xa5}, @nested={0x4, 0xe1}, @typed={0x8, 0x4, 0x0, 0x0, @u32=0x7ff}, @typed={0x7, 0x25, 0x0, 0x0, @str='/%\x00'}, @generic="96584bbf5a511d1b709e656c3bd6e154535478a3fd2022354aecb1883d83741a80e48b6d0ee535a2be48617ffa5b24d072848dca17c10c9f367b795992c32fceaf65513c7e65f2464f8518dd8d1790353ef70432eae0dc6a02d12eef2b1770c0b7203b", @nested={0x4, 0x144}, @typed={0xd, 0x47, 0x0, 0x0, @str=':{.$@6{#\x00'}]}]}, @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@loopback}, @generic="42dc46e12532f7ac7ac1656ce68eeabe0707971b1fe10f1d52436355c81e4e402f69a59469e68319620b418482d15892e3a9bb1e8e2a5d785f7610e1e0528baf8a1b024195c3603413d4603835e2d19d82abe79de8dbaa2222b7cef594bd667599e3ff9a4dbec181b5b4", @generic="1085c1dcd3b74c9e5bf6", @typed={0x8, 0xb0, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="a7b205a9577d4386639dfcb24b034af2cf453790b66f9354f8ad8ff6140941eb3cb4d570983d6ae7d155acfd7609a81490cc4f6093b735a0ee266cfa"]}, @generic="4ab4c6588ade1e0f6b2482791cfda6eefed06f16bbf96775f77f9071e170e95e66d5ef67cf7ad9b27f18caea293da4f5eccb4ddf3a0edb04d803b551a7e27c35ebff8db8cee0b4e665fa425d946a7fdc6564526f693454bdd0d11cb43bc345d528fc75d363d74c72114ee6d2a1cbc6111b64bccc2a61281e3353b5c7e8f043692104e782e23f52aa890cc87ebb7ab8", @nested={0x34, 0x9, 0x0, 0x1, [@generic="f5e91f001265d509c75b41eeac48a840441a8b88d2fa7421c130454d041e5cb4d769b48765b1ca71aaa72f9694a69a40"]}, @nested={0x4, 0x52}]}, @TIPC_NLA_LINK={0x418, 0x4, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x224, 0xca, 0x0, 0x1, [@nested={0x4, 0x6f}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x3}, @generic="e3cf4613c31b6f55a34a51b7046e16ac45fd87e85653912d62097ffb3836f88e480141e167848c399a8e85a3dd3ab4c2ce7350ccfe2c96c06aff6d1516a176722a0e6de572fd5b78ed4d4c4a5df56f3f42045204", @generic="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", @typed={0xbf, 0x27, 0x0, 0x0, @binary="5b452ea9d3cddea780149f116bea4a8323c5994f71958f96bb7a296af0af178e35db44c37695739580442a74373d39114d4967c8bafba1ccec16c4bd6e777ccffbd6942b98e56f9841deffab2c32c88251663a4eabe345cd83d9d1e881445837e5c76354fb9bda82e2bae2e7ef17c0b8c5f891a018a6bb1ca650148c961598c15b51548fc24c6bbba594320205fee2b88b68372e42253ced22bd98baffd93da87ffb2f5559c793720f041a0c8e34672caa62f97a1b78674a3a621f"}, @typed={0x4, 0x130}]}, @nested={0x119, 0x41, 0x0, 0x1, [@typed={0xc3, 0x4d, 0x0, 0x0, @binary="77fe5186894915fd287d01325497b713c332a5b45eb1c8c4b3e2a81cf5a888ad706e256a73176475253f72289d7aa19ef9c7bbbff84d5ae10c903e2540ec80fb3504eb529ab220a9b0642c9a24c704501d79ee97d6e39fa55c933b1ad8be33e19abb95a85c9761a97fb36340fcff7f91deba72818faa81ec7e05f0a47d89d721b5dd3f7a60158a54db89682f0eafedb04a2b3baa0f08e4e4527bfad2fc87d747b2896a02c8e121ba11df8f1e0ec71b8e23368a61f464de0d27b6ad4fb67a7b"}, @generic="af5b9113ce20376629bc8825c3af6ae12a0741b0a20ae15d59831628548d81bb3d98255b16332b4a68a142b5922a2170d4e21d1e0ca42043126bc7db30d91a1bcf5508ae0ecee9cb50044f959075c10956"]}, @nested={0x73, 0xfc, 0x0, 0x1, [@nested={0x4, 0x72}, @typed={0x8, 0x2d, 0x0, 0x0, @u32}, @typed={0x6, 0xf5, 0x0, 0x0, @str='-\x00'}, @generic="756f597f6e83c539ca4ea686defe5ec3198093b126addaafaa5fc5f1393961e0189ec9d33c26dbcf358458fa8d3e210cbfa1ae3e2cad09d7ee555f763794018adf489f2183275712db88e5bb37a3a6ee819cc167930c9eef9b3470"]}, @nested={0x21, 0xd9, 0x0, 0x1, [@generic="8bdc3120418c7738b7139596f9d412cde2f2065086", @typed={0x8, 0xe0, 0x0, 0x0, @fd=r3}]}, @nested={0x38, 0x103, 0x0, 0x1, [@nested={0x4, 0x7}, @typed={0x2a, 0x5a, 0x0, 0x0, @binary="a9803c72eb49c2ffa189917a1310313e908f64d678c461fe2c21a745b2980aec70d1ad24aa24"}, @nested={0x4, 0x55}]}]}, @TIPC_NLA_NODE={0x1fc, 0x6, 0x0, 0x1, [@nested={0x1a4, 0x126, 0x0, 0x1, [@nested={0x4, 0xca}, @nested={0x4, 0xa2}, @nested={0x4, 0xfe}, @generic="34667f0b798c969b3d8d88681010", @generic="82366907134e9a69c31032b4e6ad87413668936d94f2da364cef35e503548ff4af17886df140405fe34974de1f46217fbcdad3294ccccbfa854a715b969d90bef99cda2bd82f270481c988a61127b7b302fc6f5f28cfd34e5bf265b3e689ae22f6d67d696f4aaff5da60354024a51fc1801833629d72fede023ab572f4bde810252162a512bd3b0d3a5854499b2f199ea2afedd7bd8c68e9d00c7ab68e64b00c3903a822520cd886bc718a596957f373764920b3ae1222123324912077e87f5570e9909cbbd58538efbfd3bbcb1ca45117673344", @nested={0x4, 0xf8}, @generic="610748706ae3a3ac020c8e0db0bdb55186fcaa50c6f986ef6b73f279d8d67e08489d2a8530b7df50f94f4341e973aca4d83e1816e13866bac85fc7445c6f919720ac2bf7e1d189bac34709922f4e8b39897b9975bdad2c6e21245b0fac2c8dec24fa807a06368ec847e9335cd4644cff96bf79afb3bd5cf37239a1babddddb1dfb5924004dce791b793bbea10e4baee6a659452d003221d68de797f30c211b95fe38cd6514a7e2150f256fbde533"]}, @typed={0x8, 0x133, 0x0, 0x0, @fd=r6}, @generic="e8a4eb532362bee3da5da994b4367617dcdd39868be7686ed4e4", @generic="7773d6e095cfd489f49077d528cc9aebe3205bfc749a2090e15de3013b42f7b05025e2978b45681d5aeaa09ea847b1fcd0e6"]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@broadcast}]}, @TIPC_NLA_UNSPEC={0xa1, 0x0, "8f1e17c5aef77e80966dde1dd85e7a84644d0042527f4fd5b514911a1da69b93f4ac8cc0e0c9562fee0c2d3d344f7f207c6a458c443c6389c30e67b145775dab08d2101ee0920cf79d87161644c3163158f98ceda8e682699ed3c7491d816c2626204f42fe1444b169ee17da831a68515e3f133003fac56f134b856e5f166a4b6c06de158bddf569278499310e2d2d866abb0d4ea32c48f4944f7c9ce3"}]}, 0x1ed8}, 0x1, 0x0, 0x0, 0x200088c4}, 0x4) r10 = socket(0xa, 0x2, 0x0) sendto$auto(r10, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r11 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000040)={@_si_pad}, 0xe, &(0x7f00000000c0)={{0x2, 0x8}, {0x1, 0x1}, 0x611, 0x0, 0x1b, 0x2, 0x7fffffffffffffff, 0x9, 0x7, 0x5, 0x5, 0x3, 0x9, 0x8, 0x5, 0x6}) r12 = clone$auto(0x5, 0x3, &(0x7f0000000180)=0x6, &(0x7f00000001c0)=0x34056c6b, 0x5) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000200)=ANY=[@ANYBLOB="18070000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf25030000005c01078055014980efe9d5e203664e62257b915d01f153152cd66e983fe6ddd75abaaf29315a4bb8d1ecc1002b6844da155ed38869b2fb8d42e0599d8e4edd188d6952be1ced09a5c7226f8ca5888836e7db919c07fc3412de08004300", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0400c3800c009a000100ffffffffa9b800e700", @ANYRES32=r0, @ANYBLOB="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"], 0x718}, 0x1, 0x0, 0x0, 0x8080}, 0x24000454) lsm_list_modules$auto(0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000a40), r6) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)={0x10c, r13, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xf7, 0x1, 0x0, 0x1, [@generic="f2e55569e9c85da8b517387b04d8e95da7d49ce88c1ab0b50780279dd66dbc7806c12a2b7941cb5f19de2c600c218ecb92728810c29d03cd1e38cc9a1c510f42fa4bcc254c42126845", @typed={0x8, 0xbd, 0x0, 0x0, @ipv4=@empty}, @generic="a4903226ab8a6d4bd6bbbb094015de5de93fa289f1467130b58b9e96189803cad69244d0cbfebf0d42b29b9fe5c2ca3861975ee7a0d0ae2bb15bb4e6b5e64dc13a576a8ac5015ff569b761e8d98fbd28181c70e9cc4f352768f7d0d91cea19b49654798c7bf514c6b858caa8a28bb42c859229c1a2912c0885df52", @generic="63173781c9a309a7811002a16d987148e3cef628cd69e5729fe7c6c75b57df6bc3ab5e6917145b"]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xbcd86899ee78d409}, 0x8010) socketpair$auto(0x0, 0x0, 0xfffffff7, &(0x7f00000009c0)=0x3) getsockopt$auto(r1, 0x84, 0x71, 0x0, 0x0) 1m19.6976508s ago: executing program 3 (id=2150): mkdir$auto(&(0x7f0000001000)='./file0\x00', 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/rcutree/parameters/qlowmark\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/memory/memory1/power/autosuspend_delay_ms\x00', 0x181500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/250, 0xfa) mount$auto(0x0, &(0x7f0000001480)='./file0\x00', 0x0, 0xa098, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x220342, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) 1m19.450413155s ago: executing program 3 (id=2152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/modalias\x00', 0x8100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/222, 0xde) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) sched_getaffinity$auto(0x1, 0x8, 0x0) r2 = socket(0xa, 0x80000, 0x2) setsockopt$auto(r2, 0x0, 0x30, 0x0, 0x568) 1m18.084952516s ago: executing program 3 (id=2159): r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) getsockopt$auto(r0, 0x29, 0x36, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) prctl$auto(0x35, 0x4000001, 0x8, 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x98440, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x400800, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f0000000080)) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x420742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m2.470050452s ago: executing program 34 (id=2159): r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) getsockopt$auto(r0, 0x29, 0x36, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) prctl$auto(0x35, 0x4000001, 0x8, 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x98440, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x400800, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f0000000080)) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x420742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 10.047862388s ago: executing program 4 (id=2315): r0 = syz_clone(0x100281091, 0x0, 0xffb6, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) 9.712019753s ago: executing program 6 (id=2317): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)={0x124c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1238, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1084, 0x5, 0x0, 0x1, [{0x1080, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x47, 0x1, "15498343c724307734086992dc1e25a2a9103e4bf48686438120218fc18eb8d92081607cef938d982b98b2ffabb3d4697d0e992a1ea9d3b471e918ae07e413f97503f8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b0, 0x5, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x80, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xfffff7f7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x100}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, '+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb3, 0x1, "adcb04a58b3c2f134a15760485188573b1cab1d6ed2698c24fdf710d4b3aa02e3d7206d8e192d58f52ccb69d864b538b8c63b8931a461b0050253fe028240d8b51489a8d52d59f5088bc258b350f375c597e492406740eed2730170fcc3f336f8984bdd9509765de2517c0b82b11ee8c84f1bfcf02152e5664f172dd6025ddb37ce75221e11f3db64fbf6953ac9b5f7bf14ccddc2e65070aa3eecd7a88c038f6ae9bc539ca6b583f997fcbb21becf7"}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x48, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x628}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x1}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}]}]}]}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000140)='0[.[\x00', 0xcd04) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x400000c) sysfs$auto(0x2, 0x101000000000007, 0x0) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) r6 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r6, 0x8000) 9.643580072s ago: executing program 4 (id=2318): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x2000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r3, 0x0, 0x8, 0x6, 0x5) (async) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000000), r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x84}, 0x4004) (async) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8014) (async) ioctl$auto_SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) 8.765952574s ago: executing program 4 (id=2319): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)={0x124c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1238, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1084, 0x5, 0x0, 0x1, [{0x1080, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x47, 0x1, "15498343c724307734086992dc1e25a2a9103e4bf48686438120218fc18eb8d92081607cef938d982b98b2ffabb3d4697d0e992a1ea9d3b471e918ae07e413f97503f8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b0, 0x5, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x80, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xfffff7f7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x100}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, '+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb3, 0x1, "adcb04a58b3c2f134a15760485188573b1cab1d6ed2698c24fdf710d4b3aa02e3d7206d8e192d58f52ccb69d864b538b8c63b8931a461b0050253fe028240d8b51489a8d52d59f5088bc258b350f375c597e492406740eed2730170fcc3f336f8984bdd9509765de2517c0b82b11ee8c84f1bfcf02152e5664f172dd6025ddb37ce75221e11f3db64fbf6953ac9b5f7bf14ccddc2e65070aa3eecd7a88c038f6ae9bc539ca6b583f997fcbb21becf7"}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x48, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x628}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x1}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}]}]}]}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000140)='0[.[\x00', 0xcd04) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x400000c) sysfs$auto(0x2, 0x101000000000007, 0x0) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) r6 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r6, 0x8000) 5.83161387s ago: executing program 6 (id=2322): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb1, 0xfffffffffffffffd, 0x40000007ffe) r1 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r1, 0x4c80, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x800) close_range$auto(0x2, r0, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r4 = open_by_handle_at$auto(r3, &(0x7f0000000000)={0x6, 0x2, 'u\x00\x00\x00\x00\x00'}, 0x2) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={0x0, 0x18c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$auto_trace_options_fops_trace(r4, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/macvlan1/shared_media\x00', 0x50b780, 0x0) open(0x0, 0x261c2, 0x84) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr12/address\x00', 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000340)=""/41, 0xffffffffffffff04) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000280)={@sival_int=0x7, @raw=0x9, 0x9, @_tid}, &(0x7f0000000300)=0xcd) 4.927995296s ago: executing program 5 (id=2324): setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x7c7, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x9, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80202000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\t\x00\x00', @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16=r2, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB='\b\x00k\x00', @ANYRES32, @ANYBLOB="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"], 0x934}, 0x1, 0x0, 0x0, 0x6840}, 0x1) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x1c9802, 0x0) pread64$auto(r3, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.720646266s ago: executing program 4 (id=2325): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000016c0)=ANY=[@ANYBLOB='l\"\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800e0000800000008006200", @ANYRES32=0x0, @ANYBLOB="b3e67044bcf124f4ae5a8c142f1c08cfef935f31d64642812b325f8ba228d1885adaebfcbdeacd9cc9d8850e8a0d2c35ea58bb923e317dc8a8b78d582ef877d9619377e0f3874f6e30d73c34cae5707277d95b7bc958720e7bc81aa45cd500bb54e63f58c202e0061eb947261c28edfbd4c8afc79a125f4fba082cff47c347a4aaaee6bd0596117fdd3af953214fb6601b225dd8164a6b7f65cc7b81b6b06c32962267ac8872fa95fd84035286dba99db2a1caa9fe2d3e39c7c6f9cf7bb4db41191cb29f1b3c83eb908883626a9b6aa830c2dff419e149fe8bae80c926ed21a951531996b88a714c12d350006d0054be64ec9d48d9467d96afddc688e231c40d5b2ef7361a745029bd418ff7b81c028c5ffb8234b39c972e2be416b8105f28541fe299e9efcadfe6ac9f9a6d93980fa556cebd4d64bb423da2821600df002f6465762f736e642f6d696469433244300000008b020780040005800400d8800939cbd46de9cbefcd6ec57276f6698682a7e2c98ef3f419daa529de65a29e0a254028686e33237b292724dc292d094dfe17500ee2a166de5899e820af64920f843b2ddef99f9607ea5b13df0a6772cee1e34a0e474e2e74ece94f7e888d21e58cca3a6d6a99a153af848cd8b5d78e4e37bac65e140fcb5ea6d8c092132ef0a41745488558a4b39db294fa306e3eeb14abf699ea41ad50f33181965f66ae2af82517cd57ff0c8742559440238a8ce1a4b8e2b5af649ac21b1b33439538d62755f41191aeb62160334dbdf8ed7b81a0a8255168b997c20c22c32c54aeafe1214640781b4d9ac2726e607eac080033", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400558004001680d126208daca71b0f3108d0e68081c9e015a55f8e8ef40efa3fb842b9d1f72a8ffcc9b8b94b1b4706d039f84bc23eebaf13099930336cbe34c45fe840ea4b28cbe31dafbfd42a923270c38f07478f93e39607039e11d4dfd0fdf670df676c0008001b00", @ANYRES32, @ANYBLOB="f6100880bf1709307aa82cfd3aa401b386a3ca9555f6e2efe0b79370c34ecf7460eed765b81f5f6a6d0936ee8f9949c84f30644a2419a211548b91f28faf97839c293e2b2e26257d5e7110ac5cfcec6e80b0c2e06348cfa7988eafadffc6d94b799a105ac40710c63999865dc948e42c03bf2ed50638dba57ce5a094d916ca55ddef6662ddb771c302556aaf85bbcfe246acf9c8d17e5a87bd8b405e2f9f5460fdebee99f011aabaa4322aeb180da365bc7d231bbe4daacb1753f466b4de03200db5c20fa22967305d8380121a1ea59a4ff3f2cf22c16d78fb34d69814c6e11f4f5581658988be289c3e05243ea6918090d3265cd8198e3024d9a2b0acaf5a74a80fb14b3bc5df4a90c91277a617ea435d9e5544fbb4a1c7d2a24dcf1cb1bf636be770799302a1b025c89cba877449aa8fcd002b890a2b171d8efbfbacbc0c53adbcc32b1bbd8f7556d498a09e0a8364015af03c7f6343e0dfbf9e8eec5ebe413ff18c15c383262488d22182c7f4e9d4d6abd55a3c3784b26598ff1595992b86e31ca77c72fc4ccb9e2ac20f92bd3f170611f0fc020ca973882aff46c1a88708c4302191b23112d7b4210f76b34d5e76e76b84a8610f8e81b74602edc2905c7c603aa3c5274d350dfff8f409fe7fdfdbe39d4ed183408e8b50f89b9f6e7a6599515eb1b57b733bec1951e6be0cae4c1f3a1ed4a4062e6d77fd6f01e47d2fa4dcbf8c0c86361893ee1864c4eed87892772468e4dbde6e36a2da9710a10b8aaef147fcb02923cbb29737b209b94d9eb49a46d40868d73e182b3b860e06af481c2125652855806c63fec63416172db9a35706c0e1e1fc15eb07b9b637dcd95d218c957c031c3aba084493656269244154a1301fa91f8586d1f598e8c0f9e88013483e43b50b49ccd1cd7bb4c96360bab2cd9838a7396ec140065b4dc145acbbfb6a452c366d5a741d55cf84166dc7726a676b0c00c92941e1c0d77bfa5bf04d5db83bee7b4ae1fa96ec4b002a2ff182bf3283981549420cedc9e615c249e6eee541b89b0e12d3d9ab3e110cc87de61b742d6ad0b9397207b3991cb9a546bbf79de60f4cc98f48395859900a1266a0fb53bf9b0d36d79e8a0df9a2f767e5fb8d3aa11a4ed0153961ee48bdf83dabf1fe7d7e140869282557a24aacfe932909a31f1a23ce93300415443c6ae2178e97836f78fa3fdd0d240e9c87d868e4c2c6872e4b67b80c1da7dc607cd0cc2ddef4c3a17e2aebc0fed1db81dae7e0347e1be3a5bf89a0993c212737f6bd34a3486d312ba2153e6f3e1574e4ee5b76b0761f6c0e5f895b64c2f7fd3796daf3ee604f2f20fdc53569b6d09e54fc146e1302cb86b4a958f722c34c4f656992f8fec24fd92234641049b88265adfb844a16c0c81c09a34e2a1488458ed88bf4a92554062606eb52a897111e7d4c336810528a266d23395d8c616c6a85de68bb2b2f5894196d845194f42a9ed7ba109f93f8d5f6fd77b3fa3ed25e24d3970cf297006664db691e3e681f5355c7ed3f415898ac265697cedcc6bee59c6044bb9b92bc9fd856c25a39f8739a5f718d42ab6bc694be3b602f0507c61425b7fdb5ec9c57bd3a59ff52b44b93ea8bde7f3a14e16e3869a3b5e97bda14e3ca8373b98df09a821ccf7eec949109707a3953727ccc3a53918a5350083e94efab7973ab22718edd30c3c415206b3d60d8e305f04c12cfc7be71bbb579c852a370d8e3e86177d738442027e4c90217a84a1e44fe5253f1e64263216178191c9385543329af4ead767a7be9a1dbf564834a869533d9b6efd21002904c188816f2863bd21cb87f7d19fc90d58f465d558aad4b45b5e4b68720a6f2d2a973ccdfd52535c30510c9c2ea57b52ffa4c0f87156b129d7e21b4e0e655491c22b94d7af22c0006fe4b0ad67ec79b84029f95ff31ec4ffa607441d97797753cd2a60287bbd3b8ca1e4cbed1678f11fafc3c3cde659e32b19fac5481524b75fb19a08460cd4c79263c33518d5f37e621caf2e403393a6ccd1fb7211aa3253ceaa1ba28c20e86be75bd55945bd2d600034e90e64bb9fd48004c14073455645e0f2bcd2c88e53c395fd5bc7af1c48b5ff0e6a03ac7237ef2b3cac996f5f21beae0b185633e38cf81140232f59c5f176d0637a0e758310869428e9f5fc4cde289da73fd3fb85b81811d7026c7163f0130005582813ee690da38e78acc82499fb13a2e876821a2da13b5d8aee279d7f9c92636b9bd85623bd3304850268a8b0660587d256098cda3439e92274709e70c5b356ecb505e997079346f0e9e94fcecead4e18e00026ab6cbb7b68ca49a6e9104fa8d669b2d26938ec86ab24594c86507c5f53a0f9a0338353ea336acbbe52eb4933a81bfd8b5953ab96894cbfdb4b6ceb5fd90b0ca9f9a7f2868b274c0f2f9e797239a2ec2217f140021281c28190d3730085556fa7071fbfdede86bc56fae64b1c376611713c3bb7473b72bb35a6740496bc1b51d92a6f2ab40bb631812c299d675438ed4b87222f491cf6d492eea6bbe0e7534d603aa7b1465ff2e3df590a69efbde3a9f913e86716a83f68ed4b0bde67a1ed424aebf74c3995f6204c76ac79504309e106bc01f11082ca0c9bb3a1b2a9f50d5500ab66efce097fe9c0506f002347389e4e2533977774816191ae99da84df7e142e4d54395edee8cb7918dc17a1a3fe38bafb6fc819b6c13c5406063ae6d5a4671535b5793d9347430ec7d94011104c2240515d6b460581793102e4ad74d87fcb205b69b3805726b4ac44f3ad0549390e2b6ef94df9ca98beb586836b93e2621e995da4a334de0f983b72b08336c4434bb98a3229aa9416abe10e4aa7d5148d72e638de9f7a7c5458aea40880b3b4fc5ee58fe74116361d5073d4fad3b919d059c5a77e8df49252a401f2fedb94ef5c1eed44babc7286d3483a253a0d26c27671fdcca9e5c2ee474bb1934a0a486b4e5f8a3a1733e8c2f555520b14a781b676ed7dfecd42244fec900e1294052cb86a8075874f9fd9c405ccc7f8ee164ff732be5666371a99d3f5f561b4aeaf32acf35c8d3bf0d2a20b970d65742c7ef0283608565c36bd42f7ee6eabe0a879a672adfa8ad268ba0e4ffbe00364cd61127729c8fc848b368dca762fea06c64b9a29de695227eeb0a47a3076737af241b5e5595fb9982a64a6b4143fa7c5c62c320d953477d23a2b5e59374c1e8bef1fd6d7bdf38f4cee1c5d156fd50ecc578e4fe11208dc39d47528c73c2f941b8f6869ceb1a6489d727ddc4d722c80125e6d0d6bf5f271c6f780a08654e444d575ff60ea5ef315fcf4898b09432a33206046349ce3e7be3973e11145997cf225a7d0b663cd1779f964cb4faf0486718ba88c0bbaa3b274a02e066f1b247f7ea4ce84fc8005cabb2d4895ffcca7d515d262ddc433a13bc23ecd5db2c94cd3306d9316411fff4e4884783a78982bd38401fd8cc1fa093cb4585d57400d047a225da3526ea3d7bea5f1b236c37e29cc306274f0a85b0577fe301bf2bb1f3c17ce83e15b1b084e0cb6a6514d8f8d45b99f4f82a3f5b42e045b1950342b77f06845adf0bcf1e674ba7a2d4b77be95ac3603f7dc00202309fe44eca8341"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r1, 0x0, 0x20) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r1, &(0x7f00000000c0)=""/68, 0x44) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r3, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd7000ffdbdf252d000000180001801400020069705f767469300000000000000000008ff1ac06d38515010d9f6cfa7c106180b4b959e5e76d9ef91caf4a0376b147e189b419c1fe60e0f9a7aba21f20f412afc7cbc7041830a79ddad38dbab47e8efc9b5495376d2aa592a21b861242b05f1ee2ea5dda7a8b37d0ce84222d866aa44cd3e0a51842dfc4b501f4c4241b37e1880ce0aabb6ca8321ea5957aa5eb56ce4d84096668c114a017a7648220578fc3db8a2668b7256e1d1eccaa7068cf945f5212e4f9820a78496c955d621445227c72628806b9bb65bc422d2c7b733626a2986ed38d6d6430defe2241c8abb75e5a54cf1831849217599e1e262d7cbb546bd8db83f162"], 0x2c}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.670055459s ago: executing program 2 (id=2326): r0 = syz_clone(0x100281091, 0x0, 0xffb6, 0x0, 0x0, 0x0) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) 4.537701765s ago: executing program 6 (id=2327): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = pidfd_open$auto(0x1, 0x0) (async) bind$auto(0x3, 0x0, 0x6b) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x9, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x4000000000008000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xa, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r3 = socket(0xa, 0x2, 0x88) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x401, r3, @relative_fd=r4, 0xe600}, 0xf) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) (async) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_11={0x5, 0x8000000000000005, 0x9, 0x161f, 0xf870e9f, 0xa4ea, 0x8}, 0x9) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(r0, &(0x7f0000000040)='^&$@\'/*\x00', 0x9b) (async) r7 = io_uring_setup$auto(0x3ff, 0x0) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/timestamp_mode\x00', 0x43, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r9, 0x0, 0x20) (async) writev$auto(r8, &(0x7f0000000200)={0x0, 0x3}, 0x3) (async) connect$auto(0x3, 0x0, 0x54) (async) mmap$auto(0x8, 0x8004008, 0x2000000329, 0x2004000010012, r7, 0x8003) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.750468143s ago: executing program 4 (id=2328): mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x10007, 0x4, 0x3ff, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x2000407, 0x5, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0xe65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a, 0x0, 0x46]}, 0x400, 0x81) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r2, 0x84, 0x7d, 0x0, &(0x7f0000000000)=0x98) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x3, 0x4000000000df, 0xa7c, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) ioperm$auto(0x3, 0xe, 0x2000000000000149) r4 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(r3, 0xffffffffffffffff, 0x993) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r4, 0x11) io_setup$auto(0x7ffe, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0x1, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d"}, 0x3, 0x5, 0x4, @inferred, @integer={0x1, 0x8, 0x8}, "7a9fc199a16a23113e8090334fdd7327b386425608af790ada71bdd70925450e1ae87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d00000000000000b600"}) 3.750155507s ago: executing program 2 (id=2329): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/tracing/dynamic_events\x00', 0x42, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000480)="0a451f44a544", 0x6) r1 = socket(0x2, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xc2481, 0x0) write$auto(r2, &(0x7f0000000040)='\x06\x00\'k', 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="30ffffe6", @ANYRES16=0x0, @ANYBLOB="100004000000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/nbd15\x00', 0x220000, 0x0) write$auto_def_blk_fops_fs(r4, &(0x7f0000001200)="16250d349bd978d3bccc56dd0abff87cdfc1c0ccc7a6c0f3b60e8c7684554a4aff6da925e4fb52efa166cc986ab8b9ee5fcb17d6772462aab0596002ae4b2af30316a12735471298bf7a89cb1b843ae6801fd04838e7ce65bad7bb7cbe3218400bc8f4c61c050ae26f75c0340a60de7fe8eefe0146", 0x75) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) flock$auto(r5, 0x8) read$auto_rng_chrdev_ops_core(r5, &(0x7f00000001c0)=""/4096, 0xffffffffffffff58) ioctl$auto(r3, 0x64d0, 0x1df) 3.514436944s ago: executing program 2 (id=2330): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0xc040810) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0177b7e4099c1a76fe250100000800020000", @ANYRES32=0x4, @ANYRESOCT=r5, @ANYRESHEX=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) sendmsg$auto_OVS_DP_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050029bd7800fcdbdf250300000008000900", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') mmap$auto(0x0, 0x9, 0x10000df, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x3, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x1000000, 0x20, 0x0, 0x7fff) personality$auto(0x8) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') uname$auto(&(0x7f0000000180)={"fde723b86b9067c0c2b4ac8fc551b5af76a81f68b65fbd5fd5f4f63d6e45da3f34f426fe1c265badd9efed66996c49bb15e4242492bfb575cae29ab768682f5777", "009d1cc7097f9002cf6b2ed3d4ff40994eecdd4a45ad86222dac352ca57d091e482d012eade0c4979989b8817dd1dcd66be5514739ad55ef2d57423e50804c47dc", "7eb5ff367eb3fc57fb06882fac39c53286c943cdb190450b59753a2ce8b57d89acc17eb239f9cd60d655ae92b82ba320b90000b55e91e2e36668fb49460af9a2bb", "45c3a820b255e3cf2e8efe27aa970f29a6628ffc0a45fb7673db03caa534bd121635212a58181d74edf62f7c38a056a61f57bd76b79eb2f060e9e895383b496280", "8a94bfb2773264982ca1a17291afdfddb7e20416eb56ffaa1cbfc67f4e0ab2040b91c1646824bfd49e3fd98d89e53797461d0cd3d0ff2ecdd8a81522a3b85f4c27", "0152da667ee750ace4b295844e443890b51916806cc40da29e476534393110a4a93d1276a60dbed5c25a70053092fd3ede2e2d4c348afc47dcf5de5bbc16ee4e97"}) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), 0xffffffffffffffff) 3.273968201s ago: executing program 6 (id=2331): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0x7) r1 = io_uring_setup$auto(0x1, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0x6, &(0x7f0000000100)="3143fce0d1ee47931e928855c89300dce792949965161333a9c987e96ba1d29fb8d62afea15b8a70930837a7b02ef927f67de35672eaec72f89a04940f928fdc27838a46919075b6447ee13165fbfa97cdb1b0c143dec87db74c59e33277be998028bc1b1d5666b766a9551f878a8bcd5581786a9c17cf67f6c3432bea24d8c2a56f70b9b62c36d718a676325cfa9628eac22108fba0bc686fb0a332e1ada7a0f68391f59e61a474c11751cbc563c2bb26") r2 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x80000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) close_range$auto(r3, r2, 0xffffffff) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.954772395s ago: executing program 2 (id=2332): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0440, 0x0) r1 = socket(0x1d, 0x5, 0x88) getsockopt$auto(r1, 0x1, 0x40, &(0x7f0000000140)='\x05/\xc3:\x00', &(0x7f0000000100)=0x7) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/64, 0x40) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0x0, 0xfffffffffffffffd, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0xfffffffffffffffc, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x6, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0x3, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x6483, 0x0) read$auto_mon_fops_text_t_mon_text(r3, &(0x7f0000000040)=""/64, 0x40) clock_adjtime$auto(0x6bc8, &(0x7f00000005c0)={0x7, 0x0, 0x8, 0x8000000000000001, 0x7, 0xfffffffffffffff7, 0x6, 0x0, 0x2, 0x2, 0x1, {0xf, 0x7}, 0x82ba, 0x7ff, 0x59d, 0x5, 0x0, 0x8000000000000000, 0x100000000, 0x6, 0x9, 0x7, 0x1000}) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x200000000007, 0xd, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x6d3f, 0x9, 0x9, 0xfffffffffffffffd]}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) write$auto_proc_mem_operations_base(r4, &(0x7f0000000180)="7616b56a41e84ef959321cb2c597da53544d5a98ab56a811b6ad35d221bce643264bcdbd69379dfc55bae1194bd2df6ef0aeb716224479a9131d491c78bed8bbd4d664e34c0408e61ca8671245b2b6506fae631003d34ee1af577649f86fd11266e5289ed838825b0f7291c897b72525b5fd919751eea403c17f8290f39186ade114e0d184fdaebc94", 0x89) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.652288531s ago: executing program 5 (id=2333): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) sysfs$auto(0x2, 0x2b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x8c001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/bcachefs/parameters/expensive_debug_checks\x00', 0x101, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x0) read$auto(r2, 0x0, 0x1) write$auto(r1, 0x0, 0xffff) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r4, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="01032cb57000fbdbdf250a0000000600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="08e101800400a380"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) setpgid$auto(r3, r3) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0099e6cf63f4919b97413407bf250000012923067456", @ANYRES16=r7, @ANYBLOB="000126bd7000fbdbdf250b0000000800050008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x880) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r8 = socket(0x15, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r8, 0x114, 0x8, 0x0, 0x4) 2.349114151s ago: executing program 6 (id=2334): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x6) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) mmap$auto(0x3, 0x200000000005, 0xdf, 0xeb5, 0x401, 0x8001) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x40246f4c, 0x38) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x8005, 0x3, 0x2, 0x7, 0x2, 0x73, 0xfffffffd, 0x10003, 0x3}}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0xfff, 0x4800c000, 0x800c000}, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) timerfd_create$auto(0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1p\x00', 0x501900, 0x0) prctl$auto(0xcb, 0x1, 0x4, 0x8, 0x7) open(0x0, 0x200000, 0x181) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) 2.103298093s ago: executing program 2 (id=2335): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/smaps_rollup\x00', 0xc0040, 0x0) msgctl$auto_MSG_INFO(0x7ff, 0xc, 0x0) setfsuid$auto(0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x80000, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000000c0)="53764267e696fcea171eb8adddccc1449cbd3210e71d5b86fcf052cc3f067ce3ffc3be80b143cdf0b03adff579b34c3758f19ef0f559e4f86d6b18c4a96e2711955eb3516470336d8f7566ceb5da3406ca") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x66, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) lstat$auto(&(0x7f0000000180)='./file0\x00', 0x0) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) flock$auto(0x6, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r0, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) 1.72203502s ago: executing program 5 (id=2336): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd9\x00', 0x545400, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/modalias\x00', 0x12bf40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/120, 0x78) close_range$auto(0x2, r1, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) pwrite64$auto(0x2, 0x0, 0x0, 0x5) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/69, 0x45) 909.515703ms ago: executing program 5 (id=2337): socket(0x10, 0x2, 0x0) pidfd_open$auto(0x1, 0x0) (async) r0 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r0, 0x0, 0x3, 0x0, 0x8000000000000000) ioctl$auto_RNDZAPENTCNT2(r0, 0x5204, 0x0) (async) ioctl$auto_RNDZAPENTCNT2(r0, 0x5204, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r1 = socket(0x10, 0x2, 0xf) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r1, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r2, 0x98}, 0x5) 608.083607ms ago: executing program 5 (id=2338): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x24008000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) set_mempolicy$auto(0x5, &(0x7f0000000040)=0xbf, 0x9) r2 = fsopen$auto(0x0, 0xfffffffc) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) 509.726008ms ago: executing program 4 (id=2339): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x800, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bind$auto(r0, &(0x7f0000000440)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0x7ff00) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRESHEX=0x0, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r3, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) pread64$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1ff, 0x7, 0x5, 0x7181, 0x8002, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x9, 0x4000080, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0xd) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) unshare$auto(0x8000400) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd09, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0x0, 0x0, 0x1080020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048800}, 0x40) 164.492084ms ago: executing program 5 (id=2340): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r0, 0x0, &(0x7f0000000000)='/dev/ttyS3\x00', &(0x7f0000000080), 0x2) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0xe9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serial/drivers/hci-ti/bind\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000340)=""/156, 0x9c) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0xfffffdef) 158.594104ms ago: executing program 2 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) (async) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev7\x00', 0x80000, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev7\x00', 0x80000, 0x0) ioctl$auto(0x3, 0xc0305616, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08000300060000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x300) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) getpid() (async) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c050000", @ANYRES16=r4, @ANYBLOB="1b0026bd7000fddbdf250300000004000800dc040380180023801400a400fc010000000000000000000000000001f26bf12eddb56ea210b4a9fcbbea7c92abcbe671d99217436e8eb9d865bed9ea3b97c2b8de681281fdd26c79872bce64a7f60e2f8c33c0132637a4f6339a0ff7027d271554ecf5b0a6063950cc2edf7ed0f1dff2ec4b9a0bf076762921768d51c6d0f86430c4056e6746671969e36eeb86eb0256b6c39bfc5cb69f3fd7601c88174639c3ab6a1d9054cf329ac4320be49915dbc948b4eb5ff8962016669ece0086397a0cc26831e3102fb337d903a88050000f80040013800400d600f8dc8d083582fa48e41baf2dfef165e0cfaa0f60c4b15c1d3aaef964e564e61d01684d42f2115a707781972f4e4f6069465c0c589c84b07beb8543ed0800eb0001000000d68f2025176234e5c90e40161fa234d615b59d993f63336226fe8e26c30eb486f60634e24c2efcdffc6224aefbb9fd4da5b0ad0e1b29d3b6480910a5ba4e2bda0151bd9dfb44519257f3615048c855570d6288968e0050c9b3a83c20bdac566610d67ee71dcb1751134bd146fee52f705c7de1930dfed0f7b6fa27ac5b3d1de36d584368db8e774c60cbfef1201d55826c387f8becf4ef3f13c590dc565135f7508c1d9f58e1b36877a98fb806cbb490555cddf4b346c077aad841d0bbff43a6ff4c103bff74b285b636640759cb5ba67d39981d9378f8e5971ae2fb965565fa36349ee6a91d982efeba6fefeaed144fb399026e5c074bf15ae126c9e07a121cdf45f75dae72a9df72fb95d3b455c3a7aec69a303c9cfd5765a6ccc30baf3847ff044ed980067a4d56e83b18bd32e87225102ae46a820d16ceabb6a47a49012b800400a480631455c6cec9d0f424bbb45996c61b3310dcdae0e017f146665e1354a6fd72b80d02ba520a97ca140fee2c6fc086fa496b03a6709dd57cb4aa3433293bcc0c527cbac812660b8900c36ef32382e2a3b88b3b707b2f1b2db1527f68d35662044cd1f8cb78c152cbfdbf74ee72b8befbfbacd6a36e62e6229d11a785858a48c1dde369c765183f305efa261da8fc3dc19bc2a96a5ea4eb23181c5fd22bb33e8fd4f2d894e15f0ddd6d8bf33237ae0d70e0b32e52bdb3d216fc0c65c461a68bad630ebf41a6a533790720c5e87593942200e375660e1a05fec092b87786e609ce55dab69c45487059b799ee11966dd1031164d8ac98f57bc5dd8cf409946ec3cb6af60678e001e394e561ffe289bf7671546be670fea709d9594d99f9fa7d5a0f6b00a3efcb773c6d92f5a0d4f952b56f26694dc49417b9bf9c3b8bea59b09174134c000000f1d125801d9faa701c195a2e60e00d26f68ab282326c6b33789039dc7293c128fe50f0227a565f1dc91277a7823c5a3d56827fb68ff2b1a6fe4fca9f04050b6aeaed6118bf0d3daf67b9853594b3cb32a6a895f12d00af883946b4f5201a69a97c728494f2f74b9b674ce82ac16ec2e7d026eaf53c943ee6b2b06f2d9563b21e26380bd977e75dc1126b688b9d4c236d1224b43de15a2aaf04fb7acbcb08e06f5bf6c7565e3003a1fd5495268c2f3585a86a32f17ff3751df46c45ff7578708de1bdd2eb6743e06cabdcf29c4b9556a73c93289a12c65c73c9b911b333095642205952e8d37a83d45cc1e9df0788aa25e0b706cab863d4c286f41404000000bc80a544ab470bdcca4bf8071cf1e47127ff2d81b3ff36eae32a22859cc2808c50cdb54349471459a72a23d9f1d57ca408000400", @ANYRES32=r5, @ANYBLOB="120001008b097914854700000040000000000000100002800c001000000100000000000004000800"], 0x51c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x2020009, 0xa0, 0x19, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 6 (id=2342): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000002c0)='}[,&*}\x00', &(0x7f0000000180)='nfsd\x00', 0x6, &(0x7f00000001c0)="5e0842d42d") r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$auto(0x9, 0x400008, 0xc, 0x9b75, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) semtimedop$auto(0x7, 0x0, 0x3, 0x0) kernel console output (not intermixed with test programs): ) entered blocking state [ 109.998830][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.034802][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.042208][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.078989][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.096729][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.104048][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.116940][ T5845] Bluetooth: hci2: command tx timeout [ 110.187545][ T5845] Bluetooth: hci1: command tx timeout [ 110.188800][ T5835] Bluetooth: hci0: command tx timeout [ 110.202838][ T5840] Bluetooth: hci3: command tx timeout [ 110.219781][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.227001][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.257220][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.264483][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.340902][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.417663][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.486754][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.494055][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.529004][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.536284][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.818067][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.975910][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.051766][ T5833] veth0_vlan: entered promiscuous mode [ 111.125676][ T5833] veth1_vlan: entered promiscuous mode [ 111.166121][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.219975][ T5837] veth0_vlan: entered promiscuous mode [ 111.260400][ T5837] veth1_vlan: entered promiscuous mode [ 111.269704][ T5833] veth0_macvtap: entered promiscuous mode [ 111.290307][ T5833] veth1_macvtap: entered promiscuous mode [ 111.326962][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.366728][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.397059][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.413907][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.423843][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.433167][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.442857][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.468582][ T5837] veth0_macvtap: entered promiscuous mode [ 111.498913][ T5841] veth0_vlan: entered promiscuous mode [ 111.510033][ T5837] veth1_macvtap: entered promiscuous mode [ 111.586689][ T5841] veth1_vlan: entered promiscuous mode [ 111.609857][ T5836] veth0_vlan: entered promiscuous mode [ 111.633885][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.683893][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.699808][ T5836] veth1_vlan: entered promiscuous mode [ 111.708867][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.711414][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.722219][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.735200][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.744178][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.753056][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.816225][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.825064][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.840855][ T5841] veth0_macvtap: entered promiscuous mode [ 111.861872][ T5841] veth1_macvtap: entered promiscuous mode [ 111.997775][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.006189][ T5836] veth0_macvtap: entered promiscuous mode [ 112.039701][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.044355][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.055156][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.063530][ T5836] veth1_macvtap: entered promiscuous mode [ 112.155478][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.183643][ T5840] Bluetooth: hci2: command tx timeout [ 112.210389][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.211134][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.225591][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.232805][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.244251][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.244300][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.262451][ T5840] Bluetooth: hci1: command tx timeout [ 112.262508][ T5840] Bluetooth: hci3: command tx timeout [ 112.262556][ T5840] Bluetooth: hci0: command tx timeout [ 112.267412][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.297843][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.329349][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.329404][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.329447][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.329490][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.624267][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.656375][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.744187][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.765762][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.818212][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.847228][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.885246][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.922204][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.262665][ T5835] Bluetooth: hci2: command tx timeout [ 114.460102][ T5835] Bluetooth: hci0: command tx timeout [ 114.466151][ T5835] Bluetooth: hci3: command tx timeout [ 114.471600][ T5835] Bluetooth: hci1: command tx timeout [ 115.069820][ T5923] process 'syz.0.7' launched './file0' with NULL argv: empty string added [ 115.173787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.657524][ T5930] Zero length message leads to an empty skb [ 116.353494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.372936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.275389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.464676][ T5942] hugetlbfs: syz.3.11 (5942): Using mlock ulimits for SHM_HUGETLB is obsolete [ 117.492073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 118.364468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.155115][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.404690][ T5981] Setting dangerous option i915.mitigations - tainting kernel [ 120.232548][ T5985] capability: warning: `syz.1.21' uses 32-bit capabilities (legacy support in use) [ 120.477649][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 121.043849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.052794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.062854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.073452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.350614][ T6003] rnbd_client L213: map_device: Parameters missing [ 121.464270][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 121.476138][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.484883][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.503903][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.521766][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.137457][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27'. [ 122.175299][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.327437][ T6015] bridge_slave_1 (unregistering): left allmulticast mode [ 122.359254][ T6015] bridge_slave_1 (unregistering): left promiscuous mode [ 122.377758][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.226957][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.499215][ T6050] futex_wake_op: syz.0.34 tries to shift op by 64; fix this program [ 125.783966][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 127.775675][ T6072] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 128.559188][ T6075] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 129.374152][ T6076] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 129.422022][ T6062] mmap: syz.0.37 (6062) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.100084][ T6090] overlayfs: missing 'lowerdir' [ 130.504713][ T6098] random: crng reseeded on system resumption [ 131.713097][ T5845] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 131.713146][ T5845] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9 [ 133.579054][ T6133] overlayfs: missing 'lowerdir' [ 134.332027][ T6123] FAULT_INJECTION: forcing a failure. [ 134.332027][ T6123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.332110][ T6123] CPU: 1 UID: 0 PID: 6123 Comm: syz.3.48 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 134.332158][ T6123] Tainted: [U]=USER [ 134.332169][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.332192][ T6123] Call Trace: [ 134.332203][ T6123] [ 134.332220][ T6123] dump_stack_lvl+0x16c/0x1f0 [ 134.332289][ T6123] should_fail_ex+0x512/0x640 [ 134.332347][ T6123] should_fail_alloc_page+0xe7/0x130 [ 134.332393][ T6123] prepare_alloc_pages+0x3c2/0x610 [ 134.332452][ T6123] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 134.332497][ T6123] ? stack_trace_save+0x8e/0xc0 [ 134.332546][ T6123] ? __lock_acquire+0xaa4/0x1ba0 [ 134.332589][ T6123] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.332635][ T6123] ? fb_var_to_videomode+0x4c9/0x690 [ 134.332694][ T6123] ? __pfx_fb_match_mode+0x10/0x10 [ 134.332751][ T6123] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.332798][ T6123] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.332851][ T6123] ? vc_allocate+0x489/0x880 [ 134.332889][ T6123] __alloc_pages_noprof+0xb/0x1b0 [ 134.332927][ T6123] ___kmalloc_large_node+0x82/0x1e0 [ 134.332976][ T6123] ? con_is_visible+0x65/0x150 [ 134.333011][ T6123] __kmalloc_large_node_noprof+0x1c/0x70 [ 134.333066][ T6123] __kmalloc_noprof.cold+0xc/0x61 [ 134.333121][ T6123] vc_allocate+0x489/0x880 [ 134.333162][ T6123] ? __pfx_vc_allocate+0x10/0x10 [ 134.333218][ T6123] con_install+0xa1/0x600 [ 134.333269][ T6123] ? __pfx_con_install+0x10/0x10 [ 134.333320][ T6123] ? __pfx_con_install+0x10/0x10 [ 134.333364][ T6123] tty_init_dev.part.0+0x99/0x500 [ 134.333415][ T6123] tty_open+0xa50/0xf90 [ 134.333469][ T6123] ? __pfx_tty_open+0x10/0x10 [ 134.333515][ T6123] ? chrdev_open+0x58c/0x6a0 [ 134.333559][ T6123] ? __pfx_tty_open+0x10/0x10 [ 134.333603][ T6123] chrdev_open+0x234/0x6a0 [ 134.333641][ T6123] ? __pfx_chrdev_open+0x10/0x10 [ 134.333683][ T6123] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 134.333739][ T6123] do_dentry_open+0x741/0x1c10 [ 134.333775][ T6123] ? __pfx_chrdev_open+0x10/0x10 [ 134.333818][ T6123] vfs_open+0x82/0x3f0 [ 134.333869][ T6123] path_openat+0x1e5e/0x2d40 [ 134.333919][ T6123] ? __pfx_path_openat+0x10/0x10 [ 134.333966][ T6123] do_filp_open+0x20b/0x470 [ 134.333999][ T6123] ? __pfx_do_filp_open+0x10/0x10 [ 134.334061][ T6123] ? alloc_fd+0x471/0x7d0 [ 134.334129][ T6123] do_sys_openat2+0x11b/0x1d0 [ 134.334173][ T6123] ? __pfx_do_sys_openat2+0x10/0x10 [ 134.334236][ T6123] __x64_sys_openat+0x174/0x210 [ 134.334295][ T6123] ? __pfx___x64_sys_openat+0x10/0x10 [ 134.334345][ T6123] ? rcu_is_watching+0x12/0xc0 [ 134.334392][ T6123] do_syscall_64+0xcd/0x230 [ 134.334448][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.334483][ T6123] RIP: 0033:0x7f32f7b8e969 [ 134.334517][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.334556][ T6123] RSP: 002b:00007f32f8a05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.334586][ T6123] RAX: ffffffffffffffda RBX: 00007f32f7db6080 RCX: 00007f32f7b8e969 [ 134.334608][ T6123] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 134.334629][ T6123] RBP: 00007f32f7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 134.334650][ T6123] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 134.334670][ T6123] R13: 0000000000000000 R14: 00007f32f7db6080 R15: 00007fffdbca67e8 [ 134.334714][ T6123] [ 134.920992][ T6146] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 135.905644][ T6143] tty tty12: ldisc open failed (-12), clearing slot 11 [ 136.383063][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'. [ 816.914100][T14786] FAULT_INJECTION: forcing a failure. [ 816.914100][T14786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 816.956410][T14786] CPU: 0 UID: 0 PID: 14786 Comm: syz.5.1853 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 816.956467][T14786] Tainted: [U]=USER [ 816.956478][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 816.956497][T14786] Call Trace: [ 816.956506][T14786] [ 816.956518][T14786] dump_stack_lvl+0x16c/0x1f0 [ 816.956568][T14786] should_fail_ex+0x512/0x640 [ 816.956619][T14786] should_fail_alloc_page+0xe7/0x130 [ 816.956660][T14786] prepare_alloc_pages+0x3c2/0x610 [ 816.956710][T14786] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 816.956749][T14786] ? rcu_is_watching+0x12/0xc0 [ 816.956776][T14786] ? finish_task_switch.isra.0+0x221/0xc10 [ 816.956806][T14786] ? lockdep_hardirqs_on+0x7c/0x110 [ 816.956847][T14786] ? finish_task_switch.isra.0+0x221/0xc10 [ 816.956877][T14786] ? rcu_is_watching+0x12/0xc0 [ 816.956926][T14786] ? trace_sched_exit_tp+0xde/0x130 [ 816.956963][T14786] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 816.957019][T14786] ? __pfx___schedule+0x10/0x10 [ 816.957056][T14786] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 816.957096][T14786] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 816.957138][T14786] ? policy_nodemask+0xea/0x4e0 [ 816.957176][T14786] alloc_pages_mpol+0x1fb/0x550 [ 816.957215][T14786] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 816.957253][T14786] ? __lock_acquire+0x5ca/0x1ba0 [ 816.957297][T14786] folio_alloc_mpol_noprof+0x36/0x2f0 [ 816.957342][T14786] vma_alloc_folio_noprof+0xed/0x1e0 [ 816.957386][T14786] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 816.957438][T14786] do_pte_missing+0x223d/0x3fb0 [ 816.957480][T14786] __handle_mm_fault+0x103d/0x2a40 [ 816.957520][T14786] ? __pfx___handle_mm_fault+0x10/0x10 [ 816.957548][T14786] ? lock_vma_under_rcu+0x47d/0x970 [ 816.957591][T14786] ? lock_vma_under_rcu+0x47d/0x970 [ 816.957662][T14786] handle_mm_fault+0x3fe/0xad0 [ 816.957697][T14786] do_user_addr_fault+0x60c/0x1370 [ 816.957737][T14786] exc_page_fault+0x5c/0xc0 [ 816.957785][T14786] asm_exc_page_fault+0x26/0x30 [ 816.957813][T14786] RIP: 0033:0x7fc89f25a35b [ 816.957836][T14786] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 816.957864][T14786] RSP: 002b:00007fc89d1f4fb0 EFLAGS: 00010202 [ 816.957886][T14786] RAX: 0000000000000000 RBX: 00007fc89f5b5fa0 RCX: 0000000000000000 [ 816.957905][T14786] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 816.957922][T14786] RBP: 00007fc89f410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 816.957940][T14786] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 816.957956][T14786] R13: 0000000000000000 R14: 00007fc89f5b5fa0 R15: 00007fff52d24e58 [ 816.957991][T14786] [ 816.958100][T14786] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 817.153696][T14794] netlink: 'syz.2.1855': attribute type 11 has an invalid length. [ 817.537057][T14798] random: crng reseeded on system resumption [ 818.859053][T14810] netlink: 'syz.3.1859': attribute type 11 has an invalid length. [ 818.895888][T14810] netlink: 'syz.3.1859': attribute type 11 has an invalid length. [ 819.106412][T14810] netlink: 'syz.3.1859': attribute type 11 has an invalid length. [ 819.115696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.122748][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.344907][T14833] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1865'. [ 820.530859][T14832] Process accounting resumed [ 821.621908][T14828] could not allocate digest TFM handle binfmt_misc [ 821.754740][T14817] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 821.889818][T14817] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 821.904720][T14817] memcg:ffff888024d1c141 [ 821.918845][T14817] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 821.928964][T14817] page_type: f5(slab) [ 822.028288][T14817] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 822.081531][T14817] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 822.100291][T14817] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 822.245578][T14817] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 822.273951][T14817] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 822.288450][T14817] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 822.311653][T14817] page dumped because: unmovable page [ 822.321760][T14817] page_owner tracks the page as allocated [ 822.383799][T14817] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 822.410253][T14817] post_alloc_hook+0x181/0x1b0 [ 822.415371][T14817] get_page_from_freelist+0x135c/0x3920 [ 822.421807][T14817] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 822.429090][T14817] alloc_pages_mpol+0x1fb/0x550 [ 822.451107][T14817] new_slab+0x244/0x340 [ 822.460868][T14817] ___slab_alloc+0xd9c/0x1940 [ 822.471354][T14817] __slab_alloc.constprop.0+0x56/0xb0 [ 822.481453][T14817] __kmalloc_cache_noprof+0xfb/0x3e0 [ 822.506337][T14817] ipv6_add_dev+0x6b7/0x15f0 [ 822.586739][T14817] addrconf_notify+0x53e/0x19e0 [ 822.608722][T14817] notifier_call_chain+0xbc/0x410 [ 822.630869][T14817] call_netdevice_notifiers_info+0xbe/0x140 [ 822.651371][T14817] register_netdevice+0x182e/0x2270 [ 822.667146][T14817] wg_newlink+0x3a7/0x780 [ 822.692428][T14817] rtnl_newlink+0xc42/0x2000 [ 822.712694][T14817] rtnetlink_rcv_msg+0x95b/0xe90 [ 822.734237][T14817] page last free pid 10565 tgid 10563 stack trace: [ 822.751726][T14817] __free_frozen_pages+0x69d/0xff0 [ 822.769239][T14817] __put_partials+0x16d/0x1c0 [ 822.787417][T14817] qlist_free_all+0x4e/0x120 [ 822.808472][T14817] kasan_quarantine_reduce+0x195/0x1e0 [ 822.842284][T14817] __kasan_slab_alloc+0x69/0x90 [ 822.866113][T14817] __kmalloc_noprof+0x1d4/0x510 [ 822.871184][T14817] ops_init+0x77/0x5f0 [ 822.891449][T14817] setup_net+0x21e/0x850 [ 822.906092][T14817] copy_net_ns+0x2a6/0x5f0 [ 822.926110][T14817] create_new_namespaces+0x3ea/0xad0 [ 822.952359][T14817] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 822.986089][T14817] ksys_unshare+0x45b/0xa40 [ 823.012667][T14817] __x64_sys_unshare+0x31/0x40 [ 823.032927][T14817] do_syscall_64+0xcd/0x230 [ 823.058145][T14817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.156385][T14869] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.5.1872: bg 4: bad block bitmap checksum [ 824.283268][T14869] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 824.296407][T14869] EXT4-fs (sda1): This should not happen!! Data will be lost [ 824.296407][T14869] [ 825.200407][T14921] openvswitch: netlink: Message has 4104 unknown bytes. [ 825.865436][T14981] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.2.1877: Error -117 reading block bitmap for 4 [ 826.364732][T15011] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1880'. [ 826.654155][T15019] FAULT_INJECTION: forcing a failure. [ 826.654155][T15019] name failslab, interval 1, probability 0, space 0, times 0 [ 826.720192][T15019] CPU: 0 UID: 0 PID: 15019 Comm: syz.4.1882 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 826.720245][T15019] Tainted: [U]=USER [ 826.720258][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.720277][T15019] Call Trace: [ 826.720289][T15019] [ 826.720303][T15019] dump_stack_lvl+0x16c/0x1f0 [ 826.720359][T15019] should_fail_ex+0x512/0x640 [ 826.720411][T15019] ? fs_reclaim_acquire+0xae/0x150 [ 826.720469][T15019] ? tomoyo_encode2+0x100/0x3e0 [ 826.720516][T15019] should_failslab+0xc2/0x120 [ 826.720558][T15019] __kmalloc_noprof+0xd2/0x510 [ 826.720606][T15019] tomoyo_encode2+0x100/0x3e0 [ 826.720662][T15019] tomoyo_encode+0x29/0x50 [ 826.720710][T15019] tomoyo_realpath_from_path+0x18f/0x6e0 [ 826.720774][T15019] tomoyo_check_open_permission+0x2ab/0x3c0 [ 826.720821][T15019] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 826.720912][T15019] ? find_held_lock+0x2b/0x80 [ 826.720955][T15019] tomoyo_file_open+0x6b/0x90 [ 826.720992][T15019] security_file_open+0x84/0x1e0 [ 826.721037][T15019] do_dentry_open+0x596/0x1c10 [ 826.721084][T15019] vfs_open+0x82/0x3f0 [ 826.721134][T15019] path_openat+0x1e5e/0x2d40 [ 826.721190][T15019] ? __pfx_path_openat+0x10/0x10 [ 826.721235][T15019] do_filp_open+0x20b/0x470 [ 826.721270][T15019] ? __pfx_do_filp_open+0x10/0x10 [ 826.721321][T15019] ? __pfx_kfree_link+0x10/0x10 [ 826.721381][T15019] ? alloc_fd+0x471/0x7d0 [ 826.721447][T15019] do_sys_openat2+0x11b/0x1d0 [ 826.721494][T15019] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.721539][T15019] ? fdget+0x187/0x210 [ 826.721570][T15019] ? __sys_connect+0xf1/0x170 [ 826.721618][T15019] __x64_sys_openat+0x174/0x210 [ 826.721666][T15019] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.721719][T15019] ? rcu_is_watching+0x12/0xc0 [ 826.721765][T15019] do_syscall_64+0xcd/0x230 [ 826.721823][T15019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.721859][T15019] RIP: 0033:0x7f8ada98e969 [ 826.721887][T15019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.721920][T15019] RSP: 002b:00007f8adb81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.721953][T15019] RAX: ffffffffffffffda RBX: 00007f8adabb5fa0 RCX: 00007f8ada98e969 [ 826.721976][T15019] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 826.721998][T15019] RBP: 00007f8adaa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 826.722020][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.722040][T15019] R13: 0000000000000000 R14: 00007f8adabb5fa0 R15: 00007ffe2a8254a8 [ 826.722084][T15019] [ 826.722118][T15019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 826.896411][ T5835] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 826.906125][ T5845] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 826.907424][T14889] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 826.914866][T14891] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 826.919974][T14890] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 826.949271][T10255] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 826.976330][T14893] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 827.027534][T14892] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 827.050080][T14895] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 827.056305][T14899] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 827.056789][T14900] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 827.063113][T14898] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 827.076971][T14897] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 827.083798][T14902] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 827.126349][T14912] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 827.127943][T14904] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 827.139976][T14903] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 827.146535][T14913] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 827.206263][T14914] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 827.213146][T14918] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 827.218461][T14916] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 827.220299][T14922] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 827.226509][T14919] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 827.286435][T14925] Bluetooth: hci35: Opcode 0x0c03 failed: -110 [ 827.286540][T14924] Bluetooth: hci29: Opcode 0x0c03 failed: -110 [ 827.293301][T14927] Bluetooth: hci28: Opcode 0x0c03 failed: -110 [ 827.369652][T14929] Bluetooth: hci36: Opcode 0x0c03 failed: -110 [ 827.369931][T14928] Bluetooth: hci30: Opcode 0x0c03 failed: -110 [ 827.376627][T14930] Bluetooth: hci31: Opcode 0x0c03 failed: -110 [ 827.446157][T14931] Bluetooth: hci37: Opcode 0x0c03 failed: -110 [ 827.453067][T14936] Bluetooth: hci32: Opcode 0x0c03 failed: -110 [ 827.456122][T14933] Bluetooth: hci34: Opcode 0x0c03 failed: -110 [ 827.467175][T14959] Bluetooth: hci40: Opcode 0x0c03 failed: -110 [ 827.526888][T14960] Bluetooth: hci41: Opcode 0x0c03 failed: -110 [ 827.527812][T14968] Bluetooth: hci47: Opcode 0x0c03 failed: -110 [ 827.533514][T14966] Bluetooth: hci46: Opcode 0x0c03 failed: -110 [ 827.539996][T14969] Bluetooth: hci48: Opcode 0x0c03 failed: -110 [ 827.546269][T14963] Bluetooth: hci33: Opcode 0x0c03 failed: -110 [ 827.552670][T14971] Bluetooth: hci49: Opcode 0x0c03 failed: -110 [ 827.606334][T14977] Bluetooth: hci43: Opcode 0x0c03 failed: -110 [ 827.616230][T14974] Bluetooth: hci44: Opcode 0x0c03 failed: -110 [ 827.623081][T14976] Bluetooth: hci42: Opcode 0x0c03 failed: -110 [ 827.633730][T14973] Bluetooth: hci38: Opcode 0x0c03 failed: -110 [ 827.686933][T14982] Bluetooth: hci50: Opcode 0x0c03 failed: -110 [ 827.687228][T14978] Bluetooth: hci39: Opcode 0x0c03 failed: -110 [ 827.696897][T14979] Bluetooth: hci45: Opcode 0x0c03 failed: -110 [ 827.700552][T14983] Bluetooth: hci52: Opcode 0x0c03 failed: -110 [ 827.707439][T14986] Bluetooth: hci63: Opcode 0x0c03 failed: -110 [ 827.713103][T14984] Bluetooth: hci51: Opcode 0x0c03 failed: -110 [ 827.725989][T14985] Bluetooth: hci69: Opcode 0x0c03 failed: -110 [ 827.766233][T14988] Bluetooth: hci54: Opcode 0x0c03 failed: -110 [ 827.773234][T14987] Bluetooth: hci53: Opcode 0x0c03 failed: -110 [ 827.779983][T14993] Bluetooth: hci58: Opcode 0x0c03 failed: -110 [ 827.780446][T14989] Bluetooth: hci56: Opcode 0x0c03 failed: -110 [ 827.793786][T14991] Bluetooth: hci55: Opcode 0x0c03 failed: -110 [ 827.794040][T14990] Bluetooth: hci57: Opcode 0x0c03 failed: -110 [ 827.851186][T14992] Bluetooth: hci60: Opcode 0x0c03 failed: -110 [ 828.006846][T14995] Bluetooth: hci61: Opcode 0x0c03 failed: -110 [ 828.013398][T14996] Bluetooth: hci64: Opcode 0x0c03 failed: -110 [ 828.017102][T14999] Bluetooth: hci65: Opcode 0x0c03 failed: -110 [ 828.020488][T15001] Bluetooth: hci66: Opcode 0x0c03 failed: -110 [ 828.027181][T15000] Bluetooth: hci62: Opcode 0x0c03 failed: -110 [ 828.086407][T15003] Bluetooth: hci67: Opcode 0x0c03 failed: -110 [ 828.093155][T15004] Bluetooth: hci68: Opcode 0x0c03 failed: -110 [ 828.093161][T15002] Bluetooth: hci59: Opcode 0x0c03 failed: -110 [ 828.859037][T15046] zswap: compressor not available [ 832.318714][T15003] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 834.355577][T15104] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1899'. [ 834.551443][T15105] zswap: compressor not available [ 840.476827][T15162] bond0: option all_slaves_active: invalid value () [ 840.995526][T15179] zswap: compressor not available [ 841.229046][T15191] FAULT_INJECTION: forcing a failure. [ 841.229046][T15191] name failslab, interval 1, probability 0, space 0, times 0 [ 841.256300][T15191] CPU: 1 UID: 0 PID: 15191 Comm: syz.3.1919 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 841.256356][T15191] Tainted: [U]=USER [ 841.256369][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 841.256390][T15191] Call Trace: [ 841.256402][T15191] [ 841.256415][T15191] dump_stack_lvl+0x16c/0x1f0 [ 841.256475][T15191] should_fail_ex+0x512/0x640 [ 841.256527][T15191] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 841.256574][T15191] should_failslab+0xc2/0x120 [ 841.256617][T15191] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 841.256659][T15191] ? sock_alloc_inode+0x25/0x1c0 [ 841.256715][T15191] ? __pfx_sock_alloc_inode+0x10/0x10 [ 841.256763][T15191] sock_alloc_inode+0x25/0x1c0 [ 841.256811][T15191] alloc_inode+0x61/0x240 [ 841.256856][T15191] sock_alloc+0x40/0x280 [ 841.256904][T15191] __sock_create+0xc1/0x8d0 [ 841.256978][T15191] __sys_socket+0x14d/0x260 [ 841.257010][T15191] ? __pfx___sys_socket+0x10/0x10 [ 841.257044][T15191] ? do_user_addr_fault+0x843/0x1370 [ 841.257084][T15191] __x64_sys_socket+0x72/0xb0 [ 841.257113][T15191] ? lockdep_hardirqs_on+0x7c/0x110 [ 841.257163][T15191] do_syscall_64+0xcd/0x230 [ 841.257220][T15191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.257255][T15191] RIP: 0033:0x7f32f7b90887 [ 841.257283][T15191] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.257316][T15191] RSP: 002b:00007f32f8a24fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 841.257350][T15191] RAX: ffffffffffffffda RBX: 00007f32f7db5fa0 RCX: 00007f32f7b90887 [ 841.257372][T15191] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 841.257393][T15191] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 841.257414][T15191] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 841.257436][T15191] R13: 0000000000000000 R14: 00007f32f7db5fa0 R15: 00007fffdbca67e8 [ 841.257479][T15191] [ 841.257495][T15191] socket: no more sockets [ 846.633422][T15279] zswap: compressor not available [ 846.701599][T15259] kexec: Could not allocate control_code_buffer [ 846.760471][T15299] netlink: 'syz.2.1942': attribute type 11 has an invalid length. [ 846.785391][T15299] netlink: 'syz.2.1942': attribute type 11 has an invalid length. [ 846.990947][T15299] netlink: 'syz.2.1942': attribute type 11 has an invalid length. [ 847.542646][T15299] could not allocate digest TFM handle binfmt_misc [ 847.842980][T15315] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1945'. [ 848.514564][T15322] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 848.525413][T15322] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 848.560802][T15322] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 848.869956][T15331] ceph: Failed to parse sending metrics switch value 'P^' [ 849.094598][T15331] Invalid ELF header magic: != ELF [ 850.561037][T15359] netlink: 'syz.5.1955': attribute type 11 has an invalid length. [ 850.592547][T15359] netlink: 'syz.5.1955': attribute type 11 has an invalid length. [ 850.631619][T15359] netlink: 'syz.5.1955': attribute type 11 has an invalid length. [ 850.931883][T15364] Process accounting paused [ 850.954515][T15359] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 850.969465][T15359] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 850.978569][T15359] memcg:ffff888024d1c141 [ 850.986197][T15359] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 850.995148][T15359] page_type: f5(slab) [ 851.088900][T15359] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 851.146320][T15359] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 851.165359][T15359] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 851.185847][T15359] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 851.238150][T15359] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 851.247874][T15359] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 851.257382][T15359] page dumped because: unmovable page [ 851.269842][T15359] page_owner tracks the page as allocated [ 851.276114][T15359] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 851.298616][T15359] post_alloc_hook+0x181/0x1b0 [ 851.304263][T15359] get_page_from_freelist+0x135c/0x3920 [ 851.316778][T15359] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 851.326287][T15359] alloc_pages_mpol+0x1fb/0x550 [ 851.336195][T15359] new_slab+0x244/0x340 [ 851.350438][T15359] ___slab_alloc+0xd9c/0x1940 [ 851.359189][T15359] __slab_alloc.constprop.0+0x56/0xb0 [ 851.364798][T15359] __kmalloc_cache_noprof+0xfb/0x3e0 [ 851.395797][T15359] ipv6_add_dev+0x6b7/0x15f0 [ 851.400762][T15359] addrconf_notify+0x53e/0x19e0 [ 851.405808][T15359] notifier_call_chain+0xbc/0x410 [ 851.411171][T15359] call_netdevice_notifiers_info+0xbe/0x140 [ 851.421117][T15359] register_netdevice+0x182e/0x2270 [ 851.451988][T15359] wg_newlink+0x3a7/0x780 [ 851.464011][T15359] rtnl_newlink+0xc42/0x2000 [ 851.478069][T15359] rtnetlink_rcv_msg+0x95b/0xe90 [ 851.506901][T15359] page last free pid 10565 tgid 10563 stack trace: [ 851.513500][T15359] __free_frozen_pages+0x69d/0xff0 [ 851.548308][T15359] __put_partials+0x16d/0x1c0 [ 851.548532][T15362] could not allocate digest TFM handle binfmt_misc [ 851.553059][T15359] qlist_free_all+0x4e/0x120 [ 851.619699][T15359] kasan_quarantine_reduce+0x195/0x1e0 [ 851.626627][T15359] __kasan_slab_alloc+0x69/0x90 [ 851.631635][T15359] __kmalloc_noprof+0x1d4/0x510 [ 851.647541][T15359] ops_init+0x77/0x5f0 [ 851.654416][T15359] setup_net+0x21e/0x850 [ 851.661563][T15359] copy_net_ns+0x2a6/0x5f0 [ 851.676088][T15359] create_new_namespaces+0x3ea/0xad0 [ 851.692205][T15359] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 851.899243][T15359] ksys_unshare+0x45b/0xa40 [ 851.903954][T15359] __x64_sys_unshare+0x31/0x40 [ 851.914130][T15359] do_syscall_64+0xcd/0x230 [ 851.919004][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.465521][T15407] zswap: compressor not available [ 853.541365][T15404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 853.570753][T15404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 853.626576][T15404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 853.643367][T15404] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 853.850552][T15428] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1970'. [ 853.861291][T15404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 853.896560][T15404] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 854.351329][T15438] netlink: 'syz.3.1971': attribute type 11 has an invalid length. [ 854.386193][T15438] netlink: 'syz.3.1971': attribute type 11 has an invalid length. [ 854.424958][T15438] netlink: 'syz.3.1971': attribute type 11 has an invalid length. [ 855.044223][T15441] could not allocate digest TFM handle binfmt_misc [ 855.366330][T15003] Bluetooth: hci0: command 0x0c1a tx timeout [ 855.614971][T15003] Bluetooth: hci2: command 0x0c1a tx timeout [ 855.686195][T15003] Bluetooth: hci3: command 0x0c1a tx timeout [ 855.926245][T15003] Bluetooth: hci5: command 0x0c1a tx timeout [ 855.932370][T15004] Bluetooth: hci4: command 0x0406 tx timeout [ 857.766272][T15003] Bluetooth: hci3: command 0x0c1a tx timeout [ 861.883857][T15507] zswap: compressor not available [ 863.383880][T15522] netlink: 'syz.5.1985': attribute type 11 has an invalid length. [ 863.446202][T15522] netlink: 'syz.5.1985': attribute type 11 has an invalid length. [ 863.464308][T15522] netlink: 'syz.5.1985': attribute type 11 has an invalid length. [ 864.352843][T15530] could not allocate digest TFM handle binfmt_misc [ 864.755900][T15522] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 864.771035][T15522] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 864.783195][T15522] memcg:ffff888024d1c141 [ 864.833994][T15522] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 864.933884][T15522] page_type: f5(slab) [ 864.939767][T15522] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 864.951476][T15522] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 865.077521][T15522] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 865.173915][T15522] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 865.210715][T15522] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 865.254943][T15522] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 865.336463][T15522] page dumped because: unmovable page [ 865.341924][T15522] page_owner tracks the page as allocated [ 865.446396][T15522] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 865.529249][T15522] post_alloc_hook+0x181/0x1b0 [ 865.534191][T15522] get_page_from_freelist+0x135c/0x3920 [ 865.590284][T15522] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 865.600435][T15522] alloc_pages_mpol+0x1fb/0x550 [ 865.605367][T15522] new_slab+0x244/0x340 [ 865.623662][T15522] ___slab_alloc+0xd9c/0x1940 [ 865.634053][T15522] __slab_alloc.constprop.0+0x56/0xb0 [ 865.653128][T15522] __kmalloc_cache_noprof+0xfb/0x3e0 [ 865.674474][T15522] ipv6_add_dev+0x6b7/0x15f0 [ 865.717906][T15522] addrconf_notify+0x53e/0x19e0 [ 865.799042][T15522] notifier_call_chain+0xbc/0x410 [ 865.872918][T15522] call_netdevice_notifiers_info+0xbe/0x140 [ 865.921120][T15522] register_netdevice+0x182e/0x2270 [ 865.936230][T15522] wg_newlink+0x3a7/0x780 [ 865.952089][T15522] rtnl_newlink+0xc42/0x2000 [ 865.970812][T15522] rtnetlink_rcv_msg+0x95b/0xe90 [ 865.984656][T15522] page last free pid 10565 tgid 10563 stack trace: [ 866.002891][T15522] __free_frozen_pages+0x69d/0xff0 [ 866.026083][T15522] __put_partials+0x16d/0x1c0 [ 866.040698][T15522] qlist_free_all+0x4e/0x120 [ 866.052246][T15522] kasan_quarantine_reduce+0x195/0x1e0 [ 866.086232][T15522] __kasan_slab_alloc+0x69/0x90 [ 866.099742][T15522] __kmalloc_noprof+0x1d4/0x510 [ 866.104666][T15522] ops_init+0x77/0x5f0 [ 866.145485][T15522] setup_net+0x21e/0x850 [ 866.156158][T15522] copy_net_ns+0x2a6/0x5f0 [ 866.160738][T15522] create_new_namespaces+0x3ea/0xad0 [ 866.216160][T15522] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 866.221882][T15522] ksys_unshare+0x45b/0xa40 [ 866.256275][T15522] __x64_sys_unshare+0x31/0x40 [ 866.261146][T15522] do_syscall_64+0xcd/0x230 [ 866.265715][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.116437][T15575] FAULT_INJECTION: forcing a failure. [ 870.116437][T15575] name failslab, interval 1, probability 0, space 0, times 0 [ 870.177028][T15575] CPU: 0 UID: 0 PID: 15575 Comm: syz.5.1996 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 870.177082][T15575] Tainted: [U]=USER [ 870.177093][T15575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 870.177130][T15575] Call Trace: [ 870.177141][T15575] [ 870.177155][T15575] dump_stack_lvl+0x16c/0x1f0 [ 870.177213][T15575] should_fail_ex+0x512/0x640 [ 870.177273][T15575] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 870.177319][T15575] should_failslab+0xc2/0x120 [ 870.177363][T15575] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 870.177403][T15575] ? d_instantiate+0x77/0x90 [ 870.177440][T15575] ? alloc_empty_file+0x55/0x1e0 [ 870.177492][T15575] alloc_empty_file+0x55/0x1e0 [ 870.177539][T15575] alloc_file_pseudo+0x13a/0x230 [ 870.177588][T15575] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 870.177648][T15575] ioctx_alloc+0x5ab/0x2060 [ 870.177716][T15575] ? find_held_lock+0x2b/0x80 [ 870.177750][T15575] ? __pfx_ioctx_alloc+0x10/0x10 [ 870.177798][T15575] ? __might_fault+0x13b/0x190 [ 870.177851][T15575] __x64_sys_io_setup+0xc9/0x210 [ 870.177906][T15575] do_syscall_64+0xcd/0x230 [ 870.177961][T15575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.177996][T15575] RIP: 0033:0x7fc89f38e969 [ 870.178022][T15575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.178057][T15575] RSP: 002b:00007fc89d1f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 870.178089][T15575] RAX: ffffffffffffffda RBX: 00007fc89f5b5fa0 RCX: 00007fc89f38e969 [ 870.178111][T15575] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 870.178133][T15575] RBP: 00007fc89f410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 870.178154][T15575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.178175][T15575] R13: 0000000000000000 R14: 00007fc89f5b5fa0 R15: 00007fff52d24e58 [ 870.178228][T15575] [ 875.805654][T15628] FAULT_INJECTION: forcing a failure. [ 875.805654][T15628] name failslab, interval 1, probability 0, space 0, times 0 [ 875.856524][T15628] CPU: 0 UID: 0 PID: 15628 Comm: syz.5.2007 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 875.856584][T15628] Tainted: [U]=USER [ 875.856598][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 875.856619][T15628] Call Trace: [ 875.856631][T15628] [ 875.856644][T15628] dump_stack_lvl+0x16c/0x1f0 [ 875.856703][T15628] should_fail_ex+0x512/0x640 [ 875.856754][T15628] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 875.856805][T15628] should_failslab+0xc2/0x120 [ 875.856848][T15628] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 875.856894][T15628] ? apply_subsystem_event_filter+0x3df/0x1450 [ 875.856940][T15628] kstrdup+0x53/0x100 [ 875.856985][T15628] apply_subsystem_event_filter+0x3df/0x1450 [ 875.857055][T15628] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 875.857111][T15628] ? _copy_from_user+0x59/0xd0 [ 875.857172][T15628] subsystem_filter_write+0x95/0x120 [ 875.857217][T15628] vfs_write+0x25c/0x1180 [ 875.857246][T15628] ? __pfx_subsystem_filter_write+0x10/0x10 [ 875.857290][T15628] ? __pfx___mutex_lock+0x10/0x10 [ 875.857340][T15628] ? __pfx_vfs_write+0x10/0x10 [ 875.857386][T15628] ? __fget_files+0x20e/0x3c0 [ 875.857430][T15628] ksys_write+0x12a/0x240 [ 875.857465][T15628] ? __pfx_ksys_write+0x10/0x10 [ 875.857496][T15628] ? rcu_is_watching+0x12/0xc0 [ 875.857542][T15628] do_syscall_64+0xcd/0x230 [ 875.857597][T15628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.857629][T15628] RIP: 0033:0x7fc89f38e969 [ 875.857656][T15628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.857690][T15628] RSP: 002b:00007fc89d1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 875.857721][T15628] RAX: ffffffffffffffda RBX: 00007fc89f5b6080 RCX: 00007fc89f38e969 [ 875.857743][T15628] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 875.857763][T15628] RBP: 00007fc89f410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 875.857785][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.857805][T15628] R13: 0000000000000000 R14: 00007fc89f5b6080 R15: 00007fff52d24e58 [ 875.857851][T15628] [ 880.493039][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.500740][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.500189][T15656] Process accounting resumed [ 883.446910][T15721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2029'. [ 883.539412][T15722] zram: Added device: zram1 [ 885.215076][T15751] netlink: 'syz.3.2036': attribute type 11 has an invalid length. [ 885.296277][T15751] netlink: 'syz.3.2036': attribute type 11 has an invalid length. [ 885.304214][T15751] netlink: 'syz.3.2036': attribute type 11 has an invalid length. [ 885.686734][T15764] netlink: 'syz.5.2037': attribute type 11 has an invalid length. [ 885.758252][T15764] netlink: 'syz.5.2037': attribute type 11 has an invalid length. [ 885.767454][T15764] netlink: 'syz.5.2037': attribute type 11 has an invalid length. [ 886.448770][T15751] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 886.506448][T15759] could not allocate digest TFM handle binfmt_misc [ 886.536783][T15751] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 886.615153][T15751] memcg:ffff888024d1c141 [ 886.626310][T15751] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 886.699691][T15751] page_type: f5(slab) [ 886.703763][T15751] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 886.779764][T15751] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 886.866299][T15751] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 886.936322][T15751] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 886.945068][T15751] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 886.996324][T15751] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 887.058622][T15751] page dumped because: unmovable page [ 887.064058][T15751] page_owner tracks the page as allocated [ 887.136415][T15751] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 887.268252][T15751] post_alloc_hook+0x181/0x1b0 [ 887.273104][T15751] get_page_from_freelist+0x135c/0x3920 [ 887.287058][T15772] could not allocate digest TFM handle binfmt_misc [ 887.346159][T15751] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 887.356245][T15751] alloc_pages_mpol+0x1fb/0x550 [ 887.386217][T15751] new_slab+0x244/0x340 [ 887.405092][T15751] ___slab_alloc+0xd9c/0x1940 [ 887.436366][T15751] __slab_alloc.constprop.0+0x56/0xb0 [ 887.441820][T15751] __kmalloc_cache_noprof+0xfb/0x3e0 [ 887.486514][T15751] ipv6_add_dev+0x6b7/0x15f0 [ 887.491503][T15751] addrconf_notify+0x53e/0x19e0 [ 887.556377][T15751] notifier_call_chain+0xbc/0x410 [ 887.561496][T15751] call_netdevice_notifiers_info+0xbe/0x140 [ 887.596188][T15751] register_netdevice+0x182e/0x2270 [ 887.634971][T15751] wg_newlink+0x3a7/0x780 [ 887.668336][T15751] rtnl_newlink+0xc42/0x2000 [ 887.673103][T15751] rtnetlink_rcv_msg+0x95b/0xe90 [ 887.726386][T15751] page last free pid 10565 tgid 10563 stack trace: [ 887.732958][T15751] __free_frozen_pages+0x69d/0xff0 [ 887.803588][T15751] __put_partials+0x16d/0x1c0 [ 887.881954][T15751] qlist_free_all+0x4e/0x120 [ 887.901762][T15751] kasan_quarantine_reduce+0x195/0x1e0 [ 887.957619][T15751] __kasan_slab_alloc+0x69/0x90 [ 887.975267][T15751] __kmalloc_noprof+0x1d4/0x510 [ 888.001082][T15751] ops_init+0x77/0x5f0 [ 888.049918][T15751] setup_net+0x21e/0x850 [ 888.073211][T15751] copy_net_ns+0x2a6/0x5f0 [ 888.101700][T15751] create_new_namespaces+0x3ea/0xad0 [ 888.152623][T15751] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 888.166359][T15751] ksys_unshare+0x45b/0xa40 [ 888.186160][T15751] __x64_sys_unshare+0x31/0x40 [ 888.209429][T15751] do_syscall_64+0xcd/0x230 [ 888.214019][T15751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.491644][T15783] zswap: compressor not available [ 890.567663][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2047'. [ 891.246477][T15813] zram: Added device: zram2 [ 891.546320][T15820] netlink: 'syz.5.2049': attribute type 11 has an invalid length. [ 891.556217][T15820] netlink: 'syz.5.2049': attribute type 11 has an invalid length. [ 891.566861][T15820] netlink: 'syz.5.2049': attribute type 11 has an invalid length. [ 892.557948][T15830] could not allocate digest TFM handle binfmt_misc [ 892.601731][T15820] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 892.611100][T15820] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 892.621963][T15820] memcg:ffff888024d1c141 [ 892.626453][T15820] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 892.642311][T15820] page_type: f5(slab) [ 892.647705][T15820] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 892.662677][T15820] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 892.721756][T15820] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 892.731137][T15820] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 892.908731][T15820] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 893.020036][T15820] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 893.096954][T15820] page dumped because: unmovable page [ 893.103441][T15820] page_owner tracks the page as allocated [ 893.122592][T15820] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 893.176769][T15820] post_alloc_hook+0x181/0x1b0 [ 893.181737][T15820] get_page_from_freelist+0x135c/0x3920 [ 893.440855][T15820] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 893.490013][T15820] alloc_pages_mpol+0x1fb/0x550 [ 893.495012][T15820] new_slab+0x244/0x340 [ 893.536910][T15820] ___slab_alloc+0xd9c/0x1940 [ 893.541785][T15820] __slab_alloc.constprop.0+0x56/0xb0 [ 893.601404][T15820] __kmalloc_cache_noprof+0xfb/0x3e0 [ 893.607508][T15820] ipv6_add_dev+0x6b7/0x15f0 [ 893.612193][T15820] addrconf_notify+0x53e/0x19e0 [ 893.640867][T15820] notifier_call_chain+0xbc/0x410 [ 893.683379][T15820] call_netdevice_notifiers_info+0xbe/0x140 [ 893.689824][T15820] register_netdevice+0x182e/0x2270 [ 893.695121][T15820] wg_newlink+0x3a7/0x780 [ 893.700289][T15820] rtnl_newlink+0xc42/0x2000 [ 893.704983][T15820] rtnetlink_rcv_msg+0x95b/0xe90 [ 893.711117][T15820] page last free pid 10565 tgid 10563 stack trace: [ 893.718396][T15820] __free_frozen_pages+0x69d/0xff0 [ 893.723603][T15820] __put_partials+0x16d/0x1c0 [ 893.728852][T15820] qlist_free_all+0x4e/0x120 [ 893.733633][T15820] kasan_quarantine_reduce+0x195/0x1e0 [ 893.739718][T15820] __kasan_slab_alloc+0x69/0x90 [ 893.744707][T15820] __kmalloc_noprof+0x1d4/0x510 [ 893.840717][T15820] ops_init+0x77/0x5f0 [ 893.844903][T15820] setup_net+0x21e/0x850 [ 893.926589][T15820] copy_net_ns+0x2a6/0x5f0 [ 893.955034][T15820] create_new_namespaces+0x3ea/0xad0 [ 893.986182][T15820] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 894.001295][T15820] ksys_unshare+0x45b/0xa40 [ 894.009597][T15820] __x64_sys_unshare+0x31/0x40 [ 894.028694][T15820] do_syscall_64+0xcd/0x230 [ 894.056091][T15820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.983872][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2059'. [ 896.153202][T15879] team0: Port device team_slave_0 removed [ 896.641896][T15883] : Can't lookup blockdev [ 897.729210][T15901] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 897.738341][T15901] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 897.746645][T15901] netlink: 'syz.3.2064': attribute type 11 has an invalid length. [ 898.141992][T15901] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 898.217731][T15901] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 898.230101][T15901] memcg:ffff888024d1c141 [ 898.241799][T15901] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 898.252638][T15901] page_type: f5(slab) [ 898.279969][T15901] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 898.320440][T15901] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 898.536782][T15901] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 898.728191][T15901] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 898.738344][T15901] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 898.748492][T15901] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 898.758190][T15901] page dumped because: unmovable page [ 898.778818][T15901] page_owner tracks the page as allocated [ 898.788760][T15901] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 898.810980][T15901] post_alloc_hook+0x181/0x1b0 [ 898.849445][T15901] get_page_from_freelist+0x135c/0x3920 [ 898.916924][T15901] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 898.922937][T15901] alloc_pages_mpol+0x1fb/0x550 [ 898.949526][T15901] new_slab+0x244/0x340 [ 898.953801][T15901] ___slab_alloc+0xd9c/0x1940 [ 899.012769][T15901] __slab_alloc.constprop.0+0x56/0xb0 [ 899.048732][T15901] __kmalloc_cache_noprof+0xfb/0x3e0 [ 899.056947][T15901] ipv6_add_dev+0x6b7/0x15f0 [ 899.076260][T15901] addrconf_notify+0x53e/0x19e0 [ 899.132353][T15901] notifier_call_chain+0xbc/0x410 [ 899.155384][T15899] could not allocate digest TFM handle binfmt_misc [ 899.176314][T15901] call_netdevice_notifiers_info+0xbe/0x140 [ 899.182341][T15901] register_netdevice+0x182e/0x2270 [ 899.208049][T15901] wg_newlink+0x3a7/0x780 [ 899.226306][T15901] rtnl_newlink+0xc42/0x2000 [ 899.231048][T15901] rtnetlink_rcv_msg+0x95b/0xe90 [ 899.276322][T15901] page last free pid 10565 tgid 10563 stack trace: [ 899.283024][T15901] __free_frozen_pages+0x69d/0xff0 [ 899.371053][T15901] __put_partials+0x16d/0x1c0 [ 899.402920][T15901] qlist_free_all+0x4e/0x120 [ 899.412913][T15901] kasan_quarantine_reduce+0x195/0x1e0 [ 899.421402][T15901] __kasan_slab_alloc+0x69/0x90 [ 899.429473][T15901] __kmalloc_noprof+0x1d4/0x510 [ 899.434509][T15901] ops_init+0x77/0x5f0 [ 899.439181][T15901] setup_net+0x21e/0x850 [ 899.445193][T15901] copy_net_ns+0x2a6/0x5f0 [ 899.451774][T15901] create_new_namespaces+0x3ea/0xad0 [ 899.457200][T15901] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 899.463030][T15901] ksys_unshare+0x45b/0xa40 [ 899.467754][T15901] __x64_sys_unshare+0x31/0x40 [ 899.473139][T15901] do_syscall_64+0xcd/0x230 [ 899.478178][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.553704][T15917] FAULT_INJECTION: forcing a failure. [ 899.553704][T15917] name fail_futex, interval 1, probability 0, space 0, times 0 [ 899.567066][T15917] CPU: 0 UID: 0 PID: 15917 Comm: syz.5.2065 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 899.567116][T15917] Tainted: [U]=USER [ 899.567127][T15917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 899.567145][T15917] Call Trace: [ 899.567156][T15917] [ 899.567168][T15917] dump_stack_lvl+0x16c/0x1f0 [ 899.567222][T15917] should_fail_ex+0x512/0x640 [ 899.567277][T15917] get_futex_key+0xabc/0x1000 [ 899.567317][T15917] ? __pfx_get_futex_key+0x10/0x10 [ 899.567370][T15917] futex_wake+0xe7/0x4e0 [ 899.567407][T15917] ? rcu_is_watching+0x12/0xc0 [ 899.567444][T15917] ? __pfx_futex_wake+0x10/0x10 [ 899.567507][T15917] do_futex+0x1e3/0x350 [ 899.567543][T15917] ? __pfx_do_futex+0x10/0x10 [ 899.567577][T15917] ? __might_fault+0xe3/0x190 [ 899.567627][T15917] mm_release+0x24e/0x300 [ 899.567666][T15917] do_exit+0x898/0x2c30 [ 899.567717][T15917] ? __pfx_futex_wake_mark+0x10/0x10 [ 899.567765][T15917] ? __pfx_do_exit+0x10/0x10 [ 899.567808][T15917] ? do_raw_spin_lock+0x12c/0x2b0 [ 899.567851][T15917] ? find_held_lock+0x2b/0x80 [ 899.567879][T15917] do_group_exit+0xd3/0x2a0 [ 899.567917][T15917] get_signal+0x2673/0x26d0 [ 899.567958][T15917] ? __pfx_get_signal+0x10/0x10 [ 899.567985][T15917] ? do_futex+0x122/0x350 [ 899.568012][T15917] ? __pfx_do_futex+0x10/0x10 [ 899.568041][T15917] arch_do_signal_or_restart+0x8f/0x7a0 [ 899.568079][T15917] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 899.568123][T15917] ? rcu_is_watching+0x12/0xc0 [ 899.568152][T15917] syscall_exit_to_user_mode+0x150/0x2a0 [ 899.568192][T15917] do_syscall_64+0xda/0x230 [ 899.568233][T15917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.568258][T15917] RIP: 0033:0x7fc89f38e969 [ 899.568278][T15917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.568302][T15917] RSP: 002b:00007fc89d1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 899.568325][T15917] RAX: fffffffffffffe00 RBX: 00007fc89f5b5fa8 RCX: 00007fc89f38e969 [ 899.568342][T15917] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc89f5b5fa8 [ 899.568358][T15917] RBP: 00007fc89f5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 899.568373][T15917] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc89f5b5fac [ 899.568388][T15917] R13: 0000000000000000 R14: 00007fff52d24d70 R15: 00007fff52d24e58 [ 899.568418][T15917] [ 901.033846][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 901.042402][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.052341][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 901.058986][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.062363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 901.062435][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 901.065755][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 901.089259][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 903.232034][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 903.345356][T15961] team_slave_0 (unregistering): left promiscuous mode [ 903.362421][T15961] team_slave_0 (unregistering): left allmulticast mode [ 903.427281][T15961] team0: Port device team_slave_0 removed [ 903.554023][T15958] zswap: compressor not available [ 904.679781][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2087'. [ 904.898454][T15988] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 905.701678][T16015] netlink: 'syz.4.2092': attribute type 11 has an invalid length. [ 905.780418][T16015] netlink: 'syz.4.2092': attribute type 11 has an invalid length. [ 905.789083][T16015] netlink: 'syz.4.2092': attribute type 11 has an invalid length. [ 906.250866][T16019] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 906.262680][T16019] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 906.272385][T16019] memcg:ffff888024d1c141 [ 906.276979][T16019] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 906.294710][T16019] page_type: f5(slab) [ 906.300309][T16019] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 906.427031][T16019] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 906.506296][T16019] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 906.546295][T16019] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 906.589622][T16019] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 906.685002][T16025] could not allocate digest TFM handle binfmt_misc [ 906.693111][T16019] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 906.704681][T16019] page dumped because: unmovable page [ 906.741503][T16019] page_owner tracks the page as allocated [ 906.853041][T16019] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 906.875201][T16019] post_alloc_hook+0x181/0x1b0 [ 906.880203][T16019] get_page_from_freelist+0x135c/0x3920 [ 906.886541][T16019] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 906.892564][T16019] alloc_pages_mpol+0x1fb/0x550 [ 906.901791][T16019] new_slab+0x244/0x340 [ 906.914782][T16019] ___slab_alloc+0xd9c/0x1940 [ 906.920734][T16019] __slab_alloc.constprop.0+0x56/0xb0 [ 906.926387][T16019] __kmalloc_cache_noprof+0xfb/0x3e0 [ 906.932955][T16019] ipv6_add_dev+0x6b7/0x15f0 [ 906.944042][T16019] addrconf_notify+0x53e/0x19e0 [ 906.955329][T16019] notifier_call_chain+0xbc/0x410 [ 906.962207][T16019] call_netdevice_notifiers_info+0xbe/0x140 [ 906.972547][T16019] register_netdevice+0x182e/0x2270 [ 906.978121][T16019] wg_newlink+0x3a7/0x780 [ 906.982646][T16019] rtnl_newlink+0xc42/0x2000 [ 907.076436][T16019] rtnetlink_rcv_msg+0x95b/0xe90 [ 907.081584][T16019] page last free pid 10565 tgid 10563 stack trace: [ 907.151236][T16019] __free_frozen_pages+0x69d/0xff0 [ 907.173662][T16019] __put_partials+0x16d/0x1c0 [ 907.187072][T16019] qlist_free_all+0x4e/0x120 [ 907.200034][T16019] kasan_quarantine_reduce+0x195/0x1e0 [ 907.217596][T16019] __kasan_slab_alloc+0x69/0x90 [ 907.228133][T16019] __kmalloc_noprof+0x1d4/0x510 [ 907.233281][T16019] ops_init+0x77/0x5f0 [ 907.237793][T16019] setup_net+0x21e/0x850 [ 907.243275][T16019] copy_net_ns+0x2a6/0x5f0 [ 907.247970][T16019] create_new_namespaces+0x3ea/0xad0 [ 907.253776][T16019] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 907.259600][T16019] ksys_unshare+0x45b/0xa40 [ 907.333706][T16019] __x64_sys_unshare+0x31/0x40 [ 907.338936][T16019] do_syscall_64+0xcd/0x230 [ 907.343619][T16019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.629613][ T30] audit: type=1800 audit(4294967472.935:95): pid=16059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2098" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 909.430897][T16076] netlink: 'syz.2.2104': attribute type 11 has an invalid length. [ 909.526556][T16076] netlink: 'syz.2.2104': attribute type 11 has an invalid length. [ 909.628337][T16076] netlink: 'syz.2.2104': attribute type 11 has an invalid length. [ 910.175852][T16076] could not allocate digest TFM handle binfmt_misc [ 910.319908][T16077] could not allocate digest TFM handle binfmt_misc [ 911.510599][T16102] ima: policy update failed [ 911.566258][ T30] audit: type=1802 audit(4294967475.825:96): pid=16102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2107" res=0 errno=0 [ 912.258495][T16102] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 912.273967][T16102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 912.305181][T16102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 912.326811][T16102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 912.345022][T16102] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 913.258227][T16118] zswap: compressor not available [ 913.686514][T15003] Bluetooth: hci0: command 0x0c1a tx timeout [ 913.817342][T16069] Process accounting paused [ 914.011576][T16139] netlink: 'syz.2.2114': attribute type 11 has an invalid length. [ 914.053761][T16139] netlink: 'syz.2.2114': attribute type 11 has an invalid length. [ 914.063200][T16138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2116'. [ 914.082811][T16139] netlink: 'syz.2.2114': attribute type 11 has an invalid length. [ 914.326275][T15003] Bluetooth: hci3: command 0x0c1a tx timeout [ 914.326299][T15004] Bluetooth: hci2: command 0x0c1a tx timeout [ 914.406378][T15004] Bluetooth: hci5: command 0x0c1a tx timeout [ 914.406485][T15003] Bluetooth: hci4: command 0x0406 tx timeout [ 914.766404][T16139] could not allocate digest TFM handle binfmt_misc [ 915.870802][T16147] ubi: mtd0 is already attached to ubi0 [ 917.728929][T16197] netlink: 'syz.2.2129': attribute type 11 has an invalid length. [ 917.785407][T16197] netlink: 'syz.2.2129': attribute type 11 has an invalid length. [ 917.816792][T16197] netlink: 'syz.2.2129': attribute type 11 has an invalid length. [ 918.503676][T16197] could not allocate digest TFM handle binfmt_misc [ 920.622601][T16231] FAULT_INJECTION: forcing a failure. [ 920.622601][T16231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.676610][T16231] CPU: 1 UID: 0 PID: 16231 Comm: syz.5.2138 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 920.676662][T16231] Tainted: [U]=USER [ 920.676673][T16231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 920.676691][T16231] Call Trace: [ 920.676704][T16231] [ 920.676716][T16231] dump_stack_lvl+0x16c/0x1f0 [ 920.676784][T16231] should_fail_ex+0x512/0x640 [ 920.676840][T16231] _copy_from_user+0x2e/0xd0 [ 920.676895][T16231] vmci_host_do_alloc_queuepair.constprop.0+0x28d/0x3d0 [ 920.676937][T16231] ? __pfx_vmci_host_do_alloc_queuepair.constprop.0+0x10/0x10 [ 920.676979][T16231] ? kasan_quarantine_put+0x10a/0x240 [ 920.677015][T16231] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.677070][T16231] ? find_held_lock+0x2b/0x80 [ 920.677115][T16231] ? tomoyo_path_number_perm+0x18d/0x580 [ 920.677169][T16231] vmci_host_unlocked_ioctl+0x51e/0x2010 [ 920.677203][T16231] ? do_vfs_ioctl+0x512/0x1990 [ 920.677263][T16231] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 920.677327][T16231] ? find_held_lock+0x2b/0x80 [ 920.677357][T16231] ? hook_file_ioctl_common+0x145/0x410 [ 920.677405][T16231] ? __fget_files+0x20e/0x3c0 [ 920.677458][T16231] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 920.677495][T16231] __x64_sys_ioctl+0x190/0x200 [ 920.677545][T16231] do_syscall_64+0xcd/0x230 [ 920.677599][T16231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.677633][T16231] RIP: 0033:0x7fc89f38e969 [ 920.677659][T16231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.677692][T16231] RSP: 002b:00007fc89d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.677731][T16231] RAX: ffffffffffffffda RBX: 00007fc89f5b5fa0 RCX: 00007fc89f38e969 [ 920.677754][T16231] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000004 [ 920.677773][T16231] RBP: 00007fc89d1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 920.677794][T16231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.677814][T16231] R13: 0000000000000000 R14: 00007fc89f5b5fa0 R15: 00007fff52d24e58 [ 920.677857][T16231] [ 922.771520][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2137'. [ 924.104403][T16281] ima: policy update failed [ 924.126874][ T30] audit: type=1802 audit(4294967488.435:97): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2149" res=0 errno=0 [ 924.932448][T16281] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 924.967576][T16281] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 924.974303][T16281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 924.999532][T16281] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 925.005773][T16281] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 926.115245][T16322] netlink: 'syz.4.2163': attribute type 19 has an invalid length. [ 926.154020][T16322] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2163'. [ 926.326173][T15003] Bluetooth: hci0: command 0x0c1a tx timeout [ 926.366174][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'. [ 926.426955][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.434579][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.447498][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.454982][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.461840][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.469351][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.477647][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.485111][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.493296][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.501808][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.509380][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.517159][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.523983][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.531664][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.539766][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.547483][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.554213][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.561872][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.569005][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.576656][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.587335][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.594795][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.601752][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.610246][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.617306][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.624753][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.631700][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.639844][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.647047][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.654533][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.661457][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.669146][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.675899][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.683980][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.690976][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.698573][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.707908][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.716295][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.723063][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.736124][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.742939][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.750526][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.757375][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.764822][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.771656][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.779217][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.786413][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.793857][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.800701][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.808240][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.815765][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.823340][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.830124][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.837669][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.844407][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.851929][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.858769][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.866330][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.873061][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.880615][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.887871][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.895328][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.902230][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.909739][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 926.917360][T15003] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 926.924880][T15003] Bluetooth: hci5: Invalid handle: 0xe200 > 0x0eff [ 927.046432][T15004] Bluetooth: hci5: command 0x0c1a tx timeout [ 927.046504][T15000] Bluetooth: hci3: command 0x0c1a tx timeout [ 927.053907][T15004] Bluetooth: hci2: command 0x0c1a tx timeout [ 927.059449][T15003] Bluetooth: hci4: command 0x0406 tx timeout [ 928.250152][T16347] netlink: 'syz.4.2166': attribute type 11 has an invalid length. [ 928.259614][T16347] netlink: 'syz.4.2166': attribute type 11 has an invalid length. [ 928.267882][T16347] netlink: 'syz.4.2166': attribute type 11 has an invalid length. [ 928.843392][T16347] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 928.866085][T16347] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 928.876331][T16347] memcg:ffff888024d1c141 [ 928.886456][T16347] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 928.926815][T16347] page_type: f5(slab) [ 928.930978][T16347] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 928.970242][T16347] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 928.979349][T16347] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 928.988552][T16347] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 929.001200][T16347] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 929.011512][T16347] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 929.026956][T16347] page dumped because: unmovable page [ 929.034634][T16347] page_owner tracks the page as allocated [ 929.226250][T16347] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 929.253853][T16347] post_alloc_hook+0x181/0x1b0 [ 929.264016][T16347] get_page_from_freelist+0x135c/0x3920 [ 929.276200][T16347] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 929.292409][T16347] alloc_pages_mpol+0x1fb/0x550 [ 929.382264][T16349] could not allocate digest TFM handle binfmt_misc [ 929.397460][T16347] new_slab+0x244/0x340 [ 929.409688][T16347] ___slab_alloc+0xd9c/0x1940 [ 929.422724][T16347] __slab_alloc.constprop.0+0x56/0xb0 [ 929.438784][T16347] __kmalloc_cache_noprof+0xfb/0x3e0 [ 929.547826][T16347] ipv6_add_dev+0x6b7/0x15f0 [ 929.553137][T16347] addrconf_notify+0x53e/0x19e0 [ 929.558725][T16347] notifier_call_chain+0xbc/0x410 [ 929.564016][T16347] call_netdevice_notifiers_info+0xbe/0x140 [ 929.570543][T16347] register_netdevice+0x182e/0x2270 [ 929.576899][T16347] wg_newlink+0x3a7/0x780 [ 929.581487][T16347] rtnl_newlink+0xc42/0x2000 [ 929.586927][T16347] rtnetlink_rcv_msg+0x95b/0xe90 [ 929.593120][T16347] page last free pid 10565 tgid 10563 stack trace: [ 929.601325][T16347] __free_frozen_pages+0x69d/0xff0 [ 929.756281][T16347] __put_partials+0x16d/0x1c0 [ 929.761164][T16347] qlist_free_all+0x4e/0x120 [ 929.765829][T16347] kasan_quarantine_reduce+0x195/0x1e0 [ 929.773462][T16347] __kasan_slab_alloc+0x69/0x90 [ 929.783633][T16347] __kmalloc_noprof+0x1d4/0x510 [ 929.817052][T16347] ops_init+0x77/0x5f0 [ 929.824302][T16347] setup_net+0x21e/0x850 [ 929.834478][T16347] copy_net_ns+0x2a6/0x5f0 [ 929.845164][T16347] create_new_namespaces+0x3ea/0xad0 [ 929.867778][T16347] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 929.875238][T16347] ksys_unshare+0x45b/0xa40 [ 929.906354][T16347] __x64_sys_unshare+0x31/0x40 [ 929.929260][T16347] do_syscall_64+0xcd/0x230 [ 929.933839][T16347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.284231][T16359] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2168'. [ 930.390794][T16362] FAULT_INJECTION: forcing a failure. [ 930.390794][T16362] name failslab, interval 1, probability 0, space 0, times 0 [ 930.404701][T16362] CPU: 1 UID: 0 PID: 16362 Comm: syz.5.2168 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 930.404754][T16362] Tainted: [U]=USER [ 930.404765][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.404785][T16362] Call Trace: [ 930.404797][T16362] [ 930.404809][T16362] dump_stack_lvl+0x16c/0x1f0 [ 930.404864][T16362] should_fail_ex+0x512/0x640 [ 930.404913][T16362] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 930.404981][T16362] should_failslab+0xc2/0x120 [ 930.405023][T16362] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 930.405062][T16362] ? getname_flags.part.0+0x4c/0x550 [ 930.405114][T16362] getname_flags.part.0+0x4c/0x550 [ 930.405165][T16362] getname_flags+0x93/0xf0 [ 930.405217][T16362] do_sys_openat2+0xb8/0x1d0 [ 930.405263][T16362] ? __pfx_do_sys_openat2+0x10/0x10 [ 930.405310][T16362] ? __pfx_aa_get_newest_label+0x10/0x10 [ 930.405359][T16362] __x64_sys_openat+0x174/0x210 [ 930.405406][T16362] ? __pfx___x64_sys_openat+0x10/0x10 [ 930.405455][T16362] ? rcu_is_watching+0x12/0xc0 [ 930.405498][T16362] do_syscall_64+0xcd/0x230 [ 930.405552][T16362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.405586][T16362] RIP: 0033:0x7fc89f38e969 [ 930.405611][T16362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.405643][T16362] RSP: 002b:00007fc89d1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 930.405674][T16362] RAX: ffffffffffffffda RBX: 00007fc89f5b6080 RCX: 00007fc89f38e969 [ 930.405695][T16362] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 930.405716][T16362] RBP: 00007fc89f410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 930.405736][T16362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.405756][T16362] R13: 0000000000000000 R14: 00007fc89f5b6080 R15: 00007fff52d24e58 [ 930.405797][T16362] [ 933.742546][T15004] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 933.777819][T15004] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 934.007011][T16399] netlink: 'syz.2.2179': attribute type 11 has an invalid length. [ 934.014918][T16399] netlink: 'syz.2.2179': attribute type 11 has an invalid length. [ 934.040574][T16399] netlink: 'syz.2.2179': attribute type 11 has an invalid length. [ 934.846253][T16398] could not allocate digest TFM handle binfmt_misc [ 940.837821][T16487] openvswitch: netlink: Message has 4104 unknown bytes. [ 941.334000][T16490] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 941.476362][T16490] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 941.613929][T16490] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 941.933476][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.941024][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.818057][T16504] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 942.877791][T16504] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 943.043626][T15002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 943.055154][T15002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 943.074233][T15002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 943.083925][T15002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 943.093790][T15002] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 943.193459][T15852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.409375][T15852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.701872][T15852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.269986][T15852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.206675][T15004] Bluetooth: hci1: command tx timeout [ 945.548196][T15852] team0: left allmulticast mode [ 945.577302][T15852] team_slave_1: left allmulticast mode [ 945.583277][T15852] team0: left promiscuous mode [ 945.598836][T15852] team_slave_1: left promiscuous mode [ 945.619019][T15852] bridge0: port 3(team0) entered disabled state [ 945.640176][T16512] Process accounting resumed [ 945.757842][T15852] bridge_slave_1: left allmulticast mode [ 945.763660][T15852] bridge_slave_1: left promiscuous mode [ 945.771477][T15852] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.851570][T15852] bridge_slave_0: left allmulticast mode [ 945.866348][T15852] bridge_slave_0: left promiscuous mode [ 945.896526][T15852] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.972289][T16534] netlink: 'syz.4.2210': attribute type 11 has an invalid length. [ 945.984656][T16534] netlink: 'syz.4.2210': attribute type 11 has an invalid length. [ 946.013340][T16534] netlink: 'syz.4.2210': attribute type 11 has an invalid length. [ 946.876219][T16534] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 946.896363][T16534] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 946.974932][T16534] memcg:ffff888024d1c141 [ 947.070438][T16534] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 947.078444][T16534] page_type: f5(slab) [ 947.082626][T16534] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 947.092002][T16534] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 947.106556][T16534] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 947.161527][T16534] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 947.171801][T16534] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 947.181941][T16534] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 947.192484][T16534] page dumped because: unmovable page [ 947.202687][T16534] page_owner tracks the page as allocated [ 947.212859][T16534] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 947.286291][T15004] Bluetooth: hci1: command tx timeout [ 947.293891][T16534] post_alloc_hook+0x181/0x1b0 [ 947.299167][T16534] get_page_from_freelist+0x135c/0x3920 [ 947.345727][T16534] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 947.352112][T16534] alloc_pages_mpol+0x1fb/0x550 [ 947.357370][T16534] new_slab+0x244/0x340 [ 947.361595][T16534] ___slab_alloc+0xd9c/0x1940 [ 947.439138][T16535] could not allocate digest TFM handle binfmt_misc [ 947.476304][T16534] __slab_alloc.constprop.0+0x56/0xb0 [ 947.486177][T16534] __kmalloc_cache_noprof+0xfb/0x3e0 [ 947.496405][T16534] ipv6_add_dev+0x6b7/0x15f0 [ 947.503259][T16534] addrconf_notify+0x53e/0x19e0 [ 947.516228][T16534] notifier_call_chain+0xbc/0x410 [ 947.531675][T16534] call_netdevice_notifiers_info+0xbe/0x140 [ 947.546320][T16534] register_netdevice+0x182e/0x2270 [ 947.558570][T16534] wg_newlink+0x3a7/0x780 [ 947.563004][T16534] rtnl_newlink+0xc42/0x2000 [ 947.579245][T16534] rtnetlink_rcv_msg+0x95b/0xe90 [ 947.584309][T16534] page last free pid 10565 tgid 10563 stack trace: [ 947.591099][T16534] __free_frozen_pages+0x69d/0xff0 [ 947.596788][T16534] __put_partials+0x16d/0x1c0 [ 947.602295][T16534] qlist_free_all+0x4e/0x120 [ 947.607199][T16534] kasan_quarantine_reduce+0x195/0x1e0 [ 947.612733][T16534] __kasan_slab_alloc+0x69/0x90 [ 947.618027][T16534] __kmalloc_noprof+0x1d4/0x510 [ 947.677442][T16534] ops_init+0x77/0x5f0 [ 947.681589][T16534] setup_net+0x21e/0x850 [ 947.685867][T16534] copy_net_ns+0x2a6/0x5f0 [ 947.740646][T16534] create_new_namespaces+0x3ea/0xad0 [ 947.749870][T16534] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 947.765127][T16534] ksys_unshare+0x45b/0xa40 [ 947.786598][T16534] __x64_sys_unshare+0x31/0x40 [ 947.791454][T16534] do_syscall_64+0xcd/0x230 [ 947.803874][T16534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.765685][T15852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.804727][T15852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.858294][T15852] bond0 (unregistering): Released all slaves [ 948.908545][T16563] ima: policy update failed [ 948.913324][ T30] audit: type=1802 audit(4294967513.225:98): pid=16563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2213" res=0 errno=0 [ 949.027279][T16509] chnl_net:caif_netlink_parms(): no params data found [ 949.250046][T15852] .SR: left promiscuous mode [ 949.366392][T15004] Bluetooth: hci1: command tx timeout [ 949.523226][T15852] ovs_ÿþÿÿÿž: left promiscuous mode [ 949.947518][T16509] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.955565][T16509] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.985301][T16509] bridge_slave_0: entered allmulticast mode [ 950.004561][T16509] bridge_slave_0: entered promiscuous mode [ 950.161764][T16509] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.194301][T16587] netlink: 'syz.5.2216': attribute type 11 has an invalid length. [ 950.202324][T16587] netlink: 'syz.5.2216': attribute type 11 has an invalid length. [ 950.210278][T16587] netlink: 'syz.5.2216': attribute type 11 has an invalid length. [ 950.236910][T16509] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.290029][T16509] bridge_slave_1: entered allmulticast mode [ 950.308414][T16509] bridge_slave_1: entered promiscuous mode [ 950.814948][T16509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.858931][T16509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.276254][T16599] FAULT_INJECTION: forcing a failure. [ 951.276254][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 951.308928][T16589] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 951.326817][T16589] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 951.336368][T16599] CPU: 0 UID: 0 PID: 16599 Comm: syz.4.2218 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 951.336424][T16599] Tainted: [U]=USER [ 951.336435][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 951.336454][T16599] Call Trace: [ 951.336465][T16599] [ 951.336478][T16599] dump_stack_lvl+0x16c/0x1f0 [ 951.336534][T16599] should_fail_ex+0x512/0x640 [ 951.336572][T16599] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 951.336606][T16599] should_failslab+0xc2/0x120 [ 951.336638][T16599] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 951.336668][T16599] ? mas_alloc_nodes+0x18b/0x8b0 [ 951.336707][T16599] mas_alloc_nodes+0x18b/0x8b0 [ 951.336747][T16599] mas_node_count_gfp+0x105/0x130 [ 951.336784][T16599] mas_preallocate+0x53e/0xcd0 [ 951.336816][T16599] ? __pfx_mas_preallocate+0x10/0x10 [ 951.336861][T16599] ? anon_vma_name+0x75/0x100 [ 951.336900][T16599] __split_vma+0x33b/0x1030 [ 951.336933][T16599] ? __pfx___split_vma+0x10/0x10 [ 951.336975][T16599] vms_gather_munmap_vmas+0x392/0x1310 [ 951.337016][T16599] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 951.337049][T16599] ? mas_walk+0x6a6/0x910 [ 951.337094][T16599] __mmap_region+0x314/0x27c0 [ 951.337124][T16599] ? finish_task_switch.isra.0+0x221/0xc10 [ 951.337154][T16599] ? __pfx___mmap_region+0x10/0x10 [ 951.337183][T16599] ? trace_sched_exit_tp+0xde/0x130 [ 951.337236][T16599] ? __pfx___schedule+0x10/0x10 [ 951.337304][T16599] ? trace_cap_capable+0x18d/0x200 [ 951.337333][T16599] ? cap_capable+0xb3/0x250 [ 951.337364][T16599] mmap_region+0x1ab/0x3f0 [ 951.337400][T16599] do_mmap+0xd8e/0x11b0 [ 951.337445][T16599] ? __pfx_do_mmap+0x10/0x10 [ 951.337484][T16599] ? __pfx_down_write_killable+0x10/0x10 [ 951.337516][T16599] vm_mmap_pgoff+0x281/0x450 [ 951.337560][T16599] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 951.337596][T16599] ? __pfx___do_sys_newfstat+0x10/0x10 [ 951.337637][T16599] ? __x64_sys_futex+0x1e0/0x4c0 [ 951.337664][T16599] ? __x64_sys_futex+0x1e9/0x4c0 [ 951.337697][T16599] ksys_mmap_pgoff+0x7d/0x5c0 [ 951.337735][T16599] ? syscall_user_dispatch+0x78/0x140 [ 951.337776][T16599] __x64_sys_mmap+0x125/0x190 [ 951.337805][T16599] do_syscall_64+0xcd/0x230 [ 951.337847][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.337872][T16599] RIP: 0033:0x7f8ada98e969 [ 951.337893][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.337917][T16599] RSP: 002b:00007f8adb81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 951.337940][T16599] RAX: ffffffffffffffda RBX: 00007f8adabb5fa0 RCX: 00007f8ada98e969 [ 951.337957][T16599] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 951.337973][T16599] RBP: 00007f8adaa10ab1 R08: fffffffffffffffa R09: 0000000000008000 [ 951.337989][T16599] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 951.338013][T16599] R13: 0000000000000000 R14: 00007f8adabb5fa0 R15: 00007ffe2a8254a8 [ 951.338045][T16599] [ 951.406326][T16589] memcg:ffff888024d1c141 [ 951.406352][T16589] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 951.406385][T16589] page_type: f5(slab) [ 951.406416][T16589] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 951.406451][T16589] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 951.406485][T16589] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 951.406518][T16589] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 951.406553][T16589] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 951.406586][T16589] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 951.406607][T16589] page dumped because: unmovable page [ 951.406624][T16589] page_owner tracks the page as allocated [ 951.406638][T16589] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 951.406699][T16589] post_alloc_hook+0x181/0x1b0 [ 951.406738][T16589] get_page_from_freelist+0x135c/0x3920 [ 951.406777][T16589] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 951.406818][T16589] alloc_pages_mpol+0x1fb/0x550 [ 951.406857][T16589] new_slab+0x244/0x340 [ 951.406885][T16589] ___slab_alloc+0xd9c/0x1940 [ 951.406916][T16589] __slab_alloc.constprop.0+0x56/0xb0 [ 951.406948][T16589] __kmalloc_cache_noprof+0xfb/0x3e0 [ 951.406982][T16589] ipv6_add_dev+0x6b7/0x15f0 [ 951.407018][T16589] addrconf_notify+0x53e/0x19e0 [ 951.407077][T16589] notifier_call_chain+0xbc/0x410 [ 951.407112][T16589] call_netdevice_notifiers_info+0xbe/0x140 [ 951.407165][T16589] register_netdevice+0x182e/0x2270 [ 951.407209][T16589] wg_newlink+0x3a7/0x780 [ 951.407246][T16589] rtnl_newlink+0xc42/0x2000 [ 951.407299][T16589] rtnetlink_rcv_msg+0x95b/0xe90 [ 951.407343][T16589] page last free pid 10565 tgid 10563 stack trace: [ 951.407363][T16589] __free_frozen_pages+0x69d/0xff0 [ 951.407396][T16589] __put_partials+0x16d/0x1c0 [ 951.407429][T16589] qlist_free_all+0x4e/0x120 [ 951.407462][T16589] kasan_quarantine_reduce+0x195/0x1e0 [ 951.407498][T16589] __kasan_slab_alloc+0x69/0x90 [ 951.407536][T16589] __kmalloc_noprof+0x1d4/0x510 [ 951.407571][T16589] ops_init+0x77/0x5f0 [ 951.407611][T16589] setup_net+0x21e/0x850 [ 951.407652][T16589] copy_net_ns+0x2a6/0x5f0 [ 951.407699][T16589] create_new_namespaces+0x3ea/0xad0 [ 951.407735][T16589] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 951.407772][T16589] ksys_unshare+0x45b/0xa40 [ 951.407817][T16589] __x64_sys_unshare+0x31/0x40 [ 951.407861][T16589] do_syscall_64+0xcd/0x230 [ 951.407911][T16589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.446265][T15004] Bluetooth: hci1: command tx timeout [ 951.674142][T16509] team0: Port device team_slave_0 added [ 951.822466][T16587] could not allocate digest TFM handle binfmt_misc [ 952.165090][T16509] team0: Port device team_slave_1 added [ 952.623812][T16509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.623833][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.623874][T16509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.625606][T16509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.625623][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.625665][T16509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.730123][T15852] hsr_slave_0: left promiscuous mode [ 952.732608][T15852] hsr_slave_1: left promiscuous mode [ 952.838119][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 952.840911][T15852] veth1_macvtap: left promiscuous mode [ 953.936383][T15852] veth0_macvtap: left promiscuous mode [ 955.825486][T15852] team0 (unregistering): Port device team_slave_1 removed [ 956.291367][T16639] ima: policy update failed [ 956.306972][ T30] audit: type=1802 audit(4294967520.625:99): pid=16639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2222" res=0 errno=0 [ 957.872852][T16653] netlink: 'syz.2.2224': attribute type 11 has an invalid length. [ 957.880917][T16653] netlink: 'syz.2.2224': attribute type 11 has an invalid length. [ 957.896028][T16653] netlink: 'syz.2.2224': attribute type 11 has an invalid length. [ 957.982368][T16509] hsr_slave_0: entered promiscuous mode [ 958.038154][T16509] hsr_slave_1: entered promiscuous mode [ 958.433552][T16653] could not allocate digest TFM handle binfmt_misc [ 959.445901][T16667] zswap: compressor not available [ 959.778362][T16509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 959.821042][T16509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 959.893717][T16509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 959.949223][T16509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 960.374631][T16509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.458805][T16509] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.515947][T15852] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.523338][T15852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.570210][T16689] zswap: compressor not available [ 960.645894][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.653145][ T9154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.393862][T16723] zswap: compressor not available [ 962.451075][T16509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.723864][T16509] veth0_vlan: entered promiscuous mode [ 963.739598][T16509] veth1_vlan: entered promiscuous mode [ 963.781115][T16509] veth0_macvtap: entered promiscuous mode [ 963.805466][T16509] veth1_macvtap: entered promiscuous mode [ 963.948622][T16509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.013199][T16509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.087090][T16509] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.126343][T16509] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.156844][T16509] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.186283][T16509] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.705113][ T8189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.745733][ T8189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.180388][T16764] zswap: compressor not available [ 965.352604][T16772] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 965.373328][T16772] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 965.385900][T16772] memcg:ffff888024d1c141 [ 965.391076][T16772] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 965.411332][ T9154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.437690][T16772] page_type: f5(slab) [ 965.459783][T16772] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 965.488490][ T9154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.498563][T16772] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 965.527199][T16772] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 965.537363][T16772] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 965.564132][T16772] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 965.578652][T16772] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 965.587853][T16772] page dumped because: unmovable page [ 965.593291][T16772] page_owner tracks the page as allocated [ 965.619437][T16772] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 965.643331][T16772] post_alloc_hook+0x181/0x1b0 [ 965.648578][T16772] get_page_from_freelist+0x135c/0x3920 [ 965.654378][T16772] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 965.661199][T16772] alloc_pages_mpol+0x1fb/0x550 [ 965.666694][T16772] new_slab+0x244/0x340 [ 965.671062][T16772] ___slab_alloc+0xd9c/0x1940 [ 965.675928][T16772] __slab_alloc.constprop.0+0x56/0xb0 [ 965.962679][T16772] __kmalloc_cache_noprof+0xfb/0x3e0 [ 965.980465][T16772] ipv6_add_dev+0x6b7/0x15f0 [ 966.013227][T16772] addrconf_notify+0x53e/0x19e0 [ 966.027598][T16770] could not allocate digest TFM handle binfmt_misc [ 966.067678][T16772] notifier_call_chain+0xbc/0x410 [ 966.078562][T16772] call_netdevice_notifiers_info+0xbe/0x140 [ 966.084719][T16772] register_netdevice+0x182e/0x2270 [ 966.090314][T16772] wg_newlink+0x3a7/0x780 [ 966.094791][T16772] rtnl_newlink+0xc42/0x2000 [ 966.099718][T16772] rtnetlink_rcv_msg+0x95b/0xe90 [ 966.104758][T16772] page last free pid 10565 tgid 10563 stack trace: [ 966.112280][T16772] __free_frozen_pages+0x69d/0xff0 [ 966.117632][T16772] __put_partials+0x16d/0x1c0 [ 966.122398][T16772] qlist_free_all+0x4e/0x120 [ 966.127170][T16772] kasan_quarantine_reduce+0x195/0x1e0 [ 966.133148][T16772] __kasan_slab_alloc+0x69/0x90 [ 966.138202][T16772] __kmalloc_noprof+0x1d4/0x510 [ 966.143179][T16772] ops_init+0x77/0x5f0 [ 966.147380][T16772] setup_net+0x21e/0x850 [ 966.151712][T16772] copy_net_ns+0x2a6/0x5f0 [ 966.156423][T16772] create_new_namespaces+0x3ea/0xad0 [ 966.161861][T16772] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 966.168313][T16772] ksys_unshare+0x45b/0xa40 [ 966.173302][T16772] __x64_sys_unshare+0x31/0x40 [ 966.178268][T16772] do_syscall_64+0xcd/0x230 [ 966.182867][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.105708][T16801] netlink: 'syz.2.2250': attribute type 11 has an invalid length. [ 967.134062][T16801] netlink: 'syz.2.2250': attribute type 11 has an invalid length. [ 967.204991][T16801] netlink: 'syz.2.2250': attribute type 11 has an invalid length. [ 968.259982][T16797] could not allocate digest TFM handle binfmt_misc [ 968.548508][T16813] zswap: compressor not available [ 972.614241][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f602800: rx timeout, send abort [ 972.623102][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f602800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 972.976284][T16893] netlink: 'syz.2.2253': attribute type 11 has an invalid length. [ 972.984202][T16893] netlink: 'syz.2.2253': attribute type 11 has an invalid length. [ 973.087011][T16893] netlink: 'syz.2.2253': attribute type 11 has an invalid length. [ 973.907831][T16893] could not allocate digest TFM handle binfmt_misc [ 974.086230][T16900] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 974.095752][T16900] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 974.196317][T16900] memcg:ffff888024d1c141 [ 974.200649][T16900] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 974.219252][T16900] page_type: f5(slab) [ 974.243591][T16900] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 974.266030][T16900] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 974.275448][T16900] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 974.286699][T16900] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 974.299976][T16900] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 974.312484][T16900] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 974.322704][T16900] page dumped because: unmovable page [ 974.375473][T16900] page_owner tracks the page as allocated [ 974.384778][T16900] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 974.408146][T16900] post_alloc_hook+0x181/0x1b0 [ 974.413106][T16900] get_page_from_freelist+0x135c/0x3920 [ 974.421460][T16900] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 974.428624][T16900] alloc_pages_mpol+0x1fb/0x550 [ 974.441666][T16900] new_slab+0x244/0x340 [ 974.446286][T16900] ___slab_alloc+0xd9c/0x1940 [ 974.451123][T16900] __slab_alloc.constprop.0+0x56/0xb0 [ 974.461445][T16900] __kmalloc_cache_noprof+0xfb/0x3e0 [ 974.470763][T16900] ipv6_add_dev+0x6b7/0x15f0 [ 974.475475][T16900] addrconf_notify+0x53e/0x19e0 [ 974.491716][T16900] notifier_call_chain+0xbc/0x410 [ 974.500620][T16900] call_netdevice_notifiers_info+0xbe/0x140 [ 974.570891][T16900] register_netdevice+0x182e/0x2270 [ 974.596246][T16900] wg_newlink+0x3a7/0x780 [ 974.600797][T16900] rtnl_newlink+0xc42/0x2000 [ 974.607518][T16900] rtnetlink_rcv_msg+0x95b/0xe90 [ 974.612722][T16900] page last free pid 10565 tgid 10563 stack trace: [ 974.618848][T16902] could not allocate digest TFM handle binfmt_misc [ 974.620694][T16900] __free_frozen_pages+0x69d/0xff0 [ 974.661686][T16900] __put_partials+0x16d/0x1c0 [ 974.676172][T16900] qlist_free_all+0x4e/0x120 [ 974.681559][T16900] kasan_quarantine_reduce+0x195/0x1e0 [ 974.697958][T16900] __kasan_slab_alloc+0x69/0x90 [ 974.703082][T16900] __kmalloc_noprof+0x1d4/0x510 [ 974.712815][T16900] ops_init+0x77/0x5f0 [ 974.719635][T16900] setup_net+0x21e/0x850 [ 974.731901][T16900] copy_net_ns+0x2a6/0x5f0 [ 974.745931][T16900] create_new_namespaces+0x3ea/0xad0 [ 974.761343][T16900] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 974.780336][T16900] ksys_unshare+0x45b/0xa40 [ 974.790462][T16900] __x64_sys_unshare+0x31/0x40 [ 974.814177][T16900] do_syscall_64+0xcd/0x230 [ 974.833992][T16900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.036191][T16919] zswap: compressor not available [ 976.753860][T16895] Process accounting paused [ 976.781213][T16950] Unable to find swap-space signature [ 976.846706][T16950] Unable to find swap-space signature [ 976.852752][T16950] Unable to find swap-space signature [ 976.896738][T16950] Unable to find swap-space signature [ 976.902931][T16950] Unable to find swap-space signature [ 976.926246][T16950] Unable to find swap-space signature [ 976.959566][T16950] Unable to find swap-space signature [ 976.977148][T16950] Unable to find swap-space signature [ 976.983674][T16950] Unable to find swap-space signature [ 977.016942][T16950] Unable to find swap-space signature [ 977.023004][T16950] Unable to find swap-space signature [ 977.066935][T16950] Unable to find swap-space signature [ 977.072922][T16950] Unable to find swap-space signature [ 977.171680][T16950] Unable to find swap-space signature [ 977.256464][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2264'. [ 977.289342][T16950] Unable to find swap-space signature [ 977.295349][T16950] Unable to find swap-space signature [ 977.346974][T16950] Unable to find swap-space signature [ 977.356763][T16950] Unable to find swap-space signature [ 977.390346][T16950] Unable to find swap-space signature [ 977.437575][T16950] Unable to find swap-space signature [ 979.380061][T16999] netlink: 'syz.6.2272': attribute type 11 has an invalid length. [ 979.399216][T16999] netlink: 'syz.6.2272': attribute type 11 has an invalid length. [ 979.409854][T16999] netlink: 'syz.6.2272': attribute type 11 has an invalid length. [ 979.650391][T16999] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 979.660268][T16999] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 979.669234][T16999] memcg:ffff888024d1c141 [ 979.673718][T16999] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 979.682826][T16999] page_type: f5(slab) [ 979.688521][T16999] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 979.737655][T16999] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 979.749343][T16999] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 979.760171][T16999] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 979.771320][T16999] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 979.781604][T16999] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 979.791105][T16999] page dumped because: unmovable page [ 979.818280][T16999] page_owner tracks the page as allocated [ 979.827225][T16999] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 979.906194][T16999] post_alloc_hook+0x181/0x1b0 [ 979.911068][T16999] get_page_from_freelist+0x135c/0x3920 [ 979.946357][T16999] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 979.966296][T16999] alloc_pages_mpol+0x1fb/0x550 [ 979.974972][T16999] new_slab+0x244/0x340 [ 979.980802][T16999] ___slab_alloc+0xd9c/0x1940 [ 979.986216][T16999] __slab_alloc.constprop.0+0x56/0xb0 [ 979.996062][T16999] __kmalloc_cache_noprof+0xfb/0x3e0 [ 980.008156][T16999] ipv6_add_dev+0x6b7/0x15f0 [ 980.013825][T16999] addrconf_notify+0x53e/0x19e0 [ 980.020680][T16999] notifier_call_chain+0xbc/0x410 [ 980.027395][T16999] call_netdevice_notifiers_info+0xbe/0x140 [ 980.035253][T16999] register_netdevice+0x182e/0x2270 [ 980.043696][T16999] wg_newlink+0x3a7/0x780 [ 980.049398][T16999] rtnl_newlink+0xc42/0x2000 [ 980.056205][T16999] rtnetlink_rcv_msg+0x95b/0xe90 [ 980.061515][T16999] page last free pid 10565 tgid 10563 stack trace: [ 980.068470][T16999] __free_frozen_pages+0x69d/0xff0 [ 980.073758][T16999] __put_partials+0x16d/0x1c0 [ 980.078756][T16999] qlist_free_all+0x4e/0x120 [ 980.083434][T16999] kasan_quarantine_reduce+0x195/0x1e0 [ 980.089101][T16999] __kasan_slab_alloc+0x69/0x90 [ 980.094095][T16999] __kmalloc_noprof+0x1d4/0x510 [ 980.099419][T16999] ops_init+0x77/0x5f0 [ 980.103803][T16999] setup_net+0x21e/0x850 [ 980.108371][T16999] copy_net_ns+0x2a6/0x5f0 [ 980.114898][T16999] create_new_namespaces+0x3ea/0xad0 [ 980.120325][T16999] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 980.126239][T16999] ksys_unshare+0x45b/0xa40 [ 980.130857][T16999] __x64_sys_unshare+0x31/0x40 [ 980.136663][T16999] do_syscall_64+0xcd/0x230 [ 980.141299][T16999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.163713][T16991] could not allocate digest TFM handle binfmt_misc [ 980.608228][T17013] FAULT_INJECTION: forcing a failure. [ 980.608228][T17013] name failslab, interval 1, probability 0, space 0, times 0 [ 980.696354][T17013] CPU: 1 UID: 0 PID: 17013 Comm: syz.4.2275 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 980.696408][T17013] Tainted: [U]=USER [ 980.696420][T17013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 980.696441][T17013] Call Trace: [ 980.696453][T17013] [ 980.696467][T17013] dump_stack_lvl+0x16c/0x1f0 [ 980.696526][T17013] should_fail_ex+0x512/0x640 [ 980.696575][T17013] ? __kmalloc_noprof+0xbf/0x510 [ 980.696615][T17013] ? lsm_blob_alloc+0x68/0x90 [ 980.696658][T17013] should_failslab+0xc2/0x120 [ 980.696702][T17013] __kmalloc_noprof+0xd2/0x510 [ 980.696749][T17013] lsm_blob_alloc+0x68/0x90 [ 980.696780][T17013] security_prepare_creds+0x30/0x270 [ 980.696836][T17013] prepare_creds+0x56f/0x7d0 [ 980.696890][T17013] __sys_setresgid+0x4af/0x1150 [ 980.696937][T17013] do_syscall_64+0xcd/0x230 [ 980.696995][T17013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.697030][T17013] RIP: 0033:0x7f8ada98e969 [ 980.697059][T17013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.697093][T17013] RSP: 002b:00007f8adb81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 980.697126][T17013] RAX: ffffffffffffffda RBX: 00007f8adabb5fa0 RCX: 00007f8ada98e969 [ 980.697150][T17013] RDX: 0000000000000008 RSI: 00000000800000a0 RDI: 0000000000000081 [ 980.697171][T17013] RBP: 00007f8adaa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 980.697193][T17013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.697213][T17013] R13: 0000000000000000 R14: 00007f8adabb5fa0 R15: 00007ffe2a8254a8 [ 980.697256][T17013] [ 982.289193][T17048] FAULT_INJECTION: forcing a failure. [ 982.289193][T17048] name failslab, interval 1, probability 0, space 0, times 0 [ 982.378032][T17048] CPU: 0 UID: 0 PID: 17048 Comm: syz.6.2282 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 982.378074][T17048] Tainted: [U]=USER [ 982.378083][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 982.378098][T17048] Call Trace: [ 982.378106][T17048] [ 982.378116][T17048] dump_stack_lvl+0x16c/0x1f0 [ 982.378158][T17048] should_fail_ex+0x512/0x640 [ 982.378197][T17048] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 982.378231][T17048] should_failslab+0xc2/0x120 [ 982.378264][T17048] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 982.378305][T17048] ? is_bad_inode+0xd/0x40 [ 982.378341][T17048] ? ima_d_path+0xbd/0x2a0 [ 982.378372][T17048] ima_d_path+0xbd/0x2a0 [ 982.378397][T17048] ? vfs_getxattr_alloc+0xec/0x340 [ 982.378421][T17048] ? __pfx_ima_d_path+0x10/0x10 [ 982.378453][T17048] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 982.378499][T17048] process_measurement+0x1d86/0x23e0 [ 982.378550][T17048] ? __pfx_process_measurement+0x10/0x10 [ 982.378597][T17048] ? mod_objcg_state+0x5eb/0xa50 [ 982.378655][T17048] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 982.378696][T17048] ? single_open+0x15f/0x1f0 [ 982.378729][T17048] ? inode_to_bdi+0x9e/0x160 [ 982.378768][T17048] ima_file_check+0xc5/0x110 [ 982.378808][T17048] ? __pfx_ima_file_check+0x10/0x10 [ 982.378857][T17048] security_file_post_open+0x8e/0x210 [ 982.378893][T17048] path_openat+0x147d/0x2d40 [ 982.378930][T17048] ? __pfx_path_openat+0x10/0x10 [ 982.378964][T17048] do_filp_open+0x20b/0x470 [ 982.378990][T17048] ? __pfx_do_filp_open+0x10/0x10 [ 982.379038][T17048] ? alloc_fd+0x471/0x7d0 [ 982.379086][T17048] do_sys_openat2+0x11b/0x1d0 [ 982.379121][T17048] ? __pfx_do_sys_openat2+0x10/0x10 [ 982.379169][T17048] __x64_sys_openat+0x174/0x210 [ 982.379205][T17048] ? __pfx___x64_sys_openat+0x10/0x10 [ 982.379243][T17048] ? rcu_is_watching+0x12/0xc0 [ 982.379276][T17048] do_syscall_64+0xcd/0x230 [ 982.379325][T17048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.379351][T17048] RIP: 0033:0x7fd47238e969 [ 982.379370][T17048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.379394][T17048] RSP: 002b:00007fd4732bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 982.379419][T17048] RAX: ffffffffffffffda RBX: 00007fd4725b5fa0 RCX: 00007fd47238e969 [ 982.379436][T17048] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 982.379452][T17048] RBP: 00007fd472410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 982.379468][T17048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.379483][T17048] R13: 0000000000000000 R14: 00007fd4725b5fa0 R15: 00007ffe28f77eb8 [ 982.379515][T17048] [ 985.574235][T17093] zswap: compressor not available [ 989.798891][T17165] could not allocate digest TFM handle [ 990.639317][T17180] FAULT_INJECTION: forcing a failure. [ 990.639317][T17180] name failslab, interval 1, probability 0, space 0, times 0 [ 990.726504][T17180] CPU: 1 UID: 0 PID: 17180 Comm: syz.6.2303 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 990.726573][T17180] Tainted: [U]=USER [ 990.726586][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.726606][T17180] Call Trace: [ 990.726619][T17180] [ 990.726631][T17180] dump_stack_lvl+0x16c/0x1f0 [ 990.726689][T17180] should_fail_ex+0x512/0x640 [ 990.726741][T17180] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 990.726789][T17180] should_failslab+0xc2/0x120 [ 990.726834][T17180] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 990.726882][T17180] ? apply_subsystem_event_filter+0x3df/0x1450 [ 990.726933][T17180] kstrdup+0x53/0x100 [ 990.726978][T17180] apply_subsystem_event_filter+0x3df/0x1450 [ 990.727032][T17180] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 990.727087][T17180] ? _copy_from_user+0x59/0xd0 [ 990.727147][T17180] subsystem_filter_write+0x95/0x120 [ 990.727190][T17180] vfs_write+0x25c/0x1180 [ 990.727223][T17180] ? __pfx_subsystem_filter_write+0x10/0x10 [ 990.727269][T17180] ? __pfx___mutex_lock+0x10/0x10 [ 990.727324][T17180] ? __pfx_vfs_write+0x10/0x10 [ 990.727372][T17180] ? __fget_files+0x20e/0x3c0 [ 990.727416][T17180] ksys_write+0x12a/0x240 [ 990.727451][T17180] ? __pfx_ksys_write+0x10/0x10 [ 990.727483][T17180] ? rcu_is_watching+0x12/0xc0 [ 990.727530][T17180] do_syscall_64+0xcd/0x230 [ 990.727592][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.727624][T17180] RIP: 0033:0x7fd47238e969 [ 990.727653][T17180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.727687][T17180] RSP: 002b:00007fd47329e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.727721][T17180] RAX: ffffffffffffffda RBX: 00007fd4725b6080 RCX: 00007fd47238e969 [ 990.727743][T17180] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 990.727763][T17180] RBP: 00007fd472410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 990.727783][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.727803][T17180] R13: 0000000000000000 R14: 00007fd4725b6080 R15: 00007ffe28f77eb8 [ 990.727849][T17180] [ 992.594651][T17222] zswap: compressor not available [ 992.624897][T17228] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 994.366260][T17262] netlink: 'syz.6.2317': attribute type 11 has an invalid length. [ 994.414251][T17262] netlink: 'syz.6.2317': attribute type 11 has an invalid length. [ 994.446303][T17262] netlink: 'syz.6.2317': attribute type 11 has an invalid length. [ 995.847685][T17262] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 995.919298][T17276] netlink: 'syz.4.2319': attribute type 11 has an invalid length. [ 995.928149][T17276] netlink: 'syz.4.2319': attribute type 11 has an invalid length. [ 995.943748][T17276] netlink: 'syz.4.2319': attribute type 11 has an invalid length. [ 995.976272][T17262] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 995.985016][T17262] memcg:ffff888024d1c141 [ 995.993064][T17262] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 996.007082][T17262] page_type: f5(slab) [ 996.035184][T17262] raw: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 996.044194][T17262] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 996.131400][T17262] head: 00fff00000000040 ffff88801b44b500 dead000000000122 0000000000000000 [ 996.176375][T17262] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888024d1c141 [ 996.348069][T17266] could not allocate digest TFM handle binfmt_misc [ 996.380195][T17262] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 996.396420][T17262] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 996.436151][T17262] page dumped because: unmovable page [ 996.441901][T17262] page_owner tracks the page as allocated [ 996.459016][T17262] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10536, tgid 10536 (syz-executor), ts 487651411902, free_ts 487639119584 [ 996.499740][T17262] post_alloc_hook+0x181/0x1b0 [ 996.504569][T17262] get_page_from_freelist+0x135c/0x3920 [ 996.598929][T17262] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 996.605560][T17262] alloc_pages_mpol+0x1fb/0x550 [ 996.818076][T17262] new_slab+0x244/0x340 [ 996.822979][T17262] ___slab_alloc+0xd9c/0x1940 [ 996.829239][T17262] __slab_alloc.constprop.0+0x56/0xb0 [ 996.834774][T17262] __kmalloc_cache_noprof+0xfb/0x3e0 [ 996.840236][T17262] ipv6_add_dev+0x6b7/0x15f0 [ 996.844900][T17262] addrconf_notify+0x53e/0x19e0 [ 996.850005][T17262] notifier_call_chain+0xbc/0x410 [ 996.856037][T17262] call_netdevice_notifiers_info+0xbe/0x140 [ 996.862023][T17262] register_netdevice+0x182e/0x2270 [ 996.867352][T17262] wg_newlink+0x3a7/0x780 [ 996.871744][T17262] rtnl_newlink+0xc42/0x2000 [ 996.876777][T17262] rtnetlink_rcv_msg+0x95b/0xe90 [ 996.881800][T17262] page last free pid 10565 tgid 10563 stack trace: [ 996.936286][T17262] __free_frozen_pages+0x69d/0xff0 [ 996.941627][T17262] __put_partials+0x16d/0x1c0 [ 996.968860][T17262] qlist_free_all+0x4e/0x120 [ 996.989011][T17262] kasan_quarantine_reduce+0x195/0x1e0 [ 997.129943][T17262] __kasan_slab_alloc+0x69/0x90 [ 997.161027][T17262] __kmalloc_noprof+0x1d4/0x510 [ 997.193279][T17262] ops_init+0x77/0x5f0 [ 997.199130][T17299] blk_print_req_error: 19 callbacks suppressed [ 997.199152][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.238321][T17276] could not allocate digest TFM handle binfmt_misc [ 997.271396][T17299] buffer_io_error: 19 callbacks suppressed [ 997.271416][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.324263][T17262] setup_net+0x21e/0x850 [ 997.336417][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.376168][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.414195][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.426140][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.493896][T17262] copy_net_ns+0x2a6/0x5f0 [ 997.503377][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.506287][T17262] create_new_namespaces+0x3ea/0xad0 [ 997.517908][T17262] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 997.546290][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.554618][T17262] ksys_unshare+0x45b/0xa40 [ 997.556610][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.569047][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.578957][T17299] ldm_validate_partition_table(): Disk read failed. [ 997.585874][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.598285][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.608806][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.618000][T17262] __x64_sys_unshare+0x31/0x40 [ 997.622933][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.643406][T17262] do_syscall_64+0xcd/0x230 [ 997.659159][T17262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.672306][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.704347][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.725413][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.794999][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.811558][T17299] Dev nbd0: unable to read RDB block 0 [ 997.824991][T17299] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 997.853674][T17299] Buffer I/O error on dev nbd0, logical block 0, async page read [ 997.864180][T17299] nbd0: unable to read partition table [ 997.871095][T17299] nbd0: partition table beyond EOD, truncated [ 999.493365][T17326] FAULT_INJECTION: forcing a failure. [ 999.493365][T17326] name failslab, interval 1, probability 0, space 0, times 0 [ 999.536222][T17326] CPU: 1 UID: 0 PID: 17326 Comm: syz.4.2325 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 999.536277][T17326] Tainted: [U]=USER [ 999.536288][T17326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 999.536308][T17326] Call Trace: [ 999.536319][T17326] [ 999.536331][T17326] dump_stack_lvl+0x16c/0x1f0 [ 999.536384][T17326] should_fail_ex+0x512/0x640 [ 999.536434][T17326] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 999.536475][T17326] should_failslab+0xc2/0x120 [ 999.536520][T17326] __kmalloc_cache_noprof+0x6a/0x3e0 [ 999.536558][T17326] ? nfc_allocate_device+0x15b/0x5e0 [ 999.536599][T17326] nfc_allocate_device+0x15b/0x5e0 [ 999.536629][T17326] ? __init_swait_queue_head+0xca/0x150 [ 999.536721][T17326] nci_allocate_device+0x23b/0x430 [ 999.536771][T17326] virtual_ncidev_open+0x6f/0x220 [ 999.536826][T17326] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 999.536880][T17326] misc_open+0x35d/0x420 [ 999.536914][T17326] ? __pfx_misc_open+0x10/0x10 [ 999.536947][T17326] chrdev_open+0x234/0x6a0 [ 999.536984][T17326] ? __pfx_apparmor_file_open+0x10/0x10 [ 999.537034][T17326] ? __pfx_chrdev_open+0x10/0x10 [ 999.537077][T17326] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 999.537140][T17326] do_dentry_open+0x741/0x1c10 [ 999.537178][T17326] ? __pfx_chrdev_open+0x10/0x10 [ 999.537226][T17326] vfs_open+0x82/0x3f0 [ 999.537278][T17326] path_openat+0x1e5e/0x2d40 [ 999.537329][T17326] ? __pfx_path_openat+0x10/0x10 [ 999.537376][T17326] do_filp_open+0x20b/0x470 [ 999.537411][T17326] ? __pfx_do_filp_open+0x10/0x10 [ 999.537478][T17326] ? alloc_fd+0x471/0x7d0 [ 999.537546][T17326] do_sys_openat2+0x11b/0x1d0 [ 999.537594][T17326] ? __pfx_do_sys_openat2+0x10/0x10 [ 999.537660][T17326] __x64_sys_openat+0x174/0x210 [ 999.537718][T17326] ? __pfx___x64_sys_openat+0x10/0x10 [ 999.537770][T17326] ? rcu_is_watching+0x12/0xc0 [ 999.537819][T17326] do_syscall_64+0xcd/0x230 [ 999.537877][T17326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.537913][T17326] RIP: 0033:0x7f8ada98e969 [ 999.537941][T17326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.537978][T17326] RSP: 002b:00007f8adb81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 999.538012][T17326] RAX: ffffffffffffffda RBX: 00007f8adabb5fa0 RCX: 00007f8ada98e969 [ 999.538035][T17326] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 999.538058][T17326] RBP: 00007f8adaa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 999.538079][T17326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.538101][T17326] R13: 0000000000000000 R14: 00007f8adabb5fa0 R15: 00007ffe2a8254a8 [ 999.538146][T17326] [ 1000.335063][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 1001.188519][T17351] zswap: compressor not available [ 1001.684449][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2333'. [ 1003.372732][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.379332][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.942278][T17402] Console: switching to colour VGA+ 80x25 [ 1003.968407][T17408] nfsd: Unknown parameter '^BÔ-' [ 1004.018108][T17402] ================================================================== [ 1004.018131][T17402] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1004.018186][T17402] Read of size 14 at addr ffff888025f724fe by task syz.5.2340/17402 [ 1004.018217][T17402] [ 1004.018238][T17402] CPU: 1 UID: 0 PID: 17402 Comm: syz.5.2340 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1004.018290][T17402] Tainted: [U]=USER [ 1004.018301][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1004.018322][T17402] Call Trace: [ 1004.018334][T17402] [ 1004.018347][T17402] dump_stack_lvl+0x116/0x1f0 [ 1004.018402][T17402] print_report+0xc3/0x670 [ 1004.018448][T17402] ? __virt_addr_valid+0x5e/0x590 [ 1004.018494][T17402] ? __phys_addr+0xc6/0x150 [ 1004.018540][T17402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1004.018583][T17402] kasan_report+0xe0/0x110 [ 1004.018635][T17402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1004.018687][T17402] kasan_check_range+0xef/0x1a0 [ 1004.018737][T17402] __asan_memcpy+0x23/0x60 [ 1004.018771][T17402] fbcon_prepare_logo+0xa03/0xc70 [ 1004.018825][T17402] fbcon_init+0xd77/0x1900 [ 1004.018871][T17402] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1004.018914][T17402] visual_init+0x31d/0x620 [ 1004.018950][T17402] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1004.018999][T17402] store_bind+0x61d/0x760 [ 1004.019040][T17402] ? sysfs_file_kobj+0xe4/0x290 [ 1004.019091][T17402] ? __pfx_store_bind+0x10/0x10 [ 1004.019130][T17402] dev_attr_store+0x58/0x80 [ 1004.019175][T17402] ? __pfx_dev_attr_store+0x10/0x10 [ 1004.019219][T17402] sysfs_kf_write+0xef/0x150 [ 1004.019271][T17402] kernfs_fop_write_iter+0x351/0x510 [ 1004.019314][T17402] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1004.019365][T17402] vfs_write+0x5bd/0x1180 [ 1004.019399][T17402] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1004.019447][T17402] ? __pfx___mutex_lock+0x10/0x10 [ 1004.019499][T17402] ? __pfx_vfs_write+0x10/0x10 [ 1004.019547][T17402] ksys_write+0x12a/0x240 [ 1004.019580][T17402] ? __pfx_ksys_write+0x10/0x10 [ 1004.019620][T17402] ? rcu_is_watching+0x12/0xc0 [ 1004.019659][T17402] do_syscall_64+0xcd/0x230 [ 1004.019713][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.019749][T17402] RIP: 0033:0x7fc89f38e969 [ 1004.019775][T17402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.019809][T17402] RSP: 002b:00007fc89d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1004.019841][T17402] RAX: ffffffffffffffda RBX: 00007fc89f5b5fa0 RCX: 00007fc89f38e969 [ 1004.019865][T17402] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1004.019887][T17402] RBP: 00007fc89f410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1004.019909][T17402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.019931][T17402] R13: 0000000000000000 R14: 00007fc89f5b5fa0 R15: 00007fff52d24e58 [ 1004.019964][T17402] [ 1004.019976][T17402] [ 1004.019985][T17402] Allocated by task 17402: [ 1004.020000][T17402] kasan_save_stack+0x33/0x60 [ 1004.020035][T17402] kasan_save_track+0x14/0x30 [ 1004.020066][T17402] __kasan_kmalloc+0xaa/0xb0 [ 1004.020096][T17402] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 1004.020157][T17402] krealloc_noprof+0x1fb/0x380 [ 1004.020191][T17402] drm_atomic_get_connector_state+0x231/0x740 [ 1004.020238][T17402] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 1004.020286][T17402] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 1004.020334][T17402] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 1004.020379][T17402] drm_client_modeset_commit_locked+0x14d/0x580 [ 1004.020426][T17402] drm_fb_helper_pan_display+0x32d/0xa40 [ 1004.020457][T17402] fb_pan_display+0x47c/0x7d0 [ 1004.020496][T17402] bit_update_start+0x49/0x1f0 [ 1004.020541][T17402] fbcon_switch+0xbf8/0x14c0 [ 1004.020583][T17402] redraw_screen+0x2c1/0x760 [ 1004.020628][T17402] vc_do_resize+0xed0/0x10e0 [ 1004.020662][T17402] fbcon_init+0xd53/0x1900 [ 1004.020700][T17402] visual_init+0x31d/0x620 [ 1004.020728][T17402] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1004.020767][T17402] store_bind+0x61d/0x760 [ 1004.020801][T17402] dev_attr_store+0x58/0x80 [ 1004.020842][T17402] sysfs_kf_write+0xef/0x150 [ 1004.020885][T17402] kernfs_fop_write_iter+0x351/0x510 [ 1004.020927][T17402] vfs_write+0x5bd/0x1180 [ 1004.020958][T17402] ksys_write+0x12a/0x240 [ 1004.020988][T17402] do_syscall_64+0xcd/0x230 [ 1004.021038][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.021072][T17402] [ 1004.021081][T17402] Freed by task 17402: [ 1004.021098][T17402] kasan_save_stack+0x33/0x60 [ 1004.021133][T17402] kasan_save_track+0x14/0x30 [ 1004.021168][T17402] kasan_save_free_info+0x3b/0x60 [ 1004.021218][T17402] __kasan_slab_free+0x51/0x70 [ 1004.021255][T17402] kfree+0x2b6/0x4d0 [ 1004.021283][T17402] __drm_atomic_state_free+0x1b7/0x2b0 [ 1004.021332][T17402] drm_client_modeset_commit_atomic+0x6b2/0x7e0 [ 1004.021378][T17402] drm_client_modeset_commit_locked+0x14d/0x580 [ 1004.021425][T17402] drm_fb_helper_pan_display+0x32d/0xa40 [ 1004.021458][T17402] fb_pan_display+0x47c/0x7d0 [ 1004.021498][T17402] bit_update_start+0x49/0x1f0 [ 1004.021542][T17402] fbcon_switch+0xbf8/0x14c0 [ 1004.021582][T17402] redraw_screen+0x2c1/0x760 [ 1004.021625][T17402] vc_do_resize+0xed0/0x10e0 [ 1004.021660][T17402] fbcon_init+0xd53/0x1900 [ 1004.021702][T17402] visual_init+0x31d/0x620 [ 1004.021731][T17402] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1004.021771][T17402] store_bind+0x61d/0x760 [ 1004.021805][T17402] dev_attr_store+0x58/0x80 [ 1004.021846][T17402] sysfs_kf_write+0xef/0x150 [ 1004.021892][T17402] kernfs_fop_write_iter+0x351/0x510 [ 1004.021935][T17402] vfs_write+0x5bd/0x1180 [ 1004.021964][T17402] ksys_write+0x12a/0x240 [ 1004.021995][T17402] do_syscall_64+0xcd/0x230 [ 1004.022044][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.022077][T17402] [ 1004.022086][T17402] The buggy address belongs to the object at ffff888025f72480 [ 1004.022086][T17402] which belongs to the cache kmalloc-96 of size 96 [ 1004.022115][T17402] The buggy address is located 30 bytes to the right of [ 1004.022115][T17402] allocated 96-byte region [ffff888025f72480, ffff888025f724e0) [ 1004.022152][T17402] [ 1004.022161][T17402] The buggy address belongs to the physical page: [ 1004.022175][T17402] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25f72 [ 1004.022205][T17402] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1004.022232][T17402] page_type: f5(slab) [ 1004.022261][T17402] raw: 00fff00000000000 ffff88801b441280 dead000000000100 dead000000000122 [ 1004.022293][T17402] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 1004.022314][T17402] page dumped because: kasan: bad access detected [ 1004.022330][T17402] page_owner tracks the page as allocated [ 1004.022342][T17402] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 15118637479, free_ts 0 [ 1004.022396][T17402] post_alloc_hook+0x181/0x1b0 [ 1004.022430][T17402] get_page_from_freelist+0x135c/0x3920 [ 1004.022467][T17402] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1004.022506][T17402] new_slab+0x94/0x340 [ 1004.022533][T17402] ___slab_alloc+0xd9c/0x1940 [ 1004.022562][T17402] __slab_alloc.constprop.0+0x56/0xb0 [ 1004.022600][T17402] __kmalloc_cache_node_noprof+0x100/0x420 [ 1004.022636][T17402] __alloc_workqueue+0x506/0x1810 [ 1004.022680][T17402] alloc_workqueue+0xd2/0x200 [ 1004.022723][T17402] nbd_dev_add+0x526/0xbb0 [ 1004.022756][T17402] nbd_init+0x181/0x320 [ 1004.022801][T17402] do_one_initcall+0x120/0x6e0 [ 1004.022847][T17402] kernel_init_freeable+0x5c2/0x900 [ 1004.022899][T17402] kernel_init+0x1c/0x2b0 [ 1004.022934][T17402] ret_from_fork+0x48/0x80 [ 1004.022962][T17402] ret_from_fork_asm+0x1a/0x30 [ 1004.023010][T17402] page_owner free stack trace missing [ 1004.023022][T17402] [ 1004.023030][T17402] Memory state around the buggy address: [ 1004.023048][T17402] ffff888025f72380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1004.023074][T17402] ffff888025f72400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1004.023098][T17402] >ffff888025f72480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1004.023118][T17402] ^ [ 1004.023139][T17402] ffff888025f72500: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 1004.023164][T17402] ffff888025f72580: 00 00 00 00 00 00 00 00 00 00 04 fc fc fc fc fc [ 1004.023185][T17402] ================================================================== [ 1004.063667][T17402] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1004.063701][T17402] CPU: 1 UID: 0 PID: 17402 Comm: syz.5.2340 Tainted: G U 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1004.063756][T17402] Tainted: [U]=USER [ 1004.063769][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1004.063791][T17402] Call Trace: [ 1004.063804][T17402] [ 1004.063818][T17402] dump_stack_lvl+0x3d/0x1f0 [ 1004.063876][T17402] panic+0x71c/0x800 [ 1004.063928][T17402] ? __pfx_panic+0x10/0x10 [ 1004.063978][T17402] ? irqentry_exit+0x3b/0x90 [ 1004.064032][T17402] ? lockdep_hardirqs_on+0x7c/0x110 [ 1004.064086][T17402] ? preempt_schedule_thunk+0x16/0x30 [ 1004.064144][T17402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1004.064190][T17402] ? preempt_schedule_common+0x44/0xc0 [ 1004.064245][T17402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1004.064291][T17402] check_panic_on_warn+0xab/0xb0 [ 1004.064340][T17402] end_report+0x107/0x170 [ 1004.064388][T17402] kasan_report+0xee/0x110 [ 1004.064433][T17402] ? fbcon_prepare_logo+0xa03/0xc70 [ 1004.064484][T17402] kasan_check_range+0xef/0x1a0 [ 1004.064536][T17402] __asan_memcpy+0x23/0x60 [ 1004.064570][T17402] fbcon_prepare_logo+0xa03/0xc70 [ 1004.064634][T17402] fbcon_init+0xd77/0x1900 [ 1004.064680][T17402] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1004.064725][T17402] visual_init+0x31d/0x620 [ 1004.064761][T17402] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1004.064812][T17402] store_bind+0x61d/0x760 [ 1004.064854][T17402] ? sysfs_file_kobj+0xe4/0x290 [ 1004.064908][T17402] ? __pfx_store_bind+0x10/0x10 [ 1004.064945][T17402] dev_attr_store+0x58/0x80 [ 1004.064992][T17402] ? __pfx_dev_attr_store+0x10/0x10 [ 1004.065037][T17402] sysfs_kf_write+0xef/0x150 [ 1004.065090][T17402] kernfs_fop_write_iter+0x351/0x510 [ 1004.065135][T17402] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1004.065190][T17402] vfs_write+0x5bd/0x1180 [ 1004.065225][T17402] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1004.065272][T17402] ? __pfx___mutex_lock+0x10/0x10 [ 1004.065327][T17402] ? __pfx_vfs_write+0x10/0x10 [ 1004.065377][T17402] ksys_write+0x12a/0x240 [ 1004.065411][T17402] ? __pfx_ksys_write+0x10/0x10 [ 1004.065445][T17402] ? rcu_is_watching+0x12/0xc0 [ 1004.065485][T17402] do_syscall_64+0xcd/0x230 [ 1004.065541][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.065577][T17402] RIP: 0033:0x7fc89f38e969 [ 1004.065612][T17402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.065647][T17402] RSP: 002b:00007fc89d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1004.065682][T17402] RAX: ffffffffffffffda RBX: 00007fc89f5b5fa0 RCX: 00007fc89f38e969 [ 1004.065706][T17402] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1004.065727][T17402] RBP: 00007fc89f410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1004.065749][T17402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.065771][T17402] R13: 0000000000000000 R14: 00007fc89f5b5fa0 R15: 00007fff52d24e58 [ 1004.065805][T17402] [ 1004.066156][T17402] Kernel Offset: disabled