last executing test programs: 6m5.015460298s ago: executing program 2 (id=1924): sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x14, 0x0, 0x21, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) (fail_nth: 7) 6m4.110018267s ago: executing program 2 (id=1929): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) (async) getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000000)='/dev/snd/controlC0\x00', &(0x7f0000000040)=0x6) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) bpf$auto(0x5, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0x9, 0x6, "4e963b0004000000000800", 0x0, 0x401, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x19, @attach_prog_fd, 0x9, 0x7fffffffffffffff, 0x4, 0x2, 0x6}, 0x201) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70fd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x125100, 0x0) acct$auto(&(0x7f0000000000)='/dev/dri/card1\x00') (async) ioctl$auto(r4, 0x921064a1, 0x9) (async) statx$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8, 0x401, &(0x7f00000000c0)={0x145, 0xa, 0xde4, 0x8001, 0x0, 0x0, 0xf, 0x9, 0x2, 0x100000000, 0x8, 0x1, {0x9, 0xae6}, {0x0, 0xa00}, {0x4, 0xffff}, {0x2, 0x1}, 0x3, 0x400, 0xfffffff8, 0x80000001, 0x200, 0x59, 0xf, 0x7fffffff, 0x2, 0xffff, 0xf47, 0x6, [0x6, 0x7, 0x3, 0x2, 0x8, 0xc, 0x80, 0x3, 0x4]}) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000001c0)={0x7, r5, 0xbd0e, 0x9}) (async) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000440)={{&(0x7f0000000300)="7a3a9c41585e4a8515e05ddf93b494465e793e1b4418ec398be75e75648425c11258aeb8071a15ce4ac5d99a4a1f5db1b58931df025469cb6e714f1afc77b36724fe55b034d72ef5ec587ad6fc30a1a888fdba7fc6f010dd4529ac952cec", 0x4, &(0x7f0000000280)={&(0x7f0000000380)="09ac2564c8c66e4c052e083ff3aac1dc53b0ab41011a55ee61e8889ba0cedf49dcd0a0d340537f6ed1aa2259217f6ed9ab2882db4cbb51627044005c16c4f856f38bedb5013f1b815820cec81b5047046727bf249868463d46dd60f9cc103546d8d0bf60660c3d4c69b0aaf499210f5ed25b978f1ae049d39acdb13589", 0x2}, 0x400, &(0x7f0000000400), 0x7fffffffffffffff, 0x1}}, 0xffffffff, 0x10000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x2002, &(0x7f0000000080)=0x7e, 0x4) (async) get_mempolicy$auto(0x0, 0xfffffffffffffffc, 0x400, 0x0, 0x0) mknod$auto(0x0, 0x1081, 0x9) (async) timer_delete$auto(0x7f) 6m3.697265046s ago: executing program 2 (id=1933): mmap$auto(0x0, 0x1, 0x1000, 0x18, 0x2, 0x8002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) r0 = fspick$auto(0xffffffffffffffff, 0x0, 0x3) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video23\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0xc2) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8e00, 0x0) ioctl$auto(r2, 0x400454ca, 0x38) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) lseek$auto(r3, 0x5, 0x0) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000002c0)={{0x9, 0xffffffffffffffff, 0xee00, 0x8208, 0x3, 0xf, 0x4}, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x8, 0x0, 0xaa2c, 0x5, 0x7, 0x2367, 0x48, 0xfff9, 0x769e, @inferred, @raw=0x8}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000340)={"fb6634a865b09c1d10a8a298fc3cdf9d158bbd3324909d741a7fea6a7bb598a0", 0x5185, 0x6, 0x2, 0x5e, 0xfff, 0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x9bee8f6cd2536a87) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000400)={{0x5, 0x23, 0xa6, 0x84}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6m3.36935322s ago: executing program 2 (id=1938): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vkms/graphics/fb0/name\x00', 0x20000, 0x0) read$auto(r0, 0x0, 0x20) r1 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r1, 0x4, r1}, 0x10) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x7) 6m3.238803457s ago: executing program 2 (id=1941): mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0x2, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20040014}, 0x2600c880) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="82aa15cd8f1cddca9889c493f18d", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2504000009040005000800040009000000"], 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140), 0x4, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) ioctl$auto(0x3, 0x5411, 0x38) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r3 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x1e1103, 0x0) read$auto(r3, &(0x7f0000000080)='\xbb\x00', 0x3) 6m2.832580946s ago: executing program 2 (id=1945): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x152) (async) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff4, 0xa) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x100000000000000, 0x2, 0x4000000000df, 0x40df, 0x401, 0x2) (async) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x101000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioprio_set$auto(0x2, 0x800000000, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) write$auto(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d) (async, rerun: 32) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (rerun: 32) ioctl$auto(r0, 0xc0404d1a, r0) socket(0x12, 0x4, 0x440a) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) 5m47.355196216s ago: executing program 32 (id=1945): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x152) (async) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff4, 0xa) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x100000000000000, 0x2, 0x4000000000df, 0x40df, 0x401, 0x2) (async) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x101000, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioprio_set$auto(0x2, 0x800000000, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) write$auto(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d) (async, rerun: 32) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) (rerun: 32) ioctl$auto(r0, 0xc0404d1a, r0) socket(0x12, 0x4, 0x440a) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) 2m11.173244114s ago: executing program 1 (id=2840): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)=@info={r1, 0x9, 0x8}, 0x7) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000105, 0x400, 0x2}]}) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) bpf$auto(0x40000, &(0x7f00000000c0)=@prog_bind_map={r2, r0}, 0xd) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)=@info={r1, 0x9, 0x8}, 0x7) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000105, 0x400, 0x2}]}) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00'}) (async) bpf$auto(0x40000, &(0x7f00000000c0)=@prog_bind_map={r2, r0}, 0xd) (async) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 2m10.656929244s ago: executing program 1 (id=2845): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = set_tid_address$auto(0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="1b0026bd7000fcdbdf2503000000040003800400028012000100898035000000000000000000000000000c00038008000600", @ANYRES32=r2, @ANYBLOB="48260fbea6cc2f4f45f900ac64e4bb88ecf53662e30874213e4528a3e9767fe7feca853ffb00a4b6e178e1d2e9ff70114c731986f02918fd1786ecdb08a8c2d2f40ec5bae708dc0abade17b28ff5157003ebe3c9e9a85eaabdf82c593e66b7e218e0d8a19a721f9f1033b66bb05a0dbd72"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004800) 2m6.627653266s ago: executing program 1 (id=2858): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) userfaultfd$auto(0x1) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) r1 = timerfd_create$auto(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000140), r1) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x32c, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x316, 0x4, 0x0, 0x1, [@generic="27c0a671804d53c01500464d9dfea5aa1ca33a3944014ce93ea5c47926ee1c1fe5293fa5b53087bd3450e81817cfc9099d03bf39c1aedd5cd92ec1169432d87e6c67444fc1024a369167cfd78710fb3e0af11659f66e7c402dbacc55c3b1765b0ae5278cca1a5034923ef47f7c18ec5b266026a3bb1fadd154df5f0c4c33a53e1c1da8fdddab9a8f02602d409173aae94ec88c67e3097018804b578ba1bf42f5c2774982d7af816a19941a5eb8907a4ba97bfba77e38782ad90cca82a6a3883176a72078f3e3fde480cb382500ab1b4dcf9546cb1e19122d494ce87ab4", @nested={0x4, 0x26}, @nested={0x16d, 0x33, 0x0, 0x1, [@generic="cca0a59d36d9b19fe2cdd2dc05ae18812cb905427a8953f0993c97b1bdbf217b34a6184345a91085a411fbf0859dcd8e4a25d22a36095a429bd2db8679b95eb94fb57d13692bbd93a81adf1685669b1149eefc1a7e5e3853a9115d47a0e1db5ac1eb412d96e482af72ebd38119", @generic="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"]}, @generic="318fca94892ccb16250dc61ad4483a54b8cd7a41adbc3780088718cee8b1de98131f3d36241a45e651f0154f6901f845a7f80b701c05608d6ad6ea3bd81d0a999e0558b93583fd433d753550ad973d16ae30f3173ca3dd08b0d8cced9c5bad89fcc2eae49b1d591b0be110e45ce048afd07352792a472c950b94e79e2a42bf38a9d124473041382f3d2c27ba7868daa4a4c684c73eac6c2e355a7fda66ec08ed2897eacce2b483cf0bb0690416c2267c062a13254a92a32bb6d31b96081c43b4dd"]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20008000) r5 = io_uring_setup$auto(0x6, 0x0) r6 = socket(0xa, 0x2, 0x88) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), r6) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x5}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20008010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r6, @new_prog_fd=r2, 0x4, @old_map_fd=r5}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r9 = set_tid_address$auto(0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r8, 0x1b, 0x70bd26, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "89803500"}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid=r9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004800) 2m6.313278051s ago: executing program 1 (id=2861): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x38, r0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7}, @NL80211_ATTR_SAR_SPEC={0x8, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x4}]}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40010) mmap$auto(0xd, 0x2020009, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x3, 0xa) connect$auto(r1, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) 2m5.4370081s ago: executing program 1 (id=2867): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x15, 0x2, 0x100) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) futex_wait$auto(&(0x7f0000000100)="a7", 0x5, 0x10000, 0x1, &(0x7f0000000140)={0x7, 0x8c65}, 0x101) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x20040845) mmap$auto(0x0, 0x20009, 0x1ff, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x560a, 0x7) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/virt_wifi0/route_localnet\x00', 0x2202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) 2m5.153973478s ago: executing program 1 (id=2869): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) (async) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x1) (async) r1 = io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x4, 0x4, 0x4, 0x7) (async) copy_file_range$auto(0x6, 0x0, 0x9, 0x0, 0x7fffffff, 0x2) (async) add_key$auto(0x0, 0x0, 0x0, 0x400000000f9f9, 0xfffff1e1) (async) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, r0, 0x7) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0xc8201, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r1, 0x8, 0x1000) socket(0x1, 0x3, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) 1m50.009266478s ago: executing program 33 (id=2869): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) (async) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x1) (async) r1 = io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x4, 0x4, 0x4, 0x7) (async) copy_file_range$auto(0x6, 0x0, 0x9, 0x0, 0x7fffffff, 0x2) (async) add_key$auto(0x0, 0x0, 0x0, 0x400000000f9f9, 0xfffff1e1) (async) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, r0, 0x7) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0xc8201, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r1, 0x8, 0x1000) socket(0x1, 0x3, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) 8.83734496s ago: executing program 3 (id=3405): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/pci/drivers/ata_generic/unbind\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) mlockall$auto(0x3) syz_genetlink_get_family_id$auto_nlbl_cipsov4(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x3, 0x12) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r1, 0x40084504, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0x2003f0, 0x14) 6.744422319s ago: executing program 5 (id=3413): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0xffffffffffffffff, 0x200, 0x6) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) 6.225483706s ago: executing program 0 (id=3414): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/power/wakeup_total_time_ms\x00', 0x0, 0x0) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x26c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_IE_RIC={0x1a2, 0xb2, "2d9dcb561d9acb5aaa23bd869785de58a02f47bfacd36b18e90bb6a5cb23119ff2b68338a32ab1d1fa3c6d81370471de28616e860a0838a1c9e94f545ef057a73a6003f5df600503beee3ce5ad236a97c0b491752a451788c5bcf98df2e933b7c8f26a03ef1d9ebb2f4ade79fca0c61a85fa6b1b0a15738864f4d3226cfb17d0495e4606cf103e380a9f871a4f47d10f77d95475abb689e6cda5508fcae3219c3f4e7047bf95230ceb60d89af647858e26a2bad56c8af6717d713d6de4f0d6fabf5f0e587458a15269f52265d802d2faae20dbf5356148147fc66ab56dcb9f5cb3914ba19007c03b6aee7a4810947a7f5ff16c52e680aa078295033106d30f5a3ab069c1187c10581acd4ac9a9334aeb7295de51abb526a2275ccbd0f180d49c6fb9c1495ddb10c35b4a4dc7b0be5e99c697bbee6343a0b9e292e3461c0c92c12b943d6eb668800301e5d5b3e5046511f36456f74906ca614fc1bb90288e818206a70ec344e7499c2acd47a5c009d4095b16af41af4ccc8857c9c4d0aa508aa89d62a9dfe4c42393b36abdd74794094b30151344aa93161018a74624eb0b"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_TIMEOUT_REASON={0x8}, @NL80211_ATTR_MAC={0x6c, 0x6, "4d43a6da7370903e7e0ff631cb58f1035acc9b14ed3a2282bd4b9751375f0c8f43eb23df96ef6535a4fa833d2c2cfa2a0e31f8d2f651e4abef3261a006c73307529d214b369d4d98cd4db0ecb0e340b737d5c7df89fce39ae8b665c91bdd09615ed308f0695a67e4"}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xd}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "492a472f8ab17490a1692667a7d6d7c03298da52dbc8178c"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) pread64$auto(r0, 0x0, 0x2, 0x1ff) 6.042189029s ago: executing program 5 (id=3416): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, 0x0, 0x3) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) ppoll$auto(&(0x7f0000000180)={r0, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/limit\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) sched_get_priority_min$auto(0x40) socket(0x2, 0xa, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x8880, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) faccessat2$auto(0x1, 0x0, 0x4, 0x1000) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 6.035277104s ago: executing program 0 (id=3417): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = getpid() r1 = gettid() mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0x4, 0x0, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xc0403d11, 0x0) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r3) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) rt_tgsigqueueinfo$auto(r0, r1, 0x1f, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xb) rt_sigprocmask$auto_SIG_BLOCK(0x0, &(0x7f0000000080)={0x5}, &(0x7f0000000140)={0xc85}, 0x8) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xfffffdef) rt_sigprocmask$auto(0x2, &(0x7f0000000040)={0x2}, 0x0, 0x8) 5.835381269s ago: executing program 0 (id=3419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = set_tid_address$auto(0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898035000000000700"}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid=r2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004800) 5.659803849s ago: executing program 0 (id=3420): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdb, 0x40000009b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r0, 0x0, 0x8100000041, 0x3) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000001c0)={0x0, 0xc4}, 0x1, 0x0, 0x10001, 0x3d7}, 0x7}, 0x10001, 0x3) (async) open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) (async) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) (async) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2302, 0x0) (rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(r1, 0x400454da, 0x38) (async) unshare$auto(0x40000080) (async, rerun: 64) open(0x0, 0x4140, 0x0) (async, rerun: 64) mount$auto(0x0, 0x0, 0x0, 0x8002, 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000040)='team_slave_1\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async, rerun: 32) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) r3 = signalfd4$auto(0xffffffffffffffff, 0x0, 0x79, 0xfffffff9) (rerun: 32) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, r3, 0x8000) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf253e00000008000300", @ANYRES32=0x0, @ANYBLOB="05003001db00000008001f01ff0300000800c30002000000140024009ac70a1d5af3ce12348de063486d02b8"], 0x48}}, 0x20000810) (async) ioperm$auto(0x1ff, 0x2, 0x2000000000000149) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) close_range$auto(0x0, 0xffffeffe, 0x2) (async) io_uring_setup$auto(0x59, 0x0) 5.288511403s ago: executing program 4 (id=3421): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x515141, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x640200, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/103, 0x67) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_snmp6/geneve1\x00', 0x501442, 0x0) close_range$auto(0x2, r2, 0x101) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1401, 0x0) pread64$auto(r2, 0x0, 0x100000001, 0x3) 5.066569234s ago: executing program 5 (id=3422): socket(0x2, 0x3, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/ip6_tables_targets\x00', 0x608100, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20044880) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3c, 0x9, 0x0, 0x1, 0x9) shmctl$auto_SHM_INFO(0x80, 0xe, &(0x7f0000000200)={{0x7, 0x0, 0xee01, 0x1, 0x6a9bc28, 0x3000, 0x80}, 0x7, 0x2, 0x6, 0x21e00000000, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000180)="c5eb52b089143aeb", &(0x7f0000000840)="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"}) setregid$auto(0xee01, r2) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) 4.991365882s ago: executing program 4 (id=3423): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/free_hugepages\x00', 0x88000, 0x0) read$auto(r0, 0x0, 0x20) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x40080, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x7}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) sysfs$auto(0xfffffffe, 0x60000, 0x0) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r1) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.82080452s ago: executing program 3 (id=3424): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/netdevsim5/power/runtime_status\x00', 0x30b1c3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) shmctl$auto_IPC_STAT(0xfffffff8, 0x2, &(0x7f0000000180)={{0xaf2, 0xee00, 0xee00, 0x9, 0xa4, 0x5, 0x6}, 0x7, 0x5, 0xeebf, 0x9, @raw=0x8, @raw=0xfffffffb, 0xb, 0x0, &(0x7f0000000300)="b208ec34c958be00d9e1c9c559841543607134ff28f6c4108c100f9bbd72db727cf752a4c7f2fb1952d8d2dfde35c49fe92895d2cc0764a80f09fcb09dc13d9d96dc242c73ae3a7d2038f8b8ffbe89b13aae3395c0f78ac6d4a7e8e568e44a017d88d12a6f75e3390cec11c11a50d6bfcc4243d6105ef82532b6dc7ac16c58c7512506466f37d55dac322d9c92cee0777dd81f0e308fa0ff87e763af8262cf1ad4011193fe9e9ddc13191bb818a6b3e7ef2a8bb676a98fdf75faf40743957dec09", &(0x7f0000000400)="50b76fc42fff3a07f0da518d3417c19f0b590aa90268a215e48fc913853eb21175cb398a8a81bd15a3eb4486da4bbcac58225ca1ee897b9506b4ea1042b4481fc3644cbf9066a19529389d31404e26d8326f21f6f958aa27ccd5ccaf4f84a9db5bfbaddaff098bffa4b8d7cb296c8056412feccae222d952a6c892694171e2092b1a8d10110726dcf6f866ad253d55c611886015da1762373b795e2965f3ee9d6e5c7fed25addd53e62ddf2b"}) msgctl$auto_IPC_STAT(0xbe04, 0x2, &(0x7f00000004c0)={{0xd, 0xee00, 0xffffffffffffffff, 0x592e0000, 0x1, 0x8, 0x4b00}, &(0x7f0000000100)=0x2, &(0x7f0000000280), 0x400, 0x3eb7, 0x3, 0x4, 0x9, 0x3, 0x6, 0x7, @raw=0xe, @inferred=0xffffffffffffffff}) setresgid$auto(r0, r1, 0x0) socket(0x10, 0x2, 0xc) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="53010000", @ANYBLOB="ff1027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) keyctl$auto(0x20, 0x72510000000, 0x69c9, 0x2, 0x6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.655530066s ago: executing program 3 (id=3425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002600)={&(0x7f0000000180)={0x2454, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x110, 0x0, 0x1, [@nested={0x4, 0x9b}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x2260, 0x3, 0x0, 0x1, [@nested={0x100c, 0x13a, 0x0, 0x1, [@nested={0x4, 0x31}, @generic="86dcd03ef9eb502f70fd1fba43f7019358eba4e5930b6cf192d60e4a90b52847c82fbdf4e0420c2c6c1c307f2c211cbc3fa6bae8b2850afcc53f4e9167d3b97f162185d95306728af5d49e0ee574886598c16b06c50e7611779bb6f9c1113c3ec9c652c8ea585bb8ae3f0e77c0d2e3a143adff21b79da2007308b02f0fb29e2962339dcd777de6da701de52422843fdb04c8edcd9a29141ef9d3790252ba42b1b608a45631fc0bf6b5d92ed4a675740b4e384ad685b651f8763f25a6340073b6c30cc610371c862e20e9b62a861b65836917dd4df731f4dcc4afc676e5313517fa5d84adc0c62bd5d0288a8a63b9ad4cca956fea2361e2e38d0c93756d5de24343699b9b1656d10697271b24fb8291286dce4b37168d062929699fe8b096c45728c6ee86a3c737037000a482ca2b9bcb0d425597ca2e1e5082bd357ab64becdee740819ea595740a30195c19824972758403496722012900a4f1bfa5c9ba8fd8e6bbfbda2b878d5be9f11d09ec23172c57daa6e1b21b5540dc5b1758bb1b1750291b877dfeb2017fd2019d90b100e2d45caacd814ac04d3093c5f31cb0379d7a873639d092206642fcc2e202573958d6e6acee9769085bbd6f6c4b23f7ebaceceb71dd1a4094e5127a5efc0bafba81aa8b2fb3224fd8fa17421d698e8fe85905c035f0bb5f16742e849f4445e387cbf120d0d206ffb0392bbddd3cd06021d86c385bc50a6b3327ef00b589829c42fe2606bc623cfc80111c31a45547979a11ae149be46ec7f37029b49deb7862aaee07c364a8b80c4d8772bb6b5331173c12b45a604200a9bf5fc838e048400c202f10de96cf63b18855167ffea84e6f9ce8f9525542435273309afec4ac039dcb4de8c38aa08fe598781f31f83baebf146bdf5c14cf8623be48c25d0cdb447ad8d856f6e404390209aec6bf219204646b80f9f6e1832087bd4b430531d3d891399c363bf23dffde0831dedeb2bba3149477219c3874d8efc5c00afc7de40cf6da8cf099eb9394b7e395581a2b8e0cbe4ee3e4de28fc2b9f36b36b3428418b13cec35dcdae038ae474346d02fea19600253981f9c42704020aa6ee04ebb2e345d52c27a482314ac0bc2b9d2f265bbd8310f8c233cdcd9a5882ae3205e8cfdb63fd1d7ac6f2e8db9fbcd035d97b14d0aa98c1e9654712697f3723589b46f6b6ebc589dc49c94a66618ba2edd5cb55b59dee6372797932e6b9828fec3d9a22a4d000c556c89e8d58d1599c59049dac5c9a612276afb11044561d9be91fd67b05d95adf7821b2ac99b5410fcb7f9287918f66b7bf967882aacf7714dfe01c3a144ed6e005fc3f48a622b1bdf034c5d69d93201183f137cd68866c631bcffbbca7c72bc0cffc431926f445069d6614d69f270d2bb60c20699246b9626759b8bb3f0da0233f8eaba946ecec6747302844f2c3b1494a94077f95ab4ab63130e401f9cf58fc202ee75b910c5ec7165b4f0fa9cef1c11799819c71dfa5cea6fc2b320b7805ba84f1e6ef1d73539af1506f775fc3bc02ddb0b6ad48f213eb55d41ec1f7587689e1ba384e111ab862e035d81656d7c431c1370fd3b699897ba3a25e4ef2f79c14692fdcb62e66cb9fc19193e2ba3ee2afd9f1ac0c554c428351f7ef160f068968e6db58691c91de8f565472089342eb0e3ad964b25559140947acc7d293b2bf77955666db3432248d94dd886aaab037d0335a3e839b19534bbbb4e1c87468e109d40d92c6b301ff8b95140aa97bbc320a1de4ccca3ce53d0763a9415850770063229b115a6c9bf57f2288ecbd1fab8d99192112cc3103372f6c780401d62c60e7853dd1065e9ddc2995e3eb88158d477a9958a2c04b57cd69c4943f5b05845ae25a032c15545474fee9d18a37f05a5be998adee118f5427becf1992fb8b2e871acf8cb44192bc2681ed5376b4c11d92f783a6e23c501cc1a666cbe7bb5b2b04ebd644685a9472c526aacafe1cd102f05f4837fc760eb115fea4a9616e45b75b5d75cbda87ab111c775ccd0cc0c1a8c872ce2eedc1e853b4362b9c4a29f358cbc8580424cb14e1fc02de13027d70811531f10e884c95b7c110cb2eff2c3bab758e98d1e89654f4b5ac4f59613e63d58b57b8861ed61dd09ce8ab6c8f1083d59cab2ccf90657f7ef40887f631d2e8b72fbffa9a1dbb29e3b0d45f3ec3000cf68c9296586ab8eee2c12864314fa195f63ee3d9bc0a3a8cca01f8f890a0934f404e1676dd72c9b5905d6acfd86adf8312af11ef7a6cbe5c0db7db58a28dca44917d9b77445735fe7cbb6eeff85e85be3c77d1aed70b49ecdd7357b1d2547084191ab2266b017349afe4d701b6db90894dec1b8457e1d9393a416c23d6fc0a94d6bd75502e261aea624c064e1320c03202b9390d2c792279bffd724b7b8e04183731a92d067cffdca1b6956c03b3a101b78a8dff67d8da649e5c9fa43d62f4750d967f61cec4b7b3615682a25e10b96b1d5a4f7f45dd3de3967707a43f707145ec3e713210ef3a68fb60f33d1e7422526fe3d7849182e5bf94873cb44ec8c485a72fc416607552ed4d7044b2e8a96db144c7bfedd4db05d1412e7ddd46fac30a760013f06c82bd3b8c56970c03391b50824b6cfa42a8afaff297c1141030bb578476d1ac00d5d85a528dd963445fad75d22b96bc8911883935ac27e6f3f934b11e24fd0e80dd69e7c906083b9d5a6afdcb94b30ac92b4ccb1718a86b4112e015e430471eb16d352ead392b3dad0eec64f0bf56223f40b56e11201b20e00fabefb91c89c5c26d0bdfa040eac5c2304f21aa2fb54f0f43cd1b9d471c6153be0ecd05a360d168c16c4d2ac50769a35933f7656cdeb65e45d369c85ffa2b03cd5670c77ad01b5acc884f000ed4d4b1ff31190d5f0c9f1fd2d88e1d318b908847687b1e373cdba85c97c7bb966650b6cc39469ad921d39ead0b09af5e3c73b215e41826d25f90d56b30fa87ee7ed73e855d9995cdb8990f43a08dd87401039c14bdf0ed2d783b8aa8272da4fa1eb745e319738643706bcabbfebb0a27ed1827456ca40164c1ef2642006afa5e115836958e2bf001feb918ba6a33e9c1fe99db31a9ab4ce10b907d93e0dc2882e781d62096f3c4f51fc28a6fca43e58991cdcb77527ee28b379a79743e32297f0f137f65cde7678bcb60d00b59e853f8f2bc1a32b4693b5d552051838c7c007449d33ce4485cba2127b8b242fba78e97e8dd66adee0ab5dbbd0ddc782f36b5cfae0e4cc400582a0088fc947d46484c72595063b517694bb78d131c1eae7945b29d8e4329492005ab37a3b383c135245b3ba3b2ab4146dd1a3aef9856606c5f32009a846b8001737652a46d134ec6728f93bd47b0ca4ad707ffc9894aab9bedcbb12078be662cd4c4b109be7068bcb5e0ae6d800a68c0a34a5ad1e11ca84c2c4fd9d5c194f6b06bc15296cb2c134299783b5752fa9f042b03f26a3cd6f6f78a80cd02d3f7812bf6b8dc4d392c42d374ea97f8b291771a6996a21f9763c91cd0bfedd62d78ed25a97948c1ab02ad74de5066030db317eb0c64994b3e3af222ef5b349017843080fdef681e4c9e4ea395a8e08ae51cfa2c8c0140d826e770a9e0b9d495eb5212deca0bfdfc4e92e64057d1ef8f1ef7b3b975b3c54a6aa05ce78937371c80b2d6c29800069d56e93a4bc16113f14d51f74fc3667c9f6520d0ecfa2bc4dffde6a3a6b3bcd098346cbf28cc5a5e0368dadc487c4391ac71f6634ed4476444bc79c9d7aae4a61f9c61d8c9cd795b3968e13a8564109f5a65553723531b306539b9500399c41df87eed2558aa68c28beba5ad1d82ca512701fb279a31174f7adcb09335d2e49d01addc63ce6b8c84691690e76e596ff466f66059e6cd93a2dcdbcb05fd5eda026cda951ed443bdd7141c991cef896b686f03ab6ca8d2efa99c989cdf07ed0a1eb205a96edbe4edf510c1c0307c620880e5b12d7b77267d2ab6ab7c10be22abc3cb48f12a56327287a00d3ed1f56a01a577718dc40fbf67e56ff4ebdf1a4541149656c389afe07bf4524e351c1220ed215820e2663ac00a3550d695adb170eb1f2ee160c85e83e2092b8cebf0588270c9ad1164a274f77a69aac76833064804402629b83eb0c02e97c7fad4e2158f37f7c23e4bdb1d7c6b079f63b10140309bb453dd278b5c7e8ebee3107a002d1dd4b4b64fde59858aab0347f76ca72193d46fbf3b4fc2992ac4d4962aa7fa6b3cd2ae264b5978519a1dacfc287dbdbc330a78b2d75e1d0ec77c0022e7448ba848b8abe38983e24a241d9399a9134988b0db01339b16ee06200d47fb9738a10b0bdf755b88fba0f85cb2f0c80743ec27353e56b911f300ef61bd75dc4822967954c4cb5b2e120dfb151f48b419fb637a6eb2c251791e01a360256af2230cd7ec7fde8c52d048e6780b150c0bd77eb51a01880c6df66f86fce3a0951b6cd0c23ab3b0c44516520aa8185878f47d9fc9ba637f6d1840f7a4f945e70987a27b22a9ba0d4faac7869fc7e8f84b1779d0977b1695d44dac78979c7f905d55f05a00c4a6ad3b1a74ad138587436dbcc9b321b3eaed6de9220e0726dfe8af6b21d3b423642581e0b59f9e97e18e099110f47fa450e3f14a88242345caf65714dd620221cdd264de080f82702af8e23adc3747256c66b129d1afdb8cb3e7a87e3e5730cc530203022fc3b11f1d6f8723ac2b6d73f0a8e12338ecca0b84e01c0658efb2459629a54d1a6bdacd82039951a74d20f4545631a5f14de751b9ed34654e36eaede5d622c5fde6c7d49209c2028e0213c4f69d9192fb3e24cb660025cdcc07fb1823826dbd9a71e6ac790d5740977d8fe4e6777c0c3641a83c1a9ff886334f9434bb09f6dea5050763602a57fe73819567eacea4a56d50358043dc4a994c96e3b86937edf53012b257a7b5e034ea9e0c71b0c5dc1d7b3c0b9668906efaa7b90ca324b39b7e4dc483ffa1499377d455dafc28a44bab99f44f5ec578550366f3090edc47a62f9663429fb1d295bac6dfa233bc81264205936b00ffe9dbf2b4dc6564fa201c00082b346638b72ea0ebe578c4a1c2c13f52f15cdbe3f206b2cba696aa459ece2d7db03d642931dd448415abe5500edc7cac3779a14a8326819533f568adff3abb29d3980b6f4c86dd7898be9bc9e60abedbebece7e2d9055a3b300d1ea46cf81a8e9b37807d56c82d11b92e3057793b7fb19a604869efea9f632df7e4a9b1d2aa1f443cbd5c6354118197c903e77e5a70fda6a86889cb1d7a0a4a6d1546762074ee54c940954fe8211802b0e54075a4e364b70e96f83cd04d05acd9bf22740bf36f85e424eee185ec9a71736f2392cbdb76f1bec8e7abd035f2f6fe950a774e123139bb37571090cfd4fe6e20a3b09553a82dffc22f0e278615c7a349e1f89b9aef1819f2436da5a4a6d6905052680a3e0e0f51144fe72250749f09dcea23a377def0883d69ed8417a64a4be78e37e95652a0f6085a8046bba7873779b8b5ece48b2ea8a3992cbd02b9dd5961cf5e280b6a05604bf318cbc434a964119dcde939818d0a0a576afdb185a9a3fec7868f300658a7bc61995d211cc3ffc459fcc755ea8c68e34c034192ec83224b3adb57c3f70696f6aa90c9a2476c84afda09435856c57a3b714ccdac7c1e0e64b2d7091cb3121f2f40ba1db528131ad367ae333f554b6388a34f7d67ca9491bf369e80423417c2ffc4e767b83b2fa52f781a7070e07e551ff33ea943b7885de963ae1cbc6366b9fe14a1aadc65b7b6d75791a5c6655b85a6780f4212252139530fbd1516", @nested={0x4, 0x8f}]}, @nested={0x78, 0xb1, 0x0, 0x1, [@generic="ce3c6b2d4f4eb6bef1eb0ab058282f35677fb9953fa7daf03b0d9a4abbf4fadef7f278f62ea88c751f72df1f415482eb5f31369f6b", @nested={0x4, 0x39}, @generic="2bde68eefc5e1cc9581c53e99c95b30de144bcd1ed3edee136c8a950d33579738d642db3677384d6c5e1eccf4a759680968f120642306e413a0608"]}, @nested={0x3b, 0x2, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @u32=0xfffffff7}, @typed={0xc, 0xce, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xe8}, @typed={0x8, 0x93, 0x0, 0x0, @u32=0x3}, @generic="89e6dfea11b8b48e249da36084230a112ca74e4dfdc2c2"]}, @generic="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", @typed={0x8, 0xf6, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x99, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x1086, 0xf0, 0x0, 0x1, [@nested={0x4, 0x12}, @generic="ced94b8d4754c58dab662f2579470923f37da150288e7e8bee6a3260d07ef9149b730d91a35a01ad4ee2ba146c247e7e7879c3237381a3e42e004f7b119ddd1c177bf1e50a8df7b442187b02d291cd6c7f736ccc32188705a59bec7f26078d4093d024623c3ffdb293fbd0de953cff97545d", @nested={0x4, 0x150}, @generic="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", @nested={0x4, 0x138}, @nested={0x4, 0xe6}]}, @typed={0x8, 0xd, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcb6}]}]}, 0x2454}, 0x1, 0x0, 0x0, 0x40814}, 0x8c11) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000002680), 0x8080, 0x0) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000002700), r0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x58, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff81}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x5}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0xa}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'gre0\x00'}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x5be6}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x21ec}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044004}, 0x240008d0) exit$auto(0xf8) r7 = getpgid(0xffffffffffffffff) r8 = getpgrp(0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x60008000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0xbc, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x300000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x496b6aa2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x102, 0x0, 0x0, @pid=r8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24004080}, 0x4000011) r9 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000002a00), r0) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, r9, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r10 = memfd_create$auto(&(0x7f0000002b00)='wlan0\x00', 0x1) ioctl$auto_TIOCSETD2(r10, 0x5423, &(0x7f0000002b40)="a0d536167b8946adacbadee26986bfc12fe6c424a09045a589d3068831db27736bc9eaf71ac82275fe760e84535a6f7861d3ef7cb18d8e6498314f5f0f87631526a0ecdab22d883057963e42e258fb90bc182bc1ca01b80e1d9b4ddbd27c156a8960362ded1b49f6dc934bbae5cb0696886ea2011679ebefbb23b472622711142d974de8995909b6d7768827ce8281d22c1e72506b716c840f077821f985afc0063f8f80e6152776d1823e7adca69095aee0b4779dbbcd9cccf0ba9efc5c") sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, @BATADV_ATTR_TT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc855}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002d00)='/sys/devices/virtual/block/loop0/trace/enable\x00', 0x50000, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000002d40), 0x440, 0x0) write$auto_tracing_err_log_fops_trace(r10, &(0x7f0000002d80)="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", 0x1000) r11 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000003d80)='/sys/kernel/debug/ieee80211/phy16/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x80040, 0x0) rename$auto(&(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000003ec0)={'pimreg\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000004080)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x80018000}, 0xc, &(0x7f0000004040)={&(0x7f0000003f00)={0x104, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_PEERS={0xdd, 0x8, 0x0, 0x1, [@generic="27346364f2f69946903955fd03ede5665023384cfcd2c2f5e9", @typed={0x14, 0x151, 0x0, 0x0, @str='veth0_virt_wifi\x00'}, @typed={0x4, 0x29}, @nested={0x38, 0x146, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0x42}, @generic="2220cd41d1b7e2374e4b683f4ebc0c0bd219dc1feb33852b", @typed={0x8, 0x105, 0x0, 0x0, @fd=r13}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x5db}, @nested={0x4, 0x14}]}, @nested={0x67, 0x2d, 0x0, 0x1, [@generic="64bb302b49784b4eec3d3400cc62a3fe776345945eb4194eefb32952da02a1d03158a94c09fd587545db21dbbd944c60a84e3a6f12cc9509998a16e09f42da785cf251fc0b6e9813fd6ffd930b50f225b0ea6b9611223f6437ca217430cd3fc98e2ae1"]}, @typed={0x6, 0x145, 0x0, 0x0, @str=']\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004810}, 0x4084) fsopen$auto(&(0x7f00000040c0)='[##\x00', 0x2) geteuid() close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) 3.602423796s ago: executing program 5 (id=3426): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x144, r0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7}, @NL80211_ATTR_SAR_SPEC={0x114, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x110, 0x2, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x40}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffc}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1000000}]}]}]}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0x2000000}, 0x40010) mmap$auto(0xd, 0x2020009, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x3, 0xa) connect$auto(r1, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) ustat$auto(0x20000801, &(0x7f0000000000)={0xbff, 0x2, "be5705f65205", "064885ca64ad"}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xa8}}, 0xc2) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x80000001, 0x4000e) unshare$auto(0x40000080) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x23, 0x80805, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x8001, 0x7, 0xd, 0x1, 0x9, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2, 0x4]}, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r3, 0x0, 0x840) io_getevents$auto(0x1, 0x401, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) 3.027656455s ago: executing program 4 (id=3427): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x400000000000000, 0xe983, 0x2df, 0x16, r0, 0xb) (async) mmap$auto(0x400000000000000, 0xe983, 0x2df, 0x16, r0, 0xb) close_range$auto(0x2, r0, 0x0) (async) close_range$auto(0x2, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0xa) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x30ae, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000000000000003) (async) r5 = clone$auto(0x30ae, 0xb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000000000000003) ioperm$auto(0xc5, 0x3, 0xc115) (async) ioperm$auto(0xc5, 0x3, 0xc115) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) wait4$auto(0x0, 0x0, 0x2, 0x0) socketpair$auto(0x1e, 0x0, 0x7, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttynull\x00', 0xa042, 0x0) unshare$auto(0x40000080) setitimer$auto(0x6, &(0x7f0000000380)={{0x10, 0x800000000000}, {0xffffffffffffbff6}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r6) ioctl$auto_TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000001c0)=0x8) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r7, @ANYRES8=r7, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES16=r2], 0x2024}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) r8 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r8, 0x5, r5) (async) fcntl$auto(r8, 0x5, r5) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b) (async) setsockopt$auto(0x400000000000003, 0x4, 0x1b, 0x0, 0x56b) 2.683743904s ago: executing program 3 (id=3428): mmap$auto(0x0, 0x2020009, 0x3, 0x1d, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x10, 0x6, 0x4000000000e1, 0x100ebe, 0x7f, 0x8004) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0x4, 0x0, 0x10) r0 = prctl$auto(0x3e, 0xffffffffffff7fff, 0x0, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x1d, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/auth.unix.ip/flush\x00', 0x2000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x5, 0xc, 0x80400001, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r0, 0x1, 0x41, 0x0, 0x88) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), 0xffffffffffffffff) 1.237167639s ago: executing program 4 (id=3429): mmap$auto(0x0, 0x1, 0x1000, 0x18, 0x2, 0x8002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) r0 = fspick$auto(0xffffffffffffffff, 0x0, 0x3) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x40040, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0xc2) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8e00, 0x0) ioctl$auto(r2, 0x400454ca, 0x38) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) lseek$auto(r3, 0x5, 0x0) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000002c0)={{0x9, 0xffffffffffffffff, 0xee00, 0x8208, 0x3, 0xf, 0x4}, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x8, 0x0, 0xaa2c, 0x5, 0x7, 0x2367, 0x48, 0xfff9, 0x769e, @inferred, @raw=0x8}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000340)={"fb6634a865b09c1d10a8a298fc3cdf9d158bbd3324909d741a7fea6a7bb598a0", 0x5185, 0x6, 0x2, 0x5e, 0xfff, 0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x9bee8f6cd2536a87) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000400)={{0x5, 0x23, 0xa6, 0x84}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.194720997s ago: executing program 0 (id=3430): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc00, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) ioctl$auto_SNDCTL_TMR_START(r0, 0x5402, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mknod$auto(&(0x7f0000000000)='*-\x00', 0x5, 0x8) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8970, 0x24) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b32, 0x1) fchmodat2$auto(r3, &(0x7f0000000340)='*-\x00', 0xd800, 0x100) 1.094895744s ago: executing program 5 (id=3431): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x54080, 0x0) ioctl$auto_SIOCGIFHWADDR2(r1, 0x8927, &(0x7f0000000180)="fedf5550cf3214f793a92b030c6f0a6c85e330dc185ae5ce0b669042ec5a37317b5e52e1589962e2ed2559f4fb27f3351157efe1f43d739e02e23c7f2141bf0ef13447771d775fc4bbbf61aa8da700d5f2f1a4c8b8543243599d096571006dd072837156bc93c0a2c615a99397c3e8a7debb6ccaf96cee94b7953c3b113fd9fe6f01e22b7e3afc28b666dcbf9554e4c8417cebb2b2978f2c7414427500a758691a8a85665f5d778d41236e1ae6d4a44ab391ce0602a697842caff7e3912573afa2eb3059f6976211c76da411") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x3}}, 0x66) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, r2, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) read$auto(0x3, 0x0, 0x80) close_range$auto(r0, 0xa, 0x40001) r3 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) bpf$auto(0x3, &(0x7f0000000280)=@batch={0x5d9f, 0x8, 0x81, 0x4, 0x200, r3, 0xfffffffffffffbff, 0x5}, 0x3ff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x20, "ab06fdffff00fff4fffffff800"}, 0x55) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) r6 = socket(0x2, 0x801, 0x106) getsockopt$auto(r6, 0x3, 0x3ff, 0x0, 0x0) mmap$auto(0x2, 0x4, 0x8000000000000001, 0x14, 0x4, 0x300000000000) ioctl$auto(r5, 0xc0045401, 0x3) 835.925662ms ago: executing program 4 (id=3432): pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x1ff) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = socket(0x10, 0x80000, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r0, 0x0, 0x3d55, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xd2900, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xde, 0x10, r2, 0xd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket(0x2, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r1, 0x0, 0x80) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r4, &(0x7f0000000180)='#\x00T\x8e\xf2\xd3U\x1c\vAZ\x84\xd8\x1ds{\xeaS3{\bC1\xff\xb8mw{\x00\x8d\xa2\x04R\xa47\x00\xaa\xe98\x92E&\x93\xe0%\xd4Xx\x10\xc6S<\xc7\xce\xbc8X\xebm\x15\x95I\xf1C\xc6\xf8\xb9\xc7_\x80\xbe', 0x81) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) signalfd$auto(r3, &(0x7f0000000100)={0x2}, 0xe) mmap$auto(0x1, 0xfb, 0xdf, 0x9b72, 0x7, 0x8001) io_uring_setup$auto(0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd7\x00', 0x119100, 0x0) 657.280109ms ago: executing program 3 (id=3433): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000001500), 0x400000, 0x0) read$auto_dmaengine_summary_fops_(r0, &(0x7f0000000340)=""/244, 0xf4) (async) r1 = socket(0x10, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) timer_create$auto(0x8, &(0x7f0000000100)={@sival_int=0x3, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, 0x0) (async) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x4, 0x10007}, {0x9}}, 0x0) timer_settime$auto(0x0, 0x7, &(0x7f00000002c0)={{0x0, 0x53}, {0x6, 0x2}}, &(0x7f0000000300)={{0x1, 0x7f}, {0x8000000000000001, 0x8}}) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250200000008000300000000000500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) (async) capget$auto(&(0x7f0000000180)={0x1, 0xffffffffffffffff}, &(0x7f00000001c0)={0x1, 0xd360, 0xfffffffc}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) (async) fchown$auto(0x2, 0xffffffff, 0xa1a9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) (async) semctl$auto(0x7, 0x2, 0x13, 0x1) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x0, 0x0) ioctl$auto_BLKPG(r2, 0x1269, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r3, 0x0) (async) open(0x0, 0x22340, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r4) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 553.210022ms ago: executing program 3 (id=3434): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = socket(0x2, 0x3, 0x2) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/power/wakeup_count\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000001c0)=""/17, 0xffffffb8) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x6, 0x8}, 0x803}, 0x80000000, 0x8, 0x0) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0x6, &(0x7f0000000380)="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") setsockopt$auto(r1, 0x1, 0x6, 0x0, 0xc089) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, 0x0, 0x1c61fe90) 343.543809ms ago: executing program 4 (id=3435): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') writev$auto(0x1, 0x0, 0x1) r0 = epoll_create$auto(0x4) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r1, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000240)="4c0c5800000000000004", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x80000002, 0x100) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000000300)=""/153, 0x99) socket(0xa, 0x801, 0x84) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0xfffffffffffffff8, 0xef3f, 0x0, 0x17, r4, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b47, 0x1) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) 248.839465ms ago: executing program 0 (id=3436): mmap$auto(0x0, 0x1, 0x1000, 0x18, 0x2, 0x8002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r0 = fspick$auto(0xffffffffffffffff, 0x0, 0x3) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/swradio6\x00', 0x40040, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0xc2) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b7a") socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8e00, 0x0) ioctl$auto(r2, 0x400454ca, 0x38) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) lseek$auto(r3, 0x5, 0x0) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000002c0)={{0x9, 0xffffffffffffffff, 0xee00, 0x8208, 0x3, 0xf, 0x4}, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x8, 0x0, 0xaa2c, 0x5, 0x7, 0x2367, 0x48, 0xfff9, 0x769e, @inferred, @raw=0x8}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000340)={"fb6634a865b09c1d10a8a298fc3cdf9d158bbd3324909d741a7fea6a7bb598a0", 0x5185, 0x6, 0x2, 0x5e, 0xfff, 0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x9bee8f6cd2536a87) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000400)={{0x5, 0x23, 0xa6, 0x84}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=3437): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x515141, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x640200, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/softnet_stat\x00', 0x40102, 0x0) close_range$auto(0x2, r1, 0x101) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1401, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x3) kernel console output (not intermixed with test programs): lave_0 [ 723.218711][T17080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.218728][T17080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.219915][T17080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.219926][T17080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.219944][T17080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.311502][ T54] bridge_slave_1: left allmulticast mode [ 723.311553][ T54] bridge_slave_1: left promiscuous mode [ 723.311702][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.328822][ T54] bridge_slave_0: left allmulticast mode [ 723.328841][ T54] bridge_slave_0: left promiscuous mode [ 723.328957][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.734342][ T5151] Bluetooth: hci2: command tx timeout [ 723.991082][T17069] tty tty49: ldisc open failed (-12), clearing slot 48 [ 724.917664][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.955154][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.005569][ T54] bond0 (unregistering): Released all slaves [ 725.146029][ T54] .SR: left promiscuous mode [ 725.245325][T17080] hsr_slave_0: entered promiscuous mode [ 725.274262][T17080] hsr_slave_1: entered promiscuous mode [ 725.297091][T17080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.325843][T17080] Cannot create hsr debugfs directory [ 725.825070][ T5151] Bluetooth: hci2: command tx timeout [ 726.083865][T17142] Invalid ELF header magic: != ELF [ 727.391046][ T54] hsr_slave_0: left promiscuous mode [ 727.553490][ T54] hsr_slave_1: left promiscuous mode [ 727.584330][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.618844][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.731185][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.738636][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.844666][ T54] veth1_macvtap: left promiscuous mode [ 727.850247][ T54] veth0_macvtap: left promiscuous mode [ 727.890434][ T5151] Bluetooth: hci2: command tx timeout [ 728.996340][ T54] team0 (unregistering): Port device team_slave_1 removed [ 729.116638][ T54] team0 (unregistering): Port device team_slave_0 removed [ 731.415461][T17182] input: f¬ as /devices/virtual/input/input230 [ 731.940649][T17080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 732.042638][T17080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 732.145547][T17080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 732.298391][T17080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 732.434250][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'. [ 732.597369][T17080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.716175][T17080] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.808799][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.815963][T15005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.881629][T15005] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.888751][T15005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.075502][T17080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 733.104739][T17197] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 733.158943][T17080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.878986][T17080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.043333][T17080] veth0_vlan: entered promiscuous mode [ 734.101019][T17080] veth1_vlan: entered promiscuous mode [ 734.246421][T17080] veth0_macvtap: entered promiscuous mode [ 734.308420][T17080] veth1_macvtap: entered promiscuous mode [ 734.377662][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.429248][T17254] input: f¬ as /devices/virtual/input/input232 [ 734.471729][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.515026][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.548360][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.595796][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.642056][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.683119][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.729156][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.807715][T17080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.901195][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.001772][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.052304][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.109294][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.173212][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.201329][T17281] input: f¬ as /devices/virtual/input/input233 [ 735.232830][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.302147][T17080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.365475][T17080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.430095][T17080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.764700][T17080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.835619][T17080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.885447][T17080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.940516][T17080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.071526][T17299] input: f¬ as /devices/virtual/input/input234 [ 736.376784][T17301] Invalid ELF header magic: != ELF [ 736.630731][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.638573][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.769551][T15005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.811019][T15005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.603939][T17318] usbip-vudc usbip-vudc.0: gadget not bound [ 740.082632][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'. [ 740.122349][T17356] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2593'. [ 740.441252][T17362] input: f¬ as /devices/virtual/input/input236 [ 740.466043][T17361] FAULT_INJECTION: forcing a failure. [ 740.466043][T17361] name failslab, interval 1, probability 0, space 0, times 0 [ 740.494028][T17361] CPU: 0 UID: 0 PID: 17361 Comm: syz.3.2594 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 740.494057][T17361] Tainted: [I]=FIRMWARE_WORKAROUND [ 740.494063][T17361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 740.494073][T17361] Call Trace: [ 740.494079][T17361] [ 740.494085][T17361] dump_stack_lvl+0x16c/0x1f0 [ 740.494111][T17361] should_fail_ex+0x512/0x640 [ 740.494129][T17361] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 740.494149][T17361] should_failslab+0xc2/0x120 [ 740.494264][T17361] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 740.494284][T17361] ? __d_alloc+0x31/0xaa0 [ 740.494304][T17361] __d_alloc+0x31/0xaa0 [ 740.494321][T17361] path_from_stashed+0x500/0xb00 [ 740.494340][T17361] ? __pfx_path_from_stashed+0x10/0x10 [ 740.494355][T17361] ? do_raw_spin_unlock+0x172/0x230 [ 740.494371][T17361] ns_get_path+0x5f/0x80 [ 740.494385][T17361] proc_ns_get_link+0x121/0x260 [ 740.494399][T17361] ? __pfx_proc_ns_get_link+0x10/0x10 [ 740.494413][T17361] ? __pfx___might_resched+0x10/0x10 [ 740.494432][T17361] ? __pfx_proc_ns_get_link+0x10/0x10 [ 740.494449][T17361] step_into+0x1b22/0x2270 [ 740.494475][T17361] ? __pfx_step_into+0x10/0x10 [ 740.494495][T17361] ? find_held_lock+0x2b/0x80 [ 740.494517][T17361] path_openat+0x749/0x2d40 [ 740.494538][T17361] ? __pfx_path_openat+0x10/0x10 [ 740.494557][T17361] do_filp_open+0x20b/0x470 [ 740.494571][T17361] ? __pfx_do_filp_open+0x10/0x10 [ 740.494598][T17361] ? alloc_fd+0x471/0x7d0 [ 740.494616][T17361] do_sys_openat2+0x11b/0x1d0 [ 740.494635][T17361] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.494660][T17361] __x64_sys_openat+0x174/0x210 [ 740.494679][T17361] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.494699][T17361] ? rcu_is_watching+0x12/0xc0 [ 740.494718][T17361] do_syscall_64+0xcd/0x230 [ 740.494739][T17361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.494753][T17361] RIP: 0033:0x7fbab0f8d2d0 [ 740.494768][T17361] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 740.494782][T17361] RSP: 002b:00007fbab1d33f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 740.494797][T17361] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fbab0f8d2d0 [ 740.494807][T17361] RDX: 0000000000000002 RSI: 00007fbab1d33fa0 RDI: 00000000ffffff9c [ 740.494817][T17361] RBP: 00007fbab1d33fa0 R08: 0000000000000000 R09: 0000000000000000 [ 740.494832][T17361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 740.494842][T17361] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 740.494868][T17361] [ 740.773817][T17371] FAULT_INJECTION: forcing a failure. [ 740.773817][T17371] name failslab, interval 1, probability 0, space 0, times 0 [ 740.787439][T17371] CPU: 0 UID: 0 PID: 17371 Comm: syz.4.2597 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 740.787464][T17371] Tainted: [I]=FIRMWARE_WORKAROUND [ 740.787469][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 740.787478][T17371] Call Trace: [ 740.787483][T17371] [ 740.787488][T17371] dump_stack_lvl+0x16c/0x1f0 [ 740.787512][T17371] should_fail_ex+0x512/0x640 [ 740.787529][T17371] ? fs_reclaim_acquire+0xae/0x150 [ 740.787551][T17371] ? tomoyo_encode2+0x100/0x3e0 [ 740.787569][T17371] should_failslab+0xc2/0x120 [ 740.787587][T17371] __kmalloc_noprof+0xd2/0x510 [ 740.787608][T17371] tomoyo_encode2+0x100/0x3e0 [ 740.787628][T17371] tomoyo_encode+0x29/0x50 [ 740.787645][T17371] tomoyo_realpath_from_path+0x18f/0x6e0 [ 740.787666][T17371] ? tomoyo_profile+0x47/0x60 [ 740.787689][T17371] tomoyo_path_number_perm+0x245/0x580 [ 740.787704][T17371] ? tomoyo_path_number_perm+0x237/0x580 [ 740.787738][T17371] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 740.787755][T17371] ? find_held_lock+0x2b/0x80 [ 740.787786][T17371] ? find_held_lock+0x2b/0x80 [ 740.787799][T17371] ? hook_file_ioctl_common+0x145/0x410 [ 740.787819][T17371] ? __fget_files+0x20e/0x3c0 [ 740.787835][T17371] security_file_ioctl+0x9b/0x240 [ 740.787858][T17371] __x64_sys_ioctl+0xb7/0x200 [ 740.787879][T17371] do_syscall_64+0xcd/0x230 [ 740.787899][T17371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.787914][T17371] RIP: 0033:0x7fadccb8e969 [ 740.787927][T17371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.787940][T17371] RSP: 002b:00007fadcda1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.787954][T17371] RAX: ffffffffffffffda RBX: 00007fadccdb6080 RCX: 00007fadccb8e969 [ 740.787963][T17371] RDX: 0000000000000038 RSI: 0000000000005404 RDI: 0000000000000003 [ 740.787972][T17371] RBP: 00007fadcda1b090 R08: 0000000000000000 R09: 0000000000000000 [ 740.787981][T17371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.787989][T17371] R13: 0000000000000001 R14: 00007fadccdb6080 R15: 00007ffe4a1f85a8 [ 740.788007][T17371] [ 740.788021][T17371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.229430][T17399] Invalid ELF header magic: != ELF [ 742.412736][T17410] input: f¬ as /devices/virtual/input/input237 [ 742.589421][T17415] FAULT_INJECTION: forcing a failure. [ 742.589421][T17415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.634051][T17414] vmstat_refresh: nr_hugetlb -2560 [ 742.646567][T17415] CPU: 0 UID: 0 PID: 17415 Comm: syz.3.2608 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 742.646595][T17415] Tainted: [I]=FIRMWARE_WORKAROUND [ 742.646600][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 742.646610][T17415] Call Trace: [ 742.646615][T17415] [ 742.646621][T17415] dump_stack_lvl+0x16c/0x1f0 [ 742.646647][T17415] should_fail_ex+0x512/0x640 [ 742.646667][T17415] _copy_from_user+0x2e/0xd0 [ 742.646695][T17415] user_termios_to_kernel_termios_1+0x21/0x30 [ 742.646717][T17415] set_termios+0x3be/0x880 [ 742.646737][T17415] ? __pfx_set_termios+0x10/0x10 [ 742.646754][T17415] ? __lock_acquire+0xaa4/0x1ba0 [ 742.646784][T17415] tty_mode_ioctl+0x54c/0xd30 [ 742.646802][T17415] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 742.646826][T17415] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 742.646846][T17415] ? __pfx_n_tty_ioctl+0x10/0x10 [ 742.646860][T17415] n_tty_ioctl_helper+0x4b/0x2b0 [ 742.646879][T17415] n_tty_ioctl+0x7f/0x370 [ 742.646896][T17415] ? __pfx_n_tty_ioctl+0x10/0x10 [ 742.646910][T17415] tty_ioctl+0x6f6/0x1610 [ 742.646923][T17415] ? __pfx_tty_ioctl+0x10/0x10 [ 742.646941][T17415] ? find_held_lock+0x2b/0x80 [ 742.646954][T17415] ? hook_file_ioctl_common+0x145/0x410 [ 742.646974][T17415] ? __fget_files+0x20e/0x3c0 [ 742.646991][T17415] ? __pfx_tty_ioctl+0x10/0x10 [ 742.647004][T17415] __x64_sys_ioctl+0x190/0x200 [ 742.647025][T17415] do_syscall_64+0xcd/0x230 [ 742.647048][T17415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.647068][T17415] RIP: 0033:0x7fbab0f8e969 [ 742.647080][T17415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.647093][T17415] RSP: 002b:00007fbab1d13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.647107][T17415] RAX: ffffffffffffffda RBX: 00007fbab11b6080 RCX: 00007fbab0f8e969 [ 742.647116][T17415] RDX: 0000000000000038 RSI: 0000000000005404 RDI: 0000000000000003 [ 742.647125][T17415] RBP: 00007fbab1d13090 R08: 0000000000000000 R09: 0000000000000000 [ 742.647133][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.647141][T17415] R13: 0000000000000001 R14: 00007fbab11b6080 R15: 00007ffdeba0b008 [ 742.647159][T17415] [ 743.681665][T17436] vivid-007: ================= START STATUS ================= [ 743.722414][T17436] vivid-007: Generate PTS: true [ 743.734160][T17436] vivid-007: Generate SCR: true [ 743.750807][T17436] tpg source WxH: 640x360 (Y'CbCr) [ 743.771028][T17436] tpg field: 1 [ 743.786012][T17436] tpg crop: (0,0)/640x360 [ 743.805817][T17436] tpg compose: (0,0)/640x360 [ 743.823985][T17436] tpg colorspace: 8 [ 743.877701][T17436] tpg transfer function: 0/2 [ 743.935677][T17436] tpg Y'CbCr encoding: 0/1 [ 743.969888][T17436] tpg quantization: 0/2 [ 744.030608][T17436] tpg RGB range: 0/2 [ 744.070687][T17436] vivid-007: ================== END STATUS ================== [ 744.387921][T17474] FAULT_INJECTION: forcing a failure. [ 744.387921][T17474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.442382][T17474] CPU: 0 UID: 0 PID: 17474 Comm: syz.0.2622 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 744.442408][T17474] Tainted: [I]=FIRMWARE_WORKAROUND [ 744.442413][T17474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 744.442422][T17474] Call Trace: [ 744.442428][T17474] [ 744.442434][T17474] dump_stack_lvl+0x16c/0x1f0 [ 744.442461][T17474] should_fail_ex+0x512/0x640 [ 744.442481][T17474] _copy_to_user+0x32/0xd0 [ 744.442501][T17474] simple_read_from_buffer+0xcb/0x170 [ 744.442525][T17474] proc_fail_nth_read+0x197/0x270 [ 744.442551][T17474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.442572][T17474] ? rw_verify_area+0xcf/0x680 [ 744.442592][T17474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.442611][T17474] vfs_read+0x1de/0xc70 [ 744.442628][T17474] ? __pfx___mutex_lock+0x10/0x10 [ 744.442647][T17474] ? __pfx_vfs_read+0x10/0x10 [ 744.442666][T17474] ? __fget_files+0x20e/0x3c0 [ 744.442684][T17474] ksys_read+0x12a/0x240 [ 744.442698][T17474] ? __pfx_ksys_read+0x10/0x10 [ 744.442716][T17474] do_syscall_64+0xcd/0x230 [ 744.442737][T17474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.442752][T17474] RIP: 0033:0x7fabc058d37c [ 744.442764][T17474] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 744.442778][T17474] RSP: 002b:00007fabc1470030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.442792][T17474] RAX: ffffffffffffffda RBX: 00007fabc07b6080 RCX: 00007fabc058d37c [ 744.442802][T17474] RDX: 000000000000000f RSI: 00007fabc14700a0 RDI: 0000000000000005 [ 744.442810][T17474] RBP: 00007fabc1470090 R08: 0000000000000000 R09: 0000000000000000 [ 744.442819][T17474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.442828][T17474] R13: 0000000000000001 R14: 00007fabc07b6080 R15: 00007fff59b1a208 [ 744.442846][T17474] [ 744.792808][T17479] Invalid ELF header magic: != ELF [ 746.387704][T17512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.503023][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.514655][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.377978][T17566] input: f¬ as /devices/virtual/input/input238 [ 751.097491][T17614] input: f¬ as /devices/virtual/input/input239 [ 752.609587][T17636] FAULT_INJECTION: forcing a failure. [ 752.609587][T17636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 752.688841][T17640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 752.744684][T17636] CPU: 0 UID: 0 PID: 17636 Comm: syz.0.2664 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 752.744714][T17636] Tainted: [I]=FIRMWARE_WORKAROUND [ 752.744720][T17636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 752.744731][T17636] Call Trace: [ 752.744737][T17636] [ 752.744743][T17636] dump_stack_lvl+0x16c/0x1f0 [ 752.744768][T17636] should_fail_ex+0x512/0x640 [ 752.744801][T17636] should_fail_alloc_page+0xe7/0x130 [ 752.744823][T17636] prepare_alloc_pages+0x3c2/0x610 [ 752.744845][T17636] ? rcu_is_watching+0x12/0xc0 [ 752.744862][T17636] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 752.744882][T17636] ? cgroup_rstat_updated+0x2a/0xb20 [ 752.744901][T17636] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 752.744921][T17636] ? lru_gen_add_folio+0x1a4/0xef0 [ 752.744943][T17636] ? __lock_acquire+0x5ca/0x1ba0 [ 752.744963][T17636] ? __lock_acquire+0x5ca/0x1ba0 [ 752.744981][T17636] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.745002][T17636] ? policy_nodemask+0xea/0x4e0 [ 752.745021][T17636] alloc_pages_mpol+0x1fb/0x550 [ 752.745040][T17636] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 752.745058][T17636] ? __lock_acquire+0x5ca/0x1ba0 [ 752.745079][T17636] folio_alloc_mpol_noprof+0x36/0x2f0 [ 752.745101][T17636] vma_alloc_folio_noprof+0xed/0x1e0 [ 752.745121][T17636] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 752.745146][T17636] do_pte_missing+0x223d/0x3fb0 [ 752.745168][T17636] __handle_mm_fault+0x103d/0x2a40 [ 752.745189][T17636] ? __pfx___handle_mm_fault+0x10/0x10 [ 752.745203][T17636] ? __pte_offset_map_lock+0x155/0x2f0 [ 752.745224][T17636] ? find_held_lock+0x2b/0x80 [ 752.745237][T17636] ? find_held_lock+0x2b/0x80 [ 752.745262][T17636] handle_mm_fault+0x3fe/0xad0 [ 752.745281][T17636] __get_user_pages+0x771/0x36f0 [ 752.745299][T17636] ? __pfx_mt_find+0x10/0x10 [ 752.745320][T17636] ? __pfx___get_user_pages+0x10/0x10 [ 752.745340][T17636] populate_vma_page_range+0x278/0x3a0 [ 752.745356][T17636] ? __pfx_populate_vma_page_range+0x10/0x10 [ 752.745370][T17636] ? __pfx_find_vma_intersection+0x10/0x10 [ 752.745392][T17636] ? do_mmap+0x69c/0x11b0 [ 752.745414][T17636] __mm_populate+0x1d8/0x380 [ 752.745429][T17636] ? __pfx___mm_populate+0x10/0x10 [ 752.745445][T17636] ? up_write+0x1b2/0x520 [ 752.745468][T17636] vm_mmap_pgoff+0x362/0x450 [ 752.745491][T17636] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 752.745512][T17636] ? find_held_lock+0x2b/0x80 [ 752.745528][T17636] ? __x64_sys_futex+0x1e0/0x4c0 [ 752.745544][T17636] ? __x64_sys_futex+0x1e9/0x4c0 [ 752.745562][T17636] ksys_mmap_pgoff+0x7d/0x5c0 [ 752.745582][T17636] ? rcu_is_watching+0x12/0xc0 [ 752.745598][T17636] __x64_sys_mmap+0x125/0x190 [ 752.745616][T17636] do_syscall_64+0xcd/0x230 [ 752.745637][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.745652][T17636] RIP: 0033:0x7fabc058e969 [ 752.745666][T17636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.745683][T17636] RSP: 002b:00007fabc1491038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 752.745698][T17636] RAX: ffffffffffffffda RBX: 00007fabc07b5fa0 RCX: 00007fabc058e969 [ 752.745708][T17636] RDX: 00000000000000df RSI: 0000000000440009 RDI: 0000000000000000 [ 752.745717][T17636] RBP: 00007fabc0610ab1 R08: 0000000000000007 R09: 0000000000028000 [ 752.745726][T17636] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 752.745736][T17636] R13: 0000000000000000 R14: 00007fabc07b5fa0 R15: 00007fff59b1a208 [ 752.745755][T17636] [ 753.092725][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.236575][T17640] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2657'. [ 756.099460][T17718] Invalid ELF header magic: != ELF [ 756.116386][T17725] FAULT_INJECTION: forcing a failure. [ 756.116386][T17725] name failslab, interval 1, probability 0, space 0, times 0 [ 756.178820][T17725] CPU: 0 UID: 0 PID: 17725 Comm: syz.3.2670 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 756.178848][T17725] Tainted: [I]=FIRMWARE_WORKAROUND [ 756.178854][T17725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 756.178863][T17725] Call Trace: [ 756.178869][T17725] [ 756.178875][T17725] dump_stack_lvl+0x16c/0x1f0 [ 756.178899][T17725] should_fail_ex+0x512/0x640 [ 756.178917][T17725] ? __kvmalloc_node_noprof+0x122/0x600 [ 756.178935][T17725] should_failslab+0xc2/0x120 [ 756.178954][T17725] __kvmalloc_node_noprof+0x135/0x600 [ 756.178970][T17725] ? seq_read_iter+0x826/0x12c0 [ 756.178994][T17725] ? seq_read_iter+0x826/0x12c0 [ 756.179011][T17725] seq_read_iter+0x826/0x12c0 [ 756.179039][T17725] copy_splice_read+0x615/0xba0 [ 756.179062][T17725] ? __mutex_lock+0x1ca/0xb90 [ 756.179082][T17725] ? __pfx_copy_splice_read+0x10/0x10 [ 756.179104][T17725] ? __pfx___mutex_lock+0x10/0x10 [ 756.179127][T17725] ? __fget_files+0x204/0x3c0 [ 756.179142][T17725] ? __pfx_copy_splice_read+0x10/0x10 [ 756.179161][T17725] do_splice_read+0x282/0x370 [ 756.179184][T17725] splice_file_to_pipe+0x109/0x120 [ 756.179199][T17725] do_sendfile+0x400/0xe50 [ 756.179217][T17725] ? __pfx_do_sendfile+0x10/0x10 [ 756.179231][T17725] ? __fget_files+0x20e/0x3c0 [ 756.179248][T17725] __x64_sys_sendfile64+0x1d8/0x220 [ 756.179265][T17725] ? ksys_write+0x1b9/0x240 [ 756.179279][T17725] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 756.179295][T17725] ? rcu_is_watching+0x12/0xc0 [ 756.179315][T17725] do_syscall_64+0xcd/0x230 [ 756.179335][T17725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.179350][T17725] RIP: 0033:0x7fbab0f8e969 [ 756.179362][T17725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.179377][T17725] RSP: 002b:00007fbab1d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 756.179391][T17725] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8e969 [ 756.179402][T17725] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 756.179410][T17725] RBP: 00007fbab1d34090 R08: 0000000000000000 R09: 0000000000000000 [ 756.179419][T17725] R10: 000000000000074c R11: 0000000000000246 R12: 0000000000000001 [ 756.179428][T17725] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 756.179446][T17725] [ 758.634532][T17761] FAULT_INJECTION: forcing a failure. [ 758.634532][T17761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.694392][T17761] CPU: 0 UID: 0 PID: 17761 Comm: syz.3.2679 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 758.694422][T17761] Tainted: [I]=FIRMWARE_WORKAROUND [ 758.694428][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 758.694437][T17761] Call Trace: [ 758.694443][T17761] [ 758.694450][T17761] dump_stack_lvl+0x16c/0x1f0 [ 758.694475][T17761] should_fail_ex+0x512/0x640 [ 758.694495][T17761] _copy_to_user+0x32/0xd0 [ 758.694516][T17761] simple_read_from_buffer+0xcb/0x170 [ 758.694539][T17761] proc_fail_nth_read+0x197/0x270 [ 758.694560][T17761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.694581][T17761] ? rw_verify_area+0xcf/0x680 [ 758.694602][T17761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.694621][T17761] vfs_read+0x1de/0xc70 [ 758.694639][T17761] ? __pfx___mutex_lock+0x10/0x10 [ 758.694658][T17761] ? __pfx_vfs_read+0x10/0x10 [ 758.694677][T17761] ? __fget_files+0x20e/0x3c0 [ 758.694696][T17761] ksys_read+0x12a/0x240 [ 758.694709][T17761] ? __pfx_ksys_read+0x10/0x10 [ 758.694722][T17761] ? rcu_is_watching+0x12/0xc0 [ 758.694742][T17761] do_syscall_64+0xcd/0x230 [ 758.694763][T17761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.694778][T17761] RIP: 0033:0x7fbab0f8d37c [ 758.694791][T17761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 758.694805][T17761] RSP: 002b:00007fbab1d34030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 758.694819][T17761] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8d37c [ 758.694828][T17761] RDX: 000000000000000f RSI: 00007fbab1d340a0 RDI: 0000000000000004 [ 758.694837][T17761] RBP: 00007fbab1d34090 R08: 0000000000000000 R09: 0000000000000000 [ 758.694845][T17761] R10: 000000000000074c R11: 0000000000000246 R12: 0000000000000001 [ 758.694854][T17761] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 758.694871][T17761] [ 759.183423][T17765] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2680'. [ 760.365074][T17778] bond0: option all_slaves_active: invalid value () [ 762.356544][T17813] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2685'. [ 762.562943][T17828] Unable to find swap-space signature [ 762.935774][T17835] FAULT_INJECTION: forcing a failure. [ 762.935774][T17835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.990866][T17835] CPU: 0 UID: 0 PID: 17835 Comm: syz.3.2689 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 762.990896][T17835] Tainted: [I]=FIRMWARE_WORKAROUND [ 762.990902][T17835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 762.990912][T17835] Call Trace: [ 762.990918][T17835] [ 762.990924][T17835] dump_stack_lvl+0x16c/0x1f0 [ 762.990950][T17835] should_fail_ex+0x512/0x640 [ 762.990970][T17835] should_fail_alloc_page+0xe7/0x130 [ 762.990993][T17835] prepare_alloc_pages+0x3c2/0x610 [ 762.991016][T17835] ? rcu_is_watching+0x12/0xc0 [ 762.991033][T17835] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 762.991055][T17835] ? cgroup_rstat_updated+0x2a/0xb20 [ 762.991069][T17835] ? __lock_acquire+0x5ca/0x1ba0 [ 762.991093][T17835] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 762.991115][T17835] ? lru_gen_add_folio+0x1a4/0xef0 [ 762.991136][T17835] ? __lock_acquire+0x5ca/0x1ba0 [ 762.991156][T17835] ? __lock_acquire+0x5ca/0x1ba0 [ 762.991174][T17835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.991195][T17835] ? policy_nodemask+0xea/0x4e0 [ 762.991214][T17835] alloc_pages_mpol+0x1fb/0x550 [ 762.991233][T17835] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 762.991251][T17835] ? __lock_acquire+0x5ca/0x1ba0 [ 762.991272][T17835] folio_alloc_mpol_noprof+0x36/0x2f0 [ 762.991293][T17835] vma_alloc_folio_noprof+0xed/0x1e0 [ 762.991313][T17835] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 762.991339][T17835] do_pte_missing+0x223d/0x3fb0 [ 762.991360][T17835] __handle_mm_fault+0x103d/0x2a40 [ 762.991380][T17835] ? __pfx___handle_mm_fault+0x10/0x10 [ 762.991394][T17835] ? __pte_offset_map_lock+0x155/0x2f0 [ 762.991414][T17835] ? find_held_lock+0x2b/0x80 [ 762.991428][T17835] ? find_held_lock+0x2b/0x80 [ 762.991453][T17835] handle_mm_fault+0x3fe/0xad0 [ 762.991471][T17835] __get_user_pages+0x771/0x36f0 [ 762.991490][T17835] ? __pfx_mt_find+0x10/0x10 [ 762.991511][T17835] ? __pfx___get_user_pages+0x10/0x10 [ 762.991531][T17835] populate_vma_page_range+0x278/0x3a0 [ 762.991546][T17835] ? __pfx_populate_vma_page_range+0x10/0x10 [ 762.991560][T17835] ? __pfx_find_vma_intersection+0x10/0x10 [ 762.991582][T17835] ? do_mmap+0x69c/0x11b0 [ 762.991604][T17835] __mm_populate+0x1d8/0x380 [ 762.991620][T17835] ? __pfx___mm_populate+0x10/0x10 [ 762.991635][T17835] ? up_write+0x1b2/0x520 [ 762.991657][T17835] vm_mmap_pgoff+0x362/0x450 [ 762.991680][T17835] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 762.991700][T17835] ? find_held_lock+0x2b/0x80 [ 762.991716][T17835] ? __x64_sys_futex+0x1e0/0x4c0 [ 762.991732][T17835] ? __x64_sys_futex+0x1e9/0x4c0 [ 762.991750][T17835] ksys_mmap_pgoff+0x7d/0x5c0 [ 762.991770][T17835] ? rcu_is_watching+0x12/0xc0 [ 762.991787][T17835] __x64_sys_mmap+0x125/0x190 [ 762.991805][T17835] do_syscall_64+0xcd/0x230 [ 762.991835][T17835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.991852][T17835] RIP: 0033:0x7fbab0f8e969 [ 762.991866][T17835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.991880][T17835] RSP: 002b:00007fbab1d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 762.991894][T17835] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8e969 [ 762.991904][T17835] RDX: 00000000000000df RSI: 0000000000440009 RDI: 0000000000000000 [ 762.991913][T17835] RBP: 00007fbab1010ab1 R08: 0000000000000007 R09: 0000000000028000 [ 762.991924][T17835] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 762.991933][T17835] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 762.991952][T17835] [ 764.256336][T17847] ubi0: attaching mtd0 [ 764.277018][T17847] ubi0: scanning is finished [ 764.290466][T17847] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 764.318744][T17849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2693'. [ 764.362670][T17849] Invalid ELF header magic: != ELF [ 764.851656][T17847] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 765.313462][ T5151] Bluetooth: hci0: unexpected subevent 0x01 length: 122 > 18 [ 766.802209][T17891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2698'. [ 767.663707][T17917] bridge0: port 3(team0) entered blocking state [ 767.676607][T17917] bridge0: port 3(team0) entered disabled state [ 767.676752][T17917] team0: entered allmulticast mode [ 767.676778][T17917] team_slave_0: entered allmulticast mode [ 767.676791][T17917] team_slave_1: entered allmulticast mode [ 767.678020][T17917] team0: entered promiscuous mode [ 767.678032][T17917] team_slave_0: entered promiscuous mode [ 767.678189][T17917] team_slave_1: entered promiscuous mode [ 767.678656][T17917] bridge0: port 3(team0) entered blocking state [ 767.678726][T17917] bridge0: port 3(team0) entered forwarding state [ 768.589684][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2707'. syzkaller syzkaller login: [ 772.908230][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2723'. [ 772.973243][T18014] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2723'. [ 774.321906][T18030] CIFS mount error: No usable UNC path provided in device string! [ 774.321906][T18030] [ 774.502906][T18030] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 775.552152][T18060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2731'. [ 775.745502][T18071] input: f¬ as /devices/virtual/input/input240 [ 777.193801][T18093] ubi0: attaching mtd0 [ 777.216069][T18093] ubi0: scanning is finished [ 777.235696][T18093] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 777.369643][T18094] Invalid ELF header magic: != ELF [ 777.605052][T18093] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 778.458693][T18108] input: f¬ as /devices/virtual/input/input241 [ 779.162018][T18130] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 779.208333][ T30] audit: type=1800 audit(4294967322.850:16): pid=18133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2750" name="file0" dev="tmpfs" ino=632 res=0 errno=0 [ 779.453401][T18130] FAULT_INJECTION: forcing a failure. [ 779.453401][T18130] name failslab, interval 1, probability 0, space 0, times 0 [ 779.691943][T14246] Bluetooth: hci2: unexpected event 0x3e length: 1020 > 260 [ 779.691968][T14246] Bluetooth: hci2: unexpected subevent 0x01 length: 1019 > 18 [ 779.732554][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz.3.2749 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 779.732581][T18130] Tainted: [I]=FIRMWARE_WORKAROUND [ 779.732588][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 779.732597][T18130] Call Trace: [ 779.732603][T18130] [ 779.732610][T18130] dump_stack_lvl+0x16c/0x1f0 [ 779.732637][T18130] should_fail_ex+0x512/0x640 [ 779.732655][T18130] ? fs_reclaim_acquire+0xae/0x150 [ 779.732680][T18130] ? tomoyo_supervisor+0x45b/0x13b0 [ 779.732694][T18130] should_failslab+0xc2/0x120 [ 779.732713][T18130] __kmalloc_noprof+0xd2/0x510 [ 779.732729][T18130] ? tomoyo_profile+0x47/0x60 [ 779.732753][T18130] tomoyo_supervisor+0x45b/0x13b0 [ 779.732770][T18130] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 779.732790][T18130] ? __pfx_vsnprintf+0x10/0x10 [ 779.732816][T18130] ? tomoyo_encode2+0x329/0x3e0 [ 779.732845][T18130] tomoyo_path_number_perm+0x448/0x580 [ 779.732863][T18130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.732898][T18130] ? find_held_lock+0x2b/0x80 [ 779.732913][T18130] ? hook_file_ioctl_common+0x145/0x410 [ 779.732933][T18130] ? __fget_files+0x20e/0x3c0 [ 779.732950][T18130] security_file_ioctl+0x9b/0x240 [ 779.732968][T18130] __x64_sys_ioctl+0xb7/0x200 [ 779.732990][T18130] do_syscall_64+0xcd/0x230 [ 779.733010][T18130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.733025][T18130] RIP: 0033:0x7fbab0f8e969 [ 779.733038][T18130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.733052][T18130] RSP: 002b:00007fbab1d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.733066][T18130] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8e969 [ 779.733076][T18130] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000006 [ 779.733084][T18130] RBP: 00007fbab1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 779.733093][T18130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.733102][T18130] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 779.733120][T18130] [ 781.278356][T18118] kexec: Could not allocate control_code_buffer [ 782.974282][T18170] input: f¬ as /devices/virtual/input/input242 [ 783.752298][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 785.687848][T18207] FAULT_INJECTION: forcing a failure. [ 785.687848][T18207] name failslab, interval 1, probability 0, space 0, times 0 [ 785.737384][ T30] audit: type=1800 audit(4294967329.380:17): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2762" name="file0" dev="tmpfs" ino=288 res=0 errno=0 [ 785.796171][T18207] CPU: 0 UID: 0 PID: 18207 Comm: syz.1.2771 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 785.796205][T18207] Tainted: [I]=FIRMWARE_WORKAROUND [ 785.796211][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 785.796220][T18207] Call Trace: [ 785.796225][T18207] [ 785.796231][T18207] dump_stack_lvl+0x16c/0x1f0 [ 785.796256][T18207] should_fail_ex+0x512/0x640 [ 785.796273][T18207] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 785.796291][T18207] should_failslab+0xc2/0x120 [ 785.796310][T18207] __kmalloc_cache_noprof+0x6a/0x3e0 [ 785.796324][T18207] ? ima_add_digest_entry+0x52/0x540 [ 785.796347][T18207] ima_add_digest_entry+0x52/0x540 [ 785.796369][T18207] ima_add_template_entry+0x478/0x870 [ 785.796393][T18207] ? __pfx_ima_add_template_entry+0x10/0x10 [ 785.796414][T18207] ? ima_alloc_init_template+0x536/0x720 [ 785.796433][T18207] ima_add_violation+0x17f/0x3d0 [ 785.796449][T18207] ? __pfx_ima_add_violation+0x10/0x10 [ 785.796462][T18207] ? ima_d_path+0x12b/0x2a0 [ 785.796474][T18207] ? __pfx___might_resched+0x10/0x10 [ 785.796491][T18207] ? __pfx_ima_d_path+0x10/0x10 [ 785.796508][T18207] ? __pfx_down_write+0x10/0x10 [ 785.796532][T18207] process_measurement+0x1674/0x23e0 [ 785.796558][T18207] ? __pfx_process_measurement+0x10/0x10 [ 785.796578][T18207] ? __pfx___might_resched+0x10/0x10 [ 785.796595][T18207] ? rcu_is_watching+0x12/0xc0 [ 785.796609][T18207] ? find_held_lock+0x2b/0x80 [ 785.796624][T18207] ? trace_array_get+0x83/0xe0 [ 785.796659][T18207] ? tracing_open_generic+0x94/0xc0 [ 785.796675][T18207] ? subsystem_open+0x18f/0x3e0 [ 785.796693][T18207] ? inode_to_bdi+0x9e/0x160 [ 785.796715][T18207] ima_file_check+0xc5/0x110 [ 785.796734][T18207] ? __pfx_ima_file_check+0x10/0x10 [ 785.796759][T18207] security_file_post_open+0x8e/0x210 [ 785.796779][T18207] path_openat+0x147d/0x2d40 [ 785.796801][T18207] ? __pfx_path_openat+0x10/0x10 [ 785.796832][T18207] do_filp_open+0x20b/0x470 [ 785.796848][T18207] ? __pfx_do_filp_open+0x10/0x10 [ 785.796877][T18207] ? alloc_fd+0x471/0x7d0 [ 785.796896][T18207] do_sys_openat2+0x11b/0x1d0 [ 785.796917][T18207] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.796938][T18207] ? __pfx___might_resched+0x10/0x10 [ 785.796958][T18207] __x64_sys_openat+0x174/0x210 [ 785.796977][T18207] ? __pfx___x64_sys_openat+0x10/0x10 [ 785.796997][T18207] ? rcu_is_watching+0x12/0xc0 [ 785.797016][T18207] do_syscall_64+0xcd/0x230 [ 785.797037][T18207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.797052][T18207] RIP: 0033:0x7f0025b8e969 [ 785.797065][T18207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.797078][T18207] RSP: 002b:00007f0026a10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 785.797092][T18207] RAX: ffffffffffffffda RBX: 00007f0025db5fa0 RCX: 00007f0025b8e969 [ 785.797102][T18207] RDX: 0000000000109041 RSI: 0000200000007380 RDI: ffffffffffffff9c [ 785.797111][T18207] RBP: 00007f0025c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 785.797120][T18207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.797129][T18207] R13: 0000000000000000 R14: 00007f0025db5fa0 R15: 00007ffc601b3518 [ 785.797148][T18207] [ 785.797155][T18207] ima: OUT OF MEMORY ERROR creating queue entry [ 786.661349][ T30] audit: type=1804 audit(4294967330.310:18): pid=18207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.2771" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 786.744258][ T30] audit: type=1804 audit(4294967330.330:19): pid=18207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2771" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 787.552210][T18237] input: f¬ as /devices/virtual/input/input243 [ 787.601637][T18248] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 787.741521][T18241] random: crng reseeded on system resumption [ 790.406549][ T30] audit: type=1800 audit(4294967334.040:20): pid=18304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2783" name="file0" dev="tmpfs" ino=685 res=0 errno=0 [ 790.466143][T18305] input: f¬ as /devices/virtual/input/input244 [ 791.310982][T18330] FAULT_INJECTION: forcing a failure. [ 791.310982][T18330] name failslab, interval 1, probability 0, space 0, times 0 [ 791.391270][T18330] CPU: 0 UID: 0 PID: 18330 Comm: syz.4.2790 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 791.391302][T18330] Tainted: [I]=FIRMWARE_WORKAROUND [ 791.391308][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 791.391316][T18330] Call Trace: [ 791.391322][T18330] [ 791.391328][T18330] dump_stack_lvl+0x16c/0x1f0 [ 791.391352][T18330] should_fail_ex+0x512/0x640 [ 791.391368][T18330] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 791.391388][T18330] should_failslab+0xc2/0x120 [ 791.391406][T18330] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 791.391423][T18330] ? __alloc_skb+0x2b2/0x380 [ 791.391443][T18330] __alloc_skb+0x2b2/0x380 [ 791.391460][T18330] ? __pfx___alloc_skb+0x10/0x10 [ 791.391477][T18330] ? __nla_validate_parse+0x600/0x2880 [ 791.391503][T18330] __netdev_alloc_skb+0x213/0x920 [ 791.391523][T18330] ovs_packet_cmd_execute+0x21d/0x1080 [ 791.391547][T18330] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 791.391571][T18330] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 791.391595][T18330] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 791.391621][T18330] genl_family_rcv_msg_doit+0x206/0x2f0 [ 791.391644][T18330] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 791.391669][T18330] ? trace_cap_capable+0x18d/0x200 [ 791.391688][T18330] ? bpf_lsm_capable+0x9/0x10 [ 791.391703][T18330] ? security_capable+0x7e/0x260 [ 791.391718][T18330] ? ns_capable+0xd7/0x110 [ 791.391735][T18330] genl_rcv_msg+0x55c/0x800 [ 791.391751][T18330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 791.391763][T18330] ? __pfx___dev_queue_xmit+0x10/0x10 [ 791.391778][T18330] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 791.391799][T18330] ? __lock_acquire+0xaa4/0x1ba0 [ 791.391821][T18330] netlink_rcv_skb+0x16a/0x440 [ 791.391840][T18330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 791.391854][T18330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 791.391882][T18330] ? __pfx_down_read+0x10/0x10 [ 791.391895][T18330] ? netlink_deliver_tap+0x1ae/0xd30 [ 791.391916][T18330] genl_rcv+0x28/0x40 [ 791.391935][T18330] netlink_unicast+0x53a/0x7f0 [ 791.391956][T18330] ? __pfx_netlink_unicast+0x10/0x10 [ 791.391974][T18330] ? __lock_acquire+0xaa4/0x1ba0 [ 791.391996][T18330] netlink_sendmsg+0x8d1/0xdd0 [ 791.392018][T18330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.392044][T18330] ____sys_sendmsg+0xa95/0xc70 [ 791.392058][T18330] ? copy_msghdr_from_user+0x10a/0x160 [ 791.392076][T18330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 791.392098][T18330] ___sys_sendmsg+0x134/0x1d0 [ 791.392116][T18330] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.392156][T18330] __sys_sendmsg+0x16d/0x220 [ 791.392174][T18330] ? __pfx___sys_sendmsg+0x10/0x10 [ 791.392197][T18330] ? rcu_is_watching+0x12/0xc0 [ 791.392216][T18330] do_syscall_64+0xcd/0x230 [ 791.392236][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.392251][T18330] RIP: 0033:0x7fadccb8e969 [ 791.392263][T18330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.392279][T18330] RSP: 002b:00007fadcda3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.392297][T18330] RAX: ffffffffffffffda RBX: 00007fadccdb5fa0 RCX: 00007fadccb8e969 [ 791.392307][T18330] RDX: 0000000004004800 RSI: 0000200000000240 RDI: 0000000000000003 [ 791.392316][T18330] RBP: 00007fadcda3c090 R08: 0000000000000000 R09: 0000000000000000 [ 791.392325][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.392333][T18330] R13: 0000000000000000 R14: 00007fadccdb5fa0 R15: 00007ffe4a1f85a8 [ 791.392351][T18330] [ 793.242774][T18352] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2796'. [ 794.588412][ T30] audit: type=1800 audit(4294967338.230:21): pid=18381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2803" name="file0" dev="tmpfs" ino=1003 res=0 errno=0 [ 797.793790][T18439] CIFS mount error: No usable UNC path provided in device string! [ 797.793790][T18439] [ 797.895727][T18445] ptrace attach of "./syz-executor exec"[14495] was attempted by "./syz-executor exec"[18445] [ 797.987926][T18439] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 799.402920][T18473] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2824'. [ 799.503831][T18471] FAULT_INJECTION: forcing a failure. [ 799.503831][T18471] name failslab, interval 1, probability 0, space 0, times 0 [ 799.563192][T18471] CPU: 0 UID: 0 PID: 18471 Comm: syz.1.2823 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 799.563221][T18471] Tainted: [I]=FIRMWARE_WORKAROUND [ 799.563227][T18471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 799.563238][T18471] Call Trace: [ 799.563243][T18471] [ 799.563250][T18471] dump_stack_lvl+0x16c/0x1f0 [ 799.563274][T18471] should_fail_ex+0x512/0x640 [ 799.563293][T18471] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 799.563314][T18471] should_failslab+0xc2/0x120 [ 799.563333][T18471] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 799.563351][T18471] ? __d_alloc+0x31/0xaa0 [ 799.563369][T18471] __d_alloc+0x31/0xaa0 [ 799.563388][T18471] d_alloc+0x4a/0x1e0 [ 799.563404][T18471] d_alloc_parallel+0xe3/0x12e0 [ 799.563423][T18471] ? kasan_save_stack+0x42/0x60 [ 799.563438][T18471] ? kasan_save_track+0x14/0x30 [ 799.563453][T18471] ? kasan_save_free_info+0x3b/0x60 [ 799.563473][T18471] ? kfree+0x2b6/0x4d0 [ 799.563484][T18471] ? walk_component+0x1a2/0x5b0 [ 799.563503][T18471] ? link_path_walk.part.0.constprop.0+0x553/0xd60 [ 799.563528][T18471] ? __lock_acquire+0xaa4/0x1ba0 [ 799.563555][T18471] ? __pfx_d_alloc_parallel+0x10/0x10 [ 799.563577][T18471] ? lockdep_init_map_type+0x5c/0x280 [ 799.563598][T18471] ? lockdep_init_map_type+0x5c/0x280 [ 799.563622][T18471] __lookup_slow+0x193/0x460 [ 799.563642][T18471] ? __pfx___lookup_slow+0x10/0x10 [ 799.563673][T18471] ? lookup_fast+0x156/0x610 [ 799.563697][T18471] walk_component+0x353/0x5b0 [ 799.563719][T18471] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 799.563748][T18471] path_openat+0x227/0x2d40 [ 799.563761][T18471] ? __x64_sys_openat+0x174/0x210 [ 799.563787][T18471] ? __pfx_path_openat+0x10/0x10 [ 799.563806][T18471] do_filp_open+0x20b/0x470 [ 799.563821][T18471] ? __pfx_do_filp_open+0x10/0x10 [ 799.563842][T18471] ? __pfx_kfree_link+0x10/0x10 [ 799.563866][T18471] ? alloc_fd+0x471/0x7d0 [ 799.563884][T18471] do_sys_openat2+0x11b/0x1d0 [ 799.563903][T18471] ? __pfx_do_sys_openat2+0x10/0x10 [ 799.563929][T18471] __x64_sys_openat+0x174/0x210 [ 799.563948][T18471] ? __pfx___x64_sys_openat+0x10/0x10 [ 799.563968][T18471] ? rcu_is_watching+0x12/0xc0 [ 799.563988][T18471] do_syscall_64+0xcd/0x230 [ 799.564009][T18471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.564023][T18471] RIP: 0033:0x7f0025b8d2d0 [ 799.564036][T18471] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 799.564051][T18471] RSP: 002b:00007f0026a0ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 799.564065][T18471] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0025b8d2d0 [ 799.564076][T18471] RDX: 0000000000000002 RSI: 00007f0026a0ffa0 RDI: 00000000ffffff9c [ 799.564085][T18471] RBP: 00007f0026a0ffa0 R08: 0000000000000000 R09: 00007f0026a0fcd5 [ 799.564095][T18471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 799.564104][T18471] R13: 0000000000000000 R14: 00007f0025db5fa0 R15: 00007ffc601b3518 [ 799.564124][T18471] [ 799.867608][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.559735][T18492] input: f¬ as /devices/virtual/input/input245 [ 801.064420][T18503] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2834'. [ 801.136592][T18505] FAULT_INJECTION: forcing a failure. [ 801.136592][T18505] name failslab, interval 1, probability 0, space 0, times 0 [ 801.198117][T18505] CPU: 0 UID: 0 PID: 18505 Comm: syz.4.2835 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 801.198144][T18505] Tainted: [I]=FIRMWARE_WORKAROUND [ 801.198150][T18505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 801.198159][T18505] Call Trace: [ 801.198165][T18505] [ 801.198171][T18505] dump_stack_lvl+0x16c/0x1f0 [ 801.198197][T18505] should_fail_ex+0x512/0x640 [ 801.198214][T18505] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 801.198234][T18505] should_failslab+0xc2/0x120 [ 801.198253][T18505] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 801.198269][T18505] ? ovs_flow_alloc+0x10e/0x210 [ 801.198290][T18505] ovs_flow_alloc+0x10e/0x210 [ 801.198306][T18505] ovs_packet_cmd_execute+0x53f/0x1080 [ 801.198329][T18505] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 801.198350][T18505] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 801.198381][T18505] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 801.198406][T18505] genl_family_rcv_msg_doit+0x206/0x2f0 [ 801.198429][T18505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.198450][T18505] ? trace_cap_capable+0x18d/0x200 [ 801.198468][T18505] ? bpf_lsm_capable+0x9/0x10 [ 801.198484][T18505] ? security_capable+0x7e/0x260 [ 801.198498][T18505] ? ns_capable+0xd7/0x110 [ 801.198516][T18505] genl_rcv_msg+0x55c/0x800 [ 801.198531][T18505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.198544][T18505] ? __pfx___dev_queue_xmit+0x10/0x10 [ 801.198560][T18505] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 801.198580][T18505] ? __lock_acquire+0xaa4/0x1ba0 [ 801.198603][T18505] netlink_rcv_skb+0x16a/0x440 [ 801.198622][T18505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.198636][T18505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.198664][T18505] ? __pfx_down_read+0x10/0x10 [ 801.198677][T18505] ? netlink_deliver_tap+0x1ae/0xd30 [ 801.198698][T18505] genl_rcv+0x28/0x40 [ 801.198716][T18505] netlink_unicast+0x53a/0x7f0 [ 801.198737][T18505] ? __pfx_netlink_unicast+0x10/0x10 [ 801.198755][T18505] ? __lock_acquire+0xaa4/0x1ba0 [ 801.198777][T18505] netlink_sendmsg+0x8d1/0xdd0 [ 801.198798][T18505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.198824][T18505] ____sys_sendmsg+0xa95/0xc70 [ 801.198838][T18505] ? copy_msghdr_from_user+0x10a/0x160 [ 801.198856][T18505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.198877][T18505] ___sys_sendmsg+0x134/0x1d0 [ 801.198896][T18505] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.198935][T18505] __sys_sendmsg+0x16d/0x220 [ 801.198953][T18505] ? __pfx___sys_sendmsg+0x10/0x10 [ 801.198976][T18505] ? rcu_is_watching+0x12/0xc0 [ 801.198996][T18505] do_syscall_64+0xcd/0x230 [ 801.199017][T18505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.199032][T18505] RIP: 0033:0x7fadccb8e969 [ 801.199043][T18505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.199058][T18505] RSP: 002b:00007fadcda3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.199072][T18505] RAX: ffffffffffffffda RBX: 00007fadccdb5fa0 RCX: 00007fadccb8e969 [ 801.199082][T18505] RDX: 0000000004004800 RSI: 0000200000000240 RDI: 0000000000000003 [ 801.199092][T18505] RBP: 00007fadcda3c090 R08: 0000000000000000 R09: 0000000000000000 [ 801.199103][T18505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.199112][T18505] R13: 0000000000000000 R14: 00007fadccdb5fa0 R15: 00007ffe4a1f85a8 [ 801.199130][T18505] [ 801.531172][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.534908][T18534] input: f¬ as /devices/virtual/input/input246 [ 802.673991][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'. [ 802.768908][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 802.916696][T18548] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2846'. [ 802.990486][T18547] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input247 [ 803.385629][T18553] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input248 [ 803.772610][T18565] FAULT_INJECTION: forcing a failure. [ 803.772610][T18565] name failslab, interval 1, probability 0, space 0, times 0 [ 803.842322][T18565] CPU: 0 UID: 0 PID: 18565 Comm: syz.4.2851 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 803.842363][T18565] Tainted: [I]=FIRMWARE_WORKAROUND [ 803.842369][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 803.842378][T18565] Call Trace: [ 803.842384][T18565] [ 803.842390][T18565] dump_stack_lvl+0x16c/0x1f0 [ 803.842414][T18565] should_fail_ex+0x512/0x640 [ 803.842431][T18565] ? __kmalloc_noprof+0xbf/0x510 [ 803.842449][T18565] ? nla_alloc_flow_actions+0x21/0x80 [ 803.842461][T18565] should_failslab+0xc2/0x120 [ 803.842480][T18565] __kmalloc_noprof+0xd2/0x510 [ 803.842499][T18565] nla_alloc_flow_actions+0x21/0x80 [ 803.842512][T18565] ovs_nla_copy_actions+0x60/0x330 [ 803.842530][T18565] ovs_packet_cmd_execute+0x663/0x1080 [ 803.842553][T18565] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 803.842574][T18565] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 803.842597][T18565] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 803.842622][T18565] genl_family_rcv_msg_doit+0x206/0x2f0 [ 803.842645][T18565] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 803.842666][T18565] ? trace_cap_capable+0x18d/0x200 [ 803.842685][T18565] ? bpf_lsm_capable+0x9/0x10 [ 803.842701][T18565] ? security_capable+0x7e/0x260 [ 803.842715][T18565] ? ns_capable+0xd7/0x110 [ 803.842733][T18565] genl_rcv_msg+0x55c/0x800 [ 803.842749][T18565] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.842762][T18565] ? __pfx___dev_queue_xmit+0x10/0x10 [ 803.842778][T18565] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 803.842798][T18565] ? __lock_acquire+0xaa4/0x1ba0 [ 803.842821][T18565] netlink_rcv_skb+0x16a/0x440 [ 803.842840][T18565] ? __pfx_genl_rcv_msg+0x10/0x10 [ 803.842854][T18565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.842881][T18565] ? __pfx_down_read+0x10/0x10 [ 803.842895][T18565] ? netlink_deliver_tap+0x1ae/0xd30 [ 803.842916][T18565] genl_rcv+0x28/0x40 [ 803.842935][T18565] netlink_unicast+0x53a/0x7f0 [ 803.842956][T18565] ? __pfx_netlink_unicast+0x10/0x10 [ 803.842973][T18565] ? __lock_acquire+0xaa4/0x1ba0 [ 803.842996][T18565] netlink_sendmsg+0x8d1/0xdd0 [ 803.843018][T18565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.843044][T18565] ____sys_sendmsg+0xa95/0xc70 [ 803.843058][T18565] ? copy_msghdr_from_user+0x10a/0x160 [ 803.843081][T18565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.843103][T18565] ___sys_sendmsg+0x134/0x1d0 [ 803.843122][T18565] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.843166][T18565] __sys_sendmsg+0x16d/0x220 [ 803.843184][T18565] ? __pfx___sys_sendmsg+0x10/0x10 [ 803.843208][T18565] ? rcu_is_watching+0x12/0xc0 [ 803.843227][T18565] do_syscall_64+0xcd/0x230 [ 803.843249][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.843263][T18565] RIP: 0033:0x7fadccb8e969 [ 803.843275][T18565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.843290][T18565] RSP: 002b:00007fadcda3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.843305][T18565] RAX: ffffffffffffffda RBX: 00007fadccdb5fa0 RCX: 00007fadccb8e969 [ 803.843315][T18565] RDX: 0000000004004800 RSI: 0000200000000240 RDI: 0000000000000003 [ 803.843324][T18565] RBP: 00007fadcda3c090 R08: 0000000000000000 R09: 0000000000000000 [ 803.843333][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 803.843342][T18565] R13: 0000000000000000 R14: 00007fadccdb5fa0 R15: 00007ffe4a1f85a8 [ 803.843360][T18565] [ 805.302359][T18592] input: f¬ as /devices/virtual/input/input249 [ 807.356741][T18622] FAULT_INJECTION: forcing a failure. [ 807.356741][T18622] name failslab, interval 1, probability 0, space 0, times 0 [ 807.435853][T18622] CPU: 0 UID: 0 PID: 18622 Comm: syz.4.2864 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 807.435880][T18622] Tainted: [I]=FIRMWARE_WORKAROUND [ 807.435886][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 807.435895][T18622] Call Trace: [ 807.435901][T18622] [ 807.435907][T18622] dump_stack_lvl+0x16c/0x1f0 [ 807.435931][T18622] should_fail_ex+0x512/0x640 [ 807.435948][T18622] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 807.435968][T18622] should_failslab+0xc2/0x120 [ 807.435986][T18622] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 807.436003][T18622] ? __alloc_skb+0x2b2/0x380 [ 807.436020][T18622] ? bpf_lsm_capable+0x9/0x10 [ 807.436039][T18622] __alloc_skb+0x2b2/0x380 [ 807.436055][T18622] ? __pfx___alloc_skb+0x10/0x10 [ 807.436072][T18622] ? genl_rcv_msg+0x530/0x800 [ 807.436085][T18622] ? genl_rcv_msg+0x4bb/0x800 [ 807.436102][T18622] netlink_ack+0x15d/0xb80 [ 807.436123][T18622] ? __lock_acquire+0xaa4/0x1ba0 [ 807.436145][T18622] netlink_rcv_skb+0x347/0x440 [ 807.436164][T18622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 807.436178][T18622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.436206][T18622] ? __pfx_down_read+0x10/0x10 [ 807.436219][T18622] ? netlink_deliver_tap+0x1ae/0xd30 [ 807.436241][T18622] genl_rcv+0x28/0x40 [ 807.436259][T18622] netlink_unicast+0x53a/0x7f0 [ 807.436280][T18622] ? __pfx_netlink_unicast+0x10/0x10 [ 807.436298][T18622] ? __lock_acquire+0xaa4/0x1ba0 [ 807.436320][T18622] netlink_sendmsg+0x8d1/0xdd0 [ 807.436342][T18622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.436368][T18622] ____sys_sendmsg+0xa95/0xc70 [ 807.436382][T18622] ? copy_msghdr_from_user+0x10a/0x160 [ 807.436400][T18622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.436422][T18622] ___sys_sendmsg+0x134/0x1d0 [ 807.436440][T18622] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.436480][T18622] __sys_sendmsg+0x16d/0x220 [ 807.436498][T18622] ? __pfx___sys_sendmsg+0x10/0x10 [ 807.436521][T18622] ? rcu_is_watching+0x12/0xc0 [ 807.436540][T18622] do_syscall_64+0xcd/0x230 [ 807.436561][T18622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.436575][T18622] RIP: 0033:0x7fadccb8e969 [ 807.436587][T18622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.436601][T18622] RSP: 002b:00007fadcda3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.436616][T18622] RAX: ffffffffffffffda RBX: 00007fadccdb5fa0 RCX: 00007fadccb8e969 [ 807.436626][T18622] RDX: 0000000004004800 RSI: 0000200000000240 RDI: 0000000000000003 [ 807.436636][T18622] RBP: 00007fadcda3c090 R08: 0000000000000000 R09: 0000000000000000 [ 807.436644][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 807.436653][T18622] R13: 0000000000000000 R14: 00007fadccdb5fa0 R15: 00007ffe4a1f85a8 [ 807.436671][T18622] [ 808.026963][T18627] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input250 [ 808.058191][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'. [ 808.937935][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.946190][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.042052][T18633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input251 [ 809.695971][T18659] netlink: zone id is out of range [ 809.723282][T18659] netlink: zone id is out of range [ 809.770396][T18659] netlink: zone id is out of range [ 809.794856][T18659] netlink: zone id is out of range [ 809.832290][T18659] netlink: zone id is out of range [ 809.894257][T18659] netlink: zone id is out of range [ 809.928994][T18665] netlink: 'syz.4.2874': attribute type 7 has an invalid length. [ 809.978352][T18659] netlink: zone id is out of range [ 810.017762][T18659] netlink: zone id is out of range [ 810.069541][T18659] netlink: zone id is out of range [ 810.100526][T18659] netlink: zone id is out of range [ 810.501672][T18675] QAT: Device 0 not found [ 811.526707][T18690] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input252 [ 811.818411][T18691] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input253 [ 812.243001][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2883'. [ 812.298111][T18703] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2883'. [ 812.394002][T18702] input: f¬ as /devices/virtual/input/input254 [ 812.614660][T18712] netlink: 'syz.3.2886': attribute type 7 has an invalid length. [ 812.981910][T18714] input: isc as /devices/virtual/input/input255 [ 813.196150][T18723] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2891'. [ 813.784923][T18735] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2895'. [ 814.930718][T18746] input: f¬ as /devices/virtual/input/input256 [ 815.451219][T18756] net_ratelimit: 81 callbacks suppressed [ 815.451234][T18756] netlink: zone id is out of range [ 815.501930][T18756] netlink: zone id is out of range [ 815.508801][T18759] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2900'. [ 815.522299][T18756] netlink: zone id is out of range [ 815.527428][T18756] netlink: zone id is out of range [ 815.587234][T18756] netlink: zone id is out of range [ 815.613365][T18756] netlink: zone id is out of range [ 815.618484][T18756] netlink: zone id is out of range [ 815.687292][T18756] netlink: zone id is out of range [ 815.753407][T18756] netlink: zone id is out of range [ 815.825077][T18756] netlink: zone id is out of range [ 815.860336][T18763] netlink: 'syz.0.2898': attribute type 7 has an invalid length. [ 816.232090][T18778] FAULT_INJECTION: forcing a failure. [ 816.232090][T18778] name failslab, interval 1, probability 0, space 0, times 0 [ 816.309548][T18778] CPU: 0 UID: 0 PID: 18778 Comm: syz.0.2904 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 816.309576][T18778] Tainted: [I]=FIRMWARE_WORKAROUND [ 816.309583][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 816.309592][T18778] Call Trace: [ 816.309598][T18778] [ 816.309605][T18778] dump_stack_lvl+0x16c/0x1f0 [ 816.309628][T18778] should_fail_ex+0x512/0x640 [ 816.309649][T18778] should_failslab+0xc2/0x120 [ 816.309668][T18778] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 816.309685][T18778] ? __lock_acquire+0x5ca/0x1ba0 [ 816.309705][T18778] ? dst_alloc+0x99/0x1a0 [ 816.309724][T18778] dst_alloc+0x99/0x1a0 [ 816.309741][T18778] rt_dst_alloc+0x35/0x3a0 [ 816.309762][T18778] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 816.309784][T18778] ip_route_output_key_hash+0x137/0x2e0 [ 816.309800][T18778] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 816.309824][T18778] __ip4_datagram_connect+0x824/0x1510 [ 816.309849][T18778] ? do_softirq+0xd0/0xf0 [ 816.309867][T18778] l2tp_ip_connect+0x151/0x3c0 [ 816.309889][T18778] inet_dgram_connect+0x15b/0x2f0 [ 816.309911][T18778] ? __pfx_inet_dgram_connect+0x10/0x10 [ 816.309930][T18778] __sys_connect_file+0x13e/0x1a0 [ 816.309948][T18778] __sys_connect+0x14d/0x170 [ 816.309963][T18778] ? __pfx___sys_connect+0x10/0x10 [ 816.309986][T18778] ? rcu_is_watching+0x12/0xc0 [ 816.310003][T18778] __x64_sys_connect+0x72/0xb0 [ 816.310104][T18778] ? lockdep_hardirqs_on+0x7c/0x110 [ 816.310132][T18778] do_syscall_64+0xcd/0x230 [ 816.310155][T18778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.310171][T18778] RIP: 0033:0x7fabc058e969 [ 816.310184][T18778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.310199][T18778] RSP: 002b:00007fabc1470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 816.310214][T18778] RAX: ffffffffffffffda RBX: 00007fabc07b6080 RCX: 00007fabc058e969 [ 816.310224][T18778] RDX: 0000000000000055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 816.310233][T18778] RBP: 00007fabc0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 816.310243][T18778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.310254][T18778] R13: 0000000000000000 R14: 00007fabc07b6080 R15: 00007fff59b1a208 [ 816.310278][T18778] [ 817.315703][T18786] input: f¬ as /devices/virtual/input/input257 [ 817.578197][T18791] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2907'. [ 818.270744][T18802] FAULT_INJECTION: forcing a failure. [ 818.270744][T18802] name failslab, interval 1, probability 0, space 0, times 0 [ 818.300600][T18802] CPU: 0 UID: 0 PID: 18802 Comm: syz.3.2910 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 818.300627][T18802] Tainted: [I]=FIRMWARE_WORKAROUND [ 818.300633][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 818.300642][T18802] Call Trace: [ 818.300648][T18802] [ 818.300653][T18802] dump_stack_lvl+0x16c/0x1f0 [ 818.300678][T18802] should_fail_ex+0x512/0x640 [ 818.300708][T18802] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 818.300726][T18802] should_failslab+0xc2/0x120 [ 818.300745][T18802] __kmalloc_cache_noprof+0x6a/0x3e0 [ 818.300760][T18802] ? __asan_memcpy+0x3c/0x60 [ 818.300774][T18802] ? ip_vs_protocol_net_init+0xbe/0x300 [ 818.300797][T18802] ip_vs_protocol_net_init+0xbe/0x300 [ 818.300820][T18802] __ip_vs_init+0x239/0x520 [ 818.300835][T18802] ? __pfx___ip_vs_init+0x10/0x10 [ 818.300855][T18802] ops_init+0x1df/0x5f0 [ 818.300878][T18802] setup_net+0x21e/0x850 [ 818.300899][T18802] ? __pfx_setup_net+0x10/0x10 [ 818.300921][T18802] ? lockdep_init_map_type+0x5c/0x280 [ 818.300942][T18802] ? __pfx_down_read_killable+0x10/0x10 [ 818.300958][T18802] ? debug_mutex_init+0x37/0x70 [ 818.300980][T18802] copy_net_ns+0x2a6/0x5f0 [ 818.301003][T18802] create_new_namespaces+0x3ea/0xad0 [ 818.301025][T18802] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 818.301044][T18802] ksys_unshare+0x45b/0xa40 [ 818.301064][T18802] ? __pfx_ksys_unshare+0x10/0x10 [ 818.301084][T18802] ? syscall_user_dispatch+0x78/0x140 [ 818.301110][T18802] __x64_sys_unshare+0x31/0x40 [ 818.301128][T18802] do_syscall_64+0xcd/0x230 [ 818.301148][T18802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.301163][T18802] RIP: 0033:0x7fbab0f8e969 [ 818.301175][T18802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.301188][T18802] RSP: 002b:00007fbab1d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 818.301203][T18802] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8e969 [ 818.301212][T18802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 818.301222][T18802] RBP: 00007fbab1010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 818.301231][T18802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.301239][T18802] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 818.301256][T18802] [ 818.893434][T18791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 818.911521][T18791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 818.917455][T18791] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 818.971913][T18791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 818.977908][T18791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 819.010253][T18791] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 819.033503][T18805] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2911'. [ 819.127656][T18791] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 819.705916][T18822] input: f¬ as /devices/virtual/input/input258 [ 819.813469][T14246] Bluetooth: hci1: command 0x0c1a tx timeout [ 820.809492][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 820.859568][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 820.906922][T18842] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2921'. [ 821.014962][T14246] Bluetooth: hci2: command 0x0c1a tx timeout [ 821.021061][ T5151] Bluetooth: hci3: command 0x0c1a tx timeout [ 821.027285][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 821.432409][T18847] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2922'. [ 821.636854][T18848] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2922'. [ 822.180817][T18860] QAT: Device 0 not found [ 823.091111][T14246] Bluetooth: hci2: command 0x0c1a tx timeout [ 823.097913][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 823.138659][T18883] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2932'. [ 823.215395][T18885] net_ratelimit: 20 callbacks suppressed [ 823.215407][T18885] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 823.271659][T18886] openvswitch: netlink: Message has 139 unknown bytes. [ 823.449564][T18879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.490878][T18879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 823.496879][T18879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 823.552400][T18879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 823.957305][T18897] QAT: Device 0 not found [ 824.345608][T14246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 824.354189][T14246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 824.364097][T14246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 824.376213][T14246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 824.393139][T14246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 824.772088][T14246] Bluetooth: hci1: command 0x0c1a tx timeout [ 825.108629][T18905] chnl_net:caif_netlink_parms(): no params data found [ 825.482618][T18905] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.489706][T18905] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.555927][T18905] bridge_slave_0: entered allmulticast mode [ 825.573246][T14246] Bluetooth: hci2: command 0x0c1a tx timeout [ 825.579246][T14246] Bluetooth: hci3: command 0x0c1a tx timeout [ 825.587435][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 825.609049][T18920] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2942'. [ 825.619447][T18905] bridge_slave_0: entered promiscuous mode [ 825.855787][T18905] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.914703][T18905] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.974791][T18905] bridge_slave_1: entered allmulticast mode [ 826.021357][T18905] bridge_slave_1: entered promiscuous mode [ 826.324724][T18905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.450721][T14246] Bluetooth: hci4: command tx timeout [ 826.481833][T18905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.753160][T18905] team0: Port device team_slave_0 added [ 826.814142][T18905] team0: Port device team_slave_1 added [ 826.997949][T18936] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 827.011767][T18905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.050576][T18905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.211149][T18905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.257280][T18905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.280452][T18905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.402416][T18905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.673910][T18905] hsr_slave_0: entered promiscuous mode [ 827.703476][T18905] hsr_slave_1: entered promiscuous mode [ 827.742609][T18905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.750172][T18905] Cannot create hsr debugfs directory [ 828.516449][T18950] input: f¬ as /devices/virtual/input/input259 [ 828.530657][T14246] Bluetooth: hci4: command tx timeout [ 828.779440][T18905] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 828.839322][T18905] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 828.921228][T18905] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 828.974762][T18905] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 829.323989][T18905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.419758][T18905] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.455334][T18954] FAULT_INJECTION: forcing a failure. [ 829.455334][T18954] name failslab, interval 1, probability 0, space 0, times 0 [ 829.487151][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.494300][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.539414][T18954] CPU: 0 UID: 0 PID: 18954 Comm: syz.4.2951 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 829.539442][T18954] Tainted: [I]=FIRMWARE_WORKAROUND [ 829.539448][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 829.539457][T18954] Call Trace: [ 829.539464][T18954] [ 829.539470][T18954] dump_stack_lvl+0x16c/0x1f0 [ 829.539496][T18954] should_fail_ex+0x512/0x640 [ 829.539514][T18954] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 829.539531][T18954] should_failslab+0xc2/0x120 [ 829.539551][T18954] __kmalloc_cache_noprof+0x6a/0x3e0 [ 829.539565][T18954] ? __asan_memcpy+0x3c/0x60 [ 829.539579][T18954] ? ip_vs_protocol_net_init+0xbe/0x300 [ 829.539602][T18954] ip_vs_protocol_net_init+0xbe/0x300 [ 829.539625][T18954] __ip_vs_init+0x239/0x520 [ 829.539641][T18954] ? __pfx___ip_vs_init+0x10/0x10 [ 829.539655][T18954] ops_init+0x1df/0x5f0 [ 829.539694][T18954] setup_net+0x21e/0x850 [ 829.539715][T18954] ? __pfx_setup_net+0x10/0x10 [ 829.539734][T18954] ? lockdep_init_map_type+0x5c/0x280 [ 829.539755][T18954] ? __pfx_down_read_killable+0x10/0x10 [ 829.539772][T18954] ? debug_mutex_init+0x37/0x70 [ 829.539788][T18954] copy_net_ns+0x2a6/0x5f0 [ 829.539811][T18954] create_new_namespaces+0x3ea/0xad0 [ 829.539832][T18954] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 829.539857][T18954] ksys_unshare+0x45b/0xa40 [ 829.539878][T18954] ? __pfx_ksys_unshare+0x10/0x10 [ 829.539897][T18954] ? xfd_validate_state+0x5d/0x180 [ 829.539913][T18954] ? syscall_user_dispatch+0x78/0x140 [ 829.539939][T18954] __x64_sys_unshare+0x31/0x40 [ 829.539958][T18954] do_syscall_64+0xcd/0x230 [ 829.539979][T18954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.539993][T18954] RIP: 0033:0x7fadccb8e969 [ 829.540006][T18954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.540019][T18954] RSP: 002b:00007fadcda3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 829.540033][T18954] RAX: ffffffffffffffda RBX: 00007fadccdb5fa0 RCX: 00007fadccb8e969 [ 829.540043][T18954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 829.540051][T18954] RBP: 00007fadccc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 829.540059][T18954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.540067][T18954] R13: 0000000000000000 R14: 00007fadccdb5fa0 R15: 00007ffe4a1f85a8 [ 829.540086][T18954] [ 829.778747][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.042071][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.049207][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.193224][T18905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 830.211142][T18905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.376247][T18974] input: f¬ as /devices/virtual/input/input260 [ 830.601587][T18905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.612937][T14246] Bluetooth: hci4: command tx timeout [ 831.087767][T18990] input: f¬ as /devices/virtual/input/input261 [ 831.563516][T18905] veth0_vlan: entered promiscuous mode [ 831.619611][T18905] veth1_vlan: entered promiscuous mode [ 831.744790][T18905] veth0_macvtap: entered promiscuous mode [ 831.813809][T18905] veth1_macvtap: entered promiscuous mode [ 831.969325][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.060366][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.102000][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.142992][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.213921][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.251670][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.277220][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.319835][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.354170][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.399057][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.438849][T18905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.556053][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.582215][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.606082][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.636036][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.659965][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.686143][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.698709][T14246] Bluetooth: hci4: command tx timeout [ 832.717976][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.744405][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.772987][T18905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.795757][T18905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.832244][T18905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.895032][T18905] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.924364][T18905] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.954768][T18905] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.998474][T18905] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.405170][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.452896][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.601366][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.645900][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.879412][T19023] input: f¬ as /devices/virtual/input/input262 [ 834.086880][T19033] FAULT_INJECTION: forcing a failure. [ 834.086880][T19033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.154826][T19033] CPU: 0 UID: 0 PID: 19033 Comm: syz.5.2933 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 834.154854][T19033] Tainted: [I]=FIRMWARE_WORKAROUND [ 834.154860][T19033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 834.154868][T19033] Call Trace: [ 834.154874][T19033] [ 834.154880][T19033] dump_stack_lvl+0x16c/0x1f0 [ 834.154904][T19033] should_fail_ex+0x512/0x640 [ 834.154924][T19033] _copy_to_user+0x32/0xd0 [ 834.154943][T19033] simple_read_from_buffer+0xcb/0x170 [ 834.154967][T19033] proc_fail_nth_read+0x197/0x270 [ 834.154988][T19033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.155009][T19033] ? rw_verify_area+0xcf/0x680 [ 834.155029][T19033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 834.155048][T19033] vfs_read+0x1de/0xc70 [ 834.155065][T19033] ? __pfx___mutex_lock+0x10/0x10 [ 834.155084][T19033] ? __pfx_vfs_read+0x10/0x10 [ 834.155106][T19033] ? __fget_files+0x20e/0x3c0 [ 834.155124][T19033] ksys_read+0x12a/0x240 [ 834.155137][T19033] ? __pfx_ksys_read+0x10/0x10 [ 834.155150][T19033] ? rcu_is_watching+0x12/0xc0 [ 834.155171][T19033] do_syscall_64+0xcd/0x230 [ 834.155191][T19033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.155205][T19033] RIP: 0033:0x7f775dd8d37c [ 834.155217][T19033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 834.155230][T19033] RSP: 002b:00007f775ec46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 834.155243][T19033] RAX: ffffffffffffffda RBX: 00007f775dfb5fa0 RCX: 00007f775dd8d37c [ 834.155253][T19033] RDX: 000000000000000f RSI: 00007f775ec460a0 RDI: 0000000000000004 [ 834.155262][T19033] RBP: 00007f775ec46090 R08: 0000000000000000 R09: 0000000000000000 [ 834.155270][T19033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.155278][T19033] R13: 0000000000000000 R14: 00007f775dfb5fa0 R15: 00007ffcebecb3b8 [ 834.155295][T19033] [ 834.347566][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.807933][T19044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2973'. [ 835.458849][T19058] netlink: 'syz.4.2977': attribute type 16 has an invalid length. [ 835.493023][T19038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 835.503950][T19038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 835.526059][T19058] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2977'. [ 835.551126][T19038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 835.583554][T19038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 835.615678][T19058] veth1_macvtap: left promiscuous mode [ 835.621580][T19038] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 835.659146][T19038] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 835.771145][T19038] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 836.412160][T19067] Invalid ELF header magic: != ELF [ 836.980857][T19083] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2982'. [ 837.091675][T14246] Bluetooth: hci1: command 0x0c1a tx timeout [ 837.247014][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2984'. [ 837.401888][T19085] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 837.571384][T14246] Bluetooth: hci3: command 0x0c1a tx timeout [ 837.578362][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 837.651438][T14246] Bluetooth: hci4: command 0x0c1a tx timeout [ 837.657512][ T5151] Bluetooth: hci2: command 0x0c1a tx timeout [ 838.676014][T19111] openvswitch: .SR: Dropping previously announced user features [ 838.807882][T19111] Invalid ELF header magic: != ELF [ 838.996196][T19125] input: f¬ as /devices/virtual/input/input263 [ 839.730924][T14246] Bluetooth: hci4: command 0x0c1a tx timeout [ 839.940821][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'. [ 840.393033][T19146] input: f¬ as /devices/virtual/input/input264 [ 841.051003][T19171] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3006'. [ 841.134824][T19170] input: f¬ as /devices/virtual/input/input265 [ 841.504060][T19186] netlink: 'syz.5.3010': attribute type 16 has an invalid length. [ 841.558248][T19186] netlink: 326 bytes leftover after parsing attributes in process `syz.5.3010'. [ 841.810436][T14246] Bluetooth: hci4: command 0x0c1a tx timeout [ 842.825485][T19186] veth1_macvtap: left promiscuous mode [ 844.799472][T19231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3020'. [ 844.843594][ T1142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.187285][T19237] input: f¬ as /devices/virtual/input/input266 [ 845.287413][ T1142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.351744][T19245] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 845.671895][ T1142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.006666][ T1142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.277077][T19273] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 846.436682][T19264] random: crng reseeded on system resumption [ 846.761060][ T1142] bridge_slave_1: left allmulticast mode [ 846.799629][ T1142] bridge_slave_1: left promiscuous mode [ 846.842125][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.964440][ T1142] bridge_slave_0: left allmulticast mode [ 847.005273][ T1142] bridge_slave_0: left promiscuous mode [ 847.060545][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.045363][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.059407][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.075464][ T1142] bond0 (unregistering): Released all slaves [ 848.741769][ T1142] hsr_slave_0: left promiscuous mode [ 848.764439][ T1142] hsr_slave_1: left promiscuous mode [ 848.790856][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.834775][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.869482][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.899480][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.989133][ T1142] veth1_macvtap: left promiscuous mode [ 849.013756][ T1142] veth0_macvtap: left promiscuous mode [ 849.038706][ T1142] veth1_vlan: left promiscuous mode [ 849.062894][ T1142] veth0_vlan: left promiscuous mode [ 850.105960][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 850.175346][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 851.653409][T19366] FAULT_INJECTION: forcing a failure. [ 851.653409][T19366] name failslab, interval 1, probability 0, space 0, times 0 [ 851.740203][T19366] CPU: 0 UID: 0 PID: 19366 Comm: syz.3.3047 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 851.740232][T19366] Tainted: [I]=FIRMWARE_WORKAROUND [ 851.740237][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 851.740246][T19366] Call Trace: [ 851.740252][T19366] [ 851.740261][T19366] dump_stack_lvl+0x16c/0x1f0 [ 851.740286][T19366] should_fail_ex+0x512/0x640 [ 851.740303][T19366] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 851.740321][T19366] should_failslab+0xc2/0x120 [ 851.740339][T19366] __kmalloc_cache_node_noprof+0x6d/0x420 [ 851.740355][T19366] ? find_held_lock+0x2b/0x80 [ 851.740369][T19366] ? __get_vm_area_node+0x101/0x300 [ 851.740390][T19366] ? process_measurement+0x4a6/0x23e0 [ 851.740412][T19366] __get_vm_area_node+0x101/0x300 [ 851.740436][T19366] __vmalloc_node_range_noprof+0x277/0x1540 [ 851.740451][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 851.740470][T19366] ? __lock_acquire+0x5ca/0x1ba0 [ 851.740489][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 851.740509][T19366] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 851.740530][T19366] __kvmalloc_node_noprof+0x2ff/0x600 [ 851.740546][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 851.740561][T19366] ? is_bpf_text_address+0x8a/0x1a0 [ 851.740579][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 851.740598][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 851.740612][T19366] lru_gen_seq_write+0x11a/0x18b0 [ 851.740627][T19366] ? unwind_get_return_address+0x59/0xa0 [ 851.740645][T19366] ? arch_stack_walk+0xa6/0x100 [ 851.740665][T19366] ? __pfx_lru_gen_seq_write+0x10/0x10 [ 851.740681][T19366] ? find_held_lock+0x2b/0x80 [ 851.740696][T19366] ? aa_file_perm+0x4c7/0xfb0 [ 851.740717][T19366] ? aa_file_perm+0x4d6/0xfb0 [ 851.740740][T19366] ? __pfx_aa_file_perm+0x10/0x10 [ 851.740766][T19366] ? __debugfs_file_get+0x1fe/0x840 [ 851.740783][T19366] ? __pfx___debugfs_file_get+0x10/0x10 [ 851.740803][T19366] ? full_proxy_write+0x13c/0x200 [ 851.740818][T19366] full_proxy_write+0x13c/0x200 [ 851.740846][T19366] ? __pfx_full_proxy_write+0x10/0x10 [ 851.740865][T19366] vfs_writev+0x6c4/0xdc0 [ 851.740877][T19366] ? __pfx___mutex_trylock_common+0x10/0x10 [ 851.740904][T19366] ? __pfx_vfs_writev+0x10/0x10 [ 851.740917][T19366] ? __mutex_lock+0x1ca/0xb90 [ 851.740942][T19366] ? __pfx___mutex_lock+0x10/0x10 [ 851.740967][T19366] ? __fget_files+0x20e/0x3c0 [ 851.740980][T19366] ? __fget_files+0x1f0/0x3c0 [ 851.740997][T19366] ? do_writev+0x132/0x330 [ 851.741009][T19366] do_writev+0x132/0x330 [ 851.741022][T19366] ? __pfx_do_writev+0x10/0x10 [ 851.741035][T19366] ? rcu_is_watching+0x12/0xc0 [ 851.741054][T19366] do_syscall_64+0xcd/0x230 [ 851.741075][T19366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.741090][T19366] RIP: 0033:0x7fbab0f8e969 [ 851.741101][T19366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.741115][T19366] RSP: 002b:00007fbab1d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 851.741129][T19366] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8e969 [ 851.741138][T19366] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 851.741147][T19366] RBP: 00007fbab1d34090 R08: 0000000000000000 R09: 0000000000000000 [ 851.741155][T19366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.741163][T19366] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 851.741181][T19366] [ 852.203824][T19358] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 852.805700][T19385] input: f¬ as /devices/virtual/input/input267 [ 852.972602][T19366] syz.3.3047: vmalloc error: size 4223253, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 853.059808][T19366] CPU: 0 UID: 0 PID: 19366 Comm: syz.3.3047 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 853.059837][T19366] Tainted: [I]=FIRMWARE_WORKAROUND [ 853.059842][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 853.059850][T19366] Call Trace: [ 853.059856][T19366] [ 853.059863][T19366] dump_stack_lvl+0x16c/0x1f0 [ 853.059887][T19366] warn_alloc+0x248/0x3a0 [ 853.059905][T19366] ? __pfx_warn_alloc+0x10/0x10 [ 853.059922][T19366] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 853.059941][T19366] ? __kasan_kmalloc+0x8a/0xb0 [ 853.059977][T19366] ? __get_vm_area_node+0x1e5/0x300 [ 853.060002][T19366] __vmalloc_node_range_noprof+0xd31/0x1540 [ 853.060020][T19366] ? __lock_acquire+0x5ca/0x1ba0 [ 853.060060][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 853.060084][T19366] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 853.060105][T19366] __kvmalloc_node_noprof+0x2ff/0x600 [ 853.060121][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 853.060136][T19366] ? is_bpf_text_address+0x8a/0x1a0 [ 853.060154][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 853.060172][T19366] ? lru_gen_seq_write+0x11a/0x18b0 [ 853.060187][T19366] lru_gen_seq_write+0x11a/0x18b0 [ 853.060202][T19366] ? unwind_get_return_address+0x59/0xa0 [ 853.060219][T19366] ? arch_stack_walk+0xa6/0x100 [ 853.060239][T19366] ? __pfx_lru_gen_seq_write+0x10/0x10 [ 853.060254][T19366] ? find_held_lock+0x2b/0x80 [ 853.060273][T19366] ? aa_file_perm+0x4c7/0xfb0 [ 853.060295][T19366] ? aa_file_perm+0x4d6/0xfb0 [ 853.060318][T19366] ? __pfx_aa_file_perm+0x10/0x10 [ 853.060344][T19366] ? __debugfs_file_get+0x1fe/0x840 [ 853.060361][T19366] ? __pfx___debugfs_file_get+0x10/0x10 [ 853.060381][T19366] ? full_proxy_write+0x13c/0x200 [ 853.060396][T19366] full_proxy_write+0x13c/0x200 [ 853.060413][T19366] ? __pfx_full_proxy_write+0x10/0x10 [ 853.060429][T19366] vfs_writev+0x6c4/0xdc0 [ 853.060442][T19366] ? __pfx___mutex_trylock_common+0x10/0x10 [ 853.060467][T19366] ? __pfx_vfs_writev+0x10/0x10 [ 853.060480][T19366] ? __mutex_lock+0x1ca/0xb90 [ 853.060503][T19366] ? __pfx___mutex_lock+0x10/0x10 [ 853.060528][T19366] ? __fget_files+0x20e/0x3c0 [ 853.060541][T19366] ? __fget_files+0x1f0/0x3c0 [ 853.060558][T19366] ? do_writev+0x132/0x330 [ 853.060570][T19366] do_writev+0x132/0x330 [ 853.060583][T19366] ? __pfx_do_writev+0x10/0x10 [ 853.060595][T19366] ? rcu_is_watching+0x12/0xc0 [ 853.060615][T19366] do_syscall_64+0xcd/0x230 [ 853.060635][T19366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.060649][T19366] RIP: 0033:0x7fbab0f8e969 [ 853.060661][T19366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.060674][T19366] RSP: 002b:00007fbab1d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 853.060688][T19366] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8e969 [ 853.060697][T19366] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 853.060705][T19366] RBP: 00007fbab1d34090 R08: 0000000000000000 R09: 0000000000000000 [ 853.060714][T19366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.060722][T19366] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 853.060740][T19366] [ 854.413371][T19366] Mem-Info: [ 854.416523][T19366] active_anon:30049 inactive_anon:0 isolated_anon:0 [ 854.416523][T19366] active_file:17787 inactive_file:40792 isolated_file:0 [ 854.416523][T19366] unevictable:768 dirty:409 writeback:0 [ 854.416523][T19366] slab_reclaimable:10821 slab_unreclaimable:99688 [ 854.416523][T19366] mapped:28357 shmem:4508 pagetables:905 [ 854.416523][T19366] sec_pagetables:0 bounce:0 [ 854.416523][T19366] kernel_misc_reclaimable:0 [ 854.416523][T19366] free:1304112 free_pcp:1118 free_cma:0 [ 854.775344][T19366] Node 0 active_anon:128828kB inactive_anon:0kB active_file:71148kB inactive_file:163096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117796kB dirty:1636kB writeback:0kB shmem:18772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:3672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 854.989447][T19366] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 855.173521][T19366] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.302045][T19366] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 855.307830][T19366] Node 0 DMA32 free:1285808kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:136804kB inactive_anon:0kB active_file:71196kB inactive_file:161508kB unevictable:1536kB writepending:1748kB present:3129332kB managed:2541752kB mlocked:0kB bounce:0kB free_pcp:1136kB local_pcp:1136kB free_cma:0kB [ 855.531985][T19366] lowmem_reserve[]: 0 0 1 1 1 [ 855.536737][T19366] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.726468][T19366] lowmem_reserve[]: 0 0 0 0 0 [ 855.743653][T19366] Node 1 Normal free:3904844kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.919823][T19366] lowmem_reserve[]: 0 0 0 0 0 [ 855.933401][T19366] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 856.014633][T19366] Node 0 DMA32: 44*4kB (UME) 21*8kB (ME) 613*16kB (ME) 1579*32kB (UME) 1048*64kB (UME) 617*128kB (UME) 406*256kB (UME) 169*512kB (UM) 97*1024kB (UME) 11*2048kB (UME) 183*4096kB (UM) = 1268616kB [ 856.257202][T19366] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 856.502345][T19366] Node 1 Normal: 223*4kB (UME) 72*8kB (UME) 55*16kB (UME) 203*32kB (UME) 93*64kB (UME) 41*128kB (UME) 23*256kB (UME) 10*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 943*4096kB (M) = 3904844kB [ 856.880495][T19366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.171105][T19366] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 857.219984][T19366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.333888][T19366] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 857.434170][T19366] 72546 total pagecache pages [ 857.579537][T19366] 0 pages in swap cache [ 857.632194][T19366] Free swap = 124996kB [ 857.682443][T19366] Total swap = 124996kB [ 857.813180][T19366] 2097051 pages RAM [ 857.854208][T19366] 0 pages HighMem/MovableOnly [ 858.020513][T19366] 429571 pages reserved [ 858.175262][T19366] 0 pages cma reserved [ 860.585839][T19529] input: f¬ as /devices/virtual/input/input268 [ 863.167302][T19586] input: f¬ as /devices/virtual/input/input269 [ 863.735893][T19593] bond0: option lp_interval: invalid value (/dev/nullb0) [ 863.798547][T19593] bond0: option lp_interval: allowed values 1 - 2147483647 [ 863.871106][T19597] bond0: option lp_interval: invalid value () [ 863.923469][T19597] bond0: option lp_interval: allowed values 1 - 2147483647 [ 865.075933][T19599] openvswitch: netlink: Key type 70 is out of range max 32 [ 865.573370][T19654] FAULT_INJECTION: forcing a failure. [ 865.573370][T19654] name failslab, interval 1, probability 0, space 0, times 0 [ 865.666546][T19654] CPU: 0 UID: 0 PID: 19654 Comm: syz.3.3100 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 865.666580][T19654] Tainted: [I]=FIRMWARE_WORKAROUND [ 865.666586][T19654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 865.666595][T19654] Call Trace: [ 865.666600][T19654] [ 865.666607][T19654] dump_stack_lvl+0x16c/0x1f0 [ 865.666631][T19654] should_fail_ex+0x512/0x640 [ 865.666648][T19654] ? fs_reclaim_acquire+0xae/0x150 [ 865.666671][T19654] ? tomoyo_encode2+0x100/0x3e0 [ 865.666688][T19654] should_failslab+0xc2/0x120 [ 865.666707][T19654] __kmalloc_noprof+0xd2/0x510 [ 865.666723][T19654] ? d_absolute_path+0x136/0x1a0 [ 865.666744][T19654] tomoyo_encode2+0x100/0x3e0 [ 865.666765][T19654] tomoyo_encode+0x29/0x50 [ 865.666782][T19654] tomoyo_realpath_from_path+0x18f/0x6e0 [ 865.666806][T19654] tomoyo_path_number_perm+0x245/0x580 [ 865.666822][T19654] ? tomoyo_path_number_perm+0x237/0x580 [ 865.666840][T19654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 865.666857][T19654] ? find_held_lock+0x2b/0x80 [ 865.666887][T19654] ? find_held_lock+0x2b/0x80 [ 865.666900][T19654] ? hook_file_ioctl_common+0x145/0x410 [ 865.666919][T19654] ? __fget_files+0x20e/0x3c0 [ 865.666936][T19654] security_file_ioctl+0x9b/0x240 [ 865.666954][T19654] __x64_sys_ioctl+0xb7/0x200 [ 865.666974][T19654] do_syscall_64+0xcd/0x230 [ 865.666995][T19654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.667010][T19654] RIP: 0033:0x7fbab0f8e969 [ 865.667022][T19654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.667035][T19654] RSP: 002b:00007fbab1d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.667049][T19654] RAX: ffffffffffffffda RBX: 00007fbab11b5fa0 RCX: 00007fbab0f8e969 [ 865.667059][T19654] RDX: 0000200000000700 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 865.667069][T19654] RBP: 00007fbab1d34090 R08: 0000000000000000 R09: 0000000000000000 [ 865.667078][T19654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.667086][T19654] R13: 0000000000000000 R14: 00007fbab11b5fa0 R15: 00007ffdeba0b008 [ 865.667105][T19654] [ 865.667119][T19654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 866.319029][T19670] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3102'. [ 866.349685][T19670] synth uevent: /bus/memstick: unknown uevent action string [ 866.690090][T19678] netlink: 206 bytes leftover after parsing attributes in process `syz.0.3105'. [ 867.049047][T19684] input: f¬ as /devices/virtual/input/input270 [ 867.905320][T19706] FAULT_INJECTION: forcing a failure. [ 867.905320][T19706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.944695][T19708] delete_channel: no stack [ 868.030877][T19706] CPU: 0 UID: 0 PID: 19706 Comm: syz.4.3114 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 868.030906][T19706] Tainted: [I]=FIRMWARE_WORKAROUND [ 868.030912][T19706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 868.030922][T19706] Call Trace: [ 868.030927][T19706] [ 868.030934][T19706] dump_stack_lvl+0x16c/0x1f0 [ 868.030959][T19706] should_fail_ex+0x512/0x640 [ 868.030979][T19706] _copy_to_user+0x32/0xd0 [ 868.030999][T19706] simple_read_from_buffer+0xcb/0x170 [ 868.031022][T19706] proc_fail_nth_read+0x197/0x270 [ 868.031043][T19706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.031064][T19706] ? rw_verify_area+0xcf/0x680 [ 868.031084][T19706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.031104][T19706] vfs_read+0x1de/0xc70 [ 868.031121][T19706] ? __pfx___mutex_lock+0x10/0x10 [ 868.031141][T19706] ? __pfx_vfs_read+0x10/0x10 [ 868.031159][T19706] ? __fget_files+0x20e/0x3c0 [ 868.031179][T19706] ksys_read+0x12a/0x240 [ 868.031193][T19706] ? __pfx_ksys_read+0x10/0x10 [ 868.031206][T19706] ? rcu_is_watching+0x12/0xc0 [ 868.031226][T19706] do_syscall_64+0xcd/0x230 [ 868.031247][T19706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.031261][T19706] RIP: 0033:0x7fadccb8d37c [ 868.031274][T19706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 868.031289][T19706] RSP: 002b:00007fadcda3c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 868.031303][T19706] RAX: ffffffffffffffda RBX: 00007fadccdb5fa0 RCX: 00007fadccb8d37c [ 868.031313][T19706] RDX: 000000000000000f RSI: 00007fadcda3c0a0 RDI: 0000000000000004 [ 868.031322][T19706] RBP: 00007fadcda3c090 R08: 0000000000000000 R09: 0000000000000000 [ 868.031331][T19706] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 868.031340][T19706] R13: 0000000000000000 R14: 00007fadccdb5fa0 R15: 00007ffe4a1f85a8 [ 868.031358][T19706] [ 869.546891][T19748] ubi0: attaching mtd0 [ 869.581344][T19748] ubi0: scanning is finished [ 869.636360][T19748] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 869.914071][T19728] kafs: addr_prefs: Invalid Command [ 869.957585][T19750] .SR: entered promiscuous mode [ 870.082458][T19754] Invalid ELF header magic: != ELF [ 870.279315][T19748] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 870.374825][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.381377][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.667264][T19826] svc: failed to register nfsdv3 RPC service (errno 111). [ 872.761139][T19826] svc: failed to register nfsaclv3 RPC service (errno 111). [ 878.397275][T19977] input: f¬ as /devices/virtual/input/input271 [ 878.877228][T19991] FAULT_INJECTION: forcing a failure. [ 878.877228][T19991] name failslab, interval 1, probability 0, space 0, times 0 [ 878.877274][T19991] CPU: 0 UID: 0 PID: 19991 Comm: syz.0.3170 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 878.877297][T19991] Tainted: [I]=FIRMWARE_WORKAROUND [ 878.877303][T19991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 878.877312][T19991] Call Trace: [ 878.877317][T19991] [ 878.877324][T19991] dump_stack_lvl+0x16c/0x1f0 [ 878.877349][T19991] should_fail_ex+0x512/0x640 [ 878.877378][T19991] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 878.877397][T19991] should_failslab+0xc2/0x120 [ 878.877416][T19991] __kmalloc_cache_noprof+0x6a/0x3e0 [ 878.877439][T19991] ? device_create_groups_vargs+0x8a/0x270 [ 878.877462][T19991] device_create_groups_vargs+0x8a/0x270 [ 878.877482][T19991] device_create+0xed/0x130 [ 878.877499][T19991] ? __pfx_device_create+0x10/0x10 [ 878.877514][T19991] ? do_raw_spin_lock+0x12c/0x2b0 [ 878.877529][T19991] ? is_console_locked+0x9/0x20 [ 878.877545][T19991] ? con_is_visible+0x65/0x150 [ 878.877562][T19991] ? csi_J+0x54a/0xad0 [ 878.877585][T19991] vcs_make_sysfs+0x32/0x80 [ 878.877604][T19991] vc_allocate+0x501/0x880 [ 878.877616][T19991] ? __pfx_vc_allocate+0x10/0x10 [ 878.877634][T19991] con_install+0xa1/0x600 [ 878.877648][T19991] ? __pfx_con_install+0x10/0x10 [ 878.877664][T19991] ? __pfx_con_install+0x10/0x10 [ 878.877677][T19991] tty_init_dev.part.0+0x99/0x500 [ 878.877693][T19991] tty_open+0xa50/0xf90 [ 878.877710][T19991] ? __pfx_tty_open+0x10/0x10 [ 878.877725][T19991] ? chrdev_open+0x58c/0x6a0 [ 878.877743][T19991] ? __pfx_tty_open+0x10/0x10 [ 878.877757][T19991] chrdev_open+0x231/0x6a0 [ 878.877773][T19991] ? __pfx_chrdev_open+0x10/0x10 [ 878.877792][T19991] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 878.877817][T19991] do_dentry_open+0x741/0x1c10 [ 878.877833][T19991] ? __pfx_chrdev_open+0x10/0x10 [ 878.877852][T19991] vfs_open+0x82/0x3f0 [ 878.877873][T19991] path_openat+0x1e5e/0x2d40 [ 878.877894][T19991] ? __pfx_path_openat+0x10/0x10 [ 878.877914][T19991] do_filp_open+0x20b/0x470 [ 878.877928][T19991] ? __pfx_do_filp_open+0x10/0x10 [ 878.877957][T19991] ? alloc_fd+0x471/0x7d0 [ 878.877975][T19991] do_sys_openat2+0x11b/0x1d0 [ 878.877993][T19991] ? __pfx_do_sys_openat2+0x10/0x10 [ 878.878019][T19991] __x64_sys_openat+0x174/0x210 [ 878.878038][T19991] ? __pfx___x64_sys_openat+0x10/0x10 [ 878.878058][T19991] ? rcu_is_watching+0x12/0xc0 [ 878.878078][T19991] do_syscall_64+0xcd/0x230 [ 878.878099][T19991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.878114][T19991] RIP: 0033:0x7fabc058e969 [ 878.878126][T19991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.878140][T19991] RSP: 002b:00007fabc1491038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 878.878154][T19991] RAX: ffffffffffffffda RBX: 00007fabc07b5fa0 RCX: 00007fabc058e969 [ 878.878163][T19991] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 878.878172][T19991] RBP: 00007fabc0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 878.878180][T19991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.878188][T19991] R13: 0000000000000000 R14: 00007fabc07b5fa0 R15: 00007fff59b1a208 [ 878.878206][T19991] [ 879.013602][T19992] svc: failed to register nfsdv3 RPC service (errno 111). [ 879.014463][T19992] svc: failed to register nfsaclv3 RPC service (errno 111). [ 880.311000][T20023] bridge0: port 3(team0) entered blocking state [ 880.311060][T20023] bridge0: port 3(team0) entered disabled state [ 880.311196][T20023] team0: entered allmulticast mode [ 880.311209][T20023] team_slave_0: entered allmulticast mode [ 880.311231][T20023] team_slave_1: entered allmulticast mode [ 880.312441][T20023] team0: entered promiscuous mode [ 880.312454][T20023] team_slave_0: entered promiscuous mode [ 880.317572][T20023] team_slave_1: entered promiscuous mode [ 880.319080][T20023] bridge0: port 3(team0) entered blocking state [ 880.319143][T20023] bridge0: port 3(team0) entered forwarding state [ 881.415565][T20047] input: f¬ as /devices/virtual/input/input272 [ 881.680929][T20055] can: request_module (can-proto-3) failed. [ 881.842311][T20055] can: request_module (can-proto-3) failed. [ 881.942969][T20055] can: request_module (can-proto-3) failed. [ 882.128017][T20055] can: request_module (can-proto-3) failed. [ 882.129632][T20055] can: request_module (can-proto-3) failed. [ 882.280570][T19991] tty tty26: ldisc open failed (-12), clearing slot 25 [ 883.305302][T20109] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 883.504091][T20112] input: f¬ as /devices/virtual/input/input273 [ 886.824370][T20168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3203'. [ 887.233966][T20183] futex_wake_op: syz.4.3208 tries to shift op by 64; fix this program [ 887.720933][T20198] FAULT_INJECTION: forcing a failure. [ 887.720933][T20198] name failslab, interval 1, probability 0, space 0, times 0 [ 887.878726][T20198] CPU: 0 UID: 0 PID: 20198 Comm: syz.4.3212 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 887.878755][T20198] Tainted: [I]=FIRMWARE_WORKAROUND [ 887.878761][T20198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 887.878769][T20198] Call Trace: [ 887.878774][T20198] [ 887.878780][T20198] dump_stack_lvl+0x16c/0x1f0 [ 887.878803][T20198] should_fail_ex+0x512/0x640 [ 887.878820][T20198] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 887.878839][T20198] should_failslab+0xc2/0x120 [ 887.878857][T20198] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 887.878873][T20198] ? mas_alloc_nodes+0x18b/0x8b0 [ 887.878893][T20198] mas_alloc_nodes+0x18b/0x8b0 [ 887.878913][T20198] mas_node_count_gfp+0x105/0x130 [ 887.878932][T20198] mas_preallocate+0x53e/0xcd0 [ 887.878946][T20198] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 887.878967][T20198] ? __pfx_mas_preallocate+0x10/0x10 [ 887.878986][T20198] ? anon_vma_name+0x75/0x100 [ 887.879007][T20198] __split_vma+0x33b/0x1030 [ 887.879026][T20198] ? __pfx___split_vma+0x10/0x10 [ 887.879043][T20198] ? lock_acquire+0x179/0x350 [ 887.879063][T20198] ? find_held_lock+0x2b/0x80 [ 887.879079][T20198] vms_gather_munmap_vmas+0x1c2/0x1310 [ 887.879095][T20198] ? __pfx___schedule+0x10/0x10 [ 887.879114][T20198] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 887.879134][T20198] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 887.879153][T20198] ? preempt_schedule_thunk+0x16/0x30 [ 887.879172][T20198] do_vmi_align_munmap+0x27c/0x7d0 [ 887.879190][T20198] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 887.879230][T20198] do_vmi_munmap+0x208/0x3e0 [ 887.879249][T20198] __vm_munmap+0x19a/0x390 [ 887.879266][T20198] ? __pfx___vm_munmap+0x10/0x10 [ 887.879284][T20198] ? __x64_sys_futex+0x1e0/0x4c0 [ 887.879299][T20198] ? __x64_sys_futex+0x1e9/0x4c0 [ 887.879319][T20198] ? rcu_is_watching+0x12/0xc0 [ 887.879337][T20198] __x64_sys_munmap+0x59/0x80 [ 887.879351][T20198] do_syscall_64+0xcd/0x230 [ 887.879371][T20198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.879385][T20198] RIP: 0033:0x7fadccb8e969 [ 887.879398][T20198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.879411][T20198] RSP: 002b:00007fadcda3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 887.879425][T20198] RAX: ffffffffffffffda RBX: 00007fadccdb5fa0 RCX: 00007fadccb8e969 [ 887.879434][T20198] RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000001000 [ 887.879443][T20198] RBP: 00007fadccc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 887.879451][T20198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.879459][T20198] R13: 0000000000000000 R14: 00007fadccdb5fa0 R15: 00007ffe4a1f85a8 [ 887.879477][T20198] [ 888.815855][T20222] CIFS mount error: No usable UNC path provided in device string! [ 888.815855][T20222] [ 888.843554][T20222] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 890.401963][T20240] input: f¬ as /devices/virtual/input/input274 [ 892.608206][T20279] program syz.3.3228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 893.271527][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3231'. [ 893.665575][T20309] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 894.567045][T20345] CIFS mount error: No usable UNC path provided in device string! [ 894.567045][T20345] [ 894.610025][T20339] Invalid ELF header magic: != ELF [ 894.645461][T20345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 895.174347][T20360] openvswitch: netlink: Key type 186 is out of range max 32 [ 896.570748][T20388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3258'. [ 897.524826][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3261'. [ 898.864860][T20444] netlink: 'syz.0.3272': attribute type 2 has an invalid length. [ 899.098630][T20449] bridge0: port 4(gretap0) entered blocking state [ 899.138963][T20449] bridge0: port 4(gretap0) entered disabled state [ 899.168776][T20449] gretap0: entered allmulticast mode [ 899.242313][T20449] gretap0: entered promiscuous mode [ 899.247981][T20449] bridge0: port 4(gretap0) entered blocking state [ 899.254540][T20449] bridge0: port 4(gretap0) entered forwarding state [ 899.425022][T20455] ubi0: attaching mtd0 [ 899.430223][T20455] ubi0: scanning is finished [ 899.605852][T20455] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 899.625975][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3276'. [ 899.717337][T20457] Invalid ELF header magic: != ELF [ 899.863332][T20466] Invalid ELF header magic: != ELF [ 900.083101][T20472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3279'. [ 900.247571][T20455] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 900.439231][T20486] FAULT_INJECTION: forcing a failure. [ 900.439231][T20486] name failslab, interval 1, probability 0, space 0, times 0 [ 900.499365][T20486] CPU: 0 UID: 0 PID: 20486 Comm: syz.0.3283 Tainted: G I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 900.499401][T20486] Tainted: [I]=FIRMWARE_WORKAROUND [ 900.499408][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 900.499419][T20486] Call Trace: [ 900.499424][T20486] [ 900.499431][T20486] dump_stack_lvl+0x16c/0x1f0 [ 900.499456][T20486] should_fail_ex+0x512/0x640 [ 900.499473][T20486] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 900.499491][T20486] should_failslab+0xc2/0x120 [ 900.499510][T20486] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 900.499526][T20486] ? security_file_alloc+0x34/0x2b0 [ 900.499547][T20486] security_file_alloc+0x34/0x2b0 [ 900.499565][T20486] init_file+0x93/0x4c0 [ 900.499582][T20486] alloc_empty_file+0x73/0x1e0 [ 900.499601][T20486] alloc_file_pseudo+0x13a/0x230 [ 900.499619][T20486] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 900.499637][T20486] ? tipc_sk_finish_conn+0x580/0x790 [ 900.499662][T20486] sock_alloc_file+0x50/0x210 [ 900.499683][T20486] __sys_socketpair+0x31c/0x5a0 [ 900.499698][T20486] ? __pfx___sys_socketpair+0x10/0x10 [ 900.499712][T20486] ? xfd_validate_state+0x5d/0x180 [ 900.499728][T20486] ? rcu_is_watching+0x12/0xc0 [ 900.499745][T20486] __x64_sys_socketpair+0x96/0x100 [ 900.499760][T20486] ? lockdep_hardirqs_on+0x7c/0x110 [ 900.499778][T20486] do_syscall_64+0xcd/0x230 [ 900.499798][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.499812][T20486] RIP: 0033:0x7fabc058e969 [ 900.499824][T20486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.499838][T20486] RSP: 002b:00007fabc1491038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 900.499852][T20486] RAX: ffffffffffffffda RBX: 00007fabc07b5fa0 RCX: 00007fabc058e969 [ 900.499861][T20486] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 900.499870][T20486] RBP: 00007fabc0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 900.499879][T20486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.499887][T20486] R13: 0000000000000000 R14: 00007fabc07b5fa0 R15: 00007fff59b1a208 [ 900.499904][T20486] [ 902.024902][T20529] input: f¬ as /devices/virtual/input/input275 [ 903.640435][T20577] input: f¬ as /devices/virtual/input/input276 [ 904.969313][ T30] audit: type=1804 audit(4294967448.610:22): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3310" name="/newroot/184/file0" dev="tmpfs" ino=983 res=1 errno=0 [ 904.990522][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.129891][ T30] audit: type=1800 audit(4294967448.680:23): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3310" name="file0" dev="tmpfs" ino=983 res=0 errno=0 [ 905.247615][ T30] audit: type=1800 audit(4294967448.680:24): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3310" name="file0" dev="tmpfs" ino=983 res=0 errno=0 [ 907.257747][T20660] input: f¬ as /devices/virtual/input/input277 [ 908.887102][T20699] Setting dangerous option i915.mitigations - tainting kernel [ 910.015135][T20711] netlink: 'syz.0.3338': attribute type 33 has an invalid length. [ 910.057493][T20711] netlink: 322 bytes leftover after parsing attributes in process `syz.0.3338'. [ 910.120374][T20711] sd 0:0:1:0: PR command failed: 1026 [ 910.125794][T20711] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 910.172766][T20716] input: f¬ as /devices/virtual/input/input278 [ 910.183037][T20711] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 911.671018][T20753] could not allocate digest TFM handle [ 912.290012][T20768] input: f¬ as /devices/virtual/input/input279 [ 913.391281][T20783] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 914.143099][T20794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3358'. [ 916.361094][T20836] QAT: failed to copy from user. [ 917.605747][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3374'. [ 918.528454][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3379'. [ 918.615085][T14246] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 919.557652][T20904] input: f¬ as /devices/virtual/input/input280 [ 919.907811][T20911] FAULT_INJECTION: forcing a failure. [ 919.907811][T20911] name failslab, interval 1, probability 0, space 0, times 0 [ 920.015695][T20911] CPU: 0 UID: 0 PID: 20911 Comm: syz.0.3387 Tainted: G U I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 920.015726][T20911] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 920.015733][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 920.015743][T20911] Call Trace: [ 920.015749][T20911] [ 920.015755][T20911] dump_stack_lvl+0x16c/0x1f0 [ 920.015781][T20911] should_fail_ex+0x512/0x640 [ 920.015799][T20911] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 920.015819][T20911] should_failslab+0xc2/0x120 [ 920.015837][T20911] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 920.015855][T20911] ? getname_flags.part.0+0x4c/0x550 [ 920.015877][T20911] getname_flags.part.0+0x4c/0x550 [ 920.015898][T20911] getname_flags+0x93/0xf0 [ 920.015912][T20911] do_sys_openat2+0xb8/0x1d0 [ 920.015931][T20911] ? __pfx_do_sys_openat2+0x10/0x10 [ 920.015956][T20911] __x64_sys_open+0x153/0x1e0 [ 920.015975][T20911] ? __pfx___x64_sys_open+0x10/0x10 [ 920.015998][T20911] ? rcu_is_watching+0x12/0xc0 [ 920.016014][T20911] do_syscall_64+0xcd/0x230 [ 920.016034][T20911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.016048][T20911] RIP: 0033:0x7fabc058e969 [ 920.016060][T20911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.016074][T20911] RSP: 002b:00007fabc1491038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 920.016088][T20911] RAX: ffffffffffffffda RBX: 00007fabc07b5fa0 RCX: 00007fabc058e969 [ 920.016097][T20911] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 920.016106][T20911] RBP: 00007fabc0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 920.016115][T20911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.016123][T20911] R13: 0000000000000000 R14: 00007fabc07b5fa0 R15: 00007fff59b1a208 [ 920.016140][T20911] [ 921.642985][T20922] could not allocate digest TFM handle [ 922.331595][T20950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3395'. [ 922.842118][T20961] svc: failed to register nfsdv3 RPC service (errno 111). [ 922.898953][T20961] svc: failed to register nfsaclv3 RPC service (errno 111). [ 922.956190][T20963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3397'. [ 923.237865][T20960] ima: policy update failed [ 923.254462][ T30] audit: type=1802 audit(4294967474.892:25): pid=20960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3397" res=0 errno=0 [ 924.901038][T21003] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3406'. [ 925.028854][T21003] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3406'. [ 925.204613][T21003] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3406'. [ 925.357730][T21003] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3406'. [ 925.459945][T21003] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3406'. [ 925.557012][T21003] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3406'. [ 925.968963][T21016] cgroup: fork rejected by pids controller in /syz5 [ 926.320011][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3411'. [ 926.684361][T21114] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 926.818439][T21121] Invalid ELF header magic: != ELF [ 926.824019][T21114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3412'. [ 927.498495][T21132] ksmbd: Unknown IPC event: 14, ignore. [ 927.716271][T14246] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 928.628733][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3423'. [ 931.082758][T21190] can: request_module (can-proto-0) failed. [ 931.826048][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.837565][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.342713][T21205] input: f¬ as /devices/virtual/input/input281 [ 932.696054][ T30] audit: type=1326 audit(4294967484.332:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21207 comm="syz.5.3431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f775dd8e969 code=0x0 [ 933.348970][T21235] input: f¬ as /devices/virtual/input/input282 [ 933.479870][T21238] ================================================================== [ 933.487948][T21238] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 933.496618][T21238] Read of size 1 at addr ffff8880308f8847 by task syz.4.3435/21238 [ 933.504489][T21238] [ 933.506803][T21238] CPU: 0 UID: 0 PID: 21238 Comm: syz.4.3435 Tainted: G U I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 933.506827][T21238] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 933.506834][T21238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 933.506843][T21238] Call Trace: [ 933.506850][T21238] [ 933.506857][T21238] dump_stack_lvl+0x116/0x1f0 [ 933.506883][T21238] print_report+0xc3/0x670 [ 933.506902][T21238] ? __virt_addr_valid+0x5e/0x590 [ 933.506922][T21238] ? __phys_addr+0xc6/0x150 [ 933.506941][T21238] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 933.506959][T21238] kasan_report+0xe0/0x110 [ 933.506976][T21238] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 933.506996][T21238] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 933.507016][T21238] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 933.507034][T21238] ? find_held_lock+0x2b/0x80 [ 933.507048][T21238] ? __might_fault+0xe3/0x190 [ 933.507064][T21238] ? __might_fault+0xe3/0x190 [ 933.507079][T21238] ? __might_fault+0x13b/0x190 [ 933.507098][T21238] ? proc_simple_write+0x114/0x1b0 [ 933.507115][T21238] proc_simple_write+0x114/0x1b0 [ 933.507132][T21238] ? __pfx_proc_simple_write+0x10/0x10 [ 933.507150][T21238] proc_reg_write+0x23d/0x330 [ 933.507165][T21238] ? __pfx_proc_reg_write+0x10/0x10 [ 933.507179][T21238] vfs_writev+0x6c4/0xdc0 [ 933.507192][T21238] ? __pfx___mutex_trylock_common+0x10/0x10 [ 933.507214][T21238] ? __pfx_vfs_writev+0x10/0x10 [ 933.507226][T21238] ? __mutex_lock+0x1ca/0xb90 [ 933.507245][T21238] ? kmem_cache_free+0x2d4/0x4d0 [ 933.507261][T21238] ? __pfx___mutex_lock+0x10/0x10 [ 933.507282][T21238] ? __fget_files+0x20e/0x3c0 [ 933.507296][T21238] ? do_writev+0x132/0x330 [ 933.507308][T21238] do_writev+0x132/0x330 [ 933.507320][T21238] ? __pfx_do_writev+0x10/0x10 [ 933.507332][T21238] ? rcu_is_watching+0x12/0xc0 [ 933.507348][T21238] do_syscall_64+0xcd/0x230 [ 933.507368][T21238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.507383][T21238] RIP: 0033:0x7fadccb8e969 [ 933.507397][T21238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.507417][T21238] RSP: 002b:00007fadcd9fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 933.507432][T21238] RAX: ffffffffffffffda RBX: 00007fadccdb6160 RCX: 00007fadccb8e969 [ 933.507442][T21238] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000009 [ 933.507451][T21238] RBP: 00007fadccc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 933.507460][T21238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.507469][T21238] R13: 0000000000000000 R14: 00007fadccdb6160 R15: 00007ffe4a1f85a8 [ 933.507483][T21238] [ 933.507489][T21238] [ 933.773685][T21238] Allocated by task 21238: [ 933.778080][T21238] kasan_save_stack+0x33/0x60 [ 933.782744][T21238] kasan_save_track+0x14/0x30 [ 933.787419][T21238] __kasan_kmalloc+0xaa/0xb0 [ 933.791989][T21238] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 933.798388][T21238] memdup_user_nul+0x2b/0x120 [ 933.803053][T21238] proc_simple_write+0xc7/0x1b0 [ 933.807893][T21238] proc_reg_write+0x23d/0x330 [ 933.812574][T21238] vfs_writev+0x6c4/0xdc0 [ 933.816886][T21238] do_writev+0x132/0x330 [ 933.821110][T21238] do_syscall_64+0xcd/0x230 [ 933.825602][T21238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.831475][T21238] [ 933.833798][T21238] The buggy address belongs to the object at ffff8880308f8840 [ 933.833798][T21238] which belongs to the cache kmalloc-8 of size 8 [ 933.847482][T21238] The buggy address is located 0 bytes to the right of [ 933.847482][T21238] allocated 7-byte region [ffff8880308f8840, ffff8880308f8847) [ 933.861783][T21238] [ 933.864090][T21238] The buggy address belongs to the physical page: [ 933.870481][T21238] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x308f8 [ 933.879226][T21238] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 933.886760][T21238] page_type: f5(slab) [ 933.890724][T21238] raw: 00fff00000000000 ffff88801b441500 0000000000000000 dead000000000001 [ 933.899286][T21238] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 933.907844][T21238] page dumped because: kasan: bad access detected [ 933.914248][T21238] page_owner tracks the page as allocated [ 933.919940][T21238] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 22024084932, free_ts 21996568975 [ 933.938412][T21238] post_alloc_hook+0x181/0x1b0 [ 933.943163][T21238] get_page_from_freelist+0x135c/0x3920 [ 933.948692][T21238] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 933.954568][T21238] alloc_pages_mpol+0x1fb/0x550 [ 933.959403][T21238] new_slab+0x244/0x340 [ 933.963538][T21238] ___slab_alloc+0xd9c/0x1940 [ 933.968194][T21238] __slab_alloc.constprop.0+0x56/0xb0 [ 933.973559][T21238] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 933.979957][T21238] kvasprintf+0xbc/0x160 [ 933.984184][T21238] kvasprintf_const+0x66/0x1a0 [ 933.988934][T21238] kobject_set_name_vargs+0x5a/0x140 [ 933.994198][T21238] kobject_init_and_add+0xe7/0x190 [ 933.999288][T21238] netdev_queue_update_kobjects+0x32d/0x720 [ 934.005170][T21238] netdev_register_kobject+0x28c/0x3a0 [ 934.010615][T21238] register_netdevice+0x13dc/0x2270 [ 934.015799][T21238] register_netdev+0x34/0x50 [ 934.020374][T21238] page last free pid 1773 tgid 1773 stack trace: [ 934.026674][T21238] __free_frozen_pages+0x69d/0xff0 [ 934.031765][T21238] vfree+0x176/0x960 [ 934.035638][T21238] delayed_vfree_work+0x56/0x70 [ 934.040468][T21238] process_one_work+0x9cc/0x1b70 [ 934.045391][T21238] worker_thread+0x6c8/0xf10 [ 934.049960][T21238] kthread+0x3c2/0x780 [ 934.054017][T21238] ret_from_fork+0x45/0x80 [ 934.058413][T21238] ret_from_fork_asm+0x1a/0x30 [ 934.063168][T21238] [ 934.065473][T21238] Memory state around the buggy address: [ 934.071083][T21238] ffff8880308f8700: 04 fc fc fc 04 fc fc fc fa fc fc fc fa fc fc fc [ 934.079122][T21238] ffff8880308f8780: 00 fc fc fc 00 fc fc fc fa fc fc fc 00 fc fc fc [ 934.087164][T21238] >ffff8880308f8800: 00 fc fc fc fa fc fc fc 07 fc fc fc 07 fc fc fc [ 934.095223][T21238] ^ [ 934.101353][T21238] ffff8880308f8880: 07 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 934.109397][T21238] ffff8880308f8900: fa fc fc fc 00 fc fc fc 00 fc fc fc fa fc fc fc [ 934.117437][T21238] ================================================================== [ 934.282909][T21238] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 934.290134][T21238] CPU: 0 UID: 0 PID: 21238 Comm: syz.4.3435 Tainted: G U I 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 934.303751][T21238] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 934.309707][T21238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 934.319745][T21238] Call Trace: [ 934.323009][T21238] [ 934.325925][T21238] dump_stack_lvl+0x3d/0x1f0 [ 934.330508][T21238] panic+0x71c/0x800 [ 934.334393][T21238] ? __pfx_panic+0x10/0x10 [ 934.338795][T21238] ? mark_held_locks+0x49/0x80 [ 934.343546][T21238] ? preempt_schedule_thunk+0x16/0x30 [ 934.348903][T21238] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 934.354873][T21238] ? preempt_schedule_common+0x44/0xc0 [ 934.360320][T21238] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 934.366288][T21238] check_panic_on_warn+0xab/0xb0 [ 934.371215][T21238] end_report+0x107/0x170 [ 934.375531][T21238] kasan_report+0xee/0x110 [ 934.379934][T21238] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 934.385901][T21238] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 934.391701][T21238] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 934.397845][T21238] ? find_held_lock+0x2b/0x80 [ 934.402506][T21238] ? __might_fault+0xe3/0x190 [ 934.407171][T21238] ? __might_fault+0xe3/0x190 [ 934.411832][T21238] ? __might_fault+0x13b/0x190 [ 934.416585][T21238] ? proc_simple_write+0x114/0x1b0 [ 934.421684][T21238] proc_simple_write+0x114/0x1b0 [ 934.426610][T21238] ? __pfx_proc_simple_write+0x10/0x10 [ 934.432058][T21238] proc_reg_write+0x23d/0x330 [ 934.436718][T21238] ? __pfx_proc_reg_write+0x10/0x10 [ 934.441898][T21238] vfs_writev+0x6c4/0xdc0 [ 934.446229][T21238] ? __pfx___mutex_trylock_common+0x10/0x10 [ 934.452115][T21238] ? __pfx_vfs_writev+0x10/0x10 [ 934.456964][T21238] ? __mutex_lock+0x1ca/0xb90 [ 934.461649][T21238] ? kmem_cache_free+0x2d4/0x4d0 [ 934.466582][T21238] ? __pfx___mutex_lock+0x10/0x10 [ 934.471615][T21238] ? __fget_files+0x20e/0x3c0 [ 934.476279][T21238] ? do_writev+0x132/0x330 [ 934.480692][T21238] do_writev+0x132/0x330 [ 934.484918][T21238] ? __pfx_do_writev+0x10/0x10 [ 934.489678][T21238] ? rcu_is_watching+0x12/0xc0 [ 934.494429][T21238] do_syscall_64+0xcd/0x230 [ 934.498921][T21238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.504798][T21238] RIP: 0033:0x7fadccb8e969 [ 934.509195][T21238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.528787][T21238] RSP: 002b:00007fadcd9fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 934.537199][T21238] RAX: ffffffffffffffda RBX: 00007fadccdb6160 RCX: 00007fadccb8e969 [ 934.545153][T21238] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000009 [ 934.553106][T21238] RBP: 00007fadccc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 934.561056][T21238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.569008][T21238] R13: 0000000000000000 R14: 00007fadccdb6160 R15: 00007ffe4a1f85a8 [ 934.576964][T21238] [ 934.580018][T21238] Kernel Offset: disabled [ 934.584340][T21238] Rebooting in 86400 seconds..