last executing test programs: 11m52.778785438s ago: executing program 2 (id=761): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000e1, 0x40eb2, 0x402, 0x300000000000) futimesat$auto(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = socket(0x22, 0x2, 0x24) getsockopt$auto(r2, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, 0x0, 0x881) rseq$auto(0x0, 0x8000, 0x0, 0x2) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd2d, 0x259fdbfb, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x3}]}, 0x1c}}, 0x0) 11m46.979603243s ago: executing program 2 (id=780): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x400008, 0xdc, 0x12000000010, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) readv$auto(r0, 0x0, 0x5) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) mmap$auto(0x0, 0x800000000400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto(0x3, 0x541b, 0x10000000000402) 11m36.883732781s ago: executing program 2 (id=812): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x400, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, [0xfffffffffffffffe, 0x604add15, 0xd59, 0x500fffffffffff, 0x0, 0x4000000000000006, 0x0, 0x7, 0x80000070624ce7, 0x5, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x7, 0x80000000, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x100000000000000, 0x0, 0x400000, 0x400000000005ba, 0xc, 0x0, 0x0, 0x7, 0x6, 0xfffffffffffffffd, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4000000000, 0x10006, 0x0, 0x11]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/oops_limit\x00', 0x28400, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) mmap$auto(0x4, 0x10000, 0x4000000000e3, 0x11, 0xffffffffffffffff, 0x10008001) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 4) 11m34.042950865s ago: executing program 2 (id=820): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') r0 = prctl$auto(0xeca0, 0x13, 0x4, 0x5, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/devspec\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002c00)=""/181, 0xb5) madvise$auto(0xffffffffffffffff, 0xffffffffffff0005, 0x16) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000040)={r2, 0xfff7, 0x9816}, 0x7f, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = open(&(0x7f00000002c0)='.\x00', 0x412942, 0x0) r5 = semctl$auto_SEM_STAT_ANY(0x5, 0x101, 0x14, 0x7) r6 = prctl$auto_PR_SET_MM_START_CODE(0x3, 0x1, r5, 0xe6, 0x9) getdents64$auto(r4, 0x0, 0x400) ioctl$auto(r6, 0xfffffffa, r0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x801, 0xfff) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x7, 0x0, 0x401) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x2, 0x4020009, 0xa, 0xeb1, 0x404, 0x8000) getsockopt$auto(0x4, 0x6, 0x15, 0xfffffffffffffffc, 0x0) 11m27.18747178s ago: executing program 2 (id=836): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x400008, 0xdc, 0x12000000010, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) readv$auto(r0, 0x0, 0x5) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) mmap$auto(0x0, 0x800000000400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto(0x3, 0x541b, 0x10000000000402) 11m20.845996053s ago: executing program 2 (id=864): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/stride\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) timerfd_create$auto(0x9, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) ioprio_set$auto(0x2, 0x800000000, 0x8) getsockopt$auto(r1, 0x0, 0x60, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10000000000009, 0xdf, 0xeb4, 0xffffffffffffffff, 0x6e79) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x0, 0x40007, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x810000000000003a, 0x0) sysfs$auto(0x3, 0x6, 0xfff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket(0x10, 0x2, 0xc) 11m5.637329674s ago: executing program 32 (id=864): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/stride\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) timerfd_create$auto(0x9, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) ioprio_set$auto(0x2, 0x800000000, 0x8) getsockopt$auto(r1, 0x0, 0x60, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x10a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10000000000009, 0xdf, 0xeb4, 0xffffffffffffffff, 0x6e79) mincore$auto(0x1000, 0x4000000, 0x0) mmap$auto(0x0, 0x40007, 0xdf, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x810000000000003a, 0x0) sysfs$auto(0x3, 0x6, 0xfff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket(0x10, 0x2, 0xc) 10m20.473931916s ago: executing program 0 (id=1042): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto(0x3, 0x800454df, 0x38) 10m19.911596299s ago: executing program 0 (id=1045): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x6, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0001", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd7"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r1, 0xab03, 0xffffffffffffffff) r2 = getsockopt$auto(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) unshare$auto(0x40000080) socket(0x11, 0x80003, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NODE_GET(r2, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f00000005c0)={0x670, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2a, 0x1, 0x0, 0x1, [@generic="5f9b0fda3bfd1c5a51f4375d3035ab1ac39b6135d420f82451d87380773de893178fe3377e3e"]}, @TIPC_NLA_MON={0x239, 0x9, 0x0, 0x1, [@typed={0x4, 0x97}, @typed={0x8, 0x137, 0x0, 0x0, @fd=r2}, @generic="87c745612a203295bf2cde257b867e675a817c027e2e447c2861662aaf9f28ea446a9da5b960bca0f72bbcecee8a1eead4ccf9c37909641606c4d59ee913c15315d372591d976a76c6ed44cd33", @nested={0x1d9, 0x8b, 0x0, 0x1, [@generic="a83c3788348efbafa6b04eb4eb94ee4810a9f92aa0ab443e5b50a70b77106162e3e1cebd43b7cabe0cbc921d3115291924b19aa41789263c3adc7d67c4c7c3e8e31f2f0281e4e8f766fbec943526abe7bd627295b2fd723b1bd3207694f12146da7d6c98c5b24bfec6387fbb79a25dfb20674445899d01a467c09e223ccfff8f2b652caa855d5ba04c2503bf529186015de8e56f19d470d4fb7936178bcaaf", @typed={0x88, 0x89, 0x0, 0x0, @binary="309e538702e1375cfcdc0199e75d88f3d7f16e65498a4dc7352deeaaad0cf6765ea5568b580da7d0979fbd6739277ba3427e91bd2c244664d0663ac1e52b11ab61bc3246729dae893e53042dc26ea37e23fb113500ca3800c1ec3b22b6e6e9c4dddfd6ad463f9857941ddb8fda65092dc6077d6bf93a2937687321f1e23f0e1e273e8d6f"}, @typed={0x4, 0x143, 0x0, 0x0, @str}, @typed={0x4, 0x52}, @generic="835ca013411ac6097a41692799e5e747bcc2b81aadb1065c0cf4e2768470aa1947aff7ad126d22dc9d878b9577c9c33204abae22ed7d0285d2ae7e433f18f9e42b2e94f8e9982b0cdad1d3926a344d3d569181b48e0c19b6767a80c9d567d9fe11bc76183caad82c0905824cf8a47c3a3f6891a8f6c53449935d13cf16c03dbc0ac4041dc00539914375b584e38a4140937c3aa591056155349a38a32297b06fee16", @nested={0x4, 0x76}]}]}, @TIPC_NLA_PUBL={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xd3}]}, @TIPC_NLA_MEDIA={0x270, 0x5, 0x0, 0x1, [@generic="e668829cfebb81493a21aa25f2c46a598359130b346ce56beba32525eb132c5916480c8a6782315249b6a6b22500909ef5aa5fc37b8b6336519371aad6b28f893fd90b902f0ff0c177582e2cfe15e2f69040e762645feb0c5704186c", @typed={0x4, 0x19}, @generic="ee75cca9c3384929b8df033972450728fb19142db079e0e0fe26f86e06fa3e52f1b0b0ec437f27c927ecd7ed0e71eb1b41576baa8129643b7010acc57e24aaf3c5e37e84f22faa9a2df5e8b699e2cfa5eba3e9b54a627961525f9502c7470ae4e8292603960e166600da8b4b2502536861f571332cd665288bf536b3f06d17f8a85965afd8139e81c3e0d5782aabb524c0", @generic="cc49ed164a975b880b43ca9e0e04b600225a66f4a8c4dd6428b7b0f08e9fe82a7a46f552107d9705e1573286c907a086608e94459ff6c7d9a2c35b015ad7f66c4bff9d41491f1671508183f8cf21976e296bbfe956cba51e36aa690f1c20c8a85a8456412b1a752b57f962da6d0d017b14c9e4291daacaa7777b0ccd7f", @generic="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"]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@nested={0x4, 0xb1}, @typed={0x12, 0x89, 0x0, 0x0, @str='/dev/admmidi2\x00'}, @nested={0x24, 0x65, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}, @nested={0x4, 0x3}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}]}, @TIPC_NLA_MON={0x127, 0x9, 0x0, 0x1, [@generic="fe27dfee421cf364637e0017ab84d21d3411b0a3f14e015a79ddaadcd777b16cb326026906c9b20dd7cb17", @typed={0x8, 0xde, 0x0, 0x0, @u32=0x44eb}, @generic="1a60a2d52884185bb3b056d1b0e249b8af2d173947c01fabd0c8acf32bdcc52b7bb8ccfdb95ab0dfa1ba0bd81f429a9dca88d681fc91467b3491e49537c78ed4d995cd02dc9d82c1eba2627ba0ad1ad2187a3fc4d421f349f1efc3913c791a78dd9a2d3aadf33f287a6582b9962b3e18436db8dbaa8a0c7886c0d2e113b471a33a3820c360dd3fcaba9ff67e82ef5924a60758fb56a5470f16e8432398a2c2f6f881bb2f2e41cce5e7075d5ff1e913c964ae2d6c411478d10ccd7657", @typed={0x34, 0x3e, 0x0, 0x0, @binary="d742f91f1a7b3a31ef580d1477fdadc8f660964c348b3474c8a836bb00e639b46fcb1802a106de1393d4ae88066d1807"}]}, @TIPC_NLA_UNSPEC={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @TIPC_NLA_SOCK={0x4}]}, 0x670}}, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="144e4f00", @ANYRES16=r5, @ANYBLOB="01032cbd7000fcdbdf250d000000"], 0x14}, 0x1, 0xffffffa6}, 0x8000) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 10m18.995143489s ago: executing program 0 (id=1051): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bpf$auto(0x4, &(0x7f00000001c0)=@test={0x2, 0x80, 0x2, 0x0, 0x101, 0x8, 0x9, 0x3, 0x3, 0xdd78, 0x5, 0x8, 0x5e0, 0x4, 0x4}, 0xc) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (rerun: 32) io_uring_register$auto(0x2, 0x2, &(0x7f0000000180), 0x83) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 10m18.755976199s ago: executing program 0 (id=1053): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x9, 0x80000001, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x4, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, [0xfffffffffffffffe, 0x604add15, 0xd59, 0x500fffffffffff, 0x0, 0x4000000000000006, 0x4, 0x7, 0x80000070624ce7, 0x5, 0x6, 0x4, 0x2, 0x1, 0x4, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x7, 0x80000000, 0xffffffffefffffff, 0x8, 0x0, 0x100000000000000, 0x0, 0x400000, 0x400000000005ba, 0xc, 0x0, 0x0, 0x7, 0x6, 0xfffffffffffffffd, 0x890, 0xc338, 0xfffffffffffffffc, 0x1000, 0xa38, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4000000000, 0x10006, 0x4, 0x11]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/oops_limit\x00', 0x28400, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="00408de3b0da99c5fd0b710ea95de6aa91f3bc530000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) mmap$auto(0x7, 0x10000, 0x4000000000e2, 0x14, 0xffffffffffffffff, 0x10008001) ioperm$auto(0x7, 0x6, 0xffffffffffff4064) map_shadow_stack$auto(0x2, 0x3, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='y\x8c', 0xb) socket(0xa, 0x801, 0x84) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x1, 0x84) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r3, 0x0, 0xe) getsockopt$auto(r2, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi18\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r5, 0x560a, 0x7) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x22000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000) 10m18.556331753s ago: executing program 0 (id=1054): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)=""/9, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) semctl$auto(0x80001ff, 0x804, 0x3, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x323100, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x202040, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) ioctl$auto(r0, 0x8008551c, 0x38) 10m17.67169391s ago: executing program 0 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio3\x00', 0x0, 0x0) socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf4, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/bNumInterfaces\x00', 0x1a3080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat$auto(&(0x7f0000000040)='./file0\x00', 0x81) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) semctl$auto(0xfffffff8, 0x4, 0xdbc, 0x9) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x814) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mtd/mtd0/oobavail\x00', 0x42000, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x800, 0x800000000002) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdc00, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x20009}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20008084) 10m2.172057669s ago: executing program 33 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio3\x00', 0x0, 0x0) socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x3, 0x2e1b}, 0xf4, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/bNumInterfaces\x00', 0x1a3080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat$auto(&(0x7f0000000040)='./file0\x00', 0x81) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) semctl$auto(0xfffffff8, 0x4, 0xdbc, 0x9) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x814) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mtd/mtd0/oobavail\x00', 0x42000, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x800, 0x800000000002) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdc00, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x20009}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20008084) 4m0.755869754s ago: executing program 5 (id=2655): mmap$auto(0x0, 0x400008, 0x800db, 0x9b72, 0x2, 0x8000) readv$auto(0x3, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) ioctl$auto_OTPLOCK(0xffffffffffffffff, 0x800c4d10, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) seccomp$auto(0x1, 0x3, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x420382, 0x0) r1 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x100000, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r2, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(r1, 0x402c542c, r0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) select$auto(0xfffffffb, 0x0, &(0x7f0000000500)={[0x1, 0x101, 0x9, 0x4a, 0x3, 0x3c7fbe40, 0x0, 0x3, 0x3, 0xf, 0x51c7, 0x7, 0x8, 0x2000000000009, 0x1, 0x8000000000000001]}, &(0x7f0000000580)={[0x9, 0x8, 0xfffffffffffffc01, 0x4, 0xfffd, 0x9, 0x12, 0x7fffffff, 0x8, 0x3fe, 0x69, 0x1, 0x5, 0x2, 0x5]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0x9, 0x37, 0x948a, 0x101, 0x15f4da0b, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x8, 0x9, 0xfffffffffffffffc]}, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) recvfrom$auto(0x3, 0x0, 0x800000000000000, 0x100, 0x0, 0xfffffffffffffffd) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x6, 0x3, "a2b8e85fc56865ba529faa000000000000000000000018f4ffffdeffff0000000000c7692a240000008000"}, 0x6, 0x5, 0x7, @inferred, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f9709edd3460c667373fcc59b584d8a424a71ac36c276863295e00af4909000000803400"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f00000000c0)={@raw=0x3ff, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) 3m58.914805388s ago: executing program 5 (id=2661): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) eventfd$auto(0x1) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x80080, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) io_uring_setup$auto(0x40000002c55, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyec\x00', 0x101500, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 3m58.619365138s ago: executing program 5 (id=2664): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x38a1, 0x3, 0x26, 0x940, 0x1ffde, 0x3, 0x6, 0x902c, 0x29, 0x400005, 0x3, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x0, 0x9, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe, 0x4, 0x0, 0xceb, 0xad5, 0xfffffffffffffffc, 0x0, 0x1, 0x96f, 0xffffffffffffffff, 0x2, 0x4001, 0x3, 0x0, 0xb548, 0x8, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x3]}, 0xfffff7fffffffffa, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) socket(0xa, 0xa, 0x0) socket(0x2a, 0x2, 0x1) (async, rerun: 64) fstatfs$auto(0x3, 0x0) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/kernel/debug/block/mtdblock0/sched/read1_fifo_list\x00', 0x400, 0x0) (async) read$auto(r0, 0x0, 0x2100000eaf) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = io_uring_setup$auto(0x85, 0x0) (async) r4 = bpf$auto(0x8000000000000012, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) (async) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000002580)={0x5, 0x2c9, 0x5, 0x800, 0x9, "63b5deca6601d567430846b26ec093e4"}) (async) io_setup$auto(0xff3e, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r4) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000002500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x217c, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xd9}, @SEG6_ATTR_HMACINFO={0x2160, 0x7, 0x0, 0x1, [@nested={0x8, 0xd5, 0x0, 0x1, [@nested={0x4, 0x58}]}, @generic="895950aa2cff2477c3109e2da38adfca54c8b19fad585feaae556cfc3ac7879629c2d6104dd8738acddc0e433e9ec6e61d34e51ebdd5dd753c3999ce9008f54baff8235dcd8e9410a36e749c51e3ba8c605c756d7d696f4c58ada6f3493bb9de9077900af162a2b6245d0c73efba0d0859806b1144236a48a307058440b2730d801dacaac526e694bdd78e20fa13f46e0df960d51287e1f831d3fb4ba2862bd75d6a2b785bbd078a009c540cc08d212fde4d59f025731eae94296fafdd4d384b4ca8a98fdc1a56a4555bd113cfdda8e6879b37ff0b65dfac7017bbcc48dfc2d0c9606337ff7a3eb3fa80b280a4cf57ced705a4345a6b24fe56360730c33f694e16e31789c9fce438b9872b407bece13439247671cf8a50909f8af546f5bfd8d82f9b063a237d0500273c22d0c6f0ef730bb2ef790512ea3102987991a08ce677d50d6362d6c1221c0aa011961ccc5515fa680b13c4745491a9e063012c1900c415422539ec56c661136aea28b58d1ba36c28a54ca9fdb8e4aaca398f39a4bfe50c367b168275819fff9750b68396816e40fe17a344b6b67627200d042acad6be5a54324323901ba4cec202e13c2e563aa419949ea81a4c9dc397bc7cb8982f4860809c6742210201791e1cfb0b6709b7afec5a4117ddadb929b2e22f141942ba80a59f639e9a186a6eeeb89812597eb89025377e8494617c43233094aedb5c4f84cc19e9f9d252b1a0c3c925588007d571e0799c003389b4dcd55309428379735f560d3f15de30c7200d4a7100b9f103f35dced7068da25dcb2b022d9441f3843cda86e4c7e3761d2a03e28d2aea3306de98df5505b67fa5fa5b371b609217df6f4a133813e8ec18a2470d068c0be4548dc6e2d2924b4074b77f6624f03d2445654238f3251d8886c1b90e782dff8bdd1af25539ec60ebbed99866e1bf79e13166635ce432d8c75ae49bbd5fe8e557361acfc2afac93dd735274b54c1df60ce7b2352485004bd070fbcf0aac37c5a089c8cc91e08aac6aa6097fa35cad7f7489d55c961f68fe726b90b8d2dc4309884fb3e17ab1eb8093493d6a3a5a1e3e31dc22bc9d923b8c1f6219972ff022cf0a3a9cddbd3f5c1881e6db1073a67391cb547d1b7055b757d7de10aee823e7eb6a010f975619a5f48aa1dfdbda9350c389bb635794ce5144409dde7eaca7fdec0fca8ae00fe050ebe1cc533234a5cd943849e9f621a952eaee392d269cb30842c65003e5bce2c263798ca2988e02c665e313f093000650984c68b1d9502d15e0b02ff855bb3d060f4f8a1e3b4bae04147661eb7d542cfa0e7cf65eea2e82ad158edc9972772059866a713b479de978e8a96c794009ae0572f4f0de3c9d6bda3899790f5781ce83b92f7a3b345f4351f6aaacc044e213550c4c693e5a3626f22fedb488ec00dbd61f74998b9ebcfca719c7e2a3e5249e420625610b404b77897578d5f6b75a46ac882ae2f9d614e78951186bba384400605f19fa05f70b7e0e7c497b40d75c883364100191f3ddfd3c29a5eaa7aefbf5b4bd5ff9909774ececce7b1ae19bd51962b3c184c00e125a82593b9397a4ca08b3a29c82901d578d25d569aa2a639222dcdc9fca0e8030df3681b626a71025d1c0f32b999aed098fbcb868d770be6b0793f3f61893b407e46f0864ec0a7e3a83207c2c798e01c97598381a55f9cad35ae279b3765196068f15c5f4fd26acaa8a08469e0cb8484e29f45d3c37335c129cfa45e7ac7045618da9fe7efebc474ba7eb0c3ff13349ad8c43dcd4c49e157dce7440ca2501a43bf59fd4605418e4d132b39d79583448fea4e2ff50e2b26594d031207a77d6c18c686e965c2a0a1a3c5b917cf925b203834bac29dbe1374c19cfadca062279a854b9fe82061ed7d7f6c486a5d0a1b963d02007c57859cc2160e67647069c63caf2932a1eaa9ed67f2d10a58216db1bf0ff342a8d94d77154e327213489789203c3cb1ef129e7c59ab94979b3baaf78f7a417caa183c5befd2acac64b940b75748059524573cc2f058cbd4cd490d4963f5b05d07fd3eecd1a5f8a6e024980abc2a69709d082034b1a732644d0b2e19cee490ed2db16f7e2e28f6dee81d241a4474b148ed8702cca3362633447ad9885c073766e5a2e7654788551b73a975e2c7ef7b2a0b93dbf42f34278ddf03629103027e80a2db0fac68f042bb91d0eb4a0d131778c8b6bc922bb149a43261158b3742d67a1070f6b828ce9c014c1f7345a1147d44257d69b251a606edbf934447cb0ce47e8eb378e0bd7b2cde3fb3e5b407560773acfa71c3ef0c0a3ed9ba912dcae427b08a3f3a15530c5da98cf640fb230d8888643f84f10b65544873b2f8e6f9e81d247686c6abe2223ecae8ab54ba256f5e040708b2a74b9f2de88254425a3e9616d28cd5f5467041eef700e5851e3a89ade5f0c136b929823122c0a84d99d034fcc6c727aac67dd3c5002e39bc161cccd80908802bd0808b44f601a1b6c2eaed607ccf6b0e0ea363bf5562b5f414d8da5e27fd24739f48efba6cee4b3255ff5f490eabb0e378a164d24f1916688bf16bf3caeff2ad7a7711a0d71582ac7fdeefa26d4c8c29e2635580fdf2bd2819e1402d7661f06ccb3ce34d4cc53b32b7d079e8ab1171c75b1a3e9d4afa61f35e9b8a56e1c483f5073dd0a666a5d5473a43e1a42768ab15982d3c1f1c3671280d46916b01164cefebc928c575792f51713357b84b26125309b2985020e8d5da937c45780554e874341b5e6aa927e2b6eaf7276fca6b9c9574cd5a068268fc2a7ef957d8c8bd36c35d39415c47186ea7441e2dcc56bf3e384c076c04447b68216dc61ce6ebd965a40472027b604bd9314b805e49721144ec0bb33d37b9bf52690e1af08284d40c2dfe677f387c9e6fff581a893766252c11553531869a817655fe8058cfd606cbf5952fe3c92f5a472037609259218c4f60dba36df098f4499cf0e490389ff44f58dd288988c568dc45842118a703194965a45381feb0e63b1dfa975b93f44efd75e68f31bc6c4e5cf2f6610a1b09bcc4306e07809c3847812f444d6b5a6cee254d415966d0418d4c0c5f401d0b7b821d0518aa552a0194ec64f285a09bedc88fc4b4bfb9861fc43d2da59060c406b8cdd921bf482caa5d1da6be410eab0cb4dd508480c788d03d0a19e55321185307f74c266996fae94d6969ca4196b62096442f43b15ba477f7645f2b45e3316d7290018626a0dd640b909366aade62407ad3ec37aae125ba0df1ac97a431c30f6ac942ae3056663962138e29e1c86f28275be54ad766645742df0036338d1f970db1926378f4e3f769165d3d04389b51a1a82fe166e863f23aab1c87ee450d07faf25dfc30e7defb7b6ce11e6e8f4094379ce8be840dfeed0c28911d59d06a4fa52266175b6170d572b6e8f46264d4fafc6a4ea78fb857a1bae4010e33ffc896f91817a0a6da54d2fea565fd9f7d837d7beed831fbf791ef4cd794456c7e5bbd5f8fdadee34cf47071b79bc93fe742889abdd5070255aed28f9447eaafe53613b7da757db09fe3cf5165075086ce223eafe7d3054f2f1c64089eda9d1209e1dc42e94de1dc017c9d5dd1f7cb70cde88645e6d42ce4914a0546c27b9a9e1a98cddd1058b991a1738ea62860a5ff7cfa70463e268bff9c9d8ea80957ac57be2f2e566fa7eca6ebbadfbf744cd6432a68f8fca1b60475f4552fc09a51ed9b4dbabc969db3e31e9ea2134493b9377860d9e10428e0b57b69546d5b7ac50b9795e565c058e22df01aa870535217116629b6610b9ac7860b1480db1c92fe4986bb86513a6d45e20570415bfb57e4e59e6c8fbce641f5402a3fafcdbf342997064680acc6e1933bc3fab8782a6ad23ba100629aaac5766a00afa942dd74bdfcd34af10f5ccb2bec979e9df663bee89545fa522438f52bcee490e1611b6db4577d9249a44ba5008d5a6930b1406d81604dbde7aa5c07ae0d9b522140ca8b87982c34d4a1541f188375113b9712fd70cc9939275dab3d94d9711a81b088c01dc3c707dff27782548012ea75daf811c399430deeb56285a359485b53a2440eaf92b98487db890e37dcb5435860c063f10cbc0d9e359082c55ec43448a004f13b6d694b6034aa56c7211be1a2b680e9a4a6c406be1cb1b593c9845461fb5f63884a9e85b0b4229e0e407aef0be9e179dff282221d38096a5eacda69728bf707efc33aab648aaf344e2627f92b2b2a9052981646eab839af902749c2d7b490bb782c1c0b4017cd10ecc1cb81752c09b6792051a835fd699b62bb94ef4058da64bd1c951e914b3c5095c2a94973e016815b43d5010fb59323e70c74ec588d88e4b2fdeea97b373a36e6814a9fd293085644b77f6ebd6f5f39261ae923e3cb3b6ad810b1df5cdf3810ab557964e9e3159020a491f9467fea4a9793bf3f4e8e69d2aee5a324ea21aeb0678f6ab4e8b1844bda1050921addb26d3b1c6dff58af234bfe9f2754db7b45e93c570047c2fed875972ada63cbb662c0d2b6bda9605abfd885fc54e325148c69924aa54f34117f9c39db75077ead65d8a27434d01edc8443577b403ceea3c5bd4d7d4b7c8cc72fb03f5824048c68a39ff9b99f8c668695ef9bea2e0bacbb011bcd8031e2333b16b7dcee45c27c5ba28496e7e65c6c91cef80fffebe809705abf8d782bd63b3bb0cf5a5b7914cb879d2190cff2490723144018618a55adc697365fbaf72d6472e85b20540e5134160cb090e720f3e2a017b64317f2707e1a2a8b15bda9871a577a14002e1b03f395d453ef9fe65ad5f550c9f79e36db9d8224eac7f1fcefe09efbfb42fca38adf36294cbe02e18c05a33d0bd3f64525336efccaf0a03da9966b9ca40897c85eb276a8dac2bd7192085bbef6496e32aa663348c750f5913384586c8371c8fa3398979a3fb2da9608f178201f2ee36ffce307bb9db557c78d30df3075501378ee727f369b0c11b1942c91b85b1da8a3944936cf7ab105ab4232e7603a866ff0dc186e60a4d551d493ed829eaf027b6406869ee9b0c511d6f2364e0b9efa8221f91002dab96c67e1ae623243909284f6ed9f7abbdb57b8b91d7431c366d83eb8750de776375da97ddee2053e60873c5f4e68f126e9725c78961fec5680e6a4c0386dd7b59d36aaacf9dff4bc2720953cbc5f2fe67a1698d95a3afc76bc1dcc9f469130b61bf74cee556d7983aef921961ec2197d0fddf8a2b42f0df971c35365029492a822e5d9d41164d1d664c4ba67253dea9754204c226b851debef9adb57792a507dd05b0034efb1ee2b1b6924fdd455474801bf1d9f8eba75c3fa3f7f857ada9564e6ba2347102c541b3f1477784459b86862f21c697482f5175f75f80c6f4abbf792217ebf0bacf2cfe636eb4325e094c802ff8a9118b55d2ec87a7772e2b3ec778c2509e1e5ceba91631a4acf00ace5b02826a7d46e6581f282e8c6898356431ab594f7352f940a116f50f63a55201ef333b79f8bb119f8bd1b4eccfecbaa1b85cdc158a8d537ded46680c28cc9a8c89733156280e82590c41682a9aa0833ec51773a18e1e08d5f3c9f1da8124d0d386715c6fe6a52d855c4a402f772ca24ceca0df70eec855436b44c99c5c3d32ccf1dbde08f60ee78eee5d682dfce6abb024e86e41696f860d5e7d37dc1b6f4fb4f3b45d257f0157ebde96e080cafcd1a8e93f604a0a99521f78197f084a4c8e9c7605596e7cced8bb8f823d6dcc63acaf2932b2073ae61d041eb50bda8a2729283735897c2a23364198641bf211eebbd8ac48aed9", @nested={0x74, 0x4, 0x0, 0x1, [@nested={0x4, 0x6b}, @generic="329318fd370cc49d83bf1002ded002b9c5ad2ba15bdcbbb403978170444a7cf51d252c380c3d8959c337943a8a7bf96b2c3755a93cc4aefa84aef23337ddef8b2bbaccc8371f39af700f32a7921569b79874972ffc7b93ff336561240c604cdc61d1024836fc4bf4", @nested={0x4, 0x124}]}, @nested={0xb1, 0x0, 0x0, 0x1, [@generic="25c44688d7940e32516167bcf9c2d9a917c551fcd70d1e4e79205a01d184825b15b3282b0ad6d9ef25cd29fae1b61d6979e61fea754c8932b6944eb6587395b81ea463f7b0931bf522dbcee4e0204255246c36742df338fbc21763c1511ccc31063ce58ccb264119f24ef66ad057432f58c83988d144e0854dfabcd31554efb5f5634402b0cb376d04e44690ed772f9e84662e8a35ccef6178d530837fba58eb1b7ef3a7a4be67ad6fa7b93027"]}, @nested={0x1029, 0x54, 0x0, 0x1, [@generic="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", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x5}, @generic="eca3d44f5b59b9bd7545c245e312436cfa5a1066f339419982"]}]}]}, 0x217c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24040000) mmap$auto(0xffffffffffffffff, 0x8, 0x0, 0x13, 0x3, 0x110000000) 3m57.827520695s ago: executing program 5 (id=2669): r0 = prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x6544000000000000, 0x0, 0x11f9, 0x5) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x5}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a850}, 0x180c1) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20001, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000180)="42feaca9d7b771a376b1e0ab3b266e62dc6ad27bc0fa6ea63fea6022ff9902e0b7a431af5b145b4017e3bcb9effce719b719fd1ea22c4c0a6a29eeed9ed68d25e338b7b9d3916c02a552829aa32cff5d4f5b362682a5efb8984a4f0a51b977aba8bdf87d2f3bd9aeec02062f41d418e0fdb8f8a8e07659e0a93b38a5afd4586d575226b2928be2d2efa5739311ae85d50d5ecb562b884809c640fecc70057ea12c124405855db453abdb978fa1420c537fe3888f6da565ddebbb395ee7c6d70d58c1fc22f0f3bc7fe7738ff897c1b8518efc92143ed3dfed952c753a9056fcfa7ca2ac0210d768") r3 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy2/fragmentation_threshold\x00', 0x8040, 0x0) close_range$auto(r3, r2, 0x2) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000002c0)="5eac5bf0cbcee1771e59b712423fe2385ac9a51a0cd0c4ffdc8d41e52b766775430cd4e79be5f5a2db0c3c85891a81ebe4a6b09dd3708249ed1cc036aa6b92634b41d03b5669f2322b6399a29573acee8b514f1a568dde9ceebcb5a526b136c4d35e40c3290d10578a2ce1") r4 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfffff485, &(0x7f0000000340)="14bcc062b1da64a49f117515") splice$auto(r4, &(0x7f0000000380)=0xa9, r0, &(0x7f00000003c0)=0xfffffffffffff800, 0xa, 0x2) r5 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000400), 0x301003, 0x0) mmap$auto(0x100, 0x7, 0x5, 0xfffffffffffffffb, r5, 0x36) sendfile$auto(r2, r2, &(0x7f0000000440)=0x8, 0x4) r6 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x2) r7 = bpf$auto(0x6, &(0x7f00000004c0)=@token_create={0x9, 0xffffffffffffffff}, 0x9) r9 = semctl$auto_GETPID(0x5, 0x8, 0xb, 0x9) r10 = fcntl$auto_F_SETPIPE_SZ(r8, 0x407, r9) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r8, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0xd, 0x7, "9e975c62f48f87d435"}, @NLBL_UNLABEL_A_SECCTX={0x5f, 0x7, "bd6c6be56cf914570ab759f887c8e809567fee45d7632e2ffab2934d8894131c5d72a3e117bf89d2df7263a31809512be41a1929d031ea94add726d4f81abb61e2e9a4c572efa35ded33e2959449606cd2afa94ac3a1e4cb656187"}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x24000081) r11 = fcntl$auto_F_SETFL(r7, 0x4, r9) ioctl$auto(r7, 0x4f9f, r11) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f00000008c0)={{0x2, 0xee01, 0x0, 0xfffffff7, 0x8000, 0x5, 0x4}, 0x3, 0x4, 0x1, 0x7c54, @raw=0x9, @inferred=r9, 0x6f, 0x0, &(0x7f0000000700)="fc174231bddadd5dfd9879a86af6149642ee5d0a955a386a53439baf7b82cec19246f46388dffd054e88d63d84ad3336c06ac3b2bd6f972fc8d2d7cecff7e32059803567972228cbb86c1586f60e416bbafea0f363a0803d2ecb7ca14f04adf98825c4382fe59dd31c085394f500097f6fe83071f40fdcbe8cbc13751ffc310ae8a3bfc1010dc038d78597303e1725216892b21d0d1b38214450d4e0aa3c1028898589be493e1a06ed6e354d85b9e00a5264f936c516005187f4132aaea05525034475eaf66579ddac263c336c9d89b5e683b5df884e0b2d602f4c453e3f2432915d7c861f4fcd5fa77226ec156881916bfab5eef7cd9b", &(0x7f0000000800)="05686a98f3cf329a3cbb1ba646fbbae9d866eb02e3f17042eae0d61f6f3526124c1c439447e1d9cc894b6fc75fb0a3a50ffa710e3accaebca8811c77c3e210cf3826dd4ed723521fd46577de4299a0ce5f2f3ac25f7eb856b756745fff7de538245182800a654c2314f627bb4baad6bd1d1054047d33a8ac1b734dcd4301fa45bfea6b537fd2e8f2d28c487a463bc1d8a5e6e3a60991dee10e78b7dcbc6ea3227c4a0920e27512544b27"}) statx$auto(r6, &(0x7f0000000940)='./file0\x00', 0x8, 0x200, &(0x7f0000000980)={0x1, 0x800, 0x5, 0x9, 0x0, 0xee01, 0x4, 0xff00, 0x9, 0x10, 0xa, 0x8, {0xd, 0x5}, {0x4f9, 0x3}, {0x4, 0x1}, {0x8, 0x92}, 0xb05, 0x4, 0x5, 0x9, 0x4613, 0x4, 0x7, 0x10000, 0xd5, 0x3, 0x1, 0x7, [0xfffffffffffffffe, 0x1, 0x80000000, 0x90f, 0x7, 0x929, 0xfffffffffffffe00, 0xfff, 0x337]}) shmctl$auto_SHM_STAT_ANY(0xd, 0xf, &(0x7f0000000b80)={{0xfffffffb, 0xee01, 0xee00, 0x80000001, 0x6414, 0xd, 0x8}, 0x6, 0x2, 0x5, 0x1, @raw=0x9, @raw=0x8, 0xffff, 0x0, &(0x7f0000000a80)="0e15db813cceec6d72d4fcc704d140c7bd95c4cc884c80381e2d9be1b0d41940bc5b7914cf5ec6945bde7611219f87738bf61cf6edf9f43910ff626a140b84f82fe69a1d28d67a3805128015ad7ca2531279ab628962ab5d72c9f6d0a70e88ec35bf3395759aede53a54b99e", &(0x7f0000000b00)="b16e088384646ec79af46103596d6d3186f1e5ec32975b0d14cadbc7a381fb6e6fbcf7bf0fdc1988a9f94b463cd9d567b82e628c51b34363c2e937145a4380a2b68bd50f57e9c04c62ba834b7dad7144071df9d793be69d4e6a29467cfd834ac0f9b174ef24f"}) setresgid$auto(r12, r14, r15) r16 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000c40), r10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x98, r16, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_FILS_KEK={0x40, 0xf2, "470e34551ca9c44718ecc04bf251493778031b3486322e8cc4a822c42ff7d716c4d987e461675687153729e9cfc4151012c2d05bb9a935fad448c295"}, @NL80211_ATTR_MAC_HINT={0x42, 0xc8, "7321178c7a03d097d338a32e768674fdd47eec6ce36b1fd5892ed3968fd56f2c69587fd1104e0c62995a3199860776df411dbea36d96eba7febec95e0925"}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) r17 = prctl$auto_PR_PAC_GET_ENABLED_KEYS(0x3d, 0x0, r13, 0xd25b, 0x7) sendmsg$auto_NL80211_CMD_ASSOCIATE(r17, &(0x7f0000001dc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000000e00)={0xf48, r16, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7ac8b302}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_SAE_PASSWORD={0x66, 0x115, "1c234028dcf1c9b7b5fa1a2d78dbc34060a11bb7995e2a30f7898c794d53808578c55412de8e4d77ce19645b8ee1da250cb225d9f0b538482aaf7d5e8764fc430a62031a76a0b445442edf71942a71c9c0b6346a4f89c8be9c0531b6dc59035050cf"}, @NL80211_ATTR_FILS_ERP_REALM={0xd4, 0xfa, "3d91d96680b3c9e669e50d4aa7b075f7a0f44e9bc7fe48019ba95a94049b13fad7710358c1966d66df03d04974b7a110b49b9577b328cfca69d44917bbfb1d2f932af29ad38eae2722d6886c02053cc486934d5e76db9a02667b228c865a576fe34880d284e99fed8c7d391deaa203369023cbd7beb0cb7ba96e555bb12bb20e8c1d7103bb57c5491c0cee794d48e5e0bf5dd83fdf4e091dc2ae70e639a4feea25e4bb28e2798dedbfb8a7f7b42575c65112681fc770e9e165f2bc709c0660cbf07f29d840d6e1a9bb45f16ba8ac5f30"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_QOS_MAP={0xa5, 0xc7, "d7ece160b9338f99960e6c539207645480526acf1ef116c39234dd3271d1d7f3f122da7a2372f0109bc142af77872a76c2c4c307f2455becaa99dce4606c8afddc025ba523dc3571ea6b6d70a5165ee456901b385395df2ffb32c69436cff51531cb28107b83bfa2020d02bf9e30f8f1ae8097d505f2633856f66d18427232a51c06645ead833d335d9714a994fc39998ca1eced6970909dab56dc434258038c53"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x68}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x630}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}]}]}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xce0, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3ff}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x3fc, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x5c9, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0xfffffd7e}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x301, 0x2, "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"}]}]}, 0xf48}, 0x1, 0x0, 0x0, 0x40}, 0x4080) timer_create$auto(0x5, &(0x7f0000001fc0)={@sival_ptr=&(0x7f0000001e00)="729d7f6167cea011b075e1baed9590b9895f1c9d6c06ac7fe83eeb466f966d0aecd02344e887bdfe44dbe0ead388043c2b84f01cb36a45ba1718db3280d842ed2a6748db9775fc1d5d8c3da49f5a57f05a0670d57894aa9f8d4227b1ee61551f92a5f89c8f415e90d47b", @inferred=r2, 0xffffff90, @_sigev_thread={&(0x7f0000001ec0)=&(0x7f0000001e80)=0x9, &(0x7f0000001f00)="9ef6629dba0e4f725077d27b3f3aa9d57bc7b36fa7e4f9f54b5728072f027c7713fa2c2d83f7127571a394a1fbd3631cb4b7bd246543cf95c5d9a6c580afce83883659d25c9c97b8ecec6532550551f9f55309c613a9d022fd689291218c72f29bc27fd778591523ecd2976701fdc715e75afc2a949278c992028576a54a6c35198a5eb2c7e73dc86219aa07f2506526ae1e776e9cf0a294ac079ed6ac37923f35807e26089efa9f8a5e7393d6"}}, &(0x7f0000002000)=0xb) open(&(0x7f0000002040)='./file0\x00', 0x0, 0x15a) 3m57.700648347s ago: executing program 5 (id=2670): r0 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000003b00), 0x101101, 0x0) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x2, 0xfffffff9, "b921"}, 0x1) kexec_load$auto(0x0, 0x7fffffffffffffff, &(0x7f0000000080)={@buf=&(0x7f0000000140)="61a0135dc6c7257a535688a8da722b340885cd7c5d87b21ea6c957dc6bbad0bbc8dc20db423660748de5d1988a374083b1f4b3eeaee7e28d829e6989c3987b4359387c7cf6df48ef0f8d4867a908ae2fa6c5777a2e78dc7c244ec00028970363f30685dc87d7bc1ed018d640f3b30e7eb9877501c138ec50c2a57f018554ea2515c42d2c96e47872457de180975aacb6cfd50f56b31960f7d7a677f84949299b43a70510e76b8327446d7c0c7daf39924b80a88ad8bacf94800d169e2db24756e578920d11", 0x3, 0x7ff, 0x1}, 0x958) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ecryptfs/version\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/150, 0x96) setresuid$auto(0x60, 0x1000, 0x8000) acct$auto(&(0x7f0000000000)='/proc/12/smp_ity_list\x00\x00\x00\x00\x00\x00') close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0101000000000000df2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r4, r4, 0x8) madvise$auto(0x0, 0x200007, 0x19) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x408, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x4000008000) r5 = socket(0x10, 0x2, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r6 = socket(0x8, 0x6, 0xfffffffa) setsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0x9, 0x2f, &(0x7f0000000040)='\x00', 0x800) add_key$auto(&(0x7f0000000000)='\x00', 0x0, &(0x7f0000000240), 0x2, 0x31f) madvise$auto(0x0, 0xffffffffffff0005, 0x17) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mmap$auto(0x200000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES16=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) 3m57.221449753s ago: executing program 5 (id=2675): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setrlimit$auto(0x1000000007, 0x0) (async) fanotify_init$auto(0x200, 0x2) (async) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x40000002c55, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) (async) r1 = socket(0xa, 0x3, 0x3c) bpf$auto(0x206, &(0x7f00000002c0)=@info={r1, 0xd, 0x5f}, 0x101) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x22, "0000002caff1cfcb2eaa7200"}, 0x55) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="22d8d2974223ffb4cf2c95591a1093f234940ad1beb8d12b0578e6c4e265eddff8bd49611242b3", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x480d0) write$auto(r1, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="19000003d30000", 0x7) socket(0x2, 0x1, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) 3m41.977334605s ago: executing program 34 (id=2675): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setrlimit$auto(0x1000000007, 0x0) (async) fanotify_init$auto(0x200, 0x2) (async) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x40000002c55, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) (async) r1 = socket(0xa, 0x3, 0x3c) bpf$auto(0x206, &(0x7f00000002c0)=@info={r1, 0xd, 0x5f}, 0x101) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x22, "0000002caff1cfcb2eaa7200"}, 0x55) (async) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="22d8d2974223ffb4cf2c95591a1093f234940ad1beb8d12b0578e6c4e265eddff8bd49611242b3", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x480d0) write$auto(r1, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="19000003d30000", 0x7) socket(0x2, 0x1, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) 18.7148284s ago: executing program 4 (id=3448): mmap$auto(0x0, 0x2020009, 0x2, 0x1d, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count\x00', 0x400, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = fcntl$auto(0xff80000000000000, 0x406, 0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) ppoll$auto(&(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xfffc}, 0x2, 0x0, 0x0, 0x8) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={r1, @new_prog_fd=0x4, 0x8, @old_prog_fd=r0}, 0xa3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) membarrier$auto(0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/queues/tx-6/traffic_class\x00', 0xe0a00, 0x0) 17.62469465s ago: executing program 4 (id=3451): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) sigaltstack$auto(&(0x7f0000000300)={&(0x7f0000000140)="d489e7c1222e4dc0699d119bee04117080da08b26d9428f53c390cde6ad54dd2af8cba8e266948aea9cc920286cfe50f820bcab7a346583ff7d97cd8", 0x6, 0x81}, &(0x7f0000000380)={&(0x7f0000000340)="81b6df5ff83495867e5993f9df88ba1a6537a1b1cab93e5690874808", 0x3, 0xf}) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f00000001c0)={0x2, 0xb6, 0x1, 0x4, 0x2, 0x0, 0x5, 0x1, 0x8, 0xd, 0x1, 0x8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x400000001d}, 0x3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x101242, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty49\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b49, 0x9) 17.271385574s ago: executing program 4 (id=3460): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) sigaltstack$auto(&(0x7f0000000300)={&(0x7f0000000140)="d489e7c1222e4dc0699d119bee04117080da08b26d9428f53c390cde6ad54dd2af8cba8e266948aea9cc920286cfe50f820bcab7a346583ff7d97cd8", 0x6, 0x81}, &(0x7f0000000380)={&(0x7f0000000340)="81b6df5ff83495867e5993f9df88ba1a6537a1b1cab93e5690874808", 0x3, 0xf}) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f00000001c0)={0x2, 0xb6, 0x1, 0x4, 0x2, 0x0, 0x5, 0x1, 0x8, 0xd, 0x1, 0x8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x400000001d}, 0x3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty49\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b49, 0x9) 17.05034477s ago: executing program 4 (id=3455): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x6) getpid() unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2515000000080027000c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 16.034443384s ago: executing program 4 (id=3461): unshare$auto(0x40000080) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r0, 0x4004743b, 0x0) 14.912517519s ago: executing program 4 (id=3463): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) seccomp$auto(0x1, 0x3, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x100000, 0x0) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x8000001c, 0xfffffffffffffff7, 0x2}, 0x0, 0x4ded, 0x0) ioctl$auto(0x3, 0x402c542c, 0x38) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) select$auto(0xfffffffb, 0x0, &(0x7f0000000500)={[0x1, 0x101, 0x9, 0x4a, 0x0, 0x7, 0x0, 0x3, 0x3, 0xf, 0x51c7, 0x7, 0x8, 0x9, 0x1, 0x8000000000000001]}, &(0x7f0000000580)={[0x9, 0x8, 0xfffffffffffffc01, 0x4, 0xfffd, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x69, 0x1, 0x5, 0x2, 0x5]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x105d21de}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0xc044) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0x9, 0x37, 0x948a, 0x101, 0x15f4da0b, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x8, 0x9, 0xfffffffffffffffc]}, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=&(0x7f0000000040)="c9d5270514bd6f5b4586b826fa503be0c5e466aed46f29d0ac22764dab87d9acafee5f236ba23633aafd", &(0x7f0000000280)=0xec, &(0x7f00000002c0), 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 5.201137953s ago: executing program 3 (id=3502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x3c, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) 4.966211943s ago: executing program 3 (id=3503): mmap$auto(0x0, 0x2020009, 0x2, 0x1d, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count\x00', 0x400, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0xff80000000000000, 0x406, 0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) ppoll$auto(&(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xfffc}, 0x2, 0x0, 0x0, 0x8) socket(0xa, 0x2, 0x88) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) membarrier$auto(0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/queues/tx-6/traffic_class\x00', 0xe0a00, 0x0) 4.770089768s ago: executing program 1 (id=3506): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f00000000c0), 0x82201, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) semctl$auto_IPC_INFO(0x0, 0xffff, 0x3, 0x9) r1 = fcntl$auto_F_GETPIPE_SZ(0xffffffffffffffff, 0x408, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(&(0x7f0000000080)={0x5, 0x0}, &(0x7f00000000c0)={0x4, 0x3, 0x7}) r4 = socketcall$auto_SYS_RECVMMSG(0x13, &(0x7f0000000100)=0x8000080000000000) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8030000f3d1aba910269cceeac8f67a85ee9e2343cc467fae416a8f4704a41044d42d66894e8c4c0a649978d8540a6a38576e0a15a9771afaf4ee70286d12672a2568", @ANYRES16=r2, @ANYBLOB="00032cbd7000fbdbdf250b0000008a02078008007d00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c0033000800000000000000084196ab693d3cd670fce0b82fcc43f1875c20c402182d383a3f81a3439bd13f1df9e80aed2786310ed26a22ccac3b57068fe63786c88f594a0c6307f41f46047cb0982eb59c6fec4e0c2e3a031e9ad884dbda81ee2e2a200ca717f9a5a05c2b6eef33b3c0b90853cbde84a536030f0f7effb267ddf9f3b5092a578da39bbdb60e877613c544b24eba055a039bdf7a85d34dd70641a41537e1b77c9d00ebc0c49341b22aa848b1d9ceaf8c58e81f44749cb9056bd2289ef162dfbc5fd4d567f3a8ad4cffeff677a7c636d4eeacb85ba119aaed620a3fb0430ddd61c28a19aa162d72588f5f814c4dea9df39e41ca6bf91206cd030a0c15901aacf97278a48c9d7823f56706c61418148a04003b80000008009c0005000000000089000980f6a7d845f0321b00dbdeb20bc9a02b5366d4f26e18fdcb074d4d9f5e5493f50bfe3cb7af3349c94e3a4da73e9c2913a9011e8ee8e99c238fcefcfd44e0969abf6ca181ed3d7a6ff6cb7946dd725ca82b4c10da6903d41ade80a9d7400798e900810ffd92a7071a7e2b312a850a677d67698401dbf910c7af75fd58e461d0f17eef8007bd43000000ac00098022c7e9a1885870224d412f1c825556128a7a02ef7a87c75db6b7808e7d343e9e5fe0c0223717d6dc1a24767a49907ceb75203cdcbfa82b2d91e3e4e0ce9f3be2b3eb2b593e094512d51112da97b32633da215f72f85127ac7a17fcf9e93765945a62ccfc8d68d5059ab39d8a623ebe11ac68571503fd8f3cb37b9af6eab9839d45419e2c6c0f4e51a933b9053193ab6bb82dbdb609314733045f345ce0cbe69ec69c36a2a9a5f5ec"], 0x3d8}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000005c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) r5 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r5, 0x0, 0x2, 0x100) 4.329580174s ago: executing program 1 (id=3508): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000500)=@bpf_attr_3={0x3, 0x4, 0x7, 0x63, 0x400, 0x0, 0x1, 0x80f0c8, 0x1, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) r2 = socket(0xa, 0x2, 0x0) recvfrom$auto(r2, &(0x7f0000000500)="a42a8add554fce416626ff2d8e94394c4688c24a7763ec6e05746d6106a8932143889841", 0x7fffffffffffffff, 0xfffffffb, &(0x7f0000000540)=@sco={0x1f, @none}, &(0x7f0000000580)=0x805) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) munmap$auto(0x0, 0xffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0xa, 0x801, 0x84) pipe2$auto(0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) 4.060406508s ago: executing program 6 (id=3509): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40046201, 0x38) 3.984975599s ago: executing program 3 (id=3510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x3c, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) 3.800306327s ago: executing program 6 (id=3511): r0 = prctl$auto_PR_SET_ENDIAN(0x14, 0x5, 0x0, 0x400, 0x0) mmap$auto(0x31, 0x400008, 0xdf, 0x9b72, r0, 0x820008000) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0xa, 0x2, 0x88) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xfffffffe, r2, @relative_id, 0xe600}, 0xf) open(0x0, 0x261c2, 0x84) r5 = socket(0xa, 0x2, 0x3a) r6 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r5) (async) r7 = socket(0xa, 0x2, 0x3a) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r7) sendmsg$auto_NFC_CMD_DISABLE_SE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0x8, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000429bd7000fedbdf251200000005000a0001000000080014002d7d5d5c"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040800) (async) sendmsg$auto_NFC_CMD_DISABLE_SE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '-}]\\'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040801) (async, rerun: 32) sendmsg$auto_NFC_CMD_GET_DEVICE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB='X%\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf250100000039251380ae12258015022e80e3004d80040007800800a400400000000fa55eb2a51d05c4fa4c2eb7ad97aebf1e1e08a46364faacf88947b8e12759380ea87bdf3b54708860cc758c08cb8d3229e7f10e5d3ac4a454aee3e57b0f69198d1da8ec426f7a2f0402591dd2dba1abe7f751b10ba0853eb2581b7fbab95b200d6fa375b45c99bf2dfd4e79dc1707c6dbf7d4c9894eeba044469a390ae22539c59e6a0f6439a098adfcbdef4bb434879337a356e642e70d73261d7698b72bca35c816e8b25ff2fdd7e0ceb1060583fe6e6a874ee04dac03aa4c4a0f9eb94136c35e73632bf8038b984c4a08009800", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000009b4e2addd8b4ad1a3c61ea606e50b0cafe0085fd076043c74d1eecafea0fb3916591e6a903bfaeda7ab21577ba801770edd97841f6c51026aaf8634d53217ee0b7acb87db242225223ac90ed9831518f6b726c81054466787823f9a7860bce30c65cefd32756b6dddb095d6eda19b3f3d31e768fbf0833cbde4e3fe9a300b68e04e7039ea15b1d89f826cdb65e7f5d383b059706e435de0fa2228078df193f6dc9509d5be30c5c69f578dbdc681c1b38a039f22337925c8f7473054435fb8df036ecd6f8c5ef7c44890cdb956143e3b0e23154efa6081948e249cef0a17e492c6945e342adcd17cae76ee0599fb839ac5a9aa56c91bdad307a34cc8cc18fa9461b649930c8ba1ad5c306c339998688e09990c7568b87233adf7fa208ae466f17927fd9f6008ca3a58afd3cccfd60d2cc8462a347f5f4273aefdd448c3fb599c8e652d604524284704f896b5dc1e23da94eb5aa75f46f2ca946f1f882b8a59dc4df24d78554d2341258cc9e68c346ff47b9afabcb7999f98af5d2117883be4c6c24055b993e571f07c3e3b5e15d2974d66bb91256667e4e3df5162fe50b2e77efa228b121c3562224b02d89f7ec84ede98bb610222e41de68507c6304ab2403f7426c72e223f612979b223b4410247e0aca81513dae61681208b447fdb730abc3d44ad336350f5ca95cb63506ef6211e07ac777c1ad1b0ef7898930ee057833cf7be6803c5be87f17009ddaaecf15e96434e31302736d4302075155b5c8f6ec8ee000d770008f91e7040591de2274b6e921188f38a9c1359e0637a17f4d4b66b47a3fc4239c0d8bdaf0da2f6fe83af99613313800b012edab9f432ba5c82439d9f87893822aa18a680a305167d269709bc46422dee597998230447c897876d765d89f59ae8a2873743d0b4acbf99a2f39469d47525f4f7dcaff27300803dc092b832337c59889d172ea8504c8165cbde2620fa9b66629ce9b47a9d41003bbb5b4457a8a3778e41fba71adea3e1d5e17d616b8fb31eb56c2f1e5da0bdf45c6b383f2ce20f299ccea6039d66aa67c1569e7c86b50b86c141fffcbdd2f151f2ed0db3018235acd0a85046f6465990b21b1d4096e09b7cfb777f48b06e110a95c0520500bdcd8f2efb2cc0ee3e7b7f8aba6cfbf35f07e781ad87330d2f6325d6ba11f2f055a3c06c08b1c0ce691413787f7c04f20ab56e1493e050fbd66f1fe928014faad6101bbcbe8b0b2637dc42b5004d369c0cf1e0a4ddb69e7ad39ffad4180021a9e5a226b893d237f6c107ae94a435cc87ce64ea3b1626352819789819263158b1ca19a94e3bfcc546a85f2eb418657e12d992b35c5321763e207bc6db3209c063995fe889b3b2768e612975603026e63f14503d0726f148c82266dfc6acb3cdc71523a880a5d85d49bbc6908b99c1e3c04248771e80adf7769bb76d4f4040c0f798d140e8f38cf2d55d41c990d185b92403a529cab72d580d26810bd0e19f3407b502caee14e1317c74af1352866d0a1a2488b395b02ba8056e09ee8a36f7b1a926b268ed4c3342a65d9e5956e4b1be7a6c6085815b714a53dd596ba6b5773a7cf5c063e61613fa2ea6c3607e8f6b5f80db0d46efecdef02081945ba18dee5d34130d0ad9c34e06f788c5b74642ba21baad603e3a027435a21ec5ec550ffbd9b8ca0835b2e8c533e81f080c37a297746c41d52ad828f5f0f7f0f4d16251a7fd074b0c3ccc02d3d48b44ad925dd4fe50129187b96211d6c6ce46f8a0e2e68db0ebca0d02b43e6ac20d64e1f082ba311da24c3b18905d45cad05a4c04512e4204273c9bd10435af4657b31d2d292d6671cb92ff43ddd2b80790265d8d74fc15ed51c77b336bc65e4836b11866fd5e52fac3cad3c8370d334ee22a690b8e8ab599ec194e25824bc3c90ebfd5db3518a37e76b4bd83aadd48f12597af914654a7b340b019313de1927780bd7e0b86b4060e1b0872cbdb655ed4584fa16920d0846c0d4e6a3c421cadcd3e9bf11f161e79e1ac3c0a8ea851065b365abe9c615845ba775e6dcc46fbc342aec6224e6bd114edd47e281cc9a349c10a573ef12448e2425a8c6d81d953241c28d443b9e1bf8843fa092bb11a82914eb81b4f81ba6e06a835b4b8304d3449cd87c5f59d5518a3057f40a43828ea7382eb760cfb26c412f2e7bbe589549d228c732f79001cc6ac64ddb9ffe82425abed76c389f86f32edda0b1b8b890780493668c9abbdbd9bd244f1b204726a6d0f267aad80df03a12c2a1fe763646e0f6a7d0ab8cae495507e85dc34805ca620434a54c61d251b85e9ab0757f5967737d01e4e77514072cc0dcbc6e5d9e3f86b49af9e11b95efd15e81dc32dd350e0cc96cb48f762f3ef9dda9e8086020fec6db4b33b488a7b560dc013186ea4e7daeba3aca8c4b405812316c026d7e3ff27b846171ff821c8f3e30b81e3a4d21e32ed9d6867cdb7ad708f98632d57c35d6eb85354adbd3fe547d01ccc5707040574588998d77dd295c4748fb145a5f2f232b179fbec5db24a9d50f26bdf77766710fe1e5ba1f372449dce387f34bce6cdb25a8e2a8d7800eb51b4b3b3afd9f6bbeaf80a37321465d7dd5d82f06b92c4ed9ade57077d617a8e944b4cbe1efec4c8b0c52f0c9b5cae139944bece665b0003c1b3da3ad746bd1c02e754a5c27805949255669afd61e3464281f7a54e069bc3693f3f70349bf4c64c88b96f93322945aa46b37050a678b6bd5010bbd8a6e60a6e140b78f5a202e18ea527c6b7debb844ba026b3630113cf94098c46c7c5e24fb523dcd9445865fa6a28e65780300921d0ba2fd6c48e03b87cf9f1268a5660bd7381b1e5b80936e88e04fb95b18784156a1c8581e09edc4603b1b1b9086195bc667ab3cff3860a43ee1a2ef71fb37249fe05f418b20e9c2e1bb23ed6da0794401a5abf18b2e0e4968d800082fb924eb010d666b6fec121f2aae9f8adbcdb8b014e8c46b25271962035d3f5c8b523d30221e4abdedd62fecfa74750cc0eb326eda334581a829857c4d7ac37968a5be46490e4404d6a5056c9d2bf4c226fb26039ba3e32dd5e875a4289205c02b0c98f9353a265a839d059a2621eddab21a7b483a2b97d2e2dd1858c57d97a30a34c0b5419c8911621b09698320d2b040b483b51a48eea8b7980363f557db4839ecd5c697795321b4095a8d8b667f4ad4d5a24019d1a59cde88ded00de6507b4545db7418a1a5cfaed1b0d167668a38c2bb38770831ecfb0ca7b0a3253c3d4da27ad4970981a175c84a79b8b6704ea45df03a299f2342d1410e3d780012734228bbc15c72da7c316e66a9e652625f32deaceefbd78742b14742eb669c2b7a65fb4c0d10f69c8251e2025076a94c5954b6eb82615c39bd0882c9fbd9c10a9a32033852a47dbc1900a0e04dcf583102b7c43611996bf2f0ecdc56b4bb88e9662fc0c567e5b21c47574f1c45f37a01c20c7a585b72a71aab9e309b46efdfdaedceca9e6607548d1c6088acbf52ec10697d08ba34fcd07e403685ceedca98f86a2fd8c00dccdb71b29e7fd6cc678c14d22f29a2a80c598b70576a7356be5617fd797df66afde48409aaa7461349a50ef10e06b4a681555959352aceffc8bcbae2f5b6ae737d320b9d232c1ee3a9e4bd01aac9009ed0e9464e36bb4fa91f5b45d5c6a85e8258344220af1a2149c4489f24dbe78ec799958ef9d8b201d531c6a21cbb4b57ee449c9fe061ba35074ba2b8470beb14a7d377a1d8818a43a68f574c3cca4fed0f2241bb7b49286c8cdd94e5f807d27d7c534a28ada42eae2ab6a859393271e82113a7d25d60d8ee75de69277342fc79767bce77876c7f687e4950b95d4d5fb7887e90f1d898756087416354e6adbafd0d413a9a0ec5890e290ccdaf89d222c6017e0b148317db8b3a8bf58cbb902afec4a970be9e8887f47af4fa92d5fe3bc29cde4780e5f4f46f0e7ddf44f1af93f93ea5297c57eb88c09ed9c63cb1fc43c769e71ede6abc50333883e88f6b22aa39638ec621b355bb2f82d801bf063a969fc736493c67024015dd3586db8fa99c4b9e9b29dadfff38f8f257ab991b6a21c203df3b3a5da8a963d33d9750dadf7683cef676899bed086bd82d88e005e985c0abb0541917a1cc03fb5dffa6f199ba8916af45838cbc5766e58cef082720c394d9ef2ec65a1c0bd8957c18078b18df5fe3f99be983a4a3c355120ae48d6e8e09896c1850c9696fd0de2896a90d1338e218e4b74efa5b61703a494cfe86eae50ca18bfd539bafa5d7dd813dd0664e08345f6c70fc015f6d9046c2745cbc7b5591e477c5b716eda4cde8f4f5bc9e4f56973443f9f21e168f3b5fed58cd12bc4efa00933246dcdf9848128be930babab777c43a665f15ef8a3efdd07b53be43e3b7053eff78c0322b87970eedd3ef30dd3fab21c2b993d27697d3334c83540d9f06498320338587454c4197669da8221ec744593894708777a92b8ff77a46908dea01000113acc80beb14bdeb898acfea249094f7a34fd2f1752357a2d56c99f73de14bf26633a6dea12a2d2c14e40faf8a2e6f7d289e0d1ee00a5b1e34c2d66fcda480987b4b3dd9aa0ff8cb51ef798336dd010ef1d253ac155f3674d2745d01480459a0339723c7ee4ecf2f44055967625febb3abf7c95ecf8d85db7702d7372a47063ecd5cd94ee36eafeae89eb8f4cb0cb2ee4c249556231638ae530afe06df15c435d18b9377177dc2413e7acdb95c3b3a2e410b66edc154e03a7302dc80b8f6cf4fea76f17ac5caf25d36e3e842a76176fd9d004727a57c91a0c2d22bf2791ef2a1a8ae88428414b3773e33e706deab72ff771e0e47e42508d41799ebe988af6238a251c1bbb02c141e639df1caf078c721b56867f88dc4167df1c3216eb25bd9d15ea68fe8ceaba932317e09e595d90b25d1666b9fd0f8d6c7487f05d1b26969aadbd04870f11da1acf913395a3dc41b09336853a8b2d797d8d03b74392ee6321b25929e57a8725fdc656b2fe617f74add2defef89ac7b3ed75764c9ee41528db20ec702a2f34ba58d678fe2371b23e3f0c172009da4f5789478572dc17e382403b7b69365344bade2bc6642e01fc4cd12302ded04b260c9c0c82960d95be7398dc9f0b03dcb4392b0a1c20b11e02566cb5049e381c1883e4e19b1397a271e262d138ba5140f9a714d3f1228c226bd17e4bfbe3dc4a1726c818afa82e10671deb9db56b7565a6f0f388ed25063adc315c14d92dbffb881a867dda780a8cf2f7740e2e793ef8f9cb1ea6c22a06119d31d9365311c27bc02f72c863e1e102e19f93eaa59acb7e0675e73706a9dcd150ca1fe1a6348f19c81151cf289a1235b3ec62eb6fc743fbd70c220639f2599c9c2ddd56af884147a00153449ff636cc862e9b011d4cd90b4daa752bb6613531cb0cfb5511ce6e3ac4e6ada503dfeb0dc9cbb5e3cff4caaac9cc0ca83f2da639f7f4715d60b63a9c46bbf7f5719678be4796400aa53f4db5281900dc62191c338469be485934e80ca511e0ab379fa3559e76334282a98c7f0707227edd2a60586da0d7352a8e1c82b4848c4573d1907d8ebf3e9705236544164b4abfc58b4de1d419f20c5414478ab3aaa833b6b5309597c12ff373f0da1c9aadfde4bc5ea280a462d1541290f396b203c74bc97141a7f0c75c541ee74a13b707a36606e45fcbca118705db8a090dce83b760d5b54267c7844434fdb1ef81eb0a078b9e453929c23607b971df40104d4edb4e4850ed8f4a2933c7bfae052c0233246b352e4f945d488bb167c739d898aa2f0d2c13804009680983c74f7a5efc690a8ff8244749105f82b0849d19a6ca875620c1c244825eb86007f822e5691ef99dca1569058e7718f0fd215c6f8a9ac883542cc70de859a95b115583cd825a628c83cbd6805eb7e1a93253eabdec42ae60e1613d82b052b9a1d38cca5fe23165d57e9b50a257cd45d310fc557cf6811767e0fbb3deb4c45467c332ebf4862491bc0ce0400088000006e7b87e55a3bd797f135847fb21613a7f10531e2504c6e9a5af3c7140ffb00eb21ca495dbf01e9923992d62bdbd679c6187d203a8c23c1136342632a0c839eb6be59d685e627ab1136f86e98219c54b750b985d26313123e123214c3335304e8fd125b708e4ed25e84750ece8b2859156aeded8fadf47b3b265ceb3acf656f4565d8312b92f5cb27a705642c8adc0c315891254ef3c9e16cdf6765bd2a907cfee3144e85e22c83e57c4ac5926be190364b2fc399468eb1149a1425f2d375d97d3389dd587d33a585c1b4cf8d8fd382d357831e932602b130a5a8770b38e1105380ff382667c062d0b6a0b6394d485b15b2f17af33cfa0f5ee03e3314110988fc8ae94a20ef35c2c26070a401eaf06c34185e7a77e9eb9976ebb31ba51d58977fe371eb8ccd97bc9061978ddf38fefad817e26d2d61be68544a5fc940071782974d9e897a9e41c1cd5dc0185c860dae9a4b4a09269ddba513f3fed775d18593a1904a00e7460e9e6bce72c63bbdc74bc71e6ff91dc8e8298691cc6f1321a06a3c4d611d4cea7f4317cacc9b2d073ec536d8bfb94d0edbafea96832454335be3cefab954a30bdd99df0ed092290309ad1a8baaf755d674e5981389562dfa6d88aac0104f96396fe545bf6481b4144a7370b809d29261713c5c539b60d99fde592e82a218c047746c5e87974ac5c0a3ea6cbaec7d76e25ed20bdd8ffe85f5cea30fa86fc71640177ed7a7d60eb0fd52fb633e314cdeee32d48cd0bf20581b91c2eae45f77debea167257e680896bf16088ee81c75f5137ac32345c003b4c8ba94e39cab9963279d6ffea51468f453964350a0a5b44bbbc5e44bd006c5fb418f62decb593ecc95fffe2fe99bc65d9b9882ee149e417192d9fa0c47d0719afe0cd45b687c89e18a4df2102b2a1c8cc39ce8f93669dd10345245bcac8431e6f3c5199a5f18bac39a812bfca7c486a003e243131c18f253dcd2d76edd562b19fc0186ebed45e34e26cd487af702be916dd3a22edc8dbc6e5e6a619ae5baea6c48f8b68139d166a7d794184fd6e1b17a8006c92d4510ba9d78cb78dd2cc67f4741f0790dfc20a925e5a2561a93d4cdfa6a88c69b8862a49a1707d0efb2bbd9577ec4a7000dc9b8b2d6b2043f7e5ca595b3461d720be3c1c9c699b7b2f8fc722b80248e948e2043ddb6754a79c3fbfa51fc23cf47d4179ed65e36fc503dd9287afedb93ce3aebc5a4807e8844bc7408afebaec47a3c46d128b82e75e9e20541e3b53317655f002b0e084f695ca4d5b0a998f9e5eb3dd5aaeba0f3a23c70f56a24a446343598c0e47c52f51fa27cc4e0b8f3a15f65e5683e589f3f951ffb7e3a58259784d45d1c0038627b3ea6e0a492e8e047c8a55ae762ab364f53da476715df31d710ef90f9d9a6eea1822b6681e7f2aa0e2f8f40f21f7483877faed2fa35e4d564d5c3e799b3c67a12aa87adbef08250ef0a05b8f4757f9aca3a69a3ea01c768f33387abd7f8dd0afd4d90533370eda1f1355f09df5c1924120f58dbde3645740c75a01524a3083d33f83f4943c233cf6b9049810b97263c89802809c181ef1fa03378b69c2ddeeddd0da3264b8926ccfa3ed1ff86cab4d6540a5904ddcc2440ae98a8dab4248fca2054f452eb9b00fabec2ff82d5f63e89cc72af1ca78a78642ddc8196d739d18810f24750d9e9bdbae797d5db4d0ba0413641f0a841bf2248567f2bbe2435d3579d6e7fbbc1dbd6f0a88598739f8e92115c878677523e90f4b5a23121e4c9edf928607f0463f4d97c19d147596d0a0ef8335d2eaf9767dab7c4a88ea8fbb6baf6af832673599a39c71978f1dbd9ed8f98528088ded9d8ec83d7daf84a9b429b4ce245326c627b6f9a0a210f14674656486b97324a3e9fb8e658736e31708733ae3d62e5398c59b64b3d3abab0cfc11cd4b6102405c88a042348798c692a307cc892a413fcd6bcec78e53bbbda5a3644e6beccc05effa207eb73fb4b9bb839a067da9489b5a973806a5e20a48c9b7deb2881d24cf1c4171c2489535020c6b3acb3d44635ab16f8869c3474b19935ad970884602f217953e8994db6d1c1a1f18c1ec97bfd64b1f1abd00cd0bc71904cee02cd865184fda59109070de4989ead97e17bb82b5c27fcd78ad9a0df06cbcf6ae19b65d0746f87981fb14f6a073ee95c0418d6d9f390505b7c17298ef7e65355fa8bcf7fa4adb1c0d04bedd60ddc124f0ad7f8612c70c1b9344c7c35dfad4779eba0bc8c998241ac47aafab209ed0e34f8ca97feb331304ac615e8b36051e40aba2deb35df6f712e1b2000215464953c2e7e3dbee3f64bdbf32e4e3181dfaaca4703fc47fdfe9e24dfab6ce792d2384041334e20f3ceed44f920d3052bf7d25db276326f67ebeee78ce0fe36c82fa4ba1e21c11c8fb3f7e687b4d3d45cb7ecef3534fc50f72d061826cfac2b4dc6139b741628877aaa9f20e2d71fb6578b56c8e029227fda31d5315968b5ab70961f160e56c2d93d20fea050cc0790ba8fdc3664542bd5d3e6a06005665b37b6409c587ad3e3b6aa5e2d4280b7862bb712de2b9245087f1bb3b298b1fc42e8b22cbaaaf2680a8a408083a16855e461759c6e24ac925d70b36b01b66ed77d9e19a89a40a24b1fc1f08e5bbec619f1542013fb076856f846961b0ce80e6fa390ae170bdaba3e535f8e7aa838489312dcfb41f42e8eaf071b98bbe3cfb2ce2699cdc37bf7ad8c3568aa786e382f01ba814fd92980acd966985e9387d39d6c8e0475b22b819a155b6cfcc1a23a24c69aaf06894c78702f45c7e519b71a2f00413cff8c34b582d947f927b31a7efd628a8686840bfa5940d687861db28b94dd23ba6f902cbda274b2d8294db140907a0c4147ee814898e1a3b39d553c222aa31d27566d3b900baa8ad6eccb6c3c957a18f46c64d7a4dcdb02042ffd46c690378848cca89efcf40d426d300c5e82a582b9b478ff1bbc7879ba8f88e6118da9763a7dff2233509f65bdb997b0438b900fb68469e9127bdc071c933078267b6f1683f9920a6f00203e30ebd7e67689ff37fd9b77026c056689bdf80c3f3b7983356920b80e91ff068710348b5974171b2f030646143d66976919cfeaec25b5e329b4c36e5d0d224a43d71aca8edd4de88520ef555abde5ae864a3bdb6df0bd5b25e8ef139bc67af7aeee29bd30f5ab497e32c31ca9577cb87f2145f8c5d8f9296a491d59bec54d2ea760c9567462abab67e24fb242eedf34d5e41ac317343d208eb0d571eba8a06959fe3267943cc4d7fd7879df435d71c407fb8103f2e3930c41a666bb80ff4bbb05627dafcf1e289eafeee0d322707f25178d1d9e053eb8eb5a2e294a97152a133a53f8b086876259b006f40cdc5997a4ca3a909f381149f2eb466dc406418d4ebfbdc6f15ebaa732f6413a0b7035014528be4b9e897e28854120b0c831ac5f6e7114fe7890e1a3cf6897dfbc27323e9163f7c49f8d10e2ee99cd1dafe055dfb2b62b095d46aaebced57dd4d66a647678438a6d35d776ecbc8c16cf066134782302e5d8b683a538516d02e43107ca5429fec986e5a0ffa7796f17ff8797a00408eee8ccbe66fe07fbe4eb98f6823f72269540bf5ddd4700183a6b5802ddc389f49041e0db66525904bb3db75fbe6319d0af20e34c1faf6bc4193a770513f8e04b0c0022351d71e1f697c82cebc67b588c918ce99a615ab206c16a5d7100e013f4d8efb66b4f46ce33f89c7517ccdfae0bb6eef04deca9b10576d85d62476c64422fa1275c0c75a6c30ae0b3d19cab1e6951c4edc437244adebb3e0de3aa6d2a0f8896ee58fd0b23ab3ff698afe3ee24d929009ce48a1d8a1a0ae59601ef78d1a34e1d8f74e318a0f1a51e3607c15c31e7ce4a5b8184c11a0151ce10de466b84b5a82f6153ac607624ba288dd173669b01e1faf218f1fd296ebb8dbaf2c306d0dc3a3255df59b81bd77d765d14c4fe386e21bdd2b8e41be131b0a85af604a489b5fdaf0a4e3b2a3086382ac1b2bfc371103ecb1d4dcb24ad7eedab515325385ac8bed8de1441caf9eaf7dc56215d8fb05f6c51f9e70d179b4c3fb421eab113aa00ed5be25efd0d061ae9101c9f5fdf14e9d8f3b3ce9f8d665de4cd0e60c06d49080ae9558589b181ae7ef0b7a0bfb9306c3db0a51a40a082e869719c34d0e86623ccce73bde260c2facc9b122f542a93419da534f497b6f67ed968402fc50d015f2c21b0236bec773a21fef1735b861c9cdedfbdc8862c0a8c3812e33c484fabf1a4943bba3b2bf310428cda801448b0ad73f3ceead1d5e6b8446af0bf7ed2d50c16df7282f995cc91059a4ae224019834d3fed2e2f03ca7b5a49a253e6aa3b0ef992b1b1963cfeab7af847fc55b7a1dcd3f6be5e1c527e7bd9c083122e738e673f61781a0f303751b80d1dc591d7962599144bd7f14e9446801f663eec162989f4738105fe615138037d8aba42a233a3f40acb8c0a5fd2541854112fa63e9d4a42bb9ce1920f991219b9b2cccc4da3df828ed357535f5769ae8f5f6cb999f043c6d5fe5c38b219619b0965c62b02974f7b0b569d418956684642a0c1210681e6b315310843a65e9ef1b4e800d0f7319b74d1d6f9dcc1cf2ee137f6039dfc0c84c3e053bc93d2df0156cece47fe867b8fcb5925973de8609ae4f507085ee3e573944624ccbf6f48025aedc19d3ada2acfe0cb2c3fca083afd6779c9c395af6a4e7526373b5fa902e4dd3dba2e79b9c8a7e39f5ac9fda7dd13b86bf63c530e030c5fca0be91423b4ba1e52ad9a489823ac76ee82f739e1d7230a93bc49f60ee559c8be72417372fc0c1de5e0b28ecfad0ba5c1af1f47bc746c32892cfb049b3d838ee4afbf3ead6835e6c47f3d2bdd5f9137048079a3ece777eccecee51051fa2fbd10601773f2edf6d773f16535b4afe708e6647f3db276ed6ced1810e765a296252921367e21faf4f9581ca6cf22452f75ee521b012a1c3cdbc2aaf417b597b23a0a2a2f84e4dcb70deca1f20f2102c05fce3207c6abf155a860921b5674e8a84cb284f3cd4a180d64a6180c4af8180f4de7957e382ed735a8eef0cdee1af01d81fbdd62fe817bed1d5680ff7c0779383c60f2bf9e2051d675fb618ea36468d2f1375afe8cbce8d14c8613f770de18da4b9cb8b906728f3900cd5e957775e8e50a7e06b28086bae77cbf31ee9a1f823299b5dca1454dfe4655c049d75cc9ce96ae5773354c4657ff548a7582a2a668118a3d32cc01ad29420669d6ada0ba449f02af2e9fa9eb3eaf850a9450ccb687834408f8515618497e163db2ed8b5f4e946a99fc62d08eea7a6af7976ab31b199690f0a52b96408603591a77b2d56c6c97eb02dfe42aaa3c25e69e9f6731bb851a411d618d8eec4e8b465d496b8c0f64d9965e2a6ab9e01d9c5f0e36bd1dfdc453b3a35fd68d13b25e5005774902dcdedb148effd91496bdc8ea80efc1c52fa674ff58e5ba24bda06d15036a2efb888c3d18902d96927d21a8a5344360052ef4343c26ce88e6ed47ddd6438e62eb6651ad10605978185e74ea16d26a997fa235c9b036adc0cacb8412513672d78df46df758c0e13c5a5822cb841feeb3812571b225f91170dd195a105b4ab6d880a5b2b7eb862656efb6674794a4041f35c456cb7d95965881710e494341449a5fb2105031b64a7bd452245763f6f031ad286ae45609a9342f54eb2cf387e2abf5e0ae987b40afe3d90e866cc7c847a38024fd93ac7b7c73d1121228f4b573afc92bdb423ab124e5706ce325ff37c27f202be67dc00add681d30cd7a79771f1e22b083f98cd4e9ce087808aba66cac467b47fc54c966aa00f330c3998b8584f7775ce1e07f19887aaef174be49c70569500e48ec0b5a97e44283c2ca19375f99d4fdd740e6b11a8bd2fefabc73ee4fd95af365af94b5de8196ef841dc907a048a46fcfc7c58d999c5246a89178e235fedf073c9a685b808f5cac2e98c6e5ae9217e9f872e970f7ae2db5fa96a67f4237b6a98ffe44943f3cc97eef7804f3498b952eb95139744826ef3c688af8752fdea9e1f4aa061e679fb9d2a88a27adde5d0b7bbf093bd93ee57a87544fa7790a85525e0228d5be1ca19102409cd69e75f85042cb1b265f0fb1a7339916406650bf2f5b23128afdc9eaf963b2154dde6ec05117bc6dade707ab287210d1c2393c5724ea3200801e8e7b61c62e2f81a2e7efead4ab3f66aa281afcb6b30c7722fde0a71766fd7cbb0b83328178b4d7ef4a35b551d4502021d84fe46d97a9418ae4469797af855d4ab1eb3752a639ce8a2e848ef32854b86eaeb8d965785ad4bf20bb47be5a02a3cd94d31131776b34552a95f212fc7e54c3dd0a45b3b11c2e2499b809de8b7583c0ea24d22d9e0846a06eae0c578b4e69064a6f9cc92dcaf86997d74512e2635ec08001400", @ANYRES32=r3, @ANYBLOB="0000009ec6407cd61b92f3718de2e2b03f9b30e6cb378ac6eb54a4c6e982ae69671ca2c6b8a0ed3226cb816188bbd3f37ac752ed5de5c06d8d0eba1f350b8dba36ab6f5c359c67187efc92440034803e00cb8040d934a631ccab1fc830f2b4a0fa85ea93e36c0ec8195dd54433a613798d151aa767ead4178d1785b7830470cd3fe7fc7c2fd6229065bca86ebf00002c00c88014008000000000000000000000000000000000000c00cd00030000000000000008008d00776730000c007700000000000100000000000008000d0007000000"], 0x2558}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) (async, rerun: 32) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x5894, 0x100000000000001, 0xeb1, 0xffffffffffffffff, 0x8) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1c5d80, 0x0) (async) socket(0x28, 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/protocols\x00', 0x400, 0x0) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 3.795768472s ago: executing program 3 (id=3512): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40046201, 0x38) (fail_nth: 2) 3.255992852s ago: executing program 3 (id=3513): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x6) getpid() unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2515000000080027000c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.255745492s ago: executing program 6 (id=3514): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x6) getpid() unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2515000000080027000c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.255389971s ago: executing program 1 (id=3515): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x6, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0001", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd7"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r1, 0xab03, 0xffffffffffffffff) r2 = getsockopt$auto(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) unshare$auto(0x40000080) socket(0x11, 0x80003, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NODE_GET(r2, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f00000005c0)={0x474, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2a, 0x1, 0x0, 0x1, [@generic="5f9b0fda3bfd1c5a51f4375d3035ab1ac39b6135d420f82451d87380773de893178fe3377e3e"]}, @TIPC_NLA_MON={0x1e5, 0x9, 0x0, 0x1, [@typed={0x4, 0x97}, @typed={0x8, 0x137, 0x0, 0x0, @fd=r2}, @generic="87c745612a203295bf2cde257b867e675a817c027e2e447c2861662aaf9f28ea446a9da5b960bca0f72bbcecee8a1eead4ccf9c37909641606c4d59ee913c15315d372591d976a76c6ed44cd33", @nested={0x188, 0x8b, 0x0, 0x1, [@generic="a83c3788348efbafa6b04eb4eb94ee4810a9f92aa0ab443e5b50a70b77106162e3e1cebd43b7cabe0cbc921d3115291924b19aa41789263c3adc7d67c4c7c3e8e31f2f0281e4e8f766fbec943526abe7bd627295b2fd723b1bd3207694f12146da7d6c98c5b24bfec6387fbb79a25dfb20674445899d01a467c09e223ccfff8f2b652caa855d5ba04c2503bf529186015de8e56f19d470d4fb7936178bcaaf", @typed={0x88, 0x89, 0x0, 0x0, @binary="309e538702e1375cfcdc0199e75d88f3d7f16e65498a4dc7352deeaaad0cf6765ea5568b580da7d0979fbd6739277ba3427e91bd2c244664d0663ac1e52b11ab61bc3246729dae893e53042dc26ea37e23fb113500ca3800c1ec3b22b6e6e9c4dddfd6ad463f9857941ddb8fda65092dc6077d6bf93a2937687321f1e23f0e1e273e8d6f"}, @typed={0x4, 0x143, 0x0, 0x0, @str}, @typed={0x4, 0x52}, @generic="835ca013411ac6097a41692799e5e747bcc2b81aadb1065c0cf4e2768470aa1947aff7ad126d22dc9d878b9577c9c33204abae22ed7d0285d2ae7e433f18f9e42b2e94f8e9982b0cdad1d3926a344d3d56", @nested={0x4, 0x76}]}]}, @TIPC_NLA_PUBL={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xd3}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@nested={0x4, 0xb1}, @typed={0x12, 0x89, 0x0, 0x0, @str='/dev/admmidi2\x00'}, @nested={0x20, 0x65, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}]}, @TIPC_NLA_MON={0x127, 0x9, 0x0, 0x1, [@generic="fe27dfee421cf364637e0017ab84d21d3411b0a3f14e015a79ddaadcd777b16cb326026906c9b20dd7cb17", @typed={0x8, 0xde, 0x0, 0x0, @u32=0x44eb}, @generic="1a60a2d52884185bb3b056d1b0e249b8af2d173947c01fabd0c8acf32bdcc52b7bb8ccfdb95ab0dfa1ba0bd81f429a9dca88d681fc91467b3491e49537c78ed4d995cd02dc9d82c1eba2627ba0ad1ad2187a3fc4d421f349f1efc3913c791a78dd9a2d3aadf33f287a6582b9962b3e18436db8dbaa8a0c7886c0d2e113b471a33a3820c360dd3fcaba9ff67e82ef5924a60758fb56a5470f16e8432398a2c2f6f881bb2f2e41cce5e7075d5ff1e913c964ae2d6c411478d10ccd7657", @typed={0x34, 0x3e, 0x0, 0x0, @binary="d742f91f1a7b3a31ef580d1477fdadc8f660964c348b3474c8a836bb00e639b46fcb1802a106de1393d4ae88066d1807"}]}, @TIPC_NLA_UNSPEC={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @TIPC_NLA_SOCK={0xce, 0x2, 0x0, 0x1, [@generic="f604c212f247a9323f02b06eea83aa9eff450f09e6019b1cd28285cf2cbacfe9c47216e3920880148713336486dd7bed9b23732c18e5e8d1224b1f18eef234bcf31c0e0f7568f9129c806bc744c9730f6404db5d3fd77139340307f90b46df7c5669e13fde5b218f5865f7761580995eac5eb0968e72d8538d4d152a525fb5c2e6d3d698966d106dcb079e5caf7c3abd2e6b550cabfbb9d791aa313c9f6ceb376229e768f736a26a825671015d39d655e1524018c828db5a19aff9af500896cb95933fc44a59047096b8"]}]}, 0x474}}, 0x0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="144e4f00", @ANYRES16=r5, @ANYBLOB="01032cbd7000fcdbdf250d000000"], 0x14}, 0x1, 0xffffffa6}, 0x8000) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 2.276865319s ago: executing program 6 (id=3516): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x41555856, 0x6, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x7f, 0x0, 0x0) ioctl$auto(0x3, 0x890b, 0x38) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mprotect$auto(0x110c238000, 0x1, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x80000, 0x67fe) socket(0x11, 0x80003, 0x300) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x3e1803, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty48\x00', 0x258cc0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) munmap$auto(0x1000000, 0x2000000c) setuid$auto(0x800000000008) landlock_restrict_self$auto(0x5, 0x1b7) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) 1.504396502s ago: executing program 1 (id=3517): r0 = pidfd_open$auto(0x1, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000200)={0x1, @raw=0xa715, @raw=0x10, 0x1, 0xfffffffffffffc00, '\x00', {0x2, 0x0, 0x5083, 0x0, 0xee00, 0x4de4bf0d, 0x3ff, 0x0, {0x50, 0x2}, {0xc, 0x6}, {0xbb, 0x6}, 0xffffffffffffff81, 0x4, 0x65, 0x0, 0x1, 0x3, 0x3, 0x81, 0x3, 0x4, '\x00', 0xd, 0x800, 0x8, 0x4d79}}) r2 = prctl$auto_PR_GET_THP_DISABLE(0x2a, 0x2, 0xffffffffffffffff, 0xd, 0x8) mmap$auto(0xfffffffffffffffa, 0xc, 0x2c, 0x18, r2, 0x84) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x800028b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) mmap$auto(0x6, 0x4, 0x4000000000df, 0x60eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = getpgid(0x0) socket(0x2, 0x1, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r5, 0x8, &(0x7f0000000100)={@_si_pad}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') setregid$auto(r1, r1) statx$auto(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)={0x21c, 0x3, 0x8e, 0x4, 0x0, 0xffffffffffffffff, 0xd45, 0x0, 0xe, 0x100000001, 0x9, 0x3, {0x7, 0x10001}, {0x6, 0x5}, {0x1}, {0x0, 0x8}, 0xffffffff, 0x4, 0x8, 0x5, 0x8, 0x2, 0xb7, 0x3, 0x928fae2c, 0xffff0000, 0x4, 0x101, [0x1, 0x9, 0x8, 0x8, 0x0, 0x9, 0x8, 0x12c5a12f, 0x3]}) waitid$auto(0x6, r0, &(0x7f0000000040)={@siginfo_0_0={0x3, 0xe, 0x4, @_sigfault={0x0, @_perf={0x1, 0xfffffffc, 0xffff}}}}, 0x7, &(0x7f00000002c0)={{0x8, 0xfff000000000000}, {0xfffffffffffff0a0, 0x19f3e850}, 0xbcf4, 0x401, 0xf, 0x1, 0x7, 0x3, 0x7, 0x5, 0x1ff, 0x7, 0x680a3700, 0xfffffffffffffc01, 0x9, 0x6}) setns(r0, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) 454.010605ms ago: executing program 6 (id=3518): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) sigaltstack$auto(&(0x7f0000000300)={&(0x7f0000000140)="d489e7c1222e4dc0699d119bee04117080da08b26d9428f53c390cde6ad54dd2af8cba8e266948aea9cc920286cfe50f820bcab7a346583ff7d97cd8", 0x6, 0x81}, &(0x7f0000000380)={&(0x7f0000000340)="81b6df5ff83495867e5993f9df88ba1a6537a1b1cab93e5690874808", 0x3, 0xf}) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f00000001c0)={0x2, 0xb6, 0x1, 0x4, 0x2, 0x0, 0x5, 0x1, 0x8, 0xd, 0x1, 0x8}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x400000001d}, 0x3) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x101242, 0x0) epoll_create$auto(0x3e) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8e00, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty49\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b49, 0x9) 453.778278ms ago: executing program 3 (id=3519): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x6) getpid() unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2515000000080027000c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 377.535527ms ago: executing program 1 (id=3520): mmap$auto(0x0, 0x2020009, 0x2, 0x1d, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count\x00', 0x400, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0xff80000000000000, 0x406, 0x1) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/queues/tx-6/traffic_class\x00', 0xe0a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000480)=""/142, 0x8e) 93.418847ms ago: executing program 6 (id=3521): ioperm$auto(0x7, 0x6, 0xffffffffffff4064) map_shadow_stack$auto(0x2, 0x3, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) write$auto(r0, &(0x7f0000000000)='y\x8c', 0x2) socket(0x11, 0x801, 0x83) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x2000, 0x0) write$auto(r2, 0x0, 0xe) getsockopt$auto(r1, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x9, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000406, 0x6, 0x7, 0x3fb, 0x7ffffffb, 0x9, 0xffffffff7ffffffd, 0x8000, 0x61, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC=r4, @ANYRES32=r8], 0x28}}, 0x80) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) ioctl$auto(r9, 0x560a, 0x7) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) sendmmsg$auto(r0, 0x0, 0x0, 0x100) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x22000, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001) 0s ago: executing program 1 (id=3522): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f00000000c0), 0x82201, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0) semctl$auto_IPC_INFO(0x0, 0xffff, 0x3, 0x9) r1 = fcntl$auto_F_GETPIPE_SZ(0xffffffffffffffff, 0x408, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) capset$auto(&(0x7f0000000080)={0x5, 0x0}, &(0x7f00000000c0)={0x4, 0x3, 0x7}) r4 = socketcall$auto_SYS_RECVMMSG(0x13, &(0x7f0000000100)=0x8000080000000000) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8030000f3d1aba910269cceeac8f67a85ee9e2343cc467fae416a8f4704a41044d42d66894e8c4c0a649978d8540a6a38576e0a15a9771afaf4ee70286d12672a2568", @ANYRES16=r2, @ANYBLOB="00032cbd7000fbdbdf250b0000008a02078008007d00", @ANYRES32=r3, @ANYBLOB="506671c8b19361b59da20776e9b8a64683a6ff1c59825d81e9ff55cc9082671246a4874ebe5a8c9685a92d544f6b90648dfe5414f21556447918b6ff0a1480981340dab2afbef72b36d42a807f60f6f1e17729716104cdb9bc8d79705a26bcb764de2e9e1ce861648e2246d8adef3a030b94cfcc0c48e8fdf4effc60450c3792343bad02413c566073ae06828c1f817ead5961ec407804990a43b467fa6df86ec254e54b3bf63e93fdb24d397cc167a2ff9bc2373c59991bce0b38cf0421b20187b52136dd415b5de5514683209107b8e77fdccb050c7acb89097b08ac38c16ed0e82103a953547d04bf432a02b38122291d7747f9956f008143e3d46848d55cf4e363f333cd1b2d1912941eaf69b89198058c77688a5e019d80984c6e0d145db1c21491fdba3954845f81525144bf4ce98ed20f330c080d07cd82220b87e0afe7cd6bb3af8884aff633d41e510ab0e4b7600800a900", @ANYRES32=r4, @ANYBLOB="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"], 0x3d8}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000005c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) r5 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r5, 0x0, 0x2, 0x100) kernel console output (not intermixed with test programs): lave_0: hsr_addr_subst_dest: Unknown node [ 656.216169][T15674] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 656.269890][T15670] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2344'. [ 658.747262][T15716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 659.478028][T15723] Process accounting resumed [ 662.015600][T15783] netlink: del zone limit has 8 unknown bytes [ 662.555306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 663.422267][T15805] Line length is too long: Should be less than 4094 [ 664.402212][T15834] Process accounting resumed [ 664.568703][T15833] Invalid ELF header magic: != ELF [ 665.309208][T15852] delete_channel: no stack [ 665.640355][T15864] tipc: Can't bind to reserved service type 2 [ 668.240039][T15926] openvswitch: netlink: Duplicate or invalid key (type 1). [ 668.858281][T15924] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.882378][T15924] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 668.904793][T15924] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.933008][T15924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 669.407481][T15950] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 670.202493][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 670.902296][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 670.958300][T15970] Process accounting resumed [ 670.982813][T12562] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.988925][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 671.257711][T15988] netlink: 130 bytes leftover after parsing attributes in process `syz.3.2416'. [ 671.621948][T15980] Process accounting resumed [ 672.100040][T16003] openvswitch: netlink: Key 23 has unexpected len 16 expected 2 [ 673.763742][T16022] Process accounting resumed [ 674.645181][ T29] audit: type=1804 audit(4295034011.496:26): pid=16056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2432" name="/newroot/sys/kernel/tracing/saved_cmdlines" dev="tracefs" ino=155 res=1 errno=0 [ 675.458066][T16073] netlink: zone id is out of range [ 675.463399][T16073] netlink: zone id is out of range [ 675.469443][T16073] netlink: zone id is out of range [ 675.474600][T16073] netlink: zone id is out of range [ 675.480268][T16073] netlink: zone id is out of range [ 675.485422][T16073] netlink: zone id is out of range [ 675.491065][T16073] netlink: zone id is out of range [ 675.496200][T16073] netlink: zone id is out of range [ 675.501860][T16073] netlink: zone id is out of range [ 675.654406][T16073] netlink: zone id is out of range [ 677.589593][T16092] Process accounting resumed [ 681.457814][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 681.505296][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. syzkaller syzkaller login: [ 682.128612][T16175] net_ratelimit: 454 callbacks suppressed [ 682.128636][T16175] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 682.141012][T16175] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 682.630655][T16189] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 683.352633][T16179] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2459'. [ 683.761547][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2466'. [ 683.771345][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2466'. [ 683.967579][T16199] Process accounting resumed [ 684.968670][T16221] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 685.511980][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.530317][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.630998][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 685.647621][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 686.046755][T16228] Process accounting paused [ 687.264098][T16268] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 687.270592][T16268] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 687.932970][T16278] FAULT_INJECTION: forcing a failure. [ 687.932970][T16278] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.345148][T16278] CPU: 0 UID: 0 PID: 16278 Comm: syz.5.2484 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 688.345198][T16278] Tainted: [U]=USER [ 688.345209][T16278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 688.345228][T16278] Call Trace: [ 688.345236][T16278] [ 688.345249][T16278] dump_stack_lvl+0x16c/0x1f0 [ 688.345297][T16278] should_fail_ex+0x50a/0x650 [ 688.345348][T16278] ? __pfx___might_resched+0x10/0x10 [ 688.345412][T16278] should_fail_alloc_page+0xe7/0x130 [ 688.345445][T16278] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 688.345487][T16278] ? hlock_class+0x4e/0x130 [ 688.345523][T16278] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 688.345592][T16278] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 688.345657][T16278] ? find_held_lock+0x2d/0x110 [ 688.345698][T16278] ? page_ext_put+0x3e/0xd0 [ 688.345740][T16278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 688.345791][T16278] ? policy_nodemask+0xea/0x4e0 [ 688.345823][T16278] alloc_pages_mpol+0x1fc/0x540 [ 688.345854][T16278] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 688.345883][T16278] ? page_table_check_set.part.0+0x3b8/0x550 [ 688.345932][T16278] ? find_held_lock+0x2d/0x110 [ 688.345968][T16278] alloc_pages_noprof+0x131/0x390 [ 688.345998][T16278] pte_alloc_one+0x20/0x390 [ 688.346050][T16278] __pte_alloc+0x6e/0x3d0 [ 688.346086][T16278] ? __pfx___pte_alloc+0x10/0x10 [ 688.346121][T16278] ? __pfx___might_resched+0x10/0x10 [ 688.346177][T16278] copy_page_range+0x3737/0x5690 [ 688.346266][T16278] ? __pfx_copy_page_range+0x10/0x10 [ 688.346305][T16278] ? find_held_lock+0x2d/0x110 [ 688.346342][T16278] ? __pfx_lock_release+0x10/0x10 [ 688.346381][T16278] ? lock_acquire+0x2f/0xb0 [ 688.346417][T16278] ? copy_process+0x7c12/0x8c50 [ 688.346449][T16278] ? down_write+0x14e/0x200 [ 688.346495][T16278] ? up_write+0x1b2/0x520 [ 688.346543][T16278] copy_process+0x7ccb/0x8c50 [ 688.346595][T16278] ? __pfx_copy_process+0x10/0x10 [ 688.346622][T16278] ? __might_fault+0x13b/0x190 [ 688.346650][T16278] ? __pfx_lock_release+0x10/0x10 [ 688.346697][T16278] ? __might_fault+0xe3/0x190 [ 688.346725][T16278] ? __might_fault+0xe3/0x190 [ 688.346760][T16278] ? _copy_from_user+0x59/0xd0 [ 688.346796][T16278] kernel_clone+0xfd/0x960 [ 688.346826][T16278] ? __pfx_kernel_clone+0x10/0x10 [ 688.346865][T16278] ? __pfx_futex_wake+0x10/0x10 [ 688.346912][T16278] __do_sys_clone3+0x214/0x290 [ 688.346939][T16278] ? __pfx___do_sys_clone3+0x10/0x10 [ 688.347061][T16278] do_syscall_64+0xcd/0x250 [ 688.347109][T16278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.347154][T16278] RIP: 0033:0x7f8dea98d169 [ 688.347196][T16278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.347228][T16278] RSP: 002b:00007f8de87d4f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 688.347258][T16278] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8dea98d169 [ 688.347280][T16278] RDX: 00007f8de87d4f20 RSI: 0000000000000058 RDI: 00007f8de87d4f20 [ 688.347299][T16278] RBP: 00007f8deaa0e2a0 R08: 0000000000000000 R09: 0000000000000058 [ 688.347318][T16278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.347337][T16278] R13: 0000000000000000 R14: 00007f8deaba6160 R15: 00007ffde09af3d8 [ 688.347379][T16278] [ 688.671300][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.282382][T16257] Process accounting resumed [ 689.522887][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 689.562418][T16295] netlink: 54 bytes leftover after parsing attributes in process `syz.1.2487'. [ 689.619899][T16299] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2488'. [ 690.974384][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.980946][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.097946][T16339] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2496'. [ 692.246814][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 692.256647][T16362] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2502'. [ 692.533834][T16370] FAULT_INJECTION: forcing a failure. [ 692.533834][T16370] name failslab, interval 1, probability 0, space 0, times 0 [ 692.609902][T16370] CPU: 0 UID: 0 PID: 16370 Comm: syz.5.2504 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 692.609949][T16370] Tainted: [U]=USER [ 692.609959][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 692.609976][T16370] Call Trace: [ 692.609985][T16370] [ 692.609996][T16370] dump_stack_lvl+0x16c/0x1f0 [ 692.610042][T16370] should_fail_ex+0x50a/0x650 [ 692.610093][T16370] ? fs_reclaim_acquire+0xae/0x150 [ 692.610137][T16370] ? lsm_blob_alloc+0x68/0x90 [ 692.610185][T16370] should_failslab+0xc2/0x120 [ 692.610215][T16370] __kmalloc_noprof+0xcb/0x510 [ 692.610271][T16370] lsm_blob_alloc+0x68/0x90 [ 692.610322][T16370] security_sk_alloc+0x30/0x270 [ 692.610359][T16370] sk_prot_alloc+0x1c7/0x2a0 [ 692.610395][T16370] sk_alloc+0x36/0xc20 [ 692.610451][T16370] ? __pfx_genl_release+0x10/0x10 [ 692.610497][T16370] __netlink_create+0x5e/0x2c0 [ 692.610524][T16370] ? __wake_up+0x3f/0x60 [ 692.610560][T16370] netlink_create+0x3a4/0x630 [ 692.610591][T16370] ? __pfx_genl_bind+0x10/0x10 [ 692.610628][T16370] ? __pfx_genl_unbind+0x10/0x10 [ 692.610671][T16370] __sock_create+0x335/0x8d0 [ 692.610706][T16370] __sys_socket+0x14f/0x260 [ 692.610739][T16370] ? __pfx___sys_socket+0x10/0x10 [ 692.610770][T16370] ? rcu_is_watching+0x12/0xc0 [ 692.610805][T16370] __x64_sys_socket+0x72/0xb0 [ 692.610836][T16370] ? lockdep_hardirqs_on+0x7c/0x110 [ 692.610869][T16370] do_syscall_64+0xcd/0x250 [ 692.610907][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.610948][T16370] RIP: 0033:0x7f8dea98d169 [ 692.610968][T16370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.610995][T16370] RSP: 002b:00007f8de87f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 692.611019][T16370] RAX: ffffffffffffffda RBX: 00007f8deaba6080 RCX: 00007f8dea98d169 [ 692.611037][T16370] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 692.611053][T16370] RBP: 00007f8deaa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 692.611069][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.611085][T16370] R13: 0000000000000000 R14: 00007f8deaba6080 R15: 00007ffde09af3d8 [ 692.611117][T16370] [ 693.462845][T16385] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 693.469382][T16385] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 694.797132][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 694.821120][T16406] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2513'. [ 696.421627][T16424] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 696.428133][T16424] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 696.863606][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2524'. [ 696.874335][T16453] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2524'. [ 697.191371][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2527'. [ 697.470864][T16464] tty tty45: ldisc open failed (-12), clearing slot 44 [ 697.487784][T16448] Process accounting resumed [ 699.045838][T16493] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 699.052356][T16493] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 699.398174][T12562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.429704][T12562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.441487][T12562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.458991][T12562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.467364][T12562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 699.477491][T12562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 699.541253][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 699.625878][T16505] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2536'. [ 700.132130][T16502] chnl_net:caif_netlink_parms(): no params data found [ 700.223895][T16515] Process accounting resumed [ 700.366936][T10299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.703853][T10299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.864377][T16532] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2539'. [ 701.014715][T10299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.178304][T10299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.241701][T16502] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.249171][T16502] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.256404][T16502] bridge_slave_0: entered allmulticast mode [ 701.275842][T16502] bridge_slave_0: entered promiscuous mode [ 701.344511][T16502] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.361714][T16502] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.379333][T16502] bridge_slave_1: entered allmulticast mode [ 701.393182][T16502] bridge_slave_1: entered promiscuous mode [ 701.494158][T16502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.528974][T12562] Bluetooth: hci2: command tx timeout [ 701.581158][T16502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.691428][T16502] team0: Port device team_slave_0 added [ 701.764086][T16502] team0: Port device team_slave_1 added [ 701.886608][T16502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.906181][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.959303][T16502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.584221][T10299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.621766][T10299] bond0 (unregistering): Released all slaves [ 702.691301][T16502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.698292][T16502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.745882][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2546'. [ 702.766838][T16502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.975332][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 702.985616][T16563] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2547'. [ 703.204083][T16502] hsr_slave_0: entered promiscuous mode [ 703.237841][T16502] hsr_slave_1: entered promiscuous mode [ 703.499519][T16575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 703.505983][T16575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 703.620305][T12562] Bluetooth: hci2: command tx timeout [ 703.787276][T16586] netlink: 130 bytes leftover after parsing attributes in process `syz.4.2552'. [ 704.492898][T10299] hsr_slave_0: left promiscuous mode [ 704.528968][T10299] hsr_slave_1: left promiscuous mode [ 704.584110][T10299] veth1_macvtap: left promiscuous mode [ 704.585828][T16596] Process accounting resumed [ 704.599650][T10299] veth0_macvtap: left promiscuous mode [ 704.749967][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2556'. [ 704.780228][T16617] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2556'. [ 705.526660][T10299] team0 (unregistering): Port device team_slave_1 removed [ 705.575176][T10299] team0 (unregistering): Port device team_slave_0 removed [ 705.689597][T12562] Bluetooth: hci2: command tx timeout [ 706.231032][T16641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 706.487885][T16502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 706.545526][T16502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 706.602022][T16502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 706.637385][T16502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 707.304285][T16502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.517369][T16502] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.664303][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.671581][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.681321][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.688438][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.726925][T16670] Process accounting resumed [ 707.775936][T12562] Bluetooth: hci2: command tx timeout [ 708.519039][T16502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.971377][T16502] veth0_vlan: entered promiscuous mode [ 709.124188][T16502] veth1_vlan: entered promiscuous mode [ 709.240929][T16502] veth0_macvtap: entered promiscuous mode [ 709.296871][T16502] veth1_macvtap: entered promiscuous mode [ 709.494893][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.519174][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.556711][T16502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.756715][T16502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.787946][T16502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.811274][T16502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.004190][T16502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.025263][T16502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.047086][T16502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.070476][T16502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.398725][ T8735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.444595][ T8735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.510229][T10299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.518105][T10299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.079542][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 711.092567][T16788] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2578'. [ 712.211189][T16789] Process accounting resumed [ 712.450394][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'. [ 715.831580][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2592'. [ 716.350708][T16757] Process accounting resumed [ 716.923771][T16875] Invalid ELF header magic: != ELF [ 719.075111][T16899] can: request_module (can-proto-0) failed. [ 719.432578][T16912] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 719.439101][T16912] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 720.978190][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 722.041856][T16903] Process accounting paused [ 722.467305][T16952] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 722.473847][T16952] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 725.745508][T16995] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2620'. [ 725.928357][T17035] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 725.934798][T17035] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 726.116847][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 727.734542][T17055] Process accounting resumed [ 728.748743][T17092] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 728.995982][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 730.685992][T17111] Process accounting resumed [ 730.862726][T17124] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 730.869296][T17124] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 730.897283][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2650'. [ 733.570115][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'. [ 733.863907][T17170] Process accounting resumed [ 734.887957][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2673'. [ 736.208122][T17237] Process accounting resumed [ 736.482197][T17257] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 736.636999][T17260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2681'. [ 736.719922][T17264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'. [ 738.468333][T17299] netlink: 306 bytes leftover after parsing attributes in process `syz.3.2687'. [ 738.570551][T17294] Process accounting resumed [ 739.253579][T17316] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2690'. [ 739.376558][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 739.723214][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 740.129677][T17343] FAULT_INJECTION: forcing a failure. [ 740.129677][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 740.154280][T17343] CPU: 1 UID: 0 PID: 17343 Comm: syz.3.2695 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 740.154323][T17343] Tainted: [U]=USER [ 740.154331][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 740.154347][T17343] Call Trace: [ 740.154355][T17343] [ 740.154364][T17343] dump_stack_lvl+0x16c/0x1f0 [ 740.154414][T17343] should_fail_ex+0x50a/0x650 [ 740.154460][T17343] ? fs_reclaim_acquire+0xae/0x150 [ 740.154498][T17343] ? tracing_log_err+0xc5/0x6b0 [ 740.154534][T17343] should_failslab+0xc2/0x120 [ 740.154560][T17343] __kmalloc_noprof+0xcb/0x510 [ 740.154600][T17343] ? __pfx_trace_seq_printf+0x10/0x10 [ 740.154639][T17343] tracing_log_err+0xc5/0x6b0 [ 740.154684][T17343] append_filter_err+0x380/0x5e0 [ 740.154722][T17343] apply_subsystem_event_filter+0x670/0x1410 [ 740.154766][T17343] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 740.154801][T17343] ? __might_fault+0xe3/0x190 [ 740.154830][T17343] ? __might_fault+0xe3/0x190 [ 740.154863][T17343] ? _copy_from_user+0x59/0xd0 [ 740.154898][T17343] subsystem_filter_write+0x95/0x120 [ 740.154937][T17343] ? __pfx_subsystem_filter_write+0x10/0x10 [ 740.154973][T17343] vfs_write+0x24c/0x1150 [ 740.155014][T17343] ? __fget_files+0x1fc/0x3a0 [ 740.155055][T17343] ? __pfx___mutex_lock+0x10/0x10 [ 740.155093][T17343] ? __pfx_vfs_write+0x10/0x10 [ 740.155143][T17343] ? __fget_files+0x206/0x3a0 [ 740.155194][T17343] ksys_write+0x12b/0x250 [ 740.155234][T17343] ? __pfx_ksys_write+0x10/0x10 [ 740.155283][T17343] do_syscall_64+0xcd/0x250 [ 740.155325][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.155363][T17343] RIP: 0033:0x7fc58498d169 [ 740.155386][T17343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.155420][T17343] RSP: 002b:00007fc58582f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 740.155446][T17343] RAX: ffffffffffffffda RBX: 00007fc584ba6080 RCX: 00007fc58498d169 [ 740.155464][T17343] RDX: 0000000000000040 RSI: 0000400000008d40 RDI: 0000000000000005 [ 740.155481][T17343] RBP: 00007fc584a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 740.155497][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.155513][T17343] R13: 0000000000000000 R14: 00007fc584ba6080 R15: 00007ffde2116c78 [ 740.155549][T17343] [ 740.388969][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.996940][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2703'. [ 742.010952][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2701'. [ 743.824118][T17407] Process accounting resumed [ 744.047891][T17415] svc: failed to register nfsdv3 RPC service (errno 111). [ 744.069332][T17415] svc: failed to register nfsaclv3 RPC service (errno 111). [ 746.430299][T17457] Process accounting resumed [ 746.756434][T17468] sg_write: data in/out 32732/16086 bytes for SCSI command 0x0-- guessing data in; [ 746.756434][T17468] program syz.1.2721 not setting count and/or reply_len properly [ 749.340698][T17514] ptrace attach of "./syz-executor exec"[14148] was attempted by "X\x0a\x0dh{vJ{Α4!:{]j\x09*(\x22KZIU\x0d#Mz݉fe\x0a;QҭX=(8ztBIy떥%⫈p0,paRbwn+R2 l+Vx \x0bAjv=\x0a;/zT% |~ v8cZ[R#}ѐ͝2XR!@ldh~bzR:G֜UӐڣN/GjYlZdܾJ%׈QNVUuB4Db\x0bLa*vHL\x5cJade \x07&\x09AeTi#tG9\x07 1 [ 751.111484][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.119914][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.139913][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.160514][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 751.168533][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 751.240416][T17550] Process accounting resumed [ 752.231020][T17554] chnl_net:caif_netlink_parms(): no params data found [ 752.261180][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 752.431613][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.438249][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.229121][ T5851] Bluetooth: hci3: command tx timeout [ 753.426281][T17554] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.436903][T17554] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.444914][T17554] bridge_slave_0: entered allmulticast mode [ 753.452028][T17554] bridge_slave_0: entered promiscuous mode [ 753.496754][T17554] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.504498][T17554] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.515428][T17554] bridge_slave_1: entered allmulticast mode [ 753.522460][T17554] bridge_slave_1: entered promiscuous mode [ 753.622145][T17554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.672850][T17554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.768668][T17554] team0: Port device team_slave_0 added [ 753.791604][T17554] team0: Port device team_slave_1 added [ 753.878694][T17554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.909913][T17554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.940705][T17554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.956735][T17554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.966297][T17554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.997239][T17554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.504426][T17554] hsr_slave_0: entered promiscuous mode [ 754.520645][T17554] hsr_slave_1: entered promiscuous mode [ 754.526884][T17554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.543238][T17554] Cannot create hsr debugfs directory [ 755.024711][T17600] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 755.307750][T17554] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 755.315341][ T5851] Bluetooth: hci3: command tx timeout [ 755.374364][T17554] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 755.434125][T17554] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 755.531013][T17554] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 755.969626][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 756.176996][T17554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.310546][T17554] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.404782][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.411972][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.453433][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.460626][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.529269][T17554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.544427][T17554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.659442][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.670857][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.392192][ T5851] Bluetooth: hci3: command tx timeout [ 758.109325][T17554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.067309][T17554] veth0_vlan: entered promiscuous mode [ 759.084188][T17649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 759.084246][T17649] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 759.107675][T17554] veth1_vlan: entered promiscuous mode [ 759.227975][T17554] veth0_macvtap: entered promiscuous mode [ 759.231421][T17554] veth1_macvtap: entered promiscuous mode [ 759.459751][T17554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.459786][T17554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.459806][T17554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.459829][T17554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.460968][T17554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.502914][ T5851] Bluetooth: hci3: command tx timeout [ 759.524876][T17554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.524906][T17554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.524925][T17554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.524948][T17554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.525925][T17554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.528314][T17554] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.528366][T17554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.528399][T17554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.528432][T17554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.786604][T10297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.803401][T10297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.875322][T10294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.892298][T10294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.958144][T17657] Invalid ELF header magic: != ELF [ 761.161046][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 764.531109][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.531209][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.036777][T17722] sg_write: data in/out 32732/16086 bytes for SCSI command 0x0-- guessing data in; [ 767.036777][T17722] program syz.3.2776 not setting count and/or reply_len properly [ 767.175727][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'. [ 768.257397][T17740] ptrace attach of "./syz-executor exec"[17554] was attempted by "mEK%26yv^_!b/myZN\x0dld2Ќ4E]\x07Hհ#;'9dQ|˕<}Q؋*GkH[=#G?.,H\x09s(c:B#4cv4T6Io\x0aM2=#C3|RC@zIy6!Թ@0<$ܪ5Zg7t=Ξ[-FR\x0buHocsmM7(=,0zHr}d 6g\x0d3\x0c7$qvUq#pG\x0bQi$'10bF*Q\x5c=Aϳ;\x0aCم?l4>؄zb6 il1:+$׬X($b<]@#+\x0bBă)6_g2biRh4Hqc)OtwX5jk8]ѰHǶ/;hrIQ@ԲA$95KFwg)9Fۤw'Qϟݫ@oP퇃Hwuĺ8c1ߢ0]h:NjBӸ{e!Xt6Z> ݞsSҳȀ^f9]>QjE\x0c-ghZ]JJ{\x22\x0b8U\x0d*#c/v*\x0c7.(*\x224tږ%c+6/!{`E/~ϛaA o LC=ju0\x093H('q\x0a0^{l݁\x1b\x1bJߺiQӏFt &pbڮIn\x0d4.`\x22z|lĝ9KJ~ҪƆVƕlW4:#9].gbD\x5c]DQ;EK8cLQ [ 773.338707][T17763] Process accounting resumed [ 774.538446][T17804] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 774.544941][T17804] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 776.356546][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2800'. [ 776.475994][T17829] netlink: 354 bytes leftover after parsing attributes in process `syz.6.2800'. [ 777.510876][T17830] Process accounting resumed [ 783.447403][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2817'. [ 783.449580][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 786.336786][T17946] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 786.343271][T17946] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 787.730449][T17952] nbd: nbd7 already in use [ 788.567616][T17959] Process accounting resumed [ 792.210776][T18005] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 792.217238][T18005] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 792.619822][T18008] program syz.3.2837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.861039][T18031] Process accounting resumed [ 796.957237][T18066] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 797.162682][T18057] Process accounting resumed [ 797.399578][T18074] Device name cannot be null; rc = [-22] [ 797.435247][T18071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 797.442308][T18071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 797.464464][T18071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 797.590556][T18071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 797.634585][T18071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 797.687982][T18075] program syz.1.2851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.695447][T18071] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 797.751714][T18071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 797.768412][T18071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 797.867279][T18071] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 798.677923][T17230] Process accounting paused [ 798.864275][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'. [ 799.052632][T18095] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2854'. [ 799.495738][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 799.495750][T12562] Bluetooth: hci0: command 0x0c1a tx timeout [ 799.652244][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 799.710703][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2856'. [ 799.815778][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 799.878040][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2858'. [ 799.887941][T18105] FAULT_INJECTION: forcing a failure. [ 799.887941][T18105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.923765][T18105] CPU: 0 UID: 0 PID: 18105 Comm: syz.3.2858 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 799.923809][T18105] Tainted: [U]=USER [ 799.923818][T18105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 799.923834][T18105] Call Trace: [ 799.923843][T18105] [ 799.923854][T18105] dump_stack_lvl+0x16c/0x1f0 [ 799.923897][T18105] should_fail_ex+0x50a/0x650 [ 799.923951][T18105] _copy_from_user+0x2e/0xd0 [ 799.923987][T18105] copy_msghdr_from_user+0x99/0x160 [ 799.924033][T18105] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 799.924077][T18105] ? __lock_acquire+0xcc5/0x3c40 [ 799.924125][T18105] ? hlock_class+0x4e/0x130 [ 799.924156][T18105] ? __lock_acquire+0x15a9/0x3c40 [ 799.924214][T18105] ___sys_sendmsg+0xff/0x1e0 [ 799.924261][T18105] ? __pfx____sys_sendmsg+0x10/0x10 [ 799.924304][T18105] ? __pfx___lock_acquire+0x10/0x10 [ 799.924380][T18105] ? __pfx___might_resched+0x10/0x10 [ 799.924427][T18105] ? __might_fault+0xe3/0x190 [ 799.924465][T18105] __sys_sendmmsg+0x201/0x420 [ 799.924516][T18105] ? __pfx___sys_sendmmsg+0x10/0x10 [ 799.924574][T18105] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 799.924631][T18105] ? fput+0x67/0x440 [ 799.924662][T18105] ? ksys_write+0x1ba/0x250 [ 799.924704][T18105] ? __pfx_ksys_write+0x10/0x10 [ 799.924753][T18105] __x64_sys_sendmmsg+0x9c/0x100 [ 799.924799][T18105] ? lockdep_hardirqs_on+0x7c/0x110 [ 799.924839][T18105] do_syscall_64+0xcd/0x250 [ 799.924902][T18105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.924946][T18105] RIP: 0033:0x7fc58498d169 [ 799.924970][T18105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.925000][T18105] RSP: 002b:00007fc585850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 799.925029][T18105] RAX: ffffffffffffffda RBX: 00007fc584ba5fa0 RCX: 00007fc58498d169 [ 799.925051][T18105] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 799.925070][T18105] RBP: 00007fc585850090 R08: 0000000000000000 R09: 0000000000000000 [ 799.925089][T18105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.925108][T18105] R13: 0000000000000000 R14: 00007fc584ba5fa0 R15: 00007ffde2116c78 [ 799.925145][T18105] [ 800.721411][T18114] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 800.727980][T18114] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 800.795532][T18099] Process accounting resumed [ 801.291265][T18108] Process accounting resumed [ 801.325218][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.668795][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.693711][T18132] Device name cannot be null; rc = [-22] [ 801.733408][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 801.838350][T18130] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 801.873422][T18130] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 801.879572][T18130] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 801.892438][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.903817][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 801.914419][T18130] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 802.167292][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.232812][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2865'. [ 803.222371][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 803.363085][ T52] bridge_slave_1: left allmulticast mode [ 803.392496][ T52] bridge_slave_1: left promiscuous mode [ 803.403381][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.416917][ T52] bridge_slave_0: left allmulticast mode [ 803.422718][ T52] bridge_slave_0: left promiscuous mode [ 803.428991][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.897996][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 803.898023][T12562] Bluetooth: hci0: command 0x0c1a tx timeout [ 803.904047][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 803.974574][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 804.077516][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.098324][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.115503][ T52] bond0 (unregistering): Released all slaves [ 804.275381][ T52] : left promiscuous mode [ 804.794914][T18173] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 804.801479][T18173] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 805.394631][ T52] hsr_slave_0: left promiscuous mode [ 805.433540][ T52] hsr_slave_1: left promiscuous mode [ 805.465621][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.473089][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.517179][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.524619][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.547737][ T29] audit: type=1800 audit(4295035173.365:27): pid=18183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2874" name="features" dev="configfs" ino=74383 res=0 errno=0 [ 805.644674][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 805.660892][T18194] FAULT_INJECTION: forcing a failure. [ 805.660892][T18194] name failslab, interval 1, probability 0, space 0, times 0 [ 805.693268][ T52] veth1_macvtap: left promiscuous mode [ 805.712555][T18194] CPU: 0 UID: 0 PID: 18194 Comm: syz.1.2872 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 805.712600][T18194] Tainted: [U]=USER [ 805.712611][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 805.712628][T18194] Call Trace: [ 805.712636][T18194] [ 805.712647][T18194] dump_stack_lvl+0x16c/0x1f0 [ 805.712693][T18194] should_fail_ex+0x50a/0x650 [ 805.712743][T18194] ? fs_reclaim_acquire+0xae/0x150 [ 805.712793][T18194] should_failslab+0xc2/0x120 [ 805.712824][T18194] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 805.712873][T18194] ? __alloc_skb+0x2b1/0x380 [ 805.712922][T18194] __alloc_skb+0x2b1/0x380 [ 805.712964][T18194] ? __pfx___alloc_skb+0x10/0x10 [ 805.713019][T18194] netlink_alloc_large_skb+0x69/0x130 [ 805.713067][T18194] netlink_sendmsg+0x689/0xd70 [ 805.713126][T18194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.713188][T18194] ____sys_sendmsg+0xaaf/0xc90 [ 805.713218][T18194] ? copy_msghdr_from_user+0x10b/0x160 [ 805.713258][T18194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.713287][T18194] ? __lock_acquire+0xcc5/0x3c40 [ 805.713328][T18194] ? hlock_class+0x4e/0x130 [ 805.713354][T18194] ? __lock_acquire+0x15a9/0x3c40 [ 805.713395][T18194] ___sys_sendmsg+0x135/0x1e0 [ 805.713436][T18194] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.713474][T18194] ? __pfx___lock_acquire+0x10/0x10 [ 805.713540][T18194] ? __pfx___might_resched+0x10/0x10 [ 805.713582][T18194] ? __might_fault+0xe3/0x190 [ 805.713618][T18194] __sys_sendmmsg+0x201/0x420 [ 805.713663][T18194] ? __pfx___sys_sendmmsg+0x10/0x10 [ 805.713715][T18194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 805.713765][T18194] ? fput+0x67/0x440 [ 805.713798][T18194] ? ksys_write+0x1ba/0x250 [ 805.713835][T18194] ? __pfx_ksys_write+0x10/0x10 [ 805.713878][T18194] __x64_sys_sendmmsg+0x9c/0x100 [ 805.713918][T18194] ? lockdep_hardirqs_on+0x7c/0x110 [ 805.713952][T18194] do_syscall_64+0xcd/0x250 [ 805.713991][T18194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.714028][T18194] RIP: 0033:0x7fdfd878d169 [ 805.714049][T18194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.714075][T18194] RSP: 002b:00007fdfd962f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 805.714100][T18194] RAX: ffffffffffffffda RBX: 00007fdfd89a5fa0 RCX: 00007fdfd878d169 [ 805.714118][T18194] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 805.714134][T18194] RBP: 00007fdfd962f090 R08: 0000000000000000 R09: 0000000000000000 [ 805.714150][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.714165][T18194] R13: 0000000000000000 R14: 00007fdfd89a5fa0 R15: 00007ffc58b5a5e8 [ 805.714196][T18194] [ 805.815574][ T52] veth0_macvtap: left promiscuous mode [ 806.105921][ T52] veth1_vlan: left promiscuous mode [ 806.111516][ T52] veth0_vlan: left promiscuous mode [ 808.377224][ T52] team0 (unregistering): Port device team_slave_1 removed [ 808.478858][ T52] team0 (unregistering): Port device team_slave_0 removed [ 809.126713][T18188] Process accounting resumed [ 809.306018][T18200] Process accounting paused [ 810.487348][T18202] Process accounting resumed [ 810.696693][T18225] svc: failed to register nfsdv3 RPC service (errno 111). [ 810.730743][T18225] svc: failed to register nfsaclv3 RPC service (errno 111). [ 810.758369][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 811.323311][T18242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 811.687736][T18233] Process accounting resumed [ 812.097354][T18259] program syz.4.2885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.906245][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.912998][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.968580][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 815.395784][T18310] FAULT_INJECTION: forcing a failure. [ 815.395784][T18310] name failslab, interval 1, probability 0, space 0, times 0 [ 815.422072][T18310] CPU: 0 UID: 0 PID: 18310 Comm: syz.6.2891 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 815.422128][T18310] Tainted: [U]=USER [ 815.422138][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 815.422154][T18310] Call Trace: [ 815.422163][T18310] [ 815.422174][T18310] dump_stack_lvl+0x16c/0x1f0 [ 815.422219][T18310] should_fail_ex+0x50a/0x650 [ 815.422268][T18310] ? fs_reclaim_acquire+0xae/0x150 [ 815.422309][T18310] ? kvm_dev_ioctl+0x1396/0x1a90 [ 815.422355][T18310] should_failslab+0xc2/0x120 [ 815.422384][T18310] __kmalloc_cache_noprof+0x68/0x410 [ 815.422433][T18310] kvm_dev_ioctl+0x1396/0x1a90 [ 815.422492][T18310] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 815.422545][T18310] ? __fget_files+0x206/0x3a0 [ 815.422592][T18310] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 815.422642][T18310] __x64_sys_ioctl+0x190/0x200 [ 815.422681][T18310] do_syscall_64+0xcd/0x250 [ 815.422724][T18310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.422765][T18310] RIP: 0033:0x7f273a98d169 [ 815.422787][T18310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.422815][T18310] RSP: 002b:00007f273b831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.422842][T18310] RAX: ffffffffffffffda RBX: 00007f273aba5fa0 RCX: 00007f273a98d169 [ 815.422862][T18310] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 815.422879][T18310] RBP: 00007f273aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 815.422897][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.422914][T18310] R13: 0000000000000000 R14: 00007f273aba5fa0 R15: 00007ffdf3b5d6d8 [ 815.422948][T18310] [ 816.212030][T18322] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 816.350867][T18333] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 816.384794][T18333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 816.421252][T18333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 816.450732][T18333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 816.982967][T18337] Process accounting resumed [ 818.079276][T18343] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 818.223634][T18343] File: /dev/ram7 PID: 18343 Comm: syz.3.2892 [ 818.381826][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 818.388692][T12562] Bluetooth: hci4: command 0x0406 tx timeout [ 818.462750][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 818.468998][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 818.776746][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2899'. [ 818.799320][T18374] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2899'. [ 818.913083][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 819.014338][T18377] FAULT_INJECTION: forcing a failure. [ 819.014338][T18377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.068687][T18377] CPU: 1 UID: 0 PID: 18377 Comm: syz.3.2898 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 819.068728][T18377] Tainted: [U]=USER [ 819.068737][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 819.068751][T18377] Call Trace: [ 819.068759][T18377] [ 819.068769][T18377] dump_stack_lvl+0x16c/0x1f0 [ 819.068808][T18377] should_fail_ex+0x50a/0x650 [ 819.068856][T18377] _copy_from_iter+0x2a1/0x1560 [ 819.068886][T18377] ? trace_lock_acquire+0x14e/0x1f0 [ 819.068919][T18377] ? __alloc_skb+0x1fe/0x380 [ 819.068955][T18377] ? __pfx__copy_from_iter+0x10/0x10 [ 819.068981][T18377] ? __virt_addr_valid+0x1a4/0x590 [ 819.069013][T18377] ? __virt_addr_valid+0x5e/0x590 [ 819.069041][T18377] ? __phys_addr_symbol+0x30/0x80 [ 819.069068][T18377] ? __check_object_size+0x488/0x710 [ 819.069098][T18377] netlink_sendmsg+0x813/0xd70 [ 819.069142][T18377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.069192][T18377] ____sys_sendmsg+0xaaf/0xc90 [ 819.069222][T18377] ? copy_msghdr_from_user+0x10b/0x160 [ 819.069262][T18377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.069289][T18377] ? __lock_acquire+0xcc5/0x3c40 [ 819.069352][T18377] ? hlock_class+0x4e/0x130 [ 819.069385][T18377] ? __lock_acquire+0x15a9/0x3c40 [ 819.069436][T18377] ___sys_sendmsg+0x135/0x1e0 [ 819.069486][T18377] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.069530][T18377] ? __pfx___lock_acquire+0x10/0x10 [ 819.069617][T18377] ? __pfx___might_resched+0x10/0x10 [ 819.069667][T18377] ? __might_fault+0xe3/0x190 [ 819.069704][T18377] __sys_sendmmsg+0x201/0x420 [ 819.069759][T18377] ? __pfx___sys_sendmmsg+0x10/0x10 [ 819.069821][T18377] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 819.069881][T18377] ? fput+0x67/0x440 [ 819.069912][T18377] ? ksys_write+0x1ba/0x250 [ 819.069956][T18377] ? __pfx_ksys_write+0x10/0x10 [ 819.070008][T18377] __x64_sys_sendmmsg+0x9c/0x100 [ 819.070056][T18377] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.070095][T18377] do_syscall_64+0xcd/0x250 [ 819.070141][T18377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.070184][T18377] RIP: 0033:0x7fc58498d169 [ 819.070208][T18377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.070238][T18377] RSP: 002b:00007fc585850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 819.070266][T18377] RAX: ffffffffffffffda RBX: 00007fc584ba5fa0 RCX: 00007fc58498d169 [ 819.070285][T18377] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 819.070303][T18377] RBP: 00007fc585850090 R08: 0000000000000000 R09: 0000000000000000 [ 819.070321][T18377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.070338][T18377] R13: 0000000000000000 R14: 00007fc584ba5fa0 R15: 00007ffde2116c78 [ 819.070376][T18377] [ 820.328864][T18406] FAULT_INJECTION: forcing a failure. [ 820.328864][T18406] name failslab, interval 1, probability 0, space 0, times 0 [ 820.366279][T18406] CPU: 1 UID: 0 PID: 18406 Comm: syz.3.2905 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 820.366341][T18406] Tainted: [U]=USER [ 820.366350][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 820.366368][T18406] Call Trace: [ 820.366376][T18406] [ 820.366387][T18406] dump_stack_lvl+0x16c/0x1f0 [ 820.366432][T18406] should_fail_ex+0x50a/0x650 [ 820.366480][T18406] ? fs_reclaim_acquire+0xae/0x150 [ 820.366524][T18406] should_failslab+0xc2/0x120 [ 820.366553][T18406] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 820.366603][T18406] ? security_inode_alloc+0x3b/0x2b0 [ 820.366642][T18406] security_inode_alloc+0x3b/0x2b0 [ 820.366678][T18406] inode_init_always_gfp+0xce4/0x1030 [ 820.366728][T18406] alloc_inode+0x82/0x230 [ 820.366768][T18406] new_inode+0x22/0x210 [ 820.366792][T18406] ? start_creating.part.0+0x25d/0x3a0 [ 820.366845][T18406] __debugfs_create_file+0x11a/0x6b0 [ 820.366879][T18406] debugfs_create_file_full+0x41/0x60 [ 820.366912][T18406] kvm_dev_ioctl+0x14c6/0x1a90 [ 820.366974][T18406] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 820.367026][T18406] ? __fget_files+0x206/0x3a0 [ 820.367073][T18406] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 820.367123][T18406] __x64_sys_ioctl+0x190/0x200 [ 820.367163][T18406] do_syscall_64+0xcd/0x250 [ 820.367207][T18406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.367249][T18406] RIP: 0033:0x7fc58498d169 [ 820.367271][T18406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.367301][T18406] RSP: 002b:00007fc585850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.367347][T18406] RAX: ffffffffffffffda RBX: 00007fc584ba5fa0 RCX: 00007fc58498d169 [ 820.367368][T18406] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 820.367385][T18406] RBP: 00007fc584a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 820.367403][T18406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.367432][T18406] R13: 0000000000000000 R14: 00007fc584ba5fa0 R15: 00007ffde2116c78 [ 820.367468][T18406] [ 820.367497][T18406] debugfs: out of free dentries, can not create file 'max_mmu_rmap_size' [ 822.473367][T18433] Process accounting resumed [ 824.879728][T18480] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 824.886276][T18480] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 825.144111][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2915'. [ 825.165822][T18486] FAULT_INJECTION: forcing a failure. [ 825.165822][T18486] name failslab, interval 1, probability 0, space 0, times 0 [ 825.206119][T18486] CPU: 0 UID: 0 PID: 18486 Comm: syz.6.2915 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 825.206164][T18486] Tainted: [U]=USER [ 825.206174][T18486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 825.206190][T18486] Call Trace: [ 825.206199][T18486] [ 825.206210][T18486] dump_stack_lvl+0x16c/0x1f0 [ 825.206255][T18486] should_fail_ex+0x50a/0x650 [ 825.206304][T18486] ? fs_reclaim_acquire+0xae/0x150 [ 825.206345][T18486] should_failslab+0xc2/0x120 [ 825.206375][T18486] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 825.206424][T18486] ? __alloc_skb+0x2b1/0x380 [ 825.206472][T18486] __alloc_skb+0x2b1/0x380 [ 825.206522][T18486] ? __pfx___alloc_skb+0x10/0x10 [ 825.206567][T18486] ? __mutex_trylock_common+0xea/0x250 [ 825.206616][T18486] ? __pfx___mutex_trylock_common+0x10/0x10 [ 825.206670][T18486] netlink_dump+0x699/0xd00 [ 825.206733][T18486] ? __mutex_lock+0x1cc/0xb10 [ 825.206775][T18486] ? __pfx_netlink_dump+0x10/0x10 [ 825.206814][T18486] ? __pfx_lock_release+0x10/0x10 [ 825.206877][T18486] ? __pfx_netlink_lookup+0x10/0x10 [ 825.206920][T18486] ? apparmor_capable+0x114/0x1d0 [ 825.206962][T18486] __netlink_dump_start+0x6ca/0x970 [ 825.207011][T18486] rdma_nl_rcv_msg+0x55a/0x6e0 [ 825.207055][T18486] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 825.207096][T18486] ? __pfx_nldev_res_get_srq_raw_dumpit+0x10/0x10 [ 825.207148][T18486] ? __pfx___lock_acquire+0x10/0x10 [ 825.207191][T18486] ? hlock_class+0x4e/0x130 [ 825.207224][T18486] ? __lock_acquire+0xcc5/0x3c40 [ 825.207345][T18486] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 825.207397][T18486] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 825.207475][T18486] ? netlink_deliver_tap+0x1ae/0xd30 [ 825.207529][T18486] netlink_unicast+0x53c/0x7f0 [ 825.207592][T18486] ? __pfx_netlink_unicast+0x10/0x10 [ 825.207642][T18486] ? __phys_addr_symbol+0x30/0x80 [ 825.207674][T18486] ? __check_object_size+0x488/0x710 [ 825.207711][T18486] netlink_sendmsg+0x8b8/0xd70 [ 825.207761][T18486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.207819][T18486] ____sys_sendmsg+0xaaf/0xc90 [ 825.207854][T18486] ? copy_msghdr_from_user+0x10b/0x160 [ 825.207901][T18486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.207934][T18486] ? __lock_acquire+0xcc5/0x3c40 [ 825.207982][T18486] ? hlock_class+0x4e/0x130 [ 825.208014][T18486] ? __lock_acquire+0x15a9/0x3c40 [ 825.208066][T18486] ___sys_sendmsg+0x135/0x1e0 [ 825.208114][T18486] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.208158][T18486] ? __pfx___lock_acquire+0x10/0x10 [ 825.208238][T18486] ? __pfx___might_resched+0x10/0x10 [ 825.208285][T18486] ? __might_fault+0xe3/0x190 [ 825.208324][T18486] __sys_sendmmsg+0x201/0x420 [ 825.208376][T18486] ? __pfx___sys_sendmmsg+0x10/0x10 [ 825.208448][T18486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 825.208515][T18486] ? fput+0x67/0x440 [ 825.208547][T18486] ? ksys_write+0x1ba/0x250 [ 825.208590][T18486] ? __pfx_ksys_write+0x10/0x10 [ 825.208661][T18486] __x64_sys_sendmmsg+0x9c/0x100 [ 825.208709][T18486] ? lockdep_hardirqs_on+0x7c/0x110 [ 825.208750][T18486] do_syscall_64+0xcd/0x250 [ 825.208796][T18486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.208841][T18486] RIP: 0033:0x7f273a98d169 [ 825.208866][T18486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.208895][T18486] RSP: 002b:00007f273b831038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.208924][T18486] RAX: ffffffffffffffda RBX: 00007f273aba5fa0 RCX: 00007f273a98d169 [ 825.208945][T18486] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 825.208964][T18486] RBP: 00007f273b831090 R08: 0000000000000000 R09: 0000000000000000 [ 825.208984][T18486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.209002][T18486] R13: 0000000000000000 R14: 00007f273aba5fa0 R15: 00007ffdf3b5d6d8 [ 825.209043][T18486] [ 826.176287][T18492] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 826.182814][T18492] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 826.568277][T18495] Process accounting resumed [ 826.678059][T18507] FAULT_INJECTION: forcing a failure. [ 826.678059][T18507] name failslab, interval 1, probability 0, space 0, times 0 [ 826.714973][T18507] CPU: 0 UID: 0 PID: 18507 Comm: syz.4.2920 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 826.715015][T18507] Tainted: [U]=USER [ 826.715024][T18507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 826.715041][T18507] Call Trace: [ 826.715049][T18507] [ 826.715058][T18507] dump_stack_lvl+0x16c/0x1f0 [ 826.715110][T18507] should_fail_ex+0x50a/0x650 [ 826.715152][T18507] ? fs_reclaim_acquire+0xae/0x150 [ 826.715187][T18507] ? kvm_dev_ioctl+0x1396/0x1a90 [ 826.715225][T18507] should_failslab+0xc2/0x120 [ 826.715249][T18507] __kmalloc_cache_noprof+0x68/0x410 [ 826.715290][T18507] kvm_dev_ioctl+0x1396/0x1a90 [ 826.715338][T18507] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 826.715388][T18507] ? __fget_files+0x206/0x3a0 [ 826.715428][T18507] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 826.715469][T18507] __x64_sys_ioctl+0x190/0x200 [ 826.715502][T18507] do_syscall_64+0xcd/0x250 [ 826.715537][T18507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.715580][T18507] RIP: 0033:0x7f28de58d169 [ 826.715604][T18507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.715632][T18507] RSP: 002b:00007f28dc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.715659][T18507] RAX: ffffffffffffffda RBX: 00007f28de7a5fa0 RCX: 00007f28de58d169 [ 826.715688][T18507] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 826.715704][T18507] RBP: 00007f28de60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 826.715720][T18507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.715736][T18507] R13: 0000000000000000 R14: 00007f28de7a5fa0 R15: 00007fffbe155e88 [ 826.715764][T18507] [ 826.998537][T18509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2923'. [ 827.485806][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 828.594558][T18548] Process accounting resumed [ 829.335815][T18582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'. [ 829.399014][T18582] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2937'. [ 829.419178][T18582] FAULT_INJECTION: forcing a failure. [ 829.419178][T18582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.469267][T18582] CPU: 1 UID: 0 PID: 18582 Comm: syz.1.2937 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 829.469330][T18582] Tainted: [U]=USER [ 829.469340][T18582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 829.469357][T18582] Call Trace: [ 829.469367][T18582] [ 829.469378][T18582] dump_stack_lvl+0x16c/0x1f0 [ 829.469425][T18582] should_fail_ex+0x50a/0x650 [ 829.469480][T18582] _copy_from_user+0x2e/0xd0 [ 829.469516][T18582] copy_msghdr_from_user+0x99/0x160 [ 829.469565][T18582] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 829.469611][T18582] ? __lock_acquire+0xcc5/0x3c40 [ 829.469659][T18582] ? hlock_class+0x4e/0x130 [ 829.469691][T18582] ? __lock_acquire+0x15a9/0x3c40 [ 829.469744][T18582] ___sys_sendmsg+0xff/0x1e0 [ 829.469793][T18582] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.469838][T18582] ? __pfx___lock_acquire+0x10/0x10 [ 829.469937][T18582] ? __pfx___might_resched+0x10/0x10 [ 829.469988][T18582] ? __might_fault+0xe3/0x190 [ 829.470026][T18582] __sys_sendmmsg+0x201/0x420 [ 829.470078][T18582] ? __pfx___sys_sendmmsg+0x10/0x10 [ 829.470139][T18582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 829.470199][T18582] ? fput+0x67/0x440 [ 829.470230][T18582] ? ksys_write+0x1ba/0x250 [ 829.470274][T18582] ? __pfx_ksys_write+0x10/0x10 [ 829.470324][T18582] __x64_sys_sendmmsg+0x9c/0x100 [ 829.470371][T18582] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.470410][T18582] do_syscall_64+0xcd/0x250 [ 829.470455][T18582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.470510][T18582] RIP: 0033:0x7fdfd878d169 [ 829.470532][T18582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.470561][T18582] RSP: 002b:00007fdfd962f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 829.470588][T18582] RAX: ffffffffffffffda RBX: 00007fdfd89a5fa0 RCX: 00007fdfd878d169 [ 829.470607][T18582] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 829.470624][T18582] RBP: 00007fdfd962f090 R08: 0000000000000000 R09: 0000000000000000 [ 829.470640][T18582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 829.470656][T18582] R13: 0000000000000000 R14: 00007fdfd89a5fa0 R15: 00007ffc58b5a5e8 [ 829.470692][T18582] [ 831.105478][T18616] Process accounting resumed [ 831.740049][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2950'. [ 833.536788][T18668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 835.055693][T18696] Process accounting resumed [ 836.496632][T18748] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 836.503169][T18748] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 836.764277][T18741] openvswitch: netlink: Duplicate or invalid key (type 1). [ 838.344837][T18760] Process accounting resumed [ 838.684178][T18781] Process accounting resumed [ 838.820176][T18808] openvswitch: netlink: Key 23 has unexpected len 16 expected 2 [ 839.980001][T18826] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 839.986510][T18826] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 841.318795][T18839] Process accounting paused [ 842.289188][T18892] openvswitch: netlink: Key 23 has unexpected len 16 expected 2 [ 842.319543][T18874] Process accounting resumed [ 842.479610][T18890] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 842.486115][T18890] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 842.528002][ T29] audit: type=1804 audit(4295035210.316:28): pid=18900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2987" name="/newroot/sys/kernel/tracing/saved_cmdlines" dev="tracefs" ino=155 res=1 errno=0 [ 842.797236][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2989'. [ 842.907664][T18907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2989'. [ 843.224213][T18922] openvswitch: netlink: Duplicate or invalid key (type 1). [ 844.744245][T18943] Process accounting resumed [ 845.081025][T18938] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2993'. [ 845.263124][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.270881][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.109353][T18957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 846.115869][T18957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 846.301609][T18969] openvswitch: netlink: Duplicate or invalid key (type 1). [ 846.399116][T18971] openvswitch: netlink: Key 23 has unexpected len 16 expected 2 [ 846.982849][T18987] netlink: zone id is out of range [ 846.988208][T18987] netlink: zone id is out of range [ 846.993577][T18987] netlink: zone id is out of range [ 847.006690][T18987] netlink: zone id is out of range [ 847.069921][T18987] netlink: zone id is out of range [ 847.075369][T18987] netlink: zone id is out of range [ 847.188807][T18974] Process accounting resumed [ 849.685597][T19012] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3011'. [ 849.710071][T19012] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.717719][T19012] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.120131][T19023] Process accounting resumed [ 850.972367][T19042] Process accounting resumed [ 851.176707][T19028] Process accounting resumed [ 851.433596][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 851.493009][T19056] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3025'. [ 851.592117][T19061] Invalid ELF header magic: != ELF [ 851.730717][T19066] net_ratelimit: 457 callbacks suppressed [ 851.730742][T19066] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 852.495360][T19071] netlink: 326 bytes leftover after parsing attributes in process `syz.6.3030'. [ 853.160591][T19081] Process accounting resumed [ 853.804510][T19098] Process accounting resumed [ 853.941114][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3039'. [ 853.966028][T19106] netlink: 354 bytes leftover after parsing attributes in process `syz.6.3039'. [ 855.576264][T19131] Process accounting resumed [ 860.543287][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3048'. [ 862.509088][T19176] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 863.122764][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 863.387758][T19199] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3059'. [ 864.419267][T19223] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 864.425919][T19223] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 864.659410][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 865.593003][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'. [ 865.662062][T19253] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3072'. [ 865.872426][T19259] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 866.603964][T19269] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 866.610509][T19269] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 866.987915][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'. [ 867.423501][T19289] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 867.430012][T19289] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 867.916879][T19298] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3079'. [ 868.051806][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3084'. [ 868.445784][T19316] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 868.452322][T19316] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 869.406144][T19334] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 870.635992][T19355] Process accounting resumed [ 872.625816][T19402] Process accounting resumed [ 873.853370][T19433] Invalid ELF header magic: != ELF [ 874.408825][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'. [ 874.443049][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3119'. [ 875.379826][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.389015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.488128][T19466] Process accounting resumed [ 877.944248][T19508] Invalid ELF header magic: != ELF [ 878.126110][T19506] Process accounting resumed [ 878.403756][T19517] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 879.337249][T19520] Process accounting resumed [ 881.300961][T19559] Process accounting resumed [ 881.450040][T19566] Process accounting resumed [ 883.762240][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3156'. [ 883.781382][T19616] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3156'. [ 884.054348][T18348] Process accounting paused [ 884.175248][T19621] Process accounting resumed [ 885.180108][T19653] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3168'. [ 887.281625][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 887.323828][T19683] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3172'. [ 889.564425][T19725] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 889.570940][T19725] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 889.692339][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3186'. [ 889.712264][T19730] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3186'. [ 892.078949][T19771] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 892.085438][T19771] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 893.361437][T19796] netlink: 'syz.4.3205': attribute type 64 has an invalid length. [ 893.376562][T19796] netlink: 74 bytes leftover after parsing attributes in process `syz.4.3205'. [ 893.415344][T19796] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3205'. [ 893.454340][T19796] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3205'. [ 893.480177][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3206'. [ 894.538703][T19817] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 894.545242][T19817] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 897.290229][T19863] bridge0: port 3(ipvlan0) entered blocking state [ 897.296937][T19863] bridge0: port 3(ipvlan0) entered disabled state [ 897.304561][T19863] ipvlan0: entered allmulticast mode [ 897.309906][T19863] veth0_vlan: entered allmulticast mode [ 897.348793][T19863] ipvlan0: left allmulticast mode [ 897.372491][T19863] veth0_vlan: left allmulticast mode [ 897.852641][T19873] FAULT_INJECTION: forcing a failure. [ 897.852641][T19873] name failslab, interval 1, probability 0, space 0, times 0 [ 897.899770][T19873] CPU: 1 UID: 0 PID: 19873 Comm: syz.1.3223 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 897.899820][T19873] Tainted: [U]=USER [ 897.899830][T19873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 897.899849][T19873] Call Trace: [ 897.899858][T19873] [ 897.899870][T19873] dump_stack_lvl+0x16c/0x1f0 [ 897.899920][T19873] should_fail_ex+0x50a/0x650 [ 897.899974][T19873] ? fs_reclaim_acquire+0xae/0x150 [ 897.900021][T19873] should_failslab+0xc2/0x120 [ 897.900059][T19873] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 897.900114][T19873] ? local_clock_noinstr+0xd/0xe0 [ 897.900156][T19873] ? append_filter_err+0x3c0/0x5e0 [ 897.900201][T19873] kmemdup_nul+0x49/0xf0 [ 897.900244][T19873] append_filter_err+0x3c0/0x5e0 [ 897.900288][T19873] apply_subsystem_event_filter+0x670/0x1410 [ 897.900342][T19873] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 897.900383][T19873] ? __might_fault+0xe3/0x190 [ 897.900417][T19873] ? __might_fault+0xe3/0x190 [ 897.900457][T19873] ? _copy_from_user+0x59/0xd0 [ 897.900498][T19873] subsystem_filter_write+0x95/0x120 [ 897.900544][T19873] ? __pfx_subsystem_filter_write+0x10/0x10 [ 897.900596][T19873] vfs_write+0x24c/0x1150 [ 897.900642][T19873] ? __fget_files+0x1fc/0x3a0 [ 897.900689][T19873] ? __pfx___mutex_lock+0x10/0x10 [ 897.900733][T19873] ? __pfx_vfs_write+0x10/0x10 [ 897.900790][T19873] ? __fget_files+0x206/0x3a0 [ 897.900849][T19873] ksys_write+0x12b/0x250 [ 897.900893][T19873] ? __pfx_ksys_write+0x10/0x10 [ 897.900950][T19873] do_syscall_64+0xcd/0x250 [ 897.901007][T19873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.901055][T19873] RIP: 0033:0x7fdfd878d169 [ 897.901079][T19873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.901109][T19873] RSP: 002b:00007fdfd960e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 897.901141][T19873] RAX: ffffffffffffffda RBX: 00007fdfd89a6080 RCX: 00007fdfd878d169 [ 897.901160][T19873] RDX: 0000000000000040 RSI: 0000400000008d40 RDI: 0000000000000005 [ 897.901178][T19873] RBP: 00007fdfd880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 897.901195][T19873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.901213][T19873] R13: 0000000000000000 R14: 00007fdfd89a6080 R15: 00007ffc58b5a5e8 [ 897.901252][T19873] [ 899.091115][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'. [ 900.225878][T19911] Process accounting resumed [ 903.659263][T19966] Process accounting resumed [ 904.105313][T19987] FAULT_INJECTION: forcing a failure. [ 904.105313][T19987] name failslab, interval 1, probability 0, space 0, times 0 [ 904.179922][T19987] CPU: 1 UID: 0 PID: 19987 Comm: syz.6.3253 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 904.179974][T19987] Tainted: [U]=USER [ 904.179984][T19987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 904.180004][T19987] Call Trace: [ 904.180013][T19987] [ 904.180026][T19987] dump_stack_lvl+0x16c/0x1f0 [ 904.180076][T19987] should_fail_ex+0x50a/0x650 [ 904.180129][T19987] ? fs_reclaim_acquire+0xae/0x150 [ 904.180176][T19987] should_failslab+0xc2/0x120 [ 904.180208][T19987] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 904.180264][T19987] ? local_clock_noinstr+0xd/0xe0 [ 904.180305][T19987] ? append_filter_err+0x3c0/0x5e0 [ 904.180350][T19987] kmemdup_nul+0x49/0xf0 [ 904.180392][T19987] append_filter_err+0x3c0/0x5e0 [ 904.180438][T19987] apply_subsystem_event_filter+0x670/0x1410 [ 904.180506][T19987] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 904.180559][T19987] ? __might_fault+0xe3/0x190 [ 904.180600][T19987] ? __might_fault+0xe3/0x190 [ 904.180633][T19987] ? _copy_from_user+0x59/0xd0 [ 904.180668][T19987] subsystem_filter_write+0x95/0x120 [ 904.180707][T19987] ? __pfx_subsystem_filter_write+0x10/0x10 [ 904.180743][T19987] vfs_write+0x24c/0x1150 [ 904.180783][T19987] ? __fget_files+0x1fc/0x3a0 [ 904.180825][T19987] ? __pfx___mutex_lock+0x10/0x10 [ 904.180869][T19987] ? __pfx_vfs_write+0x10/0x10 [ 904.180917][T19987] ? __fget_files+0x206/0x3a0 [ 904.180970][T19987] ksys_write+0x12b/0x250 [ 904.181008][T19987] ? __pfx_ksys_write+0x10/0x10 [ 904.181077][T19987] do_syscall_64+0xcd/0x250 [ 904.181121][T19987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.181163][T19987] RIP: 0033:0x7f273a98d169 [ 904.181186][T19987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.181216][T19987] RSP: 002b:00007f273b810038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 904.181244][T19987] RAX: ffffffffffffffda RBX: 00007f273aba6080 RCX: 00007f273a98d169 [ 904.181262][T19987] RDX: 0000000000000040 RSI: 0000400000008d40 RDI: 0000000000000005 [ 904.181280][T19987] RBP: 00007f273aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 904.181297][T19987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.181314][T19987] R13: 0000000000000000 R14: 00007f273aba6080 R15: 00007ffdf3b5d6d8 [ 904.181351][T19987] [ 906.248467][T19982] Process accounting resumed [ 909.185556][T20056] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 909.192077][T20056] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 909.560197][T20055] Process accounting resumed [ 909.835943][T20045] Process accounting paused [ 910.061436][T20057] Process accounting resumed [ 912.604164][T20111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 912.610791][T20111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 913.846218][T20146] CIFS: VFS: Invalid SecurityFlags: [ 915.182041][T20177] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 915.188549][T20177] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 918.795180][T20239] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 919.964029][T20246] netlink: zone id is out of range [ 920.032409][T20246] netlink: zone id is out of range [ 920.072343][T20246] netlink: zone id is out of range [ 920.186163][T20246] netlink: zone id is out of range [ 920.353919][T20246] netlink: zone id is out of range [ 920.359084][T20246] netlink: zone id is out of range [ 920.364317][T20246] netlink: zone id is out of range [ 920.370019][T20246] netlink: zone id is out of range [ 920.375225][T20246] netlink: zone id is out of range [ 920.380384][T20246] netlink: zone id is out of range [ 921.354257][T20266] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3304'. [ 921.786321][T20263] Process accounting resumed [ 921.989659][T20272] usb usb15: usbfs: process 20272 (syz.6.3306) did not claim interface 0 before use [ 924.877787][T20291] Process accounting resumed [ 925.771088][T20318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 925.775175][T20318] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 925.775415][T20318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 925.775642][T20318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 926.280873][T20326] Process accounting resumed [ 926.543598][T20333] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3322'. [ 927.796280][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 927.797122][T12562] Bluetooth: hci2: command 0x0c1a tx timeout [ 927.802411][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 927.802454][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 929.547446][T20375] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 929.547616][T20375] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 929.547754][T20375] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 929.548026][T20375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 929.826729][T20381] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3332'. [ 930.511071][T20383] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 930.824982][T20389] Process accounting resumed [ 931.254869][T20405] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 931.558052][T12562] Bluetooth: hci3: command 0x0c1a tx timeout [ 931.558354][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 931.564244][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 931.564302][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 931.829646][T20420] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3344'. [ 933.119124][T20432] Process accounting resumed [ 933.519737][T20441] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 933.526204][T20441] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 933.742706][T20450] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3355'. [ 934.097978][T20452] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 934.104558][T20452] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 934.211923][T20456] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3356'. [ 934.506259][T20458] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3365'. [ 935.282326][T20468] Process accounting resumed [ 935.577496][T20480] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 935.584040][T20480] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 936.634408][T20501] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3369'. [ 936.671082][T20501] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3369'. [ 936.844735][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.851705][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.260970][ T5879] Process accounting resumed [ 938.655566][T20518] Process accounting resumed [ 938.964264][T20525] Process accounting resumed [ 938.999708][T20534] udc dummy_udc.0: soft-connect without a gadget driver [ 941.677424][T20588] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 943.703264][T16649] Process accounting resumed [ 943.711014][T20633] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 943.717576][T20633] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 943.872025][T20636] Process accounting resumed [ 944.134497][T20652] netlink: zone id is out of range [ 944.139696][T20652] netlink: zone id is out of range [ 944.145754][T20652] netlink: zone id is out of range [ 944.150908][T20652] netlink: zone id is out of range [ 944.156530][T20652] netlink: zone id is out of range [ 944.161676][T20652] netlink: zone id is out of range [ 944.167884][T20652] netlink: zone id is out of range [ 946.443795][T20692] Process accounting resumed [ 946.580257][ T61] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.687509][ T61] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.854987][ T61] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.029293][ T61] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.182060][T12562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 947.192279][T12562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 947.200997][T12562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 947.209981][T12562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 947.227703][T12562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 947.241730][T12562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 947.363233][ T61] bridge_slave_1: left allmulticast mode [ 947.393131][ T61] bridge_slave_1: left promiscuous mode [ 947.420870][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.490104][ T61] bridge_slave_0: left allmulticast mode [ 947.495825][ T61] bridge_slave_0: left promiscuous mode [ 947.526168][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.545797][T20722] net_ratelimit: 6 callbacks suppressed [ 947.545820][T20722] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 947.915548][T20744] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3430'. [ 947.960126][T20744] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3430'. [ 949.082989][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.094256][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.105377][ T61] bond0 (unregistering): Released all slaves [ 949.327096][T12562] Bluetooth: hci1: command tx timeout [ 949.644382][T20717] chnl_net:caif_netlink_parms(): no params data found [ 949.685573][ T61] hsr_slave_0: left promiscuous mode [ 949.698622][ T61] hsr_slave_1: left promiscuous mode [ 949.708313][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.715747][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.725504][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.744967][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.756635][T20772] openvswitch: netlink: Duplicate or invalid key (type 1). [ 949.798747][ T61] veth1_macvtap: left promiscuous mode [ 949.804431][ T61] veth0_macvtap: left promiscuous mode [ 949.815442][ T61] veth1_vlan: left promiscuous mode [ 949.821998][ T61] veth0_vlan: left promiscuous mode [ 950.579464][ T61] team0 (unregistering): Port device team_slave_1 removed [ 950.634553][ T61] team0 (unregistering): Port device team_slave_0 removed [ 950.889379][T20787] FAULT_INJECTION: forcing a failure. [ 950.889379][T20787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.905140][T20787] CPU: 1 UID: 0 PID: 20787 Comm: syz.4.3436 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 950.905183][T20787] Tainted: [U]=USER [ 950.905191][T20787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 950.905208][T20787] Call Trace: [ 950.905215][T20787] [ 950.905226][T20787] dump_stack_lvl+0x16c/0x1f0 [ 950.905267][T20787] should_fail_ex+0x50a/0x650 [ 950.905316][T20787] _copy_from_user+0x2e/0xd0 [ 950.905348][T20787] copy_msghdr_from_user+0x99/0x160 [ 950.905411][T20787] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 950.905473][T20787] ___sys_sendmsg+0xff/0x1e0 [ 950.905518][T20787] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.905577][T20787] ? __pfx_lock_release+0x10/0x10 [ 950.905627][T20787] ? trace_lock_acquire+0x14e/0x1f0 [ 950.905674][T20787] ? __fget_files+0x206/0x3a0 [ 950.905725][T20787] __sys_sendmsg+0x16e/0x220 [ 950.905769][T20787] ? __pfx___sys_sendmsg+0x10/0x10 [ 950.905837][T20787] do_syscall_64+0xcd/0x250 [ 950.905881][T20787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.905923][T20787] RIP: 0033:0x7f28de58d169 [ 950.905946][T20787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.905974][T20787] RSP: 002b:00007f28dc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.906000][T20787] RAX: ffffffffffffffda RBX: 00007f28de7a5fa0 RCX: 00007f28de58d169 [ 950.906018][T20787] RDX: 000000000000c000 RSI: 0000400000000000 RDI: 0000000000000003 [ 950.906035][T20787] RBP: 00007f28dc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 950.906051][T20787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.906067][T20787] R13: 0000000000000000 R14: 00007f28de7a5fa0 R15: 00007fffbe155e88 [ 950.906102][T20787] [ 951.244416][T20789] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 951.407988][T12562] Bluetooth: hci1: command tx timeout [ 951.509384][T20717] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.528066][T20717] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.535304][T20717] bridge_slave_0: entered allmulticast mode [ 951.543982][T20717] bridge_slave_0: entered promiscuous mode [ 951.556639][T20717] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.573301][T20717] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.598404][T20717] bridge_slave_1: entered allmulticast mode [ 951.605484][T20717] bridge_slave_1: entered promiscuous mode [ 951.608935][T20796] cougar: G6 mapped to space [ 951.657653][T20717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.717125][T20717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.839403][T20807] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3440'. [ 951.886501][T20717] team0: Port device team_slave_0 added [ 951.914553][T20717] team0: Port device team_slave_1 added [ 952.023600][T20754] Process accounting resumed [ 952.077007][T20717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.109909][T20717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.165852][T20717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.185670][T20818] openvswitch: netlink: Duplicate or invalid key (type 1). [ 952.223673][T20717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.238786][T20717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.264815][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.293733][T20717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.358019][T20717] hsr_slave_0: entered promiscuous mode [ 953.375947][T20717] hsr_slave_1: entered promiscuous mode [ 953.390823][T20717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.408904][T20717] Cannot create hsr debugfs directory [ 953.499099][T12562] Bluetooth: hci1: command tx timeout [ 953.518482][T20836] [U] erofs [ 953.521792][T20836] [U] [ 953.524540][T20836] [U] [ 953.527288][T20836] [U] [ 953.575306][T20836] [U] [ 953.578096][T20836] [U] [ 953.580904][T20836] [U] [ 953.583640][T20836] [U] [ 953.758988][T20836] [U] [ 953.764933][T20836] [U] QOcJr+A#sP%I{ʈѝ#TJύP2@zj~ak.qjo [ 953.777349][T20836] [U] {dJK^ I$4z ̷=LWl%D8rաu.«~Y5W!H19 ,GeBr.3԰Z E'%u1w=>GNBBJ\lmY H+~TeJV\t"͠?8/no[X9q"vRL&?l3"h[P3]i"S1a!сd|3 [ 953.812721][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.831047][T20836] [U] A+6߬W$0Vȃ4WeGB-$C6 [ 953.837814][T20836] [U] h}D+m A—IpGz-1qS,5:SyeZ9P&Nt}]'Up*G-Sd}9DU-')~\(=4H [ 953.872978][T20836] [U] %'5 [ 953.876230][T20836] [U] V Gpk!NTO1bח[#i賋,C5?8@^f0P[M /[#ڡvpj.@iSmҽ7uZHAb%<} [ 953.921814][T20836] [U] ~ahSNPw(E~7!~j;wmD6f+fI@0ubXB?#9oҗa {߄=9%YO0ͣɟzoTJu)ӀV(D9Ys6x,%?|k|Ey1 [ 954.017834][T20836] [U] 㢡Dž [ 954.096048][T20836] [U] "5mВY:~zr6 [ 954.154406][T20836] [U] ;邏7 S>oBowGC$˯*GH [ 954.160738][T20836] [U] m h(~` [ 954.165030][T20836] [U] j[FEު4Um֚[m:<{_vӑ+f[˱#3EV>\W *BZX@wf<~wlyoɸRѥ}2_P%3*܏n<$IÏgٚ&{s wZ:_lL [ 954.182496][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.318501][T20836] [U] >1HWx [7_ $_ء?jИ}FE }*O [ 954.336052][T20836] [U] L8bD! U渆JkUt`Jm'W#P [ 954.385570][T20836] [U] ?orŰ )ZCr6o16;S [ 954.407993][T20836] [U] wSBI\+T:)'$ji՘|ENwÚNͦH9TywB@Rݑcaq;1L=0EH'yJy̖Y3 (S0Tdž>>!ˠ9!ehϦZ籇*ܡKMZ>f2}^]pH[id7r6ӴDǵ{n8)%cx 5Q|OK"r0\Dd_%mHA(Gì>/V2 [ 954.464560][T20836] [U] iNRwu;ؓ@ π3p [ 954.470341][T20836] [U] ?/I`.Lw3ހ0)+^qF~K(8hcP4&T埧IO*C65;*L/7]:\ !;,3[':84 [ 954.816134][T20866] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3451'. [ 955.100581][T20854] Process accounting resumed [ 955.165487][T20717] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 955.186592][T20717] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 955.196140][T20871] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3460'. [ 955.207813][T20873] cougar: G6 mapped to space [ 955.365864][T20877] openvswitch: netlink: Duplicate or invalid key (type 1). [ 955.390447][T20717] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 955.414923][T20717] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 955.571630][T12562] Bluetooth: hci1: command tx timeout [ 956.286570][T20904] [U] erofs [ 956.289811][T20904] [U] [ 956.292573][T20904] [U] [ 956.295347][T20904] [U] [ 956.322712][T20717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.345063][T20904] [U] [ 956.354462][T20904] [U] [ Yƣ$8` [ 956.358311][T20904] [U] /Wkj& ;Rn|&SA[_ [ 956.364705][T20904] [U] w$+,Es7ZTPV;LuU8̷33j@OBNQc2=\D xo|"r*蹊_];2 z+jAbl_Qa.2F#@}ryMf΢[.E?wjTQ_8x/拆D4r+Tڟ8e#)&-H [ 956.377841][T20717] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.386600][T20904] [U] VN4^_E;s,Jݶ)"B/y| [ 956.386626][T20904] [U] QF7+ Q }Kg xV2_,D;\`,BZ횵CωGX:z/oI{&M@K&o\cutODV [ 956.386648][T20904] [U] Y [ 956.386673][T20904] [U] <|(FnYa_Q=6h=1NoyY|lq [ 956.471622][T20904] [U] WOy"7dRf9w(Rf',g$'.FP}~R29A+9BׂԻRö$񋤠br,K //k4c6V_W fԣɖ܎Y7ߐZ0i9qmT369t6Xk&bb/htWAKP!*v6 skaPXbğ!C4 $㊌Y{ߋ <ۢkƁ7FzdUPZh?<2*/6 [ 956.510648][T20904] [U] Uc5 a{(黨YlC4i6*LDc=+?4oP` ȊDI/1=8LergŔYRzC$`[Id2U'&(Dܴ%&Mh021[;uQ+'V Dqӧ< *[8FP_XyãJ!sOU']˭wP)Rt3Ea]Ӱ~]SOX/}CnzW 6-!jXD'8 [ 956.611379][T20904] [U] o뢿EiJ#+|7=JHSγN@q"=Gώ0NR6 )Y\vI 褮{U-ᦝ#UR;NW8Y1Z(չTr6WN LqSW}ߕ[ zy!yl vbo`M[Y(!E)KþIwaJgh+4: [ 956.661609][T20904] [U] !sMm>l"; &kr"9E [ 956.667605][T20904] [U]  ոiH}~NTG?^;0nL=cL(b(n땎f/w,'~? [ 956.677120][T20904] [U] { o{qQ}YHd^| 2{pa [ 956.683751][T20904] [U]  [ 956.688633][T20904] [U] }GM2᜘bZ`f%g%}d [ 956.699575][T20904] [U] 'Ux57%s[ilMKe9K-jW~;ALz [ 956.706964][T20904] [U] ׊tb_NHXѯnzc焐)Ճ_(Dn p [ 956.722933][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.730095][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.770508][T20904] [U] Qҍ|J<۔(Oޚ3SR3{N N [ 956.789678][T20904] [U] 8Z*Kw3J\ g^܅b dSZۡ*#* [ 956.796761][T20904] [U] FޒU[^J?#% [ 956.803293][T20904] [U] *|q [ 956.806929][T20904] [U] 9/}&ڕ+n`۟"VY7S+;p]pM& !A6b 0P=n$J+Akv0i0r Gl/LW2^펬OYK[Zݏ4# [ 956.826604][T20904] [U] ӰaIh"_>[xvD ǵ&l5zֽH [ 956.834898][T20904] [U] g ӭ;`x-b'^qh$;tOH% [ 956.856607][T20904] [U] ޺c<ݔJL y@\>u޽%`M++&JKB@LIo;"{QBؙS)24ˢ)' [ 956.874823][T20904] [U] "CUQI{B5;%E`ӤU<ț. [ 956.882576][T20904] [U] 1"%ߟ8y,Jje/a$Y"? [ 956.892639][T20904] [U] \N`rAɃ?[~ƊW@5p*&s28iq}6zGM%tX~R!o1ݜ`I)@Ul xtM} VU;^Q6j#uf[bzU- }^NML[ UFlB4tB/Gpۘ6N?&(A.$v0[]Mjk-0qn8ݥ'!S0? Bn@[QV4o+$:c^7rG@< +C' [ 956.919978][T20904] [U] 9Ej{/K뇩l(m8x"*TI\"N4-zN=T/r8pU0죠 [ 956.930462][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.978753][T20904] [U] 8$Yj?L@/dK@0KzqnyZe [ 956.991910][T20904] [U] IA@LE͑Zu E|#!|JS]в!ʂlKzLm"+҈oS?_MT}^ vu~$DeLq#?5mCODN[6'R<-CbwF%* \<|OYPY8-G@Y }ۅF5[UۤhZWE?e3ZdXA';,)ꫠ4r{@ B;!f Zb8y=@eǂ̘8?5{~v$U<D˪qWL׺҇"ERAϾߺYSK RT yHǧٙƐ2cTȦļ4%ҦJɅ7K(󂏾KG  ^г `798H#"(<}6&6=FLЗ(eUbv?D:ǞQ {<ގjw^ [ 957.053197][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.071890][T20904] [U] gd8uҪv`= [ 957.075982][T20904] [U] [ 957.078788][T20904] [U] 4僄_nrW-o"|no [ 957.089636][T20904] [U] wN[6dBM>!;̸9?)~/G\/|`2._ [ 957.100658][T20904] [U] ~#}a"+xV[$+cVDLvYz`ȝL7)P I blev{^ސfO#![.a^/mf4mR״we v`!VR9Ye2YyyF@s|`{ֲgTٷ@3<.[BBʤJ :܃z [ 957.129533][T20904] [U] X,"w3tEҢˇRu8)] {#`bەX>ޚ]F`Jf؞np)ժ&RYF8@e3X\WVd=_]a%Y+g!> ou53?R [ 957.135439][T10294] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.146685][T20904] [U] &= [ 957.153561][T10294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.156822][T20904] [U] .x]fj'31Xkb8"-}rXok{be/tj.Ò688d>QdB%/7 fDkƚFھ0hanj@UQ܂Y3~u=|`Df`RߤH=񝘌8V׮'`Ē1BʵGָU 8f)yr-?$ E>3P3H]{. [ 957.186684][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.203829][T20904] [U] u2Ohbw!$"¯"F[Xi&&1iQq.:Fr h@S–"0gW6@1ZfI)$xrBj%s48N_WtT~P i$ [ 957.259543][T20904] [U] *)nZfYzkA?|vF)O@QK' VnMՃ'R΍᪘µ8:u+Y_rH_{Zg9ϕ]zs2ǕB .~|?7G,n}} [ 957.278142][ C1] vkms_vblank_simulate: vblank timer overrun [ 957.279452][T20717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 957.295893][T20717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 957.356711][T20904] [U] pP6N [ 957.389023][T20904] [U] ֩N1aƺeNq8cy &~IE7O'n HMJа' [ 957.445672][T20904] [U] oǽi[Rc[ m[kJ&5Zq<RR:@﯈ }hRnWXJJ [ 957.465490][T20904] [U] VK3t-1kSa[Ə Zʉfd o|_OS]ݾI<| 2ˍP2̥0=} uPu)Ѻɏ[DٵhQ7Z`{\]L4k0tu"C4O*5C]c|hCN!eRl\@>"z/XE*ОͅϹ%1vh?:ɈcȊ?׼m\j\ [ 957.581149][T20904] [U] 衽Aa7Y\ń{F> [ 957.814073][T20717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.219622][T20946] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3465'. [ 958.606866][T20717] veth0_vlan: entered promiscuous mode [ 958.635159][T20717] veth1_vlan: entered promiscuous mode [ 958.733580][T20717] veth0_macvtap: entered promiscuous mode [ 958.776367][T20717] veth1_macvtap: entered promiscuous mode [ 958.823727][T20717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.849862][T20717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.874378][T20717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.907559][T20717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.947904][T20717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.983200][T20717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.009068][T20717] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.039147][T20717] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.049411][T20717] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.067727][T20717] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.240604][T11766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.274694][T11766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.330325][T10294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.352229][T10294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.205716][T21011] [U] erofs [ 960.208958][T21011] [U] [ 960.211718][T21011] [U] [ 960.214484][T21011] [U] [ 960.256050][T21011] [U] [ 960.258837][T21011] [U] [ 960.261594][T21011] [U] [ 960.264357][T21011] [U] [ 960.268387][T21011] [U] [ 960.271150][T21011] [U] [ 960.273901][T21011] [U] [ 960.276647][T21011] [U] [ 960.423581][T21011] [U] [ 960.426392][T21011] [U] C9: [ 960.482973][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 960.492946][T21011] [U] Zdk0^S"}jHWJ[a$ɲQj 3@N 9 [ 960.562611][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 960.581842][T21011] [U] xRB};g/FH#[w<g [ 960.619829][T21011] [U] {m l6ˌ\_+Ӵvm8ԈdZ@Pr@xJq/q1[jFo|u|\r,a#$pVLZU.8vBOT2(:"/ [ 960.622643][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 960.672553][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 960.686242][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 960.732970][T21011] [U] $s!SX;c/ [ 960.759193][T21011] [U] ջlRZ [ 960.796999][T21011] [U] }ƘHtnkъMT1"PavDz5%:YE/}L: [ 960.869546][T21011] [U] 4֜oy VTī&7?,.)NG &^A7K/pg2YoθRS l0TKDI߳*5vj [|pLMz-s^e9gIfE p [ 960.998299][T21011] [U] oY ;)R.޷^X,5$TOMHV<1CPx.ocuekS\}QRةbcZB~i :pW`yvwbkv}K5>u?P4dh%\OnmݢIOvyJyu]c<3 [ 961.040254][T21011] [U] G/qu]7L [ 961.058200][T21011] [U] 9N<R'B%]t"E(XTG`~"O [ 961.067796][T10294] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.100300][T21011] [U] IV`IF/β# mx9Nz9}]lb5Z;r-jM?GL"{liU%GG}5ZRd_יE9ɬ5?>+;њaV_MI?Jm4}mTfU9񀲳o0ezD8hI ˔B6@42 [ 961.173458][T21011] [U] nj;nH>)Nl)"G:`_ݑ}>̔Qp8Q#N#A{0P+O6 [ 961.199750][T21011] [U] ,T5j<>E.~7CƗZy8'QfT)0$ht|'8bÉ t^/>r:N9ԕ7ÒHⷨ=f+A2L WgX dlr/QEO10GUՃI\VfEsO5!Nҽ<*#Bɪ`NTZu.=ig|ⱣbwFH\f"= [ 963.126605][T21068] [U] [ 963.165162][T21068] [U] H f0co2zcƙr~< nyJ7һBO[Qvv3`f3r@^/Ȗs [ 963.220349][T10294] bridge_slave_1: left allmulticast mode [ 963.233185][T10294] bridge_slave_1: left promiscuous mode [ 963.260004][T10294] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.277538][T21068] [U] -y_+M^t[ۮ [ 963.282190][T21068] [U] 4\\z\|q6 [ 963.303229][T21068] [U] kb FmE! [ 963.318098][T10294] bridge_slave_0: left allmulticast mode [ 963.325797][T21068] [U] RntubJ [ 963.330584][T21068] [U]  [ 963.333474][T21068] [U] aXbǢ&L6>BjxA9)a @ܑC_I\KnYX7!H:rfqÛ 8;˂NJ"ڐW,upHn-$67H容;m k蟦L [ 963.392837][T10294] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.400240][T21068] [U] \MVS 㥏S]נ0#e܍@o]̅\8#)k3SZe8U,Rm1..`=Gգ}Ǽ dz4X3 [ 963.455268][T21068] [U] lJ>AfKFs1Jc [ 963.459896][T21068] [U] ~ߢH?Ѽ:p :Tny[Ō [ 963.465871][T21068] [U] djиJiL/ [ 963.470286][T21068] [U] \ϝycPbZ ӒjSCA <V1,!=UN:PԎa[C#&ƛƃGLd9@YXwsۍ[3h3 =3=HtYҴ [ 963.485087][T21068] [U] PB 8e%~YIk瘸IUAPb. [ 963.491630][T21068] [U] ;.kP4!aP7rb [ 963.496507][T21068] [U] ;7Hzhz/p-@8Ri$G\]ek1T&^c [ 963.503716][T21068] [U] >%BlygkkrU}a]t'M#" [ 963.524430][T21068] [U] e [ 964.096131][T21095] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3489'. [ 964.117862][T21095] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3489'. [ 964.602106][T10294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.684934][T10294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.702009][T21104] FAULT_INJECTION: forcing a failure. [ 964.702009][T21104] name failslab, interval 1, probability 0, space 0, times 0 [ 964.728442][T10294] bond0 (unregistering): Released all slaves [ 964.746364][T21104] CPU: 0 UID: 0 PID: 21104 Comm: syz.3.3494 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 964.746400][T21104] Tainted: [U]=USER [ 964.746407][T21104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 964.746420][T21104] Call Trace: [ 964.746427][T21104] [ 964.746437][T21104] dump_stack_lvl+0x16c/0x1f0 [ 964.746476][T21104] should_fail_ex+0x50a/0x650 [ 964.746517][T21104] ? fs_reclaim_acquire+0xae/0x150 [ 964.746554][T21104] ? tomoyo_realpath_from_path+0xb9/0x720 [ 964.746606][T21104] should_failslab+0xc2/0x120 [ 964.746632][T21104] __kmalloc_noprof+0xcb/0x510 [ 964.746672][T21104] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 964.746716][T21104] tomoyo_realpath_from_path+0xb9/0x720 [ 964.746755][T21104] ? tomoyo_path_number_perm+0x235/0x590 [ 964.746787][T21104] ? tomoyo_path_number_perm+0x235/0x590 [ 964.746823][T21104] tomoyo_path_number_perm+0x248/0x590 [ 964.746853][T21104] ? tomoyo_path_number_perm+0x235/0x590 [ 964.746889][T21104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 964.746953][T21104] ? __pfx_lock_release+0x10/0x10 [ 964.746991][T21104] ? trace_lock_acquire+0x14e/0x1f0 [ 964.747026][T21104] ? lock_acquire+0x2f/0xb0 [ 964.747062][T21104] ? __fget_files+0x40/0x3a0 [ 964.747107][T21104] ? __fget_files+0x206/0x3a0 [ 964.747150][T21104] security_file_ioctl+0x9b/0x240 [ 964.747187][T21104] __x64_sys_ioctl+0xb7/0x200 [ 964.747223][T21104] do_syscall_64+0xcd/0x250 [ 964.747262][T21104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.747301][T21104] RIP: 0033:0x7fc58498d169 [ 964.747322][T21104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.747345][T21104] RSP: 002b:00007fc585850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 964.747370][T21104] RAX: ffffffffffffffda RBX: 00007fc584ba5fa0 RCX: 00007fc58498d169 [ 964.747387][T21104] RDX: 0000000000000038 RSI: 0000000040046201 RDI: 0000000000000003 [ 964.747403][T21104] RBP: 00007fc585850090 R08: 0000000000000000 R09: 0000000000000000 [ 964.747419][T21104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.747434][T21104] R13: 0000000000000000 R14: 00007fc584ba5fa0 R15: 00007ffde2116c78 [ 964.747467][T21104] [ 964.747494][T21104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 964.750293][T21017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.775915][T21109] [U] erofs [ 964.985964][T21109] [U] [ 964.988684][T21109] [U] [ 964.991434][T21109] [U] [ 965.004848][ T5851] Bluetooth: hci3: command tx timeout [ 965.013281][T21017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.077599][T21109] [U] [ 965.080395][T21109] [U] bh*=G>Yq:ef]`)(6FonDH/X1eU5Jtꃑ [ 965.125222][T21017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.210093][T21017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.223381][T21017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.257832][T21017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.289578][T21109] [U] U1oݥ'\Ī9d`+W}WVНKn"s#w' 6v[pS1n֗To(qju[VHDC~*Εx_?9>4$׎C [ 965.585039][T21109] [U] +q'a¦ [ 965.588865][T21109] [U] E~"U'-/ [N^.R2Z6?;!=0ZC?H˧1n [ 965.597756][T21109] [U] 2qPDI1}T,y{$W` [ 965.602493][T21109] [U] e [ 965.605794][T21109] [U] VgߛtEJZeG\,6 [ 965.647140][T21017] hsr_slave_0: entered promiscuous mode [ 965.691657][T21017] hsr_slave_1: entered promiscuous mode [ 965.771832][T21109] [U] X1Tq!@F<0,v%/CF [ 965.875240][T21109] [U] WHpHKvƑшރɅWG@ [ 965.945722][T21109] [U] CbP>n]]KAjb?x"6 [ 965.951210][T21109] [U] }B>;=27땰Qř͑)h 콫ګ""} [ 965.959041][T21109] [U] KduJ_mb [ 966.209592][T21017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 966.269677][T21109] [U] Ȱp,e*w2D+6u;m!u2Z]"P)PisnO(1j QGIHtsjOgx@))6NϦ)(,p [ 966.282454][T21017] Cannot create hsr debugfs directory [ 966.414194][T21132] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3498'. [ 966.433603][T21109] [U] +g';iNF`S3,5@Vr3t(xy݀}yB+DS4f [ 966.440787][T21109] [U] k(abH`AJeGjW2vg"jO,flPwS!c^o8EFhka[;Gt*aLm,4"uWR+֑F$^w|Cܟy*©gǰ09* ?#,W4y [ 966.680225][T21109] [U] kPk"SխȬɧ:vTx0Mм|XYb>PgõߕXZ=ihN(YՋv3x\6My8ʈ~G֌ky|ܭ_SX&܊yM6b!sc3uFڂnNt=\ [ 966.850245][T21141] dump_stack_lvl+0x16c/0x1f0 [ 966.850301][T21141] should_fail_ex+0x50a/0x650 [ 966.850359][T21141] _copy_from_iter+0x2a1/0x1560 [ 966.850395][T21141] ? trace_lock_acquire+0x14e/0x1f0 [ 966.850432][T21141] ? __alloc_skb+0x1fe/0x380 [ 966.850478][T21141] ? __pfx__copy_from_iter+0x10/0x10 [ 966.850509][T21141] ? __virt_addr_valid+0x1a4/0x590 [ 966.850558][T21141] ? __virt_addr_valid+0x5e/0x590 [ 966.850591][T21141] ? __phys_addr_symbol+0x30/0x80 [ 966.850631][T21141] ? __check_object_size+0x488/0x710 [ 966.850664][T21141] netlink_sendmsg+0x813/0xd70 [ 966.850710][T21141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.850763][T21141] ____sys_sendmsg+0xaaf/0xc90 [ 966.850795][T21141] ? copy_msghdr_from_user+0x10b/0x160 [ 966.850838][T21141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.850887][T21141] ___sys_sendmsg+0x135/0x1e0 [ 966.850932][T21141] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.850999][T21141] ? __pfx_lock_release+0x10/0x10 [ 966.851035][T21141] ? trace_lock_acquire+0x14e/0x1f0 [ 966.851077][T21141] ? __fget_files+0x206/0x3a0 [ 966.851125][T21141] __sys_sendmsg+0x16e/0x220 [ 966.851164][T21141] ? __pfx___sys_sendmsg+0x10/0x10 [ 966.851226][T21141] do_syscall_64+0xcd/0x250 [ 966.851265][T21141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.851326][T21141] RIP: 0033:0x7fc58498d169 [ 966.851347][T21141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.851374][T21141] RSP: 002b:00007fc585850038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.851399][T21141] RAX: ffffffffffffffda RBX: 00007fc584ba5fa0 RCX: 00007fc58498d169 [ 966.851417][T21141] RDX: 000000000000c000 RSI: 0000400000000000 RDI: 0000000000000003 [ 966.851433][T21141] RBP: 00007fc585850090 R08: 0000000000000000 R09: 0000000000000000 [ 966.851449][T21141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.851465][T21141] R13: 0000000000000000 R14: 00007fc584ba5fa0 R15: 00007ffde2116c78 [ 966.851498][T21141] [ 966.902338][T21109] [U] *t_b0HHV>~c [ 967.088798][ T5851] Bluetooth: hci3: command tx timeout [ 967.202191][T21109] [U] (63^> [ 967.205653][T21109] [U] &% [ 967.210301][T21109] [U] 1/2ٍ*$UmA\ jLKe-"XF!<+s"<[0Dgۄ<0rxJWJ}uV [ 967.221778][T21109] [U] e[Gvvld\M8 [ 967.244769][T21109] [U] 12EG'c*5 [ 967.249545][T21109] [U] ˁ3*DYbUd̰J [ 967.254238][T21109] [U] Vy [ 968.706878][T21184] dump_stack_lvl+0x16c/0x1f0 [ 968.706922][T21184] should_fail_ex+0x50a/0x650 [ 968.706967][T21184] ? fs_reclaim_acquire+0xae/0x150 [ 968.707006][T21184] ? tomoyo_encode2+0x100/0x3e0 [ 968.707044][T21184] should_failslab+0xc2/0x120 [ 968.707081][T21184] __kmalloc_noprof+0xcb/0x510 [ 968.707133][T21184] tomoyo_encode2+0x100/0x3e0 [ 968.707204][T21184] tomoyo_encode+0x29/0x50 [ 968.707242][T21184] tomoyo_realpath_from_path+0x19d/0x720 [ 968.707287][T21184] ? tomoyo_path_number_perm+0x235/0x590 [ 968.707327][T21184] tomoyo_path_number_perm+0x248/0x590 [ 968.707370][T21184] ? tomoyo_path_number_perm+0x235/0x590 [ 968.707406][T21184] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 968.707470][T21184] ? __pfx_lock_release+0x10/0x10 [ 968.707509][T21184] ? trace_lock_acquire+0x14e/0x1f0 [ 968.707545][T21184] ? lock_acquire+0x2f/0xb0 [ 968.707580][T21184] ? __fget_files+0x40/0x3a0 [ 968.707625][T21184] ? __fget_files+0x206/0x3a0 [ 968.707668][T21184] security_file_ioctl+0x9b/0x240 [ 968.707704][T21184] __x64_sys_ioctl+0xb7/0x200 [ 968.707740][T21184] do_syscall_64+0xcd/0x250 [ 968.707780][T21184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.707818][T21184] RIP: 0033:0x7fc58498d169 [ 968.707838][T21184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.707864][T21184] RSP: 002b:00007fc585850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.707889][T21184] RAX: ffffffffffffffda RBX: 00007fc584ba5fa0 RCX: 00007fc58498d169 [ 968.707906][T21184] RDX: 0000000000000038 RSI: 0000000040046201 RDI: 0000000000000003 [ 968.707922][T21184] RBP: 00007fc585850090 R08: 0000000000000000 R09: 0000000000000000 [ 968.707938][T21184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.707952][T21184] R13: 0000000000000000 R14: 00007fc584ba5fa0 R15: 00007ffde2116c78 [ 968.707985][T21184] [ 968.708003][T21184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 968.985253][T10294] team0 (unregistering): Port device team_slave_1 removed [ 969.096921][ T5851] Bluetooth: hci3: command tx timeout [ 969.161602][T10294] team0 (unregistering): Port device team_slave_0 removed [ 970.572848][T21017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 970.596208][T21017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 970.629367][T21017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 970.650938][T21017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 970.801986][T21191] Process accounting resumed [ 970.865328][T21017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.945438][T21017] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.037414][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.044635][T10297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.106019][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.113259][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.271113][T21017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 971.298113][T21017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 971.593503][T21017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.025014][T21237] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3518'. [ 972.056294][T21237] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3518'. [ 972.280873][T21017] veth0_vlan: entered promiscuous mode [ 972.321275][T21017] veth1_vlan: entered promiscuous mode [ 972.370844][T21017] veth0_macvtap: entered promiscuous mode [ 972.389084][T21017] veth1_macvtap: entered promiscuous mode [ 972.416157][T21017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.435589][T21017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.446571][T21017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.463710][T21017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.486802][T21249] cougar: G6 mapped to space [ 972.492398][T21017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.526496][T21017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.563552][T21249] ================================================================== [ 972.564382][T21017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.571723][T21249] BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 [ 972.571773][T21249] Read of size 8 at addr ffff88805e342000 by task syz.6.3521/21249 [ 972.571799][T21249] [ 972.571818][T21249] CPU: 0 UID: 0 PID: 21249 Comm: syz.6.3521 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 972.571861][T21249] Tainted: [U]=USER [ 972.571871][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 972.571889][T21249] Call Trace: [ 972.571899][T21249] [ 972.571912][T21249] dump_stack_lvl+0x116/0x1f0 [ 972.571956][T21249] print_report+0xc3/0x670 [ 972.571990][T21249] ? __virt_addr_valid+0x5e/0x590 [ 972.572024][T21249] ? __phys_addr+0xc6/0x150 [ 972.572059][T21249] kasan_report+0xd9/0x110 [ 972.572088][T21249] ? force_devcd_write+0x317/0x330 [ 972.572132][T21249] ? force_devcd_write+0x317/0x330 [ 972.572181][T21249] force_devcd_write+0x317/0x330 [ 972.572243][T21249] ? __pfx_force_devcd_write+0x10/0x10 [ 972.572289][T21249] ? __debugfs_file_get+0x1ff/0x850 [ 972.572335][T21249] ? __pfx___debugfs_file_get+0x10/0x10 [ 972.572380][T21249] ? rcu_is_watching+0x12/0xc0 [ 972.572417][T21249] ? trace_lock_acquire+0x14e/0x1f0 [ 972.572459][T21249] full_proxy_write+0x13c/0x200 [ 972.572505][T21249] ? __pfx_full_proxy_write+0x10/0x10 [ 972.572550][T21249] vfs_write+0x24c/0x1150 [ 972.572598][T21249] ? __fget_files+0x1fc/0x3a0 [ 972.572648][T21249] ? __pfx___mutex_lock+0x10/0x10 [ 972.572696][T21249] ? __pfx_vfs_write+0x10/0x10 [ 972.572747][T21249] ? __fget_files+0x206/0x3a0 [ 972.572802][T21249] ksys_write+0x12b/0x250 [ 972.572856][T21249] ? __pfx_ksys_write+0x10/0x10 [ 972.572910][T21249] do_syscall_64+0xcd/0x250 [ 972.572959][T21249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.573023][T21249] RIP: 0033:0x7f685178d169 [ 972.573047][T21249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.573099][T21249] RSP: 002b:00007f6852639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 972.573131][T21249] RAX: ffffffffffffffda RBX: 00007f68519a5fa0 RCX: 00007f685178d169 [ 972.573156][T21249] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 972.573177][T21249] RBP: 00007f685180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 972.573199][T21249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.573221][T21249] R13: 0000000000000000 R14: 00007f68519a5fa0 R15: 00007fff866f48f8 [ 972.573253][T21249] [ 972.573264][T21249] [ 972.612695][T21017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.615855][T21249] Allocated by task 14148: [ 972.615872][T21249] kasan_save_stack+0x33/0x60 [ 972.647035][T21017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.650912][T21249] kasan_save_track+0x14/0x30 [ 972.650958][T21249] __kasan_kmalloc+0xaa/0xb0 [ 972.650996][T21249] vhci_open+0x4c/0x430 [ 972.651029][T21249] misc_open+0x35a/0x420 [ 972.651054][T21249] chrdev_open+0x237/0x6a0 [ 972.674604][T21017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.676102][T21249] do_dentry_open+0x735/0x1c40 [ 972.676151][T21249] vfs_open+0x82/0x3f0 [ 972.676178][T21249] path_openat+0x1e88/0x2d80 [ 972.676220][T21249] do_filp_open+0x20c/0x470 [ 972.676262][T21249] do_sys_openat2+0x17a/0x1e0 [ 972.676293][T21249] __x64_sys_openat+0x175/0x210 [ 972.676324][T21249] do_syscall_64+0xcd/0x250 [ 972.676364][T21249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.676406][T21249] [ 972.676413][T21249] Freed by task 14148: [ 972.676427][T21249] kasan_save_stack+0x33/0x60 [ 972.676471][T21249] kasan_save_track+0x14/0x30 [ 972.676514][T21249] kasan_save_free_info+0x3b/0x60 [ 972.676550][T21249] __kasan_slab_free+0x51/0x70 [ 972.676605][T21249] kfree+0x2c4/0x4d0 [ 972.954251][T21249] vhci_release+0xbb/0xf0 [ 972.958783][T21249] __fput+0x3ff/0xb70 [ 972.962799][T21249] task_work_run+0x14e/0x250 [ 972.967406][T21249] do_exit+0xad8/0x2d70 [ 972.971567][T21249] do_group_exit+0xd3/0x2a0 [ 972.976106][T21249] __x64_sys_exit_group+0x3e/0x50 [ 972.981143][T21249] x64_sys_call+0x151f/0x1720 [ 972.985838][T21249] do_syscall_64+0xcd/0x250 [ 972.990360][T21249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.996282][T21249] [ 972.998608][T21249] The buggy address belongs to the object at ffff88805e342000 [ 972.998608][T21249] which belongs to the cache kmalloc-1k of size 1024 [ 973.012670][T21249] The buggy address is located 0 bytes inside of [ 973.012670][T21249] freed 1024-byte region [ffff88805e342000, ffff88805e342400) [ 973.026404][T21249] [ 973.028748][T21249] The buggy address belongs to the physical page: [ 973.035156][T21249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e340 [ 973.043923][T21249] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 973.052448][T21249] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 973.060008][T21249] page_type: f5(slab) [ 973.064014][T21249] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 973.072617][T21249] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 973.081221][T21249] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 973.089909][T21249] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 973.098596][T21249] head: 00fff00000000003 ffffea000178d001 ffffffffffffffff 0000000000000000 [ 973.107281][T21249] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 973.115954][T21249] page dumped because: kasan: bad access detected [ 973.122368][T21249] page_owner tracks the page as allocated [ 973.128087][T21249] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1154, tgid 1154 (kworker/u8:6), ts 87309322917, free_ts 30571856034 [ 973.147392][T21249] post_alloc_hook+0x181/0x1b0 [ 973.152201][T21249] get_page_from_freelist+0xfce/0x2f80 [ 973.157686][T21249] __alloc_frozen_pages_noprof+0x221/0x2470 [ 973.163621][T21249] alloc_pages_mpol+0x1fc/0x540 [ 973.168527][T21249] new_slab+0x23d/0x330 [ 973.172707][T21249] ___slab_alloc+0xc5d/0x1720 [ 973.177408][T21249] __slab_alloc.constprop.0+0x56/0xb0 [ 973.182898][T21249] __kmalloc_noprof+0x2ec/0x510 [ 973.187773][T21249] ___neigh_create+0x14ee/0x28e0 [ 973.192742][T21249] ip6_finish_output2+0x130c/0x20a0 [ 973.198015][T21249] ip6_finish_output+0x3f9/0x1360 [ 973.203087][T21249] ip6_output+0x1f8/0x540 [ 973.207451][T21249] ndisc_send_skb+0xa8c/0x1dc0 [ 973.212240][T21249] ndisc_send_rs+0x129/0x670 [ 973.216864][T21249] addrconf_dad_completed+0x4a1/0x1060 [ 973.222343][T21249] addrconf_dad_work+0xcf6/0x14e0 [ 973.227377][T21249] page last free pid 1 tgid 1 stack trace: [ 973.233186][T21249] free_frozen_pages+0x6db/0xfb0 [ 973.238183][T21249] free_contig_range+0x133/0x3f0 [ 973.243173][T21249] destroy_args+0x66f/0x830 [ 973.247690][T21249] debug_vm_pgtable+0x130f/0x2d60 [ 973.252728][T21249] do_one_initcall+0x128/0x700 [ 973.257508][T21249] kernel_init_freeable+0x5c7/0x900 [ 973.262724][T21249] kernel_init+0x1c/0x2b0 [ 973.267074][T21249] ret_from_fork+0x45/0x80 [ 973.271505][T21249] ret_from_fork_asm+0x1a/0x30 [ 973.276300][T21249] [ 973.278651][T21249] Memory state around the buggy address: [ 973.284286][T21249] ffff88805e341f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 973.292356][T21249] ffff88805e341f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 973.300432][T21249] >ffff88805e342000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 973.308503][T21249] ^ [ 973.312596][T21249] ffff88805e342080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 973.321188][T21249] ffff88805e342100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 973.329251][T21249] ================================================================== [ 973.370602][T21249] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 973.377854][T21249] CPU: 1 UID: 0 PID: 21249 Comm: syz.6.3521 Tainted: G U 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 973.390144][T21249] Tainted: [U]=USER [ 973.393969][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 973.404055][T21249] Call Trace: [ 973.407358][T21249] [ 973.410314][T21249] dump_stack_lvl+0x3d/0x1f0 [ 973.414962][T21249] panic+0x71d/0x800 [ 973.418904][T21249] ? __pfx_panic+0x10/0x10 [ 973.423624][T21249] ? preempt_schedule_thunk+0x1a/0x30 [ 973.429064][T21249] ? preempt_schedule_common+0x44/0xc0 [ 973.434580][T21249] check_panic_on_warn+0xab/0xb0 [ 973.439616][T21249] end_report+0x117/0x180 [ 973.444043][T21249] kasan_report+0xe9/0x110 [ 973.448506][T21249] ? force_devcd_write+0x317/0x330 [ 973.453690][T21249] ? force_devcd_write+0x317/0x330 [ 973.458860][T21249] force_devcd_write+0x317/0x330 [ 973.463836][T21249] ? __pfx_force_devcd_write+0x10/0x10 [ 973.469339][T21249] ? __debugfs_file_get+0x1ff/0x850 [ 973.474601][T21249] ? __pfx___debugfs_file_get+0x10/0x10 [ 973.480175][T21249] ? rcu_is_watching+0x12/0xc0 [ 973.484978][T21249] ? trace_lock_acquire+0x14e/0x1f0 [ 973.490216][T21249] full_proxy_write+0x13c/0x200 [ 973.495112][T21249] ? __pfx_full_proxy_write+0x10/0x10 [ 973.500521][T21249] vfs_write+0x24c/0x1150 [ 973.504930][T21249] ? __fget_files+0x1fc/0x3a0 [ 973.509656][T21249] ? __pfx___mutex_lock+0x10/0x10 [ 973.514726][T21249] ? __pfx_vfs_write+0x10/0x10 [ 973.519547][T21249] ? __fget_files+0x206/0x3a0 [ 973.524275][T21249] ksys_write+0x12b/0x250 [ 973.528655][T21249] ? __pfx_ksys_write+0x10/0x10 [ 973.533573][T21249] do_syscall_64+0xcd/0x250 [ 973.538102][T21249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.544019][T21249] RIP: 0033:0x7f685178d169 [ 973.548450][T21249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.568081][T21249] RSP: 002b:00007f6852639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 973.576515][T21249] RAX: ffffffffffffffda RBX: 00007f68519a5fa0 RCX: 00007f685178d169 [ 973.584525][T21249] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 973.592509][T21249] RBP: 00007f685180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 973.600499][T21249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.608486][T21249] R13: 0000000000000000 R14: 00007f68519a5fa0 R15: 00007fff866f48f8 [ 973.616489][T21249] [ 973.619785][T21249] Kernel Offset: disabled [ 973.624129][T21249] Rebooting in 86400 seconds..