last executing test programs: 23m16.215990109s ago: executing program 2 (id=1012): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) (async, rerun: 64) fanotify_init$auto(0x3, 0x2010000000000) (rerun: 64) sysfs$auto(0x2, 0x1e, 0x0) fsopen$auto(0x0, 0x1) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) read$auto(0xffffffffffffffff, &(0x7f0000000000)=',}`}($\x00', 0x9) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x0) (rerun: 64) 23m14.075674399s ago: executing program 2 (id=1017): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigaction$auto(0x8, &(0x7f0000000100)={&(0x7f0000000040)=&(0x7f0000000000)=0x5, 0x4, &(0x7f00000000c0)=&(0x7f0000000080)=0xa, {0x7a}}, &(0x7f0000000240)={&(0x7f0000000180)=&(0x7f0000000140)=0x4, 0x1000, &(0x7f0000000200)=&(0x7f00000001c0)=0x80, {0x7}}, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xfffffffffffffffe, 0x8, 0x7) madvise$auto(0x0, 0x200007, 0x19) mq_getsetattr$auto(r0, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20040000) 23m12.418444837s ago: executing program 2 (id=1022): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0xffffffffffffff66) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r3, 0x0, 0x800003, 0x270) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttyt5\x00', 0x20102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b3f30", 0x25) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) shmctl$auto_IPC_RMID(0x5, 0x0, &(0x7f0000000380)={{0x81, 0xffffffffffffffff, 0x0, 0x5, 0x6, 0x1, 0x1}, 0xfffffff7, 0x3, 0x3, 0x8, @inferred, @raw=0x7, 0x2, 0x0, &(0x7f0000000280)="aaf09bd80d0000000000", &(0x7f0000001680)="08749ff4df35b75598629815e764e8491468fdee9079bd455261f3c12af31e72dd791e875cd7b47f19b1f97db7ffc84a8b8cfb1a797248310467b7aeb0f74733b23e7571d2878ceecbaaf91127b7dad93fcf0ece1ab11340072b43d017cd7186e2edad8471949f0e47b7b643dbcb9db8a8fde30ae065eb190136a96660eb14e7c34717b80e50f2a82e82c81ed70773c0ca0369a3da197a95c26bd775695b59799231eb84f9279387a7012a8dd7ce9838d92ff0776d2ce8c68c1b6b5836c68da3627d29"}) syz_clone(0x13081000, &(0x7f0000000480)="e156179aa5e36c4e0634e39e136fd01fc8a7691975e5d98e5a6dfd9de04a746f8784a2cb41f87cbc99c214969bd719fdfb8ff7995a9392d7efd0cd6c61ee8b359b216d3c54cf010e28c4ce5b5a2e2ff26b7e87d0c074ee25eb54058206f590692343a305791c44e7853cb3e12054466a28b5b78368d9aaecb9edd8e660e9c48ab4918b3a5594f6c694e524c7f3ee2ffe6b37692cbb3777b5e8ef402fcc83925b16f2fb30fd7e23a3814b6a1851832a41a5461aef267b8f214fc218d62d4cd232bcaa65956e7f58c5701400fb303e7d76", 0xd0, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="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") msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, r6, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf25030000000800030000020000060007000080000008000300020000000a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=0x0, @ANYBLOB="bb4a4c8f53d1c96358d82b2cdd5f5da9ffb400affceca1b94fd6ff7f000000000000246dfa399b4cdf330b51b8e70fb2d59db11b3023f5097164f2f1cdc4b858a052ddbf6b54be620ac593824a32eca749fb4e9eafecbbde18550c2b589d362200"/115, @ANYRES32=0x0, @ANYBLOB="ae804daaa56c70e31e1c3a04b1ef004baa00bcbd79cea954b6720dce19125a1bc5c32e29f13507907b4d99ce4d94480e679e797d4969466a5d2bc90356e29d6c177806868bd1e6da97ed6c3097fd2214a93aed3b5f298ed888674806318cd7f651f723c7bb382e67fe1c29a0424746b22c1eea842130bb22fdbc9d45367d307c0ee7ae86e68fd66119bf91193d5dca047b614c1011d3d3ce69c399d8fff682d95bad23fd834921ba623ba8891bbdd25ac1a79afbbd1ce8195894020f8a53a6558339b93a"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) setrlimit$auto(0x1, &(0x7f00000001c0)={0x0, 0x7dfb7663}) socket(0x2, 0x1, 0x10100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd700300000000000000fb"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) 23m6.969986522s ago: executing program 2 (id=1036): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) keyctl$auto(0xa, 0x0, 0x2, 0x5, 0x8) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x7f) mmap$auto(0x0, 0x2020009, 0x8003, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000180)='/dev/media17\x00', 0x48000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x489, 0x400, 0x9}]}) r2 = epoll_create$auto(0x3a) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) link$auto(&(0x7f0000000940)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00', &(0x7f0000000b40)='./file0\x00') rename$auto(&(0x7f0000000680)=':,\x00', &(0x7f0000000480)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2DW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xea\xa5\xff \xec\xe8\xca\xbf\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\v\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4N\xbb\xc2\xf8\x9c\xd0+t\x87r\x02\x05\xdb\xe4\xde\xed\x02\x00\x00\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00M\x83\xdb\xaf\xc4\xf23l\xae\xc5\x1d\xc4\xb0\x06\xd06\x1dX\x03\xe3\x9e\xd3\xd96\xcf\xd9\xa3\xcb\xd6B\xc3\x0f#\xd2\x1a\xf9L\xf5\x87My\xce\x19*\xde\x8d+#\x13\x15\xd3Y\x98\xe1\xc3@\x0e\x9c\xc2\xf8\b\xaf\x89\xe5\x00\x89-pWD\xb5&\xc9\x8e\x8d,\xb7}1\x84U\x18y\xa90\xf5\x80\x981U\x17\x14]\xc56j\xe7\x0e\xecBr\xa9]\"\xd36^m\x12\xb6\xbc\x80\xa4h{\xde\xcf\xf7d\x87rl\x11\xf7\x15\xcb~\xb9\x01\x0e\xd7O_\x91\xe1\xead\xee\xed]/p\xd6\xff\x17\xe4\aV\"I\xca\x90\xc7i\'\xa3R\x81\xf1}4\xbeU\x00\xa4\x1d\xea!Z\xd4|\xbe\x987\n!\x9b?\xb9l_\xd8$av\xfe%\xa2\xda\x82\x14\xc311;\xa4ob\x87\xdbY\xe2\x00') 23m2.574503287s ago: executing program 2 (id=1038): close_range$auto(0x2, 0x8, 0x0) r0 = memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xfffffffffffffff2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x20026bd}, 0x3) close_range$auto(0x2, 0xa, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/ari_enabled\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/64, 0x40) r3 = open(0x0, 0xa22c0, 0x155) keyctl$auto(0xa, 0x1, 0x2, 0x5, 0x3) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) sendmsg$auto_NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x1560, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS={0x1e3, 0x11, 0x0, 0x1, [@generic="ef711abbaabb052c9fc235a1c62fb0ac85bee71a7352504b3484a2c1d0b30c0bb867098d8dc5fdd79693fdbc4fb58cbb064f1f36b94213aeb1200fa39d070be88f1c363e80556abce122ce1d9b68e15fd18d30e098269c35a6800bb9584d3b461649d310db4a531dd9975c694c804585dbbc9d1bffa008f3a727201426bd80ae0e205c22ccf47eea2f9a2938d1b2e00368e2d38b4a32a6d27ee924a5d068aab94b022da6f7edc25fde63356af70d3790fe629a5803c8910263503008402c42b4e15f41b9", @generic="387020e24f76ffbe58ceedda9fa7da2297d4b274538d5ebe84af4dfc3894028ecff3a04485647ba3396f0c74809a2361df9c71b02ece31cb65308e76c6a1e671fc6a28fe08dd28b0c9b7d6f8c4c43419c2890b06cf70e5195325c6148e256ed68457ebb19381dfee2efdd973118ea8b27b1d718a8efe3b03ddfd1a88a3beb6943df3ea6caa8f13b1f9142ea3628b979a4efebc", @generic="76bdcc98fb951f3cfe612c0ce4c0775a118851c51f45dceb3fcff933f3373dc3850779b8147212d571b0cbf33ab49b40296e96ed17bc3c995a23c795d5a5519ae8f666da85f1ed62426e17b33271fb420d1ca900d7abb6c002f0b1047aa079d36449b2636e268e069317a9ed360d3078aadb40fe59e2fa38", @nested={0x8, 0x21, 0x0, 0x1, [@nested={0x4, 0x149}]}, @typed={0x8, 0x148, 0x0, 0x0, @str='\\:/\x00'}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_MBSSID_ELEMS={0x1347, 0x133, 0x0, 0x1, [@generic="2fa1a37abf2cc3971be6b6d812c795c72ba2e358ef178bd8a00e3927841400b8677bb579045057ca1f522d519058bb31b8a6dd71be5f57bf89342bded65c577cfc2fd8a06b2eea4e1d91c43a10345dfdef2823438a801609728d4995b1afa6912a661d41b9ceacd3a1e816668c31af87f250410d", @generic="2c55e81f61ec03de52a24c12feb324563c92031604e964f241ba7b47c7f40b668a13fe771498bfebca487d5432f3d3e887001320ca4861e3ecfa19ea246e008a252f0e87bfd00e4a33edf8", @generic="5b7cafeeb6cb269e09f692393573c16797ae0fe219c86ba83b98a11fbc231a61183ef3a5377c236dfef73e3128fb312aed9d663d1fcf21e46d812598fabe6a6045d5e142592acc5dbe943374eefa71679acc6a713e7d8a8a861a2325ea2693a5", @nested={0x135, 0x123, 0x0, 0x1, [@generic="b5258678d0f2ed8032c9", @generic="8a62830b0dff3425f9a6fb319606d46535a5adf9907763f3ae8336544e451703cee3087b49099e0f3b774811a1816243277019951a1a2de03b7b536433d817bfaec3f62d3e27517b09e2e926124c58ad6d665345262c5786e2d42d5215c120246ab87848e0c3892aa288742b84f9593646dbd1cf195138afd3c6d00c54bd809ea7720192a239e1", @typed={0x8f, 0x28, 0x0, 0x0, @binary="5d5c8f47011d971509127d60fb445b907b2f9b4d465884105150317b9d1936dbae3b6623f10dcffef696e9819e0d78caa37adb5ea0507ca4fa55c9bd57f29efad0733bbdc343400ec2395d0b8a1f45e9a3cd73bd942d493f605efc947e5b3d2c8df449112ba1a4c53d1f38a7b90eec8acf67d1086ae8ed5fbfac146f42a8ad3f93eb8410299b37ebeb0238"}, @typed={0x8, 0xe9, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xb2}, @typed={0x4, 0xf9}]}, @nested={0xec, 0xa0, 0x0, 0x1, [@nested={0x4, 0xb8}, @generic="3ef4b15517a6a474996863491e1e1393dbbbd261da929d30d20adc339fea61acf81289e8fe0b50bcdd3798856d0891f7b30e5c7b840e6848b641c77ed7d74cd7705a436b585a2a19201767c5ee85160cc3f79058ace3970fc865c93b89e37e58026e59f7da95cf11176032e282fa72e38d9f4a5f2a75abb281149acca2268bf22a5d9b1840f22fc48d5ffc1580b27e1e178eda54433c2b5928c9a4cf17", @nested={0x4, 0x7c}, @generic="a5a6b04d1eb3cb99fcf6084f2b7f8fcdf9ddc4ce453a5155e455fe7d794515ce96cb70f6bd83d0ba905288a56c4d12c599ed30ff0419965b0657afb551de28de385f4f"]}, @generic="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"]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfffffffc}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x84b}]}, 0x1560}, 0x1, 0x0, 0x0, 0xc0e0}, 0x8000094) 23m0.724626341s ago: executing program 2 (id=1042): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x0, 0x0) syslog$auto(0x3, 0x0, 0x5) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r2, 0x4008af24, r1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x25, 0x5, 0x6) openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0xd7, 0x4, 0x80}, 0xff) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 22m45.446065853s ago: executing program 32 (id=1042): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x0, 0x0) syslog$auto(0x3, 0x0, 0x5) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r2, 0x4008af24, r1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x25, 0x5, 0x6) openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0xd7, 0x4, 0x80}, 0xff) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 6m50.722446197s ago: executing program 3 (id=4159): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(0x0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110b27f27200fbdbdf250c00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m50.210784829s ago: executing program 3 (id=4160): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000040), 0x0) r1 = socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) mmap$auto(0x2, 0x202000d, 0x2, 0xfa, r0, 0xaa) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250200000008000100090000000000078000225fe08000104f00", @ANYRES32=r1, @ANYBLOB="0000288000005900", @ANYRES32=r2, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x24008044}, 0x2000c800) madvise$auto(0x0, 0x2000040080000004, 0xe) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0x10000000000008df, 0x9b74, 0x2, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x280000000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) shmdt$auto(0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r10 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x10500, 0x0) ioctl$auto_BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000000240)={0x6, 0x787f, {0x7ff, @usage=0xffffffff7fffffff, 0x6, 0xda2, 0x7ff, 0x8, 0xcf, 0x1c, 0x0, @btrfs_balance_args_9_1={0x1e2c, 0xc}, 0x57d2, 0x5b06}, {0x5, @usage=0x1, 0x3, 0x100000000, 0x0, 0x8f, 0x3, 0x4, 0x8, @btrfs_balance_args_9_1={0x0, 0x1}, 0x1700a5d3, 0x6}, {0x5, @btrfs_balance_args_1_1={0x9, 0x400}, 0x5, 0x6, 0x1, 0xc, 0xa, 0x1, 0x917, @limit=0x80000001, 0x7, 0x8001}, {0x4f, 0x2, 0xffffffffffffffff}}) writev$auto(r9, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 6m45.177162759s ago: executing program 3 (id=4169): r0 = prctl$auto_PR_SET_MM_BRK(0x8, 0x7, 0x0, 0xeb, 0x8000) read$auto_event_trigger_fops_trace(r0, &(0x7f0000000000)=""/142, 0x8e) (async) capget$auto(&(0x7f00000000c0)={0x10, 0x0}, &(0x7f0000000100)={0x100, 0x3, 0x101}) fcntl$auto_F_SETOWN(r0, 0x8, r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) (async) lstat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x6, 0x2, 0x0, 0x6, 0xee01, 0x0, 0x0, 0x10001, 0x3, 0x7, 0x5, 0x48000, 0x679, 0x6, 0x9, 0x10001, 0x200}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002800)={&(0x7f00000002c0)={0x2528, r2, 0x401, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12ec, 0x3, 0x0, 0x1, [@nested={0x1080, 0xd4, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x92, 0x0, 0x0, @uid=0xee00}, @generic="534dbb83621661e59e944fc52e75d01f8188a6ced9bae9cdebb3ee9a06725bc6d1693ce4da8d0b8721a02523f48655eeea62e742e69844160444e6b04c85c543bd99b00772b33b8f12fb637d18e85a041240b7d8", @generic="65f3c80449a99f48a3a925bea76109cffc2ecb9d1b21ea8f239e2bee9feb3c048c3cfc108fc434422af8d5c39f19e0142decb147334434497502f6663ef6a1097d6659a0901f55dddaf34f0f7ff2b69bd8f2c12baea8f421af8b055b4193edbb259ded4d59167e9544ae43742336db780105f5d25ff40ab5ad7efbe4a0198b5efa89144309644b4850abbafab7199fa11101bcbed74ef5358618fc39098112714ba05eb5bbb74671b7cabe44231f39ceecc68b92aaea458f197e594f7d4cb4a59834e205aa1e20a05c0925fb71200935f04b244831561a36b877a6ae1fa957d77e83c2c28b7448bf04da064eb7c4cea857116ea54ce01075a3a709fe608c3f6cf5c3ad982c24e486088ccff10d5bfee70b3b19404cba80d2f822e51933253c339a849af9033330103958d3be576aad8344b936033ee43e89a63ddf2b83c9da58e1985328aff864669dacb11e3084e3b5c0067743fa470082ea17f3520109b96c8420a1b642eaeb8822a4d977a9456cd2e9b044506eb20b4092eb0507d2ff0ea4bcdb93b4c7754fbaa0efd408202778d23891de74a7a4fbbd6a74f3da9bd8dad68f3e588bde180fdf7e660ecc3666a7f5727376fda6872dabafd60f03103af61fc7e99b77c1e02d22cab5a8fe8c4dcd14a86f94120b8210fb76996305c81f57114b909a705109206b5f0783ab7019671eab61820407e430c627652ae44608412b7372ff21a885f864c9f0638d6177ee250b8a1372c7a2f5030791329ecac745cbd2bf2ab346bf1546a3615ec9f3c131c3543aa9bded8a881ffa9c4015a5efaec38789a0e650c3aa814740eee79d36056a6addfbd14197526878de638a51a36648a9880ac0ec9990a42b0fd69ab30ad8b69a50bdbdd82c7a0f264d927862e64af90fe6c0d314a3f4353968aea421b3143b916e23c6f9fbbec4bd975512fec130f63992326f94fc82d5b1ba8473cc5173b3c8516a0734d23abe6b84c24f5f2421cc9260c0d014251d715af24a3239ecb2f824bcbcfa6bcc96dba1c69a481718acc79dbcb29e7657ca60a630931a1e68c06912074f72be473fa6835c418c2d838bb2bf09163dbc4d56e890e5aa4d037fd72ef1ff04aa0bee1412e3223fe0d9161c865aed90bd90e743520d2d8ca3bed4fd3516f6085c0a61f5cdbe490f7d724a98af4617fd353136498df901eaf7da739806d4f62eecc761394d29503f4e73dda3fb2d177628f6251e5bf548cf71e54f8a7284c2c9577a6d6b88c610290ac0f03e733a3549c1f0093db367f90ceae310698eb245eaffb8532c9a731893326efb0bf6d4e496d2bf5e625c706eb68697e277f1fcb0d52cb7947e6ceda40c867c86bef7d36a08acf1205b5c6245fc6b95ccf60b7cd6b02f822065b05c5ff91c3148906ed4b871836fbb8736ca75cfba7090eae5597c305a42711435d5990b2ff2f93f50a86a922d8ace27be0d922878f3d478fd253507bdc5e9f905bea0e8ba87fa9f9e188d76c68a3911dfc78b20cc2ea72ac5f5efff9b40a0e2b9ec703255c315e548c6b1675a652acd55d541f58097da694310c91c041962fc70f323e530001b9f0c78d417d771c0c6023d8cdda0c66203ae85408a3dcbeb2825ed27e69a392a1b5d32ae7610168fb40fea24da1cccf1b392aee4f2374b7928384fa80fb1da92d3f118522c3ac362d573db61ff3169746576d3d0b6d86a12c7db3ad4f90729fe2a207a0770c2c64738aa7bc43fc091553c59489127e0d96c2f81a9f5bd5f51dfc505f23daac5d277569e190b041acf458422ddf77f6b7f2e8044ce2088ce7ca18624778cebc456c447c6ef590cd88166ac08a11272c700c58c9243cfe2889c15a00a5de6061be3e25a53f708d222a739f2c45bd488e2932014b2a562d438e4da6fc781a88d76f20b0189ea808a50bd837ff750152326a2a5d151b117ce2203228c284d2707d8526f4a8d569d71e9b0d749910b7d7e22c686d3a9257d6cb7b7e3e85d9b15fe1b250f3d355279cba46f366032543b0b80710c5d7259f9a24d6764a1faaaab19246e95062239399fe9257298a8e7463ff39bfcb0fec31ab0730e0c6f938e49f9acfd886ebc230a46de57b370afe3445eeb3032d0ffbaa5ce00b1cfc8778e915217ea171f977bb5e0a16fbb6e784bdc3d6319fe12c9b7ad3d7216db3b580674ca3fc9e18af0b384a620b0f49382d44db9a259d531356bfce0895f3f5d7f72aabf63e75b21efd73f3b775493211de10e15893b4893b7b2f025036a38a8c67ccd57f79d1a57de28751c45c8cfc0c944b202cfe80740d722f6af7d49fcd42762e343aef4c963dee3d98fc1f77b20b25e54e5ccc24b74092d3e57f8e44f75611e8243095bd7659b34464a9b5fe2a8de4c9bb13ebc08c82aa685cf8eba557f26e3bb9570ab3f6133b44e7a3a27d1a8b2c4c6b032866a06f9461f6a9f05c47f107cfe1eb1b461ffed8aa1bb76d512bbf5d31887c59726ae5ce30aa57f097211a35e5954757ae441ba2494c19af16462765b81c99e90124f6f3f8a66ba3343ac86cb771600c6ee71ed2bb6dea7e77c520f29bc4c345290bcc5c5ac8ccf1eda150e89451080ea917fadf9aabd71de9c98a5119a8a99cf16ddcae5959f8d561a99135b8cd4e70091e7acc3b60bf549ef5a85befc39d6261d5f26ffb04399e64ef437562f77599430ce2f312fce30e3f605753ad5aa4473815ca6aec6612cd697867e986470c8af1d9e6c12ff61ff32d613d135a764d62a708a0bfd087e2f76cfaa2986d912a449bd91b3aa31d58c12394dcf3b07e237167c90124a82707e5cb4faf5d9cb9f02a2d1f85c96b7091b764f568a8dfb21e437870b246bf759725abe6f570ad134acd4d55c01d5afae15b669a565de69dac681d8569ab4c6e129ff925f0d2174a53734973489a9de748b2dcbeb93cd0a6bb2fd76ed3507db29edb4560fe059236949bdc14de0d00b8be3838f8af852e83040b2ba903a52c8aa6e41a713273763b274b0efad5880c5360e48c492e4ef98efede6125b9e59012921d0854860f9883b02b7b00e12aaa5d0f38e7ad1c8850fd2d02fc665392b11b82e704176771ff93891a0957033e6e93db6bff7b5688daeeeab1143d4515c3703cb37da9d909e8d9e02f1824fb2801a4d47ff3698eedb89a9faac8994b4aa5aae1f89e661b0b27eb6d701795b73ecda4467fa7d66584abf98614e17da269beeb0ed6aecb0750dd1057dbc9d223f6ab593b854029cbcf2bc10f0b49dff0286a53d696a3690882173da8605e30b0ae92e0009faa74424d4d2a72ba23a907ba8137e7950acdc6892ebbc2014fc6477d7c252ffff6f4be3f9e0e8006f6c1d30ea758b94569532e852a65dab24f474b4cf14629cd3a31d6ea801014387ff5fede3e67f6a52f54b5d5c0698b5dc5800865537a8109e2294711d46bd8e937476d4be3775efcea3885b0e9590bd62af735fe4e88397ca09e78712aa9308a87d5f55c9867694d0580a10f46196ee3df8ef9807682c4dbb91605c8cd763c52050a84e62c3b33495f36eee1e53e23e2b7ab9c5e3788a92158e5c9b855cc32a585d2009394e061aff80fbffbdbb87487eed83ec25fcede2c47ebde61c72a82fed46a91f48e9e50987fe2b239605615aad4550aa335c3150a3b705cc9003abf00295f5568d5aac5dbdf59d1ef073d449fd9b972732b12ff5c8a6376964b4d0f3a71f21cf6f3035acbd6ec656b52d8cbcd6cb6ef3e0998a41fefbfa11512c6cdf837b8f287bb13d622f32b03fe34d3935dabc8908cb5772ac353d891867c7b9962cc98d07617f245c67ad03ed94868f7b4fe05446df4a1af97e589bda433fd54277f2eac5278e57c43edd301eeac41f43f856d6df1a0094bf59623dfaa9e44e7c0198974999318afcd203f25ae4c8da1b752e6253f433b641ae67bcf3fef023120490b3e5d79ca6fbd38c067b95beee63bfc99107f27704c612b5e988aeac66988b533ee02329c825bd620f5b73bb7499b13cf829399630e44020ec07ac40000de342fafa04e27cbb360467b84b47daac695e09e230d1c2a6db244ee8dd88d52261d7c13216e39f99e1791b443a69318d91ca5f8c8502e98aae5a2bb913c51d4159d6cef5981e02f5778e841c842bb271c28f8678577cba3809735784118a79dc706b37311c4ad1c25911a61b0423e8cd93904165cab47f24ccb290fccd7c87ffe76c113fbc6bde718eb140ee80a1eafa37eca7b9da892b2a675c4cd920ec08a7435743b9c69a6ae7b4a4bf990042992ad4021eed814241281f667410a0a2566d90ec02218a692284e537c2ca898eae85c178f097ce5a347104ba13192628c697e01f1e5a8d690bd51f1dc5ddea449ba4917beb4648507683b71ebe9c33d78094e95a8b5bededcac6d7ae0f0a5a8f7f2b889d08dd738f74924a92a0ec150e7133098a67433036ecc127d7240ba365d0530fe4c3e72f04c663189f6037b6e3991fd33aeaa7756b0c7088da7dc2bf741fcb87aa800251ca6ea5ac7d5b151f301bb506b8e513d204da782da79247f8e6d4767708926ae34b3f9a69907b0acfd5178fedb460b09600613c939309452a5a395ecb565ff2d847acdc6d88c2911bed816e75c615236a17eb5a5c189b2f265922e263cd600f113847a0243dbd2761b9d8c6f46209806da69ea8d522540997301da54ee532e26ba563a1dd801106095fd12578ac3e1726251e734e35d9fede466cbfeeb6ff395a212864375c176fc139c09c3d29c48577d34c4986aa79a3640df3f6c34cad7f8ea42f792d94a20dfb7ea184bc3c83e07a1a8a471e510e35aa037131fc9b915aba34fdfe771060d2b80afe5ca74ec5e711f72984c528fad3f22a7c4a5ccb63233da54f4c9175e22903bf82030e81a585e4cd85a5aa1335a65cfadc85130f9a15e595aab69c7b9070d0cd08354e383ba94d82e5201484d4b6730162a85a4d41e6b37f8a1097be4d1d0b489c9334994bf710db3c246bf1a447bdce5e44fefc3f6ca0254ff5ceb49dadbaa036934d9afe7d59e3fba0b1ca59c24b49876b5635c7d435ecca6b5b661f22861f3005126024ee4d4a16f1531d6f92a8f4590812206518a0514f86cf9a0ef9ebe6edb0173170c5d4c509dc09f7f617b15b64949f5b1745c7b8fb6caffbbb1a45bb7b83e2c56e37e9b12914b0f05e2b9ca90363fcacd3513aaf8b8f01326a355e719b52501af51ec3c60a1c1c3dee4a1653af90d793940e37877be1a283c42dab73bf66a5e7275111086b27fba0803db982ea0aa0175f1914595fd0374a004ab4ce2de60f7b52cb4cd157d28dc08733d5a021181a11206aad13e6febf74bc8b990c2036e344f4b651bff012ea14810c912a13233eb59b9cc17e81e8a2c607c477d98365fce30f12707a9d7d9d60fb96938e17ad9be004e2c9987e64302dd5289863d87520b7e55dd496285dfe65ac4a7cbf7efb5b7152fd36fa27837a15af8a7f2962cfcf2743cf308cacac9f6bc935530ec8507d784182fe1b652d1ac61f57d1892158f7a9dc84ec6661d18f0404534a6261ca6815a8dadd4c530695c1f7688b6dcf7c0f3ac3fa765922dac5da31487bcb3189084f545040ec2b427933acaf84d7f0ecba9b180ce184d1018b1c26293b9e6982b35266b6f5408198bb9dad7cbb5b06a74624f7d9349fa07d214680aa4e26ff2a81a0d50d0049d0cee3ee923f3ed3fdc967dff93162d797ab26ba48afb616577c024767325ba00c8188cd3e84cb142e22a4e33b806a47242cfcd76c63bf545f977597f9f4a71b3039f82dd1cb649cc465e6d78a5164aeb993e905e448", @nested={0x4, 0xad}, @nested={0x4, 0xdc}, @nested={0x4, 0x110}]}, @nested={0x267, 0xd0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @fd=r0}, @generic="a059f5788dbf7d1170b6d1bc38af268b727a68732a8c04f625f33da62304549f5ce576e19c7553644cc6dff174d4d41c2e687b48bb7915281549c9343a6f4b5d0ae86c8f48d1e1dfc5ddf080fd47366ce4b6214c48218a50671e5532891ac94a26bebf03531a753289bf2f", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@broadcast}, @generic="0bd138a992ed64d45cfced30b9deb83a2feae8f422757cfc642998793bc7c80721090af706b61ecf3a03fd50d9c9175b76fc222132ed3b6e12c86346c6feeebefa8061a66c86b5df77064137654bad7907a5907d544b31ef77b718ee58cd7191d49d5814e1a63c916830432ae25a5ac1597ce4d546db436a44db21045e92fd1fdb5cd3ac12ed363df7ef5ebe33e45eec44cd9c21ce79ce162f731d52a79914d022e4f9a34bf076c3e57d893af04c77b8bbd38ed3c9bfb44609e04583f0f9727f5d3e09272bf7b9f9c0fcfc13447b77e3fb59c61de62c4063382455cd4526af8085019a80ce46808961f0fc68", @typed={0x8, 0xa6, 0x0, 0x0, @uid=r3}, @generic="694f1dbe7038a40efcf6d33450554693acc83336dfea738f654efa5e122124280fc8e174a3b1ad7206865798c6e0a329a573b8023ed0c8208fccf64dad273749d7531d148141c36dec7747f12816c61ddaac9077cc0cfab14e59301ca49b8bbc9ea30b6a4ee062ac0fdfedd7193fe6b1371f80549dc43a037374", @generic="c2e0b0cc0ea476b696620d00926f5685c46776dca4cd22b536c68417e3e72fab8d0dfb37b9aa1665e6215bda6148ef4820df3a2ed7d744917b62b36b9d0ec951fd026025952efab6c2dd484f33864f6b148ba5ec1222ef5153ceaca50bdd8b8cc2f8d9b3d84051da1a47ac0fefe99e6f19ab841210b0", @nested={0x4, 0x7c}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1226, 0x3, 0x0, 0x1, [@nested={0x116c, 0x70, 0x0, 0x1, [@typed={0x2a, 0x11a, 0x0, 0x0, @binary="be1c4478bc10a82c5ccf58253a576c7003680a28da46de03e472f48a778962fd53bae8129065"}, @typed={0x8, 0x67, 0x0, 0x0, @pid=r1}, @generic="b9a70e1b667fed82a66b114ec9234890ba64c723df2dcd74b87d32f82f0c3bae79c2bd07d1396abbee86c2f5a1645c76a222cc0092502f8f23d5cee70a0594d475ca466cecd73df2a692e144f2d3413f08de5f98e706", @typed={0x8, 0x61, 0x0, 0x0, @pid=r1}, @generic="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", @nested={0x4, 0xd6}, @typed={0xc, 0x48, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x3}, @generic="91f3d0cdbb600c1131414f689671bc72ecfb440bf17ce36b7eb6dfd860e5ce93abd1577e723dfa42f36a5302ce04023d13772c85620f3a294d22aa15a48fcef89291d851349e2fa3ff6fc790979120d96db711d9899f3024c39106be49abc7b80315bf99dcd0de0ff3b62b7281fea4cd47d471155370a2221e2e918e7abc12232e7c0114b506ee28510c5d9d8fc27e0d089409339672010556bb8e17b6a0103cc8742e7179518304fe926e64667cb7b6ef874d0aa6e6611d054f1b979880"]}, @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@empty}, @nested={0x14, 0x7b, 0x0, 0x1, [@typed={0x5, 0x128, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2f, 0x0, 0x0, @pid=r1}]}, @generic="d00436ffe77d4b0a6570b52b5c20aba3c91995dc6ca055ee2e3e6a822c8768a26fa13d103bd4f3afdcbca892fd474975c9686cb0a2db795999687eca2536c322f6e27fc5c7cdf117d06a855250a2f8422393fe2b954cc60bf1bd9da171680aa5b2a22d685c5857c66dbb3b2586042ccd50b38b9607a98a433d011dd0430dd85944c881e74fc04af8976443cc0c8b0ac1e2a34d856a8bc0b11a04"]}]}, 0x2528}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async) capset$auto(&(0x7f0000002880)={0x6, r1}, &(0x7f00000028c0)={0xc2b, 0x0, 0x3}) (async) fstatfs$auto(r0, &(0x7f0000002900)={0xfffffffffffffffc, 0xfffffffffffffffc, 0x6, 0xa86, 0x13, 0x655, 0xfffffffffffffffe, {[0xb9, 0x80]}, 0x7fffffff, 0xffffffff, 0x81, [0x4, 0xfffffffffffffffd, 0x87, 0x1ded]}) (async) io_submit$auto(0x9, 0x8, &(0x7f00000029c0)=&(0x7f0000002980)={0x72a, 0x6, 0x8, 0x3, 0xd1c, r0, 0x24, 0x6, 0x5, 0x0, 0xc, r0}) r6 = inotify_init1$auto(0x1d6) r7 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000002a40), r6) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(r5, &(0x7f0000002b40)={&(0x7f0000002a00), 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x5c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, "6c44cad62226f574a3339df3df1b90242875c60fd37e19e882ee53dc485d71d6f1b1603ecc3d0f1c9fe565a0b7bd9e929dffe97f271944545baee248fc9a4ad789dbfed9b0a7"}, 0x5c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x48c0) (async) r8 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000002bc0), r0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, r8, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200041c5}, 0x4010) (async) ioctl$auto_SNDRV_PCM_IOCTL_LINK2(r4, 0x40044160, &(0x7f0000002cc0)=0x5) (async) r9 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000002d00), 0x18100, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000002d40)=@bpf_attr_7={@start_id=0xa, 0x2, 0x1, r9}, 0x2) setsockopt$auto_SO_RCVBUFFORCE(r9, 0x3, 0x21, &(0x7f0000002e00)='%)-\x00', 0x6) (async) sendmmsg$auto(r10, &(0x7f0000002fc0)={{&(0x7f0000002e40)="8735c4266f16330eb4e68217930da3bb30defbb335a1dc22d1d8622b67e84cd3513840254832fe0ab442567103294225aba2c315a4a4f166ad9681621758d3b62b3768ac4dcd7bd9895b26b7f4bfbc94472b03f9616ad32697ce6c732d44bad5970906dce9ba67e04d2f4170923f9ab512a5be26d7d77d9255b54adfbb37d7410705dd4f", 0x6, &(0x7f0000002f40)={&(0x7f0000002f00)="bf5489d9cdd76fcd", 0x8}, 0x0, &(0x7f0000002f80), 0x8001, 0x4}, 0x80000000}, 0xffff0000, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003040)={'dvmrp0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000003140)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x58, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000031c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x2c, r13, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3ff}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4011) (async) rename$auto(&(0x7f00000032c0)='./file0\x00', &(0x7f0000003300)='./file0\x00') (async) getsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x81, 0x43, &(0x7f0000003340)='\x00', &(0x7f0000003380)=0x1) (async) mbind$auto(0xffffffffffffbd2e, 0x80000000, 0x200, &(0x7f00000033c0)=0xee06, 0x1, 0x1) r14 = fspick$auto(0xffffffffffffff9c, &(0x7f0000003400)='./file0\x00', 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r14, 0xae03, 0x0) 6m44.49578385s ago: executing program 3 (id=4170): getsockopt$auto(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/virtio_blk/parameters/poll_queues\x00', 0x181702, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, 0x0, 0x3000000) ioctl$auto_SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000100)="898b886ed39ac77cbaa7718b12166119bc19b7a72be222e8f57fc0c73af376bd29bcb5517b93536d6a70f684b8d8dfc30508051891b19d67e5e5732b6d0df8e9ef421e1ba78372a7688e3688b563eaa72e02e30ab8fa") statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb6, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) 6m43.68617302s ago: executing program 3 (id=4172): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.avg_queue_size\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x25, 0x4, 0x0) readv$auto(r2, &(0x7f0000000300)={&(0x7f0000000240)="be9c1a99e8820e6c805759fa5e2ab70b75ae78e9568a78d73ad21c13ee8f6c21e06a53f70ad68f3b825b07b4b296d05e6fdace0011cb7ebc7924075db28ae12056c8d25e0fa0b1ecd4702c62ad35a3b644bbfc3b4697e99b1eb3118f03a5f875c66ae454fe2deb8a146c2d01e206af993a5dfd6ff50a7895484884f067cf877f1cc0382a87811bc246300242710794fe99b11dee897845da556c11186c4ca1f2748c9286483e6c6bdceb750b5dff4a9a7de9cf85a890683539bb399ca03b1db2", 0x1}, 0x3) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x68, 0xd, 0x80}, 0x7e, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r3, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r6, r5, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) fsopen$auto(&(0x7f0000000080)='![,-&,\x00', 0x80000001) madvise$auto(0x8000000000000000, 0xffffffffffff0005, 0x5) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) 6m42.323130566s ago: executing program 3 (id=4177): mmap$auto(0x0, 0x400409, 0x6, 0x9b72, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000429bd500002dcdd2503000000040008000400080032d5b2831fca8c7b472c393ddf60818368b647c8b82c146f2a320a8cda68da58e4b543248f64c8c36c2e35b40ba5ded56890b3d9f92f164336"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0x0, 0x9, 0x9) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(r0, &(0x7f00000000c0)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x2b, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r4, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r6) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010025bdb4abc924b441260170fe77820cae14f0df29391fe34b7190e0ec0800cbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) write$auto(0x3, 0x0, 0x4) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="7beedbccd1232106bf71550511c4204dce841d66859709d02bdae4f6e0337ff5116ae4b34c23eb2ccbefb2b19c08598e8be1af5b05af0e", @ANYRES16=r3, @ANYBLOB="01002dfd7000fedbdf251c0000003c00018014000200626174616476300000000000000000000800030006000000080003000d0000001400020074756e6c3000"/74], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 6m27.007780713s ago: executing program 33 (id=4177): mmap$auto(0x0, 0x400409, 0x6, 0x9b72, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000429bd500002dcdd2503000000040008000400080032d5b2831fca8c7b472c393ddf60818368b647c8b82c146f2a320a8cda68da58e4b543248f64c8c36c2e35b40ba5ded56890b3d9f92f164336"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0x0, 0x9, 0x9) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(r0, &(0x7f00000000c0)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x2b, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r4, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r6) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010025bdb4abc924b441260170fe77820cae14f0df29391fe34b7190e0ec0800cbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) write$auto(0x3, 0x0, 0x4) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="7beedbccd1232106bf71550511c4204dce841d66859709d02bdae4f6e0337ff5116ae4b34c23eb2ccbefb2b19c08598e8be1af5b05af0e", @ANYRES16=r3, @ANYBLOB="01002dfd7000fedbdf251c0000003c00018014000200626174616476300000000000000000000800030006000000080003000d0000001400020074756e6c3000"/74], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 9.139814522s ago: executing program 0 (id=5368): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x30000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x8d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10000, 0xd, 0x200, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x6, 0x81, 0xa85, 0xd, 0x0, 0x2]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) 7.246744888s ago: executing program 0 (id=5378): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xb, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x21, 0xa, 0x200) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000002300)='MAC802154_@WSIM\x00', 0xd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.1/usb12/12-0:1.0/usb12-port3/power/pm_qos_no_power_off\x00', 0x331900, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x9, 0xffffffffffffff49, 0x5, 0x100000000, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xa9, 0x0, 0x1]}, 0x0) r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r3, &(0x7f0000000180)=""/61, 0xfffffeeb) r4 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000100), 0x3c401, 0x0) r5 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x2000, 0x0) close_range$auto(r4, r5, 0x2b7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r1) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(r6, 0x0, 0x40000001) ioctl$auto_SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) 5.069833844s ago: executing program 5 (id=5388): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x5ebb02, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000105, 0x400, 0x9}]}) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) chroot$auto(&(0x7f0000000000)='}[,&*}\x00') ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000040)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7, @raw=0x1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101780, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000002600)={0x0, r4}) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x1a1440, 0x0) socket(0xa, 0x5, 0x0) 4.512469402s ago: executing program 1 (id=5389): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) select$auto(0x7f, &(0x7f0000000040)={[0x9, 0x4, 0xfffffffffffffffa, 0x4, 0x1, 0x7f, 0x0, 0x6, 0x1, 0x5, 0x0, 0x1200000cf, 0x8, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000240)="e327262d", 0x4}, 0x3) 4.115567914s ago: executing program 4 (id=5391): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x1, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) 4.045825972s ago: executing program 1 (id=5392): socket(0x1d, 0x3, 0x1) (async) memfd_secret$auto(0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2040, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) prctl$auto(0x3, 0x20, 0xffffffffffffffff, 0x9, 0x7) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) (async) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0x4, 0x4d}, @typed={0x4788, 0xd0, 0x0, 0x0, @fd}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x6, 0x6, "aab8e85e0a000000529f895cf5e8ec8f46cbb766439daa41e1aa000000000000000000000000f4ffffff00"}, 0x6, 0x5, 0x4, @inferred, @reserved="fb99d320be0de941ac3f58d75bd3c4768e7f01a744aae0c84cbe332d618e150342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c58ffd5ab811fd53443e6cf63a902991b44e48364e8de3f3c4dee93bec614b306c6c4f064c38f5352a95473c9523203e261f1f5ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f00000000c0)={@inferred=r6, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) (async) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) (async) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000080)="fa975f41672368304ca61afd33d8a4797acc0e1daeb8c0964a9a451291b0f85e35f0b48604b290418c329ac8518dd1d3dda06b2b6ac61f229c57213a5e959cc520fa18d19ccc34b27b83ae7a268861f2823b1a7a25ff49706bb47812e6c12765fa7662a12e28e8585efadc719cea0993ae3bd830601cdd4282a045675fcf80b4b23e69a114261ab7a4636f63705cd0d4a0e4402ba2bb444e10c0708ba735b59742e9cff8e8f7d71a71982fd34357d44ede2ec1b85bbdec0a8d602eaf", 0x7, &(0x7f0000000140)={&(0x7f0000000000)="774cf6134a32506dde05592f65a45004003d52fff0d95386694ce533f3cc25922d820e", 0x1}, 0x7, &(0x7f0000000180)="94b8782993df795226", 0x0, 0x2}, 0x5}, 0x3, 0x4) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, 0x0) 3.789087752s ago: executing program 0 (id=5393): mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) (async) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mmap$auto(0x0, 0x7, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2001002) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2001002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) (async) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) unshare$auto(0x8000400) (async) unshare$auto(0x8000400) memfd_secret$auto(0x0) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) 3.746433432s ago: executing program 5 (id=5394): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x7a5d) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(r2, 0x3b84, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1000000000000004, 0x9, 0x91, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, &(0x7f0000000100)={0x694f, 0x4, 0x2, 0x80, 0xbf, 0x5, r3, [0x81, 0x1, 0x1], {0xffffffff, 0xb627, 0x1, 0x8, 0x3, 0x1, 0x2, 0xffbffff7, 0xa}, {0x8, 0x9f33, 0xb27, 0x3, 0x9, 0x9, 0xabd, 0x3, 0x9}}) socket(0x2b, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) 3.735791373s ago: executing program 4 (id=5395): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket(0x11, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_RINGS_HDS_THRESH={0x8, 0x11, 0xfff}, @ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0xbc}, @ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0x10}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0xf}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x9}, @ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0xbc}]}, 0x58}}, 0x4000044) (async) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_RINGS_HDS_THRESH={0x8, 0x11, 0xfff}, @ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0xbc}, @ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0x10}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5, 0xb, 0xf}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x9}, @ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0xbc}]}, 0x58}}, 0x4000044) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000200)="7628b2e63c7f34e3e1f2fa38b19eeda930bea9b9d38556e55fbbb3f20a7f7e60de41ec0536d2c82607d875eeacb7530221c02b3c09a7ad940cf9c2b80b66614f569f6982d906ea8f25d595249b971f095b9e131c86a897b58c10f72cab9894158f2b498b61c1cbc2227248303f6f2f8f5b3ac100543e835ee5c06fb7216aa6e4393ee023ef32f0cc72d4484fc9f60e8177b6c8fe05ecf4ba69b9c8f6f2ae512381d39816e6e4e16d65a4d8b3cd7212200ce148b8b04cdd9e43a1ddd7f5d40b275291e21253e301b700581b093339118920571fa716c8c0e626fe9245e9240ca46b0eebf727c3441e6d", 0x49}, 0x5, &(0x7f00000003c0), 0x5, 0x1000}, 0x5}, 0x2, 0xfe) 3.583739836s ago: executing program 4 (id=5396): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r2 = socket(0x28, 0x1, 0x100) mmap$auto(0x0, 0x9, 0xdf, 0x8b72, 0x2, 0x7ffd) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r3, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r2, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7fb, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x5, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 3.24241562s ago: executing program 1 (id=5397): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x100, 0x0) ioctl$auto_BLKTRACESTOP2(r0, 0x1275, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) semctl$auto(0x7, 0x2, 0xb57f, 0x1) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x10, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/dmmidi2\x00', 0x8002, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000001b00)={0x9, 0xd4, 0x0, 0xba, 0x0, "9cd94a86aa33c2b9583218194b864eee"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x400, 0x0) write$auto(0x3, 0x0, 0x6) 3.080950431s ago: executing program 1 (id=5398): socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x48041, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shmctl$auto(0xa0000000, 0x6, 0x0) execve$auto(0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x21, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.316204419s ago: executing program 1 (id=5399): ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = fsopen$auto(0x0, 0x51) fsconfig$auto(r0, 0x3, 0x0, 0x0, 0x0) socket(0x21, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x7fffffff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x110c230000, 0x8031ca, 0x9) getpriority$auto_PRIO_USER(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x501801, 0x0) pidfd_getfd$auto(r2, r3, 0x7ff) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x7, 0x0, 0x0, 0xe) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket(0x1e, 0x1, 0x0) 2.275613214s ago: executing program 5 (id=5400): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) setresuid$auto(0x2, 0x7, 0x8080) unshare$auto(0x8000400) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44020, 0x0) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44020, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001680)={0x2c, r3, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x646b) (async) getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x646b) 2.055735231s ago: executing program 4 (id=5401): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x80000001, 0xe, 0x6, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r2, 0x0, 0x1000200) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) 1.687928359s ago: executing program 5 (id=5402): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/tcp\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) pselect6$auto(0x3, &(0x7f00000000c0)={[0xd4c, 0xffffffffffff0001, 0x400, 0x37e153a9, 0x3701, 0x0, 0x2, 0x9, 0x80000001, 0x8, 0x5c, 0x2, 0x3, 0x7, 0xc3fb, 0xffffffff]}, 0x0, &(0x7f00000001c0)={[0x9, 0xb11, 0x3, 0xecd, 0x2, 0x8, 0x1000, 0x6, 0x7f, 0xffffffffffffffef, 0xd30, 0x4, 0x8, 0x40, 0x74d, 0x10000]}, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) getpid() (async) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$auto_IMADDTIMER(r3, 0x80044940, &(0x7f0000000000)=0x100004) (async) socketpair$auto(0x1e, 0x1, 0x6, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x80, 0x0) (async) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/open_files\x00', 0xd00, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000180)=""/249, 0xf9) (async) mmap$auto(0x804000, 0x15, 0x5c98, 0x8000001e, r4, 0x82000000) 1.146541006s ago: executing program 4 (id=5403): mmap$auto(0x3, 0x9, 0x4000000000df, 0xeb0, 0x401, 0x7ffd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu1/hotplug/state\x00', 0x101000, 0x0) read$auto(r0, 0x0, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1414c1, 0x140) mmap$auto(0x3, 0x9, 0x4000000000df, 0xeb0, 0x401, 0x7ffd) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpu1/hotplug/state\x00', 0x101000, 0x0) (async) read$auto(r0, 0x0, 0x20) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1414c1, 0x140) (async) 1.071819772s ago: executing program 0 (id=5404): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x1, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) 1.015842255s ago: executing program 4 (id=5405): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0x4, 0x0, 0x4) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x1001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto(0x3, 0x0, 0xfffffdee) mmap$auto(0x0, 0x2020009, 0xffffffffffff798f, 0x1c, r1, 0xc000) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x1f) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1836674fdd80500ffffffffffdfff1a0e00"/56, 0x38) read$auto(0xffffffffffffffff, 0x0, 0x20) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) lseek$auto(0x3, 0x2, 0x4) modify_ldt$auto(0x7, &(0x7f0000000180)="f4fd710e1e469eff99dd172ee03addc80ed23422e5e29f5473ac561488f45bf56243361a6832308c6cc2f8bc9c1bd18a391488774f346c5d4383be521f2e1df393b8514a679a65469769d9a8224d90f994a445267b46d218268679066c4925d822447927deb9f4fcc270a95f80e1822991bc5e01914347", 0x9) write$auto(0x3, 0x0, 0xfdef) 988.75444ms ago: executing program 1 (id=5406): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, 0x0, 0x5) bind$auto(r0, &(0x7f0000000100)=@l2={0x1f, 0x3ff, @none, 0x3fab}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(0x3, 0x0, 0x10000, 0x73f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto(r0, 0x0, 0x2000000000007) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x045h\xd5\x89|d\v\x00\x00\x00\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0) ioctl$auto_EVIOCSMASK(r3, 0x40104593, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) 697.234821ms ago: executing program 5 (id=5407): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r0, 0x81004517, r0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0xe1, &(0x7f00000000c0)={0x4, 0x7c, 0x0, 0x81, 0x2, 0x8000, r2, [0x2, 0x9, 0x7], {0xfffffffb, 0x428ecab9, 0x81, 0x5, 0x864, 0x1, 0x8, 0xbd56, 0x7}, {0x7, 0x6, 0x8, 0x9, 0x8, 0x5, 0x38000000, 0x8, 0x8000000000000001}}) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x2003f0, 0x15) 316.179854ms ago: executing program 0 (id=5408): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe8881, 0x0) fstat$auto(r0, 0x0) (async) ioctl$auto(0x3, 0x40081271, 0x38) 49.572213ms ago: executing program 0 (id=5409): r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7008fcdbdf250600090000000180090002006e6673640000000004000100"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x10, 0x2, 0x0) r6 = socket(0x11, 0x80003, 0x300) flistxattr$auto(r6, 0x0, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004090) semctl$auto(0x7, 0x8, 0x2, 0x401) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x100000000cb}, 0x3, 0x0, 0x80000000, 0x80000000}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x20000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 5 (id=5410): acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') keyctl$auto(0xc, 0x2, 0x7, 0xc23a, 0xa) r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r1) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x20000004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x1, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x5, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) unshare$auto(0x40000080) io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000c80)="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", 0x2) ioctl$auto(0xc8, 0x54e3, 0x5c8d) io_uring_register$auto_IORING_UNREGISTER_FILES(r1, 0x3, &(0x7f0000000340)="571f1bd2495485c5380b61bf5b62fb6806c39eb54c427c0093edeccaa831f7244aae9609088c43959681b4dda035d3ac9a34e2b85cc47bb085c844db0ad77158ba26fad6848ca7757a22c86241e4131980da4e9ed26340e42a0fa18392941df7406ea0126b1daf0bafaaa78d12bd4750b731ae2694dbba9bda718ce8d312d672c9a9932b23eaee64dc89fc3ee480455238fa278bce03ea0c3e7f70ff5c11a5af55f5ef358e45072a2539076b644e5b5f675a9de8f661751b36296dc0c36c03", 0x2) bind$auto(r3, &(0x7f0000000000)=@in={0x2, 0x4e20, @remote}, 0x42) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xf000, 0x8, 0x2, 0x9b72, 0x2, 0x8000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000040)={r0, 0x8}) prctl$auto(0x20e8, 0x4, 0x4, 0x3, 0x1) madvise$auto(0x931, 0xc8, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f00000001c0)=""/164, 0xa4) 0s ago: executing program 4 (id=5411): socket(0x2, 0x1, 0x100) (async) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0xcf) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0x6}, 0x2, 0x0, 0x4000000000007, 0x8}, 0x7fa}, 0x4, 0x4008) (async) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x89f2, 0x24) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) kernel console output (not intermixed with test programs): ntrol_net_init+0x84b/0x1d20 [ 1517.406683][T29187] ? lockdep_init_map_type+0x5c/0x280 [ 1517.406735][T29187] kmemdup_noprof+0x29/0x60 [ 1517.406775][T29187] ip_vs_control_net_init+0x84b/0x1d20 [ 1517.406824][T29187] __ip_vs_init+0x217/0x520 [ 1517.406869][T29187] ? __pfx___ip_vs_init+0x10/0x10 [ 1517.406912][T29187] ops_init+0x1df/0x5f0 [ 1517.406946][T29187] setup_net+0x10f/0x380 [ 1517.406973][T29187] ? lockdep_init_map_type+0x5c/0x280 [ 1517.407020][T29187] ? __pfx_setup_net+0x10/0x10 [ 1517.407054][T29187] ? debug_mutex_init+0x37/0x70 [ 1517.407093][T29187] copy_net_ns+0x2a6/0x5f0 [ 1517.407139][T29187] create_new_namespaces+0x3ea/0xa90 [ 1517.407191][T29187] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1517.407246][T29187] ksys_unshare+0x45b/0xa40 [ 1517.407295][T29187] ? __pfx_ksys_unshare+0x10/0x10 [ 1517.407344][T29187] ? xfd_validate_state+0x61/0x180 [ 1517.407406][T29187] __x64_sys_unshare+0x31/0x40 [ 1517.407454][T29187] do_syscall_64+0xcd/0x490 [ 1517.407510][T29187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.407544][T29187] RIP: 0033:0x7f2643b8eb69 [ 1517.407574][T29187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1517.407610][T29187] RSP: 002b:00007f264494e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1517.407642][T29187] RAX: ffffffffffffffda RBX: 00007f2643db5fa0 RCX: 00007f2643b8eb69 [ 1517.407665][T29187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1517.407685][T29187] RBP: 00007f2643c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1517.407707][T29187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1517.407727][T29187] R13: 0000000000000000 R14: 00007f2643db5fa0 R15: 00007ffd6baade58 [ 1517.407771][T29187] [ 1517.988627][T29204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1518.098374][T29207] netlink: 93 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1518.622261][T29227] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1519.975520][T29248] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1521.189087][T29268] FAULT_INJECTION: forcing a failure. [ 1521.189087][T29268] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.350962][T29268] CPU: 1 UID: 0 PID: 29268 Comm: syz.1.4537 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1521.351020][T29268] Tainted: [I]=FIRMWARE_WORKAROUND [ 1521.351032][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1521.351051][T29268] Call Trace: [ 1521.351061][T29268] [ 1521.351074][T29268] dump_stack_lvl+0x16c/0x1f0 [ 1521.351134][T29268] should_fail_ex+0x512/0x640 [ 1521.351165][T29268] ? __kmalloc_noprof+0xbf/0x510 [ 1521.351208][T29268] ? __register_sysctl_table+0xb3/0x1900 [ 1521.351266][T29268] should_failslab+0xc2/0x120 [ 1521.351321][T29268] __kmalloc_noprof+0xd2/0x510 [ 1521.351375][T29268] __register_sysctl_table+0xb3/0x1900 [ 1521.351425][T29268] ? is_module_address+0x5f/0xf0 [ 1521.351480][T29268] ? __pfx___register_sysctl_table+0x10/0x10 [ 1521.351529][T29268] ? is_module_address+0x69/0xf0 [ 1521.351576][T29268] ? register_net_sysctl_sz+0x228/0x3e0 [ 1521.351621][T29268] __devinet_sysctl_register+0x1b9/0x360 [ 1521.351666][T29268] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1521.351709][T29268] ? devinet_init_net+0xeb/0x910 [ 1521.351747][T29268] ? __asan_memcpy+0x3c/0x60 [ 1521.351786][T29268] devinet_init_net+0x347/0x910 [ 1521.351825][T29268] ? __pfx_devinet_init_net+0x10/0x10 [ 1521.351861][T29268] ops_init+0x1df/0x5f0 [ 1521.351898][T29268] setup_net+0x10f/0x380 [ 1521.351927][T29268] ? lockdep_init_map_type+0x5c/0x280 [ 1521.351977][T29268] ? __pfx_setup_net+0x10/0x10 [ 1521.352009][T29268] ? debug_mutex_init+0x37/0x70 [ 1521.352049][T29268] copy_net_ns+0x2a6/0x5f0 [ 1521.352090][T29268] create_new_namespaces+0x3ea/0xa90 [ 1521.352140][T29268] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1521.352185][T29268] ksys_unshare+0x45b/0xa40 [ 1521.352232][T29268] ? __pfx_ksys_unshare+0x10/0x10 [ 1521.352291][T29268] ? xfd_validate_state+0x61/0x180 [ 1521.352355][T29268] __x64_sys_unshare+0x31/0x40 [ 1521.352403][T29268] do_syscall_64+0xcd/0x490 [ 1521.352460][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.352497][T29268] RIP: 0033:0x7f2643b8eb69 [ 1521.352524][T29268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1521.352558][T29268] RSP: 002b:00007f264494e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1521.352590][T29268] RAX: ffffffffffffffda RBX: 00007f2643db5fa0 RCX: 00007f2643b8eb69 [ 1521.352613][T29268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1521.352633][T29268] RBP: 00007f2643c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1521.352654][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.352674][T29268] R13: 0000000000000000 R14: 00007f2643db5fa0 R15: 00007ffd6baade58 [ 1521.352718][T29268] [ 1522.054172][T29279] nfs4: Unknown parameter '' [ 1522.266793][T29285] FAULT_INJECTION: forcing a failure. [ 1522.266793][T29285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1522.266834][T29285] CPU: 1 UID: 0 PID: 29285 Comm: syz.4.4542 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1522.266876][T29285] Tainted: [I]=FIRMWARE_WORKAROUND [ 1522.266885][T29285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1522.266900][T29285] Call Trace: [ 1522.266908][T29285] [ 1522.266917][T29285] dump_stack_lvl+0x16c/0x1f0 [ 1522.266958][T29285] should_fail_ex+0x512/0x640 [ 1522.266986][T29285] should_fail_alloc_page+0xe7/0x130 [ 1522.267019][T29285] prepare_alloc_pages+0x3c2/0x610 [ 1522.267054][T29285] ? rcu_is_watching+0x12/0xc0 [ 1522.267080][T29285] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1522.267113][T29285] ? rcu_is_watching+0x12/0xc0 [ 1522.267136][T29285] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1522.267171][T29285] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1522.267200][T29285] ? __pfx_stack_trace_save+0x10/0x10 [ 1522.267226][T29285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1522.267263][T29285] ? alloc_vmap_area+0x645/0x29c0 [ 1522.267295][T29285] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1522.267332][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.267353][T29285] ? do_syscall_64+0xcd/0x490 [ 1522.267387][T29285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.267428][T29285] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1522.267456][T29285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1522.267494][T29285] ? policy_nodemask+0xea/0x4e0 [ 1522.267527][T29285] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1522.267557][T29285] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1522.267601][T29285] kasan_populate_vmalloc+0xf1/0x1f0 [ 1522.267633][T29285] alloc_vmap_area+0x959/0x29c0 [ 1522.267678][T29285] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1522.267720][T29285] __get_vm_area_node+0x1ca/0x330 [ 1522.267762][T29285] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1522.267801][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.267823][T29285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1522.267867][T29285] ? policy_nodemask+0xea/0x4e0 [ 1522.267899][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.267928][T29285] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1522.267972][T29285] ? ___kmalloc_large_node+0xed/0x160 [ 1522.268017][T29285] __kvmalloc_node_noprof+0x30a/0x620 [ 1522.268063][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.268092][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.268120][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.268140][T29285] __do_sys_listmount+0x1c2/0xf80 [ 1522.268168][T29285] ? __x64_sys_futex+0x1e0/0x4c0 [ 1522.268197][T29285] ? __x64_sys_futex+0x1e9/0x4c0 [ 1522.268228][T29285] ? __pfx___do_sys_listmount+0x10/0x10 [ 1522.268264][T29285] do_syscall_64+0xcd/0x490 [ 1522.268303][T29285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.268326][T29285] RIP: 0033:0x7f9a0258eb69 [ 1522.268345][T29285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1522.268368][T29285] RSP: 002b:00007f9a0330f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1522.268389][T29285] RAX: ffffffffffffffda RBX: 00007f9a027b6080 RCX: 00007f9a0258eb69 [ 1522.268406][T29285] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1522.268420][T29285] RBP: 00007f9a02611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1522.268435][T29285] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1522.268449][T29285] R13: 0000000000000000 R14: 00007f9a027b6080 R15: 00007fff2e3b9e98 [ 1522.268478][T29285] [ 1522.305136][T29285] syz.4.4542: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1522.305374][T29285] CPU: 1 UID: 0 PID: 29285 Comm: syz.4.4542 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1522.305421][T29285] Tainted: [I]=FIRMWARE_WORKAROUND [ 1522.305433][T29285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1522.305452][T29285] Call Trace: [ 1522.305464][T29285] [ 1522.305475][T29285] dump_stack_lvl+0x16c/0x1f0 [ 1522.305531][T29285] warn_alloc+0x248/0x3a0 [ 1522.305569][T29285] ? __pfx_warn_alloc+0x10/0x10 [ 1522.305610][T29285] ? kfree+0x2b4/0x4d0 [ 1522.305649][T29285] ? __get_vm_area_node+0x208/0x330 [ 1522.305709][T29285] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1522.305760][T29285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1522.305809][T29285] ? policy_nodemask+0xea/0x4e0 [ 1522.305866][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.305906][T29285] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1522.305965][T29285] ? ___kmalloc_large_node+0xed/0x160 [ 1522.306022][T29285] __kvmalloc_node_noprof+0x30a/0x620 [ 1522.306057][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.306089][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.306128][T29285] ? __do_sys_listmount+0x1c2/0xf80 [ 1522.306158][T29285] __do_sys_listmount+0x1c2/0xf80 [ 1522.306196][T29285] ? __x64_sys_futex+0x1e0/0x4c0 [ 1522.306234][T29285] ? __x64_sys_futex+0x1e9/0x4c0 [ 1522.306277][T29285] ? __pfx___do_sys_listmount+0x10/0x10 [ 1522.306328][T29285] do_syscall_64+0xcd/0x490 [ 1522.306379][T29285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.306411][T29285] RIP: 0033:0x7f9a0258eb69 [ 1522.306436][T29285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1522.306469][T29285] RSP: 002b:00007f9a0330f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1522.306498][T29285] RAX: ffffffffffffffda RBX: 00007f9a027b6080 RCX: 00007f9a0258eb69 [ 1522.306519][T29285] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1522.306539][T29285] RBP: 00007f9a02611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1522.306558][T29285] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1522.306576][T29285] R13: 0000000000000000 R14: 00007f9a027b6080 R15: 00007fff2e3b9e98 [ 1522.306616][T29285] [ 1522.307235][T29285] Mem-Info: [ 1522.307253][T29285] active_anon:14827 inactive_anon:7197 isolated_anon:0 [ 1522.307253][T29285] active_file:10266 inactive_file:39142 isolated_file:0 [ 1522.307253][T29285] unevictable:768 dirty:822 writeback:0 [ 1522.307253][T29285] slab_reclaimable:14785 slab_unreclaimable:99645 [ 1522.307253][T29285] mapped:26117 shmem:1382 pagetables:1523 [ 1522.307253][T29285] sec_pagetables:0 bounce:0 [ 1522.307253][T29285] kernel_misc_reclaimable:0 [ 1522.307253][T29285] free:766610 free_pcp:21261 free_cma:0 [ 1522.307337][T29285] Node 0 active_anon:59308kB inactive_anon:28788kB active_file:41060kB inactive_file:156436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104468kB dirty:3284kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:59392kB kernel_stack:12748kB pagetables:5940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1522.307420][T29285] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1522.307502][T29285] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1522.307591][T29285] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1522.307655][T29285] Node 0 DMA32 free:1281916kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59260kB inactive_anon:28788kB active_file:39820kB inactive_file:156364kB unevictable:1536kB writepending:3284kB present:3129332kB managed:2539728kB mlocked:0kB bounce:0kB free_pcp:38420kB local_pcp:19888kB free_cma:0kB [ 1522.307749][T29285] lowmem_reserve[]: 0 0 1 1 1 [ 1522.307810][T29285] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1240kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1522.307915][T29285] lowmem_reserve[]: 0 0 0 0 0 [ 1522.307978][T29285] Node 1 Normal free:1769152kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:46608kB local_pcp:32960kB free_cma:0kB [ 1522.308065][T29285] lowmem_reserve[]: 0 0 0 0 0 [ 1522.308123][T29285] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1522.308322][T29285] Node 0 DMA32: 6613*4kB (UME) 3173*8kB (UME) 3004*16kB (UME) 1616*32kB (UME) 1441*64kB (UME) 816*128kB (UME) 577*256kB (UME) 431*512kB (UME) 296*1024kB (UME) 6*2048kB (UM) 61*4096kB (UM) = 1281916kB [ 1522.308595][T29285] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1522.308785][T29285] Node 1 Normal: 8*4kB (UME) 6*8kB (UME) 11*16kB (UME) 14*32kB (UME) 8*64kB (UME) 6*128kB (UME) 3*256kB (ME) 8*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 428*4096kB (UM) = 1769152kB [ 1522.309074][T29285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1522.309103][T29285] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1522.309129][T29285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1522.309156][T29285] Node 1 hugepages_total=1025 hugepages_free=1025 hugepages_surp=0 hugepages_size=2048kB [ 1522.309185][T29285] 50788 total pagecache pages [ 1522.309198][T29285] 2 pages in swap cache [ 1522.309211][T29285] Free swap = 124884kB [ 1522.309224][T29285] Total swap = 124996kB [ 1522.309237][T29285] 2097051 pages RAM [ 1522.309250][T29285] 0 pages HighMem/MovableOnly [ 1522.309262][T29285] 430141 pages reserved [ 1522.309274][T29285] 0 pages cma reserved [ 1522.619852][T29301] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 1522.755845][T29291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1522.758353][T29291] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1523.269044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.762896][T29291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1523.771751][T29291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1523.778649][T29291] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1524.749896][T29309] [U]  [ 1524.775023][T25557] Bluetooth: hci2: command 0x0406 tx timeout [ 1525.821345][T25557] Bluetooth: hci4: command 0x0c1a tx timeout [ 1525.828062][ T8174] Bluetooth: hci1: command 0x0c1a tx timeout [ 1525.834569][ T8174] Bluetooth: hci0: command 0x0406 tx timeout [ 1526.865438][T29350] Bluetooth: hci2: command 0x0406 tx timeout [ 1528.172968][T29388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1531.386579][T29472] ACPI: Can not change Invalid GPE/Fixed Event status [ 1532.158937][T29481] ubi0: attaching mtd0 [ 1532.189544][T29481] ubi0: scanning is finished [ 1532.240030][T29481] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1532.584592][T29481] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1534.164273][T29520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4587'. [ 1534.301896][T29524] kfence: disabled [ 1534.454003][T29517] FAULT_INJECTION: forcing a failure. [ 1534.454003][T29517] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.543115][T29517] CPU: 0 UID: 0 PID: 29517 Comm: syz.0.4587 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1534.543174][T29517] Tainted: [I]=FIRMWARE_WORKAROUND [ 1534.543187][T29517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1534.543207][T29517] Call Trace: [ 1534.543219][T29517] [ 1534.543234][T29517] dump_stack_lvl+0x16c/0x1f0 [ 1534.543298][T29517] should_fail_ex+0x512/0x640 [ 1534.543327][T29517] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1534.543360][T29517] should_failslab+0xc2/0x120 [ 1534.543397][T29517] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1534.543427][T29517] ? alloc_tty_struct+0x96/0x8c0 [ 1534.543463][T29517] alloc_tty_struct+0x96/0x8c0 [ 1534.543494][T29517] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1534.543536][T29517] tty_init_dev.part.0+0x1e/0x500 [ 1534.543568][T29517] tty_open+0xa50/0xf90 [ 1534.543604][T29517] ? __pfx_tty_open+0x10/0x10 [ 1534.543633][T29517] ? chrdev_open+0x58c/0x6a0 [ 1534.543676][T29517] ? __pfx_tty_open+0x10/0x10 [ 1534.543710][T29517] chrdev_open+0x231/0x6a0 [ 1534.543755][T29517] ? __pfx_chrdev_open+0x10/0x10 [ 1534.543800][T29517] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1534.543843][T29517] do_dentry_open+0x982/0x1530 [ 1534.543884][T29517] ? __pfx_chrdev_open+0x10/0x10 [ 1534.543934][T29517] vfs_open+0x82/0x3f0 [ 1534.544014][T29517] path_openat+0x1de4/0x2cb0 [ 1534.544068][T29517] ? __pfx_path_openat+0x10/0x10 [ 1534.544121][T29517] do_filp_open+0x20b/0x470 [ 1534.544167][T29517] ? __pfx_do_filp_open+0x10/0x10 [ 1534.544245][T29517] ? alloc_fd+0x471/0x7d0 [ 1534.544286][T29517] do_sys_openat2+0x11b/0x1d0 [ 1534.544329][T29517] ? __pfx_do_sys_openat2+0x10/0x10 [ 1534.544388][T29517] __x64_sys_openat+0x174/0x210 [ 1534.544433][T29517] ? __pfx___x64_sys_openat+0x10/0x10 [ 1534.544492][T29517] do_syscall_64+0xcd/0x490 [ 1534.544539][T29517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.544570][T29517] RIP: 0033:0x7fea03f8eb69 [ 1534.544598][T29517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1534.544633][T29517] RSP: 002b:00007fea04eca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1534.544665][T29517] RAX: ffffffffffffffda RBX: 00007fea041b5fa0 RCX: 00007fea03f8eb69 [ 1534.544688][T29517] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1534.544710][T29517] RBP: 00007fea04011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1534.544731][T29517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.544752][T29517] R13: 0000000000000000 R14: 00007fea041b5fa0 R15: 00007fffb612be58 [ 1534.544795][T29517] [ 1535.013169][T29520] hsr_slave_0: left promiscuous mode [ 1535.046274][T29520] hsr_slave_1: left promiscuous mode [ 1535.951683][T29544] program syz.1.4593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1537.048942][T29557] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1353 with max blocks 35 with error 117 [ 1537.071624][T29557] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1537.071624][T29557] [ 1540.403711][T29586] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14) [ 1540.636248][T29589] program syz.5.4604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1543.525995][T29619] Invalid ELF header magic: != ELF [ 1547.617118][T29680] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1547.623518][T29680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1547.630067][T29680] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1547.640967][T29680] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1548.854951][T29350] Bluetooth: hci2: command 0x0406 tx timeout [ 1549.654959][T29350] Bluetooth: hci1: command 0x0c1a tx timeout [ 1549.661055][T10826] Bluetooth: hci0: command 0x0406 tx timeout [ 1549.734917][T29350] Bluetooth: hci4: command 0x0c1a tx timeout [ 1550.035158][T29729] bridge0: port 4(team0) entered blocking state [ 1550.130662][T29729] bridge0: port 4(team0) entered disabled state [ 1550.192230][T29729] team0: entered allmulticast mode [ 1550.253475][T29729] team_slave_0: entered allmulticast mode [ 1550.314962][T29729] team_slave_1: entered allmulticast mode [ 1550.386430][T29729] team0: entered promiscuous mode [ 1550.447294][T29729] team_slave_0: entered promiscuous mode [ 1550.487463][T29729] team_slave_1: entered promiscuous mode [ 1550.536605][T29729] bridge0: port 4(team0) entered blocking state [ 1550.543269][T29729] bridge0: port 4(team0) entered forwarding state [ 1550.573547][T29731] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4635'. [ 1550.836346][T29350] Bluetooth: hci1: unexpected event for opcode 0x0001 [ 1551.333802][T29749] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1551.646772][T29758] FAULT_INJECTION: forcing a failure. [ 1551.646772][T29758] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1551.660336][T29758] CPU: 1 UID: 0 PID: 29758 Comm: syz.4.4640 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1551.660392][T29758] Tainted: [I]=FIRMWARE_WORKAROUND [ 1551.660407][T29758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1551.660429][T29758] Call Trace: [ 1551.660441][T29758] [ 1551.660455][T29758] dump_stack_lvl+0x16c/0x1f0 [ 1551.660514][T29758] should_fail_ex+0x512/0x640 [ 1551.660556][T29758] get_futex_key+0x1d0/0x1560 [ 1551.660603][T29758] ? __pfx_get_futex_key+0x10/0x10 [ 1551.660643][T29758] ? find_held_lock+0x2b/0x80 [ 1551.660690][T29758] futex_wake+0xea/0x530 [ 1551.660744][T29758] ? __pfx_futex_wake+0x10/0x10 [ 1551.660804][T29758] ? find_held_lock+0x2b/0x80 [ 1551.660836][T29758] ? __might_fault+0xe3/0x190 [ 1551.660882][T29758] do_futex+0x1e3/0x350 [ 1551.660926][T29758] ? __pfx_do_futex+0x10/0x10 [ 1551.660969][T29758] ? snd_pcm_oss_ioctl+0x2c2/0x37a0 [ 1551.661028][T29758] __x64_sys_futex+0x1e0/0x4c0 [ 1551.661074][T29758] ? __fget_files+0x20e/0x3c0 [ 1551.661111][T29758] ? __pfx___x64_sys_futex+0x10/0x10 [ 1551.661161][T29758] ? fput+0x9b/0xd0 [ 1551.661215][T29758] do_syscall_64+0xcd/0x490 [ 1551.661273][T29758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.661307][T29758] RIP: 0033:0x7f9a0258eb69 [ 1551.661335][T29758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.661370][T29758] RSP: 002b:00007f9a0330f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1551.661402][T29758] RAX: ffffffffffffffda RBX: 00007f9a027b6088 RCX: 00007f9a0258eb69 [ 1551.661425][T29758] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9a027b608c [ 1551.661447][T29758] RBP: 00007f9a027b6080 R08: 00007f9a03331000 R09: 0000000000000000 [ 1551.661469][T29758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a027b608c [ 1551.661491][T29758] R13: 0000000000000000 R14: 00007fff2e3b9db0 R15: 00007fff2e3b9e98 [ 1551.661536][T29758] [ 1553.326630][T29776] zswap: compressor not available [ 1554.857740][T29350] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1554.867298][T29350] Bluetooth: hci1: Injecting HCI hardware error event [ 1554.878689][T10826] Bluetooth: hci1: hardware error 0x00 [ 1554.891969][T29829] kAFS: unparsable volume name [ 1554.933795][T29831] kAFS: unparsable volume name [ 1555.128433][T29836] Invalid ELF header magic: != ELF [ 1555.596565][T29350] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1556.127740][T29864] random: crng reseeded on system resumption [ 1556.384426][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.390980][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.944894][T10826] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1557.311912][T29882] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 1558.260288][T29904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4665'. [ 1558.580284][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4668'. [ 1558.592884][T29912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4668'. [ 1562.318265][ T31] audit: type=1800 audit(4294967729.836:66): pid=29994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4691" name="members" dev="configfs" ino=157632 res=0 errno=0 [ 1562.355322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1562.683858][T30010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1562.697309][T30010] bridge_slave_1: left allmulticast mode [ 1562.704345][T30010] bridge_slave_1: left promiscuous mode [ 1562.712607][T30010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.748716][T30010] bridge_slave_0: left allmulticast mode [ 1562.754509][T30010] bridge_slave_0: left promiscuous mode [ 1562.764994][T30010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.103496][T30013] Invalid ELF header magic: != ELF [ 1564.123922][T10826] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1565.190211][T30054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4700'. [ 1567.282901][T30113] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.4712'. [ 1567.318304][T30118] netlink: 302 bytes leftover after parsing attributes in process `syz.1.4713'. [ 1570.681225][T10826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1570.699818][T10826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1570.736644][T10826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1570.841371][T10826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1570.850847][T10826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1571.085986][T26216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.257379][T26216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.497277][T26216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.649766][T30187] KVM: debugfs: duplicate directory 30187-3 [ 1572.947257][T10826] Bluetooth: hci2: command tx timeout [ 1573.382295][T26216] bridge_slave_1: left allmulticast mode [ 1573.492427][T26216] bridge_slave_1: left promiscuous mode [ 1573.535098][T26216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.586497][T26216] bridge_slave_0: left allmulticast mode [ 1573.620691][T26216] bridge_slave_0: left promiscuous mode [ 1573.645945][T26216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.722175][T30204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4731'. [ 1574.765979][T26216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.777730][T26216] bond0 (unregistering): Released all slaves [ 1575.015964][T10826] Bluetooth: hci2: command tx timeout [ 1575.867497][T30175] chnl_net:caif_netlink_parms(): no params data found [ 1576.730799][T30258] Invalid ELF header magic: != ELF [ 1576.993450][T30175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.000888][T30175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.009217][T30175] bridge_slave_0: entered allmulticast mode [ 1577.020355][T30175] bridge_slave_0: entered promiscuous mode [ 1577.039841][T30175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.047887][T30175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.055719][T30175] bridge_slave_1: entered allmulticast mode [ 1577.063984][T30175] bridge_slave_1: entered promiscuous mode [ 1577.096322][T10826] Bluetooth: hci2: command tx timeout [ 1577.201598][T30175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.242365][T30175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.484479][T30175] team0: Port device team_slave_0 added [ 1577.513806][T30175] team0: Port device team_slave_1 added [ 1577.569878][T30269] FAULT_INJECTION: forcing a failure. [ 1577.569878][T30269] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.594412][ T31] audit: type=1800 audit(4294967745.121:67): pid=30271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4737" name="lu_gp_id" dev="configfs" ino=159475 res=0 errno=0 [ 1577.596983][T30269] CPU: 0 UID: 0 PID: 30269 Comm: syz.5.4736 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1577.597050][T30269] Tainted: [I]=FIRMWARE_WORKAROUND [ 1577.597066][T30269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1577.597095][T30269] Call Trace: [ 1577.597107][T30269] [ 1577.597123][T30269] dump_stack_lvl+0x16c/0x1f0 [ 1577.597190][T30269] should_fail_ex+0x512/0x640 [ 1577.597236][T30269] ? fs_reclaim_acquire+0xae/0x150 [ 1577.597299][T30269] ? tomoyo_encode2+0x100/0x3e0 [ 1577.597346][T30269] should_failslab+0xc2/0x120 [ 1577.597396][T30269] __kmalloc_noprof+0xd2/0x510 [ 1577.597442][T30269] ? d_absolute_path+0x136/0x1a0 [ 1577.597505][T30269] tomoyo_encode2+0x100/0x3e0 [ 1577.597559][T30269] tomoyo_encode+0x29/0x50 [ 1577.597603][T30269] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1577.597665][T30269] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1577.597707][T30269] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1577.597797][T30269] ? do_raw_spin_lock+0x12c/0x2b0 [ 1577.597869][T30269] tomoyo_file_open+0x6b/0x90 [ 1577.597926][T30269] security_file_open+0x84/0x1e0 [ 1577.597969][T30269] do_dentry_open+0x596/0x1530 [ 1577.598030][T30269] vfs_open+0x82/0x3f0 [ 1577.598092][T30269] path_openat+0x1de4/0x2cb0 [ 1577.598151][T30269] ? __pfx_path_openat+0x10/0x10 [ 1577.598210][T30269] do_filp_open+0x20b/0x470 [ 1577.598263][T30269] ? __pfx_do_filp_open+0x10/0x10 [ 1577.598343][T30269] ? alloc_fd+0x471/0x7d0 [ 1577.598396][T30269] do_sys_openat2+0x11b/0x1d0 [ 1577.598453][T30269] ? __pfx_do_sys_openat2+0x10/0x10 [ 1577.598532][T30269] __x64_sys_openat+0x174/0x210 [ 1577.598591][T30269] ? __pfx___x64_sys_openat+0x10/0x10 [ 1577.598671][T30269] do_syscall_64+0xcd/0x490 [ 1577.598734][T30269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.598776][T30269] RIP: 0033:0x7f5fcff8eb69 [ 1577.598808][T30269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1577.598848][T30269] RSP: 002b:00007f5fd0e99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1577.598885][T30269] RAX: ffffffffffffffda RBX: 00007f5fd01b6080 RCX: 00007f5fcff8eb69 [ 1577.598912][T30269] RDX: 0000000000109002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1577.598937][T30269] RBP: 00007f5fd0011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1577.598961][T30269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1577.598985][T30269] R13: 0000000000000000 R14: 00007f5fd01b6080 R15: 00007ffdac974758 [ 1577.599033][T30269] [ 1577.599192][T30269] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1577.616596][T30271] kstrtoul() returned -22 for lu_gp_id [ 1577.994716][T26216] veth1_macvtap: left promiscuous mode [ 1578.023448][T26216] veth0_macvtap: left promiscuous mode [ 1578.039930][T26216] veth1_vlan: left promiscuous mode [ 1578.053216][T26216] veth0_vlan: left promiscuous mode [ 1579.152300][T26216] team0 (unregistering): Port device team_slave_1 removed [ 1579.174921][T10826] Bluetooth: hci2: command tx timeout [ 1579.216935][T26216] team0 (unregistering): Port device team_slave_0 removed [ 1579.800913][T30280] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1579.813112][T30280] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1579.822982][T30280] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1579.954198][T30175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.961560][T30175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.988762][T30175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.003245][T30175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.014719][T30175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1580.046757][T30175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.135738][T30297] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1580.176678][T30297] CIFS mount error: No usable UNC path provided in device string! [ 1580.176678][T30297] [ 1580.222501][T30297] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1580.299235][T30175] hsr_slave_0: entered promiscuous mode [ 1580.306805][T30175] hsr_slave_1: entered promiscuous mode [ 1580.313413][T30175] debugfs: 'hsr0' already exists in 'hsr' [ 1580.326249][T30175] Cannot create hsr debugfs directory [ 1581.066399][T30310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4741'. [ 1582.426014][T30310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.426049][T30310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.428180][T30310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.428202][T30310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.526182][ T31] audit: type=1400 audit(4294967300.591:68): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=30346 comm="syz.1.4747" [ 1585.351809][T30175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.380066][T30175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.401359][T30175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.433836][T30175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1586.055004][T30175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.177342][T30175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.203178][T26216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.210459][T26216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.535946][T28275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.543235][T28275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.949363][T30175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.579770][T30488] syz.4.4765 (30488): attempted to duplicate a private mapping with mremap. This is not supported. [ 1589.601770][T30488] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1589.626452][T30493] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1589.713629][T30175] veth0_vlan: entered promiscuous mode [ 1589.908626][T30175] veth1_vlan: entered promiscuous mode [ 1590.129089][T30175] veth0_macvtap: entered promiscuous mode [ 1590.600378][T30508] Invalid ELF header magic: != ELF [ 1590.636066][T30175] veth1_macvtap: entered promiscuous mode [ 1590.701508][T30175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.827885][T30175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.880736][T17823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.900828][T17823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.944850][T17823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.993479][T17823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.610361][T17823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.709882][T17823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.991772][T28277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.066522][T28277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.444991][T10826] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 1594.354552][T30570] Invalid ELF header magic: != ELF [ 1594.599146][ T31] audit: type=1800 audit(4294967311.647:69): pid=30581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4778" name="discovery_nqn" dev="configfs" ino=161599 res=0 errno=0 [ 1595.291109][ T31] audit: type=1107 audit(4294967312.367:70): pid=30594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 1595.438919][ T31] audit: type=1107 audit(4294967312.377:71): pid=30594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 1597.333278][T30644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1597.409499][T30646] Invalid ELF header magic: != ELF [ 1597.485160][T30654] syz.1.4790: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1597.531220][T30654] CPU: 1 UID: 0 PID: 30654 Comm: syz.1.4790 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1597.531275][T30654] Tainted: [I]=FIRMWARE_WORKAROUND [ 1597.531289][T30654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1597.531308][T30654] Call Trace: [ 1597.531325][T30654] [ 1597.531337][T30654] dump_stack_lvl+0x16c/0x1f0 [ 1597.531392][T30654] warn_alloc+0x248/0x3a0 [ 1597.531434][T30654] ? __pfx_warn_alloc+0x10/0x10 [ 1597.531501][T30654] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1597.531540][T30654] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1597.531609][T30654] ? __pfx___might_resched+0x10/0x10 [ 1597.531646][T30654] ? rcu_is_watching+0x12/0xc0 [ 1597.531680][T30654] ? trace_contention_end+0xdd/0x130 [ 1597.531726][T30654] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1597.531774][T30654] ? tomoyo_path_number_perm+0x295/0x580 [ 1597.531810][T30654] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1597.531865][T30654] ? __pfx___mutex_lock+0x10/0x10 [ 1597.531934][T30654] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1597.531972][T30654] __vmalloc_node_noprof+0xad/0xf0 [ 1597.532026][T30654] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1597.532069][T30654] dvb_demux_do_ioctl+0x54e/0x12f0 [ 1597.532110][T30654] ? do_vfs_ioctl+0x128/0x14f0 [ 1597.532161][T30654] dvb_usercopy+0x167/0x340 [ 1597.532190][T30654] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1597.532229][T30654] ? __pfx_dvb_usercopy+0x10/0x10 [ 1597.532276][T30654] ? __fget_files+0x20e/0x3c0 [ 1597.532321][T30654] dvb_demux_ioctl+0x29/0x40 [ 1597.532353][T30654] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1597.532386][T30654] __x64_sys_ioctl+0x18b/0x210 [ 1597.532440][T30654] do_syscall_64+0xcd/0x490 [ 1597.532492][T30654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.532525][T30654] RIP: 0033:0x7f2643b8eb69 [ 1597.532549][T30654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.532582][T30654] RSP: 002b:00007f26419d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1597.532623][T30654] RAX: ffffffffffffffda RBX: 00007f2643db6240 RCX: 00007f2643b8eb69 [ 1597.532643][T30654] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1597.532661][T30654] RBP: 00007f2643c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1597.532680][T30654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.532698][T30654] R13: 0000000000000001 R14: 00007f2643db6240 R15: 00007ffd6baade58 [ 1597.532740][T30654] [ 1597.532850][T30654] Mem-Info: [ 1597.782895][T30654] active_anon:14860 inactive_anon:9210 isolated_anon:0 [ 1597.782895][T30654] active_file:21831 inactive_file:39450 isolated_file:0 [ 1597.782895][T30654] unevictable:768 dirty:2554 writeback:0 [ 1597.782895][T30654] slab_reclaimable:14796 slab_unreclaimable:98600 [ 1597.782895][T30654] mapped:26359 shmem:1658 pagetables:1687 [ 1597.782895][T30654] sec_pagetables:0 bounce:0 [ 1597.782895][T30654] kernel_misc_reclaimable:0 [ 1597.782895][T30654] free:756372 free_pcp:20264 free_cma:0 [ 1597.829645][T30654] Node 0 active_anon:59440kB inactive_anon:36840kB active_file:87320kB inactive_file:157668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105436kB dirty:10212kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:63488kB kernel_stack:13040kB pagetables:6596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1597.863800][T30654] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1597.957447][T30654] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.996388][T30654] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1598.002996][T30654] Node 0 DMA32 free:1233892kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59392kB inactive_anon:36840kB active_file:86080kB inactive_file:157596kB unevictable:1536kB writepending:10212kB present:3129332kB managed:2539728kB mlocked:0kB bounce:0kB free_pcp:40952kB local_pcp:27076kB free_cma:0kB [ 1598.038998][T30654] lowmem_reserve[]: 0 0 1 1 1 [ 1598.044048][T30654] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1240kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1598.238744][T30654] lowmem_reserve[]: 0 0 0 0 0 [ 1598.324921][T30654] Node 1 Normal free:1776040kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:39624kB local_pcp:27204kB free_cma:0kB [ 1598.512812][T30654] lowmem_reserve[]: 0 0 0 0 0 [ 1598.586268][T30654] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1598.643593][T30654] Node 0 DMA32: 4148*4kB (UME) 2992*8kB (UME) 2389*16kB (UME) 1462*32kB (UME) 1449*64kB (UME) 856*128kB (UME) 633*256kB (UME) 464*512kB (UME) 317*1024kB (UME) 4*2048kB (UM) 42*4096kB (UM) = 1232288kB [ 1598.724734][T30654] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1598.778559][T30654] Node 1 Normal: 8*4kB (UE) 4*8kB (UE) 11*16kB (UE) 13*32kB (UE) 6*64kB (UME) 4*128kB (UE) 8*256kB (UME) 10*512kB (UME) 6*1024kB (UM) 2*2048kB (ME) 429*4096kB (UM) = 1776144kB [ 1598.939591][T30654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.964208][T30678] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 1599.038242][T30654] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1599.059743][T30654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.111241][T30654] Node 1 hugepages_total=1025 hugepages_free=1025 hugepages_surp=0 hugepages_size=2048kB [ 1599.178618][T30654] 62873 total pagecache pages [ 1599.191123][T30654] 0 pages in swap cache [ 1599.213316][T30654] Free swap = 124868kB [ 1599.232378][T30686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1599.296646][T30654] Total swap = 124996kB [ 1599.380422][T30654] 2097051 pages RAM [ 1599.400800][T30654] 0 pages HighMem/MovableOnly [ 1599.415341][T30654] 430141 pages reserved [ 1599.423054][T30654] 0 pages cma reserved [ 1600.275930][T10826] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 1600.618512][T30727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4805'. [ 1601.226461][T30718] could not allocate digest TFM handle [ 1603.019020][T30757] zswap: compressor 000 not available [ 1603.309647][T30758] zswap: compressor not available [ 1603.933296][T30783] FAULT_INJECTION: forcing a failure. [ 1603.933296][T30783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1603.956875][T30783] CPU: 0 UID: 0 PID: 30783 Comm: syz.4.4813 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1603.956939][T30783] Tainted: [I]=FIRMWARE_WORKAROUND [ 1603.956954][T30783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1603.956975][T30783] Call Trace: [ 1603.956987][T30783] [ 1603.957001][T30783] dump_stack_lvl+0x16c/0x1f0 [ 1603.957061][T30783] should_fail_ex+0x512/0x640 [ 1603.957104][T30783] should_fail_alloc_page+0xe7/0x130 [ 1603.957155][T30783] prepare_alloc_pages+0x3c2/0x610 [ 1603.957214][T30783] ? rcu_is_watching+0x12/0xc0 [ 1603.957254][T30783] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1603.957304][T30783] ? rcu_is_watching+0x12/0xc0 [ 1603.957339][T30783] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1603.957392][T30783] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1603.957437][T30783] ? __pfx_stack_trace_save+0x10/0x10 [ 1603.957477][T30783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1603.957535][T30783] ? alloc_vmap_area+0x645/0x29c0 [ 1603.957583][T30783] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1603.957641][T30783] ? __do_sys_listmount+0x1c2/0xf80 [ 1603.957672][T30783] ? do_syscall_64+0xcd/0x490 [ 1603.957725][T30783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.957779][T30783] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1603.957822][T30783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1603.957878][T30783] ? policy_nodemask+0xea/0x4e0 [ 1603.957927][T30783] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1603.957973][T30783] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1603.958038][T30783] kasan_populate_vmalloc+0xf1/0x1f0 [ 1603.958085][T30783] alloc_vmap_area+0x959/0x29c0 [ 1603.958153][T30783] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1603.958223][T30783] __get_vm_area_node+0x1ca/0x330 [ 1603.958284][T30783] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1603.958343][T30783] ? __do_sys_listmount+0x1c2/0xf80 [ 1603.958375][T30783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1603.958431][T30783] ? policy_nodemask+0xea/0x4e0 [ 1603.958477][T30783] ? __do_sys_listmount+0x1c2/0xf80 [ 1603.958522][T30783] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1603.958587][T30783] ? ___kmalloc_large_node+0xed/0x160 [ 1603.958646][T30783] __kvmalloc_node_noprof+0x30a/0x620 [ 1603.958686][T30783] ? __do_sys_listmount+0x1c2/0xf80 [ 1603.958721][T30783] ? __do_sys_listmount+0x1c2/0xf80 [ 1603.958763][T30783] ? __do_sys_listmount+0x1c2/0xf80 [ 1603.958794][T30783] __do_sys_listmount+0x1c2/0xf80 [ 1603.958834][T30783] ? __x64_sys_futex+0x1e0/0x4c0 [ 1603.958877][T30783] ? __x64_sys_futex+0x1e9/0x4c0 [ 1603.958922][T30783] ? __pfx___do_sys_listmount+0x10/0x10 [ 1603.958977][T30783] do_syscall_64+0xcd/0x490 [ 1603.959035][T30783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.959070][T30783] RIP: 0033:0x7f9a0258eb69 [ 1603.959120][T30783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.959155][T30783] RSP: 002b:00007f9a003f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1603.959193][T30783] RAX: ffffffffffffffda RBX: 00007f9a027b6160 RCX: 00007f9a0258eb69 [ 1603.959217][T30783] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1603.959240][T30783] RBP: 00007f9a02611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1603.959263][T30783] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1603.959284][T30783] R13: 0000000000000000 R14: 00007f9a027b6160 R15: 00007fff2e3b9e98 [ 1603.959328][T30783] [ 1605.315762][T30750] kexec: Could not allocate control_code_buffer [ 1605.735911][ T31] audit: type=1800 audit(4294967322.812:72): pid=30814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4818" name="version" dev="configfs" ino=163238 res=0 errno=0 [ 1607.264781][T30846] random: crng reseeded on system resumption [ 1607.318593][T30845] netlink: set zone limit has 8 unknown bytes [ 1610.760906][T30913] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input73 [ 1611.114038][T30922] random: crng reseeded on system resumption [ 1613.036678][T30959] zswap: compressor not available [ 1613.332117][T30987] program syz.0.4850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1613.614545][T30992] binder: 30991:30992 unknown command 4294967282 [ 1613.622793][T30992] binder: 30991:30992 ioctl c0306201 2000000000c0 returned -22 [ 1615.922957][T10826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1617.229876][T31084] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1617.816513][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.822992][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.792239][T31111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4880'. [ 1618.997395][T31111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.023813][T31111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.069512][T31111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.087040][T31111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.526673][T31130] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4878'. [ 1619.683156][ T31] audit: type=1800 audit(4294967336.769:73): pid=31133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4883" name="features" dev="configfs" ino=165344 res=0 errno=0 [ 1620.874100][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 1621.942940][T31191] could not allocate digest TFM handle [ 1625.465529][T31287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4914'. [ 1625.477433][T31287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1625.485563][T31287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1625.534801][T31287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1625.555988][T31287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.961947][T31292] sp0: Synchronizing with TNC [ 1626.069709][T31278] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1626.076807][T31278] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1626.083425][T31278] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1626.136178][T31278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1626.159907][T31278] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1626.207092][T31278] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1626.220417][T31308] FAULT_INJECTION: forcing a failure. [ 1626.220417][T31308] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.236389][T31308] CPU: 0 UID: 0 PID: 31308 Comm: syz.5.4920 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1626.236440][T31308] Tainted: [I]=FIRMWARE_WORKAROUND [ 1626.236453][T31308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1626.236472][T31308] Call Trace: [ 1626.236483][T31308] [ 1626.236495][T31308] dump_stack_lvl+0x16c/0x1f0 [ 1626.236550][T31308] should_fail_ex+0x512/0x640 [ 1626.236592][T31308] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1626.236637][T31308] should_failslab+0xc2/0x120 [ 1626.236682][T31308] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1626.236720][T31308] ? sock_alloc_inode+0x25/0x1c0 [ 1626.236761][T31308] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1626.236793][T31308] sock_alloc_inode+0x25/0x1c0 [ 1626.236824][T31308] alloc_inode+0x61/0x240 [ 1626.236872][T31308] sock_alloc+0x40/0x280 [ 1626.236904][T31308] do_accept+0xf7/0x530 [ 1626.236944][T31308] ? do_raw_spin_lock+0x12c/0x2b0 [ 1626.236993][T31308] ? __pfx_do_accept+0x10/0x10 [ 1626.237062][T31308] __sys_accept4+0x100/0x1c0 [ 1626.237107][T31308] ? __pfx___sys_accept4+0x10/0x10 [ 1626.237147][T31308] ? ksys_write+0x1ac/0x250 [ 1626.237184][T31308] ? __pfx_ksys_write+0x10/0x10 [ 1626.237229][T31308] __x64_sys_accept+0x74/0xb0 [ 1626.237269][T31308] ? lockdep_hardirqs_on+0x7c/0x110 [ 1626.237317][T31308] do_syscall_64+0xcd/0x490 [ 1626.237371][T31308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.237404][T31308] RIP: 0033:0x7f5fcff8eb69 [ 1626.237430][T31308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1626.237460][T31308] RSP: 002b:00007f5fd0eba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1626.237492][T31308] RAX: ffffffffffffffda RBX: 00007f5fd01b5fa0 RCX: 00007f5fcff8eb69 [ 1626.237513][T31308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1626.237532][T31308] RBP: 00007f5fd0eba090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.237583][T31308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.237602][T31308] R13: 0000000000000000 R14: 00007f5fd01b5fa0 R15: 00007ffdac974758 [ 1626.237644][T31308] [ 1626.241061][T31278] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1626.267212][T31288] [U] [ 1627.561130][T10826] Bluetooth: hci0: command 0x0406 tx timeout [ 1628.110825][T10826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1628.190793][T10826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1628.467200][T31339] FAULT_INJECTION: forcing a failure. [ 1628.467200][T31339] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.496131][T31339] CPU: 1 UID: 0 PID: 31339 Comm: syz.5.4929 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1628.496183][T31339] Tainted: [I]=FIRMWARE_WORKAROUND [ 1628.496196][T31339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1628.496216][T31339] Call Trace: [ 1628.496227][T31339] [ 1628.496240][T31339] dump_stack_lvl+0x16c/0x1f0 [ 1628.496294][T31339] should_fail_ex+0x512/0x640 [ 1628.496325][T31339] ? fs_reclaim_acquire+0xae/0x150 [ 1628.496378][T31339] should_failslab+0xc2/0x120 [ 1628.496421][T31339] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1628.496462][T31339] ? security_inode_alloc+0x3b/0x2b0 [ 1628.496534][T31339] security_inode_alloc+0x3b/0x2b0 [ 1628.496588][T31339] inode_init_always_gfp+0xce4/0x1030 [ 1628.496629][T31339] alloc_inode+0x86/0x240 [ 1628.496683][T31339] sock_alloc+0x40/0x280 [ 1628.496716][T31339] do_accept+0xf7/0x530 [ 1628.496758][T31339] ? do_raw_spin_lock+0x12c/0x2b0 [ 1628.496806][T31339] ? __pfx_do_accept+0x10/0x10 [ 1628.496877][T31339] __sys_accept4+0x100/0x1c0 [ 1628.496921][T31339] ? __pfx___sys_accept4+0x10/0x10 [ 1628.496965][T31339] ? __pfx_ksys_write+0x10/0x10 [ 1628.497009][T31339] __x64_sys_accept+0x74/0xb0 [ 1628.497050][T31339] ? lockdep_hardirqs_on+0x7c/0x110 [ 1628.497098][T31339] do_syscall_64+0xcd/0x490 [ 1628.497157][T31339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.497190][T31339] RIP: 0033:0x7f5fcff8eb69 [ 1628.497216][T31339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1628.497249][T31339] RSP: 002b:00007f5fd0eba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1628.497279][T31339] RAX: ffffffffffffffda RBX: 00007f5fd01b5fa0 RCX: 00007f5fcff8eb69 [ 1628.497301][T31339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1628.497321][T31339] RBP: 00007f5fd0eba090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.497341][T31339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.497361][T31339] R13: 0000000000000000 R14: 00007f5fd01b5fa0 R15: 00007ffdac974758 [ 1628.497505][T31339] [ 1630.190661][T10826] Bluetooth: hci4: command 0x0c1a tx timeout [ 1630.223888][T31367] Invalid ELF header magic: != ELF [ 1630.269731][T10826] Bluetooth: hci2: command 0x0c1a tx timeout [ 1630.957876][T31382] __vm_enough_memory: pid: 31382, comm: syz.0.4939, bytes: 4398046511104 not enough memory for the allocation [ 1631.119940][T31391] FAULT_INJECTION: forcing a failure. [ 1631.119940][T31391] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.136799][T31391] CPU: 0 UID: 0 PID: 31391 Comm: syz.4.4940 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1631.136854][T31391] Tainted: [I]=FIRMWARE_WORKAROUND [ 1631.136867][T31391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1631.136886][T31391] Call Trace: [ 1631.136896][T31391] [ 1631.136908][T31391] dump_stack_lvl+0x16c/0x1f0 [ 1631.136963][T31391] should_fail_ex+0x512/0x640 [ 1631.136996][T31391] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1631.137041][T31391] should_failslab+0xc2/0x120 [ 1631.137084][T31391] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1631.137125][T31391] ? __d_alloc+0x32/0xae0 [ 1631.137170][T31391] __d_alloc+0x32/0xae0 [ 1631.137234][T31391] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1631.137283][T31391] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1631.137325][T31391] d_alloc_pseudo+0x1c/0xc0 [ 1631.137375][T31391] alloc_file_pseudo+0xcf/0x230 [ 1631.137427][T31391] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1631.137490][T31391] sock_alloc_file+0x50/0x210 [ 1631.137524][T31391] do_accept+0x240/0x530 [ 1631.137565][T31391] ? do_raw_spin_lock+0x12c/0x2b0 [ 1631.137618][T31391] ? __pfx_do_accept+0x10/0x10 [ 1631.137689][T31391] __sys_accept4+0x100/0x1c0 [ 1631.137733][T31391] ? __pfx___sys_accept4+0x10/0x10 [ 1631.137773][T31391] ? ksys_write+0x1ac/0x250 [ 1631.137808][T31391] ? __pfx_ksys_write+0x10/0x10 [ 1631.137856][T31391] __x64_sys_accept+0x74/0xb0 [ 1631.137896][T31391] ? lockdep_hardirqs_on+0x7c/0x110 [ 1631.137945][T31391] do_syscall_64+0xcd/0x490 [ 1631.138000][T31391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.138034][T31391] RIP: 0033:0x7f9a0258eb69 [ 1631.138059][T31391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1631.138090][T31391] RSP: 002b:00007f9a03330038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1631.138121][T31391] RAX: ffffffffffffffda RBX: 00007f9a027b5fa0 RCX: 00007f9a0258eb69 [ 1631.138143][T31391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1631.138162][T31391] RBP: 00007f9a03330090 R08: 0000000000000000 R09: 0000000000000000 [ 1631.138182][T31391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.138203][T31391] R13: 0000000000000000 R14: 00007f9a027b5fa0 R15: 00007fff2e3b9e98 [ 1631.138252][T31391] [ 1631.415234][T31380] could not allocate digest TFM handle [ 1631.772153][T29350] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1631.788975][T29350] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1631.798225][T29350] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1631.808185][T29350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1631.824065][T29350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1632.350663][T29350] Bluetooth: hci2: command 0x0c1a tx timeout [ 1632.467626][T30725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.712474][T30725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.837597][T31431] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4948'. [ 1632.991167][T30725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.048516][T31432] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4948'. [ 1633.082437][T31431] netlink: 134 bytes leftover after parsing attributes in process `syz.5.4948'. [ 1633.110308][T31394] chnl_net:caif_netlink_parms(): no params data found [ 1633.311390][T30725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.347038][T31440] FAULT_INJECTION: forcing a failure. [ 1633.347038][T31440] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.369669][T31440] CPU: 0 UID: 0 PID: 31440 Comm: syz.4.4950 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1633.369720][T31440] Tainted: [I]=FIRMWARE_WORKAROUND [ 1633.369732][T31440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1633.369748][T31440] Call Trace: [ 1633.369758][T31440] [ 1633.369770][T31440] dump_stack_lvl+0x16c/0x1f0 [ 1633.369818][T31440] should_fail_ex+0x512/0x640 [ 1633.369845][T31440] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1633.369883][T31440] should_failslab+0xc2/0x120 [ 1633.369920][T31440] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1633.369951][T31440] ? d_instantiate+0x77/0x90 [ 1633.369985][T31440] ? alloc_empty_file+0x55/0x1e0 [ 1633.370029][T31440] alloc_empty_file+0x55/0x1e0 [ 1633.370071][T31440] alloc_file_pseudo+0x13a/0x230 [ 1633.370113][T31440] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1633.370166][T31440] sock_alloc_file+0x50/0x210 [ 1633.370194][T31440] do_accept+0x240/0x530 [ 1633.370228][T31440] ? do_raw_spin_lock+0x12c/0x2b0 [ 1633.370271][T31440] ? __pfx_do_accept+0x10/0x10 [ 1633.370329][T31440] __sys_accept4+0x100/0x1c0 [ 1633.370371][T31440] ? __pfx___sys_accept4+0x10/0x10 [ 1633.370406][T31440] ? ksys_write+0x1ac/0x250 [ 1633.370436][T31440] ? __pfx_ksys_write+0x10/0x10 [ 1633.370474][T31440] __x64_sys_accept+0x74/0xb0 [ 1633.370508][T31440] ? lockdep_hardirqs_on+0x7c/0x110 [ 1633.370549][T31440] do_syscall_64+0xcd/0x490 [ 1633.370594][T31440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.370622][T31440] RIP: 0033:0x7f9a0258eb69 [ 1633.370645][T31440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1633.370673][T31440] RSP: 002b:00007f9a03330038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1633.370699][T31440] RAX: ffffffffffffffda RBX: 00007f9a027b5fa0 RCX: 00007f9a0258eb69 [ 1633.370718][T31440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1633.370735][T31440] RBP: 00007f9a03330090 R08: 0000000000000000 R09: 0000000000000000 [ 1633.370751][T31440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.370768][T31440] R13: 0000000000000000 R14: 00007f9a027b5fa0 R15: 00007fff2e3b9e98 [ 1633.370803][T31440] [ 1633.860293][T31447] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 1633.872146][T29350] Bluetooth: hci3: command tx timeout [ 1634.149099][T31450] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76 [ 1634.250601][T31447] nfs: Bad value for 'source' [ 1634.411083][T31458] netlink: 'syz.4.4954': attribute type 1 has an invalid length. [ 1634.445317][T29350] Bluetooth: hci2: command 0x0c1a tx timeout [ 1635.117607][T31394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.126868][T31394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.135130][T31394] bridge_slave_0: entered allmulticast mode [ 1635.145180][T31394] bridge_slave_0: entered promiscuous mode [ 1635.247467][T31394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.292698][T31394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.300865][T31394] bridge_slave_1: entered allmulticast mode [ 1635.326761][T31394] bridge_slave_1: entered promiscuous mode [ 1635.416856][T31477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4958'. [ 1635.859564][T30725] team0: left allmulticast mode [ 1635.865910][T30725] team_slave_0: left allmulticast mode [ 1635.885539][T30725] team_slave_1: left allmulticast mode [ 1635.906086][T30725] team0: left promiscuous mode [ 1635.923445][T30725] team_slave_0: left promiscuous mode [ 1635.945382][T30725] team_slave_1: left promiscuous mode [ 1635.951354][T10826] Bluetooth: hci3: command tx timeout [ 1635.972353][T30725] bridge0: port 4(team0) entered disabled state [ 1635.993292][T30725] gretap0: left allmulticast mode [ 1636.011158][T30725] gretap0: left promiscuous mode [ 1636.024125][T30725] bridge0: port 3(gretap0) entered disabled state [ 1636.205575][T30725] bridge_slave_1: left allmulticast mode [ 1636.220875][T31485] FAULT_INJECTION: forcing a failure. [ 1636.220875][T31485] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.235086][T30725] bridge_slave_1: left promiscuous mode [ 1636.244594][T30725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.274279][T30725] bridge_slave_0: left allmulticast mode [ 1636.286191][T31485] CPU: 0 UID: 0 PID: 31485 Comm: syz.5.4960 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1636.286234][T31485] Tainted: [I]=FIRMWARE_WORKAROUND [ 1636.286244][T31485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1636.286258][T31485] Call Trace: [ 1636.286266][T31485] [ 1636.286275][T31485] dump_stack_lvl+0x16c/0x1f0 [ 1636.286316][T31485] should_fail_ex+0x512/0x640 [ 1636.286339][T31485] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1636.286370][T31485] should_failslab+0xc2/0x120 [ 1636.286402][T31485] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1636.286430][T31485] ? security_file_alloc+0x34/0x2b0 [ 1636.286463][T31485] security_file_alloc+0x34/0x2b0 [ 1636.286490][T31485] init_file+0x93/0x4c0 [ 1636.286524][T31485] alloc_empty_file+0x73/0x1e0 [ 1636.286559][T31485] alloc_file_pseudo+0x13a/0x230 [ 1636.286607][T31485] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1636.286666][T31485] sock_alloc_file+0x50/0x210 [ 1636.286699][T31485] do_accept+0x240/0x530 [ 1636.286734][T31485] ? do_raw_spin_lock+0x12c/0x2b0 [ 1636.286772][T31485] ? __pfx_do_accept+0x10/0x10 [ 1636.286821][T31485] __sys_accept4+0x100/0x1c0 [ 1636.286852][T31485] ? __pfx___sys_accept4+0x10/0x10 [ 1636.286881][T31485] ? ksys_write+0x1ac/0x250 [ 1636.286906][T31485] ? __pfx_ksys_write+0x10/0x10 [ 1636.286946][T31485] __x64_sys_accept+0x74/0xb0 [ 1636.286976][T31485] ? lockdep_hardirqs_on+0x7c/0x110 [ 1636.287011][T31485] do_syscall_64+0xcd/0x490 [ 1636.287050][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.287074][T31485] RIP: 0033:0x7f5fcff8eb69 [ 1636.287094][T31485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.287117][T31485] RSP: 002b:00007f5fd0eba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1636.287139][T31485] RAX: ffffffffffffffda RBX: 00007f5fd01b5fa0 RCX: 00007f5fcff8eb69 [ 1636.287155][T31485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1636.287170][T31485] RBP: 00007f5fd0eba090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.287185][T31485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.287200][T31485] R13: 0000000000000000 R14: 00007f5fd01b5fa0 R15: 00007ffdac974758 [ 1636.287229][T31485] [ 1636.526911][T30725] bridge_slave_0: left promiscuous mode [ 1636.533948][T30725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.953574][T31498] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1636.978000][T31498] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4962'. [ 1638.027374][T10826] Bluetooth: hci3: command tx timeout [ 1638.565035][T30725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.592729][T30725] bond0 (unregistering): Released all slaves [ 1638.648928][T31394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.734623][T31394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1638.778970][T30725] tipc: Left network mode [ 1638.970220][T31394] team0: Port device team_slave_0 added [ 1639.044830][T31394] team0: Port device team_slave_1 added [ 1639.444141][T31394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.484690][T31394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.586138][T31394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.737001][T31394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.744165][T31394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.867803][T31394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.104957][T10826] Bluetooth: hci3: command tx timeout [ 1640.544432][T31394] hsr_slave_0: entered promiscuous mode [ 1640.633662][T31394] hsr_slave_1: entered promiscuous mode [ 1640.706036][T31394] debugfs: 'hsr0' already exists in 'hsr' [ 1640.712016][T31394] Cannot create hsr debugfs directory [ 1641.332512][T31536] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4970'. [ 1645.466321][T30725] hsr_slave_0: left promiscuous mode [ 1645.503415][T30725] hsr_slave_1: left promiscuous mode [ 1645.525063][T30725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1645.554587][T30725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1645.593309][T30725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1645.614570][T30725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.685060][T30725] veth1_vlan: left promiscuous mode [ 1645.705996][T30725] veth0_vlan: left promiscuous mode [ 1645.725934][T31592] netlink: 302 bytes leftover after parsing attributes in process `syz.0.4976'. [ 1646.054276][T31600] hub 1-0:1.0: USB hub found [ 1646.061911][T31600] hub 1-0:1.0: 1 port detected [ 1646.620057][T30725] team0 (unregistering): Port device team_slave_1 removed [ 1646.680658][T30725] team0 (unregistering): Port device team_slave_0 removed [ 1647.685998][T31394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1647.718126][T31394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1647.845170][T31394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1647.924510][T31394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1648.084555][T31620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4982'. [ 1648.304322][T31616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4980'. [ 1648.826204][T31640] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1649.088425][T31394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1649.402835][T31394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.603559][T31666] FAULT_INJECTION: forcing a failure. [ 1649.603559][T31666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1649.635290][T31666] CPU: 1 UID: 0 PID: 31666 Comm: syz.4.4988 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1649.635344][T31666] Tainted: [I]=FIRMWARE_WORKAROUND [ 1649.635357][T31666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1649.635376][T31666] Call Trace: [ 1649.635386][T31666] [ 1649.635399][T31666] dump_stack_lvl+0x16c/0x1f0 [ 1649.635455][T31666] should_fail_ex+0x512/0x640 [ 1649.635498][T31666] _copy_from_user+0x2e/0xd0 [ 1649.635539][T31666] do_pages_stat+0x24c/0x820 [ 1649.635599][T31666] ? __pfx_do_pages_stat+0x10/0x10 [ 1649.635678][T31666] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1649.635725][T31666] ? lockdep_hardirqs_on+0x7c/0x110 [ 1649.635773][T31666] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1649.635825][T31666] kernel_move_pages+0xfa8/0x1380 [ 1649.635882][T31666] ? do_futex+0x122/0x350 [ 1649.635950][T31666] ? __pfx_do_futex+0x10/0x10 [ 1649.635994][T31666] ? __pfx_kernel_move_pages+0x10/0x10 [ 1649.636043][T31666] ? __pfx___might_resched+0x10/0x10 [ 1649.636082][T31666] ? __x64_sys_futex+0x1e0/0x4c0 [ 1649.636122][T31666] ? __x64_sys_futex+0x1e9/0x4c0 [ 1649.636166][T31666] ? __x64_sys_openat+0x174/0x210 [ 1649.636220][T31666] ? xfd_validate_state+0x61/0x180 [ 1649.636283][T31666] __x64_sys_move_pages+0xe0/0x1c0 [ 1649.636333][T31666] ? do_syscall_64+0x91/0x490 [ 1649.636381][T31666] ? lockdep_hardirqs_on+0x7c/0x110 [ 1649.636426][T31666] do_syscall_64+0xcd/0x490 [ 1649.636480][T31666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.636513][T31666] RIP: 0033:0x7f9a0258eb69 [ 1649.636539][T31666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1649.636571][T31666] RSP: 002b:00007f9a003f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1649.636602][T31666] RAX: ffffffffffffffda RBX: 00007f9a027b6160 RCX: 00007f9a0258eb69 [ 1649.636625][T31666] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 1649.636645][T31666] RBP: 00007f9a02611df1 R08: 0000000000000000 R09: 0000000000000002 [ 1649.636666][T31666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1649.636686][T31666] R13: 0000000000000000 R14: 00007f9a027b6160 R15: 00007fff2e3b9e98 [ 1649.636728][T31666] [ 1649.907831][T30724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.915153][T30724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.996467][T30724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.003830][T30724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.008508][T31394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1652.305935][T31724] Invalid ELF header magic: != ELF [ 1652.495436][T31720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4996'. [ 1652.525546][T31394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.539565][T31720] bridge_slave_1: left allmulticast mode [ 1652.547491][T31720] bridge_slave_1: left promiscuous mode [ 1652.559939][T31720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.591767][T31720] bridge_slave_0: left allmulticast mode [ 1652.602716][T31720] bridge_slave_0: left promiscuous mode [ 1652.610830][T31720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.145773][T31743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1653.181708][T31394] veth0_vlan: entered promiscuous mode [ 1653.689117][T31394] veth1_vlan: entered promiscuous mode [ 1654.118513][T31394] veth0_macvtap: entered promiscuous mode [ 1654.234166][T31394] veth1_macvtap: entered promiscuous mode [ 1654.287402][T31783] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78 [ 1654.363356][T31785] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79 [ 1654.940299][T31394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1655.028445][T31394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1655.109999][T28275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.213219][T28275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.469028][T28275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.513813][T28275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.255589][T27422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.289265][T27422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1656.715997][ T8214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1656.769346][ T8214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.330528][T31829] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1657.584219][T31824] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1659.200455][T31870] FAULT_INJECTION: forcing a failure. [ 1659.200455][T31870] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.204194][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5019'. [ 1659.225339][T31870] CPU: 1 UID: 0 PID: 31870 Comm: syz.4.5020 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1659.225383][T31870] Tainted: [I]=FIRMWARE_WORKAROUND [ 1659.225392][T31870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1659.225406][T31870] Call Trace: [ 1659.225414][T31870] [ 1659.225424][T31870] dump_stack_lvl+0x16c/0x1f0 [ 1659.225463][T31870] should_fail_ex+0x512/0x640 [ 1659.225485][T31870] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1659.225516][T31870] should_failslab+0xc2/0x120 [ 1659.225546][T31870] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1659.225573][T31870] ? alloc_empty_file+0x55/0x1e0 [ 1659.225611][T31870] alloc_empty_file+0x55/0x1e0 [ 1659.225645][T31870] path_openat+0xda/0x2cb0 [ 1659.225670][T31870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.225709][T31870] ? __pfx_path_openat+0x10/0x10 [ 1659.225743][T31870] do_filp_open+0x20b/0x470 [ 1659.225774][T31870] ? __pfx_do_filp_open+0x10/0x10 [ 1659.225822][T31870] ? alloc_fd+0x471/0x7d0 [ 1659.225854][T31870] do_sys_openat2+0x11b/0x1d0 [ 1659.225890][T31870] ? __pfx_do_sys_openat2+0x10/0x10 [ 1659.225937][T31870] __x64_sys_openat+0x174/0x210 [ 1659.225974][T31870] ? __pfx___x64_sys_openat+0x10/0x10 [ 1659.226024][T31870] do_syscall_64+0xcd/0x490 [ 1659.226064][T31870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.226088][T31870] RIP: 0033:0x7f9a0258eb69 [ 1659.226107][T31870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1659.226131][T31870] RSP: 002b:00007f9a03330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1659.226153][T31870] RAX: ffffffffffffffda RBX: 00007f9a027b5fa0 RCX: 00007f9a0258eb69 [ 1659.226169][T31870] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1659.226185][T31870] RBP: 00007f9a02611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1659.226200][T31870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1659.226215][T31870] R13: 0000000000000000 R14: 00007f9a027b5fa0 R15: 00007fff2e3b9e98 [ 1659.226245][T31870] [ 1659.608850][T31878] input: jJǸ-9%vJ86 as /devices/virtual/input/input81 [ 1659.996513][T31879] usb usb24: usbfs: process 31879 (syz.1.5018) did not claim interface 0 before use [ 1660.061265][T31882] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5022'. [ 1661.308452][T31914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1661.409926][T31916] FAULT_INJECTION: forcing a failure. [ 1661.409926][T31916] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.432369][T31916] CPU: 0 UID: 0 PID: 31916 Comm: syz.4.5029 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1661.432437][T31916] Tainted: [I]=FIRMWARE_WORKAROUND [ 1661.432452][T31916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1661.432473][T31916] Call Trace: [ 1661.432485][T31916] [ 1661.432498][T31916] dump_stack_lvl+0x16c/0x1f0 [ 1661.432559][T31916] should_fail_ex+0x512/0x640 [ 1661.432593][T31916] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1661.432637][T31916] should_failslab+0xc2/0x120 [ 1661.432682][T31916] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1661.432724][T31916] ? alloc_empty_file+0x55/0x1e0 [ 1661.432780][T31916] alloc_empty_file+0x55/0x1e0 [ 1661.432831][T31916] path_openat+0xda/0x2cb0 [ 1661.432867][T31916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.432917][T31916] ? __pfx_path_openat+0x10/0x10 [ 1661.432972][T31916] do_filp_open+0x20b/0x470 [ 1661.433013][T31916] ? __pfx_do_filp_open+0x10/0x10 [ 1661.433083][T31916] ? alloc_fd+0x471/0x7d0 [ 1661.433130][T31916] do_sys_openat2+0x11b/0x1d0 [ 1661.433183][T31916] ? __pfx_do_sys_openat2+0x10/0x10 [ 1661.433253][T31916] __x64_sys_openat+0x174/0x210 [ 1661.433306][T31916] ? __pfx___x64_sys_openat+0x10/0x10 [ 1661.433375][T31916] do_syscall_64+0xcd/0x490 [ 1661.433438][T31916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.433473][T31916] RIP: 0033:0x7f9a0258eb69 [ 1661.433500][T31916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1661.433535][T31916] RSP: 002b:00007f9a03330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1661.433568][T31916] RAX: ffffffffffffffda RBX: 00007f9a027b5fa0 RCX: 00007f9a0258eb69 [ 1661.433592][T31916] RDX: 000000000014be02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1661.433615][T31916] RBP: 00007f9a02611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1661.433637][T31916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1661.433658][T31916] R13: 0000000000000000 R14: 00007f9a027b5fa0 R15: 00007fff2e3b9e98 [ 1661.433701][T31916] [ 1661.882599][T31921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1661.965537][T31921] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1662.175430][T31923] could not allocate digest TFM handle [ 1662.390042][T31935] netlink: 25 bytes leftover after parsing attributes in process `syz.4.5032'. [ 1662.733720][T31943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5033'. [ 1663.201157][T31951] input: jJǸ-9%vJ86 as /devices/virtual/input/input82 [ 1663.378913][T31956] usb usb24: usbfs: process 31956 (syz.4.5037) did not claim interface 0 before use [ 1663.406299][T31953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5036'. [ 1664.781853][T31974] zswap: compressor not available [ 1666.377866][T32013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5049'. [ 1666.409627][T32009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5050'. [ 1666.418828][T32009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.426927][T32009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.452849][T32009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.491187][T32009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.752332][T32017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5051'. [ 1667.620475][T32030] netlink: 186 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1667.817724][T32031] vmstat_refresh: nr_hugetlb -51712 [ 1668.129527][T32040] can0: slcan on ttyS2. [ 1668.222694][T32040] can0 (unregistered): slcan off ttyS2. [ 1668.350292][T28275] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1375 with max blocks 13 with error 117 [ 1668.386968][T28275] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1668.386968][T28275] [ 1669.601639][T32088] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 1669.720195][T32094] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5068'. [ 1671.358144][T32122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5073'. [ 1676.870034][T32191] binder: 32180:32191 ioctl c00c620f 200000000180 returned -22 [ 1676.975648][T32190] openvswitch: netlink: Missing valid actions attribute. [ 1677.933283][T32208] busy [ 1679.224695][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.323039][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1681.821035][T32248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5099'. [ 1682.040035][T32252] Invalid ELF header magic: != ELF [ 1683.795970][T32271] vmstat_refresh: nr_hugetlb -52224 [ 1683.904818][T32280] FAULT_INJECTION: forcing a failure. [ 1683.904818][T32280] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.089329][T32280] CPU: 0 UID: 0 PID: 32280 Comm: syz.0.5104 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1684.089370][T32280] Tainted: [I]=FIRMWARE_WORKAROUND [ 1684.089379][T32280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1684.089394][T32280] Call Trace: [ 1684.089403][T32280] [ 1684.089412][T32280] dump_stack_lvl+0x16c/0x1f0 [ 1684.089453][T32280] should_fail_ex+0x512/0x640 [ 1684.089478][T32280] ? fs_reclaim_acquire+0xae/0x150 [ 1684.089517][T32280] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1684.089561][T32280] should_failslab+0xc2/0x120 [ 1684.089594][T32280] __kmalloc_noprof+0xd2/0x510 [ 1684.089629][T32280] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1684.089663][T32280] ? tomoyo_profile+0x47/0x60 [ 1684.089700][T32280] tomoyo_path_number_perm+0x245/0x580 [ 1684.089723][T32280] ? tomoyo_path_number_perm+0x237/0x580 [ 1684.089751][T32280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1684.089774][T32280] ? futex_wake+0x1ad/0x530 [ 1684.089840][T32280] ? find_held_lock+0x2b/0x80 [ 1684.089863][T32280] ? hook_file_ioctl_common+0x145/0x410 [ 1684.089910][T32280] ? __fget_files+0x20e/0x3c0 [ 1684.089941][T32280] security_file_ioctl+0x9b/0x240 [ 1684.089973][T32280] __x64_sys_ioctl+0xb7/0x210 [ 1684.090013][T32280] do_syscall_64+0xcd/0x490 [ 1684.090054][T32280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.090078][T32280] RIP: 0033:0x7fa29758eb69 [ 1684.090097][T32280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1684.090122][T32280] RSP: 002b:00007fa2983a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.090144][T32280] RAX: ffffffffffffffda RBX: 00007fa2977b6080 RCX: 00007fa29758eb69 [ 1684.090161][T32280] RDX: ffffffffffffffff RSI: 00000000fffffff7 RDI: 0000000000000003 [ 1684.090176][T32280] RBP: 00007fa297611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1684.090191][T32280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1684.090205][T32280] R13: 0000000000000000 R14: 00007fa2977b6080 R15: 00007ffeb807ed48 [ 1684.090235][T32280] [ 1684.506227][T32280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1684.862460][T32293] QAT: Stopping all acceleration devices. [ 1684.998410][T32293] QAT: Invalid ioctl -2 [ 1685.589997][T32315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5114'. [ 1685.650827][T32317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5114'. [ 1685.764286][T32315] team0: Port device team_slave_1 removed [ 1687.791014][T32352] program syz.0.5118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1688.458518][T32365] ubi0: attaching mtd0 [ 1688.522838][T32365] ubi0: scanning is finished [ 1688.527647][T32365] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1688.998865][ T31] audit: type=1800 audit(4294967406.114:74): pid=32372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5124" name="features" dev="configfs" ino=172529 res=0 errno=0 [ 1690.617585][T32365] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1691.986688][T32396] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 895 with max blocks 23 with error 117 [ 1692.008864][T32396] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1692.008864][T32396] [ 1693.090437][T32413] FAULT_INJECTION: forcing a failure. [ 1693.090437][T32413] name failslab, interval 1, probability 0, space 0, times 0 [ 1693.117297][T32413] CPU: 1 UID: 0 PID: 32413 Comm: syz.4.5133 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1693.117349][T32413] Tainted: [I]=FIRMWARE_WORKAROUND [ 1693.117362][T32413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1693.117382][T32413] Call Trace: [ 1693.117390][T32413] [ 1693.117400][T32413] dump_stack_lvl+0x16c/0x1f0 [ 1693.117441][T32413] should_fail_ex+0x512/0x640 [ 1693.117464][T32413] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1693.117491][T32413] should_failslab+0xc2/0x120 [ 1693.117522][T32413] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1693.117547][T32413] ? copy_net_ns+0x135/0x5f0 [ 1693.117576][T32413] copy_net_ns+0x135/0x5f0 [ 1693.117598][T32413] ? copy_cgroup_ns+0x71/0x700 [ 1693.117626][T32413] create_new_namespaces+0x3ea/0xa90 [ 1693.117660][T32413] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1693.117690][T32413] ksys_unshare+0x45b/0xa40 [ 1693.117724][T32413] ? __pfx_ksys_unshare+0x10/0x10 [ 1693.117757][T32413] ? xfd_validate_state+0x61/0x180 [ 1693.117800][T32413] __x64_sys_unshare+0x31/0x40 [ 1693.117833][T32413] do_syscall_64+0xcd/0x490 [ 1693.117872][T32413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1693.117905][T32413] RIP: 0033:0x7f9a0258eb69 [ 1693.117924][T32413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1693.117947][T32413] RSP: 002b:00007f9a03330038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1693.117969][T32413] RAX: ffffffffffffffda RBX: 00007f9a027b5fa0 RCX: 00007f9a0258eb69 [ 1693.117985][T32413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1693.118000][T32413] RBP: 00007f9a02611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1693.118014][T32413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1693.118029][T32413] R13: 0000000000000000 R14: 00007f9a027b5fa0 R15: 00007fff2e3b9e98 [ 1693.118058][T32413] [ 1693.126992][T32411] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 1693.633770][T32411] ima: policy update failed [ 1693.705872][ T31] audit: type=1802 audit(4294967410.826:75): pid=32411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.5131" res=0 errno=0 [ 1693.951482][T32445] ptp ptp0: new virtual clock ptp1 [ 1693.971555][T32445] ptp ptp0: new virtual clock ptp2 [ 1693.989539][T32445] ptp ptp0: new virtual clock ptp3 [ 1693.997955][T32445] ptp ptp0: guarantee physical clock free running [ 1694.260180][T32456] vivid-009: ================= START STATUS ================= [ 1694.268055][T32456] vivid-009: Enable Output Cropping: true [ 1694.273855][T32456] vivid-009: Enable Output Composing: true [ 1694.280171][T32456] vivid-009: Enable Output Scaler: true [ 1694.285813][T32456] vivid-009: Tx RGB Quantization Range: Automatic [ 1694.292821][T32456] vivid-009: Transmit Mode: HDMI [ 1694.298063][T32456] vivid-009: Hotplug Present: 0x00000000 [ 1694.306718][T32456] vivid-009: RxSense Present: 0x00000000 [ 1694.312811][T32456] vivid-009: EDID Present: 0x00000000 [ 1694.328713][T32456] vivid-009: ================== END STATUS ================== [ 1695.706899][ T31] audit: type=1800 audit(4294967412.787:76): pid=32480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5141" name="dbroot" dev="configfs" ino=172698 res=0 errno=0 [ 1696.703448][T32508] kafs: addr_prefs: Invalid Command [ 1696.758697][T32501] netlink: 'syz.5.5144': attribute type 33 has an invalid length. [ 1696.776862][T32501] netlink: 322 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1700.884127][T32576] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1381 with max blocks 7 with error 117 [ 1700.908764][T32576] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1700.908764][T32576] [ 1703.016896][T32618] random: crng reseeded on system resumption [ 1704.785977][T10826] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1706.013455][T32651] FAULT_INJECTION: forcing a failure. [ 1706.013455][T32651] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.052197][T32651] CPU: 1 UID: 0 PID: 32651 Comm: syz.0.5168 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1706.052259][T32651] Tainted: [I]=FIRMWARE_WORKAROUND [ 1706.052273][T32651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1706.052293][T32651] Call Trace: [ 1706.052305][T32651] [ 1706.052317][T32651] dump_stack_lvl+0x16c/0x1f0 [ 1706.052376][T32651] should_fail_ex+0x512/0x640 [ 1706.052410][T32651] ? fs_reclaim_acquire+0xae/0x150 [ 1706.052467][T32651] should_failslab+0xc2/0x120 [ 1706.052514][T32651] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1706.052559][T32651] ? add_lock_to_list+0x9d/0x130 [ 1706.052597][T32651] ? kstrdup_const+0x63/0x80 [ 1706.052646][T32651] kstrdup+0x53/0x100 [ 1706.052690][T32651] kstrdup_const+0x63/0x80 [ 1706.052731][T32651] kvasprintf_const+0x10f/0x1a0 [ 1706.052777][T32651] kobject_set_name_vargs+0x5a/0x140 [ 1706.052816][T32651] dev_set_name+0xc7/0x100 [ 1706.052861][T32651] ? __pfx_dev_set_name+0x10/0x10 [ 1706.052907][T32651] ? __pfx___might_resched+0x10/0x10 [ 1706.052943][T32651] ? is_dynamic_key+0xb4/0x160 [ 1706.053003][T32651] __add_disk+0x34e/0xf00 [ 1706.053046][T32651] add_disk_fwnode+0x13f/0x5d0 [ 1706.053095][T32651] nbd_dev_add+0x783/0xbb0 [ 1706.053128][T32651] ? find_held_lock+0x2b/0x80 [ 1706.053161][T32651] ? __pfx_nbd_dev_add+0x10/0x10 [ 1706.053192][T32651] ? nbd_genl_connect+0x98e/0x1c60 [ 1706.053262][T32651] ? bpf_lsm_capable+0x9/0x10 [ 1706.053296][T32651] ? __radix_tree_lookup+0x21f/0x2c0 [ 1706.053354][T32651] nbd_genl_connect+0x8b0/0x1c60 [ 1706.053401][T32651] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1706.053440][T32651] ? __nla_parse+0x40/0x60 [ 1706.053489][T32651] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1706.053531][T32651] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1706.053581][T32651] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1706.053623][T32651] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1706.053662][T32651] ? genl_get_cmd+0x194/0x580 [ 1706.053710][T32651] ? __radix_tree_lookup+0x21f/0x2c0 [ 1706.053766][T32651] genl_rcv_msg+0x55c/0x800 [ 1706.053808][T32651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1706.053846][T32651] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1706.053901][T32651] netlink_rcv_skb+0x158/0x420 [ 1706.053954][T32651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1706.053994][T32651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1706.054073][T32651] ? netlink_deliver_tap+0x1ae/0xd30 [ 1706.054133][T32651] genl_rcv+0x28/0x40 [ 1706.054165][T32651] netlink_unicast+0x5a7/0x870 [ 1706.054227][T32651] ? __pfx_netlink_unicast+0x10/0x10 [ 1706.054280][T32651] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1706.054333][T32651] ? __lock_acquire+0xb97/0x1ce0 [ 1706.054391][T32651] netlink_sendmsg+0x8d1/0xdd0 [ 1706.054453][T32651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1706.054527][T32651] ____sys_sendmsg+0xa95/0xc70 [ 1706.054568][T32651] ? copy_msghdr_from_user+0x10a/0x160 [ 1706.054620][T32651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1706.054682][T32651] ___sys_sendmsg+0x134/0x1d0 [ 1706.054740][T32651] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.054847][T32651] __sys_sendmsg+0x16d/0x220 [ 1706.054901][T32651] ? __pfx___sys_sendmsg+0x10/0x10 [ 1706.054953][T32651] ? __x64_sys_futex+0x1e0/0x4c0 [ 1706.055025][T32651] do_syscall_64+0xcd/0x490 [ 1706.055093][T32651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.055130][T32651] RIP: 0033:0x7fa29758eb69 [ 1706.055158][T32651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1706.055192][T32651] RSP: 002b:00007fa2983c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.055226][T32651] RAX: ffffffffffffffda RBX: 00007fa2977b5fa0 RCX: 00007fa29758eb69 [ 1706.055249][T32651] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000007 [ 1706.055271][T32651] RBP: 00007fa297611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1706.055293][T32651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.055314][T32651] R13: 0000000000000000 R14: 00007fa2977b5fa0 R15: 00007ffeb807ed48 [ 1706.055360][T32651] [ 1706.516976][T32651] nbd: failed to add new device [ 1707.042942][T32660] zswap: compressor not available [ 1708.651366][T32680] netlink: 326 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1709.460349][T32683] vivid-007: ================= START STATUS ================= [ 1709.490346][T32683] vivid-007: Generate PTS: true [ 1709.495281][T32683] vivid-007: Generate SCR: true [ 1709.545629][T32683] tpg source WxH: 320x240 (Y'CbCr) [ 1709.568425][T32683] tpg field: 1 [ 1709.576009][T32683] tpg crop: (0,0)/320x240 [ 1709.610813][T32683] tpg compose: (0,0)/320x240 [ 1709.616657][T32683] tpg colorspace: 8 [ 1709.621124][T32683] tpg transfer function: 0/0 [ 1709.629843][T32694] [U]  [ 1709.632835][T32694] [U] [ 1709.635577][T32694] [U] [ 1709.638287][T32694] [U] [ 1709.650459][T32694] [U] [ 1709.653255][T32694] [U] [ 1709.656021][T32694] [U] [ 1709.658810][T32694] [U] [ 1709.665399][T32692] serio: Serial port pty238 [ 1709.672055][T32683] tpg Y'CbCr encoding: 0/0 [ 1709.676525][T32683] tpg quantization: 0/0 [ 1709.687547][T32694] [U] [ 1709.690359][T32694] [U] [ 1709.693116][T32694] [U] [ 1709.695847][T32694] [U] [ 1709.750284][T32694] [U] [ 1709.753083][T32694] [U] [ 1709.755913][T32694] [U] [ 1709.758649][T32694] [U] [ 1709.862201][T32683] tpg RGB range: 0/2 [ 1709.875210][T32694] [U] [ 1709.877994][T32694] [U] [ 1709.880845][T32694] [U] [ 1709.883579][T32694] [U] [ 1709.893711][T32683] vivid-007: ================== END STATUS ================== [ 1709.967392][T32694] [U] [ 1709.970201][T32694] [U] [ 1709.972965][T32694] [U] [ 1709.975724][T32694] [U] [ 1710.000321][T32694] [U] [ 1710.003112][T32694] [U] [ 1710.005869][T32694] [U] [ 1710.008626][T32694] [U] [ 1710.291184][T32694] [U] [ 1710.822296][T32683] can: request_module (can-proto-3) failed. [ 1711.452193][T32727] Unable to find swap-space signature [ 1713.075517][T32750] nfsd: Unknown parameter 'Z' [ 1713.993992][T32763] FAULT_INJECTION: forcing a failure. [ 1713.993992][T32763] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1714.007412][T32763] CPU: 1 UID: 0 PID: 32763 Comm: syz.5.5189 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1714.007452][T32763] Tainted: [I]=FIRMWARE_WORKAROUND [ 1714.007462][T32763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1714.007476][T32763] Call Trace: [ 1714.007485][T32763] [ 1714.007494][T32763] dump_stack_lvl+0x16c/0x1f0 [ 1714.007536][T32763] should_fail_ex+0x512/0x640 [ 1714.007566][T32763] get_futex_key+0x1d0/0x1560 [ 1714.007599][T32763] ? __pfx_get_futex_key+0x10/0x10 [ 1714.007633][T32763] ? ida_alloc_range+0x5cb/0x830 [ 1714.007673][T32763] futex_wake+0xea/0x530 [ 1714.007726][T32763] ? __pfx_futex_wake+0x10/0x10 [ 1714.007788][T32763] ? __pfx_perf_event_namespaces+0x10/0x10 [ 1714.007852][T32763] do_futex+0x1e3/0x350 [ 1714.007895][T32763] ? __pfx_do_futex+0x10/0x10 [ 1714.007941][T32763] ? ksys_unshare+0x687/0xa40 [ 1714.007993][T32763] __x64_sys_futex+0x1e0/0x4c0 [ 1714.008042][T32763] ? __pfx___x64_sys_futex+0x10/0x10 [ 1714.008086][T32763] ? xfd_validate_state+0x61/0x180 [ 1714.008150][T32763] do_syscall_64+0xcd/0x490 [ 1714.008205][T32763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.008230][T32763] RIP: 0033:0x7f5fcff8eb69 [ 1714.008249][T32763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1714.008274][T32763] RSP: 002b:00007f5fd0eba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1714.008296][T32763] RAX: ffffffffffffffda RBX: 00007f5fd01b5fa8 RCX: 00007f5fcff8eb69 [ 1714.008313][T32763] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5fd01b5fac [ 1714.008328][T32763] RBP: 00007f5fd01b5fa0 R08: 00007f5fd0ebb000 R09: 0000000000000000 [ 1714.008344][T32763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5fd01b5fac [ 1714.008359][T32763] R13: 0000000000000000 R14: 00007ffdac974670 R15: 00007ffdac974758 [ 1714.008388][T32763] [ 1714.989662][ T306] __vm_enough_memory: pid: 306, comm: syz.1.5191, bytes: 4398046511104 not enough memory for the allocation [ 1715.497055][ T321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5193'. [ 1715.538591][ T315] could not allocate digest TFM handle [ 1716.133305][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5196'. [ 1717.756516][ T351] FAULT_INJECTION: forcing a failure. [ 1717.756516][ T351] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1717.814489][ T351] CPU: 1 UID: 0 PID: 351 Comm: syz.5.5199 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1717.814544][ T351] Tainted: [I]=FIRMWARE_WORKAROUND [ 1717.814557][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1717.814576][ T351] Call Trace: [ 1717.814587][ T351] [ 1717.814600][ T351] dump_stack_lvl+0x16c/0x1f0 [ 1717.814656][ T351] should_fail_ex+0x512/0x640 [ 1717.814694][ T351] get_futex_key+0x1d0/0x1560 [ 1717.814740][ T351] ? __pfx_get_futex_key+0x10/0x10 [ 1717.814777][ T351] ? futex_private_hash_put+0x176/0x300 [ 1717.814830][ T351] futex_wake+0xea/0x530 [ 1717.814884][ T351] ? __pfx_futex_wake+0x10/0x10 [ 1717.814940][ T351] ? __lock_acquire+0x62e/0x1ce0 [ 1717.814998][ T351] do_futex+0x1e3/0x350 [ 1717.815041][ T351] ? __pfx_do_futex+0x10/0x10 [ 1717.815087][ T351] ? find_held_lock+0x2b/0x80 [ 1717.815122][ T351] __x64_sys_futex+0x1e0/0x4c0 [ 1717.815169][ T351] ? __pfx___x64_sys_futex+0x10/0x10 [ 1717.815235][ T351] do_syscall_64+0xcd/0x490 [ 1717.815290][ T351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.815324][ T351] RIP: 0033:0x7f5fcff8eb69 [ 1717.815349][ T351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1717.815381][ T351] RSP: 002b:00007f5fd0e990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1717.815412][ T351] RAX: ffffffffffffffda RBX: 00007f5fd01b6088 RCX: 00007f5fcff8eb69 [ 1717.815432][ T351] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5fd01b608c [ 1717.815452][ T351] RBP: 00007f5fd01b6080 R08: 00007f5fd0ebb000 R09: 0000000000000000 [ 1717.815471][ T351] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f5fd01b608c [ 1717.815491][ T351] R13: 0000000000000000 R14: 00007ffdac974670 R15: 00007ffdac974758 [ 1717.815529][ T351] [ 1720.359069][ T391] netlink: 'syz.4.5210': attribute type 33 has an invalid length. [ 1720.376043][ T391] netlink: 322 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1720.671157][ T397] netlink: 'syz.5.5212': attribute type 33 has an invalid length. [ 1720.679235][ T397] netlink: 322 bytes leftover after parsing attributes in process `syz.5.5212'. [ 1724.092250][ T475] random: crng reseeded on system resumption [ 1725.138076][ T487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1725.928470][T28276] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1370 with max blocks 18 with error 117 [ 1725.997799][T28276] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1725.997799][T28276] [ 1727.578718][T29350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1727.591670][T29350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1727.616710][T29350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1727.650298][T29350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1727.660048][T29350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1727.788591][ T532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5240'. [ 1727.846128][T28276] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.177924][ T536] ptp ptp0: delete virtual clock ptp3 [ 1728.189130][T28276] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.197235][ T538] netlink: 'syz.0.5242': attribute type 10 has an invalid length. [ 1728.212961][ T538] netlink: 230 bytes leftover after parsing attributes in process `syz.0.5242'. [ 1728.270983][ T538] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1728.290798][ T536] ptp ptp0: delete virtual clock ptp2 [ 1728.378543][ T536] ptp ptp0: delete virtual clock ptp1 [ 1728.421836][ T536] ptp ptp0: only physical clock in use now [ 1728.426865][T28276] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.460667][ T544] netlink: 'syz.1.5243': attribute type 33 has an invalid length. [ 1728.474676][ T544] netlink: 322 bytes leftover after parsing attributes in process `syz.1.5243'. [ 1728.584592][T28276] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.659255][ T527] chnl_net:caif_netlink_parms(): no params data found [ 1729.744638][T29350] Bluetooth: hci0: command tx timeout [ 1729.987846][ T580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5248'. [ 1731.516925][T28276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.539288][T28276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.560228][T28276] bond0 (unregistering): Released all slaves [ 1731.812098][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.822511][T29350] Bluetooth: hci0: command tx timeout [ 1731.840745][ T527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.849202][ T527] bridge_slave_0: entered allmulticast mode [ 1731.860271][ T527] bridge_slave_0: entered promiscuous mode [ 1731.897036][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.906954][ T527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.915649][ T527] bridge_slave_1: entered allmulticast mode [ 1731.928882][ T606] random: crng reseeded on system resumption [ 1731.929370][ T527] bridge_slave_1: entered promiscuous mode [ 1732.044878][ T527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.116435][ T527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.514430][ T527] team0: Port device team_slave_0 added [ 1732.540641][ T527] team0: Port device team_slave_1 added [ 1732.637849][ T527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.648275][ T527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.675595][ T527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.718569][ T527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.745232][ T527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.795752][ T527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.345654][ T527] hsr_slave_0: entered promiscuous mode [ 1733.389649][ T527] hsr_slave_1: entered promiscuous mode [ 1733.902447][T29350] Bluetooth: hci0: command tx timeout [ 1734.508109][ T650] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1734.774806][ T655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1735.160994][T28276] hsr_slave_0: left promiscuous mode [ 1735.295562][T28276] hsr_slave_1: left promiscuous mode [ 1735.363695][T28276] veth1_macvtap: left promiscuous mode [ 1735.369542][T28276] veth0_macvtap: left promiscuous mode [ 1735.994700][T29350] Bluetooth: hci0: command tx timeout [ 1736.440425][ T674] FAULT_INJECTION: forcing a failure. [ 1736.440425][ T674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.482529][ T674] CPU: 1 UID: 0 PID: 674 Comm: syz.5.5263 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1736.482586][ T674] Tainted: [I]=FIRMWARE_WORKAROUND [ 1736.482600][ T674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1736.482621][ T674] Call Trace: [ 1736.482633][ T674] [ 1736.482647][ T674] dump_stack_lvl+0x16c/0x1f0 [ 1736.482704][ T674] should_fail_ex+0x512/0x640 [ 1736.482747][ T674] _copy_to_user+0x32/0xd0 [ 1736.482792][ T674] simple_read_from_buffer+0xcb/0x170 [ 1736.482856][ T674] simple_attr_read+0x2d6/0x370 [ 1736.482887][ T674] ? __debugfs_file_get+0x1fe/0x840 [ 1736.482932][ T674] ? __pfx_simple_attr_read+0x10/0x10 [ 1736.482979][ T674] debugfs_attr_read+0x76/0xa0 [ 1736.483024][ T674] ? __pfx_debugfs_attr_read+0x10/0x10 [ 1736.483072][ T674] vfs_read+0x1e4/0xc60 [ 1736.483116][ T674] ? __pfx___mutex_lock+0x10/0x10 [ 1736.483184][ T674] ? __pfx_vfs_read+0x10/0x10 [ 1736.483235][ T674] ? __fget_files+0x20e/0x3c0 [ 1736.483284][ T674] ksys_read+0x12a/0x250 [ 1736.483322][ T674] ? __pfx_ksys_read+0x10/0x10 [ 1736.483374][ T674] do_syscall_64+0xcd/0x490 [ 1736.483431][ T674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.483466][ T674] RIP: 0033:0x7f5fcff8eb69 [ 1736.483493][ T674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1736.483526][ T674] RSP: 002b:00007f5fd0eba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1736.483558][ T674] RAX: ffffffffffffffda RBX: 00007f5fd01b5fa0 RCX: 00007f5fcff8eb69 [ 1736.483581][ T674] RDX: 000000000000004b RSI: 0000200000000040 RDI: 0000000000000006 [ 1736.483602][ T674] RBP: 00007f5fd0011df1 R08: 0000000000000000 R09: 0000000000000000 [ 1736.483623][ T674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.483644][ T674] R13: 0000000000000000 R14: 00007f5fd01b5fa0 R15: 00007ffdac974758 [ 1736.483688][ T674] [ 1736.898734][ T670] zswap: compressor not available [ 1737.019795][ T683] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 1737.554438][T28276] team0 (unregistering): Port device team_slave_0 removed [ 1737.847745][ T690] Invalid ELF header magic: != ELF [ 1739.402404][ T706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1739.454926][ T706] netlink: 354 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1740.629400][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.637954][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1742.085949][ T527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1742.805403][ T527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1742.848645][ T527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1742.915337][ T527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1743.750385][ T527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.804493][ T527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.831059][T28276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.838363][T28276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.891493][T28276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.898712][T28276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.043184][ T527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1744.065925][ T527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1744.286962][ T771] binder: 770:771 unknown command 4294967282 [ 1744.319609][ T771] binder: 770:771 ioctl c0306201 2000000000c0 returned -22 [ 1744.578711][ T527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1745.123270][ T753] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1746.147590][ T806] netlink: 'syz.5.5281': attribute type 33 has an invalid length. [ 1746.213957][ T806] netlink: 322 bytes leftover after parsing attributes in process `syz.5.5281'. [ 1746.373533][ T820] nfs4: Unknown parameter ' ' [ 1747.294820][ T527] veth0_vlan: entered promiscuous mode [ 1747.336352][ T527] veth1_vlan: entered promiscuous mode [ 1747.427007][ T527] veth0_macvtap: entered promiscuous mode [ 1747.656492][ T527] veth1_macvtap: entered promiscuous mode [ 1747.760912][ T527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1747.789793][ T527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1747.824242][T28274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.856526][T28274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.886400][T28274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.911058][ T31] audit: type=1326 audit(4294967465.042:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=830 comm="syz.1.5285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f250e18eb69 code=0x0 [ 1748.053821][T28274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.641645][T28279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1748.684398][T28279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1748.811924][ T860] netlink: 'syz.0.5289': attribute type 33 has an invalid length. [ 1748.844869][ T860] netlink: 322 bytes leftover after parsing attributes in process `syz.0.5289'. [ 1748.925108][T17823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1748.939393][T17823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1749.375666][ T875] random: crng reseeded on system resumption [ 1750.720478][ T892] netlink: 'syz.1.5293': attribute type 33 has an invalid length. [ 1750.729445][ T892] netlink: 322 bytes leftover after parsing attributes in process `syz.1.5293'. [ 1752.016625][ T911] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 1752.651186][ T937] ubi0: attaching mtd0 [ 1752.879329][ T937] ubi0: scanning is finished [ 1753.213546][ T937] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1753.747126][ T937] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1756.006844][ T966] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1756.030634][ T966] .SR: entered promiscuous mode [ 1756.068494][ T966] Invalid ELF header magic: != ELF [ 1756.440872][T17823] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:47: bg 3: bad block bitmap checksum [ 1756.495248][T17823] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 5772 with max blocks 4 with error 74 [ 1756.545254][T17823] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1756.545254][T17823] [ 1756.812936][ T966] could not allocate digest TFM handle [ 1757.946113][ T994] Invalid ELF header magic: != ELF [ 1758.068264][T10826] Bluetooth: hci3: command 0x0406 tx timeout [ 1759.554248][ T1022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5315'. [ 1759.595750][ T1025] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1759.672182][ T1026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5316'. [ 1760.330041][ T1040] ALSA: mixer_oss: invalid OSS volume '0' [ 1760.392732][ T1040] ALSA: mixer_oss: invalid OSS volume '' [ 1760.528098][ T1026] veth0_macvtap: left promiscuous mode [ 1763.239456][ T1085] ovs_: entered promiscuous mode [ 1763.460599][ T1097] FAULT_INJECTION: forcing a failure. [ 1763.460599][ T1097] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.505298][ T1097] CPU: 1 UID: 0 PID: 1097 Comm: syz.4.5326 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1763.505353][ T1097] Tainted: [I]=FIRMWARE_WORKAROUND [ 1763.505367][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1763.505387][ T1097] Call Trace: [ 1763.505398][ T1097] [ 1763.505411][ T1097] dump_stack_lvl+0x16c/0x1f0 [ 1763.505468][ T1097] should_fail_ex+0x512/0x640 [ 1763.505501][ T1097] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1763.505544][ T1097] should_failslab+0xc2/0x120 [ 1763.505587][ T1097] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1763.505623][ T1097] ? __proc_create+0xc3/0x8e0 [ 1763.505669][ T1097] ? __proc_create+0x2ce/0x8e0 [ 1763.505720][ T1097] __proc_create+0x2ce/0x8e0 [ 1763.505769][ T1097] ? __pfx___proc_create+0x10/0x10 [ 1763.505813][ T1097] ? proc_register+0x30f/0x5f0 [ 1763.505866][ T1097] ? _raw_write_unlock+0x28/0x50 [ 1763.505918][ T1097] proc_create_reg+0x7d/0x180 [ 1763.505972][ T1097] proc_create_net_data+0x8e/0x1c0 [ 1763.506039][ T1097] ? __pfx_proc_create_net_data+0x10/0x10 [ 1763.506105][ T1097] sctp_proc_init+0xfb/0x270 [ 1763.506152][ T1097] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1763.506197][ T1097] sctp_defaults_init+0x74a/0xd80 [ 1763.506246][ T1097] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1763.506293][ T1097] ops_init+0x1df/0x5f0 [ 1763.506328][ T1097] setup_net+0x10f/0x380 [ 1763.506355][ T1097] ? lockdep_init_map_type+0x5c/0x280 [ 1763.506402][ T1097] ? __pfx_setup_net+0x10/0x10 [ 1763.506435][ T1097] ? debug_mutex_init+0x37/0x70 [ 1763.506474][ T1097] copy_net_ns+0x2a6/0x5f0 [ 1763.506513][ T1097] create_new_namespaces+0x3ea/0xa90 [ 1763.506562][ T1097] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1763.506606][ T1097] ksys_unshare+0x45b/0xa40 [ 1763.506653][ T1097] ? __pfx_ksys_unshare+0x10/0x10 [ 1763.506701][ T1097] ? xfd_validate_state+0x61/0x180 [ 1763.506765][ T1097] __x64_sys_unshare+0x31/0x40 [ 1763.506811][ T1097] do_syscall_64+0xcd/0x490 [ 1763.506866][ T1097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.506901][ T1097] RIP: 0033:0x7f9b7bb8eb69 [ 1763.506928][ T1097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1763.506962][ T1097] RSP: 002b:00007f9b799f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1763.506994][ T1097] RAX: ffffffffffffffda RBX: 00007f9b7bdb5fa0 RCX: 00007f9b7bb8eb69 [ 1763.507021][ T1097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1763.507041][ T1097] RBP: 00007f9b7bc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1763.507063][ T1097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.507082][ T1097] R13: 0000000000000000 R14: 00007f9b7bdb5fa0 R15: 00007ffe21fc49a8 [ 1763.507122][ T1097] [ 1764.278986][ T1105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5328'. [ 1764.393954][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.401582][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1764.426595][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.448713][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1765.885199][ T31] audit: type=1800 audit(4294967483.022:78): pid=1124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5333" name="members" dev="configfs" ino=178001 res=0 errno=0 [ 1768.545028][ T1152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5339'. [ 1769.122206][ T1156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5340'. [ 1770.288404][ T1178] FAULT_INJECTION: forcing a failure. [ 1770.288404][ T1178] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.591348][ T1178] CPU: 0 UID: 0 PID: 1178 Comm: syz.5.5345 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1770.591403][ T1178] Tainted: [I]=FIRMWARE_WORKAROUND [ 1770.591415][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1770.591433][ T1178] Call Trace: [ 1770.591458][ T1178] [ 1770.591472][ T1178] dump_stack_lvl+0x16c/0x1f0 [ 1770.591528][ T1178] should_fail_ex+0x512/0x640 [ 1770.591565][ T1178] ? fs_reclaim_acquire+0xae/0x150 [ 1770.591618][ T1178] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1770.591664][ T1178] should_failslab+0xc2/0x120 [ 1770.591708][ T1178] __kmalloc_noprof+0xd2/0x510 [ 1770.591764][ T1178] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1770.591811][ T1178] ? tomoyo_profile+0x47/0x60 [ 1770.591860][ T1178] tomoyo_path_number_perm+0x245/0x580 [ 1770.591897][ T1178] ? tomoyo_path_number_perm+0x237/0x580 [ 1770.591936][ T1178] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1770.591978][ T1178] ? find_held_lock+0x2b/0x80 [ 1770.592053][ T1178] ? find_held_lock+0x2b/0x80 [ 1770.592086][ T1178] ? hook_file_ioctl_common+0x145/0x410 [ 1770.592154][ T1178] ? __fget_files+0x20e/0x3c0 [ 1770.592202][ T1178] security_file_ioctl+0x9b/0x240 [ 1770.592240][ T1178] __x64_sys_ioctl+0xb7/0x210 [ 1770.592305][ T1178] do_syscall_64+0xcd/0x490 [ 1770.592364][ T1178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.592399][ T1178] RIP: 0033:0x7f5fcff8eb69 [ 1770.592425][ T1178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.592469][ T1178] RSP: 002b:00007f5fd0eba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1770.592500][ T1178] RAX: ffffffffffffffda RBX: 00007f5fd01b5fa0 RCX: 00007f5fcff8eb69 [ 1770.592521][ T1178] RDX: 0000000000000002 RSI: 00000000c0045627 RDI: 0000000000000003 [ 1770.592540][ T1178] RBP: 00007f5fd0eba090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.592558][ T1178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.592576][ T1178] R13: 0000000000000000 R14: 00007f5fd01b5fa0 R15: 00007ffdac974758 [ 1770.592622][ T1178] [ 1770.595939][ T1178] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1771.115565][ T1185] netlink: 'syz.4.5347': attribute type 33 has an invalid length. [ 1771.124409][ T1185] netlink: 322 bytes leftover after parsing attributes in process `syz.4.5347'. [ 1771.455641][ T1184] CIFS mount error: No usable UNC path provided in device string! [ 1771.455641][ T1184] [ 1771.490902][ T1184] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1776.639210][ T1254] can: request_module (can-proto-0) failed. [ 1780.168018][ T1320] netlink: 'syz.4.5375': attribute type 33 has an invalid length. [ 1780.176019][ T1320] netlink: 322 bytes leftover after parsing attributes in process `syz.4.5375'. [ 1780.383140][ T1323] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1782.497335][ T1367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5386'. [ 1782.996766][ T1380] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 5712 with max blocks 1 with error 117 [ 1783.017845][ T1380] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1783.017845][ T1380] [ 1783.752811][ T1403] netlink: 'syz.4.5391': attribute type 33 has an invalid length. [ 1783.766487][ T1403] netlink: 322 bytes leftover after parsing attributes in process `syz.4.5391'. [ 1784.088534][ T1411] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1784.095897][ T1411] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1784.198973][ T1419] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 1784.701881][ T1430] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.5393: Error -117 reading block bitmap for 3 [ 1785.011274][ T1430] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.5393: Error -117 reading block bitmap for 3 [ 1785.109941][ T1430] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.5393: Error -117 reading block bitmap for 3 [ 1785.180698][ T1430] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.5393: Error -117 reading block bitmap for 3 [ 1785.260689][ T1430] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.0.5393: Error -117 reading block bitmap for 3 [ 1785.376679][ T1436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1785.463970][ T1420] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.4.5396: bg 5: bad block bitmap checksum [ 1785.499670][ T1420] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 1785.513082][ T1420] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1785.513082][ T1420] [ 1786.062792][ T1444] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.1.5399: Error -117 reading block bitmap for 5 [ 1786.969949][ T1471] netlink: 'syz.0.5404': attribute type 33 has an invalid length. [ 1786.978017][ T1471] netlink: 322 bytes leftover after parsing attributes in process `syz.0.5404'. [ 1787.099148][T17823] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1374 with max blocks 14 with error 117 [ 1787.206542][T17823] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1787.206542][T17823] [ 1787.696819][ T1474] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1787.788440][ T1487] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 1787.800400][ T1487] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 1787.809792][ T1487] CPU: 1 UID: 0 PID: 1487 Comm: syz.4.5411 Tainted: G I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 1787.823030][ T1487] Tainted: [I]=FIRMWARE_WORKAROUND [ 1787.828147][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1787.838508][ T1487] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x2530 [ 1787.845212][ T1487] Code: 4c 8b b3 38 06 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 d8 bf 7d f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e2 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1787.864851][ T1487] RSP: 0018:ffffc90003baf1a8 EFLAGS: 00010a06 [ 1787.870958][ T1487] RAX: dffffc0000000000 RBX: ffff88802a171880 RCX: ffffffff89795a54 [ 1787.879023][ T1487] RDX: 1bd5a9d5a0000003 RSI: ffffffff8b3d4548 RDI: dead4ead00000018 [ 1787.887013][ T1487] RBP: ffff88807c658000 R08: 0000000000000005 R09: 0000000000000000 [ 1787.895096][ T1487] R10: 0000000080000001 R11: 0000000000000000 R12: ffff88807c92e5e8 [ 1787.903196][ T1487] R13: ffff8880624adc80 R14: dead4ead00000000 R15: ffff88802a171eb8 [ 1787.911195][ T1487] FS: 00007f9b799d56c0(0000) GS:ffff8881247d6000(0000) knlGS:0000000000000000 [ 1787.920142][ T1487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1787.926761][ T1487] CR2: 0000200000000140 CR3: 000000003c6b8000 CR4: 00000000003526f0 [ 1787.935008][ T1487] Call Trace: [ 1787.938303][ T1487] [ 1787.941247][ T1487] ? netlink_sendmsg+0x8d1/0xdd0 [ 1787.946249][ T1487] ? ____sys_sendmsg+0xa95/0xc70 [ 1787.951272][ T1487] ? ___sys_sendmsg+0x134/0x1d0 [ 1787.956238][ T1487] ? __pfx___smc_diag_dump.constprop.0+0x10/0x10 [ 1787.962779][ T1487] ? find_held_lock+0x2b/0x80 [ 1787.967672][ T1487] ? rcu_read_unlock+0x17/0x60 [ 1787.972470][ T1487] ? __lock_acquire+0xb97/0x1ce0 [ 1787.977512][ T1487] ? rcu_is_watching+0x12/0xc0 [ 1787.982323][ T1487] ? lock_acquire+0x179/0x350 [ 1787.987041][ T1487] ? __asan_memset+0x23/0x50 [ 1787.991661][ T1487] ? __build_skb_around+0x278/0x3b0 [ 1787.996982][ T1487] smc_diag_dump_proto+0x26d/0x420 [ 1788.002133][ T1487] smc_diag_dump+0x27/0x90 [ 1788.006575][ T1487] netlink_dump+0x539/0xd30 [ 1788.011118][ T1487] ? __pfx_netlink_dump+0x10/0x10 [ 1788.016282][ T1487] ? __pfx___mutex_lock+0x10/0x10 [ 1788.021376][ T1487] __netlink_dump_start+0x6d6/0x990 [ 1788.026633][ T1487] smc_diag_handler_dump+0x1f9/0x240 [ 1788.031953][ T1487] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 1788.037780][ T1487] ? __pfx_smc_diag_dump+0x10/0x10 [ 1788.042912][ T1487] ? sock_diag_lock_handler+0x10f/0x2e0 [ 1788.048505][ T1487] sock_diag_rcv_msg+0x438/0x790 [ 1788.053508][ T1487] netlink_rcv_skb+0x158/0x420 [ 1788.058459][ T1487] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1788.063954][ T1487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1788.069285][ T1487] ? netlink_deliver_tap+0x1ae/0xd30 [ 1788.074610][ T1487] netlink_unicast+0x5a7/0x870 [ 1788.079459][ T1487] ? __pfx_netlink_unicast+0x10/0x10 [ 1788.084792][ T1487] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1788.090909][ T1487] ? __lock_acquire+0xb97/0x1ce0 [ 1788.095883][ T1487] netlink_sendmsg+0x8d1/0xdd0 [ 1788.100711][ T1487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1788.106073][ T1487] ____sys_sendmsg+0xa95/0xc70 [ 1788.110954][ T1487] ? copy_msghdr_from_user+0x10a/0x160 [ 1788.116458][ T1487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1788.121774][ T1487] ? __pfx_futex_wake_mark+0x10/0x10 [ 1788.127197][ T1487] ___sys_sendmsg+0x134/0x1d0 [ 1788.131912][ T1487] ? __pfx____sys_sendmsg+0x10/0x10 [ 1788.137170][ T1487] __sys_sendmsg+0x16d/0x220 [ 1788.141887][ T1487] ? __pfx___sys_sendmsg+0x10/0x10 [ 1788.147039][ T1487] ? __x64_sys_futex+0x1e0/0x4c0 [ 1788.152030][ T1487] do_syscall_64+0xcd/0x490 [ 1788.156578][ T1487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.162496][ T1487] RIP: 0033:0x7f9b7bb8eb69 [ 1788.166933][ T1487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.186649][ T1487] RSP: 002b:00007f9b799d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1788.195091][ T1487] RAX: ffffffffffffffda RBX: 00007f9b7bdb6080 RCX: 00007f9b7bb8eb69 [ 1788.203447][ T1487] RDX: 000000000400c000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1788.211442][ T1487] RBP: 00007f9b7bc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1788.219541][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1788.227729][ T1487] R13: 0000000000000000 R14: 00007f9b7bdb6080 R15: 00007ffe21fc49a8 [ 1788.235730][ T1487] [ 1788.238861][ T1487] Modules linked in: [ 1788.243258][ T1487] ---[ end trace 0000000000000000 ]--- [ 1788.249733][ T1487] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x2530 [ 1788.256635][ T1487] Code: 4c 8b b3 38 06 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 d8 bf 7d f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e2 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b [ 1788.276547][ T1487] RSP: 0018:ffffc90003baf1a8 EFLAGS: 00010a06 [ 1788.282954][ T1487] RAX: dffffc0000000000 RBX: ffff88802a171880 RCX: ffffffff89795a54 [ 1788.290974][ T1487] RDX: 1bd5a9d5a0000003 RSI: ffffffff8b3d4548 RDI: dead4ead00000018 [ 1788.299057][ T1487] RBP: ffff88807c658000 R08: 0000000000000005 R09: 0000000000000000 [ 1788.300457][T29350] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 1788.307116][ T1487] R10: 0000000080000001 R11: 0000000000000000 R12: ffff88807c92e5e8 [ 1788.322234][ T1487] R13: ffff8880624adc80 R14: dead4ead00000000 R15: ffff88802a171eb8 [ 1788.330428][ T1487] FS: 00007f9b799d56c0(0000) GS:ffff8881247d6000(0000) knlGS:0000000000000000 [ 1788.339471][ T1487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1788.346260][ T1487] CR2: 0000200000000140 CR3: 000000003c6b8000 CR4: 00000000003526f0 [ 1788.354338][ T1487] Kernel panic - not syncing: Fatal exception [ 1788.360859][ T1487] Kernel Offset: disabled [ 1788.365199][ T1487] Rebooting in 86400 seconds..