last executing test programs: 4m39.339395494s ago: executing program 2 (id=163): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_HUGEPAGE(0x0, 0x80000001, 0xe) madvise$auto_MADV_HUGEPAGE(0x0, 0x2, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi17\x00', 0x280, 0x0) ioctl$auto(r0, 0xc0905664, 0x38) socket(0x2c, 0x3, 0x0) bpf$auto(0x4, 0x0, 0x6f6) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e3b72abd7000fcdbdf25190000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="fe573d6925d6504c0b27c6c8ec2db110bf66bc047ec84ed5df7186e783acad34c5f1923aa9cf7c7e73a2bc131c5467f81f5d46165c00106042b0c4c5a020b7f72f71bb78de115ffde1e3b8193112b68819dd3f4110e93af1"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r3, 0x5509, 0x0) unshare$auto(0x40000080) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r4, &(0x7f0000006200)={0x0, 0xfffffffffffffe47, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230027bd7000fcdbdf2508ffe9000c000380050001800300000004000280080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044) 4m38.795224097s ago: executing program 2 (id=164): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() (async) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) (async) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) (async) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(0xffffffffffffffff, 0x8001) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) getpid() (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 4m37.848084279s ago: executing program 2 (id=169): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0xee01) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, 0x0, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 4m37.373340188s ago: executing program 2 (id=170): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1, 0x5, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x80114, 0x3, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x28200, 0x0) unshare$auto(0x40000080) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0xa480, 0x0) readv$auto(r2, &(0x7f0000000280)={0x0, 0xf7}, 0x87) write$auto_console_fops_tty_io(r1, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54", 0xcb6) socket(0x5, 0x3, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2060009, 0x3, 0xeb2, r0, 0x8000) mmap$auto(0x8, 0x401, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0x180c3, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) getsockopt$auto(0x3, 0x2929, 0x100, 0x0, 0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0xa}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video54\x00', 0x80000, 0x0) ioctl$auto(0x3, 0xc0285628, r3) 4m35.584002817s ago: executing program 2 (id=177): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010027bd70f1fddbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x8108}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20008800) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRES16=r0], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8931, 0x24) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) 4m32.311982069s ago: executing program 2 (id=185): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1, 0x800, 0x1ff) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x2, 0x1, 0x106) (async) bind$auto(0x3, 0x0, 0x6b) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x2021009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = fcntl$getown(r0, 0x9) move_pages$auto(r1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2) shutdown$auto(0x200000003, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x20) (async, rerun: 32) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4m27.128607302s ago: executing program 1 (id=197): r0 = socket(0x18, 0x2, 0x1ff) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2, 0xdf, 0x1000000000009b72, 0xffffffffffffffff, 0x1000008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyz4\x00', 0x0, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x400800}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) r9 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r9, 0x0, 0x880) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/77, 0x4d) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x1374, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x1355, 0x2, 0x0, 0x1, [@nested={0xfc, 0x56, 0x0, 0x1, [@generic="09dcda04d2c7538907ce6c6f9d99c220effcd02e2674dc8d15b067c08bd25b12a66f5844584dcf2090fb7e0d51af2b62e096e63c4ed8b472a1587009ac31d7dadf051f28cc3fe0c1c1899ced4005c824cdd3117356c71c0b8d775e274022de98923566739899", @generic="a338f1f4e802f650ba6ce697ea46789fd26d3d5c748e21bd231087f37e9ee54d31bd531396cb91f5feb697f5699e2ff064803aefb9e97d8d690819834fa5d93a99a3a9f413e8e0", @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xc3}, @nested={0x4, 0x17}, @generic="9eeeca042a79bfdc261eeabbe0337598c7d33ab8cbef22612ac8ad7db2b0f819d6abfc605d6502f55763ffadcaef73"]}, @generic="66980fc4e676669dbca00bc0585d363df0519ff51091a1e6e774825c1b401307bb57aa9b7b6f55f3f7cae75342c097d1129bee7fefaf3b5027f95a87453517afc22f43d89e38112f33f2d3a0f00376554726e9ede3dc8eaf385d9053b0b051f2094060081b8d546c6331aad75cccfad8e0c1", @generic="18ce8c13d15acde836cfab09f611eac72f89c695bfb5bdadfad7ecd4cf0cdf92ddddf5c0f9051966f8c9ab63d26f727dc4b68ecfb55872fe05830d1a648ff18aa554af30c7017b10306790d598de0753577960ebf18bf2d6f2e472b41fcde9385d9de3d71756bdc48d43bcd9c1d04ae88e2f65f5a3815de5fe57a313bd5e9d65c000ea0ced481b67591250a14228ce4227d0b54e59cb25a90f7cfdc5aefa3f64b87558933723b2698a75c5", @generic="c39362b169b54d642f4b6850d2a49badbc99695ec861fde1f25ae7e2ce24b052db388054392bea0e2158cb2528554749b6347808fdd47adfd3467a65ebb1503f424b3640accff152d74bf2c5e0657da3695b4c21e3042171e6a42f7d987179ce97803a19", @nested={0xca, 0xb9, 0x0, 0x1, [@nested={0x4, 0x14f}, @generic="6d12f0fb89ff6181e43eadc1655cf14563c1321562247be22ca632104b5c52cbb2b32fc8cd08c60b160de53f40e6dfe4e23cb5986a21c752bb687d075e5b59c3d6127d6db5ef8486553587de0014cd2e4390b43083e6fab13e8945bc96fcb416aa51e986677a22cf386b5ecb5361cf9861c425122c783cd4377d7bca0e50c4e163a3752f7bc3e98637b488df78ef66112b5f0db58f1f1a3efd2cd80b415cfa33bc93933b6dc05788e84d779d4d09ebb46e28033b5f140a7c59f3", @nested={0x4, 0x52}, @nested={0x4, 0x13e}]}, @nested={0x1008, 0xa0, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="6d19fbd3ad85b8fefd66ce4124d78d9225e14880d3d7b7a312a79f4d126c8eb82d5454bb410678bbd3d40bbaa6edd2d0f46103635035114ab762c6b6237d880ad4b74c87bf7c245346c3e49758a3a0a51269655e9f2cd76ad7b82f9a0a1e41943cf3c61beb3673b0809b9fc02a8eb054d13dc4b644f6b74f8b288e0bd397a3594fa34a46a7a3e9fd3211aafbd709bd4b9e7a932e81a2bb9abe0bd4a10ff12737149b36f023a288e893cd2eeaf525f200225bd469380e6b238ba317048ddf33dcd53c1025c73e2fa020e29da85c47a15fe606d6e9f98d2db53c1be314e02387a181bd650561efe55f436654ff6382d38115a47ee254b9e874a3709e00c5d6ac3415f4a99f54a91e59c86ebe5a1cefed89fecf16ddc6076c9bcc2216201c5d58e2cb50cb56a12ba3ddcc68eee80347e596b601cf348f8781dea784244bfdf123127dc453563b9c27d72a1ddf6a1f7ec9aaeed8d8bd6e64aca2ecb83cb22ed9deb9be0976a7568d82d10e4dddc758b76c030a1a3f0c99a1f0e1c2719629c08b0f95937eff2913363b1a10bd3ef12f4f7ad0ff82b495a2fa6e9cb162da78039e14d35883bad41560879dd774a33ec2d644e29f91a3954c7c655efa113ae3da79ac4736a939d57d063dafb340d39bea889172651bf9a6217c55d9f1096904227e17d9cb44d12a4bc8268f7a612d0f8d1df8bf1ffc87735625d04903b895cfc34d080a369e83f7d1bbcb13d4b1262e20e014aa61ed00eafb4edcdbed5caa2b1a7477d5d7766c63e6b1bcdac4d05e753527dab1d63d8de598b6570ff3f9348a78e0654a819065f94cc05e4ff443866794809c626eb8e8b10c4492f2f9d77d34ed4bb437c3eaac86432662a908bbf9618abc6b039b0689497e0d319578ad9af033e67099585ed68012115cc3b5ce2b3c16935c04f796e24f5f2480f27dd674626eb85a4e874b0a7311c64eb55f95fa321ba443263dbee25a01edca5e56070eae5d046b80d665ac8fcbc02de6f99ad264728ace7d84fa607ecb3555c8d8424ba7328de1e116af61a1490b7988eb9b05400de0c9b5545f7352cc0763e49a4f033d01b4540c5b55edaa16de0e641631a38bf5b54d2b650a08bc053ddf56b7ebb5b30e54bceae77112c7292aeefcbd8a040673bbd45edcad5f65f01467f9f5a7e53f99bdc85b6f3b43eed57e169a7547f9980d4c617befff72bab2343402bf93444c3d41b5b15717573c5a2b9e5b61b7319a23dbd5b307d9c7728eafc12fcc1fdc15bfe39e3654665c2b7521eafdfd66969e37187c269b2793660894ef0448d919282e39a5d9c84aed1eec86fcaa0f5c4194e0386248275f0978d8bd683a6d9c48280cfa5e012fb46538e883bed9ab33ce6666c907759b16714630bba1f05790c392f0822061fc842474b40650658616337bf6ac5de063cb45039bb7a72bebc51308df21b422380e3389b353a53b583e8ec5144597f49effeb3a277b3c087551157d04a1fd84d59fdf85c243ec92978a869f3ba0c72205e01834447f04df06278e27858a959fa2add8ab2e16a4e25b23b7725c927de858f6ae9913a6c71a530b16bce51556981a72f644757d4808b3e5c2642c51eb169f5702538b36068bb70ce34b0e9bb1ad29733dae244a8985ff2a94123d99957574e14cf5e1cc31ddf732f10f7f9d63feb70121df2667e4e447cf41aea9cb9b1392b0fbf9637e79f5818d912fdf95702632d3e64c9f3a6771f666fed2e577fef907b9fee445191837874624024dd66360d4729784588d7f56be83cdda264c8617f8ded3839935f9cd3cfa78a23350fbe52c6e3f56cae96c07c0e5f82fad2248f2e11a6934767db2fb4266ecebc97fc66e5a4b8eb6fa546236a347b68708d21f827e361eabbb170cc4d4e231b92d1c81ddd26682623fbe07ef7b0b679b084f40e9ff1600a4b391fb3e325e60b826b19ed83d46a0c477210ade4bf6960c723340bca2222efc8154d4fff46899d0b8e93bd288b21f2b7d7933c415bc125607e2f98d5b89d92dc28c447f2de4692ed005f504b0b7cf2173f866a624f0cafe5be11952fe29bbd3145a69a3778b1c7eef5e7df32be9ed562401dadaacb227b50ab54877fff94574fb616a3390d27cbdb683ae526064e473053016169e1de45b1acafcff8867d89f194891c730d7acfb13cb264e61e5fdc00a95df08297d8f59db9699224535e617143324daa3080d042a0b2477a7465251b834565e2f10cd53b4d1f56284cb91be719b44b9c767daa60a28341b06a3aad2b10b7d92db085e28668bfde5a8176a1e19e6e9f2b48f1446bdbc7278f8329fb4f858cc537dc02474febea53dd82880c740b42a802f61749bae70b7165c82a8f03f6ee76b8a7b08d5717f0b41b3a0e663aa82593aeba4e498e19c829c3b33340744666e9fa3e457c6c14ded4efa5f50e3c73b12bab23badb014b27933c5f56e31505d631c8939ef48cfda741c4a2d3c788c2a8d92e68ffe3550bb6271eb3ca769bf85e7695e25e5b9574bf82333ac59c640370d0d488f2d63f97ec8b300a947fe06fd2cd897718655c6afdfb8ff5dde603f848a6195baac6eef4bbccbf52b8285517ba41a40a2dbf27c28042c31a52a986ad06cdea453121a291832cad41b50ea4cf0f2023c944100f2903f2cfada274308abd8ba8d53ab917861702953e86e350786eea9d8adbfc16905af539361671531ab540eb96aaceef4c52cff8866df7a1ca2ebcec7e5e87c6dcdf2364c7a2e63084b32bc4ebb3435f2f25ddea835032621b271d5455340ece8218681b23cd7e89940a5a0fd039d7e775f262b959b24c705d2195eb049471fe3556f1c56f4f2f086255d5785220aa8320bacfdcf6958baf2c0efa34ef9e606184a48bdfac46a6af60305144ec853b5bf4d4fa9da03ceccbea7de32fe128e884513d1c6ddbc7d5c5970a1a464b3ef75b343a20ba1edb30362195e3714bd6fb62337c3bcc53ba07ee6bbaf35edbd5f91762b7a6490151930c881e70afb88af2de42517ba32acbb6a33ddb822dae89055cc19dfa111f79a32d9e7b302371cad87281283b55f3aff82682c6192b2e5b1e9cc8e7d569ae6b3204a8809841e87bd61c0e927b1cb1a255016605cb235a28cf2a5a1e9f8daf64de06f85de0dc5ace39ac1efd806f513531d0d0aa526645a9afda95a9a7eb451f0d0416593226122789b3c1d9dfe541563647b305249bf24e4f58f9b6bcc9ffee5315e6d90e8d38df87b283e4d609eb6cd033c4bfada473292c8a29be683f02fccafd164a3a8f8a58e1402ad9c4a082ae79607d161906dabc2a23bbe4796bc4cedcdbabc8c2add54fcbf502860ed38de65402eefab45c612f3c07286a9aef96da56003ce250d5ad277b7dc6f4eae11eadb5967d68f2f9a29eca9abadd9186479abc2675fb64f94613e5604abd1defff058d9b6634949bce48b9cd3e4dd79e1e1c050fd0d46a1348dd82e12d1baaefbc57e1df1b666add731a1e679f2b3fbcd1c0571410863994677a37f83e5cee3d3023a558b473f6c61713e5cfb31192cee63485ba3fbb47dd3241b030358ae2de01c67217b95734d8c0d106c60691c256533907f0766fe1a2ea8a152c382d2b747cd62ed7d902adea307c3ea6e851cf595a1dcefb5ae203f2d871f7ae9291d98bfc81765ef7605a1ac9523057428d931e52cf2ed69212f11d9b5caa6f7aada9d8bae3c73f21814124de8fc2ecbfd262f57919957001d93fa3fad180c0aba43a47364d89b6308e274d6ae8737042c1828b2e0b69a0045088d4128b231bc7c74b7d4e1d6043308041a0384d6f19aa7b773cbb3f4baf3159a5d062c9bafd496a1a3b58160a70cac42345f931f4f598c364bc415f5469fd8c16235875e860c91ace5a88986384efa2b3e81d7cc6f986286e0db6d34133d3e4977890ef8666e7fe77866ede5b187058d6663850ee89280ae4813933db2aa841992d44a6ed056871ae8408a84a6e0631934bdbb9b46f3ac7bacae94add1735c9ef08b87a285da468b1208e9bee9f95ad4859ac785c8d584a8d2eaaf9859ca839967c32431602312272e4648916e1dbb6aef36beab5a426377799c70e09ae18300e7a04563246d185dc4e62494d5a3fbf7da2dd275bba7f03e33d33f14a90007b1db1964c38ae5a07621539976be6b62d6763904cbedf003133003c1af91c1c033e16eff43271afa94ef5131f322aa9e5b616ff9ed0d357d449a115ae2637532ba9d06d74afbbfa83b47359f6f5d1d2e075b8c22300933e5aa115f544bee97054abf9fc02dd11b694186d03447ea778688065b15abcb4b4cf9c95a263ee3bfcea6c1f43cb420ba4c2faa0d92b12e681132f1c37630e8c20983e70445fbc6af44fc60ab603a1e2bc1904eaee8ea3819b3c9ff61c9e49eb6f3737a76514562e4aed8a8a9b5cb882083b288ef51d114ee3ed02674d49192c93f388c61d7c898d41cd69997d8106edc141abe47ff5e5e2b0c62a4ef642fd1aa890df365c2134a84c43b25624c4c5fe5c589fefceba5032006a85d713d6a38b2bed15c4d4587e0df9b73b02c04abc298cba19ede3f35a2a9d5d280ca6b2e0f24402aeb81ea89f4403d999a0f8805f7c87921b8fee9f6466c57a6904b8e0e4f28d8d0ed27ec3a70a225bc49833e54ec86a79d7ef236587ff79b1f4d4476b2c878d2dc0d39c5ee3a0012e38f33f7c47f61ecf0ae4bbacd4b9002020655138b0eacf098f3bf03d950062974677822fc3d796fef2b708b7d4ac0da827e3778cfd281b2a16cbce3fc2877632a530e5930531e9e6cd9675c03cc6772153b2eb79e5e09cfccc61c2c037c9908d1a570e3a4e71ae4277816e67ea8fcee519354321f041b57c1c852f4d0d2bac9fced2c91e90918369c16dd24ab0da55949d5ede81422e38d9773ad95447087b96d6c81a29e8d4adaec18a4deb3a59b4a8aaa6ed75eed250f453d0fbeda1625aabd72c62d909b278205101016c02cf03818c66d8444ade806adf5f71292f74d1d32c0f50e18f3ef9ef924879eaaa5d2799bf54e4e2c44f09ad7a040a1c71a3f2a7d8e4c889dccc30cc22d3f2de798d95b7453892004fafca68701092d1e427d4a9f09dda00f4bb6e837cd932f60f67f0e84008aa92c2f2323814e7fbc79154f0b9a223e6549ea3bc33872a003ce74aeff698668b9247ba01767c700a63fc29b0e330977e2d758aa3979d958ce5a6c8dcbfa951ba1cc67f19dcb2cbe12ac2decf94efdf48e514bc6aba670b13d2ce98584c95db7112fa0fd8bb01267228790bc7d01f38bb97134a5961686c57fa933af57e0e240133567cd82664eef6d7788c172e321827f463b0240cd8c3c6d1d0523874eacd7f6ff3a2534756bd3246144f02b5d7b12b9e329727104a9e09d16b3fdf67aa3fd5f47cbb2c0fb47690e7e8a414629c7f9fa11c40f9139b6e0754371f011ab48fa7a97c20dedf84318c82228d673f683dc8e18cc731e5f85eb00738b9a24dbeb97ecef372387d65fb9cd9f031b3c57083fde95b2d7c0a27385d83b71b16f58de99f02dc1bd17d172378e3ece86928e9d7e2d39866890c5b282cdf1d0c49d15881d03f18449422d39dd311f6196013372b717de46d7e0c93cb73c5d6d086f788575c360d3fd68186253ad65a44cb0d7d7b6e7644d3e6965186e6aeeee02d1b830ab2a177a03715c33b3c9fb433c80fc50c6e5fa4f4bf5fb7d356e15747612063854a1836192c30920800d3fd7cf1f757a3dc0ff1870c14b528f7f32069d3a004b6326dbc7b70ae5b23e240d9e6c6a62fc469ced91a59fd9a0261db31ad5cbf0989f58e737d454ce48"]}]}, @ETHTOOL_A_WOL_SOPASS={0x6, 0x3, "16be"}]}, 0x1374}, 0x1, 0x0, 0x0, 0x810}, 0x40004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x170, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_PERM_ADDR={0xb0, 0x16, "c0cdf48278619cf8cf89e645204094c1c09d10b63f49a31825d7fa5094efb64f12b0ce29418a2eeed0180e65638ef311c4a104679466bec29f01366a780f637d8265cc60052e4b8fa7038836ba8fb16c2175677e83a2ca6d77dcf92991a11a48173a226656b427171355c1b648cf35b7a9d0539297b5d46c6b69932a3d910f52d7172374240ac4ec2a355f2df28222300c316a1919bfc5e36127b78d98c6a67d2c3c229b1221a586401cfc40"}, @HWSIM_ATTR_CIPHER_SUPPORT={0xaa, 0x18, "a9d6640a6d6a1b891d5c3476b3f2c1c59f3982f4df679abe4646b13307fe4c304f31e1451359443074ccfd78e976d27290d06076ae468bbc1704d23b75e84d382fb8446e87417d5b6c6eb02974432d3a6a1d4ac98f2046618fab51085ea608b0765d873ba928b634fdcada17c6da978c12e8cc4bc46030a762ede58baa7123870ff8b735ee3f0d9e7edad705fe3e6ee35937172bbdbe13618142ad3b39fbe1d30896d8982128"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004004) r10 = syz_genetlink_get_family_id$auto_nfc(0x0, r8) mbind$auto(0x10000, 0x6, 0x6, &(0x7f00000000c0)=0x55d, 0x2, 0x4) sendmsg$auto_NFC_CMD_STOP_POLL(r9, 0x0, 0x44084) sendmsg$auto_NFC_CMD_START_POLL(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r10, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40404d62}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000012", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40050}, 0x8004090) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r11}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\xff\xfe\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 4m26.798890237s ago: executing program 1 (id=199): unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) (async) waitid$auto_P_PID(0x1, 0xffffffffffffffff, 0x0, 0x6, 0x0) (async) sendmsg$auto_IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x1c, r1, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) 4m26.615766036s ago: executing program 1 (id=200): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) ioctl$auto(0xffffffffffffffff, 0x2203, 0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000007c0)="97544df29404e114be73f7b0544b102020", 0x11) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x101}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x5}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c9}, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000280)='5', 0x1) r3 = socket(0x2, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x0, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r5], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) unshare$auto(0x40000080) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002080)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x11c, 0x0, 0x1, [@nested={0x20, 0x90, 0x0, 0x1, [@nested={0x4, 0x9}, @typed={0x4, 0x7, 0x0, 0x0, @binary}, @nested={0x11, 0x53, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @fd}, @generic="25788bd31d"]}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setgroups$auto(0x7, &(0x7f0000000000)=0x10) 4m25.913535907s ago: executing program 1 (id=201): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) write$auto(0x4, 0x0, 0x100082) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(r1, 0x5408, r1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000240)="1c520b214b19", 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = open(&(0x7f0000000140)='./file0\x00', 0x1142, 0xa2) read$auto_proc_single_file_operations_base(r3, &(0x7f00000000c0)=""/41, 0x29) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram13\x00', 0xe8742, 0x0) write$auto(r4, &(0x7f0000000000)='/dev/nullb0\x00', 0xb2) close_range$auto(0x2, 0x8, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x40, 0x3, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002840)='/sys/devices/virtual/net/bond0/bonding/ad_user_port_key\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000002880)=""/226, 0xe2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400ddbba15df925b34da4f40000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf251b00000005000f003b00000008000d00f7ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x881) close_range$auto(0x2, 0x8, 0x0) 4m24.031388249s ago: executing program 1 (id=204): socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x9, 0x62, 0x80000001, 0x8001, 0x6d3e, 0x3, 0x4, 0xbc]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socketcall$auto_SYS_SENDTO(0xb, &(0x7f0000000040)=0x3) socket(0xa, 0x5, 0x94) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x3, 0x4000000000df, 0x1010, 0x401, 0x7) 4m22.175626988s ago: executing program 1 (id=207): mmap$auto(0x0, 0xaa6, 0x6, 0x10, 0x401, 0x8000) unshare$auto(0x40000080) (async) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) setsockopt$auto_SO_PEEK_OFF(0xffffffffffffffff, 0x10000, 0x2a, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) (async) socket(0x15, 0x1, 0xfffffffc) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) connect$auto(0x3, 0x0, 0x54) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x1, 0x10000000003, 0xfffffffffffffffc, 0x40eb2, 0x401, 0x300000000000) (async) mincore$auto(0x1000, 0x8001, 0x0) connect$auto(0x3, 0x0, 0x10) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) munmap$auto(0x20001000, 0x7fb3) (async) accept4$auto(0xffffffffffffffff, &(0x7f0000000180)=@l2tp={0x2, 0x0, @remote, 0x3}, &(0x7f00000001c0)=0x5, 0x8001) open(0x0, 0x22240, 0x154) select$auto(0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10006, 0xcc}) (async) socket(0x2b, 0x1, 0x1) 4m17.83933776s ago: executing program 3 (id=219): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x181040, 0x0) r0 = openat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2f7, 0xfff8) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, "1373c40fb898ca1588af59a01e21eca25d59786fc7ca432191ac80abeb"}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x60000084) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), r0) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x8}]}, 0x1c}}, 0x20000050) unlinkat$auto(r0, &(0x7f0000000300)='./file0\x00', 0x6) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/conf/hsr0/igmpv3_unsolicited_report_interval\x00', 0x244201, 0x0) recvmmsg$auto(r3, &(0x7f0000000600)={{&(0x7f0000000380)="2add571c784d5f63bc9e01b1619ddc870b2269ac876abfa658385363cf5e7cc9b8b6f1144b058b257d5ebf6dbc6502fc873c0b084596135dc82410c9adef6c767a068acb61127eb1e2e5b5f1aa3b1baa97ad", 0x4, &(0x7f0000000500)={&(0x7f0000000400)="9b36e25d8825a1bd8ee3f1f37ca1eb8209cb6f233c159d881bb83ef06f6fb70d7120af0e2e94f14d2d216c77cab11e4563823b41d081ec1e32adb5cb07c55c5750bcf8b294fc5d117ce4b86e19f53b6a6285372c96c6bcb1c6b3f027000554ed6aea6858ee3f6655a4f91f088c9c93fe1597bebfa7ac7ad6caffb75b16d7327ce3e29cf9b6403fc56046d58a812bdcf8190b6f07a63f14b713bc24f7a90a093138c6bb8890443388d1cb1a10e2ca3533d68988edd1ed1ddbffa19e442053e8d9e70f0d5e2997a3723f8bd27a730d6c42213f45ce15739c4bb48802d7655906a2699b59b7c2ef0cc0bfa74fac9f6c7ba6443e1a5f6ed17251abbd", 0x7fffffffffffffff}, 0x4, &(0x7f0000000540)="3cfa403e0869446ea90a79116519c473b3bc764333e71f3e5aafae3ee7b65dd30ffe4cbe9a26d222b4f5e860fdedab48d65b278795ac98ce32b92891f4da9b9675ce8b4dd3ecf468bab1c82bc07dd81eeebdfd8fa376ca21acfc45d06ffc3c7d9b7fcadfa204c2bfa20a2faf79d502c0b3edb43857c3261e1eda6ed196103770448100d4a70de99201bcb0c8d91d3d0045e5520e218dc55da32aea3a7c82741b7ba824b4", 0x8, 0x4}, 0x6}, 0x3, 0x6, &(0x7f0000000640)={0x48, 0x2}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'caif0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000b00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)={0x21c, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10001}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1b75bbe7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xf}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x23}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x50}, 0xc040) execve$auto(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000bc0)=&(0x7f0000000b80)='wlan0\x00', &(0x7f0000000c40)=&(0x7f0000000c00)='macvtap0\x00') r11 = fanotify_init$auto(0x2, 0xc4f) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001380)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000cc0)={0x660, 0x0, 0x20, 0x3, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xe5, 0x2, "73f51a9c1f6c13dee044d7e310b5162fb4df4cb026809ce9e5c944685f183b8e4e9e9f4f96c415c9fc50529a40d255912811f3bd985ba0e33a3daa828468ecf7385d0537c108c9e352d01867ed69f2f02b933a2a4169506236681a5c39890ddfa7fb85d9006853ce7541c0d81486d29d5afecca23cbc6bc6859a4063ee986e0656add2582f64665c4c0d48094ec784463209e16c32c49be80fab5bebb549702e848c44229b4d519674436b66ddb21c2969f62060ecb1c1c716ca19b31392c4546e97a476831341109575f696d7709c0b78beb4d7e2e6bf7b337c25d104e4aebe74"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x8, 0xb, '&!!-'}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_FRAME={0x540, 0x3, "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"}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_CHANNELS={0x8, 0x9, 0x9}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x1}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x660}}, 0x20000800) r12 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001400), r0) sendmsg$auto_MACSEC_CMD_GET_TXSC(r11, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r12, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001500)='/sys/devices/virtual/tty/ptys2/power/control\x00', 0x4300, 0x0) r13 = ioctl$auto_TIOCGPTPEER2(r11, 0x5441, 0x0) pipe$auto(&(0x7f0000001540)=r13) remap_file_pages$auto(0x72, 0x3, 0x401, 0x6, 0x6) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000001580)='/dev/snd/pcmC1D1p\x00', 0x20000, 0x0) r15 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000015c0), 0x402, 0x0) sendfile$auto(r14, r15, &(0x7f0000001600)=0x2145, 0x8f3a) getsockopt$auto(r13, 0x3, 0x1, &(0x7f0000001640)='.]\x00', &(0x7f0000001680)=0x23) 4m17.514537019s ago: executing program 3 (id=220): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0x0, 0x0, 0x1080020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048800}, 0x40) sched_getattr$auto(0x0, &(0x7f0000003e00)={0x5, 0x80000001, 0x6, 0xa, 0x3, 0x535, 0x1000, 0x9, 0x5, 0xea50}, 0xeaf, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x7, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x3, 0x0, 0x4], {0x6, 0x6, 0x7ff, 0x2dc, 0x500, 0x81, 0x20fe, 0x7, 0x2}, {0x100, 0x1, 0x7, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x1002}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000380)="ed858a4e7bd91423603b3e810b6279e37910b6f50c8500114f98cd5f2e333851ce582046d50f8963c4a44d5bd59e4db380dc7523cf48a45db6c8ff99105d5b8804aa358f531e855f0154ed4ac9673538391dff08b48111a4514f9998be110cf145b9d4563f0978814182afe75cc33b2f6a8d0ebf29fafe7b257bbe3984ecafadc2e9ac9304765faeeaa06fbae8ac", 0x1ffffffff}, 0x6, 0x0) r2 = socket(0xa, 0x2, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chown$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0xffffffffffffffff) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x2a, 0x400004, 0x5, 0x18, 0xffffffffffffffff, 0x100000004) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi7\x00', 0x0, 0x0) listen$auto(0x3, 0x81000083) poll$auto(0x0, 0x6, 0x8) listen$auto(0xffffffffffffffff, 0x1004) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbtest/parameters/alt\x00', 0x400000, 0x0) ioctl$auto(0x3, 0x4020aea5, 0x38) 4m17.05523117s ago: executing program 32 (id=185): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1, 0x800, 0x1ff) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x2, 0x1, 0x106) (async) bind$auto(0x3, 0x0, 0x6b) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x2021009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = fcntl$getown(r0, 0x9) move_pages$auto(r1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2) shutdown$auto(0x200000003, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x20) (async, rerun: 32) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4m16.920142362s ago: executing program 3 (id=223): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x16, 0x4, 0x80000001, 0x8}, 0x6f4) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x2600, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='*\x00', 0x3, 0xffffffffffffffff) socketpair$auto(0x3, 0x5, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r2, 0x32192137f4649d9, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'erspan0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000010) socket(0xa, 0x801, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) listen$auto(0x3, 0x81) socket(0xa, 0x1, 0x84) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)={0x200, 0x0, 0x8}, 0x18) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) read$auto(0x3, 0x0, 0xf34) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) write$auto(r4, 0x0, 0x800f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x801, 0x106) 4m16.498664801s ago: executing program 3 (id=224): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x7) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129c00, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x8, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) msync$auto(0x8c, 0x8ca, 0x80) waitid$auto(0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x282, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/cec28/power/control\x00', 0x0, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="01e524bd7000fedbdf25040000f9081499e7589ea59d3f9d857fff001900042664fc4b64fb46cc280bcfc29876b3d4aba558d99f99aa94913e834c0478df51f16e840d88da75fe9cbce39cf2d6ebcee06e1d92f503b5aff4f16f4ba110f0ea4dd53a1e1167af8f3d914fc0d71323acb39e71520b4897e771d9ed4ae1b4befd184b059c93167d99588fa7e03dc4913fd9fcd19cd8ed6622ff5e1ccdfe24707a05c188a9c1a2ae40c75365aedcd63a706e746bc89c64964c43"], 0x18}, 0x1, 0x0, 0x0, 0x200040dd}, 0x4048000) 4m16.227555814s ago: executing program 3 (id=225): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x2, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x6a200, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 4m15.070652643s ago: executing program 3 (id=228): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x4}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/hugetlb_optimize_vmemmap\x00', 0xa0202, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto(0x3, 0x400454ca, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) 4m6.672298881s ago: executing program 33 (id=207): mmap$auto(0x0, 0xaa6, 0x6, 0x10, 0x401, 0x8000) unshare$auto(0x40000080) (async) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x62c00, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) setsockopt$auto_SO_PEEK_OFF(0xffffffffffffffff, 0x10000, 0x2a, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) (async) socket(0x15, 0x1, 0xfffffffc) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) connect$auto(0x3, 0x0, 0x54) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x1, 0x10000000003, 0xfffffffffffffffc, 0x40eb2, 0x401, 0x300000000000) (async) mincore$auto(0x1000, 0x8001, 0x0) connect$auto(0x3, 0x0, 0x10) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) munmap$auto(0x20001000, 0x7fb3) (async) accept4$auto(0xffffffffffffffff, &(0x7f0000000180)=@l2tp={0x2, 0x0, @remote, 0x3}, &(0x7f00000001c0)=0x5, 0x8001) open(0x0, 0x22240, 0x154) select$auto(0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10006, 0xcc}) (async) socket(0x2b, 0x1, 0x1) 3m59.230268122s ago: executing program 34 (id=228): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x4}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x3}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8, 0x2, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/hugetlb_optimize_vmemmap\x00', 0xa0202, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto(0x3, 0x400454ca, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) 13.85120574s ago: executing program 6 (id=695): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0, 0xffffffbd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) madvise$auto(0x0, 0xffffffffffff0004, 0x19) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRES32=r2], 0x1ac}}, 0x40010) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto_PPPIOCSMAXCID(r3, 0x40047451, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r1, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r1) sendmsg$auto_NFC_CMD_STOP_POLL(r1, 0x0, 0x44084) 9.595776786s ago: executing program 6 (id=705): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socket(0x10, 0x2, 0x4) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) select$auto(0x85, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x6}) (async) select$auto(0x85, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x6}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd4\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) write$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="b59a874deb60188825e2f736283f4c5a312918b4564e79626294c07c9202090ef18209131f625ba16218c87cc9dc17db1131", 0x32) (async) write$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="b59a874deb60188825e2f736283f4c5a312918b4564e79626294c07c9202090ef18209131f625ba16218c87cc9dc17db1131", 0x32) r3 = io_uring_setup$auto(0x86, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r4, 0x8004500f, &(0x7f0000000040)) (async) ioctl$auto_SNDCTL_DSP_GETCAPS(r4, 0x8004500f, &(0x7f0000000040)) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto(r3, 0xc0205647, r3) ioctl$auto(0x3, 0x540a, r2) close_range$auto(0x2, 0x8, 0x0) 9.356183478s ago: executing program 5 (id=707): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x400000, 0x0) (async, rerun: 32) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) (async, rerun: 32) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) (async, rerun: 32) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop7\x00', 0x6a742, 0x0) ioctl$auto(r0, 0x125d, 0x8) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000080), r1) close_range$auto(0x2, 0x8, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) 8.887321859s ago: executing program 6 (id=708): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_NAME={0x8, 0x1, 'HSR\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x809}, 0x80) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="e90d0000b8249a158c078269ac12b4bf27133d0092652300000000000000000000007888e4906bb08644756fac7a20b029914e04f236388efb766f36ea7bc9d28f090a0b0d52f414c5ffe956e03e6fcf769fd363c16dcc2657c093213c34800661d159ace57f4fef0f5cdb", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) select$auto(0xfffffffd, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x183941, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) landlock_restrict_self$auto(0xffffffffffffffff, 0x9) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x109440, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) sysfs$auto(0x2, 0x100000000000007, 0x0) r4 = socket(0x11, 0x2, 0x300) setsockopt$auto(r4, 0x107, 0x8, 0x0, 0x6) read$auto(0x3, 0x0, 0x7) pwrite64$auto(0xc8, 0x0, 0xf, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x4) 8.733743277s ago: executing program 5 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x800, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x3ff) open(&(0x7f0000000040)='./file0\x00', 0x149441, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'team_slave_1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000003c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) bind$auto(r0, &(0x7f0000000100)=@can={0x1d, r2}, 0xbaa) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r3, 0x2272, &(0x7f0000000000)) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) close_range$auto(0x2, 0x8, 0xfffffffc) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_7={@link_id=0xfffffff9, 0x3, 0x3}, 0x6f3) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x18d240, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='n\x00\x00\x01\x00w\xa0\xd4\x11445\xca\x83<\x80\xbd\xdb\xfc/\xd42\xc7f\xc4{\x16\xa6,\xb9\xe3\xd5\x863\xdd(\xb2~\x1egC\x06On*\xd4\tO\xad\xb3%\x8f&uCO\xd5~\x9f\x19\x93cc\xf0\x14W\xae\xe6\b\x93v\x11\x9a_\xfc\xcc#\x88\xda\x1b\x15\x8dL\x99R\xa6e\x15\xfc\x1a\xa4\xf1`M\x0e$}Nr\xd8\xd2\xdf:\x19\x03\ne\x1c=\x88\x84\xb6-VG\x8e\x14\xae\x13\x16\x033\xf2*\x7f\xf1-?e\x91\x9a\x96h\x82\xa2\xff%\x0e\x13\x1d\x87\xe1\x16Q\xd3N\xb3\x81\x9c\x106\x7f\xbfM$\xaf\xa5%$\xe6a\x91\x81\xa0VD\x8f\xd2j\xd4\x97\xcb\xc48#C;Q\x97{\xf0\x9b+\xe5\tc\x10\xca\x16\xa5\x93B\x17\xe8\xbd&\x02os#\xec\xb8CL\xcc7\xcc\x19,H&9\x7f\x8c\x13&\xa40\xf5H6`m\xe3l3Py\x01}\xc9Ub\x83Z3\x87\xae\xe2\x12', 0x7, &(0x7f0000000140)="69dc98ebdbd1797022b60f3fe28ecc1b8a25") socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0xa, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 8.321453932s ago: executing program 5 (id=710): prctl$auto_PR_GET_PDEATHSIG(0x2, 0xff, 0x7f, 0x7, 0x7) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x4, 0x9, 0x0, 0x7) prctl$auto_PR_GET_PDEATHSIG(0x2, 0xffff, 0x1, 0x8d, 0x800) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)="38bc12b7cdede8d0ccc031c4441f7d9fa7fabbcca5bac4b6afadb4a7f6aae4fa6038fc312e09f0e32f9c1b361f789c39e0bce4208750dd16cfcd48d661e1227ed3ccd64317a66ad7ab23ecdca5640bb9c008e845faef74ee60832bc9216263f8c9742d3eafdd13996382939c5fd2cc2471161a9ac156ce843fddc05ad01b061125d25de6941c7a777c029246f6ef6a31", 0x3}, 0x2d8) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x0, 0x50, 0x6, 0x401) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PMK={0x11, 0xfe, "0bb20ba41ebb9f4ab747354185"}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x0, 0x3, 0x2, 0x0) shmctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000003c0)={{0x5, 0xffffffffffffffff, 0x0, 0x9, 0x6, 0x4, 0x10}, 0x0, 0x5, 0x7, 0x1ff, @raw=0x7, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000240)="e9965c1c044a019d075f3b74a121faddfe27290915909c2552f55a8bfc47c54e39e9262f7288acbdbe2f00ddec68524ddee7bdc05acf4e19881122374890afaa3b420c9b58fde5c46d54a0fa2c52b86ebbd35c4fdc88a0716886c458b307e9b1e3434670605b637aa0892d64f841deef2063cd1dd1ce8d49", &(0x7f00000002c0)="2312fb556a168cffbfe04f9521060c086329853cc7d7e9071b5542f20c19616c8525740644622192f6d7e14d2d7bc389966c3b0f6048a7a3752ab92fa2b7896d342cd980a73b51a7f5932c6e1354b6519a1e96854bf61dfc6b61f33f893b2403ece92c6269f21a3526d176eedd5238ad82d34fced2f60b10c514c54f08a2b73394d60c0644c805eb29f7b2631ef5c82fa2a46634c1a348b6df327de66d7f70d3367e8c488cd188221306ae7a9b56e65bdea085ebbcb3afbd15f051d5eca586335d3e8cca7cebb1617b5a202d9c738a9f2cbcf99f5e34e91903676c7304f6ea40b1868f48cd30eabd65a345cbf3d26f"}) msgctl$auto_IPC_INFO(0x3, 0x3, &(0x7f00000004c0)={{0x1ff, 0xee00, 0x0, 0xec3, 0x3, 0x2, 0x1}, &(0x7f0000000440)=0xd4, &(0x7f0000000480), 0x0, 0x2, 0x6, 0x9, 0xa8c7, 0x9, 0x8, 0xc, @raw=0x8746, @inferred=0x0}) keyctl$auto(0x200, r1, 0xee00, r2, 0xfffffffffffffff8) poll$auto(&(0x7f0000000580)={0xffffffffffffffff, 0x5, 0x41f}, 0x8, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), r4) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000600), r4) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf8, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x7}, @HWSIM_ATTR_PERM_ADDR={0xcf, 0x16, "f973f466dcdc150e310f7d10a0871748cb463507b26d100c5625b453a88926cc5714c67b33e2f146c7c99c0dafe1b3406cd4057cdd41dc729c28ba78a0a9c2eaa319ea667189e691faa988b56ef4a8303e3ff444ecfe7b777c9f577f03d0f5a3f7d638cac47ea5db196f20e922c77a9fc94e8cf725a6f46ae31a361bfdb750f5fbd1c9434f6a0e71b1963bb342de254e2c6e775b4c3cd4f95cd716876ec46b5493855dabcfe577c299227c4fbdce350a5c5c62a7e1e42d66c0546004c200810c07b78d2c313fa01989d291"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000011) r6 = prctl$auto_PR_SET_MM_START_STACK(0x0, 0x5, 0x0, 0x4, 0x2) r7 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x200041, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) timer_delete$auto(0x8000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'geneve1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000002500)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000980)={0x1b08, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffa}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}]}, @ETHTOOL_A_WOL_MODES={0x89, 0x2, 0x0, 0x1, [@generic="f092f3c3798d8274fa045c0fb96a744158f20b004d92fc1631f734063dfd801f7d72797238c654618d27e4fcb5a18bcd3a99373a491eef901fb800497dad59f7a19f3489370ee83993d867566706fccedbc0d347241138a4ef33352145424c7fd7011f56c6a59918e6408a5a7e893cd8507fb1248fb553fab9e5e88ee7408550e8a81c2f81"]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_WOL_SOPASS={0xa, 0x3, "4601e8f33753"}, @ETHTOOL_A_WOL_MODES={0x528, 0x2, 0x0, 0x1, [@generic="e94d3f4bd3e2745a6717979c5d4a8e8dcee274ae2f8b0004f8e0bc764b86b9831e9191abb8602092181c8bb1ea4c4c161521366dfe0cf1b68e945681bc87d5ff77b2a87df501e311ae8d5cb73907c2c58b509a9014f0396658ef9516164427cfb5a523c9e1b9e4660191629fa56104abd839c699ca17620e33ecb343cdbc0cdbb2c00ddbfb8cc45e61d24fe8cfff96f02cbfd9ae7682093a8a68ecd0018eae3fb88a8cb070460e90e56b0ead0e1cc28b451cf688f95a99a293b9e3afdb47f4ed63ccf691d3b3d1f38b9fb151e74f4bba875a0334927b6934cc139d50323779bc4addd82ead1e02cb9d8bc30f9ccd7c99609fbe48aa2ff3", @generic="39c1d2a24c4955f0a8ae482c10cdc74036391601f38b691a74a5cd27ae9decb0593efd143c83f286119a94f85d01e5593d36f5e13e0a980abb68e906886abb8def30d200265f345c9189fb8f166562ae9bca85cddf289539d01cfda737bd6955a6ba484b5e27", @generic, @typed={0xc, 0xdc, 0x0, 0x0, @u64}, @typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x16d, 0xbe, 0x0, 0x1, [@typed={0xc, 0xde, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x20}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0xffffffffffffffff}, @nested={0x4, 0x15}, @typed={0xc, 0xfb, 0x0, 0x0, @u64=0x9799}, @generic="4989ef7f43be69ec6d25", @generic="331a9a1f0df84d036fee11d39c5237ede2ce108e73ce9bef2745576091707e0fe3ef76992322fd6de4a6fca80111f95bae80bb8afeaa10baeac8aaadd693c390c52fa398ccdd39cf7df2936905e6fa5ad98016e356693c227693f2ef0808f121b80940b234f3720e7a5d797c33e20a7c27b909af13c4c976d485a3fe72019fd401f20304d7d92c0a0d90", @nested={0x4, 0x12a}, @generic="3183ec2cc1438c4b542fd86fd691de2265fd7d1ce2c5e63e8fea6d227382be39bf9672f7cdc4f999b4a859ea1230851dda4d36614c5dd7df54df5ae9a53929375f63cfff43aa083ed4f9c20ef0d2376775c417ad614c95b56a528c282a88f193ec3489e771e651cda48cf11d0ae07a1b3e1d6cdf6e775fdd3977031b28ce4db1d8901f5f57e12c37a3fb8fdc2d51ff14b8e6af3eb2f9330437f292cbbd8d1086ca637679b0"]}, @typed={0xc1, 0xf1, 0x0, 0x0, @binary="1f5a25160b5fd72e1561db12882816a8ac9fb26cd083851de81de45fefc9dce1be3e22e2bd6c575a79dbe2ff7d4862b728a5a58d00a94ab261cf0aa39e2ee4ea7a52cbad0fee4f2e40ef18415acbb21ba825280ac10d98413e019c1a1610b0edebd53349ad47d9445faa70fdf0127ef68679abf92a48ec2bb4f2f053ab547390b3709f058163ef5a62a23570581fffda6ff685927f2375c435adde2cd91b77d3c4f2f975e2ac65598307d5fd16ff77929aeadd114828a1d03e3ae7ec96"}, @generic="5d0c9c6f549660dd9c6a2dc08b799051f5dda9210cd91575aa888db7f519e6019425c35a0c8a5d68bc8cfd929b309ac53477d24d92600fe19db93833b649976c1c4b31a6e61749f1f955fdefd5a98d8079e79692f1c9356fd45f8b9705b97f3b04a4be65542e7790b3fadff121381fcf9260cc5047d012fe05fceb2d09b3d1a7b6875c57ca6eebceb5b35818ad9427295e70a0b37fd1d9bbf67a2a49a5af122a0e051be7195722580657388744e0dbdd3b3bcfffe28412df636fff8ddc6f03ad8d03a770a6346305b41d2128f833b2", @generic="5664e15e67790f9c632c900a1db6add1822b828011b956d20b9e6400853685c136dc3dc85a99b31f7bfdf4ae7cb0c44fd7130ef3b1bda6255676fae7ce2dc8f7c045c93ea89163b9457bf7edc5ed28d531887cf57e4f9fe1e8f087f45c910ad3fabc1c1b7a2fa02302c1a94892e75aeae224dabb8b97d330a66dbc9dba7ebeeaefbe970421296b14941b5cb41804e057200e960df203bc85371bb6651061683c48baf530"]}, @ETHTOOL_A_WOL_MODES={0x11f7, 0x2, 0x0, 0x1, [@generic="eb18039798bee3128da00f8bc74ea383644b9b532069573378c188e61f163707ba3e34be48cfc9e0adeb441e91d2f644617efb918a39d0363b8247d03419468202be9ba8932979bd67115dacd2b6b5811591ae364d5ad2753f06a4e3010ba34a", @typed={0xc, 0x110, 0x0, 0x0, @u64=0x3}, @generic="6ac46a841d2ccf6783f98a3933cfe3cd9a7b3ce8395789c69d72846e5975db0c3c03c701e30469fa99e62a6b86d3af2ce71ba76b7419ea82b920ebed72586d4c4af6be29d3ab29ba59bcb479edd273b739534024f07746a09b955b9426a32f838cb26215a2782eb3b8956e266c188a5b594454f8e1be9399d51f94ed060ee18a792ce7ac839c8c4a3c2d349d67a5862b965544529918558c594ef53b262090d6e52a1ff2f42b5947be7d973bf08097cdf90780a024721685d6f4c0", @nested={0x10c9, 0x18, 0x0, 0x1, [@generic="4acfb5978c75806622b9f7de6848c6ee7c26c156526551951f67f8dbfa8bbc6c0e48dadc6a8729cb190a8d18c8be44f4bafcfbaea0cb735ed0924173567e8d6c23fe24f42ee7df412d93a2831b8ddc238408efc7d965176e0ab2cd7cff4ec89cc788537ae2871be779827de2372b0698218a23911adc4e26780591c9790ee483b5", @generic="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", @nested={0x4, 0xc9}, @generic="b08ebe31b2a656641b7e2659a784e81cc38c9303398880d11f894761d94695ecb0223c6a42d3e8d3d3e70918362dd7b233565734d17d45a6dde3a55a", @nested={0x4, 0x97}]}]}, @ETHTOOL_A_WOL_MODES={0x2a5, 0x2, 0x0, 0x1, [@nested={0xfe, 0x4c, 0x0, 0x1, [@typed={0x37, 0x9a, 0x0, 0x0, @binary="7ed3d19e0ab11b30f4b0b94e50e26f682933d78b78ce2641e10efdddd37e1fada63e122c26f7447995749097854db06a135dac"}, @generic="bb6a99e5d582eaddf742f3c077808959f2ff4cdd478118a6b9a49fe24eeb2215ecbe6d482819c47dfaf1da219a5dc1ea587643d20f9cd3a6f03f1d06104287a1b3e0708ce07ce32458007fbd65bfd85f286b27ca252aad56ce82c69941a7dee7c697300265c8909f46a669e1669a95dba7eca280f9e7a12e3652a8db6ab1948e356a0ab182aaeeebebb89eabe3aaff4263d50d161c277abab4", @nested={0x4, 0x38}, @generic="bb610d35d04263fe4c4bce2dd63f59b154856cd2341481b98b747097bb5ab42ac619fac126"]}, @typed={0x8, 0xae, 0x0, 0x0, @fd=r7}, @nested={0x11f, 0xd7, 0x0, 0x1, [@generic="ef9390c1906aedafc82e6f5cd5887df7827de8c35f88b292a994d26352b1902cf60003b2bb3d7140b4e682f32ac079cb66d06dbe3c008cea9f613169c2439436e43ff472eed6ecbe175f6b6680618af31d2cf9833dd98db720a448084da292276d5fd682c4db9fc9365637bb26dbf82cb8af619997b1a53ddcbbc3741a4f1fc038e6a5daee61f8830feccd78c922ac65a653a18b52cf4d60adfd0480d96a77376b66f1572b02302ac409dd9a88fbf90abe1430cbadc77d77960ca5ce51bc44499407006b7e15d18a12c67beb1c6f5f", @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x101}, @generic="a2a738fd2b", @nested={0x4, 0xbf}, @generic="14d7ff5b2e7dab296ac466377eea5d46561a5f6fe6b3652a35910f47497652654a0ddeb74c93fd", @typed={0x13, 0xe6, 0x0, 0x0, @str='MAC80211_HWSIM\x00'}]}, @generic="7621ab2eb97333b95492357295fc5b81270d8ce2fb52c99508f43a12ba77c64ef24fc2540c6cbe9e7e93a659ce6db2a18a1bc3273e213401f5f4a9170b94071b411caab022b4144d79afe75279b611a160e575f9265582746813fd9e0ae24dd26448368912478ce7bf53eabc092791ab18ce25deea", @typed={0x4, 0xbe}]}, @ETHTOOL_A_WOL_HEADER={0x4}]}, 0x1b08}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$auto_FIOQSIZE(r7, 0x5460, 0x9) ioctl$auto_TUNSETOFFLOAD2(r4, 0x400454d0, &(0x7f0000002540)=0x8) r9 = getsockopt$auto_SO_PEERPIDFD(r4, 0x100, 0x4d, &(0x7f0000002580)='&}-\\@.\x00', &(0x7f00000025c0)=0x4) r10 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000002640), r6) sendmsg$auto_OVS_VPORT_CMD_NEW(r9, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)={0x9c, r10, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x1, 0x7, 0x101, 0x0, 0x9, 0x8, 0x8, 0xfff}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x1, 0x5, 0xffffffff, 0x5, 0x73d, 0x9, 0x80000000, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c800}, 0x4000080) init_module$auto(&(0x7f00000027c0)="0346a487b91371196744b7d44d98b5c963e862f677b4ab36d2", 0xc60e, &(0x7f0000002800)='^-]\\\x92-&\x00') syz_open_procfs$namespace(r3, &(0x7f0000002840)='ns/cgroup\x00') openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000002880)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x801c0, 0x0) bpf$auto(0x9, &(0x7f00000028c0)=@token_create={0x0, r6}, 0xffff0000) 7.804841394s ago: executing program 5 (id=714): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x2000000040000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0xa, 0x0, 0x6) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x9, 0x2020009, 0x8000000003, 0xeb1, r1, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b63, r2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r4 = socket(0xa, 0x1, 0x84) close_range$auto(r2, r0, 0xf6b9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r4, 0x84, 0x81, 0x0, 0x0) getdents$auto(r3, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x43403d05, 0x0) 7.783455819s ago: executing program 6 (id=715): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c010}, 0x140000e4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r5, 0x2284, 0x0) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x2602e2, 0x0) ioctl$auto(r6, 0x6, 0xffffffffffffffff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/bbt_blocks\x00', 0x101140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000010c0)=""/95, 0x5f) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r4, 0x4, 0x753, 0xffffffffffffffff, @relative_id=0x13, 0xe601}, 0xf) r8 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x40000b}, 0xfff}, 0x5, 0x311) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x20681, 0x0) r9 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x40008, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00"}, 0x6, 0x8, 0x7, @raw=0x1, @enumerated={0x4, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x9e, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) 6.621545086s ago: executing program 6 (id=716): open(&(0x7f0000000100)='./file0\x00', 0xfe123a878070b02b, 0xe0) mmap$auto(0x6, 0x2000000002020009, 0x4, 0x800000000000eb1, 0xfffffffffffffffa, 0x7c) madvise$auto(0xaa0, 0x0, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) readlink$auto(0x0, 0x0, 0x9) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) set_mempolicy$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x110007, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x3, 0x2020009, 0x20000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto_PR_GET_IO_FLUSHER(0x3a, 0x3f5, 0x6, 0x0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r1) mmap$auto(0x0, 0x20009, 0xdd6, 0x2000000000eb1, 0x401, 0x8001) unshare$auto(0x40000080) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x80) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket(0xa, 0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001d80)=""/4088, 0xff8) 6.323261205s ago: executing program 0 (id=717): madvise$auto_MADV_NOHUGEPAGE(0x10, 0x1f35, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r2 = getpgid(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="00001a0000000000000066e23477348876784e032fef1f595ec57b0e127829e987047e6096fd6e7ed531dfe3c9dd2e5bb1f777fac547e7aa2d589ac1615b2d7fb7fa1132", @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf252c000000"], 0x388}, 0x1, 0x0, 0x0, 0x4}, 0x400c080) fcntl$auto(r3, 0x7, r2) r5 = geteuid() keyctl$auto(0x1f, r5, r5, 0x0, 0x8) rt_tgsigqueueinfo$auto(r2, r2, 0xe, &(0x7f0000000100)={@siginfo_0_0={0x2a, 0x5, 0xb2, @_rt={r2, r5, @sival_ptr=&(0x7f0000000380)="62c89a0bc2225ee5b054049908213cc431697f9ba2f348e13a794b6ba3e4ceec16073e01359b1f6ffdb710160b8a0d422d64716074fea4531148e38310343efae6efdd5cf2bd1196d0afcfc4c147fadbab8f16589a00d47f8c961715c6638edf390b3536590d48b7f27eceabb74dbc679641c8c51cd8cb185e6a58924c16a99a2ff39fa04c36d1826a616bf7f43f3b3732d9c814ebf227dfcb91e852829e90de71d89499d4ea395be233a09a58f4d953102da0d0b653ba7afc2d5b2385355ad0a49d312daa979da9c9e4a26cae1a903a10b4851f4a0e19bb6e4e13fe032a"}}}) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x3ec, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3d8, 0x3, 0x0, 0x1, [@nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @uid=r5}]}, @nested={0x2f8, 0xb6, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @ipv4=@empty}, @generic="53a6935eea8ce95ccf8f99824066e57d68061498ab97540210575af65d20a83c92a6bbe40e08264b2780c434728cf1c912e43ae16e92fe8a386b8ec339962f5ff55dfcfec57688d3fa1f4d08e0380193851f34428dcf10bc39076ef5f0fed958b19e334ca2184671efc4f99151ec3916f0873a701f9e5f16aa5a9ccd042c33158b71410ef78b9ba5255149fc49473bb1ae73597a560bed6e4c420a396c0c47", @typed={0x81, 0x48, 0x0, 0x0, @binary="75b09400b5e475ba007c59f1ec6910329c047960d31568a7ca2b2af1ca1947dd5d5864a7424fc2a9f96d3b426669f93c797a14e6d11636beca1349e819ea645d77fbf6187f32d379a8da06b4d27cef25fb73524b70e6ce9bcfe0afb8719fac3ecd476d3f0e173f4f3b21811d528e280bc59c6b376b9d9ce578c4baefed"}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="9db47bd50a0458b49e1a32562e44d86f58bef5d596f113a5f278f1fd7a77da6d7e77fb1602c3f449a792a74dc5dcff07d2d9abbab75943996ae25412fa8cf7100baa81506edca221c54de74f88fbc7126834b58b83ab9cb136b0dc660967b54f9a38e83c1e5d3ac150eafae1f612e59c418a3cb6deb3897e2052e55cc4801119aa23bc00de2455d02d66ac6666f579b6c418e6d84d2b07be27e798e7ee9656b403ed4a2416ff34afbeaa3a040eebf2076390fd74d1a6caaefd8b031789dab1a36ceec4adc5b7054ed824c68e0f1850c120b0a5a346240e4fc63c36ee45b2190fcc83ecf8c54d110d05d7b7745b3fa975cbd6912b8d2eb26f33f1baf9b9", @typed={0x8, 0x50, 0x0, 0x0, @ipv4=@local}, @generic="a8a8d214172652c71730f2255f3f58cd977e03b7a881bff2c1a23e75b857e3f7dfe1811722926a05d44ba49eefc7f5016fa6c2b7e7b4e10381c35e9e55e104c49fdc4bec18144ff9150daf88877e7fe8f0250e67fa2b1456a5bbfe3e9014689cecd484dcc5b84dda97412f45daf9bb4ec484cf8e2d55fc50a34e77b2a4d195db7099531b425b5ff5cfaf6cfa6bd89a7c80eaf8d2107174f35159082331e0229f44ca0d7d445612854b77b9f817474c3741e7602b281a1dff23405f92"]}, @typed={0x8, 0x93, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x18}, @nested={0xc1, 0xf7, 0x0, 0x1, [@generic="888b91fe748815bfaa15f18b296a290a392c8d461a7c605a5294114724b11d1e3a284557788981cc89c6ff06e4775f646d56971cd3a085d4fa0fe7fe863ea9ad24f580dc58a53c060f01a7046076f1b74612b2da5a180068d1cc3d043d6aa466beef29c23c90c6c12318a8aeb428e2dfb5c2585749e4043c911d27fb9833f03c0a8c43096a4c7ff2c87c42243ed3d6939fd6ba55975d7b49e5af40e90d30ccc49e5e8ceb7b43d46cb138011695fd544af4d3618fe91fad5e931c10a587"]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) 6.274369757s ago: executing program 4 (id=718): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_vs\x00', 0x60980, 0x0) pread64$auto(r0, 0x0, 0x2, 0x8000) (async) r1 = getpid() prctl$auto(0x7fff, 0x10000001, r1, 0x1, 0x7) (async) ptrace$auto_PTRACE_LISTEN(0x4208, r1, 0xd8a, 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async) setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x800) read$auto(0xffffffffffffffff, 0x0, 0xf7) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, r2) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x709242, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5) sendmsg$auto_TASKSTATS_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="010a2bbd7000fbdbdf25010000000e0004004e2d4e7a"], 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x200040d4) (async) syz_genetlink_get_family_id$auto_macsec(0x0, r2) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, 0x0, 0x4000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) socket(0xa, 0x801, 0x106) (async) pipe2$auto(0x0, 0x4800) (async) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) 5.979852937s ago: executing program 0 (id=719): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x2, 0x1, 0x106) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x81, 0x25, 0x5, 0x80}, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES32=r0, @ANYBLOB="69b5"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket(0x1d, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20000040) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x160, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x143, 0x145, 0x0, 0x1, [@nested={0xd7, 0x40, 0x0, 0x1, [@generic="08dc1d6bac53377a67f8d1387506abf67cae353e65b7d945cf6835098581509c627586ccc30d80fdc22bc4ccedf06fbe17227da94338ca54940afe629ceaabb1fee11d5d149774a139fe24c6c4a0d34f8b93f76fc3166d462520e2f249e67e6946287139012afe323cca102e4aabd05b5490087c91687ea872f4b6d4c7ab38298eb508226de8dfc3574bb6d830e8344e90c6f6ced55f47a34bf320e2a2af9c63cbf1d4710e93c637747673badc4a5b27d8a7edd831296d61b6e687c66a57523cf5f3b0a9f881c9860103bb19c624177a9554d7"]}, @generic="8d6f5bd90488bc782e9201c3752c38e5f35ad8d9f6d2c8d2e9f158b6f4f550adc5f8cc9d2d59e65596142434154ce81a69e27a78a31f7c51ffc5988fa46aaa0823283b", @nested={0x24, 0xbb, 0x0, 0x1, [@nested={0x4, 0xf3}, @nested={0x4, 0x19}, @typed={0x8, 0x11e, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xbc}, @nested={0x4, 0x74}, @typed={0x8, 0xa5, 0x0, 0x0, @u32=0xff}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}]}, 0x160}, 0x1, 0x0, 0x0, 0x8015}, 0x4000000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(r0, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pvrusb2/parameters/vbi_nr\x00', 0x200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) 4.443998104s ago: executing program 4 (id=720): mmap$auto(0x0, 0x4, 0xdf, 0x9b7e, 0xffffffffffffffff, 0x8000080000000004) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) (async) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="7b6f26bd7000f3dbdf2500000000ab844c4dc0df37b93d5180260fd4b3fea2a78aa5eafe062f75fabf9a6cd759ee9cf1bcacd321eeceeb86f174ddcc369164903279990db4814f3bb7a10a6a93ae6a555c92e0b23ec6d0b60b000000a65f86b0f89fe27fd9578d1c828c7ab68a46095dc53e0dc52bf6eb1f43e5c72ffec1f2867c8d501e6fd1be9835e4d4"], 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) (async) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x88b, 0x0, 0x9b72, 0xffffffffffffffff, 0x8000) (async) msgsnd$auto(0x0, &(0x7f0000000080)={0x1, 0x6}, 0x8, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r2, 0x17, 0x6}, 0x3, 0x8) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x1e, 0x1, 0x0) (async) execve$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) r4 = socket(0x10, 0x2, 0x4) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x98282, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) (async) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) (async) mmap$auto(0x5, 0x2, 0x5, 0x14, r2, 0x6) 4.399238247s ago: executing program 0 (id=721): mmap$auto(0x0, 0x2000c, 0xa, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0xc0205649, 0x38) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) 3.966269791s ago: executing program 0 (id=722): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x41045508, r0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) sysfs$auto(0xda21757b, 0x1, 0x0) 3.207504754s ago: executing program 5 (id=723): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0) (async) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0) listen$auto(r0, 0x611e) poll$auto(0x0, 0x6, 0x8) (async) socketpair$auto(0x20, 0x5, 0x4000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) open(0x0, 0x7ffd, 0x12) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) r1 = io_uring_setup$auto(0x406, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x48) (async) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="020652002f63569e4637e0dea034ceae5d9cf141ce1ac8dbcaa77384da"], 0x14}, 0x1, 0x0, 0x0, 0x4040091}, 0x40850) (async) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) (async) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) (async) io_uring_enter$auto(0x3, 0x2c0, 0x5f3, 0x3, 0x0, 0x2) pwrite64$auto(r0, &(0x7f0000000080)='\vX\xb5\xff\xff\xff\xff\xff\xff\xff\x7f\x99\x86\xdde\x1cJ\x99\xfc\x00\x06\x00\xff\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xaf\x01\x0e#\xb3\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\xb88\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/227, 0xfdef, 0x3) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.127520891s ago: executing program 0 (id=724): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) ioctl$auto_SNAPSHOT_S2RAM(r2, 0x330b, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18380, 0x0) unshare$auto(0x40000080) mmap$auto(0x100400000000000, 0x8001, 0x7, 0xfffffffffffff810, 0xfffffffffffffffa, 0x1000000008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) sendmsg$auto_NCSI_CMD_PKG_INFO(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x44088) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) madvise$auto(0x0, 0x52, 0x9) 2.903961637s ago: executing program 4 (id=725): acct$auto(&(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00\xe3\xa5\xe7\x99#(b]l\xa4\xb0W\x83\x9aNZ\x80A\x8d\x10\x1d\xc2\xc7\xf2M\xee\x9c\xf3\xba`\xb9\xe2)x:[\xf1\xe0D7\xdf\xbc\xcfT\xb4\x93h`\xc1Cwa\xbaC\x97\x1b\xe8JD\xbb\x04\xadU\x98\xcb\xb7\xed\xee\xbaq(\xbfiM\xc1\x83\x949\xb6<\xafd\x8e(\x8f\x15\xb2\xf8o\x1c\x9a\xed\f\x0f\xca\xeb\x1a\x9b\xbe\xd8\x1c\xe3\x15\xd3}\xf8ML\xcd8Ux?') ioperm$auto(0x7fb, 0x1, 0x4000007) (async, rerun: 32) r0 = gettid() (async, rerun: 32) rt_sigtimedwait$auto(&(0x7f00000000c0)={0x86a}, 0x0, 0x0, 0x8) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socket(0x29, 0x2, 0x4) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2000c082) (async) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) (async) tkill$auto(r0, 0x7) (async) acct$auto(0x0) 2.887851603s ago: executing program 6 (id=726): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)="3236da00") ioctl$auto_SNDCTL_DSP_POST(r0, 0x5008, &(0x7f0000000040)="d83b76563491703ead93f2e4febb44004f459de144d79284abd3543af47cdc3e0ee224689b4827f7c0cde1e0e157ec48a8d039226ed5dae9") ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x8) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000440)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xde, 0x9b72, r1, 0x4000807c) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10400, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/1:12/power/runtime_suspended_time\x00', 0x200, 0x0) open(0x0, 0x22240, 0x154) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x40) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) 1.83998389s ago: executing program 4 (id=727): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000154bef7a03fe7a68c61b85f57bc239bc44ca4b50619a1a1a583dd9a5f801bf76328f4f1566ce2149fd5433a683d4c383f4e596f51d017c07d7a3d31458650ff3a4a9d615fe53d675f679f132cee0abe7bb9cb8faa4e14b16d54365f8aa11c8dd0b9b5986f22e00a64359e56143b4f9fc4110f579bf36a245dae60b7e98490a83311f3a01a4d423c6e8b6f5f8f89aa10b78405b803bbe89bc04c14f216e8749df34081d85676b9c676206c4", @ANYRES16=r2, @ANYBLOB="210026bd7000fedbdf25010000001400020077673000000000000000000000000000060006004e200000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) select$auto(0x4, 0x0, &(0x7f0000000340)={[0x209c, 0x40000000e9e, 0x7, 0x9, 0x33, 0x100000001, 0xa, 0xf, 0x1, 0x6, 0x3, 0x8000000d59, 0x8, 0x100000ff, 0x3, 0x80080001]}, 0x0, 0x0) 1.672830192s ago: executing program 0 (id=728): unshare$auto(0x40000080) read$auto(0xffffffffffffffff, 0x0, 0x6) socket(0x7, 0x2, 0x88) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20008000) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0xc, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7ffffffffffdffff, 0xb403, 0x7fefffff, 0x42, 0x200007, 0x801, 0x60, 0x40000105}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/dummy0/stable_secret\x00', 0x100, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4bd029f0845c6b5196ced8ef9b1a53b4011ed14a904f19072629f7cc6ed922acba72edc667e917861d1e7dc8a72ee61bc9cca5caba2a46a9b0656a4da3fcde38b") getxattrat$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000280)={0x5, 0x4, 0x4}, 0x6d6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x800000001, 0x0, 0xe0, 0x10, 0x7, 0x28000) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)) pipe$auto(&(0x7f0000000040)=r1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x20081, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty32\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)="158f4a2b83") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x16b000, 0x0) ioctl$auto(r4, 0xc0445624, r4) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10) acct$auto(&(0x7f0000000080)='/dev/audio1\x00') mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) 1.147528287s ago: executing program 4 (id=729): ioperm$auto(0x8, 0x6, 0x40) mmap$auto(0x3, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0xe4, 0x82f0, 0x942) readahead$auto(0xffffffffffffffff, 0x6, 0x2) munmap$auto(0x8000, 0xffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) ioctl$auto_I2C_RDWR(r1, 0x707, &(0x7f0000000180)="17e1") r2 = socket(0xa, 0x3, 0x3a) bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "2c551d00"}, 0x66) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10009000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0e00dab7", @ANYRES16=r3, @ANYBLOB="040028bd7000fcdbdf250a00000008000a0095ffffff06000100080000000600010004000000060001000f000000"], 0x34}, 0x1, 0x0, 0x0, 0x40850}, 0x8840) getrandom$auto(0x0, 0x6000000, 0x20003) 80.567098ms ago: executing program 4 (id=730): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty49\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4c, 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 5 (id=731): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/queue/scheduler\x00', 0x189002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x2}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresgid$auto(0x81, 0x800000a0, 0x8) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) pread64$auto(r1, 0x0, 0x40000000f42c, 0x80002) sendfile$auto(r0, r0, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 100.282271][ T5820] cgroup: Unknown subsys name 'net' [ 100.400608][ T5820] cgroup: Unknown subsys name 'cpuset' [ 100.410511][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.159244][ T9] cfg80211: failed to load regulatory.db [ 102.278175][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.702391][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.719287][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.723137][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.727264][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.734935][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.744464][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.749859][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.756682][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.770089][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.770256][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.788008][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.795901][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.804082][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.813168][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.820751][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.827974][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.830103][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.836239][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.851784][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.859661][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.468379][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 105.600451][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 105.665206][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 105.776509][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 105.798469][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.805730][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.813554][ T5838] bridge_slave_0: entered allmulticast mode [ 105.822185][ T5838] bridge_slave_0: entered promiscuous mode [ 105.882766][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.890371][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.898698][ T5838] bridge_slave_1: entered allmulticast mode [ 105.906637][ T5838] bridge_slave_1: entered promiscuous mode [ 105.969917][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.979746][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.987234][ T5835] bridge_slave_0: entered allmulticast mode [ 105.994670][ T5835] bridge_slave_0: entered promiscuous mode [ 106.061971][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.072714][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.083534][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.090845][ T5835] bridge_slave_1: entered allmulticast mode [ 106.100685][ T5835] bridge_slave_1: entered promiscuous mode [ 106.114015][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.121474][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.128914][ T5836] bridge_slave_0: entered allmulticast mode [ 106.136925][ T5836] bridge_slave_0: entered promiscuous mode [ 106.148712][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.222782][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.230280][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.238049][ T5836] bridge_slave_1: entered allmulticast mode [ 106.245446][ T5836] bridge_slave_1: entered promiscuous mode [ 106.284472][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.299966][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.344214][ T5838] team0: Port device team_slave_0 added [ 106.368655][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.375846][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.383674][ T5837] bridge_slave_0: entered allmulticast mode [ 106.393031][ T5837] bridge_slave_0: entered promiscuous mode [ 106.403900][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.417445][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.428750][ T5838] team0: Port device team_slave_1 added [ 106.462982][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.472126][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.479886][ T5837] bridge_slave_1: entered allmulticast mode [ 106.487568][ T5837] bridge_slave_1: entered promiscuous mode [ 106.526972][ T5835] team0: Port device team_slave_0 added [ 106.567205][ T5836] team0: Port device team_slave_0 added [ 106.576890][ T5835] team0: Port device team_slave_1 added [ 106.596883][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.603898][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.630415][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.648000][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.654991][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.681517][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.694600][ T5836] team0: Port device team_slave_1 added [ 106.733271][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.747384][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.829478][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.836903][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.863510][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.877896][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.885055][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.886211][ T5841] Bluetooth: hci3: command tx timeout [ 106.914831][ T5845] Bluetooth: hci1: command tx timeout [ 106.917181][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.935693][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.943067][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.969351][ T5845] Bluetooth: hci2: command tx timeout [ 106.974794][ T5841] Bluetooth: hci0: command tx timeout [ 106.975299][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.995601][ T5837] team0: Port device team_slave_0 added [ 107.003120][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.010267][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.036715][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.072062][ T5837] team0: Port device team_slave_1 added [ 107.109370][ T5838] hsr_slave_0: entered promiscuous mode [ 107.116214][ T5838] hsr_slave_1: entered promiscuous mode [ 107.161111][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.168259][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.194469][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.248016][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.255006][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.281431][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.342119][ T5835] hsr_slave_0: entered promiscuous mode [ 107.349931][ T5835] hsr_slave_1: entered promiscuous mode [ 107.356396][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.364190][ T5835] Cannot create hsr debugfs directory [ 107.375560][ T5836] hsr_slave_0: entered promiscuous mode [ 107.382201][ T5836] hsr_slave_1: entered promiscuous mode [ 107.388778][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.396706][ T5836] Cannot create hsr debugfs directory [ 107.574643][ T5837] hsr_slave_0: entered promiscuous mode [ 107.581612][ T5837] hsr_slave_1: entered promiscuous mode [ 107.589114][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.596782][ T5837] Cannot create hsr debugfs directory [ 107.989262][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.016852][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.039041][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.050763][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.124697][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.137525][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.163509][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.175816][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.265315][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.287279][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.327670][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.341711][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.424994][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.457265][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.472968][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.484282][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.504560][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.555662][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.588783][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.596170][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.642231][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.649677][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.667573][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.764461][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.812299][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.819522][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.833814][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.841020][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.942597][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.949456][ T5845] Bluetooth: hci3: command tx timeout [ 108.957353][ T5845] Bluetooth: hci1: command tx timeout [ 109.026883][ T5845] Bluetooth: hci2: command tx timeout [ 109.026909][ T5841] Bluetooth: hci0: command tx timeout [ 109.074802][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.091595][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.131950][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.139165][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.178411][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.231725][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.238984][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.254265][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.261540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.302770][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.310128][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.421501][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.578180][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.635229][ T5838] veth0_vlan: entered promiscuous mode [ 109.679599][ T5838] veth1_vlan: entered promiscuous mode [ 109.750041][ T5835] veth0_vlan: entered promiscuous mode [ 109.821184][ T5835] veth1_vlan: entered promiscuous mode [ 109.889625][ T5838] veth0_macvtap: entered promiscuous mode [ 109.922700][ T5838] veth1_macvtap: entered promiscuous mode [ 109.998097][ T5835] veth0_macvtap: entered promiscuous mode [ 110.019624][ T5835] veth1_macvtap: entered promiscuous mode [ 110.039643][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.064421][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.093090][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.102488][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.112483][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.121463][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.142704][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.167987][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.177438][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.198914][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.213880][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.223478][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.232533][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.241802][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.423028][ T5836] veth0_vlan: entered promiscuous mode [ 110.455700][ T5837] veth0_vlan: entered promiscuous mode [ 110.482592][ T5836] veth1_vlan: entered promiscuous mode [ 110.492467][ T195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.505767][ T195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.521158][ T5837] veth1_vlan: entered promiscuous mode [ 110.555779][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.573891][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.612803][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.620829][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.634219][ T5836] veth0_macvtap: entered promiscuous mode [ 110.684210][ T5836] veth1_macvtap: entered promiscuous mode [ 110.728006][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.740605][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.759853][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.769252][ T5837] veth0_macvtap: entered promiscuous mode [ 110.821119][ T5837] veth1_macvtap: entered promiscuous mode [ 110.839407][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.871820][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.914081][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.935818][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.945347][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.954997][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.026878][ T5841] Bluetooth: hci1: command tx timeout [ 111.027030][ T5845] Bluetooth: hci3: command tx timeout [ 111.072687][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.106240][ T5845] Bluetooth: hci0: command tx timeout [ 111.106322][ T5841] Bluetooth: hci2: command tx timeout [ 111.132183][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.175460][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.183336][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.214882][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.234495][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.244092][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.365839][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.389186][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.548141][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.548184][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.644119][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.644149][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.888273][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.903104][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 111.920712][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.328453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.337236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.956688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.114017][ T5841] Bluetooth: hci3: command tx timeout [ 113.114027][ T5845] Bluetooth: hci1: command tx timeout [ 113.186456][ T5841] Bluetooth: hci2: command tx timeout [ 113.205957][ T5841] Bluetooth: hci0: command tx timeout [ 113.426403][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.628904][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9'. [ 113.954494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.963432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.994288][ T5957] Zero length message leads to an empty skb [ 115.489475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.506578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.376677][ T5974] FAULT_INJECTION: forcing a failure. [ 117.376677][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 117.414981][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz.2.15 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 117.415028][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.415050][ T5974] Call Trace: [ 117.415060][ T5974] [ 117.415082][ T5974] dump_stack_lvl+0x16c/0x1f0 [ 117.415163][ T5974] should_fail_ex+0x512/0x640 [ 117.415212][ T5974] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 117.415249][ T5974] should_failslab+0xc2/0x120 [ 117.415289][ T5974] __kmalloc_cache_noprof+0x6a/0x3e0 [ 117.415322][ T5974] ? snd_ctl_get_preferred_subdevice+0x16c/0x1f0 [ 117.415359][ T5974] ? snd_pcm_attach_substream+0x441/0xd60 [ 117.415403][ T5974] snd_pcm_attach_substream+0x441/0xd60 [ 117.415452][ T5974] snd_pcm_open_substream+0x8d/0x17f0 [ 117.415493][ T5974] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 117.415543][ T5974] snd_pcm_oss_open+0x735/0x1400 [ 117.415611][ T5974] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 117.415663][ T5974] ? __lock_acquire+0xaa4/0x1ba0 [ 117.415707][ T5974] ? __pfx_default_wake_function+0x10/0x10 [ 117.415744][ T5974] ? __lock_acquire+0xaa4/0x1ba0 [ 117.415797][ T5974] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.415851][ T5974] ? soundcore_open+0x35a/0x580 [ 117.415896][ T5974] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 117.415955][ T5974] soundcore_open+0x40c/0x580 [ 117.416004][ T5974] ? __pfx_soundcore_open+0x10/0x10 [ 117.416049][ T5974] chrdev_open+0x234/0x6a0 [ 117.416093][ T5974] ? __pfx_chrdev_open+0x10/0x10 [ 117.416135][ T5974] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 117.416195][ T5974] do_dentry_open+0x741/0x1c10 [ 117.416231][ T5974] ? __pfx_chrdev_open+0x10/0x10 [ 117.416278][ T5974] vfs_open+0x82/0x3f0 [ 117.416327][ T5974] path_openat+0x1e5e/0x2d40 [ 117.416378][ T5974] ? __pfx_path_openat+0x10/0x10 [ 117.416424][ T5974] do_filp_open+0x20b/0x470 [ 117.416459][ T5974] ? __pfx_do_filp_open+0x10/0x10 [ 117.416526][ T5974] ? alloc_fd+0x471/0x7d0 [ 117.416593][ T5974] do_sys_openat2+0x11b/0x1d0 [ 117.416637][ T5974] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.416700][ T5974] __x64_sys_openat+0x174/0x210 [ 117.416748][ T5974] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.416797][ T5974] ? rcu_is_watching+0x12/0xc0 [ 117.416843][ T5974] do_syscall_64+0xcd/0x230 [ 117.416897][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.416932][ T5974] RIP: 0033:0x7f95f6d8e969 [ 117.416959][ T5974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.416989][ T5974] RSP: 002b:00007f95f7b72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.417020][ T5974] RAX: ffffffffffffffda RBX: 00007f95f6fb5fa0 RCX: 00007f95f6d8e969 [ 117.417040][ T5974] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 117.417060][ T5974] RBP: 00007f95f6e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 117.417086][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.417105][ T5974] R13: 0000000000000000 R14: 00007f95f6fb5fa0 R15: 00007fff0ded7258 [ 117.417149][ T5974] [ 117.994417][ T5980] Invalid ELF header magic: != ELF [ 118.017534][ T5969] mmap: syz.0.14 (5969) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.743247][ T5980] could not allocate digest TFM handle " [ 118.770229][ T5981] could not allocate digest TFM handle [ 119.026535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.035414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.402568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.847329][ T6065] openvswitch: netlink: Message has 1 unknown bytes. [ 122.051907][ T5841] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 122.180423][ T6045] capability: warning: `syz.2.31' uses 32-bit capabilities (legacy support in use) [ 122.497889][ T6076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 122.599844][ T6076] team0: Port device team_slave_0 removed [ 123.106091][ T6067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.116379][ T6067] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.173979][ T6067] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.217057][ T6067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.234865][ T6067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.275582][ T6067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.293476][ T6067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.318196][ T6067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.400108][ T6067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.471817][ T6067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.521238][ T6067] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.557246][ T6067] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.319213][ T6115] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[6115] [ 124.473772][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.870794][ T6127] random: crng reseeded on system resumption [ 124.907183][ T6120] can: request_module (can-proto-0) failed. [ 125.266103][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.356116][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.510549][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.553522][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.346078][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.426025][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.591665][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.203438][ T6185] FAULT_INJECTION: forcing a failure. [ 128.203438][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 128.216537][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.1.56 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 128.216579][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.216597][ T6185] Call Trace: [ 128.216608][ T6185] [ 128.216619][ T6185] dump_stack_lvl+0x16c/0x1f0 [ 128.216672][ T6185] should_fail_ex+0x512/0x640 [ 128.216720][ T6185] ? fs_reclaim_acquire+0xae/0x150 [ 128.216774][ T6185] should_failslab+0xc2/0x120 [ 128.216816][ T6185] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 128.216855][ T6185] ? security_inode_alloc+0x3b/0x2b0 [ 128.216902][ T6185] security_inode_alloc+0x3b/0x2b0 [ 128.216950][ T6185] inode_init_always_gfp+0xce4/0x1030 [ 128.216989][ T6185] alloc_inode+0x86/0x240 [ 128.217051][ T6185] new_inode+0x22/0x1c0 [ 128.217090][ T6185] ? start_creating.part.0+0x25d/0x3a0 [ 128.217145][ T6185] __debugfs_create_file+0x11c/0x6b0 [ 128.217200][ T6185] debugfs_create_file_full+0x41/0x60 [ 128.217255][ T6185] kvm_dev_ioctl+0x14ff/0x1ad0 [ 128.217311][ T6185] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 128.217366][ T6185] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 128.217410][ T6185] __x64_sys_ioctl+0x190/0x200 [ 128.217460][ T6185] do_syscall_64+0xcd/0x230 [ 128.217515][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.217549][ T6185] RIP: 0033:0x7fd6a238e969 [ 128.217574][ T6185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.217614][ T6185] RSP: 002b:00007fd6a3213038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.217644][ T6185] RAX: ffffffffffffffda RBX: 00007fd6a25b5fa0 RCX: 00007fd6a238e969 [ 128.217665][ T6185] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 128.217684][ T6185] RBP: 00007fd6a2410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 128.217704][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.217723][ T6185] R13: 0000000000000000 R14: 00007fd6a25b5fa0 R15: 00007ffc6b1c7b78 [ 128.217767][ T6185] [ 128.217806][ T6185] debugfs: out of free dentries, can not create file 'pages_4k' [ 128.634999][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.426031][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.506122][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.666645][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.469319][ T30] audit: type=1800 audit(6043066256.342:2): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 131.168639][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 133.677825][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 135.922915][ T6304] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 136.526430][ T6315] netlink: 'syz.1.81': attribute type 11 has an invalid length. [ 136.563544][ T6315] netlink: 'syz.1.81': attribute type 11 has an invalid length. [ 136.887472][ T6322] syz.2.80 uses obsolete (PF_INET,SOCK_PACKET) [ 137.286571][ T6337] nbd: illegal input index 2147483647 [ 138.013910][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.026082][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.267869][ T6357] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 138.730654][ T6365] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 139.094583][ T6374] FAULT_INJECTION: forcing a failure. [ 139.094583][ T6374] name failslab, interval 1, probability 0, space 0, times 0 [ 139.155764][ T6374] CPU: 0 UID: 0 PID: 6374 Comm: syz.2.96 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 139.155811][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.155830][ T6374] Call Trace: [ 139.155841][ T6374] [ 139.155854][ T6374] dump_stack_lvl+0x16c/0x1f0 [ 139.155913][ T6374] should_fail_ex+0x512/0x640 [ 139.155972][ T6374] ? fs_reclaim_acquire+0xae/0x150 [ 139.156028][ T6374] should_failslab+0xc2/0x120 [ 139.156072][ T6374] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 139.156113][ T6374] ? security_inode_alloc+0x3b/0x2b0 [ 139.156161][ T6374] security_inode_alloc+0x3b/0x2b0 [ 139.156202][ T6374] inode_init_always_gfp+0xce4/0x1030 [ 139.156242][ T6374] alloc_inode+0x86/0x240 [ 139.156286][ T6374] new_inode+0x22/0x1c0 [ 139.156327][ T6374] ? alloc_fd+0x471/0x7d0 [ 139.156382][ T6374] shmem_get_inode+0x19a/0xfb0 [ 139.156423][ T6374] __shmem_file_setup+0x16f/0x300 [ 139.156463][ T6374] __do_sys_memfd_create+0x267/0x8a0 [ 139.156517][ T6374] do_syscall_64+0xcd/0x230 [ 139.156571][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.156604][ T6374] RIP: 0033:0x7f95f6d8e969 [ 139.156630][ T6374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.156661][ T6374] RSP: 002b:00007f95f7b72038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 139.156693][ T6374] RAX: ffffffffffffffda RBX: 00007f95f6fb5fa0 RCX: 00007f95f6d8e969 [ 139.156715][ T6374] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 139.156734][ T6374] RBP: 00007f95f6e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 139.156754][ T6374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.156774][ T6374] R13: 0000000000000000 R14: 00007f95f6fb5fa0 R15: 00007fff0ded7258 [ 139.156815][ T6374] [ 139.644397][ T6374] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 139.696251][ T6374] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 139.791248][ T6377] : Can't lookup blockdev [ 140.120640][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 140.166092][ T6382] netlink: 314 bytes leftover after parsing attributes in process `syz.1.98'. [ 142.062351][ T6426] Console: switching to colour VGA+ 80x25 [ 143.273103][ T6436] random: crng reseeded on system resumption [ 145.134788][ T6451] netlink: 330 bytes leftover after parsing attributes in process `syz.0.116'. [ 145.364458][ T6455] ALUA LU Group already has a valid ID, ignoring request [ 146.078325][ T6466] Invalid ELF header magic: != ELF [ 146.507228][ T6473] netlink: 146 bytes leftover after parsing attributes in process `syz.3.119'. [ 147.240251][ T6488] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 148.985730][ T6518] netlink: 'syz.2.130': attribute type 2 has an invalid length. [ 149.022776][ T6518] netlink: 'syz.2.130': attribute type 2 has an invalid length. [ 150.558857][ T6536] process 'syz.1.134' launched './file0' with NULL argv: empty string added [ 150.701417][ T6536] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 150.874299][ T6542] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 151.510973][ T6541] syz.3.135 (6541) used greatest stack depth: 19912 bytes left [ 151.857274][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 153.501803][ T6585] kAFS: Invalid Command on /proc/fs/afs/cells file [ 153.965189][ T6594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.082514][ T6594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.149'. [ 154.109528][ T6598] syz.0.150 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.207217][ T6598] FAULT_INJECTION: forcing a failure. [ 154.207217][ T6598] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 154.225503][ T6598] CPU: 0 UID: 0 PID: 6598 Comm: syz.0.150 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 154.225549][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.225567][ T6598] Call Trace: [ 154.225579][ T6598] [ 154.225590][ T6598] dump_stack_lvl+0x16c/0x1f0 [ 154.225647][ T6598] should_fail_ex+0x512/0x640 [ 154.225712][ T6598] should_fail_alloc_page+0xe7/0x130 [ 154.225759][ T6598] prepare_alloc_pages+0x3c2/0x610 [ 154.225813][ T6598] ? rcu_is_watching+0x12/0xc0 [ 154.225851][ T6598] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 154.225901][ T6598] ? do_raw_spin_lock+0x12c/0x2b0 [ 154.225954][ T6598] ? find_held_lock+0x2b/0x80 [ 154.225992][ T6598] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.226034][ T6598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 154.226081][ T6598] ? stack_depot_save_flags+0x3e6/0xa50 [ 154.226142][ T6598] ? kasan_save_stack+0x42/0x60 [ 154.226183][ T6598] ? __lock_acquire+0xaa4/0x1ba0 [ 154.226224][ T6598] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.226275][ T6598] ? policy_nodemask+0xea/0x4e0 [ 154.226321][ T6598] alloc_pages_mpol+0x1fb/0x550 [ 154.226365][ T6598] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 154.226404][ T6598] ? __page_table_check_ptes_set+0x1ae/0x420 [ 154.226445][ T6598] ? find_held_lock+0x2b/0x80 [ 154.226486][ T6598] alloc_pages_noprof+0x131/0x390 [ 154.226529][ T6598] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 154.226562][ T6598] get_free_pages_noprof+0xc/0x40 [ 154.226607][ T6598] kasan_populate_vmalloc_pte+0x2d/0x160 [ 154.226643][ T6598] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 154.226686][ T6598] __apply_to_page_range+0x617/0xd60 [ 154.226743][ T6598] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 154.226785][ T6598] ? __pfx___apply_to_page_range+0x10/0x10 [ 154.226839][ T6598] ? alloc_vmap_area+0x872/0x2970 [ 154.226895][ T6598] alloc_vmap_area+0x919/0x2970 [ 154.226963][ T6598] ? __pfx_alloc_vmap_area+0x10/0x10 [ 154.227023][ T6598] __get_vm_area_node+0x1ca/0x330 [ 154.227083][ T6598] __vmalloc_node_range_noprof+0x277/0x1540 [ 154.227140][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.227204][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.227262][ T6598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.227337][ T6598] __kvmalloc_node_noprof+0x2ff/0x600 [ 154.227375][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.227426][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.227483][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.227529][ T6598] __do_sys_listmount+0x1c2/0xed0 [ 154.227586][ T6598] ? __x64_sys_futex+0x1e0/0x4c0 [ 154.227622][ T6598] ? __x64_sys_futex+0x1e9/0x4c0 [ 154.227666][ T6598] ? __pfx___do_sys_listmount+0x10/0x10 [ 154.227718][ T6598] ? xfd_validate_state+0x5d/0x180 [ 154.227768][ T6598] do_syscall_64+0xcd/0x230 [ 154.227823][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.227858][ T6598] RIP: 0033:0x7f358258e969 [ 154.227884][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.227916][ T6598] RSP: 002b:00007f35833dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 154.227947][ T6598] RAX: ffffffffffffffda RBX: 00007f35827b6080 RCX: 00007f358258e969 [ 154.227969][ T6598] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 154.227990][ T6598] RBP: 00007f3582610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 154.228010][ T6598] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 154.228028][ T6598] R13: 0000000000000000 R14: 00007f35827b6080 R15: 00007ffd0808f588 [ 154.228071][ T6598] [ 154.637224][ T6598] syz.0.150: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 154.668862][ T6598] CPU: 1 UID: 0 PID: 6598 Comm: syz.0.150 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 154.668911][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.668930][ T6598] Call Trace: [ 154.668941][ T6598] [ 154.668953][ T6598] dump_stack_lvl+0x16c/0x1f0 [ 154.669009][ T6598] warn_alloc+0x248/0x3a0 [ 154.669051][ T6598] ? __pfx_warn_alloc+0x10/0x10 [ 154.669093][ T6598] ? kfree+0x2b6/0x4d0 [ 154.669132][ T6598] ? __get_vm_area_node+0x208/0x330 [ 154.669192][ T6598] __vmalloc_node_range_noprof+0xd31/0x1540 [ 154.669260][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.669321][ T6598] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.669393][ T6598] __kvmalloc_node_noprof+0x2ff/0x600 [ 154.669430][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.669483][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.669542][ T6598] ? __do_sys_listmount+0x1c2/0xed0 [ 154.669587][ T6598] __do_sys_listmount+0x1c2/0xed0 [ 154.669655][ T6598] ? __x64_sys_futex+0x1e0/0x4c0 [ 154.669690][ T6598] ? __x64_sys_futex+0x1e9/0x4c0 [ 154.669730][ T6598] ? __pfx___do_sys_listmount+0x10/0x10 [ 154.669782][ T6598] ? xfd_validate_state+0x5d/0x180 [ 154.669832][ T6598] do_syscall_64+0xcd/0x230 [ 154.669891][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.669925][ T6598] RIP: 0033:0x7f358258e969 [ 154.669950][ T6598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.669982][ T6598] RSP: 002b:00007f35833dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 154.670013][ T6598] RAX: ffffffffffffffda RBX: 00007f35827b6080 RCX: 00007f358258e969 [ 154.670033][ T6598] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 154.670054][ T6598] RBP: 00007f3582610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 154.670074][ T6598] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 154.670094][ T6598] R13: 0000000000000000 R14: 00007f35827b6080 R15: 00007ffd0808f588 [ 154.670136][ T6598] [ 154.670218][ T6598] Mem-Info: [ 155.045457][ T6598] active_anon:33080 inactive_anon:0 isolated_anon:0 [ 155.045457][ T6598] active_file:18889 inactive_file:40274 isolated_file:0 [ 155.045457][ T6598] unevictable:768 dirty:733 writeback:0 [ 155.045457][ T6598] slab_reclaimable:10381 slab_unreclaimable:94588 [ 155.045457][ T6598] mapped:25725 shmem:26235 pagetables:848 [ 155.045457][ T6598] sec_pagetables:0 bounce:0 [ 155.045457][ T6598] kernel_misc_reclaimable:0 [ 155.045457][ T6598] free:1311810 free_pcp:292 free_cma:0 [ 155.131096][ T6598] Node 0 active_anon:130520kB inactive_anon:0kB active_file:75556kB inactive_file:160892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102900kB dirty:2924kB writeback:0kB shmem:101504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10744kB pagetables:3392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.226011][ T6598] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.295667][ T6598] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.431095][ T6598] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 155.482324][ T6598] Node 0 DMA32 free:1329768kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:120272kB inactive_anon:0kB active_file:75556kB inactive_file:159056kB unevictable:1536kB writepending:2924kB present:3129332kB managed:2544136kB mlocked:0kB bounce:0kB free_pcp:2848kB local_pcp:2136kB free_cma:0kB [ 155.573258][ T6598] lowmem_reserve[]: 0 0 1 1 1 [ 155.605529][ T6598] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 155.643018][ T6598] lowmem_reserve[]: 0 0 0 0 0 [ 155.694285][ T6598] Node 1 Normal free:3910472kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.728797][ T6598] lowmem_reserve[]: 0 0 0 0 0 [ 155.734313][ T6598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.747872][ T6598] Node 0 DMA32: 4752*4kB (ME) 1598*8kB (ME) 383*16kB (UME) 254*32kB (UME) 140*64kB (UME) 166*128kB (UME) 58*256kB (UME) 14*512kB (UME) 4*1024kB (ME) 1*2048kB (M) 299*4096kB (UM) = 1329120kB [ 155.768025][ T6598] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 155.780880][ T6598] Node 1 Normal: 246*4kB (UME) 66*8kB (UME) 48*16kB (UME) 203*32kB (UME) 100*64kB (UME) 38*128kB (UME) 15*256kB (UME) 7*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3910472kB [ 155.804705][ T6598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.814774][ T6598] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 155.825404][ T6598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.860999][ T6598] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.900394][ T6598] 82819 total pagecache pages [ 155.922130][ T6598] 0 pages in swap cache [ 155.935827][ T6598] Free swap = 124996kB [ 155.968774][ T6598] Total swap = 124996kB [ 155.980180][ T6598] 2097051 pages RAM [ 155.991107][ T6598] 0 pages HighMem/MovableOnly [ 156.001531][ T6598] 428911 pages reserved [ 156.019719][ T6598] 0 pages cma reserved [ 156.550294][ T6619] can: request_module (can-proto-0) failed. [ 156.800086][ T6630] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 157.672423][ T6646] tipc: Started in network mode [ 157.696134][ T6646] tipc: Node identity ee00, cluster identity 4711 [ 157.702880][ T6646] tipc: Node number set to 60928 [ 158.567606][ T30] audit: type=1806 audit(6043066284.612:3): xattr="." res=0 [ 160.293498][ T6683] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 161.030685][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'. [ 161.851300][ T6707] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 163.621878][ T6733] can: request_module (can-proto-0) failed. [ 165.621307][ T6766] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 169.380758][ T6813] FAULT_INJECTION: forcing a failure. [ 169.380758][ T6813] name failslab, interval 1, probability 0, space 0, times 0 [ 169.436262][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.0.194 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 169.436310][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.436327][ T6813] Call Trace: [ 169.436336][ T6813] [ 169.436346][ T6813] dump_stack_lvl+0x16c/0x1f0 [ 169.436393][ T6813] should_fail_ex+0x512/0x640 [ 169.436435][ T6813] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 169.436471][ T6813] should_failslab+0xc2/0x120 [ 169.436506][ T6813] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 169.436539][ T6813] ? getname_flags.part.0+0x4c/0x550 [ 169.436588][ T6813] getname_flags.part.0+0x4c/0x550 [ 169.436630][ T6813] getname_flags+0x93/0xf0 [ 169.436674][ T6813] do_sys_openat2+0xb8/0x1d0 [ 169.436712][ T6813] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.436753][ T6813] ? __sys_sendmsg+0x199/0x220 [ 169.436795][ T6813] __x64_sys_openat+0x174/0x210 [ 169.436834][ T6813] ? __pfx___x64_sys_openat+0x10/0x10 [ 169.436874][ T6813] ? rcu_is_watching+0x12/0xc0 [ 169.436910][ T6813] do_syscall_64+0xcd/0x230 [ 169.436954][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.436981][ T6813] RIP: 0033:0x7f358258e969 [ 169.437003][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.437029][ T6813] RSP: 002b:00007f35833dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.437054][ T6813] RAX: ffffffffffffffda RBX: 00007f35827b6080 RCX: 00007f358258e969 [ 169.437071][ T6813] RDX: 0000000000002202 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 169.437088][ T6813] RBP: 00007f3582610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 169.437105][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.437121][ T6813] R13: 0000000000000000 R14: 00007f35827b6080 R15: 00007ffd0808f588 [ 169.437154][ T6813] [ 169.737238][ T6813] FAULT_INJECTION: forcing a failure. [ 169.737238][ T6813] name fail_futex, interval 1, probability 0, space 0, times 1 [ 169.815558][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.0.194 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 169.815625][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.815645][ T6813] Call Trace: [ 169.815657][ T6813] [ 169.815670][ T6813] dump_stack_lvl+0x16c/0x1f0 [ 169.815726][ T6813] should_fail_ex+0x512/0x640 [ 169.815782][ T6813] get_futex_key+0x49e/0x1000 [ 169.815824][ T6813] ? __pfx_get_futex_key+0x10/0x10 [ 169.815857][ T6813] ? __pfx___schedule+0x10/0x10 [ 169.815918][ T6813] futex_wait_setup+0x78/0x290 [ 169.815976][ T6813] __futex_wait+0x266/0x3c0 [ 169.816024][ T6813] ? __pfx___futex_wait+0x10/0x10 [ 169.816078][ T6813] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.816143][ T6813] futex_wait+0xe8/0x380 [ 169.816187][ T6813] ? __pfx_futex_wait+0x10/0x10 [ 169.816242][ T6813] ? do_writev+0x218/0x330 [ 169.816288][ T6813] do_futex+0x229/0x350 [ 169.816326][ T6813] ? __pfx_do_futex+0x10/0x10 [ 169.816361][ T6813] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.816424][ T6813] __x64_sys_futex+0x1e0/0x4c0 [ 169.816470][ T6813] ? __pfx___x64_sys_futex+0x10/0x10 [ 169.816511][ T6813] ? rcu_is_watching+0x12/0xc0 [ 169.816563][ T6813] do_syscall_64+0xcd/0x230 [ 169.816617][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.816652][ T6813] RIP: 0033:0x7f358258e969 [ 169.816678][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.816708][ T6813] RSP: 002b:00007f35833dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.816739][ T6813] RAX: ffffffffffffffda RBX: 00007f35827b6088 RCX: 00007f358258e969 [ 169.816760][ T6813] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f35827b6088 [ 169.816780][ T6813] RBP: 00007f35827b6080 R08: 0000000000000000 R09: 0000000000000000 [ 169.816799][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35827b608c [ 169.816820][ T6813] R13: 0000000000000000 R14: 00007ffd0808f4a0 R15: 00007ffd0808f588 [ 169.816863][ T6813] [ 171.089565][ T6819] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 171.727936][ T6828] ovs_: entered promiscuous mode [ 172.128694][ T6836] netlink: 338 bytes leftover after parsing attributes in process `syz.1.200'. [ 172.271140][ T6837] netlink: 338 bytes leftover after parsing attributes in process `syz.1.200'. [ 172.312621][ T6836] netlink: 290 bytes leftover after parsing attributes in process `syz.1.200'. [ 172.340110][ T6836] veth0_macvtap: left promiscuous mode [ 174.664446][ T6858] netlink: 342 bytes leftover after parsing attributes in process `syz.3.203'. [ 181.070411][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.216'. [ 182.176236][ T6959] netlink: 330 bytes leftover after parsing attributes in process `syz.3.224'. [ 182.203401][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 182.574270][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.597372][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.605064][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.616716][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.649574][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.116396][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.227'. [ 183.213224][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.248597][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.260390][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.281253][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.959671][ T6976] Invalid ELF header magic: != ELF [ 184.471367][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 184.706746][ T5841] Bluetooth: hci4: command tx timeout [ 185.175603][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.202071][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.228488][ T6962] bridge_slave_0: entered allmulticast mode [ 185.266376][ T6962] bridge_slave_0: entered promiscuous mode [ 185.287332][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.305555][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.323094][ T6962] bridge_slave_1: entered allmulticast mode [ 185.366225][ T6962] bridge_slave_1: entered promiscuous mode [ 185.606810][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.640192][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.874489][ T6962] team0: Port device team_slave_0 added [ 185.928381][ T6962] team0: Port device team_slave_1 added [ 186.169960][ T6993] tty tty53: ldisc open failed (-12), clearing slot 52 [ 186.305678][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.333369][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.397820][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.436207][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.466123][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.556185][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.786196][ T5841] Bluetooth: hci4: command tx timeout [ 186.929198][ T6962] hsr_slave_0: entered promiscuous mode [ 186.946476][ T6962] hsr_slave_1: entered promiscuous mode [ 186.952938][ T6962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.996111][ T6962] Cannot create hsr debugfs directory [ 187.863033][ T6962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.907558][ T6962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.971869][ T6962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.067828][ T6962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.489091][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.554113][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.610655][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.617889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.740195][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.747360][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.866308][ T5841] Bluetooth: hci4: command tx timeout [ 189.880231][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.946373][ T5841] Bluetooth: hci4: command tx timeout [ 191.268988][ T6962] veth0_vlan: entered promiscuous mode [ 191.275098][ T7018] can: request_module (can-proto-0) failed. [ 191.392246][ T7022] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 191.409432][ T6962] veth1_vlan: entered promiscuous mode [ 191.529227][ T6962] veth0_macvtap: entered promiscuous mode [ 191.551317][ T6962] veth1_macvtap: entered promiscuous mode [ 191.906325][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.988956][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.038565][ T6962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.115973][ T6962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.124763][ T6962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.165984][ T6962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.464518][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 192.819788][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.999008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.297015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.304888][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.703380][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 193.796147][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.805428][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.824220][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.844862][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.853063][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.259968][ T7044] netlink: 334 bytes leftover after parsing attributes in process `syz.0.238'. [ 194.893791][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 195.602441][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.636486][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.644461][ T7038] bridge_slave_0: entered allmulticast mode [ 195.716801][ T7038] bridge_slave_0: entered promiscuous mode [ 195.804597][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.866316][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.896217][ T7038] bridge_slave_1: entered allmulticast mode [ 195.904299][ T7038] bridge_slave_1: entered promiscuous mode [ 195.910347][ T5845] Bluetooth: hci1: command tx timeout [ 196.410673][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.461343][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.981747][ T7038] team0: Port device team_slave_0 added [ 197.088299][ T7038] team0: Port device team_slave_1 added [ 197.312383][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.346335][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.476200][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.505472][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.566031][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.663350][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.995976][ T5845] Bluetooth: hci1: command tx timeout [ 198.001894][ T7078] can: request_module (can-proto-0) failed. [ 198.133141][ T7038] hsr_slave_0: entered promiscuous mode [ 198.140021][ T7038] hsr_slave_1: entered promiscuous mode [ 198.146695][ T7038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.151120][ T7083] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 198.164379][ T5845] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 198.171727][ T7038] Cannot create hsr debugfs directory [ 198.510784][ T30] audit: type=1800 audit(6043066332.549:4): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.244" name="dbroot" dev="configfs" ino=12834 res=0 errno=0 [ 199.446166][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.452567][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.066426][ T5845] Bluetooth: hci1: command tx timeout [ 200.283898][ T7038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.010746][ T7038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.026666][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.038248][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.046245][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.055827][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.079578][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.249680][ T7038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.678095][ T7096] lo: entered allmulticast mode [ 201.909429][ T7038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.168843][ T5845] Bluetooth: hci1: command tx timeout [ 202.326141][ T7090] lo: left allmulticast mode [ 203.192415][ T5845] Bluetooth: hci5: command tx timeout [ 204.041936][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.127443][ T7098] chnl_net:caif_netlink_parms(): no params data found [ 204.411230][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.492644][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.499913][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.555407][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.562670][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.266097][ T5845] Bluetooth: hci5: command tx timeout [ 205.737475][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.747894][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.795033][ T7098] bridge_slave_0: entered allmulticast mode [ 205.831903][ T7098] bridge_slave_0: entered promiscuous mode [ 205.976870][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.984093][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.058112][ T7098] bridge_slave_1: entered allmulticast mode [ 206.078203][ T7098] bridge_slave_1: entered promiscuous mode [ 206.192064][ T7038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.487099][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.662050][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.141121][ T7098] team0: Port device team_slave_0 added [ 207.346463][ T5845] Bluetooth: hci5: command tx timeout [ 207.428461][ T7098] team0: Port device team_slave_1 added [ 207.977072][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.994308][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.076023][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.108563][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.115558][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.226348][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.364526][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.647331][ T7098] hsr_slave_0: entered promiscuous mode [ 208.654193][ T7098] hsr_slave_1: entered promiscuous mode [ 208.711685][ T7098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.755946][ T7098] Cannot create hsr debugfs directory [ 209.448508][ T5845] Bluetooth: hci5: command tx timeout [ 210.355926][ T7098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.471137][ T7098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.553569][ T7098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.852198][ T7098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.986698][ T7166] netlink: 338 bytes leftover after parsing attributes in process `syz.4.256'. [ 211.086993][ T7167] netlink: 338 bytes leftover after parsing attributes in process `syz.4.256'. [ 211.243374][ T7038] veth0_vlan: entered promiscuous mode [ 211.481964][ T7038] veth1_vlan: entered promiscuous mode [ 211.685635][ T7038] veth0_macvtap: entered promiscuous mode [ 211.791168][ T7038] veth1_macvtap: entered promiscuous mode [ 212.273107][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.566968][ T7176] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 212.709319][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.056734][ T7038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.117510][ T7038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.156112][ T7038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.184572][ T7038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.356665][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.671764][ T7098] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.768105][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.775293][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.953063][ T7178] can: request_module (can-proto-0) failed. [ 214.172913][ T7183] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 214.759072][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.766290][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.763240][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.822738][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.039790][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.097104][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.992191][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.390259][ T7210] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x7f4010bd7 pfn:0x78000 [ 218.390367][ T7210] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 218.390405][ T7210] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 218.390452][ T7210] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 218.390486][ T7210] raw: 00000007f4010bd7 0000000000000000 00000008ffffffff 0000000000000000 [ 218.390519][ T7210] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 218.390552][ T7210] head: 00000007f4010bd7 0000000000000000 00000008ffffffff 0000000000000000 [ 218.390586][ T7210] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 218.390619][ T7210] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 218.390640][ T7210] page dumped because: unmovable page [ 218.390662][ T7210] page_owner tracks the page as allocated [ 218.390723][ T7210] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 104020646052, free_ts 100563039679 [ 218.390779][ T7210] post_alloc_hook+0x181/0x1b0 [ 218.390817][ T7210] get_page_from_freelist+0x135c/0x3920 [ 218.390856][ T7210] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 218.390897][ T7210] alloc_pages_mpol+0x1fb/0x550 [ 218.390939][ T7210] alloc_pages_noprof+0x131/0x390 [ 218.390981][ T7210] skb_page_frag_refill+0x186/0x5a0 [ 218.391033][ T7210] try_fill_recv+0x79c/0x2690 [ 218.391078][ T7210] virtnet_poll+0x1e23/0x3c00 [ 218.391125][ T7210] __napi_poll.constprop.0+0xba/0x550 [ 218.391164][ T7210] net_rx_action+0xa97/0x1010 [ 218.391200][ T7210] handle_softirqs+0x216/0x8e0 [ 218.391238][ T7210] __irq_exit_rcu+0x109/0x170 [ 218.391276][ T7210] irq_exit_rcu+0x9/0x30 [ 218.391313][ T7210] common_interrupt+0xbf/0xe0 [ 218.391351][ T7210] asm_common_interrupt+0x26/0x40 [ 218.391385][ T7210] page last free pid 5820 tgid 5820 stack trace: [ 218.391415][ T7210] __free_frozen_pages+0x69d/0xff0 [ 218.391447][ T7210] vfree+0x176/0x960 [ 218.391498][ T7210] kcov_close+0x34/0x60 [ 218.391541][ T7210] __fput+0x3ff/0xb70 [ 218.391582][ T7210] fput_close_sync+0x118/0x260 [ 218.391627][ T7210] __x64_sys_close+0x8b/0x120 [ 218.391676][ T7210] do_syscall_64+0xcd/0x230 [ 218.391727][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.189210][ T7098] veth0_vlan: entered promiscuous mode [ 219.985395][ T7098] veth1_vlan: entered promiscuous mode [ 220.205115][ T7098] veth0_macvtap: entered promiscuous mode [ 220.326238][ T7098] veth1_macvtap: entered promiscuous mode [ 220.492777][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.561463][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.593500][ T7225] can: request_module (can-proto-0) failed. [ 220.788495][ T7098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.818615][ T7229] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 220.880105][ T7098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.889296][ T7098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.936018][ T7098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.916321][ T7227] random: crng reseeded on system resumption [ 222.082359][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.164759][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.534240][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.554817][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.625653][ T7262] can: request_module (can-proto-0) failed. [ 225.796921][ T7265] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 226.539393][ T2960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.037272][ T2960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.216246][ T7273] netlink: 306 bytes leftover after parsing attributes in process `syz.4.272'. [ 227.480526][ T2960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.706466][ T7275] FAULT_INJECTION: forcing a failure. [ 227.706466][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 227.829115][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.0.273 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 227.829165][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.829185][ T7275] Call Trace: [ 227.829196][ T7275] [ 227.829213][ T7275] dump_stack_lvl+0x16c/0x1f0 [ 227.829268][ T7275] should_fail_ex+0x512/0x640 [ 227.829319][ T7275] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 227.829364][ T7275] should_failslab+0xc2/0x120 [ 227.829407][ T7275] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 227.829444][ T7275] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 227.829491][ T7275] ? __d_alloc+0x31/0xaa0 [ 227.829531][ T7275] __d_alloc+0x31/0xaa0 [ 227.829579][ T7275] ? look_up_lock_class+0x59/0x150 [ 227.829638][ T7275] d_alloc_pseudo+0x1c/0xc0 [ 227.829682][ T7275] alloc_file_pseudo+0xcf/0x230 [ 227.829729][ T7275] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 227.829772][ T7275] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 227.829816][ T7275] create_pipe_files+0x364/0x930 [ 227.829859][ T7275] do_pipe2+0xaf/0x1c0 [ 227.829895][ T7275] ? __pfx_do_pipe2+0x10/0x10 [ 227.829947][ T7275] __x64_sys_pipe+0x33/0x50 [ 227.829984][ T7275] do_syscall_64+0xcd/0x230 [ 227.830038][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.830073][ T7275] RIP: 0033:0x7f358258e969 [ 227.830099][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.830131][ T7275] RSP: 002b:00007f35833fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 227.830162][ T7275] RAX: ffffffffffffffda RBX: 00007f35827b5fa0 RCX: 00007f358258e969 [ 227.830184][ T7275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 227.830204][ T7275] RBP: 00007f3582610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 227.830223][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.830243][ T7275] R13: 0000000000000000 R14: 00007f35827b5fa0 R15: 00007ffd0808f588 [ 227.830285][ T7275] [ 228.265792][ T2960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.574176][ T7297] netlink: 'syz.4.276': attribute type 11 has an invalid length. [ 228.592310][ T7297] netlink: 'syz.4.276': attribute type 11 has an invalid length. [ 229.035989][ T7304] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x7f4010bd7 pfn:0x78000 [ 229.446138][ T7304] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.567363][ T7304] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.575014][ T7304] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 229.596477][ T7304] raw: 00000007f4010bd7 0000000000000000 00000008ffffffff 0000000000000000 [ 229.605154][ T7304] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 229.616147][ T7304] head: 00000007f4010bd7 0000000000000000 00000008ffffffff 0000000000000000 [ 229.636029][ T7304] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 229.644870][ T7304] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 229.856666][ T2960] bridge_slave_1: left allmulticast mode [ 229.885797][ T2960] bridge_slave_1: left promiscuous mode [ 229.914082][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.968460][ T7304] page dumped because: unmovable page [ 229.979521][ T7304] page_owner tracks the page as allocated [ 229.987696][ T7304] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 104020646052, free_ts 100563039679 [ 230.008145][ T2960] bridge_slave_0: left allmulticast mode [ 230.013806][ T2960] bridge_slave_0: left promiscuous mode [ 230.037745][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.195118][ T7304] post_alloc_hook+0x181/0x1b0 [ 230.205136][ T7304] get_page_from_freelist+0x135c/0x3920 [ 230.211247][ T7304] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 230.225457][ T7304] alloc_pages_mpol+0x1fb/0x550 [ 230.235602][ T7304] alloc_pages_noprof+0x131/0x390 [ 230.241283][ T7304] skb_page_frag_refill+0x186/0x5a0 [ 230.246980][ T7304] try_fill_recv+0x79c/0x2690 [ 230.251887][ T7308] could not allocate digest TFM handle binfmt_misc [ 230.321968][ T7304] virtnet_poll+0x1e23/0x3c00 [ 230.348657][ T7326] sg_write: process 38 (syz.5.282) changed security contexts after opening file descriptor, this is not allowed. [ 230.479911][ T7304] __napi_poll.constprop.0+0xba/0x550 [ 230.615974][ T7304] net_rx_action+0xa97/0x1010 [ 230.620713][ T7304] handle_softirqs+0x216/0x8e0 [ 230.665612][ T7304] __irq_exit_rcu+0x109/0x170 [ 230.726007][ T7304] irq_exit_rcu+0x9/0x30 [ 230.766061][ T7304] common_interrupt+0xbf/0xe0 [ 230.781331][ T7304] asm_common_interrupt+0x26/0x40 [ 230.819424][ T7304] page last free pid 5820 tgid 5820 stack trace: [ 230.889814][ T7304] __free_frozen_pages+0x69d/0xff0 [ 230.976176][ T7304] vfree+0x176/0x960 [ 231.041182][ T7304] kcov_close+0x34/0x60 [ 231.045398][ T7304] __fput+0x3ff/0xb70 [ 231.111680][ T7304] fput_close_sync+0x118/0x260 [ 231.205964][ T7304] __x64_sys_close+0x8b/0x120 [ 231.231308][ T7304] do_syscall_64+0xcd/0x230 [ 231.281926][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.376522][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 232.618987][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.287'. [ 234.051007][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.111394][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.151649][ T2960] bond0 (unregistering): Released all slaves [ 234.349416][ T7356] bridge_slave_1: left allmulticast mode [ 234.390128][ T7356] bridge_slave_1: left promiscuous mode [ 234.403870][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.485329][ T7356] bridge_slave_0: left allmulticast mode [ 234.514377][ T7356] bridge_slave_0: left promiscuous mode [ 234.565307][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.776910][ T2960] hsr_slave_0: left promiscuous mode [ 236.810943][ T2960] hsr_slave_1: left promiscuous mode [ 236.856117][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.869617][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.921214][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.986040][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.231195][ T2960] veth1_macvtap: left promiscuous mode [ 237.286132][ T2960] veth0_macvtap: left promiscuous mode [ 237.322364][ T2960] veth1_vlan: left promiscuous mode [ 237.355057][ T2960] veth0_vlan: left promiscuous mode [ 237.590781][ T7397] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 238.310037][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.293'. [ 240.897952][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 241.169895][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 242.901056][ T7403] bond_slave_0: entered allmulticast mode [ 245.220463][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.657489][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.108482][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.111610][ T7459] syz.4.300 (7459): /proc/7453/oom_adj is deprecated, please use /proc/7453/oom_score_adj instead. [ 246.435723][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.858506][ T7487] misc userio: No port type given on /dev/userio [ 247.865689][ T7488] misc userio: No port type given on /dev/userio [ 248.656062][ T2960] bridge_slave_1: left allmulticast mode [ 248.661778][ T2960] bridge_slave_1: left promiscuous mode [ 248.746875][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.787227][ T2960] bridge_slave_0: left allmulticast mode [ 248.826501][ T2960] bridge_slave_0: left promiscuous mode [ 248.867670][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.438321][ T7513] netlink: 338 bytes leftover after parsing attributes in process `syz.5.306'. [ 249.623463][ T7502] could not allocate digest TFM handle [ 250.184734][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.198821][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.213311][ T2960] bond0 (unregistering): Released all slaves [ 250.394634][ T7513] macsec0: entered promiscuous mode [ 250.403230][ T7513] macsec0: entered allmulticast mode [ 250.409924][ T7513] veth1_macvtap: entered allmulticast mode [ 250.793152][ T2960] tipc: Left network mode [ 252.109857][ T2960] hsr_slave_0: left promiscuous mode [ 252.140724][ T2960] hsr_slave_1: left promiscuous mode [ 252.194055][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.249688][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.322646][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.350269][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.480207][ T2960] veth1_macvtap: left promiscuous mode [ 252.485891][ T2960] veth0_macvtap: left promiscuous mode [ 252.506476][ T5845] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14 [ 252.530894][ T2960] veth1_vlan: left promiscuous mode [ 252.617355][ T2960] veth0_vlan: left promiscuous mode [ 253.088980][ T7541] can: request_module (can-proto-0) failed. [ 253.332778][ T7551] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 254.457034][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 257.055459][ T7568] synth uevent: /devices/virtual/tty/ptyea: unknown uevent action string [ 257.126045][ T7568] tty ptyea: uevent: failed to send synthetic uevent: -22 [ 257.304278][ T7576] synth uevent: /devices/virtual/tty/ptyea: unknown uevent action string [ 257.348150][ T7596] can: request_module (can-proto-0) failed. [ 257.383523][ T7576] tty ptyea: uevent: failed to send synthetic uevent: -22 [ 257.558054][ T7603] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 260.420007][ T30] audit: type=1800 audit(6043066399.446:5): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.326" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 260.887311][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.896042][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.147951][ T7643] can: request_module (can-proto-0) failed. [ 261.314388][ T7648] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 262.110185][ T7654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 262.137286][ T7654] hsr_slave_0: left promiscuous mode [ 262.196182][ T7654] hsr_slave_1: left promiscuous mode [ 263.615687][ T7690] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 265.482892][ T7713] can: request_module (can-proto-0) failed. [ 265.716360][ T7720] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 267.629772][ T7756] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 270.431515][ T7806] netlink: 8792 bytes leftover after parsing attributes in process `syz.5.346'. [ 270.654461][ T7804] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 271.387349][ T5845] Bluetooth: hci3: unexpected subevent 0x01 length: 5 < 18 [ 272.779271][ T7834] tipc: Started in network mode [ 272.835327][ T7834] tipc: Node identity ee00, cluster identity 4711 [ 272.842509][ T7834] tipc: Node number set to 60928 [ 272.976385][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 273.653591][ T7853] can: request_module (can-proto-0) failed. [ 273.886037][ T7854] can: request_module (can-proto-4) failed. [ 276.321299][ T7905] sctp: [Deprecated]: syz.6.365 (pid 7905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.321299][ T7905] Use struct sctp_sack_info instead [ 277.608719][ T7905] sp0: Synchronizing with TNC [ 277.787011][ T7902] [U] [ 277.798002][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 278.539004][ T7932] bond0: (slave bond_slave_0): Releasing backup interface [ 281.614743][ T7912] kexec: Could not allocate control_code_buffer [ 284.350311][ T8027] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 284.613147][ T8024] can: request_module (can-proto-0) failed. [ 284.691982][ T8024] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 284.785724][ T8006] Invalid ELF header magic: != ELF [ 286.999775][ T8059] netlink: 153 bytes leftover after parsing attributes in process `syz.4.387'. [ 288.962510][ T8105] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 289.160662][ T8079] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 293.964933][ T8170] Invalid ELF header magic: != ELF [ 294.744501][ T8176] can: request_module (can-proto-0) failed. [ 294.818487][ T8176] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 296.178498][ T30] audit: type=1800 audit(6043066435.216:6): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.410" name="dbroot" dev="configfs" ino=19971 res=0 errno=0 [ 297.449867][ T8243] netlink: 'syz.0.416': attribute type 11 has an invalid length. [ 298.524965][ T8263] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 298.735744][ T8256] can: request_module (can-proto-0) failed. [ 299.133113][ T8276] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 299.847904][ T8287] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 301.520153][ T8286] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 301.882940][ T8305] FAULT_INJECTION: forcing a failure. [ 301.882940][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 301.975954][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.0.425 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 301.975996][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.976020][ T8305] Call Trace: [ 301.976030][ T8305] [ 301.976042][ T8305] dump_stack_lvl+0x16c/0x1f0 [ 301.976095][ T8305] should_fail_ex+0x512/0x640 [ 301.976141][ T8305] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 301.976183][ T8305] should_failslab+0xc2/0x120 [ 301.976224][ T8305] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 301.976264][ T8305] ? __kernfs_new_node+0xd2/0x8a0 [ 301.976303][ T8305] __kernfs_new_node+0xd2/0x8a0 [ 301.976340][ T8305] ? __pfx___kernfs_new_node+0x10/0x10 [ 301.976384][ T8305] ? find_held_lock+0x2b/0x80 [ 301.976418][ T8305] ? kernfs_root+0xee/0x2a0 [ 301.976459][ T8305] kernfs_new_node+0x13c/0x1e0 [ 301.976505][ T8305] __kernfs_create_file+0x53/0x350 [ 301.976556][ T8305] sysfs_add_file_mode_ns+0x207/0x3c0 [ 301.976618][ T8305] internal_create_group+0x578/0xf30 [ 301.976664][ T8305] ? __pfx_internal_create_group+0x10/0x10 [ 301.976705][ T8305] ? kernfs_create_link+0x1bd/0x240 [ 301.976757][ T8305] internal_create_groups+0x9d/0x150 [ 301.976795][ T8305] device_add+0x6d1/0x1a70 [ 301.976849][ T8305] ? __pfx_device_add+0x10/0x10 [ 301.976895][ T8305] ? lockdep_init_map_type+0x5c/0x280 [ 301.976948][ T8305] ? __init_waitqueue_head+0xca/0x150 [ 301.976988][ T8305] netdev_register_kobject+0x182/0x3a0 [ 301.977042][ T8305] register_netdevice+0x13dc/0x2270 [ 301.977097][ T8305] ? __pfx_register_netdevice+0x10/0x10 [ 301.977141][ T8305] ? rcu_is_watching+0x12/0xc0 [ 301.977172][ T8305] ? trace_kmalloc+0x2b/0xd0 [ 301.977214][ T8305] ? __kmalloc_noprof+0x242/0x510 [ 301.977260][ T8305] register_netdev+0x34/0x50 [ 301.977304][ T8305] mkiss_open+0x4cd/0x9a0 [ 301.977337][ T8305] ? __pfx_mkiss_open+0x10/0x10 [ 301.977370][ T8305] tty_ldisc_open+0x9c/0x120 [ 301.977408][ T8305] tty_set_ldisc+0x32b/0x780 [ 301.977458][ T8305] tty_ioctl+0xc42/0x1610 [ 301.977502][ T8305] ? __pfx_tty_ioctl+0x10/0x10 [ 301.977556][ T8305] ? find_held_lock+0x2b/0x80 [ 301.977587][ T8305] ? hook_file_ioctl_common+0x145/0x410 [ 301.977637][ T8305] ? __fget_files+0x20e/0x3c0 [ 301.977675][ T8305] ? __pfx_tty_ioctl+0x10/0x10 [ 301.977717][ T8305] __x64_sys_ioctl+0x190/0x200 [ 301.977767][ T8305] do_syscall_64+0xcd/0x230 [ 301.977822][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.977855][ T8305] RIP: 0033:0x7f358258e969 [ 301.977879][ T8305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.977908][ T8305] RSP: 002b:00007f35833fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.977945][ T8305] RAX: ffffffffffffffda RBX: 00007f35827b5fa0 RCX: 00007f358258e969 [ 301.977965][ T8305] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000007 [ 301.977983][ T8305] RBP: 00007f3582610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 301.978002][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.978020][ T8305] R13: 0000000000000000 R14: 00007f35827b5fa0 R15: 00007ffd0808f588 [ 301.978062][ T8305] [ 302.862426][ T8309] cgroup: fork rejected by pids controller in /syz5 [ 309.028988][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 311.946837][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 312.858711][ T8597] ima: policy update failed [ 312.905155][ T30] audit: type=1802 audit(6043066574.940:7): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.443" res=0 errno=0 [ 312.984136][ T8599] netlink: 25 bytes leftover after parsing attributes in process `syz.6.443'. [ 314.031523][ T8615] netlink: 330 bytes leftover after parsing attributes in process `syz.4.447'. [ 314.076408][ T8614] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 314.126199][ T8614] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 314.206627][ T8614] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 314.214274][ T8614] page_type: f5(slab) [ 314.266000][ T8614] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 314.274699][ T8614] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 314.365945][ T8614] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 314.374790][ T8614] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 314.494755][ T8614] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 314.656075][ T8614] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 314.726532][ T8614] page dumped because: unmovable page [ 314.731965][ T8614] page_owner tracks the page as allocated [ 314.890346][ T8627] can: request_module (can-proto-0) failed. [ 314.921059][ T8614] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 300026858108, free_ts 299979859363 [ 315.161274][ T8614] post_alloc_hook+0x181/0x1b0 [ 315.342554][ T8614] get_page_from_freelist+0x135c/0x3920 [ 315.363732][ T8614] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 315.735997][ T8614] alloc_pages_mpol+0x1fb/0x550 [ 315.740926][ T8614] new_slab+0x244/0x340 [ 315.783117][ T8614] ___slab_alloc+0xd9c/0x1940 [ 315.806438][ T8627] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 315.861508][ T8614] __slab_alloc.constprop.0+0x56/0xb0 [ 315.980529][ T8614] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 316.090322][ T8614] kmalloc_reserve+0xef/0x2c0 [ 316.136124][ T8614] __alloc_skb+0x166/0x380 [ 316.156316][ T8614] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 316.291189][ T8614] process_one_work+0x9cf/0x1b70 [ 316.376440][ T8614] worker_thread+0x6c8/0xf10 [ 316.413154][ T8614] kthread+0x3c2/0x780 [ 316.459246][ T8614] ret_from_fork+0x48/0x80 [ 316.463759][ T8614] ret_from_fork_asm+0x1a/0x30 [ 316.526016][ T8614] page last free pid 3024 tgid 3024 stack trace: [ 316.676024][ T8614] __free_frozen_pages+0x69d/0xff0 [ 316.714607][ T8614] __put_partials+0x16d/0x1c0 [ 316.771674][ T8614] qlist_free_all+0x4e/0x120 [ 316.823634][ T8614] kasan_quarantine_reduce+0x195/0x1e0 [ 316.852188][ T8614] __kasan_slab_alloc+0x69/0x90 [ 316.886055][ T8614] __kvmalloc_node_noprof+0x22e/0x600 [ 316.933741][ T8614] compose_active_planes+0x2b9/0x1970 [ 316.974497][ T8614] vkms_composer_worker+0x502/0x6e0 [ 316.991220][ T8120] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 317.005892][ T8614] process_one_work+0x9cf/0x1b70 [ 317.010939][ T8614] worker_thread+0x6c8/0xf10 [ 317.075982][ T8614] kthread+0x3c2/0x780 [ 317.080166][ T8614] ret_from_fork+0x48/0x80 [ 317.084632][ T8614] ret_from_fork_asm+0x1a/0x30 [ 317.450837][ T8642] FAULT_INJECTION: forcing a failure. [ 317.450837][ T8642] name fail_futex, interval 1, probability 0, space 0, times 0 [ 317.878663][ T8642] CPU: 1 UID: 0 PID: 8642 Comm: syz.6.445 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 317.878705][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.878723][ T8642] Call Trace: [ 317.878732][ T8642] [ 317.878744][ T8642] dump_stack_lvl+0x16c/0x1f0 [ 317.878797][ T8642] should_fail_ex+0x512/0x640 [ 317.878852][ T8642] get_futex_key+0xabc/0x1000 [ 317.878892][ T8642] ? __pfx_get_futex_key+0x10/0x10 [ 317.878941][ T8642] futex_wake+0xe7/0x4e0 [ 317.878980][ T8642] ? rcu_is_watching+0x12/0xc0 [ 317.879015][ T8642] ? __pfx_futex_wake+0x10/0x10 [ 317.879077][ T8642] do_futex+0x1e3/0x350 [ 317.879114][ T8642] ? __pfx_do_futex+0x10/0x10 [ 317.879145][ T8642] ? __might_fault+0xe3/0x190 [ 317.879200][ T8642] mm_release+0x24e/0x300 [ 317.879238][ T8642] do_exit+0x898/0x2c30 [ 317.879281][ T8642] ? __pfx_futex_wake_mark+0x10/0x10 [ 317.879331][ T8642] ? __pfx_do_exit+0x10/0x10 [ 317.879375][ T8642] ? do_raw_spin_lock+0x12c/0x2b0 [ 317.879425][ T8642] ? find_held_lock+0x2b/0x80 [ 317.879463][ T8642] do_group_exit+0xd3/0x2a0 [ 317.879513][ T8642] get_signal+0x2673/0x26d0 [ 317.879566][ T8642] ? __pfx_get_signal+0x10/0x10 [ 317.879611][ T8642] ? do_futex+0x122/0x350 [ 317.879648][ T8642] ? __pfx_do_futex+0x10/0x10 [ 317.879688][ T8642] arch_do_signal_or_restart+0x8f/0x7a0 [ 317.879738][ T8642] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.879797][ T8642] ? rcu_is_watching+0x12/0xc0 [ 317.879837][ T8642] syscall_exit_to_user_mode+0x150/0x2a0 [ 317.879889][ T8642] do_syscall_64+0xda/0x230 [ 317.879945][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.879976][ T8642] RIP: 0033:0x7f6ad0f8e969 [ 317.880000][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.880030][ T8642] RSP: 002b:00007f6ace5d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.880061][ T8642] RAX: fffffffffffffe00 RBX: 00007f6ad11b6328 RCX: 00007f6ad0f8e969 [ 317.880080][ T8642] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ad11b6328 [ 317.880100][ T8642] RBP: 00007f6ad11b6320 R08: 0000000000000000 R09: 0000000000000000 [ 317.880119][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ad11b632c [ 317.880138][ T8642] R13: 0000000000000000 R14: 00007ffd90d165b0 R15: 00007ffd90d16698 [ 317.880179][ T8642] [ 319.277244][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 320.682859][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.456'. [ 322.337204][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.344069][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.385975][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 324.805359][ T8734] netlink: 'syz.0.462': attribute type 16 has an invalid length. [ 324.904664][ T8734] netlink: 306 bytes leftover after parsing attributes in process `syz.0.462'. [ 326.610651][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.464'. [ 326.619744][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.464'. [ 335.515024][ T8859] can: request_module (can-proto-0) failed. [ 335.585734][ T8856] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 337.769784][ T8894] can: request_module (can-proto-0) failed. [ 337.886171][ T8894] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 338.012651][ T8904] netlink: 'syz.0.478': attribute type 16 has an invalid length. [ 338.097025][ T8904] netlink: 326 bytes leftover after parsing attributes in process `syz.0.478'. [ 338.156558][ T8904] veth1_macvtap: left promiscuous mode [ 338.300568][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.6.479'. [ 339.670358][ T8926] ======================================================= [ 339.670358][ T8926] WARNING: The mand mount option has been deprecated and [ 339.670358][ T8926] and is ignored by this kernel. Remove the mand [ 339.670358][ T8926] option from the mount to silence this warning. [ 339.670358][ T8926] ======================================================= [ 339.725082][ T30] audit: type=1800 audit(6043066601.760:8): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.482" name="lu_gp_id" dev="configfs" ino=21637 res=0 errno=0 [ 341.408678][ T8942] can0: slcan on ttyS2. [ 341.598636][ T8941] can0 (unregistered): slcan off ttyS2. [ 342.516662][ T8968] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 342.702107][ T8968] Invalid ELF header magic: != ELF [ 343.610289][ T8992] FAULT_INJECTION: forcing a failure. [ 343.610289][ T8992] name failslab, interval 1, probability 0, space 0, times 0 [ 343.623437][ T8979] can: request_module (can-proto-0) failed. [ 343.656716][ T8999] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 343.772950][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.5.493 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 343.772996][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.773016][ T8992] Call Trace: [ 343.773026][ T8992] [ 343.773038][ T8992] dump_stack_lvl+0x16c/0x1f0 [ 343.773096][ T8992] should_fail_ex+0x512/0x640 [ 343.773146][ T8992] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 343.773189][ T8992] should_failslab+0xc2/0x120 [ 343.773233][ T8992] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 343.773268][ T8992] ? __proc_create+0xc3/0x8c0 [ 343.773319][ T8992] ? __proc_create+0x2ce/0x8c0 [ 343.773383][ T8992] __proc_create+0x2ce/0x8c0 [ 343.773424][ T8992] ? __pfx___proc_create+0x10/0x10 [ 343.773469][ T8992] ? _raw_write_unlock+0x28/0x50 [ 343.773515][ T8992] ? proc_register+0x314/0x5f0 [ 343.773558][ T8992] proc_create_reg+0x7d/0x180 [ 343.773709][ T8992] proc_create_data+0x86/0x110 [ 343.773760][ T8992] ? __pfx_proc_create_data+0x10/0x10 [ 343.773805][ T8992] ? cache_register_net+0x137/0x5e0 [ 343.773855][ T8992] cache_register_net+0x25a/0x5e0 [ 343.773895][ T8992] unix_gid_cache_create+0x8b/0x130 [ 343.773929][ T8992] ? __pfx_sunrpc_init_net+0x10/0x10 [ 343.773978][ T8992] sunrpc_init_net+0x71/0x190 [ 343.774030][ T8992] ops_init+0x1e2/0x5f0 [ 343.774079][ T8992] setup_net+0x21e/0x850 [ 343.774129][ T8992] ? __pfx_setup_net+0x10/0x10 [ 343.774171][ T8992] ? lockdep_init_map_type+0x5c/0x280 [ 343.774219][ T8992] ? __pfx_down_read_killable+0x10/0x10 [ 343.774261][ T8992] ? debug_mutex_init+0x37/0x70 [ 343.774298][ T8992] copy_net_ns+0x2a6/0x5f0 [ 343.774349][ T8992] create_new_namespaces+0x3ea/0xad0 [ 343.774396][ T8992] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 343.774438][ T8992] ksys_unshare+0x45b/0xa40 [ 343.774558][ T8992] ? __pfx_ksys_unshare+0x10/0x10 [ 343.774620][ T8992] ? xfd_validate_state+0x5d/0x180 [ 343.774657][ T8992] ? rcu_is_watching+0x12/0xc0 [ 343.774700][ T8992] __x64_sys_unshare+0x31/0x40 [ 343.774755][ T8992] do_syscall_64+0xcd/0x230 [ 343.774807][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.774840][ T8992] RIP: 0033:0x7f277a18e969 [ 343.774865][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.774896][ T8992] RSP: 002b:00007f277aff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 343.774924][ T8992] RAX: ffffffffffffffda RBX: 00007f277a3b5fa0 RCX: 00007f277a18e969 [ 343.774944][ T8992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 343.774963][ T8992] RBP: 00007f277a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 343.774983][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.775002][ T8992] R13: 0000000000000000 R14: 00007f277a3b5fa0 R15: 00007ffc86f68008 [ 343.775043][ T8992] [ 349.950250][ T9090] kexec: Could not allocate control_code_buffer [ 350.866271][ T9112] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 351.036172][ T9109] can: request_module (can-proto-0) failed. [ 351.158642][ T9116] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 351.646366][ T9125] netlink: 'syz.5.513': attribute type 35 has an invalid length. [ 351.694404][ T9122] netlink: 342 bytes leftover after parsing attributes in process `syz.6.512'. [ 351.840817][ T9126] netlink: 342 bytes leftover after parsing attributes in process `syz.6.512'. [ 352.106667][ T9126] netlink: 342 bytes leftover after parsing attributes in process `syz.6.512'. [ 353.253154][ T9161] random: crng reseeded on system resumption [ 356.275184][ T9218] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 359.586632][ T9277] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 360.075167][ T9284] can: request_module (can-proto-0) failed. [ 360.189586][ T9290] can: request_module (can-proto-0) failed. [ 360.290454][ T9284] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 360.355898][ T9299] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 360.433583][ T9300] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 361.983651][ T9301] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 362.167360][ T9319] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 362.216425][ T9299] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 364.844142][ T9362] .SR: entered promiscuous mode [ 365.501796][ T9363] Invalid ELF header magic: != ELF [ 366.946418][ T9363] could not allocate digest TFM handle [ 366.970883][ T9362] could not allocate digest TFM handle [ 367.532200][ T9398] FAULT_INJECTION: forcing a failure. [ 367.532200][ T9398] name failslab, interval 1, probability 0, space 0, times 0 [ 367.585056][ T9403] can: request_module (can-proto-0) failed. [ 367.618662][ T9398] CPU: 1 UID: 0 PID: 9398 Comm: syz.4.551 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 367.618698][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.618711][ T9398] Call Trace: [ 367.618719][ T9398] [ 367.618727][ T9398] dump_stack_lvl+0x16c/0x1f0 [ 367.618771][ T9398] should_fail_ex+0x512/0x640 [ 367.618809][ T9398] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 367.618841][ T9398] should_failslab+0xc2/0x120 [ 367.618872][ T9398] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 367.618900][ T9398] ? __proc_create+0xc3/0x8c0 [ 367.618927][ T9398] ? __proc_create+0x2ce/0x8c0 [ 367.618959][ T9398] __proc_create+0x2ce/0x8c0 [ 367.618988][ T9398] ? __pfx___proc_create+0x10/0x10 [ 367.619021][ T9398] ? _raw_write_unlock+0x28/0x50 [ 367.619055][ T9398] ? proc_register+0x314/0x5f0 [ 367.619087][ T9398] proc_create_reg+0x7d/0x180 [ 367.619119][ T9398] proc_create_net_data+0x8e/0x1b0 [ 367.619149][ T9398] ? __pfx_proc_create_net_data+0x10/0x10 [ 367.619189][ T9398] sctp_proc_init+0x199/0x270 [ 367.619229][ T9398] ? __pfx_sctp_defaults_init+0x10/0x10 [ 367.619268][ T9398] sctp_defaults_init+0x74a/0xd80 [ 367.619308][ T9398] ? __pfx_sctp_defaults_init+0x10/0x10 [ 367.619348][ T9398] ops_init+0x1e2/0x5f0 [ 367.619385][ T9398] setup_net+0x21e/0x850 [ 367.619421][ T9398] ? __pfx_setup_net+0x10/0x10 [ 367.619452][ T9398] ? lockdep_init_map_type+0x5c/0x280 [ 367.619487][ T9398] ? __pfx_down_read_killable+0x10/0x10 [ 367.619515][ T9398] ? debug_mutex_init+0x37/0x70 [ 367.619542][ T9398] copy_net_ns+0x2a6/0x5f0 [ 367.619591][ T9398] create_new_namespaces+0x3ea/0xad0 [ 367.619628][ T9398] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 367.619660][ T9398] ksys_unshare+0x45b/0xa40 [ 367.619695][ T9398] ? __pfx_ksys_unshare+0x10/0x10 [ 367.619728][ T9398] ? xfd_validate_state+0x5d/0x180 [ 367.619752][ T9398] ? rcu_is_watching+0x12/0xc0 [ 367.619783][ T9398] __x64_sys_unshare+0x31/0x40 [ 367.619817][ T9398] do_syscall_64+0xcd/0x230 [ 367.619857][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.619882][ T9398] RIP: 0033:0x7fc0bf38e969 [ 367.619900][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.619923][ T9398] RSP: 002b:00007fc0c0127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 367.619946][ T9398] RAX: ffffffffffffffda RBX: 00007fc0bf5b5fa0 RCX: 00007fc0bf38e969 [ 367.619962][ T9398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 367.619976][ T9398] RBP: 00007fc0bf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 367.619990][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.620004][ T9398] R13: 0000000000000000 R14: 00007fc0bf5b5fa0 R15: 00007ffd7687fe68 [ 367.620034][ T9398] [ 368.423898][ T9410] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 370.005880][ T9432] netlink: 280 bytes leftover after parsing attributes in process `syz.5.557'. [ 370.893015][ T9442] netlink: 25 bytes leftover after parsing attributes in process `syz.4.560'. [ 371.355430][ T9432] FAULT_INJECTION: forcing a failure. [ 371.355430][ T9432] name failslab, interval 1, probability 0, space 0, times 0 [ 371.436461][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.5.557 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 371.436506][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.436525][ T9432] Call Trace: [ 371.436535][ T9432] [ 371.436547][ T9432] dump_stack_lvl+0x16c/0x1f0 [ 371.436601][ T9432] should_fail_ex+0x512/0x640 [ 371.436652][ T9432] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 371.436696][ T9432] should_failslab+0xc2/0x120 [ 371.436738][ T9432] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 371.436776][ T9432] ? d_instantiate+0x77/0x90 [ 371.436812][ T9432] ? alloc_empty_file+0x55/0x1e0 [ 371.436861][ T9432] alloc_empty_file+0x55/0x1e0 [ 371.436908][ T9432] alloc_file_pseudo+0x13a/0x230 [ 371.436984][ T9432] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 371.437029][ T9432] ? alloc_fd+0x471/0x7d0 [ 371.437088][ T9432] sock_alloc_file+0x50/0x210 [ 371.437136][ T9432] __sys_socket+0x1c0/0x260 [ 371.437168][ T9432] ? __pfx___sys_socket+0x10/0x10 [ 371.437200][ T9432] ? rcu_is_watching+0x12/0xc0 [ 371.437241][ T9432] __x64_sys_socket+0x72/0xb0 [ 371.437269][ T9432] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.437317][ T9432] do_syscall_64+0xcd/0x230 [ 371.437371][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.437404][ T9432] RIP: 0033:0x7f277a18e969 [ 371.437429][ T9432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.437460][ T9432] RSP: 002b:00007f277aff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 371.437491][ T9432] RAX: ffffffffffffffda RBX: 00007f277a3b5fa0 RCX: 00007f277a18e969 [ 371.437512][ T9432] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 371.437531][ T9432] RBP: 00007f277a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 371.437551][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.437570][ T9432] R13: 0000000000000000 R14: 00007f277a3b5fa0 R15: 00007ffc86f68008 [ 371.437613][ T9432] [ 372.031493][ T9451] can: request_module (can-proto-0) failed. [ 372.065058][ T9451] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 372.580501][ T9470] netlink: 342 bytes leftover after parsing attributes in process `syz.5.565'. [ 375.337244][ T9507] netlink: 342 bytes leftover after parsing attributes in process `syz.4.572'. [ 376.257239][ T9523] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 376.605618][ T9526] can: request_module (can-proto-0) failed. [ 376.877633][ T9534] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 377.020094][ T9538] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 377.394074][ T9538] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 377.538964][ T9536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.547338][ T9536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.633636][ T9536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 378.147305][ T9536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.237253][ T9536] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 378.363314][ T9552] binder: 9547:9552 ioctl 40046210 0 returned -14 [ 378.377500][ T9536] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 378.383710][ T9536] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 379.266605][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 379.586036][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 380.225989][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 380.385901][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 381.201956][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 381.384708][ T9591] netlink: 354 bytes leftover after parsing attributes in process `syz.0.583'. [ 381.665995][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 382.306073][ T5841] Bluetooth: hci1: command 0x0406 tx timeout                                                                                                                                                                                                                                         [ 420.350730][T10092] could not allocate digest TFM handle syzkaller syzkaller login: [ 420.477283][T10106] sd 0:0:1:0: PR command failed: 1026 [ 420.485003][T10087] could not allocate digest TFM handle " [ 420.493941][T10106] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 420.511259][T10106] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 421.739885][T10122] Invalid ELF header magic: != ELF [ 422.350090][T10130] program syz.5.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.388110][T10148] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 423.540592][T10144] netlink: 338 bytes leftover after parsing attributes in process `syz.0.688'. [ 423.631642][T10142] netlink: 338 bytes leftover after parsing attributes in process `syz.0.688'. [ 423.688757][T10142] netlink: 290 bytes leftover after parsing attributes in process `syz.0.688'. [ 423.700327][T10142] veth0_macvtap: left promiscuous mode [ 424.271981][T10155] Process accounting resumed [ 425.558225][T10191] netlink: 'syz.0.698': attribute type 11 has an invalid length. [ 425.569583][T10191] netlink: 'syz.0.698': attribute type 11 has an invalid length. [ 426.229956][T10194] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 426.256046][T10194] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 426.268530][T10194] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 426.375831][T10194] raw: ffff888078006000 ffff88802b3b8e00 00000001ffffffff 0000000000000000 [ 426.384507][T10194] page dumped because: unmovable page [ 426.446134][T10194] page_owner tracks the page as allocated [ 426.452033][T10194] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 10010, tgid 10009 (syz.4.658), ts 412848242612, free_ts 410356470816 [ 426.478441][T10194] post_alloc_hook+0x181/0x1b0 [ 426.484037][T10194] get_page_from_freelist+0x135c/0x3920 [ 426.500174][T10194] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 426.554840][T10194] alloc_pages_mpol+0x1fb/0x550 [ 426.560441][T10194] alloc_pages_noprof+0x131/0x390 [ 426.565700][T10194] relay_open_buf.part.0+0x262/0xb90 [ 426.580664][T10194] relay_open+0x653/0xad0 [ 426.783842][T10189] could not allocate digest TFM handle binfmt_misc [ 426.839618][T10194] do_blk_trace_setup+0x503/0xb50 [ 426.868414][T10194] blk_trace_setup+0xed/0x1b0 [ 426.898843][T10194] blk_trace_ioctl+0x146/0x280 [ 427.080608][T10194] blkdev_ioctl+0x108/0x6d0 [ 427.085314][T10194] __x64_sys_ioctl+0x190/0x200 [ 427.090747][T10194] do_syscall_64+0xcd/0x230 [ 427.115906][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.139450][T10194] page last free pid 5816 tgid 5816 stack trace: [ 427.203730][T10194] __free_frozen_pages+0x69d/0xff0 [ 427.211619][T10194] vfree+0x176/0x960 [ 427.237642][T10194] delayed_vfree_work+0x56/0x70 [ 427.242563][T10194] process_one_work+0x9cf/0x1b70 [ 427.287477][T10194] worker_thread+0x6c8/0xf10 [ 427.292146][T10194] kthread+0x3c2/0x780 [ 427.340892][T10194] ret_from_fork+0x48/0x80 [ 427.345368][T10194] ret_from_fork_asm+0x1a/0x30 [ 428.200123][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 428.235491][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 428.272105][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 428.351599][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 428.438794][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 428.483029][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 428.590036][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 428.611488][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 428.680963][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 428.711924][T10222] can: request_module (can-proto-0) failed. [ 428.765899][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 428.796722][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 428.826110][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 428.858570][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 428.892625][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 428.956573][T10216] netlink: 'syz.5.701': attribute type 27 has an invalid length. [ 429.031031][T10216] netlink: 334 bytes leftover after parsing attributes in process `syz.5.701'. [ 429.186208][T10229] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 429.379948][T10238] nbd: must specify at least one socket [ 430.541291][T10256] Invalid ELF header magic: != ELF [ 430.604767][T10261] netlink: 334 bytes leftover after parsing attributes in process `syz.0.712'. [ 430.993189][T10270] FAULT_INJECTION: forcing a failure. [ 430.993189][T10270] name failslab, interval 1, probability 0, space 0, times 0 [ 431.072782][T10270] CPU: 0 UID: 0 PID: 10270 Comm: syz.0.713 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 431.072818][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.072841][T10270] Call Trace: [ 431.072849][T10270] [ 431.072858][T10270] dump_stack_lvl+0x16c/0x1f0 [ 431.072900][T10270] should_fail_ex+0x512/0x640 [ 431.072937][T10270] ? __kmalloc_noprof+0xbf/0x510 [ 431.072968][T10270] ? xfrm_hash_alloc+0xd1/0x100 [ 431.073005][T10270] should_failslab+0xc2/0x120 [ 431.073036][T10270] __kmalloc_noprof+0xd2/0x510 [ 431.073062][T10270] ? proc_create_reg+0xe3/0x180 [ 431.073096][T10270] ? __pfx_xfrm_net_init+0x10/0x10 [ 431.073119][T10270] xfrm_hash_alloc+0xd1/0x100 [ 431.073157][T10270] xfrm_state_init+0xdd/0x630 [ 431.073199][T10270] ? __pfx_xfrm_net_init+0x10/0x10 [ 431.073221][T10270] xfrm_net_init+0x210/0xcc0 [ 431.073249][T10270] ? __pfx_xfrm_net_init+0x10/0x10 [ 431.073271][T10270] ops_init+0x1e2/0x5f0 [ 431.073307][T10270] setup_net+0x21e/0x850 [ 431.073343][T10270] ? __pfx_setup_net+0x10/0x10 [ 431.073374][T10270] ? lockdep_init_map_type+0x5c/0x280 [ 431.073408][T10270] ? __pfx_down_read_killable+0x10/0x10 [ 431.073437][T10270] ? debug_mutex_init+0x37/0x70 [ 431.073463][T10270] copy_net_ns+0x2a6/0x5f0 [ 431.073502][T10270] create_new_namespaces+0x3ea/0xad0 [ 431.073537][T10270] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 431.073569][T10270] ksys_unshare+0x45b/0xa40 [ 431.073604][T10270] ? __pfx_ksys_unshare+0x10/0x10 [ 431.073637][T10270] ? xfd_validate_state+0x5d/0x180 [ 431.073662][T10270] ? rcu_is_watching+0x12/0xc0 [ 431.073692][T10270] __x64_sys_unshare+0x31/0x40 [ 431.073726][T10270] do_syscall_64+0xcd/0x230 [ 431.073767][T10270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.073792][T10270] RIP: 0033:0x7f358258e969 [ 431.073811][T10270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.073844][T10270] RSP: 002b:00007f35833dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 431.073867][T10270] RAX: ffffffffffffffda RBX: 00007f35827b6080 RCX: 00007f358258e969 [ 431.073883][T10270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 431.073897][T10270] RBP: 00007f3582610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 431.073912][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.073926][T10270] R13: 0000000000000000 R14: 00007f35827b6080 R15: 00007ffd0808f588 [ 431.073956][T10270] [ 431.321251][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.078113][T10293] can: request_module (can-proto-0) failed. [ 433.423726][T10293] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input36 [ 436.021380][T10335] ima: policy update failed [ 436.500196][ T30] audit: type=1802 audit(6043066698.540:10): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.725" res=0 errno=0 [ 436.632080][T10338] Process accounting resumed [ 436.935590][T10346] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 437.549863][T10354] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 438.859556][T10365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'. [ 438.946154][T10365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.066000][T10365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.697681][T10367] [ 439.700065][T10367] ====================================================== [ 439.707121][T10367] WARNING: possible circular locking dependency detected [ 439.714163][T10367] 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 Not tainted [ 439.721297][T10367] ------------------------------------------------------ [ 439.728428][T10367] syz.5.731/10367 is trying to acquire lock: [ 439.734431][T10367] ffff888144321958 (&q->elevator_lock){+.+.}-{4:4}, at: elv_iosched_store+0x201/0x5f0 [ 439.744083][T10367] [ 439.744083][T10367] but task is already holding lock: [ 439.751576][T10367] ffff888144321428 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 439.762901][T10367] [ 439.762901][T10367] which lock already depends on the new lock. [ 439.762901][T10367] [ 439.773329][T10367] [ 439.773329][T10367] the existing dependency chain (in reverse order) is: [ 439.782444][T10367] [ 439.782444][T10367] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 439.791257][T10367] blk_alloc_queue+0x619/0x760 [ 439.796570][T10367] blk_mq_alloc_queue+0x179/0x290 [ 439.802154][T10367] __blk_mq_alloc_disk+0x29/0x120 [ 439.808173][T10367] nbd_dev_add+0x49d/0xbb0 [ 439.813153][T10367] nbd_init+0x181/0x320 [ 439.817957][T10367] do_one_initcall+0x120/0x6e0 [ 439.823352][T10367] kernel_init_freeable+0x5c2/0x900 [ 439.829188][T10367] kernel_init+0x1c/0x2b0 [ 439.834051][T10367] ret_from_fork+0x48/0x80 [ 439.838997][T10367] ret_from_fork_asm+0x1a/0x30 [ 439.844340][T10367] [ 439.844340][T10367] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 439.851669][T10367] fs_reclaim_acquire+0x102/0x150 [ 439.857267][T10367] kmem_cache_alloc_noprof+0x53/0x3b0 [ 439.863190][T10367] __kernfs_new_node+0xd2/0x8a0 [ 439.868583][T10367] kernfs_new_node+0x13c/0x1e0 [ 439.873884][T10367] kernfs_create_dir_ns+0x4c/0x1a0 [ 439.879535][T10367] sysfs_create_dir_ns+0x13a/0x2b0 [ 439.885295][T10367] kobject_add_internal+0x2c4/0x9b0 [ 439.891034][T10367] kobject_add+0x16e/0x240 [ 439.896127][T10367] elv_register_queue+0xd3/0x2a0 [ 439.901655][T10367] blk_register_queue+0x3c4/0x560 [ 439.907305][T10367] add_disk_fwnode+0x911/0x13a0 [ 439.912704][T10367] nbd_dev_add+0x78e/0xbb0 [ 439.917674][T10367] nbd_init+0x181/0x320 [ 439.922370][T10367] do_one_initcall+0x120/0x6e0 [ 439.927961][T10367] kernel_init_freeable+0x5c2/0x900 [ 439.933707][T10367] kernel_init+0x1c/0x2b0 [ 439.938571][T10367] ret_from_fork+0x48/0x80 [ 439.943518][T10367] ret_from_fork_asm+0x1a/0x30 [ 439.948843][T10367] [ 439.948843][T10367] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 439.956702][T10367] __lock_acquire+0x1173/0x1ba0 [ 439.962095][T10367] lock_acquire+0x179/0x350 [ 439.967144][T10367] __mutex_lock+0x199/0xb90 [ 439.972279][T10367] elv_iosched_store+0x201/0x5f0 [ 439.977758][T10367] queue_attr_store+0x273/0x310 [ 439.983145][T10367] sysfs_kf_write+0xef/0x150 [ 439.988279][T10367] kernfs_fop_write_iter+0x351/0x510 [ 439.994232][T10367] iter_file_splice_write+0x91f/0x1150 [ 440.000325][T10367] direct_splice_actor+0x18f/0x6c0 [ 440.005984][T10367] splice_direct_to_actor+0x342/0xa30 [ 440.011899][T10367] do_splice_direct+0x174/0x240 [ 440.017292][T10367] do_sendfile+0xafd/0xe50 [ 440.022238][T10367] __x64_sys_sendfile64+0x1d8/0x220 [ 440.027975][T10367] do_syscall_64+0xcd/0x230 [ 440.033023][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.039453][T10367] [ 440.039453][T10367] other info that might help us debug this: [ 440.039453][T10367] [ 440.049688][T10367] Chain exists of: [ 440.049688][T10367] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 440.049688][T10367] [ 440.063462][T10367] Possible unsafe locking scenario: [ 440.063462][T10367] [ 440.070915][T10367] CPU0 CPU1 [ 440.076320][T10367] ---- ---- [ 440.081696][T10367] lock(&q->q_usage_counter(io)#55); [ 440.087152][T10367] lock(fs_reclaim); [ 440.093678][T10367] lock(&q->q_usage_counter(io)#55); [ 440.101610][T10367] lock(&q->elevator_lock); [ 440.106357][T10367] [ 440.106357][T10367] *** DEADLOCK *** [ 440.106357][T10367] [ 440.114533][T10367] 5 locks held by syz.5.731/10367: [ 440.119654][T10367] #0: ffff8880334ee420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 440.129756][T10367] #1: ffff8880323c5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 440.139654][T10367] #2: ffff888143f78698 (kn->active#178){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 440.149830][T10367] #3: ffff888144321428 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 440.161566][T10367] #4: ffff888144321460 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 440.173561][T10367] [ 440.173561][T10367] stack backtrace: [ 440.179479][T10367] CPU: 1 UID: 7 PID: 10367 Comm: syz.5.731 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 440.179516][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.179533][T10367] Call Trace: [ 440.179543][T10367] [ 440.179554][T10367] dump_stack_lvl+0x116/0x1f0 [ 440.179597][T10367] print_circular_bug+0x275/0x350 [ 440.179634][T10367] check_noncircular+0x14c/0x170 [ 440.179671][T10367] __lock_acquire+0x1173/0x1ba0 [ 440.179714][T10367] lock_acquire+0x179/0x350 [ 440.179748][T10367] ? elv_iosched_store+0x201/0x5f0 [ 440.179786][T10367] ? __pfx___might_resched+0x10/0x10 [ 440.179821][T10367] ? do_raw_spin_lock+0x12c/0x2b0 [ 440.179865][T10367] __mutex_lock+0x199/0xb90 [ 440.179905][T10367] ? elv_iosched_store+0x201/0x5f0 [ 440.179942][T10367] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 440.179979][T10367] ? elv_iosched_store+0x201/0x5f0 [ 440.180013][T10367] ? lockdep_hardirqs_on+0x7c/0x110 [ 440.180053][T10367] ? __pfx___mutex_lock+0x10/0x10 [ 440.180101][T10367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 440.180139][T10367] ? elv_iosched_store+0x201/0x5f0 [ 440.180174][T10367] elv_iosched_store+0x201/0x5f0 [ 440.180208][T10367] ? __x64_sys_sendfile64+0x1d8/0x220 [ 440.180242][T10367] ? __pfx_elv_iosched_store+0x10/0x10 [ 440.180281][T10367] ? __mutex_trylock_common+0xe9/0x250 [ 440.180318][T10367] ? __pfx_elv_iosched_store+0x10/0x10 [ 440.180360][T10367] queue_attr_store+0x273/0x310 [ 440.180387][T10367] ? __pfx_queue_attr_store+0x10/0x10 [ 440.180420][T10367] ? find_held_lock+0x2b/0x80 [ 440.180446][T10367] ? sysfs_file_kobj+0xe4/0x290 [ 440.180486][T10367] ? __pfx_queue_attr_store+0x10/0x10 [ 440.180512][T10367] sysfs_kf_write+0xef/0x150 [ 440.180552][T10367] kernfs_fop_write_iter+0x351/0x510 [ 440.180587][T10367] ? __pfx_sysfs_kf_write+0x10/0x10 [ 440.180628][T10367] iter_file_splice_write+0x91f/0x1150 [ 440.180682][T10367] ? __pfx_iter_file_splice_write+0x10/0x10 [ 440.180728][T10367] ? __pfx_copy_splice_read+0x10/0x10 [ 440.180777][T10367] ? __pfx_iter_file_splice_write+0x10/0x10 [ 440.180822][T10367] direct_splice_actor+0x18f/0x6c0 [ 440.180865][T10367] splice_direct_to_actor+0x342/0xa30 [ 440.180908][T10367] ? __pfx_direct_splice_actor+0x10/0x10 [ 440.180953][T10367] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 440.181000][T10367] do_splice_direct+0x174/0x240 [ 440.181042][T10367] ? __pfx_do_splice_direct+0x10/0x10 [ 440.181083][T10367] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 440.181127][T10367] ? rw_verify_area+0xcf/0x680 [ 440.181170][T10367] do_sendfile+0xafd/0xe50 [ 440.181196][T10367] ? __pfx_do_sendfile+0x10/0x10 [ 440.181223][T10367] ? __x64_sys_futex+0x1e0/0x4c0 [ 440.181253][T10367] ? __x64_sys_futex+0x1e9/0x4c0 [ 440.181285][T10367] __x64_sys_sendfile64+0x1d8/0x220 [ 440.181318][T10367] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 440.181357][T10367] ? rcu_is_watching+0x12/0xc0 [ 440.181387][T10367] do_syscall_64+0xcd/0x230 [ 440.181430][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.181458][T10367] RIP: 0033:0x7f277a18e969 [ 440.181478][T10367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.181505][T10367] RSP: 002b:00007f277aff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 440.181530][T10367] RAX: ffffffffffffffda RBX: 00007f277a3b5fa0 RCX: 00007f277a18e969 [ 440.181548][T10367] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 440.181564][T10367] RBP: 00007f277a210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 440.181580][T10367] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 440.181596][T10367] R13: 0000000000000000 R14: 00007f277a3b5fa0 R15: 00007ffc86f68008 [ 440.181621][T10367] [ 440.992536][T10365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.002594][T10365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.189356][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.195694][ T1299] ieee802154 phy1 wpan1: encryption failed: -22