last executing test programs: 3m7.310066061s ago: executing program 1 (id=897): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x2, 0x0) write$auto_event_inject_fops_trace(r1, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048801) r2 = fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xccb, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2, 0x800, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c]}, 0xfffff7fffffffffa, 0x81) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_BLKPBSZGET(r2, 0x127b, 0x0) io_setup$auto(0xffff, &(0x7f0000000580)) 3m5.014962784s ago: executing program 1 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) 3m4.401708334s ago: executing program 1 (id=907): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300f51c230ca8d57a148353e98649c41bf6760b7a44722d45d95d1e6ce26828263b6cd180728dad0000bb8cf47a75d02b9deb7397d42716d660f3ea89bb42d7cb2ac26cae3b4d600247614007f59bc5d7c0796f9a8f6a60f7a0327fc2d82c75f49d8167439693ea98bba91ccd0f7906f84a3af16d2e1960f436e12cecfe584f075060de40ee777ee79d19b7"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x9000000, 0x9}, 0x7}, 0x3, 0x0) 3m3.878736972s ago: executing program 1 (id=909): r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x141442, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x80, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f0000000040)={@raw=0x9, "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"}) sendmmsg$auto(r0, &(0x7f0000001240)={{&(0x7f0000001040)="c316adef2f2f8ea47aa58c9f26b333836e214c04e71d0e78f3", 0x81, &(0x7f0000001180)={&(0x7f0000001080)="d8dc2824eba004c9fcd5755f4a1ccc1390effd75e199b7b7b5e38ebe2ca32959faff787249ce314276e89c6727ec4aa8efd0e4bbbea0aa239f5263b5d975fdab8c922bda9e45b0d8aa907a4fcd3a96b383e1e457c14208aa2497cd676c5f73c32602f17bbdc1ae28bef443c01859b9a0555a4d5e91baa140991c1ec69c8727c7cfedef756be11a9e55a6ba8a3ce1871e665f768e0741bbcce55f57ed190cb60646f83ebbd9bf27ab63602bdf6290926234a1ccdbce775d7ec4a9c23dbb382255f665ba7f7716c7494216420e5221df35f50b0b91ef7e404d91a6d5b92ff58f4826cfd9e6fcae40353aa91d1d05", 0x7}, 0x1, &(0x7f00000011c0)="12b1d3b4702af7f84e28709eaa8a96dbe2f88c1013d44348675aebeeaebd23089cabb6b0f2f84fb8b3c8c9d32ced27be9929a90c9a7bc752e946f5ccc895d6df53ab222333c61001a1c18183ed38f51d6671", 0x4, 0x1c}, 0x1}, 0xa8, 0x0) 3m3.657611289s ago: executing program 1 (id=910): pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x4000fdef, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40) close_range$auto(0x2, 0x8, 0x0) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x15, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) bind$auto(0x3, 0x0, 0x68) prctl$auto(0x184fbd30, 0x2, 0x0, 0x4, 0x1) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x3ff, 0x32, 0x0, 0x3ff) getsockopt$auto_SO_PEERCRED(r3, 0x8, 0x11, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', &(0x7f0000000080)=0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x24ea, 0x10000000009b72, 0x2, 0x1) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0xff, 0x4001, 0x0, 0x5) fdatasync$auto(r0) sendfile$auto(r0, 0x3, 0x0, 0x8) 3m3.324277242s ago: executing program 1 (id=914): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x22, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) ioctl$auto_FIONREAD(r2, 0x541b, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) unshare$auto(0x40000080) getrandom$auto(0x0, 0x6000000, 0x3) 2m48.119590726s ago: executing program 32 (id=914): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x22, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) ioctl$auto_FIONREAD(r2, 0x541b, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) unshare$auto(0x40000080) getrandom$auto(0x0, 0x6000000, 0x3) 2m33.665788886s ago: executing program 3 (id=1029): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x4c2801, 0x0) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x2881, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x3, 0x20006, 0x200000000000105}) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) pipe$auto(&(0x7f00000000c0)=r0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, [0x0, 0x0, 0x0, 0x241efbdf, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xb4, 0x200000000000000, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x9, 0x20000000, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x7, 0x91, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe, 0xe6e, 0x800]}, 0x7, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003000)=ANY=[@ANYBLOB="dc240000", @ANYRES16=r3, @ANYBLOB="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"], 0x24dc}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x23, 0x80805, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f00000000c0), 0x0) r4 = prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x4d69, 0xffffffffffffffff, 0x8, 0x2) close_range$auto(r4, r4, 0x2) 2m32.641517327s ago: executing program 3 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) 2m32.19371573s ago: executing program 3 (id=1032): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/open_files\x00', 0x200, 0x0) lseek$auto(r0, 0x8000000000000003, 0x1) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0xc020660b, 0xfffffffffffff4e0) r1 = gettid() select$auto(0x6, 0x0, 0x0, 0x0, 0x0) kill$auto(r1, 0x7) 2m31.937065866s ago: executing program 3 (id=1034): socket(0x25, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x29, 0x20, 0x0, 0x1f) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="af52b4d17000ffdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r4) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) ioctl$auto(0x3, 0x50434902, 0x38) mmap$auto(0x0, 0x8e, 0x8, 0x8000000008011, 0x3, 0xfffffffffffff21d) write$auto(r3, &(0x7f00000002c0)='\x04>\x00\x02\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\x1e\xfa\x00F\x89#\xb4\xf0F\xa1Gd\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xca\x12/\x81\xe5\x15\x04@\x81\xc5\xee\xdb\xcbA\x9e\x11\xb1L\x01\xfe&/\x86\xa5\x94\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c|yt\xc8\xf0\xb8\x0eZh\xcec\xfbsot\x02fK\xaa\xc9-\xaa\xb28\x7fB\xec\xa9m\xe2\xea\xef*Vz\xb3\xdb\x00\x00\x00\x00\x00\x00\x00', 0x10) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x80000, 0x9, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) 2m31.000906055s ago: executing program 3 (id=1037): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x10) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7, 0x8000) socket(0x2, 0x3, 0x100) sendto$auto(0x3, 0x0, 0xfdef, 0xf950, &(0x7f0000000140), 0x1d) mremap$auto(0x49, 0x400, 0x3, 0x2, 0x1) flistxattr$auto(r0, &(0x7f0000000180)='{}\'\x00', 0x9) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sysfs$auto(0x2, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000140)={0x44, 0x0, 0x7, 0x44, 0xee, 0x7f, 0x5, 0x10001, 0xfffffb4a, 0x10000, 0x0, 0x2, [{0x4, 0x3ff, 0x8000}, {0x4, 0x1}, {0xfffffffb, 0xf4b9, 0x9}, {0x5, 0x401, 0x4}]}) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8800, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) pread64$auto(r1, &(0x7f0000000080)='-]-]+$.&}\x00', 0x1, 0x8000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x14, 0x0, 0x0) 2m30.773547093s ago: executing program 3 (id=1040): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_SERVER_PROTO_VERSION={0xc, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004494) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68001000", @ANYRES16, @ANYBLOB="000226bd7000fedbdf2503000000060006008100000008000200", @ANYRES32=0x0, @ANYBLOB="060006000e0000000a00050000000000000000000a00010000000000000000000a000500aaaaaaaaaa3d0000080003002e00000008000200", @ANYRES32=r0, @ANYBLOB="08000300f6aa0000", @ANYBLOB="e71f1075b871270ec81a8ec5aa0ab95c76f54dd7f86a494ad9b08395d1904cd3b14e5866f523df8dbf4fac378d04b30c1caaa6c396cf48ab6ece12248248c4153d65c91c848f4cba129acc6b8a4b80dcd4f2dce3d0cde6d0f905acc5295779e5e09604a558ed520196e5dff5a0d7f0693707578170e370beedbd228c78b73e8014de082c305c939b5c21073f85a6f73e6ad6ccc52e551363bc2cf458b350dae17f0a7d0c57ac98f4caea67bfcf0d6364d98dababed31bde9ad2413dfaeebc9dce88cf6ca2346d17086ceb2313a9a91dbb3a2e15f5a0e827d56ec60258e7a6f48305d4c12a217071c0386e2aed43d8dc0a33645c90a95a3", @ANYRESOCT=r1, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m15.651746826s ago: executing program 33 (id=1040): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_SERVER_PROTO_VERSION={0xc, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004494) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68001000", @ANYRES16, @ANYBLOB="000226bd7000fedbdf2503000000060006008100000008000200", @ANYRES32=0x0, @ANYBLOB="060006000e0000000a00050000000000000000000a00010000000000000000000a000500aaaaaaaaaa3d0000080003002e00000008000200", @ANYRES32=r0, @ANYBLOB="08000300f6aa0000", @ANYBLOB="e71f1075b871270ec81a8ec5aa0ab95c76f54dd7f86a494ad9b08395d1904cd3b14e5866f523df8dbf4fac378d04b30c1caaa6c396cf48ab6ece12248248c4153d65c91c848f4cba129acc6b8a4b80dcd4f2dce3d0cde6d0f905acc5295779e5e09604a558ed520196e5dff5a0d7f0693707578170e370beedbd228c78b73e8014de082c305c939b5c21073f85a6f73e6ad6ccc52e551363bc2cf458b350dae17f0a7d0c57ac98f4caea67bfcf0d6364d98dababed31bde9ad2413dfaeebc9dce88cf6ca2346d17086ceb2313a9a91dbb3a2e15f5a0e827d56ec60258e7a6f48305d4c12a217071c0386e2aed43d8dc0a33645c90a95a3", @ANYRESOCT=r1, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m9.682212418s ago: executing program 2 (id=1149): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)='\t', 0x1) socket(0x25, 0x1, 0x3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x64, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000c1", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x8}, 0xed7138c}, 0x9a6, 0xe000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0xb, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) lstat$auto(&(0x7f0000000180)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7fff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f6f0365a", @ANYRES16=r4, @ANYBLOB="000325bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f00000000c0)={{0x4, 0xee01, 0xee00, 0x400, 0x9, 0x5, 0x9}, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x1, 0x7fffffff, 0x4, 0x3, 0x10, 0x2, 0x0, 0xfffb, 0xd68, @raw=0x5, @inferred=0xffffffffffffffff}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) setreuid$auto(0x1, 0x3) setsockopt$auto_SO_TXTIME(r3, 0xd, 0x3d, &(0x7f0000000680)='!\x00', 0xf136) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r6 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r6, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x10, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[], 0x3f0}, 0x1, 0x0, 0x0, 0x880}, 0x4) 2m9.383692033s ago: executing program 2 (id=1151): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2m9.126018511s ago: executing program 2 (id=1152): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000001c0), r0) sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8881}, 0x20008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00'}) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/devspec\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000002c00)=""/181, 0xb5) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0xfdef) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), r3) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x98, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'vxcan1\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6d6080e7753a195cea5f15cc0ea80848"}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x7}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "1468e6b274110ec5f95585039456ce967fbd1d60c99bfbc7fb4594"}]}, 0x98}, 0x1, 0x0, 0x0, 0x8880}, 0xc000) r7 = semctl$auto_GETPID(0x0, 0xffffff55, 0xb, 0x4) fcntl$auto(0xffffffffffffffff, 0x800, r7) link$auto(0x0, &(0x7f00000001c0)='./file0\x00') 2m8.056693526s ago: executing program 2 (id=1153): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x10000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m7.771277403s ago: executing program 2 (id=1156): socket(0x18, 0x2, 0x0) r0 = openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x800, 0x0) read$auto_ecryptfs_dir_fops_ecryptfs_kernel(r0, &(0x7f0000000280)=""/54, 0x36) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/pcm0c/sub4/hw_params\x00', 0x1410c0, 0x0) pread64$auto(r1, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000003, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) ioctl$auto_RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x7fffffff, 0x7, 0x2, 0x7f, 0x4, 0xf, 0x18000, 0x73ea, 0x7f}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x84) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_prog_fd=r3}, 0xa3) 2m6.742707442s ago: executing program 2 (id=1162): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x167) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) socket(0x9, 0x6, 0x5) kexec_load$auto(0x6, 0x40000000000002, 0x0, 0x1) kexec_load$auto(0x4, 0xcd, &(0x7f0000000080)={@buf=&(0x7f0000000000)="25ea0fe9c4abd1ea75f9dc9e8cb7a87329dc02e0e1d325299fffd91ad78134abb75f5a5263b207751ec1f5b837e888", 0x4, 0x9, 0x5d5}, 0x3) 1m51.624149472s ago: executing program 34 (id=1162): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x167) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) socket(0x9, 0x6, 0x5) kexec_load$auto(0x6, 0x40000000000002, 0x0, 0x1) kexec_load$auto(0x4, 0xcd, &(0x7f0000000080)={@buf=&(0x7f0000000000)="25ea0fe9c4abd1ea75f9dc9e8cb7a87329dc02e0e1d325299fffd91ad78134abb75f5a5263b207751ec1f5b837e888", 0x4, 0x9, 0x5d5}, 0x3) 8.983256295s ago: executing program 4 (id=1607): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r0, 0x0, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) 8.095428556s ago: executing program 6 (id=1609): openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) stat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x3, 0x9, 0x8, 0x253badca, 0xee01, 0x0, 0x0, 0x10000, 0x709f, 0x68, 0x77e, 0x9, 0x80, 0x0, 0x4, 0x4, 0x64918bbd}) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x8, 0xff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1000, 0xfffffffffffffff5, 0x748, 0x0, 0x3, 0x8}, 0xfffffffc) r1 = setfsuid$auto(0xee00) setresuid$auto(r1, 0x0, r1) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) lchown$auto(0x0, r1, 0x0) semctl$auto_IPC_INFO(0x5738, 0xd8, 0x3, 0x6) setreuid$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000197c0)=ANY=[], 0x18e68}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$auto(r0, &(0x7f0000000140)='/dev/audio1\x00\xe4\x1b\xa5\x91\x11B\x9f\v\x11~\x95\x1b$%g\xcd\xdb\x05\xf6\xa4a7|\xf5\xfb[8\xd99\xa4\x90Q1(*ZY\x00\"\xb1w@\x05\xc41\x02I\a\x1b\f\xe2\x86=)d\x80y\x9c\x9aD\x1d\xe8\x04\f\xb9Z\xbc\xbb[\xc5\x10\xa6;\xc4\xb2\xd2\x80R\x99\xde\xc0Y\xbb\'\xc2VR\xa8C\xd9\xcb\x1e\xa6\xdf\x03\x16\x95\xd8\x19p\x8f\x1aU\xab\xa0\xb57\xd7\xed-\xa1<\xfaO\xf5\xceZ\xe7\xe2\b\x7f\x9c\"O\xf1\xa8V\xb5l\'\xc2k \xd5\xe7#\x9cH\xd0\xc4X\xfe\xf1\xeb\xc3s\xdd\xb24\xb8$R\xe7\x81\xc6m\xdd\xfdq\xd6f\r\r,\x8c\x98b\x8e\xc8\xb5B\xd5', 0x20000000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/udp6\x00', 0x68000, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, 0x0, 0x454002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x4000) 7.912553978s ago: executing program 6 (id=1610): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) unshare$auto(0x40000080) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r0, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) r3 = socket(0x18, 0x1, 0x5) io_uring_setup$auto(0x3, 0x0) r4 = getsockopt$auto(r3, 0x0, 0x33, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) uname$auto(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto(r5, 0x0, 0x3) r6 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/ap_power_level\x00', 0x802, 0x0) r7 = prctl$auto_PR_SME_SET_VL(0x3f, 0x9, 0x0, 0x5, 0x8b00) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='^H', @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048041) write$auto(r6, 0x0, 0x30) clock_gettime$auto(0x80000000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x6c000, 0x63) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) acct$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d@\x85\x059\xb0\x15kD\x8b\n\xd8$\x9c\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x027B3/\x82\xda\x8c\xa5\xa9T\xden\xb5\xc2\x05\xad\x9c\xda\n.S\xcb\x10\x9d\xbc\x9a>\xd0\xb9\xae\x85\t\xc2\xd1\x16M\xef\x90\xcc\x19%s\x93\xa2\x9a\x06\x95\xe3\xa8C\xea\x9e\x0e\x82`\xe4\x0eZ\xac\xab_\xbd\xf3\x12\x1a\x9f\xeb{\xe3\x9d\xb6\x83H\x04\x1a\x7f\xc2\x178\xd1%\'\xd8D\xf9\xc9\xfe\x89\xa6\xdbR\xe3y\x9e\xe8:\xd8\x91\xe67t') read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)=""/152, 0xffffffffffffffb4) 7.081232255s ago: executing program 6 (id=1613): mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0), 0x55) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0x10000009b71, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) mmap$auto(0x0, 0x40009, 0xdf, 0x17, 0x7, 0x28000) socket(0x21, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x200800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) mmap$auto(0x0, 0x5, 0xdf, 0x800000eb2, 0xffffffffffffffff, 0x8003) 6.557129115s ago: executing program 0 (id=1615): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = fcntl$auto_F_OFD_GETLK(r1, 0x24, 0xffffffffffffffff) close_range$auto(r3, r2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa, @old_map_fd=r4}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x6, 0x38, 0xffffffffffffffff, @relative_id=0x1e8, 0x2}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0x10c) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) 6.129076727s ago: executing program 0 (id=1616): socket(0x10, 0xa, 0x3) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x3, 0x300) shmctl$auto_SHM_UNLOCK(0x5, 0xc, 0x0) ioctl$auto(0xffffffffffffffff, 0xc074510c, 0x3) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty25\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) sysfs$auto(0x4, 0x4, 0x8000) read$auto(r0, 0x0, 0x20) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda25684", 0xffff, 0x26, 0x2, 0x9b4, 0x9, "ce25aff8d593000000000000223ffe", '\x00', "0400e6ad", "2ff43123", ["f5404de9641f8bf1bad22a9f", "a1679d340ad98fad2453f86d", "b06f8ca10c66eebcbd6f17c8", "5fe10eedab2c4b353c392a92"]}) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) mmap$auto(0x0, 0xc, 0xfff, 0x44eb2, 0x10006, 0x300000000000) unshare$auto(0x40000080) 5.649039589s ago: executing program 4 (id=1617): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0xa, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2a280, 0xb5d1af1605322d7a) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x100fe, 'w\x00\x00\x00\x00\x00\x00\x00'}, 0x2) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) io_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x26) socket(0x10, 0x3, 0xb) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r1, 0x80044dff, &(0x7f00000001c0)) mmap$auto(0xfffffffffffffffd, 0x202000c, 0x10000003, 0x18, 0xffffffffffffffff, 0x7ffd) personality$auto(0xfffffffc) write$auto(0x4, 0x0, 0x100082) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x9, 0x1000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x640802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x2d) sched_rr_get_interval$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x400008, 0xb, 0x10009b72, 0x2, 0x8002) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x22a00, 0x0) 5.476478908s ago: executing program 6 (id=1619): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="d97abb37adc68c2985e6749edb93c1a6d24aa131ed2eebbf77904b8f45aa2b4cb4bafccaaf0b7674b6f41f36bad307ab592aad1049ae1b15a1c869808bbf77e8e89536a9337507996c0cd1b1f99a8a7c8f733920fa30a3e14a598837bf6cd129478153098d88731b06883beec773bfc0724274f9c003df8a19eed80c14617c0ef6ac458a8dc6f1537293822428f23b5af018a38b538874f9e9c223ef2c672d90af4a1f8df62e5481394d2f4ce77ff0de4ff1075b10", @ANYBLOB="036c25bd7020fddbdf2500006a00080017000200000004001d5bf4c9df56d70d42c8a183bc016c37fff62a1249ab94e705"], 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x60040840) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c090000000000000096f1be78", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf257700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop6\x00', 0x480, 0x0) fdatasync$auto(r5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) statx$auto(0x8, 0x0, 0x1000, 0xfffffffb, 0x0) write$auto(0x1, 0x0, 0x80000000) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(r5, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r7 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, r4, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r7, 0x0, 0x400c0c1) mmap$auto(0x0, 0x400005, 0xe3, 0x9b72, r7, 0x7) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) sysfs$auto(0x1, 0x2, 0xf3) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000340)={r6, &(0x7f00000001c0)="4eb83e94b252989f41f18d2b3b499bb3f6bbf7c5e9fc15036cf65c93909d01c2f19dde857af4036acb2c910beb4d0d0b9803bec9d2f5ee077a501bbe24c56f782c4172d8a89d3303ded0b43ce09b4900827bca962817d8122f434f9127da2ad1fe177e890081f019b2ec473b902d829bdadde37c744787ac6f0009d53d0d65af35c21c9bf36a93393507c83140d0efc41051af812212fd197e792bedbec51ed9d4a1d9beca26e73dcdcdd1c2d7707e73f343b135c0d3e539e8ff12fce6bfcd18af1c92e43881cbd3b35648ed5e48bc57e17bc0aa18f77f871784445d97499f5b299961cc1d20729adca7b02291387f13", 0x7, &(0x7f00000000c0)="80113ac215cde01cf349058fc60a3fc57a90d1201d02914c58d752a9c32dc7a80b0753bd4864454ea128dfbba835f211047af48002fb96f007db906a57c289bb4c81922af47c13bef2a6b89230e58afd82f59c22d94897fee3", 0x32cfecc3, &(0x7f0000000440)="aa4cf6fce09ab4b2a5a8648cde5996fe43adf6b72cf3b101ece66c6edb", &(0x7f0000000300)=0x2}) mq_timedsend$auto(r8, &(0x7f0000000380)='/dev/ppp\x00', 0x80000001, 0x15, &(0x7f00000003c0)={0x3, 0x4}) 5.190326252s ago: executing program 5 (id=1621): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) unshare$auto(0x40000080) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r0, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) r3 = socket(0x18, 0x1, 0x5) io_uring_setup$auto(0x3, 0x0) r4 = getsockopt$auto(r3, 0x0, 0x33, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) uname$auto(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto(r5, 0x0, 0x3) r6 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/ap_power_level\x00', 0x802, 0x0) r7 = prctl$auto_PR_SME_SET_VL(0x3f, 0x9, 0x0, 0x5, 0x8b00) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5e48fe", @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048041) write$auto(r6, 0x0, 0x30) clock_gettime$auto(0x80000000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x6c000, 0x63) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) acct$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d@\x85\x059\xb0\x15kD\x8b\n\xd8$\x9c\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x027B3/\x82\xda\x8c\xa5\xa9T\xden\xb5\xc2\x05\xad\x9c\xda\n.S\xcb\x10\x9d\xbc\x9a>\xd0\xb9\xae\x85\t\xc2\xd1\x16M\xef\x90\xcc\x19%s\x93\xa2\x9a\x06\x95\xe3\xa8C\xea\x9e\x0e\x82`\xe4\x0eZ\xac\xab_\xbd\xf3\x12\x1a\x9f\xeb{\xe3\x9d\xb6\x83H\x04\x1a\x7f\xc2\x178\xd1%\'\xd8D\xf9\xc9\xfe\x89\xa6\xdbR\xe3y\x9e\xe8:\xd8\x91\xe67t') read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)=""/152, 0xffffffffffffffb4) 4.507225713s ago: executing program 4 (id=1622): mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_FS_IOC_FSSETXATTR(r0, 0x401c5820, r0) write$auto(0x1, 0x0, 0x80000000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) rt_sigqueueinfo$auto(0x0, 0x6, &(0x7f0000000000)={@siginfo_0_0={0xbb8, 0x155, 0xfffffffc, @_sigchld={0x0, 0x0, 0x80000001, 0x4e, 0xc}}}) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfbfffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0x0, 0x2}) r2 = socket(0xa, 0x801, 0x84) mmap$auto(0x6, 0x3, 0x7f, 0x11, r1, 0x10001) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c) unshare$auto(0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010102}, 0x54) 3.797265388s ago: executing program 6 (id=1623): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/43:416/min_ratio\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttye1/power/autosuspend_delay_ms\x00', 0x84000, 0x0) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0x1, &(0x7f0000000040)='l2tp\x00', 0x7) seccomp$auto(0x2, 0xe, &(0x7f0000000000)="e6a102c11ba4ddf85586555abc0d287e5f8112a1e32b226737f74f1fa36aa455182b351d157b92359b514b20d686b6874790b032bc75a65375e5bd86ef3f") 3.471479845s ago: executing program 6 (id=1624): mmap$auto(0x7fb, 0x6, 0x10000003, 0x20eb3, 0xfffffffffffffffa, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000e9", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250100000005001000520000000a000200212729bf2b210000080001000100000005000f000400000005000f00a200000008000300ff00000008000d0008000000"], 0x50}, 0x1, 0x0, 0x0, 0x40488c1}, 0x4000000) (async) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000e9", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250100000005001000520000000a000200212729bf2b210000080001000100000005000f000400000005000f00a200000008000300ff00000008000d0008000000"], 0x50}, 0x1, 0x0, 0x0, 0x40488c1}, 0x4000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) futex$auto(&(0x7f0000000040)=0xce, 0x1, 0x101, &(0x7f00000000c0)={0xfff, 0x8}, &(0x7f0000000100)=0x8001, 0x5d33) (async) futex$auto(&(0x7f0000000040)=0xce, 0x1, 0x101, &(0x7f00000000c0)={0xfff, 0x8}, &(0x7f0000000100)=0x8001, 0x5d33) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001280), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000001340)={0x0, 0xfffffffffffffe46, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25020000000600010009040000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40010) (async) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000001340)={0x0, 0xfffffffffffffe46, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25020000000600010009040000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40010) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sysfs$auto(0x2, 0x10000000000048, 0x0) (async) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x10000, 0x1, 0x10001, 0x2cf8}, 0xe3c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) 2.348890728s ago: executing program 5 (id=1625): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x12, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) bpf$auto(0x2, 0x0, 0x5) 2.131914958s ago: executing program 5 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$auto(r0, 0x8, 0x1) r2 = socketcall$auto_SYS_RECVMMSG(0x13, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xa0, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x8c, 0x18, "2e4bfd4d842777c5d8d2f695137146c40c799b96d1a983e412fea8db89e153c75234bd4062a58474b7a5f05034d12a91e89173bc80eb4507bcbcd7627eb7043444a09e142b15e899ba5569f49b2a86bdfd59857631c82d31635378ca7dd2bbb061fd84ddaf75ee729ed9cd4a120c2e3c58ad103b75fd47f932b43c6b5b6a07fd86f4ba3650aef13d"}]}, 0xa0}}, 0x4000000) splice$auto(r2, &(0x7f00000000c0)=0x5, r1, 0x0, 0x2, 0x0) 2.131290731s ago: executing program 0 (id=1627): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) semtimedop$auto(0x8000000b, &(0x7f0000000000)={0x0, 0x6, 0x1004}, 0x3, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) 1.978257504s ago: executing program 5 (id=1628): recvfrom$auto(0xffffffffffffffff, 0x0, 0xe, 0x5, 0x0, 0x0) ioprio_set$auto(0x6, 0x0, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x4000003, 0x80, 0x0, [0x3, 0x5, 0x200000000, 0x3ff, 0x0, 0x500, 0xfffffffffffffffd, 0x8, 0x3, 0x0, 0xc72, 0x7ffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x40000000004, 0x5, 0x1000000800, 0x0, 0x0, 0x0, 0x9, 0x10000040000000, 0xcea, 0x0, 0xfffffffffffffffc, 0x800000, 0xfffffffffffffffa, 0x4, 0xffffffffffffffff, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffff9, 0x0, 0x6c1e, 0x1, 0x0, 0x9f, 0x0, 0x3]}, 0x200, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap$auto(0x9000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x10004010) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40008815}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x38) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)="bd9c3773b6a41d6ca900420375eb6471412478b629ee133fd2328234230d77534a723f4bc4c5b6cc687b52b89f83c6104b7a662e88f87072729e8153f84417871f16d9eea328aa589bbeb1e535df2af2a6a29249cb77a73bd8254501415c193e8ef2a5393ef6d5d624e8218b6cd3167416db0ce3931da29a5b883d3f4cde69ad95a85034b11486bf661f76d4ae61fc82d9926b63f2cdc1b0ce09cf57f54327f0ae404b85b5b80cf16778b22087d92f529b8d62315f2b3b278672ff25e02305e7c41e943b6bc5d47ef27ab416e7a0f1dee205") unshare$auto(0x40000080) 1.879795464s ago: executing program 4 (id=1629): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x10) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7, 0x8000) r1 = socket(0x2, 0x3, 0x100) sendto$auto(0x3, 0x0, 0xfdef, 0xf950, &(0x7f0000000140), 0x1d) mremap$auto(0x49, 0x400, 0x3, 0x2, 0x1) flistxattr$auto(r0, &(0x7f0000000180)='{}\'\x00', 0x9) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sysfs$auto(0x2, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8800, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) pread64$auto(r2, &(0x7f0000000080)='-]-]+$.&}\x00', 0x1, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x14, 0x0, 0x0) io_uring_enter$auto(r1, 0x4320, 0x4, 0x2, &(0x7f0000000000)="0ca257b5f8242289fb5ff3341e419bb95ae1d7474651d93736", 0x4) 1.395721493s ago: executing program 4 (id=1630): mmap$auto(0x0, 0xa, 0xdb, 0x12, 0x5, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_allowed_congestion_control\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100001000, 0x5, 0x1b, 0x940, 0x1ffdc, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x41dea470, 0x8001, 0xae, 0x8, 0x922, 0x7, 0x5, 0x6, 0x1, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, [0x0, 0x4, 0x2, 0x2bd3, 0x1, 0x0, 0x2, 0x3, 0xb, 0x7ff, 0x6, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, 0x8, 0x4, 0x3b, 0x0, 0x7990, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x2, 0x3ffffffd, 0x5, 0xfffffffffffffbfe, 0x0, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x58b9, 0x0, 0xd, 0x0, 0x8, 0x0, 0x700, 0x80000001, 0x8000000000000000]}, 0x1fe, 0x81) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x6) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) setrlimit$auto(0x1000000007, 0x0) r2 = epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) writev$auto(r3, &(0x7f00000010c0)={0x0, 0x80000000}, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3) r5 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r5, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x330, 0x4) write$auto(r2, 0x0, 0x100082) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfc2, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) prctl$auto_PR_GET_MDWE(0x42, 0x3, r4, 0xfed8, 0x7fffffffffffffff) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) 1.39494251s ago: executing program 0 (id=1638): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x10) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7, 0x8000) r1 = socket(0x2, 0x3, 0x100) sendto$auto(0x3, 0x0, 0xfdef, 0xf950, &(0x7f0000000140), 0x1d) mremap$auto(0x49, 0x400, 0x3, 0x2, 0x1) flistxattr$auto(r0, &(0x7f0000000180)='{}\'\x00', 0x9) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sysfs$auto(0x2, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8800, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) pread64$auto(r2, &(0x7f0000000080)='-]-]+$.&}\x00', 0x1, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x14, 0x0, 0x0) io_uring_enter$auto(r1, 0x4320, 0x4, 0x2, &(0x7f0000000000)="0ca257b5f8242289fb5ff3341e419bb95ae1d7474651d93736", 0x4) 1.138184945s ago: executing program 5 (id=1631): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = socket(0x11, 0xa, 0xffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r2 = socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x1, 0x1, &(0x7f0000000000)='\x98\x00', 0xb559) listen$auto(0x3, 0x81) listen$auto(0x3, 0x0) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) acct$auto(&(0x7f0000000040)='./cgroup.cpu/hugetlb.1GB.rsvd.failcnt\x00') close_range$auto(0x2, 0x8, 0x40000) 494.361644ms ago: executing program 4 (id=1632): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r1) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="02002dbd7000fcdbdf362e3db500"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mq_notify$auto(r0, &(0x7f0000001100)={@sival_int=0x4, @inferred=r3}) 493.506611ms ago: executing program 0 (id=1641): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x6, 0x21, 0x0, 0x10) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x7, 0x8000) r1 = socket(0x2, 0x3, 0x100) sendto$auto(0x3, 0x0, 0xfdef, 0xf950, &(0x7f0000000140), 0x1d) mremap$auto(0x49, 0x400, 0x3, 0x2, 0x1) flistxattr$auto(r0, &(0x7f0000000180)='{}\'\x00', 0x9) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sysfs$auto(0x2, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8800, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) pread64$auto(r2, &(0x7f0000000080)='-]-]+$.&}\x00', 0x1, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x14, 0x0, 0x0) io_uring_enter$auto(r1, 0x4320, 0x4, 0x2, &(0x7f0000000000)="0ca257b5f8242289fb5ff3341e419bb95ae1d7474651d93736", 0x4) 275.763146ms ago: executing program 0 (id=1633): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xfffffffffffffff8, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) socket(0x29, 0x2, 0x2000003) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400005, 0x7fffffffffffffff, 0x9b7e, r0, 0x1ff) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) munmap$auto(0x8000, 0xffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) 0s ago: executing program 5 (id=1634): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) unshare$auto(0x40000080) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r0, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) r3 = socket(0x18, 0x1, 0x5) io_uring_setup$auto(0x3, 0x0) r4 = getsockopt$auto(r3, 0x0, 0x33, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) uname$auto(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto(r5, 0x0, 0x3) r6 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/ap_power_level\x00', 0x802, 0x0) r7 = prctl$auto_PR_SME_SET_VL(0x3f, 0x9, 0x0, 0x5, 0x8b00) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5e48fe", @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048041) write$auto(r6, 0x0, 0x30) clock_gettime$auto(0x80000000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x6c000, 0x63) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) acct$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d@\x85\x059\xb0\x15kD\x8b\n\xd8$\x9c\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x027B3/\x82\xda\x8c\xa5\xa9T\xden\xb5\xc2\x05\xad\x9c\xda\n.S\xcb\x10\x9d\xbc\x9a>\xd0\xb9\xae\x85\t\xc2\xd1\x16M\xef\x90\xcc\x19%s\x93\xa2\x9a\x06\x95\xe3\xa8C\xea\x9e\x0e\x82`\xe4\x0eZ\xac\xab_\xbd\xf3\x12\x1a\x9f\xeb{\xe3\x9d\xb6\x83H\x04\x1a\x7f\xc2\x178\xd1%\'\xd8D\xf9\xc9\xfe\x89\xa6\xdbR\xe3y\x9e\xe8:\xd8\x91\xe67t') read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)=""/152, 0xffffffffffffffb4) kernel console output (not intermixed with test programs): es=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.396" res=0 errno=0 [ 205.843820][ T7804] FAULT_INJECTION: forcing a failure. [ 205.843820][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 205.882023][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.2.401 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 205.882071][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.882090][ T7804] Call Trace: [ 205.882100][ T7804] [ 205.882113][ T7804] dump_stack_lvl+0x16c/0x1f0 [ 205.882165][ T7804] should_fail_ex+0x512/0x640 [ 205.882201][ T7804] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 205.882249][ T7804] should_failslab+0xc2/0x120 [ 205.882280][ T7804] __kmalloc_cache_noprof+0x6a/0x3e0 [ 205.882325][ T7804] ? kernfs_fop_open+0xa3a/0xda0 [ 205.882373][ T7804] kernfs_fop_open+0xa3a/0xda0 [ 205.882421][ T7804] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 205.882476][ T7804] do_dentry_open+0x741/0x1c10 [ 205.882524][ T7804] ? __pfx_kernfs_fop_open+0x10/0x10 [ 205.882574][ T7804] vfs_open+0x82/0x3f0 [ 205.882612][ T7804] path_openat+0x1e5e/0x2d40 [ 205.882677][ T7804] ? __pfx_path_openat+0x10/0x10 [ 205.882737][ T7804] do_filp_open+0x20b/0x470 [ 205.882786][ T7804] ? __pfx_do_filp_open+0x10/0x10 [ 205.882865][ T7804] ? alloc_fd+0x471/0x7d0 [ 205.882923][ T7804] do_sys_openat2+0x11b/0x1d0 [ 205.882958][ T7804] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.883009][ T7804] __x64_sys_openat+0x174/0x210 [ 205.883045][ T7804] ? __pfx___x64_sys_openat+0x10/0x10 [ 205.883082][ T7804] ? rcu_is_watching+0x12/0xc0 [ 205.883134][ T7804] do_syscall_64+0xcd/0x260 [ 205.883184][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.883216][ T7804] RIP: 0033:0x7fa090f8d169 [ 205.883243][ T7804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.883274][ T7804] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.883304][ T7804] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 205.883324][ T7804] RDX: 0000000000124001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 205.883344][ T7804] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.883362][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.883379][ T7804] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 205.883449][ T7804] [ 206.261767][ T7808] Invalid ELF header magic: != ELF [ 206.772823][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'. [ 206.811501][ T7816] futex_wake_op: syz.3.405 tries to shift op by 64; fix this program [ 208.563972][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 208.590919][ T7843] vivid-007: ================= START STATUS ================= [ 208.636823][ T7843] vivid-007: Generate PTS: true [ 208.648783][ T7843] vivid-007: Generate SCR: true [ 208.653857][ T7843] tpg source WxH: 640x360 (Y'CbCr) [ 208.664305][ T7843] tpg field: 1 [ 208.667855][ T7843] tpg crop: (0,0)/640x360 [ 208.674459][ T7843] tpg compose: (0,0)/640x360 [ 208.690608][ T7843] tpg colorspace: 8 [ 208.708775][ T7843] tpg transfer function: 0/0 [ 208.724492][ T7843] tpg Y'CbCr encoding: 0/0 [ 208.735753][ T7843] tpg quantization: 0/0 [ 208.748548][ T7843] tpg RGB range: 0/2 [ 208.773488][ T7843] vivid-007: ================== END STATUS ================== [ 209.854439][ T7879] nbd: illegal input index 2147483647 [ 209.881397][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'. [ 211.447511][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 211.514429][ T7915] netlink: 338 bytes leftover after parsing attributes in process `syz.2.429'. [ 211.587319][ T7915] netlink: 338 bytes leftover after parsing attributes in process `syz.2.429'. [ 211.680397][ T7915] netlink: 290 bytes leftover after parsing attributes in process `syz.2.429'. [ 214.102281][ T7954] Invalid ELF header magic: != ELF [ 219.081883][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 219.103292][ T8016] netlink: 354 bytes leftover after parsing attributes in process `syz.2.452'. [ 219.233083][ T8001] kexec: Could not allocate control_code_buffer [ 220.827860][ T8047] sctp: [Deprecated]: syz.2.460 (pid 8047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.827860][ T8047] Use struct sctp_sack_info instead [ 223.869325][ T8097] FAULT_INJECTION: forcing a failure. [ 223.869325][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.888236][ T8097] CPU: 0 UID: 0 PID: 8097 Comm: syz.1.474 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 223.888276][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.888292][ T8097] Call Trace: [ 223.888301][ T8097] [ 223.888312][ T8097] dump_stack_lvl+0x16c/0x1f0 [ 223.888355][ T8097] should_fail_ex+0x512/0x640 [ 223.888391][ T8097] _copy_from_user+0x2e/0xd0 [ 223.888426][ T8097] copy_msghdr_from_user+0x98/0x160 [ 223.888460][ T8097] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 223.888510][ T8097] ___sys_sendmsg+0xfe/0x1d0 [ 223.888548][ T8097] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.888625][ T8097] __sys_sendmsg+0x16d/0x220 [ 223.888664][ T8097] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.888713][ T8097] ? rcu_is_watching+0x12/0xc0 [ 223.888764][ T8097] do_syscall_64+0xcd/0x260 [ 223.888820][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.888851][ T8097] RIP: 0033:0x7f3dabb8d169 [ 223.888875][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.888904][ T8097] RSP: 002b:00007f3daca2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.888931][ T8097] RAX: ffffffffffffffda RBX: 00007f3dabda5fa0 RCX: 00007f3dabb8d169 [ 223.888951][ T8097] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 223.888981][ T8097] RBP: 00007f3daca2d090 R08: 0000000000000000 R09: 0000000000000000 [ 223.888997][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.889013][ T8097] R13: 0000000000000000 R14: 00007f3dabda5fa0 R15: 00007ffe27b07888 [ 223.889051][ T8097] [ 224.052481][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.176372][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.475'. [ 224.711354][ T8110] sctp: [Deprecated]: syz.2.477 (pid 8110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.711354][ T8110] Use struct sctp_sack_info instead [ 224.842807][ T8114] sctp: [Deprecated]: syz.3.478 (pid 8114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.842807][ T8114] Use struct sctp_sack_info instead [ 227.321377][ T8162] netlink: 206 bytes leftover after parsing attributes in process `syz.0.490'. [ 228.078100][ T8178] svc: failed to register nfsdv3 RPC service (errno 111). [ 228.097751][ T8178] svc: failed to register nfsaclv3 RPC service (errno 111). [ 229.031900][ T8192] futex_wake_op: syz.1.501 tries to shift op by 64; fix this program [ 229.858853][ T55] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 229.903188][ T30] audit: type=1800 audit(6039171802.729:4): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.504" name="dbroot" dev="configfs" ino=18921 res=0 errno=0 [ 230.637433][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 231.267026][ T8237] Invalid ELF header magic: != ELF [ 234.054040][ T8279] FAULT_INJECTION: forcing a failure. [ 234.054040][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 234.108944][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.2.524 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 234.108988][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.109006][ T8279] Call Trace: [ 234.109016][ T8279] [ 234.109028][ T8279] dump_stack_lvl+0x16c/0x1f0 [ 234.109080][ T8279] should_fail_ex+0x512/0x640 [ 234.109119][ T8279] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 234.109173][ T8279] should_failslab+0xc2/0x120 [ 234.109201][ T8279] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 234.109245][ T8279] ? __proc_create+0xc3/0x8c0 [ 234.109276][ T8279] ? __proc_create+0x2ce/0x8c0 [ 234.109316][ T8279] __proc_create+0x2ce/0x8c0 [ 234.109351][ T8279] ? __pfx___proc_create+0x10/0x10 [ 234.109392][ T8279] ? _raw_write_unlock+0x28/0x50 [ 234.109433][ T8279] ? proc_register+0x314/0x5f0 [ 234.109473][ T8279] proc_create_reg+0x7d/0x180 [ 234.109513][ T8279] proc_create_seq_private+0x8e/0x1d0 [ 234.109553][ T8279] ? __pfx_proc_create_seq_private+0x10/0x10 [ 234.109606][ T8279] xt_proto_init+0x45b/0xc10 [ 234.109670][ T8279] ? __pfx_xt_proto_init+0x10/0x10 [ 234.109720][ T8279] ? trace_kmalloc+0x2b/0xd0 [ 234.109751][ T8279] ? __kasan_kmalloc+0xaa/0xb0 [ 234.109800][ T8279] ? __pfx_arp_tables_net_init+0x10/0x10 [ 234.109838][ T8279] ops_init+0x1df/0x5f0 [ 234.109888][ T8279] setup_net+0x21e/0x850 [ 234.109937][ T8279] ? __pfx_setup_net+0x10/0x10 [ 234.109984][ T8279] ? lockdep_init_map_type+0x5c/0x280 [ 234.110017][ T8279] ? __pfx_down_read_killable+0x10/0x10 [ 234.110051][ T8279] ? debug_mutex_init+0x37/0x70 [ 234.110096][ T8279] copy_net_ns+0x2a6/0x5f0 [ 234.110150][ T8279] create_new_namespaces+0x3ea/0xad0 [ 234.110207][ T8279] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 234.110258][ T8279] ksys_unshare+0x45b/0xa40 [ 234.110308][ T8279] ? __pfx_ksys_unshare+0x10/0x10 [ 234.110355][ T8279] ? xfd_validate_state+0x5d/0x180 [ 234.110393][ T8279] ? rcu_is_watching+0x12/0xc0 [ 234.110444][ T8279] __x64_sys_unshare+0x31/0x40 [ 234.110493][ T8279] do_syscall_64+0xcd/0x260 [ 234.110544][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.110576][ T8279] RIP: 0033:0x7fa090f8d169 [ 234.110602][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.110643][ T8279] RSP: 002b:00007fa091e5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 234.110674][ T8279] RAX: ffffffffffffffda RBX: 00007fa0911a5fa0 RCX: 00007fa090f8d169 [ 234.110694][ T8279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 234.110713][ T8279] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 234.110731][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.110749][ T8279] R13: 0000000000000000 R14: 00007fa0911a5fa0 R15: 00007ffe57866538 [ 234.110787][ T8279] [ 234.645143][ T8234] Process accounting paused [ 234.960251][ T8287] FAULT_INJECTION: forcing a failure. [ 234.960251][ T8287] name failslab, interval 1, probability 0, space 0, times 0 [ 234.983116][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.2.528 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 234.983160][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.983179][ T8287] Call Trace: [ 234.983189][ T8287] [ 234.983203][ T8287] dump_stack_lvl+0x16c/0x1f0 [ 234.983254][ T8287] should_fail_ex+0x512/0x640 [ 234.983293][ T8287] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 234.983348][ T8287] should_failslab+0xc2/0x120 [ 234.983379][ T8287] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 234.983426][ T8287] ? __proc_create+0xc3/0x8c0 [ 234.983461][ T8287] ? __proc_create+0x2ce/0x8c0 [ 234.983499][ T8287] __proc_create+0x2ce/0x8c0 [ 234.983535][ T8287] ? __pfx___proc_create+0x10/0x10 [ 234.983585][ T8287] ? _raw_write_unlock+0x28/0x50 [ 234.983629][ T8287] ? proc_register+0x314/0x5f0 [ 234.983668][ T8287] proc_create_reg+0x7d/0x180 [ 234.983710][ T8287] proc_create_seq_private+0x8e/0x1d0 [ 234.983750][ T8287] ? __pfx_proc_create_seq_private+0x10/0x10 [ 234.983790][ T8287] ? __pfx_uevent_net_rcv+0x10/0x10 [ 234.983829][ T8287] ? __pfx_dev_proc_net_init+0x10/0x10 [ 234.983862][ T8287] dev_proc_net_init+0xa8/0x220 [ 234.983897][ T8287] ops_init+0x1df/0x5f0 [ 234.983946][ T8287] setup_net+0x21e/0x850 [ 234.983996][ T8287] ? __pfx_setup_net+0x10/0x10 [ 234.984039][ T8287] ? lockdep_init_map_type+0x5c/0x280 [ 234.984070][ T8287] ? __pfx_down_read_killable+0x10/0x10 [ 234.984104][ T8287] ? debug_mutex_init+0x37/0x70 [ 234.984149][ T8287] copy_net_ns+0x2a6/0x5f0 [ 234.984203][ T8287] create_new_namespaces+0x3ea/0xad0 [ 234.984259][ T8287] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 234.984310][ T8287] ksys_unshare+0x45b/0xa40 [ 234.984359][ T8287] ? __pfx_ksys_unshare+0x10/0x10 [ 234.984407][ T8287] ? xfd_validate_state+0x5d/0x180 [ 234.984445][ T8287] ? rcu_is_watching+0x12/0xc0 [ 234.984493][ T8287] __x64_sys_unshare+0x31/0x40 [ 234.984541][ T8287] do_syscall_64+0xcd/0x260 [ 234.984601][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.984633][ T8287] RIP: 0033:0x7fa090f8d169 [ 234.984659][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.984689][ T8287] RSP: 002b:00007fa091e5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 234.984719][ T8287] RAX: ffffffffffffffda RBX: 00007fa0911a5fa0 RCX: 00007fa090f8d169 [ 234.984739][ T8287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 234.984757][ T8287] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 234.984774][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.984791][ T8287] R13: 0000000000000000 R14: 00007fa0911a5fa0 R15: 00007ffe57866538 [ 234.984831][ T8287] [ 236.148120][ T8306] Invalid ELF header magic: != ELF [ 239.109454][ T8357] FAULT_INJECTION: forcing a failure. [ 239.109454][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 239.159059][ T8357] CPU: 0 UID: 0 PID: 8357 Comm: syz.2.543 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 239.159105][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.159124][ T8357] Call Trace: [ 239.159134][ T8357] [ 239.159146][ T8357] dump_stack_lvl+0x16c/0x1f0 [ 239.159199][ T8357] should_fail_ex+0x512/0x640 [ 239.159235][ T8357] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 239.159283][ T8357] should_failslab+0xc2/0x120 [ 239.159314][ T8357] __kmalloc_cache_noprof+0x6a/0x3e0 [ 239.159359][ T8357] ? kernfs_fop_open+0xa3a/0xda0 [ 239.159406][ T8357] kernfs_fop_open+0xa3a/0xda0 [ 239.159447][ T8357] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 239.159500][ T8357] do_dentry_open+0x741/0x1c10 [ 239.159548][ T8357] ? __pfx_kernfs_fop_open+0x10/0x10 [ 239.159597][ T8357] vfs_open+0x82/0x3f0 [ 239.159636][ T8357] path_openat+0x1e5e/0x2d40 [ 239.159701][ T8357] ? __pfx_path_openat+0x10/0x10 [ 239.159760][ T8357] do_filp_open+0x20b/0x470 [ 239.159809][ T8357] ? __pfx_do_filp_open+0x10/0x10 [ 239.159889][ T8357] ? alloc_fd+0x471/0x7d0 [ 239.159954][ T8357] do_sys_openat2+0x11b/0x1d0 [ 239.159989][ T8357] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.160041][ T8357] __x64_sys_openat+0x174/0x210 [ 239.160077][ T8357] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.160114][ T8357] ? rcu_is_watching+0x12/0xc0 [ 239.160167][ T8357] do_syscall_64+0xcd/0x260 [ 239.160218][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.160251][ T8357] RIP: 0033:0x7fa090f8d169 [ 239.160276][ T8357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.160307][ T8357] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.160336][ T8357] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 239.160356][ T8357] RDX: 0000000000124001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 239.160376][ T8357] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.160394][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.160412][ T8357] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 239.160453][ T8357] [ 240.022495][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.557'. [ 241.265459][ T8397] mkiss: ax0: crc mode is auto. [ 242.148133][ T8419] FAULT_INJECTION: forcing a failure. [ 242.148133][ T8419] name failslab, interval 1, probability 0, space 0, times 0 [ 242.185390][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: syz.2.566 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 242.185433][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.185452][ T8419] Call Trace: [ 242.185462][ T8419] [ 242.185474][ T8419] dump_stack_lvl+0x16c/0x1f0 [ 242.185525][ T8419] should_fail_ex+0x512/0x640 [ 242.185562][ T8419] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 242.185616][ T8419] should_failslab+0xc2/0x120 [ 242.185646][ T8419] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 242.185697][ T8419] ? vm_area_dup+0x25/0x760 [ 242.185746][ T8419] vm_area_dup+0x25/0x760 [ 242.185802][ T8419] __split_vma+0x17f/0x1030 [ 242.185857][ T8419] ? __pfx___split_vma+0x10/0x10 [ 242.185925][ T8419] vms_gather_munmap_vmas+0x392/0x1310 [ 242.185983][ T8419] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 242.186036][ T8419] ? mas_walk+0x6a6/0x910 [ 242.186094][ T8419] __mmap_region+0x314/0x27c0 [ 242.186142][ T8419] ? rcu_is_watching+0x12/0xc0 [ 242.186181][ T8419] ? __pfx___mmap_region+0x10/0x10 [ 242.186230][ T8419] ? finish_task_switch.isra.0+0x221/0xc10 [ 242.186281][ T8419] ? __schedule+0x1186/0x5de0 [ 242.186318][ T8419] ? kvm_sched_clock_read+0x11/0x20 [ 242.186356][ T8419] ? sched_clock+0x38/0x60 [ 242.186385][ T8419] ? sched_clock_cpu+0x6c/0x530 [ 242.186489][ T8419] ? trace_cap_capable+0x18d/0x200 [ 242.186525][ T8419] ? cap_capable+0xb3/0x250 [ 242.186563][ T8419] mmap_region+0x1ab/0x3f0 [ 242.186621][ T8419] do_mmap+0xd8e/0x11b0 [ 242.186673][ T8419] ? __pfx_do_mmap+0x10/0x10 [ 242.186712][ T8419] ? __pfx_down_write_killable+0x10/0x10 [ 242.186780][ T8419] vm_mmap_pgoff+0x281/0x450 [ 242.186825][ T8419] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 242.186872][ T8419] ? __x64_sys_futex+0x1e0/0x4c0 [ 242.186914][ T8419] ? __x64_sys_futex+0x1e9/0x4c0 [ 242.186964][ T8419] ksys_mmap_pgoff+0x7d/0x5c0 [ 242.187002][ T8419] ? rcu_is_watching+0x12/0xc0 [ 242.187047][ T8419] __x64_sys_mmap+0x125/0x190 [ 242.187088][ T8419] do_syscall_64+0xcd/0x260 [ 242.187138][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.187169][ T8419] RIP: 0033:0x7fa090f8d169 [ 242.187194][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.187225][ T8419] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 242.187254][ T8419] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 242.187275][ T8419] RDX: 00800000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 242.187294][ T8419] RBP: 00007fa09100e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 242.187312][ T8419] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 242.187330][ T8419] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 242.187371][ T8419] [ 242.486313][ T8419] FAULT_INJECTION: forcing a failure. [ 242.486313][ T8419] name failslab, interval 1, probability 0, space 0, times 0 [ 242.522103][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.2.566 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 242.522147][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.522170][ T8419] Call Trace: [ 242.522181][ T8419] [ 242.522197][ T8419] dump_stack_lvl+0x16c/0x1f0 [ 242.522249][ T8419] should_fail_ex+0x512/0x640 [ 242.522286][ T8419] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 242.522338][ T8419] should_failslab+0xc2/0x120 [ 242.522368][ T8419] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 242.522418][ T8419] ? ioctx_alloc+0x1a4/0x2060 [ 242.522462][ T8419] ? __lock_acquire+0xaa4/0x1ba0 [ 242.522501][ T8419] ioctx_alloc+0x1a4/0x2060 [ 242.522562][ T8419] ? find_held_lock+0x2b/0x80 [ 242.522603][ T8419] ? __pfx_ioctx_alloc+0x10/0x10 [ 242.522645][ T8419] ? __might_fault+0x13b/0x190 [ 242.522711][ T8419] __x64_sys_io_setup+0xc9/0x210 [ 242.522762][ T8419] do_syscall_64+0xcd/0x260 [ 242.522811][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.522848][ T8419] RIP: 0033:0x7fa090f8d169 [ 242.522874][ T8419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.522905][ T8419] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 242.522934][ T8419] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 242.522954][ T8419] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 242.522973][ T8419] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.522991][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.523009][ T8419] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 242.523050][ T8419] [ 243.167782][ T8427] Invalid ELF header magic: != ELF [ 243.488567][ T8434] FAULT_INJECTION: forcing a failure. [ 243.488567][ T8434] name failslab, interval 1, probability 0, space 0, times 0 [ 243.559913][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.1.569 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 243.559956][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.559973][ T8434] Call Trace: [ 243.559982][ T8434] [ 243.559992][ T8434] dump_stack_lvl+0x16c/0x1f0 [ 243.560041][ T8434] should_fail_ex+0x512/0x640 [ 243.560074][ T8434] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 243.560126][ T8434] should_failslab+0xc2/0x120 [ 243.560156][ T8434] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 243.560202][ T8434] ? ioctx_alloc+0x1a4/0x2060 [ 243.560245][ T8434] ? __lock_acquire+0xaa4/0x1ba0 [ 243.560276][ T8434] ioctx_alloc+0x1a4/0x2060 [ 243.560332][ T8434] ? find_held_lock+0x2b/0x80 [ 243.560397][ T8434] ? __pfx_ioctx_alloc+0x10/0x10 [ 243.560439][ T8434] ? __might_fault+0x13b/0x190 [ 243.560504][ T8434] __x64_sys_io_setup+0xc9/0x210 [ 243.560570][ T8434] do_syscall_64+0xcd/0x260 [ 243.560620][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.560653][ T8434] RIP: 0033:0x7f3dabb8d169 [ 243.560679][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.560714][ T8434] RSP: 002b:00007f3daca0c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 243.560742][ T8434] RAX: ffffffffffffffda RBX: 00007f3dabda6080 RCX: 00007f3dabb8d169 [ 243.560762][ T8434] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 243.560780][ T8434] RBP: 00007f3dabc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 243.560799][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.560816][ T8434] R13: 0000000000000000 R14: 00007f3dabda6080 R15: 00007ffe27b07888 [ 243.560854][ T8434] [ 244.600361][ T55] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 244.643981][ T30] audit: type=1800 audit(6039171825.467:5): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.571" name="dbroot" dev="configfs" ino=20509 res=0 errno=0 [ 246.531815][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 246.638330][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.575'. [ 247.218534][ T8477] netlink: 334 bytes leftover after parsing attributes in process `syz.1.581'. [ 249.098100][ T8524] HfR: entered promiscuous mode [ 250.713341][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 250.824975][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.868872][ T8555] bridge_slave_1 (unregistering): left allmulticast mode [ 250.875995][ T8555] bridge_slave_1 (unregistering): left promiscuous mode [ 250.887643][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.904503][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 251.521273][ T8582] FAULT_INJECTION: forcing a failure. [ 251.521273][ T8582] name failslab, interval 1, probability 0, space 0, times 0 [ 251.604814][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz.1.606 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 251.604859][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.604878][ T8582] Call Trace: [ 251.604888][ T8582] [ 251.604901][ T8582] dump_stack_lvl+0x16c/0x1f0 [ 251.604953][ T8582] should_fail_ex+0x512/0x640 [ 251.604989][ T8582] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 251.605044][ T8582] should_failslab+0xc2/0x120 [ 251.605074][ T8582] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 251.605124][ T8582] ? vm_area_dup+0x25/0x760 [ 251.605172][ T8582] vm_area_dup+0x25/0x760 [ 251.605217][ T8582] __split_vma+0x17f/0x1030 [ 251.605270][ T8582] ? __pfx___split_vma+0x10/0x10 [ 251.605337][ T8582] vms_gather_munmap_vmas+0x392/0x1310 [ 251.605394][ T8582] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 251.605447][ T8582] ? mas_walk+0x6a6/0x910 [ 251.605505][ T8582] __mmap_region+0x314/0x27c0 [ 251.605556][ T8582] ? rcu_is_watching+0x12/0xc0 [ 251.605598][ T8582] ? __pfx___mmap_region+0x10/0x10 [ 251.605647][ T8582] ? finish_task_switch.isra.0+0x221/0xc10 [ 251.605699][ T8582] ? __schedule+0x1186/0x5de0 [ 251.605735][ T8582] ? kvm_sched_clock_read+0x11/0x20 [ 251.605774][ T8582] ? sched_clock+0x38/0x60 [ 251.605801][ T8582] ? sched_clock_cpu+0x6c/0x530 [ 251.605920][ T8582] ? trace_cap_capable+0x18d/0x200 [ 251.605956][ T8582] ? cap_capable+0xb3/0x250 [ 251.605994][ T8582] mmap_region+0x1ab/0x3f0 [ 251.606053][ T8582] do_mmap+0xd8e/0x11b0 [ 251.606098][ T8582] ? __pfx_do_mmap+0x10/0x10 [ 251.606137][ T8582] ? __pfx_down_write_killable+0x10/0x10 [ 251.606199][ T8582] vm_mmap_pgoff+0x281/0x450 [ 251.606243][ T8582] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 251.606291][ T8582] ? __x64_sys_futex+0x1e0/0x4c0 [ 251.606336][ T8582] ? __x64_sys_futex+0x1e9/0x4c0 [ 251.606388][ T8582] ksys_mmap_pgoff+0x7d/0x5c0 [ 251.606427][ T8582] ? rcu_is_watching+0x12/0xc0 [ 251.606471][ T8582] __x64_sys_mmap+0x125/0x190 [ 251.606513][ T8582] do_syscall_64+0xcd/0x260 [ 251.606563][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.606594][ T8582] RIP: 0033:0x7f3dabb8d169 [ 251.606621][ T8582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.606651][ T8582] RSP: 002b:00007f3daca0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 251.606681][ T8582] RAX: ffffffffffffffda RBX: 00007f3dabda6080 RCX: 00007f3dabb8d169 [ 251.606702][ T8582] RDX: 00800000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 251.606721][ T8582] RBP: 00007f3dabc0e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 251.606740][ T8582] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 251.606758][ T8582] R13: 0000000000000000 R14: 00007f3dabda6080 R15: 00007ffe27b07888 [ 251.606799][ T8582] [ 251.944900][ T8585] FAULT_INJECTION: forcing a failure. [ 251.944900][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 251.963968][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.1.606 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 251.964014][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.964034][ T8585] Call Trace: [ 251.964044][ T8585] [ 251.964057][ T8585] dump_stack_lvl+0x16c/0x1f0 [ 251.964108][ T8585] should_fail_ex+0x512/0x640 [ 251.964145][ T8585] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 251.964195][ T8585] should_failslab+0xc2/0x120 [ 251.964226][ T8585] __kmalloc_cache_noprof+0x6a/0x3e0 [ 251.964271][ T8585] ? percpu_ref_init+0xec/0x410 [ 251.964304][ T8585] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 251.964347][ T8585] percpu_ref_init+0xec/0x410 [ 251.964374][ T8585] ? __init_waitqueue_head+0xca/0x150 [ 251.964416][ T8585] ioctx_alloc+0x3bc/0x2060 [ 251.964477][ T8585] ? find_held_lock+0x2b/0x80 [ 251.964517][ T8585] ? __pfx_ioctx_alloc+0x10/0x10 [ 251.964568][ T8585] ? __might_fault+0x13b/0x190 [ 251.964632][ T8585] __x64_sys_io_setup+0xc9/0x210 [ 251.964680][ T8585] do_syscall_64+0xcd/0x260 [ 251.964731][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.964764][ T8585] RIP: 0033:0x7f3dabb8d169 [ 251.964791][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.964822][ T8585] RSP: 002b:00007f3dac9eb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 251.964851][ T8585] RAX: ffffffffffffffda RBX: 00007f3dabda6160 RCX: 00007f3dabb8d169 [ 251.964871][ T8585] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 251.964891][ T8585] RBP: 00007f3dabc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.964909][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.964927][ T8585] R13: 0000000000000000 R14: 00007f3dabda6160 R15: 00007ffe27b07888 [ 251.964968][ T8585] [ 253.769838][ T8614] netlink: 334 bytes leftover after parsing attributes in process `syz.2.614'. [ 254.794901][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'. [ 256.124530][ T8664] FAULT_INJECTION: forcing a failure. [ 256.124530][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 256.169175][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.1.626 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 256.169223][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.169242][ T8664] Call Trace: [ 256.169253][ T8664] [ 256.169265][ T8664] dump_stack_lvl+0x16c/0x1f0 [ 256.169326][ T8664] should_fail_ex+0x512/0x640 [ 256.169363][ T8664] ? fs_reclaim_acquire+0xae/0x150 [ 256.169407][ T8664] ? security_inode_init_security+0x13f/0x390 [ 256.169458][ T8664] should_failslab+0xc2/0x120 [ 256.169489][ T8664] __kmalloc_noprof+0xd2/0x510 [ 256.169548][ T8664] security_inode_init_security+0x13f/0x390 [ 256.169602][ T8664] ? __pfx_shmem_initxattrs+0x10/0x10 [ 256.169642][ T8664] ? __pfx_security_inode_init_security+0x10/0x10 [ 256.169708][ T8664] shmem_mknod+0x22e/0x450 [ 256.169754][ T8664] ? __pfx_shmem_create+0x10/0x10 [ 256.169793][ T8664] lookup_open.isra.0+0x11d0/0x1580 [ 256.169846][ T8664] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 256.169912][ T8664] ? __pfx_down_write+0x10/0x10 [ 256.169961][ T8664] ? mnt_get_write_access+0x20c/0x300 [ 256.170006][ T8664] path_openat+0x905/0x2d40 [ 256.170069][ T8664] ? __pfx_path_openat+0x10/0x10 [ 256.170130][ T8664] do_filp_open+0x20b/0x470 [ 256.170179][ T8664] ? __pfx_do_filp_open+0x10/0x10 [ 256.170258][ T8664] ? _raw_spin_unlock+0x28/0x50 [ 256.170304][ T8664] ? alloc_fd+0x471/0x7d0 [ 256.170362][ T8664] do_sys_openat2+0x11b/0x1d0 [ 256.170396][ T8664] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.170449][ T8664] __x64_sys_open+0x153/0x1e0 [ 256.170484][ T8664] ? __pfx___x64_sys_open+0x10/0x10 [ 256.170528][ T8664] ? rcu_is_watching+0x12/0xc0 [ 256.170574][ T8664] do_syscall_64+0xcd/0x260 [ 256.170626][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.170659][ T8664] RIP: 0033:0x7f3dabb8d169 [ 256.170685][ T8664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.170715][ T8664] RSP: 002b:00007f3daca2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 256.170745][ T8664] RAX: ffffffffffffffda RBX: 00007f3dabda5fa0 RCX: 00007f3dabb8d169 [ 256.170766][ T8664] RDX: e1d2b27bdc14abfd RSI: 0000000000004242 RDI: 0000000000000000 [ 256.170785][ T8664] RBP: 00007f3dabc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 256.170803][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.170821][ T8664] R13: 0000000000000000 R14: 00007f3dabda5fa0 R15: 00007ffe27b07888 [ 256.170862][ T8664] [ 256.478064][ T8666] netlink: 330 bytes leftover after parsing attributes in process `syz.3.627'. [ 256.518868][ T8666] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 260.131031][ T8709] Process accounting resumed [ 260.927336][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.933806][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.237998][ T8744] Invalid ELF header magic: != ELF [ 261.514429][ T8748] netlink: 330 bytes leftover after parsing attributes in process `syz.2.646'. [ 261.523561][ T8748] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 262.804354][ T8774] erspan0: entered allmulticast mode [ 265.817016][ T8825] svc: failed to register nfsdv3 RPC service (errno 111). [ 265.854527][ T8825] svc: failed to register nfsaclv3 RPC service (errno 111). [ 266.465831][ T8831] vivid-003: ================= START STATUS ================= [ 266.521662][ T8831] vivid-003: Radio HW Seek Mode: Bounded [ 266.567745][ T8831] vivid-003: Radio Programmable HW Seek: false [ 266.658896][ T8831] vivid-003: RDS Rx I/O Mode: Block I/O [ 266.664566][ T8831] vivid-003: Generate RBDS Instead of RDS: false [ 266.796290][ T8831] vivid-003: RDS Reception: true [ 266.856054][ T8831] vivid-003: RDS Program Type: 0 inactive [ 266.918910][ T8831] vivid-003: RDS PS Name: inactive [ 266.968816][ T8831] vivid-003: RDS Radio Text: inactive [ 267.011815][ T8831] vivid-003: RDS Traffic Announcement: false inactive [ 267.062164][ T8831] vivid-003: RDS Traffic Program: false inactive [ 267.084752][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'. [ 267.112432][ T8831] vivid-003: RDS Music: false inactive [ 267.140260][ T8831] vivid-003: ================== END STATUS ================== [ 270.160002][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.681'. [ 270.383008][ T8876] netlink: 334 bytes leftover after parsing attributes in process `syz.0.680'. [ 271.782793][ T8908] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 275.687534][ T8994] erspan0: entered allmulticast mode [ 278.932823][ T9052] Invalid ELF header magic: != ELF [ 280.515822][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 280.533488][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.615515][ T9076] bridge_slave_1 (unregistering): left allmulticast mode [ 280.624173][ T9076] bridge_slave_1 (unregistering): left promiscuous mode [ 280.633765][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.662232][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 283.184422][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.750'. [ 284.679191][ T55] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 285.134203][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.758'. [ 285.665685][ T9188] Invalid ELF header magic: != ELF [ 285.822600][ T9200] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 286.935597][ T9212] svc: failed to register nfsdv3 RPC service (errno 111). [ 286.946962][ T9212] svc: failed to register nfsaclv3 RPC service (errno 111). [ 287.855336][ T9228] zswap: compressor not available [ 288.405110][ T9251] FAULT_INJECTION: forcing a failure. [ 288.405110][ T9251] name fail_futex, interval 1, probability 0, space 0, times 1 [ 288.441604][ T9251] CPU: 1 UID: 0 PID: 9251 Comm: syz.2.779 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 288.441654][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.441672][ T9251] Call Trace: [ 288.441682][ T9251] [ 288.441694][ T9251] dump_stack_lvl+0x16c/0x1f0 [ 288.441745][ T9251] should_fail_ex+0x512/0x640 [ 288.441788][ T9251] get_futex_key+0x49e/0x1000 [ 288.441837][ T9251] ? __pfx_get_futex_key+0x10/0x10 [ 288.441906][ T9251] futex_wake+0xe7/0x4e0 [ 288.441940][ T9251] ? __pfx_futex_wake+0x10/0x10 [ 288.441971][ T9251] ? rcu_is_watching+0x12/0xc0 [ 288.442029][ T9251] do_futex+0x1e3/0x350 [ 288.442076][ T9251] ? __pfx_do_futex+0x10/0x10 [ 288.442126][ T9251] ? __pfx___might_resched+0x10/0x10 [ 288.442177][ T9251] __x64_sys_futex+0x1e0/0x4c0 [ 288.442225][ T9251] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 288.442279][ T9251] ? __pfx___x64_sys_futex+0x10/0x10 [ 288.442327][ T9251] ? rcu_is_watching+0x12/0xc0 [ 288.442377][ T9251] do_syscall_64+0xcd/0x260 [ 288.442425][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.442467][ T9251] RIP: 0033:0x7fa090f8d169 [ 288.442493][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.442524][ T9251] RSP: 002b:00007fa091e3d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.442554][ T9251] RAX: ffffffffffffffda RBX: 00007fa0911a6088 RCX: 00007fa090f8d169 [ 288.442574][ T9251] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa0911a608c [ 288.442592][ T9251] RBP: 00007fa0911a6080 R08: 00007fa091e5f000 R09: 0000000000000000 [ 288.442610][ T9251] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fa0911a608c [ 288.442630][ T9251] R13: 0000000000000000 R14: 00007ffe57866450 R15: 00007ffe57866538 [ 288.442668][ T9251] [ 288.456410][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 288.634659][ T9251] FAULT_INJECTION: forcing a failure. [ 288.634659][ T9251] name failslab, interval 1, probability 0, space 0, times 0 [ 288.659890][ T9251] CPU: 0 UID: 0 PID: 9251 Comm: syz.2.779 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 288.659931][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.659950][ T9251] Call Trace: [ 288.659960][ T9251] [ 288.659972][ T9251] dump_stack_lvl+0x16c/0x1f0 [ 288.660022][ T9251] should_fail_ex+0x512/0x640 [ 288.660059][ T9251] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 288.660113][ T9251] should_failslab+0xc2/0x120 [ 288.660150][ T9251] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 288.660200][ T9251] ? ioctx_alloc+0x1a4/0x2060 [ 288.660244][ T9251] ? __lock_acquire+0xaa4/0x1ba0 [ 288.660276][ T9251] ioctx_alloc+0x1a4/0x2060 [ 288.660333][ T9251] ? find_held_lock+0x2b/0x80 [ 288.660372][ T9251] ? __pfx_ioctx_alloc+0x10/0x10 [ 288.660421][ T9251] ? __might_fault+0x13b/0x190 [ 288.660485][ T9251] __x64_sys_io_setup+0xc9/0x210 [ 288.660535][ T9251] do_syscall_64+0xcd/0x260 [ 288.660598][ T9251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.660632][ T9251] RIP: 0033:0x7fa090f8d169 [ 288.660657][ T9251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.660688][ T9251] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 288.660718][ T9251] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 288.660739][ T9251] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 288.660758][ T9251] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.660788][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.660807][ T9251] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 288.660847][ T9251] [ 290.744752][ T9306] FAULT_INJECTION: forcing a failure. [ 290.744752][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 290.773485][ T9306] CPU: 0 UID: 0 PID: 9306 Comm: syz.2.795 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 290.773532][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.773551][ T9306] Call Trace: [ 290.773562][ T9306] [ 290.773574][ T9306] dump_stack_lvl+0x16c/0x1f0 [ 290.773634][ T9306] should_fail_ex+0x512/0x640 [ 290.773672][ T9306] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 290.773727][ T9306] should_failslab+0xc2/0x120 [ 290.773758][ T9306] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 290.773809][ T9306] ? vm_area_dup+0x25/0x760 [ 290.773859][ T9306] vm_area_dup+0x25/0x760 [ 290.773904][ T9306] __split_vma+0x17f/0x1030 [ 290.773957][ T9306] ? __pfx___split_vma+0x10/0x10 [ 290.774024][ T9306] vms_gather_munmap_vmas+0x392/0x1310 [ 290.774082][ T9306] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 290.774135][ T9306] ? mas_walk+0x6a6/0x910 [ 290.774192][ T9306] __mmap_region+0x314/0x27c0 [ 290.774241][ T9306] ? finish_task_switch.isra.0+0x221/0xc10 [ 290.774286][ T9306] ? __pfx___mmap_region+0x10/0x10 [ 290.774332][ T9306] ? trace_sched_exit_tp+0xde/0x130 [ 290.774397][ T9306] ? __lock_acquire+0x5ca/0x1ba0 [ 290.774435][ T9306] ? __pfx___schedule+0x10/0x10 [ 290.774528][ T9306] ? trace_cap_capable+0x18d/0x200 [ 290.774563][ T9306] ? cap_capable+0xb3/0x250 [ 290.774609][ T9306] mmap_region+0x1ab/0x3f0 [ 290.774667][ T9306] do_mmap+0xd8e/0x11b0 [ 290.774714][ T9306] ? __pfx_do_mmap+0x10/0x10 [ 290.774752][ T9306] ? __pfx_down_write_killable+0x10/0x10 [ 290.774813][ T9306] vm_mmap_pgoff+0x281/0x450 [ 290.774857][ T9306] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 290.774904][ T9306] ? __x64_sys_futex+0x1e0/0x4c0 [ 290.774949][ T9306] ? __x64_sys_futex+0x1e9/0x4c0 [ 290.775001][ T9306] ksys_mmap_pgoff+0x7d/0x5c0 [ 290.775038][ T9306] ? rcu_is_watching+0x12/0xc0 [ 290.775082][ T9306] __x64_sys_mmap+0x125/0x190 [ 290.775123][ T9306] do_syscall_64+0xcd/0x260 [ 290.775173][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.775204][ T9306] RIP: 0033:0x7fa090f8d169 [ 290.775228][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.775257][ T9306] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 290.775286][ T9306] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 290.775307][ T9306] RDX: 00800000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 290.775325][ T9306] RBP: 00007fa09100e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 290.775366][ T9306] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 290.775385][ T9306] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 290.775426][ T9306] [ 291.089994][ T9306] FAULT_INJECTION: forcing a failure. [ 291.089994][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 291.102930][ T9306] CPU: 0 UID: 0 PID: 9306 Comm: syz.2.795 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 291.102972][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.102991][ T9306] Call Trace: [ 291.103002][ T9306] [ 291.103013][ T9306] dump_stack_lvl+0x16c/0x1f0 [ 291.103064][ T9306] should_fail_ex+0x512/0x640 [ 291.103102][ T9306] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 291.103155][ T9306] should_failslab+0xc2/0x120 [ 291.103186][ T9306] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 291.103236][ T9306] ? ioctx_alloc+0x1a4/0x2060 [ 291.103281][ T9306] ? __lock_acquire+0xaa4/0x1ba0 [ 291.103313][ T9306] ioctx_alloc+0x1a4/0x2060 [ 291.103374][ T9306] ? find_held_lock+0x2b/0x80 [ 291.103414][ T9306] ? __pfx_ioctx_alloc+0x10/0x10 [ 291.103457][ T9306] ? __might_fault+0x13b/0x190 [ 291.103518][ T9306] __x64_sys_io_setup+0xc9/0x210 [ 291.103567][ T9306] do_syscall_64+0xcd/0x260 [ 291.103617][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.103657][ T9306] RIP: 0033:0x7fa090f8d169 [ 291.103682][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.103712][ T9306] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 291.103741][ T9306] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 291.103762][ T9306] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 291.103780][ T9306] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 291.103798][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.103816][ T9306] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 291.103856][ T9306] [ 292.018180][ T9330] netlink: 330 bytes leftover after parsing attributes in process `syz.2.803'. [ 292.295147][ T9339] svc: failed to register nfsdv3 RPC service (errno 111). [ 292.326522][ T9339] svc: failed to register nfsaclv3 RPC service (errno 111). [ 292.938553][ T9345] Invalid ELF header magic: != ELF [ 293.332593][ T9354] FAULT_INJECTION: forcing a failure. [ 293.332593][ T9354] name failslab, interval 1, probability 0, space 0, times 0 [ 293.345601][ T9354] CPU: 0 UID: 0 PID: 9354 Comm: syz.2.810 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 293.345643][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.345662][ T9354] Call Trace: [ 293.345672][ T9354] [ 293.345683][ T9354] dump_stack_lvl+0x16c/0x1f0 [ 293.345734][ T9354] should_fail_ex+0x512/0x640 [ 293.345769][ T9354] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 293.345816][ T9354] should_failslab+0xc2/0x120 [ 293.345845][ T9354] __kmalloc_cache_noprof+0x6a/0x3e0 [ 293.345888][ T9354] ? percpu_ref_init+0xec/0x410 [ 293.345919][ T9354] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 293.345958][ T9354] percpu_ref_init+0xec/0x410 [ 293.345985][ T9354] ? __init_waitqueue_head+0xca/0x150 [ 293.346026][ T9354] ioctx_alloc+0x3bc/0x2060 [ 293.346084][ T9354] ? find_held_lock+0x2b/0x80 [ 293.346136][ T9354] ? __pfx_ioctx_alloc+0x10/0x10 [ 293.346175][ T9354] ? __might_fault+0x13b/0x190 [ 293.346234][ T9354] __x64_sys_io_setup+0xc9/0x210 [ 293.346282][ T9354] do_syscall_64+0xcd/0x260 [ 293.346330][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.346361][ T9354] RIP: 0033:0x7fa090f8d169 [ 293.346385][ T9354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.346417][ T9354] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 293.346446][ T9354] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 293.346465][ T9354] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 293.346483][ T9354] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 293.346501][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.346518][ T9354] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 293.346561][ T9354] [ 294.357637][ T9376] svc: failed to register nfsdv3 RPC service (errno 111). [ 294.371496][ T9376] svc: failed to register nfsaclv3 RPC service (errno 111). [ 295.457024][ T9401] Invalid ELF header magic: != ELF [ 296.349319][ T9414] netlink: 'syz.3.828': attribute type 16 has an invalid length. [ 296.363633][ T9414] netlink: 326 bytes leftover after parsing attributes in process `syz.3.828'. [ 296.545491][ T9414] veth1_macvtap: left promiscuous mode [ 298.101165][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.839'. [ 298.781621][ T9479] openvswitch: netlink: IP tunnel dst address not specified [ 300.588443][ T9515] netlink: 342 bytes leftover after parsing attributes in process `syz.0.853'. [ 302.946264][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'. [ 303.078743][ T5842] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 304.288733][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 306.099636][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.877'. [ 306.726674][ T9611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 307.238924][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.876'. [ 307.353619][ T9631] Invalid ELF header magic: != ELF [ 307.745228][ T9638] FAULT_INJECTION: forcing a failure. [ 307.745228][ T9638] name failslab, interval 1, probability 0, space 0, times 0 [ 307.778481][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: syz.2.882 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 307.778530][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.778548][ T9638] Call Trace: [ 307.778558][ T9638] [ 307.778576][ T9638] dump_stack_lvl+0x16c/0x1f0 [ 307.778630][ T9638] should_fail_ex+0x512/0x640 [ 307.778665][ T9638] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 307.778712][ T9638] should_failslab+0xc2/0x120 [ 307.778741][ T9638] __kmalloc_cache_noprof+0x6a/0x3e0 [ 307.778783][ T9638] ? percpu_ref_init+0xec/0x410 [ 307.778815][ T9638] ? __pfx_free_ioctx_users+0x10/0x10 [ 307.778860][ T9638] percpu_ref_init+0xec/0x410 [ 307.778886][ T9638] ? __init_waitqueue_head+0xca/0x150 [ 307.778926][ T9638] ioctx_alloc+0x2db/0x2060 [ 307.778983][ T9638] ? find_held_lock+0x2b/0x80 [ 307.779020][ T9638] ? __pfx_ioctx_alloc+0x10/0x10 [ 307.779058][ T9638] ? __might_fault+0x13b/0x190 [ 307.779115][ T9638] __x64_sys_io_setup+0xc9/0x210 [ 307.779158][ T9638] do_syscall_64+0xcd/0x260 [ 307.779203][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.779233][ T9638] RIP: 0033:0x7fa090f8d169 [ 307.779256][ T9638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.779285][ T9638] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 307.779314][ T9638] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 307.779333][ T9638] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 307.779349][ T9638] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 307.779366][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.779382][ T9638] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 307.779419][ T9638] [ 309.895713][ T9660] Invalid ELF header magic: != ELF [ 310.643416][ T9680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.890'. [ 312.902292][ T9718] zswap: compressor not available [ 313.588585][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.902'. [ 314.611496][ T9747] Invalid ELF header magic: != ELF [ 314.959558][ T9751] netlink: 334 bytes leftover after parsing attributes in process `syz.1.905'. [ 316.427928][ T9778] Invalid ELF header magic: != ELF [ 319.540311][ T9831] zswap: compressor not available [ 321.069269][ T9857] netlink: 334 bytes leftover after parsing attributes in process `syz.2.936'. [ 321.434546][ T9852] Invalid ELF header magic: != ELF [ 321.693811][ T9862] could not allocate digest TFM handle  [ 322.367135][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.373759][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.755879][ T9909] zswap: compressor not available [ 325.691323][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 325.820103][ T9934] Invalid ELF header magic: != ELF [ 325.885090][ T9916] Process accounting resumed [ 327.726254][ T9954] zswap: compressor not available [ 327.858230][ T9935] kexec: Could not allocate control_code_buffer [ 329.215734][ T9986] Invalid ELF header magic: != ELF [ 332.548094][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.557198][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.566479][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.604119][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.618947][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.127439][T10038] chnl_net:caif_netlink_parms(): no params data found [ 334.680355][ T55] Bluetooth: hci4: command tx timeout [ 334.822304][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.851812][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.869125][T10038] bridge_slave_0: entered allmulticast mode [ 334.899411][T10038] bridge_slave_0: entered promiscuous mode [ 334.940218][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.947597][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.971445][T10038] bridge_slave_1: entered allmulticast mode [ 334.988616][T10038] bridge_slave_1: entered promiscuous mode [ 334.996436][T10082] zswap: compressor not available [ 335.391598][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.468791][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.516768][T10095] FAULT_INJECTION: forcing a failure. [ 335.516768][T10095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.593474][T10095] CPU: 1 UID: 0 PID: 10095 Comm: syz.2.990 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 335.593517][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.593535][T10095] Call Trace: [ 335.593543][T10095] [ 335.593555][T10095] dump_stack_lvl+0x16c/0x1f0 [ 335.593613][T10095] should_fail_ex+0x512/0x640 [ 335.593654][T10095] _copy_from_user+0x2e/0xd0 [ 335.593696][T10095] copy_msghdr_from_user+0x98/0x160 [ 335.593737][T10095] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 335.593791][T10095] ? __pfx__kstrtoull+0x10/0x10 [ 335.593848][T10095] ___sys_sendmsg+0xfe/0x1d0 [ 335.593891][T10095] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.593951][T10095] ? find_held_lock+0x2b/0x80 [ 335.594016][T10095] __sys_sendmmsg+0x200/0x420 [ 335.594062][T10095] ? __pfx___sys_sendmmsg+0x10/0x10 [ 335.594127][T10095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.594189][T10095] ? fput+0x70/0xf0 [ 335.594218][T10095] ? ksys_write+0x1b9/0x240 [ 335.594259][T10095] ? __pfx_ksys_write+0x10/0x10 [ 335.594296][T10095] ? rcu_is_watching+0x12/0xc0 [ 335.594338][T10095] __x64_sys_sendmmsg+0x9c/0x100 [ 335.594378][T10095] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.594417][T10095] do_syscall_64+0xcd/0x260 [ 335.594463][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.594493][T10095] RIP: 0033:0x7fa090f8d169 [ 335.594515][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.594542][T10095] RSP: 002b:00007fa091e5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.594569][T10095] RAX: ffffffffffffffda RBX: 00007fa0911a5fa0 RCX: 00007fa090f8d169 [ 335.594597][T10095] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 335.594615][T10095] RBP: 00007fa091e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.594631][T10095] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 335.594647][T10095] R13: 0000000000000000 R14: 00007fa0911a5fa0 R15: 00007ffe57866538 [ 335.594681][T10095] [ 336.094469][T10038] team0: Port device team_slave_0 added [ 336.226255][T10038] team0: Port device team_slave_1 added [ 336.392803][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.415228][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.423751][T10108] openvswitch: netlink: Unknown nsh attribute 0 [ 336.492566][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.539034][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.546051][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.598614][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.762298][ T55] Bluetooth: hci4: command tx timeout [ 336.988401][T10038] hsr_slave_0: entered promiscuous mode [ 337.010342][T10038] hsr_slave_1: entered promiscuous mode [ 337.029428][T10038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.048318][T10038] Cannot create hsr debugfs directory [ 338.557470][T10038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.779877][T10038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.820490][T10038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.840271][ T55] Bluetooth: hci4: command tx timeout [ 338.924719][T10038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.187276][T10038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.250776][T10038] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.366978][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.374308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.404012][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.411293][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.481073][T10038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.253647][T10038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.920119][ T55] Bluetooth: hci4: command tx timeout [ 341.375973][T10038] veth0_vlan: entered promiscuous mode [ 341.437382][T10038] veth1_vlan: entered promiscuous mode [ 341.551546][T10038] veth0_macvtap: entered promiscuous mode [ 341.601125][T10038] veth1_macvtap: entered promiscuous mode [ 341.667260][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.698777][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.718624][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.745299][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.770931][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.793740][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.803973][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.828553][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.863433][T10038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.910765][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.948585][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.969281][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.997061][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.031729][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.068566][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.078441][T10038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.128592][T10038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.151733][T10038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.178158][T10038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.200406][T10038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.218592][T10038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.237610][T10038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.921670][ T9603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.946389][ T9603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.148859][ T9603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.179411][ T9603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.783572][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'. [ 344.801138][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.949839][T10220] bridge_slave_1 (unregistering): left allmulticast mode [ 344.962828][T10220] bridge_slave_1 (unregistering): left promiscuous mode [ 344.995848][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.175467][T10221] FAULT_INJECTION: forcing a failure. [ 345.175467][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 345.234240][T10228] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1024'. [ 345.259126][T10221] CPU: 1 UID: 0 PID: 10221 Comm: syz.2.1022 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 345.259172][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.259190][T10221] Call Trace: [ 345.259200][T10221] [ 345.259211][T10221] dump_stack_lvl+0x16c/0x1f0 [ 345.259263][T10221] should_fail_ex+0x512/0x640 [ 345.259300][T10221] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 345.259349][T10221] should_failslab+0xc2/0x120 [ 345.259380][T10221] __kmalloc_cache_noprof+0x6a/0x3e0 [ 345.259426][T10221] ? percpu_ref_init+0xec/0x410 [ 345.259460][T10221] ? __pfx_free_ioctx_users+0x10/0x10 [ 345.259506][T10221] percpu_ref_init+0xec/0x410 [ 345.259531][T10221] ? __init_waitqueue_head+0xca/0x150 [ 345.259574][T10221] ioctx_alloc+0x2db/0x2060 [ 345.259647][T10221] ? find_held_lock+0x2b/0x80 [ 345.259691][T10221] ? __pfx_ioctx_alloc+0x10/0x10 [ 345.259734][T10221] ? __might_fault+0x13b/0x190 [ 345.259793][T10221] __x64_sys_io_setup+0xc9/0x210 [ 345.259841][T10221] do_syscall_64+0xcd/0x260 [ 345.259892][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.259925][T10221] RIP: 0033:0x7fa090f8d169 [ 345.259950][T10221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.259980][T10221] RSP: 002b:00007fa091e3d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 345.260009][T10221] RAX: ffffffffffffffda RBX: 00007fa0911a6080 RCX: 00007fa090f8d169 [ 345.260031][T10221] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 345.260050][T10221] RBP: 00007fa09100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.260068][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.260086][T10221] R13: 0000000000000000 R14: 00007fa0911a6080 R15: 00007ffe57866538 [ 345.260126][T10221] [ 346.086803][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 347.225365][T10251] sctp: [Deprecated]: syz.3.1031 (pid 10251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.225365][T10251] Use struct sctp_sack_info instead [ 348.550471][T10267] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1035'. [ 349.136950][T10282] FAULT_INJECTION: forcing a failure. [ 349.136950][T10282] name failslab, interval 1, probability 0, space 0, times 0 [ 349.233902][T10282] CPU: 1 UID: 0 PID: 10282 Comm: syz.4.1038 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 349.233950][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.233970][T10282] Call Trace: [ 349.233981][T10282] [ 349.233994][T10282] dump_stack_lvl+0x16c/0x1f0 [ 349.234047][T10282] should_fail_ex+0x512/0x640 [ 349.234086][T10282] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 349.234150][T10282] should_failslab+0xc2/0x120 [ 349.234182][T10282] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 349.234234][T10282] ? ioctx_alloc+0x1a4/0x2060 [ 349.234280][T10282] ? __lock_acquire+0xaa4/0x1ba0 [ 349.234312][T10282] ioctx_alloc+0x1a4/0x2060 [ 349.234372][T10282] ? find_held_lock+0x2b/0x80 [ 349.234414][T10282] ? __pfx_ioctx_alloc+0x10/0x10 [ 349.234458][T10282] ? __might_fault+0x13b/0x190 [ 349.234518][T10282] __x64_sys_io_setup+0xc9/0x210 [ 349.234569][T10282] do_syscall_64+0xcd/0x260 [ 349.234619][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.234652][T10282] RIP: 0033:0x7f4606b8d169 [ 349.234678][T10282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.234710][T10282] RSP: 002b:00007f46049d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 349.234741][T10282] RAX: ffffffffffffffda RBX: 00007f4606da6080 RCX: 00007f4606b8d169 [ 349.234763][T10282] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 349.234783][T10282] RBP: 00007f4606c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.234802][T10282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.234821][T10282] R13: 0000000000000000 R14: 00007f4606da6080 R15: 00007ffe77780168 [ 349.234861][T10282] [ 350.338105][T10302] Invalid ELF header magic: != ELF [ 355.100296][T10392] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 355.188049][T10378] Process accounting resumed [ 355.922258][T10407] Process accounting paused [ 356.754232][T10419] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1076'. [ 356.787847][T10424] zswap: compressor not available [ 357.042395][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1081'. [ 357.076613][T10434] team_slave_0 (unregistering): left promiscuous mode [ 357.084227][T10434] team_slave_0 (unregistering): left allmulticast mode [ 357.105175][T10434] team0: Port device team_slave_0 removed [ 359.401451][T10481] netlink: zone id is out of range [ 359.421888][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 360.349467][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 360.433268][T10502] veth0_macvtap: left promiscuous mode [ 361.044598][T10511] netlink: 'syz.0.1101': attribute type 11 has an invalid length. [ 361.058899][T10512] netlink: 'syz.0.1101': attribute type 11 has an invalid length. [ 361.066765][T10512] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1101'. [ 361.074348][T10511] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1101'. [ 362.273329][T10532] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1107'. [ 363.180871][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'. [ 363.313150][T10550] team0: Port device team_slave_0 removed [ 365.004124][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.021337][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.035527][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.046745][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.055109][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.392453][T10581] chnl_net:caif_netlink_parms(): no params data found [ 367.162844][ T5842] Bluetooth: hci3: command tx timeout [ 367.170887][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.178064][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.208059][T10581] bridge_slave_0: entered allmulticast mode [ 367.217377][T10581] bridge_slave_0: entered promiscuous mode [ 367.233222][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.242859][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.250202][T10581] bridge_slave_1: entered allmulticast mode [ 367.258404][T10581] bridge_slave_1: entered promiscuous mode [ 367.376248][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.393050][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.596730][T10581] team0: Port device team_slave_0 added [ 367.628390][T10581] team0: Port device team_slave_1 added [ 367.762754][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.774133][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.807794][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.906670][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.915708][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.931695][ T49] Process accounting resumed [ 367.949602][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.211606][T10581] hsr_slave_0: entered promiscuous mode [ 368.218181][T10581] hsr_slave_1: entered promiscuous mode [ 368.227236][T10581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.236546][T10581] Cannot create hsr debugfs directory [ 368.412164][T10649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1139'. [ 368.600246][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 368.959866][T10581] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.981895][T10581] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.022660][T10581] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.053081][T10581] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.208096][T10662] netlink: 'syz.4.1145': attribute type 3 has an invalid length. [ 369.244193][ T5842] Bluetooth: hci3: command tx timeout [ 369.274079][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.302082][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.316788][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.324029][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.391576][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.398957][ T9599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.623864][T10668] FAULT_INJECTION: forcing a failure. [ 369.623864][T10668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.651312][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.4.1147 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 369.651354][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.651373][T10668] Call Trace: [ 369.651382][T10668] [ 369.651393][T10668] dump_stack_lvl+0x16c/0x1f0 [ 369.651442][T10668] should_fail_ex+0x512/0x640 [ 369.651483][T10668] _copy_from_user+0x2e/0xd0 [ 369.651524][T10668] ____sys_sendmsg+0x607/0xc70 [ 369.651578][T10668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.651635][T10668] ? __pfx__kstrtoull+0x10/0x10 [ 369.651692][T10668] ___sys_sendmsg+0x134/0x1d0 [ 369.651736][T10668] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.651804][T10668] ? find_held_lock+0x2b/0x80 [ 369.651871][T10668] __sys_sendmmsg+0x200/0x420 [ 369.651917][T10668] ? __pfx___sys_sendmmsg+0x10/0x10 [ 369.651979][T10668] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 369.652042][T10668] ? fput+0x70/0xf0 [ 369.652073][T10668] ? ksys_write+0x1b9/0x240 [ 369.652114][T10668] ? __pfx_ksys_write+0x10/0x10 [ 369.652155][T10668] ? rcu_is_watching+0x12/0xc0 [ 369.652200][T10668] __x64_sys_sendmmsg+0x9c/0x100 [ 369.652240][T10668] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.652283][T10668] do_syscall_64+0xcd/0x260 [ 369.652331][T10668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.652363][T10668] RIP: 0033:0x7f4606b8d169 [ 369.652388][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.652418][T10668] RSP: 002b:00007f46049f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.652447][T10668] RAX: ffffffffffffffda RBX: 00007f4606da5fa0 RCX: 00007f4606b8d169 [ 369.652466][T10668] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 369.652485][T10668] RBP: 00007f46049f6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.652503][T10668] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 369.652520][T10668] R13: 0000000000000000 R14: 00007f4606da5fa0 R15: 00007ffe77780168 [ 369.652566][T10668] [ 370.213254][ T5842] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 371.114023][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.319158][ T5842] Bluetooth: hci3: command tx timeout [ 371.760107][T10581] veth0_vlan: entered promiscuous mode [ 371.813882][T10581] veth1_vlan: entered promiscuous mode [ 371.955148][T10581] veth0_macvtap: entered promiscuous mode [ 371.982943][T10581] veth1_macvtap: entered promiscuous mode [ 372.048118][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.065467][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.084378][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.110547][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.169565][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.191729][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.207527][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.218538][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.250591][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.274317][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.302270][T10581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.395316][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.406023][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.425723][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.436847][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.464522][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.482353][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.494325][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.505884][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.516838][T10581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.528230][T10581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.540680][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.568342][T10581] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.588654][T10581] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.597421][T10581] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.618815][T10581] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.099846][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.131262][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.234880][ T9603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.273448][ T9603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.409256][ T5842] Bluetooth: hci3: command tx timeout [ 373.597078][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'. [ 373.889924][T10738] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1165'. [ 374.994287][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1174'. [ 375.499834][T10780] Invalid ELF header magic: != ELF [ 376.013713][T10782] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1178'. [ 376.026455][T10790] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1180'. [ 378.479560][T10824] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1187'. [ 379.086707][T10833] cgroup: fork rejected by pids controller in /syz0 [ 379.146675][T10853] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1189'. [ 381.631799][T10933] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1198'. [ 383.480117][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1203'. [ 383.817573][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.825547][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.017265][T10988] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1208'. [ 387.840207][T10962] Process accounting paused [ 388.173020][T10980] sctp: [Deprecated]: syz.0.1204 (pid 10980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.173020][T10980] Use struct sctp_sack_info instead [ 389.015256][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.029268][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.037698][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.051863][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.067294][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.640967][T10995] chnl_net:caif_netlink_parms(): no params data found [ 390.227654][T10995] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.235213][T10995] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.255448][T10995] bridge_slave_0: entered allmulticast mode [ 390.281509][T10995] bridge_slave_0: entered promiscuous mode [ 390.337433][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.359118][T10995] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.366427][T10995] bridge_slave_1: entered allmulticast mode [ 390.399179][T10995] bridge_slave_1: entered promiscuous mode [ 390.503771][T10995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.786993][T10995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.098044][T10995] team0: Port device team_slave_0 added [ 391.120800][T10995] team0: Port device team_slave_1 added [ 391.159384][ T5842] Bluetooth: hci5: command tx timeout [ 391.391574][T10995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.413379][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.461327][T10995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.486941][T10995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.502026][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.539665][T10995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.919325][T10995] hsr_slave_0: entered promiscuous mode [ 391.938956][T10995] hsr_slave_1: entered promiscuous mode [ 391.955965][T10995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.978863][T10995] Cannot create hsr debugfs directory [ 392.330249][T11000] Process accounting resumed [ 392.493585][T10995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.628008][T10995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.696821][T10995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.877962][T10995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.238896][ T5842] Bluetooth: hci5: command tx timeout [ 393.799538][T10995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.200940][T10995] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.313287][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.320576][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.546979][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.554243][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.320410][ T5842] Bluetooth: hci5: command tx timeout [ 396.240128][T11033] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1217'. [ 396.283454][T10995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.318986][T11053] FAULT_INJECTION: forcing a failure. [ 397.318986][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 397.377631][T11053] CPU: 1 UID: 0 PID: 11053 Comm: syz.4.1221 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 397.377709][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 397.377742][T11053] Call Trace: [ 397.377760][T11053] [ 397.377780][T11053] dump_stack_lvl+0x16c/0x1f0 [ 397.377834][T11053] should_fail_ex+0x512/0x640 [ 397.377869][T11053] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 397.377925][T11053] should_failslab+0xc2/0x120 [ 397.377955][T11053] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 397.378006][T11053] ? ioctx_alloc+0x1a4/0x2060 [ 397.378060][T11053] ? __lock_acquire+0xaa4/0x1ba0 [ 397.378093][T11053] ioctx_alloc+0x1a4/0x2060 [ 397.378149][T11053] ? find_held_lock+0x2b/0x80 [ 397.378188][T11053] ? __pfx_ioctx_alloc+0x10/0x10 [ 397.378232][T11053] ? __might_fault+0x13b/0x190 [ 397.378294][T11053] __x64_sys_io_setup+0xc9/0x210 [ 397.378343][T11053] do_syscall_64+0xcd/0x260 [ 397.378394][T11053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.378426][T11053] RIP: 0033:0x7f4606b8d169 [ 397.378452][T11053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.378488][T11053] RSP: 002b:00007f46049d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 397.378517][T11053] RAX: ffffffffffffffda RBX: 00007f4606da6080 RCX: 00007f4606b8d169 [ 397.378537][T11053] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 397.378557][T11053] RBP: 00007f4606c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 397.378576][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.378594][T11053] R13: 0000000000000000 R14: 00007f4606da6080 R15: 00007ffe77780168 [ 397.378635][T11053] [ 397.439060][ T5842] Bluetooth: hci5: command tx timeout [ 397.719706][T10995] veth0_vlan: entered promiscuous mode [ 397.757078][T10995] veth1_vlan: entered promiscuous mode [ 397.833529][T10995] veth0_macvtap: entered promiscuous mode [ 397.884891][T10995] veth1_macvtap: entered promiscuous mode [ 397.917333][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.938288][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.965879][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.987638][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.020443][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.034504][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.052839][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.082856][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.096668][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.116603][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.144223][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.169676][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.195990][T10995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.233191][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.252069][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.271493][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.298903][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.324023][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.344513][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.395296][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.405862][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.433676][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.444816][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.454837][T10995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.465660][T10995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.480557][T10995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.552486][T10995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.564611][T10995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.588751][T10995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.618596][T10995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.937248][ T5842] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 399.415724][ T9599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.678561][ T9599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.420498][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.428413][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.370005][T11088] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1229'. [ 404.136184][T11115] FAULT_INJECTION: forcing a failure. [ 404.136184][T11115] name fail_futex, interval 1, probability 0, space 0, times 0 [ 404.210332][T11115] CPU: 1 UID: 0 PID: 11115 Comm: syz.5.1234 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 404.210375][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.210393][T11115] Call Trace: [ 404.210404][T11115] [ 404.210415][T11115] dump_stack_lvl+0x16c/0x1f0 [ 404.210466][T11115] should_fail_ex+0x512/0x640 [ 404.210516][T11115] get_futex_key+0x49e/0x1000 [ 404.210567][T11115] ? __pfx_get_futex_key+0x10/0x10 [ 404.210624][T11115] futex_wake+0xe7/0x4e0 [ 404.210652][T11115] ? rcu_is_watching+0x12/0xc0 [ 404.210696][T11115] ? __pfx_futex_wake+0x10/0x10 [ 404.210744][T11115] do_futex+0x1e3/0x350 [ 404.210787][T11115] ? __pfx_do_futex+0x10/0x10 [ 404.210827][T11115] ? __might_fault+0xe3/0x190 [ 404.210888][T11115] mm_release+0x24e/0x300 [ 404.210929][T11115] do_exit+0x898/0x2c30 [ 404.210954][T11115] ? __pfx_futex_wake_mark+0x10/0x10 [ 404.210992][T11115] ? __pfx_do_exit+0x10/0x10 [ 404.211018][T11115] ? do_raw_spin_lock+0x12c/0x2b0 [ 404.211052][T11115] ? find_held_lock+0x2b/0x80 [ 404.211099][T11115] do_group_exit+0xd3/0x2a0 [ 404.211130][T11115] get_signal+0x2673/0x26d0 [ 404.211194][T11115] ? __pfx_get_signal+0x10/0x10 [ 404.211236][T11115] ? do_futex+0x122/0x350 [ 404.211280][T11115] ? __pfx_do_futex+0x10/0x10 [ 404.211329][T11115] arch_do_signal_or_restart+0x8f/0x7d0 [ 404.211380][T11115] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 404.211442][T11115] ? rcu_is_watching+0x12/0xc0 [ 404.211489][T11115] syscall_exit_to_user_mode+0x150/0x2a0 [ 404.211544][T11115] do_syscall_64+0xda/0x260 [ 404.211592][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.211624][T11115] RIP: 0033:0x7f3be9d8d169 [ 404.211648][T11115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.211679][T11115] RSP: 002b:00007f3be7bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 404.211709][T11115] RAX: fffffffffffffe00 RBX: 00007f3be9fa6168 RCX: 00007f3be9d8d169 [ 404.211729][T11115] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3be9fa6168 [ 404.211747][T11115] RBP: 00007f3be9fa6160 R08: 0000000000000000 R09: 0000000000000000 [ 404.211764][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3be9fa616c [ 404.211783][T11115] R13: 0000000000000000 R14: 00007ffeceee1a90 R15: 00007ffeceee1b78 [ 404.211822][T11115] [ 404.358190][T11121] FAULT_INJECTION: forcing a failure. [ 404.358190][T11121] name failslab, interval 1, probability 0, space 0, times 0 [ 404.514020][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.6.1236 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 404.514065][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.514084][T11121] Call Trace: [ 404.514094][T11121] [ 404.514106][T11121] dump_stack_lvl+0x16c/0x1f0 [ 404.514155][T11121] should_fail_ex+0x512/0x640 [ 404.514191][T11121] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 404.514254][T11121] should_failslab+0xc2/0x120 [ 404.514284][T11121] __kmalloc_cache_noprof+0x6a/0x3e0 [ 404.514328][T11121] ? percpu_ref_init+0xec/0x410 [ 404.514361][T11121] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 404.514406][T11121] percpu_ref_init+0xec/0x410 [ 404.514434][T11121] ? __init_waitqueue_head+0xca/0x150 [ 404.514476][T11121] ioctx_alloc+0x3bc/0x2060 [ 404.514535][T11121] ? find_held_lock+0x2b/0x80 [ 404.514573][T11121] ? __pfx_ioctx_alloc+0x10/0x10 [ 404.514614][T11121] ? __might_fault+0x13b/0x190 [ 404.514669][T11121] __x64_sys_io_setup+0xc9/0x210 [ 404.514711][T11121] do_syscall_64+0xcd/0x260 [ 404.514756][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.514785][T11121] RIP: 0033:0x7f508b78d169 [ 404.514809][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.514838][T11121] RSP: 002b:00007f508c509038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 404.514868][T11121] RAX: ffffffffffffffda RBX: 00007f508b9a6080 RCX: 00007f508b78d169 [ 404.514887][T11121] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 404.514905][T11121] RBP: 00007f508b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 404.514922][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.514940][T11121] R13: 0000000000000000 R14: 00007f508b9a6080 R15: 00007ffe2bbe60a8 [ 404.514979][T11121] [ 405.233091][ T5842] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 407.986612][T11153] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1245'. [ 409.480404][T11152] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 410.781870][T10846] syz.0.1188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 410.897364][T10846] CPU: 1 UID: 0 PID: 10846 Comm: syz.0.1188 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 410.897409][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.897427][T10846] Call Trace: [ 410.897437][T10846] [ 410.897449][T10846] dump_stack_lvl+0x16c/0x1f0 [ 410.897499][T10846] dump_header+0x101/0x930 [ 410.897535][T10846] oom_kill_process+0x270/0xa60 [ 410.897564][T10846] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 410.897616][T10846] out_of_memory+0x350/0x1700 [ 410.897648][T10846] ? __lock_acquire+0xaa4/0x1ba0 [ 410.897684][T10846] ? __pfx_out_of_memory+0x10/0x10 [ 410.897729][T10846] mem_cgroup_out_of_memory+0x205/0x270 [ 410.897768][T10846] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 410.897820][T10846] ? do_raw_spin_unlock+0x172/0x230 [ 410.897864][T10846] try_charge_memcg+0x8ca/0xfa0 [ 410.897903][T10846] ? __pfx_try_charge_memcg+0x10/0x10 [ 410.897934][T10846] ? __print_lock_name+0x31/0xe0 [ 410.897975][T10846] ? rcu_read_unlock+0x17/0x60 [ 410.898018][T10846] charge_memcg+0x8a/0x230 [ 410.898050][T10846] __mem_cgroup_charge+0x2b/0x1e0 [ 410.898087][T10846] shmem_alloc_and_add_folio+0x514/0xc20 [ 410.898147][T10846] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 410.898201][T10846] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 410.898260][T10846] shmem_get_folio_gfp+0x687/0x1530 [ 410.898317][T10846] ? __lock_acquire+0xaa4/0x1ba0 [ 410.898346][T10846] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 410.898397][T10846] ? __pte_offset_map_lock+0x155/0x2f0 [ 410.898440][T10846] shmem_write_begin+0x160/0x300 [ 410.898498][T10846] ? __pfx_shmem_write_begin+0x10/0x10 [ 410.898551][T10846] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 410.898605][T10846] ? __pfx_timestamp_truncate+0x10/0x10 [ 410.898664][T10846] generic_perform_write+0x3cd/0x930 [ 410.898727][T10846] ? __pfx_generic_perform_write+0x10/0x10 [ 410.898779][T10846] ? inode_needs_update_time.part.0+0x191/0x270 [ 410.898822][T10846] shmem_file_write_iter+0x10e/0x140 [ 410.898861][T10846] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 410.898894][T10846] __kernel_write_iter+0x317/0xa90 [ 410.898944][T10846] ? __pfx___kernel_write_iter+0x10/0x10 [ 410.898988][T10846] ? __up_read+0x1f8/0x750 [ 410.899028][T10846] ? dump_user_range+0x73d/0xb30 [ 410.899081][T10846] dump_user_range+0x418/0xb30 [ 410.899134][T10846] ? __pfx_dump_user_range+0x10/0x10 [ 410.899180][T10846] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 410.899228][T10846] ? __pfx_writenote+0x10/0x10 [ 410.899286][T10846] elf_core_dump+0x288a/0x3a90 [ 410.899356][T10846] ? __pfx_elf_core_dump+0x10/0x10 [ 410.899400][T10846] ? kasan_save_stack+0x42/0x60 [ 410.899445][T10846] ? kasan_save_stack+0x33/0x60 [ 410.899489][T10846] ? kasan_save_track+0x14/0x30 [ 410.899533][T10846] ? __kasan_kmalloc+0xaa/0xb0 [ 410.899583][T10846] ? do_coredump+0x17aa/0x4480 [ 410.899622][T10846] ? get_signal+0x22e3/0x26d0 [ 410.899661][T10846] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 410.899717][T10846] ? 0xffffffffff600000 [ 410.899816][T10846] ? do_coredump+0x3183/0x4480 [ 410.899855][T10846] do_coredump+0x3183/0x4480 [ 410.899914][T10846] ? __pfx_do_coredump+0x10/0x10 [ 410.899959][T10846] ? stack_trace_save+0x8e/0xc0 [ 410.900000][T10846] ? __pfx_stack_trace_save+0x10/0x10 [ 410.900042][T10846] ? stack_depot_save_flags+0x28/0xa50 [ 410.900083][T10846] ? __lock_acquire+0xaa4/0x1ba0 [ 410.900122][T10846] ? __kasan_slab_free+0x51/0x70 [ 410.900167][T10846] ? kmem_cache_free+0x2d4/0x4d0 [ 410.900209][T10846] ? __sigqueue_free+0xba/0x2a0 [ 410.900235][T10846] ? get_signal+0xcba/0x26d0 [ 410.900273][T10846] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 410.900380][T10846] ? proc_coredump_connector+0x2d1/0x4f0 [ 410.900421][T10846] ? __pfx_proc_coredump_connector+0x10/0x10 [ 410.900471][T10846] ? rcu_is_watching+0x12/0xc0 [ 410.900518][T10846] get_signal+0x22e3/0x26d0 [ 410.900577][T10846] ? force_sig_fault+0xc4/0x100 [ 410.900622][T10846] ? __pfx_get_signal+0x10/0x10 [ 410.900678][T10846] arch_do_signal_or_restart+0x8f/0x7d0 [ 410.900725][T10846] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 410.900762][T10846] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 410.900838][T10846] irqentry_exit_to_user_mode+0x13f/0x280 [ 410.900889][T10846] asm_exc_page_fault+0x26/0x30 [ 410.900920][T10846] RIP: 0033:0x21000 [ 410.900949][T10846] Code: Unable to access opcode bytes at 0x20fd6. [ 410.900963][T10846] RSP: 002b:000000000000000a EFLAGS: 00010296 [ 410.900986][T10846] RAX: 000000000000000a RBX: 00007f274bba6160 RCX: 00007f274b98d169 [ 410.901005][T10846] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 410.901023][T10846] RBP: 00007f274ba0e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 410.901041][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.901059][T10846] R13: 0000000000000000 R14: 00007f274bba6160 R15: 00007ffc9ed66e68 [ 410.901101][T10846] [ 411.367278][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.528789][T10846] memory: usage 307200kB, limit 307200kB, failcnt 23890 [ 411.535806][T10846] memory+swap: usage 432028kB, limit 9007199254740988kB, failcnt 0 [ 411.543833][T10846] kmem: usage 3064kB, limit 9007199254740988kB, failcnt 0 [ 411.551080][T10846] Memory cgroup stats for /syz0: [ 411.551379][T10846] cache 311259136 [ 411.560256][T10846] rss 40960 [ 411.563400][T10846] rss_huge 0 [ 411.566629][T10846] shmem 311107584 [ 411.570445][T10846] mapped_file 0 [ 411.573938][T10846] dirty 0 [ 411.577336][T10846] writeback 0 [ 411.580780][T10846] workingset_refault_anon 3812 [ 411.585574][T10846] workingset_refault_file 1498 [ 411.590434][T10846] swap 127827968 [ 411.594012][T10846] swapcached 131072 [ 411.597848][T10846] pgpgin 502930 [ 411.601378][T10846] pgpgout 430985 [ 411.604950][T10846] pgfault 278923 [ 411.608581][T10846] pgmajfault 667 [ 411.612156][T10846] inactive_anon 71774208 [ 411.616426][T10846] active_anon 239243264 [ 411.620675][T10846] inactive_file 0 [ 411.624339][T10846] active_file 0 [ 411.628246][T10846] unevictable 0 [ 411.631798][T10846] hierarchical_memory_limit 314572800 [ 411.637199][T10846] hierarchical_memsw_limit 9223372036854771712 [ 411.643506][T10846] total_cache 311259136 [ 411.647700][T10846] total_rss 40960 [ 411.651478][T10846] total_rss_huge 0 [ 411.655231][T10846] total_shmem 311107584 [ 411.659448][T10846] total_mapped_file 0 [ 411.663461][T10846] total_dirty 0 [ 411.667037][T10846] total_writeback 0 [ 411.670938][T10846] total_workingset_refault_anon 3812 [ 411.676253][T10846] total_workingset_refault_file 1498 [ 411.682053][T10846] total_swap 127827968 [ 411.686150][T10846] total_swapcached 131072 [ 411.690569][T10846] total_pgpgin 502930 [ 411.694581][T10846] total_pgpgout 430985 [ 411.698767][T10846] total_pgfault 278923 [ 411.702867][T10846] total_pgmajfault 667 [ 411.706965][T10846] total_inactive_anon 71774208 [ 411.711845][T10846] total_active_anon 239243264 [ 411.716552][T10846] total_inactive_file 0 [ 411.721232][T10846] total_active_file 0 [ 411.725246][T10846] total_unevictable 0 [ 411.729814][T10846] anon_cost 0 [ 411.733135][T10846] file_cost 0 [ 411.736445][T10846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1188,pid=10862,uid=0 [ 411.751913][T10846] Memory cgroup out of memory: Killed process 10862 (syz.0.1188) total-vm:98736kB, anon-rss:924kB, file-rss:30932kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 411.799592][T11168] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1248'. [ 412.355627][T10845] syz.0.1188 (10845) used greatest stack depth: 19112 bytes left [ 413.006704][ T5842] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 414.058704][ T32] oom_reaper: reaped process 10862 (syz.0.1188), now anon-rss:24kB, file-rss:29696kB, shmem-rss:0kB [ 414.392473][T11202] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1257'. [ 414.471543][T11195] FAULT_INJECTION: forcing a failure. [ 414.471543][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 414.484342][T11195] CPU: 0 UID: 0 PID: 11195 Comm: syz.4.1255 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 414.484388][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.484408][T11195] Call Trace: [ 414.484418][T11195] [ 414.484430][T11195] dump_stack_lvl+0x16c/0x1f0 [ 414.484482][T11195] should_fail_ex+0x512/0x640 [ 414.484527][T11195] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 414.484582][T11195] should_failslab+0xc2/0x120 [ 414.484613][T11195] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 414.484663][T11195] ? ioctx_alloc+0x1a4/0x2060 [ 414.484708][T11195] ? __lock_acquire+0xaa4/0x1ba0 [ 414.484740][T11195] ioctx_alloc+0x1a4/0x2060 [ 414.484799][T11195] ? find_held_lock+0x2b/0x80 [ 414.484841][T11195] ? __pfx_ioctx_alloc+0x10/0x10 [ 414.484884][T11195] ? __might_fault+0x13b/0x190 [ 414.484945][T11195] __x64_sys_io_setup+0xc9/0x210 [ 414.484994][T11195] do_syscall_64+0xcd/0x260 [ 414.485045][T11195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.485077][T11195] RIP: 0033:0x7f4606b8d169 [ 414.485099][T11195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.485129][T11195] RSP: 002b:00007f46049d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 414.485157][T11195] RAX: ffffffffffffffda RBX: 00007f4606da6080 RCX: 00007f4606b8d169 [ 414.485178][T11195] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 414.485197][T11195] RBP: 00007f4606c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.485216][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.485234][T11195] R13: 0000000000000000 R14: 00007f4606da6080 R15: 00007ffe77780168 [ 414.485273][T11195] [ 414.661503][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.361954][T10836] syz.0.1188 (10836) used greatest stack depth: 19096 bytes left [ 416.270113][T11222] zswap: compressor not available [ 416.742825][T10841] syz.0.1188 (10841) used greatest stack depth: 18152 bytes left [ 416.828365][ T5842] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 418.139817][T11242] FAULT_INJECTION: forcing a failure. [ 418.139817][T11242] name failslab, interval 1, probability 0, space 0, times 0 [ 418.208598][T11242] CPU: 1 UID: 0 PID: 11242 Comm: syz.4.1266 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 418.208648][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.208669][T11242] Call Trace: [ 418.208680][T11242] [ 418.208692][T11242] dump_stack_lvl+0x16c/0x1f0 [ 418.208745][T11242] should_fail_ex+0x512/0x640 [ 418.208788][T11242] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 418.208837][T11242] should_failslab+0xc2/0x120 [ 418.208866][T11242] __kmalloc_cache_noprof+0x6a/0x3e0 [ 418.208911][T11242] ? percpu_ref_init+0xec/0x410 [ 418.208943][T11242] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 418.208985][T11242] percpu_ref_init+0xec/0x410 [ 418.209013][T11242] ? __init_waitqueue_head+0xca/0x150 [ 418.209057][T11242] ioctx_alloc+0x3bc/0x2060 [ 418.209118][T11242] ? find_held_lock+0x2b/0x80 [ 418.209158][T11242] ? __pfx_ioctx_alloc+0x10/0x10 [ 418.209200][T11242] ? __might_fault+0x13b/0x190 [ 418.209260][T11242] __x64_sys_io_setup+0xc9/0x210 [ 418.209307][T11242] do_syscall_64+0xcd/0x260 [ 418.209358][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.209390][T11242] RIP: 0033:0x7f4606b8d169 [ 418.209416][T11242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.209448][T11242] RSP: 002b:00007f46049d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 418.209479][T11242] RAX: ffffffffffffffda RBX: 00007f4606da6080 RCX: 00007f4606b8d169 [ 418.209500][T11242] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 418.209520][T11242] RBP: 00007f4606c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 418.209539][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.209557][T11242] R13: 0000000000000000 R14: 00007f4606da6080 R15: 00007ffe77780168 [ 418.209598][T11242] [ 418.664879][T11249] netlink: 146 bytes leftover after parsing attributes in process `syz.5.1267'. [ 419.814506][T11256] random: crng reseeded on system resumption [ 419.865172][T11260] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 419.903051][T11261] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1269'. [ 420.241230][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1272'. [ 421.543754][ T5842] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 423.546832][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1280'. [ 423.665735][T11282] Process accounting paused [ 425.554097][ T5842] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 428.976540][T11379] FAULT_INJECTION: forcing a failure. [ 428.976540][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 429.001996][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.4.1296 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 429.002043][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.002063][T11379] Call Trace: [ 429.002073][T11379] [ 429.002086][T11379] dump_stack_lvl+0x16c/0x1f0 [ 429.002137][T11379] should_fail_ex+0x512/0x640 [ 429.002211][T11379] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 429.002264][T11379] should_failslab+0xc2/0x120 [ 429.002296][T11379] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 429.002346][T11379] ? ioctx_alloc+0x1a4/0x2060 [ 429.002392][T11379] ? __lock_acquire+0xaa4/0x1ba0 [ 429.002425][T11379] ioctx_alloc+0x1a4/0x2060 [ 429.002485][T11379] ? find_held_lock+0x2b/0x80 [ 429.002526][T11379] ? __pfx_ioctx_alloc+0x10/0x10 [ 429.002568][T11379] ? __might_fault+0x13b/0x190 [ 429.002629][T11379] __x64_sys_io_setup+0xc9/0x210 [ 429.002685][T11379] do_syscall_64+0xcd/0x260 [ 429.002736][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.002770][T11379] RIP: 0033:0x7f4606b8d169 [ 429.002796][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.002827][T11379] RSP: 002b:00007f46049d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 429.002858][T11379] RAX: ffffffffffffffda RBX: 00007f4606da6080 RCX: 00007f4606b8d169 [ 429.002880][T11379] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 429.002899][T11379] RBP: 00007f4606c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 429.002919][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.002938][T11379] R13: 0000000000000000 R14: 00007f4606da6080 R15: 00007ffe77780168 [ 429.002979][T11379] [ 429.181152][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.647788][T11402] netlink: 262 bytes leftover after parsing attributes in process `syz.4.1301'. [ 429.971591][ T5842] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 430.095018][T11400] Invalid ELF header magic: != ELF [ 430.801186][T11418] sctp: [Deprecated]: syz.0.1304 (pid 11418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.801186][T11418] Use struct sctp_sack_info instead [ 432.694616][T11434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 432.740061][T11434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.780478][T11434] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 432.827595][T11434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.883927][T11434] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 432.910446][T11434] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 432.943593][T11434] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 432.972477][T11434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.992601][T11434] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 433.032156][T11434] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 433.125997][T11434] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 433.154154][T11434] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 433.201926][T11434] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 434.009320][T11464] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 434.037855][ T5842] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 434.448649][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 434.758652][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 434.842119][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 434.868689][T11472] FAULT_INJECTION: forcing a failure. [ 434.868689][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 434.881938][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.5.1322 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 434.881981][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 434.882000][T11472] Call Trace: [ 434.882009][T11472] [ 434.882021][T11472] dump_stack_lvl+0x16c/0x1f0 [ 434.882083][T11472] should_fail_ex+0x512/0x640 [ 434.882120][T11472] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 434.882168][T11472] should_failslab+0xc2/0x120 [ 434.882198][T11472] __kmalloc_cache_noprof+0x6a/0x3e0 [ 434.882243][T11472] ? percpu_ref_init+0xec/0x410 [ 434.882275][T11472] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 434.882316][T11472] percpu_ref_init+0xec/0x410 [ 434.882343][T11472] ? __init_waitqueue_head+0xca/0x150 [ 434.882387][T11472] ioctx_alloc+0x3bc/0x2060 [ 434.882446][T11472] ? find_held_lock+0x2b/0x80 [ 434.882485][T11472] ? __pfx_ioctx_alloc+0x10/0x10 [ 434.882526][T11472] ? __might_fault+0x13b/0x190 [ 434.882584][T11472] __x64_sys_io_setup+0xc9/0x210 [ 434.882633][T11472] do_syscall_64+0xcd/0x260 [ 434.882680][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.882712][T11472] RIP: 0033:0x7f3be9d8d169 [ 434.882736][T11472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.882768][T11472] RSP: 002b:00007f3beab1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 434.882799][T11472] RAX: ffffffffffffffda RBX: 00007f3be9fa6080 RCX: 00007f3be9d8d169 [ 434.882819][T11472] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 434.882837][T11472] RBP: 00007f3be9e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 434.882855][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.882872][T11472] R13: 0000000000000000 R14: 00007f3be9fa6080 R15: 00007ffeceee1b78 [ 434.882912][T11472] [ 435.073958][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.080541][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.199179][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 435.985732][T11499] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1330'. [ 436.596103][ T55] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 436.838644][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.158630][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 437.159594][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 437.240373][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 438.485467][T11540] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1343'. [ 438.530519][T11541] FAULT_INJECTION: forcing a failure. [ 438.530519][T11541] name failslab, interval 1, probability 0, space 0, times 0 [ 438.583364][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.5.1342 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 438.583410][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.583430][T11541] Call Trace: [ 438.583440][T11541] [ 438.583452][T11541] dump_stack_lvl+0x16c/0x1f0 [ 438.583505][T11541] should_fail_ex+0x512/0x640 [ 438.583542][T11541] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 438.583592][T11541] should_failslab+0xc2/0x120 [ 438.583625][T11541] __kmalloc_cache_noprof+0x6a/0x3e0 [ 438.583666][T11541] ? percpu_ref_init+0xec/0x410 [ 438.583700][T11541] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 438.583743][T11541] percpu_ref_init+0xec/0x410 [ 438.583773][T11541] ? __init_waitqueue_head+0xca/0x150 [ 438.583818][T11541] ioctx_alloc+0x3bc/0x2060 [ 438.583893][T11541] ? find_held_lock+0x2b/0x80 [ 438.583935][T11541] ? __pfx_ioctx_alloc+0x10/0x10 [ 438.583977][T11541] ? __might_fault+0x13b/0x190 [ 438.584039][T11541] __x64_sys_io_setup+0xc9/0x210 [ 438.584089][T11541] do_syscall_64+0xcd/0x260 [ 438.584141][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.584173][T11541] RIP: 0033:0x7f3be9d8d169 [ 438.584199][T11541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.584231][T11541] RSP: 002b:00007f3beab1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 438.584261][T11541] RAX: ffffffffffffffda RBX: 00007f3be9fa6080 RCX: 00007f3be9d8d169 [ 438.584283][T11541] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 438.584303][T11541] RBP: 00007f3be9e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.584322][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.584341][T11541] R13: 0000000000000000 R14: 00007f3be9fa6080 R15: 00007ffeceee1b78 [ 438.584382][T11541] [ 439.247971][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.247995][T11525] Bluetooth: hci4: command 0x0c1a tx timeout [ 439.328993][T11525] Bluetooth: hci5: command 0x0c1a tx timeout [ 439.772630][T11525] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 441.530770][T11598] block2mtd: illegal erase size [ 442.205429][T11611] FAULT_INJECTION: forcing a failure. [ 442.205429][T11611] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 442.259482][T11611] CPU: 0 UID: 0 PID: 11611 Comm: syz.4.1366 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 442.259529][T11611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 442.259548][T11611] Call Trace: [ 442.259558][T11611] [ 442.259570][T11611] dump_stack_lvl+0x16c/0x1f0 [ 442.259623][T11611] should_fail_ex+0x512/0x640 [ 442.259668][T11611] should_fail_alloc_page+0xe7/0x130 [ 442.259701][T11611] prepare_alloc_pages+0x3c2/0x610 [ 442.259742][T11611] ? rcu_is_watching+0x12/0xc0 [ 442.259787][T11611] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 442.259849][T11611] ? __lock_acquire+0x5ca/0x1ba0 [ 442.259883][T11611] ? xas_create+0x1d7/0x1460 [ 442.259934][T11611] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 442.260009][T11611] ? __lock_acquire+0x5ca/0x1ba0 [ 442.260039][T11611] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 442.260077][T11611] ? policy_nodemask+0xea/0x4e0 [ 442.260111][T11611] alloc_pages_mpol+0x1fb/0x550 [ 442.260144][T11611] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 442.260178][T11611] ? filemap_get_entry+0x1a7/0x3b0 [ 442.260232][T11611] folio_alloc_noprof+0x20/0x2d0 [ 442.260269][T11611] filemap_alloc_folio_noprof+0x3a1/0x470 [ 442.260321][T11611] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 442.260373][T11611] ? rcu_is_watching+0x12/0xc0 [ 442.260421][T11611] __filemap_get_folio+0x5e9/0xc10 [ 442.260467][T11611] ioctx_alloc+0x761/0x2060 [ 442.260534][T11611] ? __pfx_ioctx_alloc+0x10/0x10 [ 442.260576][T11611] ? __might_fault+0x13b/0x190 [ 442.260639][T11611] __x64_sys_io_setup+0xc9/0x210 [ 442.260689][T11611] do_syscall_64+0xcd/0x260 [ 442.260738][T11611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.260771][T11611] RIP: 0033:0x7f4606b8d169 [ 442.260796][T11611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.260828][T11611] RSP: 002b:00007f46049d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 442.260858][T11611] RAX: ffffffffffffffda RBX: 00007f4606da6080 RCX: 00007f4606b8d169 [ 442.260879][T11611] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 442.260899][T11611] RBP: 00007f4606c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 442.260918][T11611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.260937][T11611] R13: 0000000000000000 R14: 00007f4606da6080 R15: 00007ffe77780168 [ 442.260978][T11611] [ 442.506855][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.607123][T11525] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 444.182654][T11525] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 445.254981][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.270133][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.804602][T11525] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 447.993868][T11707] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1392'. [ 448.793528][T11733] Invalid ELF header magic: != ELF [ 450.737712][T11525] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 453.895802][T11806] Process accounting resumed [ 454.452860][T11525] Bluetooth: hci4: unexpected event 0x1d length: 6 > 5 [ 455.940846][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1419'. [ 457.362415][T11867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1432'. [ 459.982498][T11916] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:8 is already present [ 461.079550][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1447'. [ 462.582644][T11950] futex_wake_op: syz.0.1453 tries to shift op by 64; fix this program [ 470.304385][T12053] Process accounting resumed [ 471.149930][T12098] Invalid ELF header magic: != ELF [ 475.699267][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1533'. [ 475.798494][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1535'. [ 475.808270][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1535'. [ 476.897722][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1543'. [ 478.092310][T12244] FAULT_INJECTION: forcing a failure. [ 478.092310][T12244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.177186][T12244] CPU: 0 UID: 0 PID: 12244 Comm: syz.5.1549 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 478.177228][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 478.177247][T12244] Call Trace: [ 478.177257][T12244] [ 478.177268][T12244] dump_stack_lvl+0x16c/0x1f0 [ 478.177319][T12244] should_fail_ex+0x512/0x640 [ 478.177360][T12244] _copy_from_user+0x2e/0xd0 [ 478.177400][T12244] __x64_sys_mq_notify+0xde/0x170 [ 478.177441][T12244] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 478.177485][T12244] ? rcu_is_watching+0x12/0xc0 [ 478.177526][T12244] do_syscall_64+0xcd/0x260 [ 478.177573][T12244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.177603][T12244] RIP: 0033:0x7f3be9d8d169 [ 478.177627][T12244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.177656][T12244] RSP: 002b:00007f3beab3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 478.177685][T12244] RAX: ffffffffffffffda RBX: 00007f3be9fa5fa0 RCX: 00007f3be9d8d169 [ 478.177704][T12244] RDX: 0000000000000000 RSI: 0000200000001100 RDI: ffffffffffffffff [ 478.177722][T12244] RBP: 00007f3beab3f090 R08: 0000000000000000 R09: 0000000000000000 [ 478.177740][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.177758][T12244] R13: 0000000000000001 R14: 00007f3be9fa5fa0 R15: 00007ffeceee1b78 [ 478.177797][T12244] [ 481.389352][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1559'. [ 481.814400][T12309] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 482.441575][T12324] sctp: [Deprecated]: syz.6.1567 (pid 12324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.441575][T12324] Use struct sctp_sack_info instead [ 482.879318][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 482.908952][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 482.966536][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 483.048202][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 483.098759][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 483.154233][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 483.168862][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 483.178148][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 483.210231][T12333] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1569'. [ 484.143535][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.297036][T12356] bridge_slave_1 (unregistering): left allmulticast mode [ 484.313300][T12356] bridge_slave_1 (unregistering): left promiscuous mode [ 484.322457][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.684773][T12359] Process accounting paused [ 486.032894][T12387] futex_wake_op: syz.6.1582 tries to shift op by 64; fix this program [ 488.236166][T12439] Invalid ELF header magic: != ELF [ 494.093729][T12523] __nla_validate_parse: 58 callbacks suppressed [ 494.093755][T12523] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1618'. [ 494.917133][T12536] could not allocate digest TFM handle [ 497.810253][T12566] FAULT_INJECTION: forcing a failure. [ 497.810253][T12566] name failslab, interval 1, probability 0, space 0, times 0 [ 497.865275][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.5.1628 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 497.865318][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.865337][T12566] Call Trace: [ 497.865347][T12566] [ 497.865359][T12566] dump_stack_lvl+0x16c/0x1f0 [ 497.865409][T12566] should_fail_ex+0x512/0x640 [ 497.865444][T12566] ? __kmalloc_noprof+0xbf/0x510 [ 497.865494][T12566] ? sk_prot_alloc+0x1a8/0x2a0 [ 497.865540][T12566] should_failslab+0xc2/0x120 [ 497.865580][T12566] __kmalloc_noprof+0xd2/0x510 [ 497.865627][T12566] ? evm_inode_alloc_security+0x49/0xc0 [ 497.865676][T12566] ? security_inode_alloc+0xcf/0x2b0 [ 497.865734][T12566] sk_prot_alloc+0x1a8/0x2a0 [ 497.865790][T12566] sk_alloc+0x36/0xc20 [ 497.865831][T12566] __netlink_create+0x5e/0x2c0 [ 497.865873][T12566] __netlink_kernel_create+0xed/0x750 [ 497.865924][T12566] ? __pfx___netlink_kernel_create+0x10/0x10 [ 497.865976][T12566] ? proc_create_reg+0xe3/0x180 [ 497.866019][T12566] xfrm_user_net_init+0xc6/0x190 [ 497.866067][T12566] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 497.866116][T12566] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 497.866166][T12566] ? __pfx_tls_init_net+0x10/0x10 [ 497.866202][T12566] ? tls_proc_init+0x58/0x70 [ 497.866252][T12566] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 497.866305][T12566] ops_init+0x1df/0x5f0 [ 497.866355][T12566] setup_net+0x21e/0x850 [ 497.866403][T12566] ? __pfx_setup_net+0x10/0x10 [ 497.866446][T12566] ? lockdep_init_map_type+0x5c/0x280 [ 497.866479][T12566] ? __pfx_down_read_killable+0x10/0x10 [ 497.866514][T12566] ? debug_mutex_init+0x37/0x70 [ 497.866630][T12566] copy_net_ns+0x2a6/0x5f0 [ 497.866690][T12566] create_new_namespaces+0x3ea/0xad0 [ 497.866761][T12566] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 497.866816][T12566] ksys_unshare+0x45b/0xa40 [ 497.866869][T12566] ? __pfx_ksys_unshare+0x10/0x10 [ 497.866942][T12566] __x64_sys_unshare+0x31/0x40 [ 497.867001][T12566] do_syscall_64+0xcd/0x260 [ 497.867052][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.867084][T12566] RIP: 0033:0x7f3be9d8d169 [ 497.867110][T12566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.867142][T12566] RSP: 002b:00007f3beab3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 497.867172][T12566] RAX: ffffffffffffffda RBX: 00007f3be9fa5fa0 RCX: 00007f3be9d8d169 [ 497.867193][T12566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 497.867212][T12566] RBP: 00007f3be9e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 497.867231][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.867248][T12566] R13: 0000000000000000 R14: 00007f3be9fa5fa0 R15: 00007ffeceee1b78 [ 497.867340][T12566] [ 498.561299][T12571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1630'. [ 499.539536][T12577] Process accounting resumed [ 499.650007][ T31] INFO: task syz.3.1040:10284 blocked for more than 143 seconds. [ 499.657854][ T31] Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 [ 499.692792][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.723489][ T31] task:syz.3.1040 state:D stack:27704 pid:10284 tgid:10283 ppid:5847 task_flags:0x400140 flags:0x00000004 [ 499.778590][ T31] Call Trace: [ 499.781966][ T31] [ 499.784939][ T31] __schedule+0x116f/0x5de0 [ 499.810031][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 499.815058][ T31] ? __pfx___schedule+0x10/0x10 [ 499.838517][ T31] ? find_held_lock+0x2b/0x80 [ 499.858475][ T31] ? schedule+0x2d7/0x3a0 [ 499.873104][ T31] schedule+0xe7/0x3a0 [ 499.877261][ T31] schedule_preempt_disabled+0x13/0x30 [ 499.904653][ T31] __mutex_lock+0x6c7/0xb90 [ 499.920825][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 499.958675][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 499.963801][ T31] ? __nla_validate_parse+0x600/0x2880 [ 499.988509][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 499.994386][ T31] ? nfsd_nl_version_set_doit+0xc4/0x7a0 [ 500.021183][ T31] nfsd_nl_version_set_doit+0xc4/0x7a0 [ 500.038607][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 500.044754][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 500.067166][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 500.084890][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 500.091789][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 500.102674][ T31] ? rcu_is_watching+0x12/0xc0 [ 500.107522][ T31] ? bpf_lsm_capable+0x9/0x10 [ 500.126545][T12584] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1632'. [ 500.174533][ T31] ? security_capable+0x7e/0x260 [ 500.187147][ T31] genl_rcv_msg+0x55c/0x800 [ 500.200932][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.214918][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 500.235729][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 500.257874][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 500.273649][ T31] netlink_rcv_skb+0x16a/0x440 [ 500.288344][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.301912][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.314913][ T31] ? __pfx_down_read+0x10/0x10 [ 500.325433][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 500.336822][ T31] genl_rcv+0x28/0x40 [ 500.346589][ T31] netlink_unicast+0x53a/0x7f0 [ 500.357946][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 500.370260][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 500.384539][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 500.397862][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.412726][ T31] ____sys_sendmsg+0xa95/0xc70 [ 500.420267][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 500.427812][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.445575][ T31] ___sys_sendmsg+0x134/0x1d0 [ 500.455143][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.467082][ T31] __sys_sendmsg+0x16d/0x220 [ 500.477206][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.486185][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 500.495826][ T31] ? rcu_is_watching+0x12/0xc0 [ 500.506340][ T31] do_syscall_64+0xcd/0x260 [ 500.517156][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.525640][ T31] RIP: 0033:0x7f97f3f8d169 [ 500.533853][ T31] RSP: 002b:00007f97f4dd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.562090][ T31] RAX: ffffffffffffffda RBX: 00007f97f41a5fa0 RCX: 00007f97f3f8d169 [ 500.582661][ T31] RDX: 0000000020004494 RSI: 0000200000000880 RDI: 0000000000000003 [ 500.627440][ T31] RBP: 00007f97f400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 500.655297][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.681019][ T31] R13: 0000000000000000 R14: 00007f97f41a5fa0 R15: 00007ffedaee8638 [ 500.696473][ T31] [ 500.705385][ T31] [ 500.705385][ T31] Showing all locks held in the system: [ 500.746435][ T31] 1 lock held by khungtaskd/31: [ 500.762027][ T31] #0: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 500.805305][ T31] 2 locks held by getty/5592: [ 500.816028][ T31] #0: ffff888031d560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 500.832500][ T31] #1: ffffc900036db2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 500.862467][ T31] 4 locks held by kworker/u8:11/9600: [ 500.881264][ T31] #0: ffff88801c2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 500.897849][ T31] #1: ffffc9000390fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 500.913811][ T31] #2: ffffffff90117b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 500.931166][ T31] #3: ffffffff8e3cc980 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 500.958854][ T31] 2 locks held by syz.1.914/9778: [ 500.974567][ T31] #0: ffffffff901cfa50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.007054][ T31] #1: ffffffff8e7cd228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 501.021889][ T31] 2 locks held by syz.3.1040/10284: [ 501.039240][ T31] #0: ffffffff901cfa50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 501.063327][ T31] #1: ffffffff8e7cd228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 501.094216][ T31] 2 locks held by syz.2.1162/10722: [ 501.107741][ T31] #0: ffff8880123620e0 (&type->s_umount_key#49){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 501.139209][ T31] #1: ffffffff8e7cd228 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 501.153048][ T31] 2 locks held by syz.6.1613/12512: [ 501.162854][ T31] 3 locks held by syz.6.1613/12517: [ 501.176977][ T31] 1 lock held by syz.0.1633/12586: [ 501.188007][ T31] 2 locks held by syz.5.1634/12589: [ 501.199526][ T31] #0: ffffffff90117b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 501.230836][ T31] #1: ffffffff8e3ccab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 501.265158][ T31] 2 locks held by syz.5.1634/12591: [ 501.283103][ T31] #0: ffffffff90117b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 501.303087][ T31] #1: ffffffff8e3ccab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 501.331955][ T31] [ 501.337846][ T31] ============================================= [ 501.337846][ T31] [ 501.357354][ T31] NMI backtrace for cpu 0 [ 501.357376][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 501.357413][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.357430][ T31] Call Trace: [ 501.357439][ T31] [ 501.357450][ T31] dump_stack_lvl+0x116/0x1f0 [ 501.357496][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 501.357526][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 501.357567][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 501.357601][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 501.357638][ T31] watchdog+0xf70/0x12c0 [ 501.357675][ T31] ? __pfx_watchdog+0x10/0x10 [ 501.357703][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.357747][ T31] ? __kthread_parkme+0x19e/0x250 [ 501.357793][ T31] ? __pfx_watchdog+0x10/0x10 [ 501.357824][ T31] kthread+0x3c2/0x780 [ 501.357855][ T31] ? __pfx_kthread+0x10/0x10 [ 501.357882][ T31] ? __pfx_kthread+0x10/0x10 [ 501.357910][ T31] ? __pfx_kthread+0x10/0x10 [ 501.357938][ T31] ? __pfx_kthread+0x10/0x10 [ 501.357967][ T31] ? rcu_is_watching+0x12/0xc0 [ 501.358005][ T31] ? __pfx_kthread+0x10/0x10 [ 501.358035][ T31] ret_from_fork+0x45/0x80 [ 501.358065][ T31] ? __pfx_kthread+0x10/0x10 [ 501.358096][ T31] ret_from_fork_asm+0x1a/0x30 [ 501.358159][ T31] [ 501.358169][ T31] Sending NMI from CPU 0 to CPUs 1: [ 501.502060][ C1] NMI backtrace for cpu 1 [ 501.502090][ C1] CPU: 1 UID: 0 PID: 12453 Comm: syz.4.1595 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 501.502122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.502138][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 501.502170][ C1] Code: e9 fd ad 59 00 be 03 00 00 00 5b e9 22 21 12 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 28 33 eb 11 65 8b 05 39 33 eb 11 a9 00 01 ff 00 74 1d [ 501.502196][ C1] RSP: 0018:ffffc900042af1f0 EFLAGS: 00000202 [ 501.502215][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff822b3c89 [ 501.502231][ C1] RDX: ffff888049921e00 RSI: ffffffff822b3ac5 RDI: 0000000000000001 [ 501.502247][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 501.502262][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e131c30 [ 501.502277][ C1] R13: ffff88801e131c2c R14: 0000000000000000 R15: dffffc0000000000 [ 501.502293][ C1] FS: 0000000000000000(0000) GS:ffff888124ab9000(0000) knlGS:0000000000000000 [ 501.502316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.502332][ C1] CR2: 0000001b3091cff8 CR3: 0000000033cf0000 CR4: 00000000003526f0 [ 501.502348][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 501.502362][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 501.502377][ C1] Call Trace: [ 501.502385][ C1] [ 501.502393][ C1] __page_table_check_zero+0x315/0x5b0 [ 501.502437][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 501.502478][ C1] ? __reset_page_owner+0x137/0x1a0 [ 501.502517][ C1] free_unref_folios+0x9b7/0x1630 [ 501.502555][ C1] ? rcu_is_watching+0x12/0xc0 [ 501.502584][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 501.502619][ C1] folios_put_refs+0x56f/0x740 [ 501.502647][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 501.502675][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 501.502709][ C1] shmem_undo_range+0x58f/0x1150 [ 501.502754][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 501.502808][ C1] ? find_held_lock+0x2b/0x80 [ 501.502839][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 501.502862][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 501.502907][ C1] ? stack_trace_save+0x8e/0xc0 [ 501.502951][ C1] shmem_evict_inode+0x3a1/0xbe0 [ 501.502976][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 501.502999][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 501.503037][ C1] ? find_held_lock+0x2b/0x80 [ 501.503067][ C1] ? evict+0x3a2/0x920 [ 501.503092][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 501.503115][ C1] evict+0x3e3/0x920 [ 501.503139][ C1] ? __pfx_evict+0x10/0x10 [ 501.503167][ C1] ? iput+0x519/0x880 [ 501.503194][ C1] iput+0x521/0x880 [ 501.503217][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 501.503253][ C1] dentry_unlink_inode+0x29c/0x480 [ 501.503278][ C1] __dentry_kill+0x1d0/0x600 [ 501.503304][ C1] dput.part.0+0x4b1/0x9b0 [ 501.503330][ C1] dput+0x1f/0x30 [ 501.503361][ C1] __fput+0x51c/0xb70 [ 501.503386][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.503418][ C1] task_work_run+0x14d/0x240 [ 501.503446][ C1] ? __pfx_task_work_run+0x10/0x10 [ 501.503479][ C1] do_exit+0xafb/0x2c30 [ 501.503502][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 501.503532][ C1] ? __pfx_do_exit+0x10/0x10 [ 501.503558][ C1] do_group_exit+0xd3/0x2a0 [ 501.503580][ C1] get_signal+0x2673/0x26d0 [ 501.503617][ C1] ? force_sig_fault+0xc4/0x100 [ 501.503650][ C1] ? __pfx_get_signal+0x10/0x10 [ 501.503688][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 501.503725][ C1] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 501.503752][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 501.503800][ C1] irqentry_exit_to_user_mode+0x13f/0x280 [ 501.503837][ C1] asm_exc_page_fault+0x26/0x30 [ 501.503862][ C1] RIP: 0033:0x73756c0000 [ 501.503879][ C1] Code: Unable to access opcode bytes at 0x73756bffd6. [ 501.503890][ C1] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 501.503907][ C1] RAX: 0000000000000000 RBX: 00007f4606da6080 RCX: 00007f4606b8d169 [ 501.503922][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 501.503942][ C1] RBP: 00007f4606c0e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 501.503957][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.503972][ C1] R13: 0000000000000000 R14: 00007f4606da6080 R15: 00007ffe77780168 [ 501.503996][ C1] [ 501.631823][ T9778] svc: failed to register nfsdv3 RPC service (errno 512). [ 501.632108][ T9778] svc: failed to register nfsaclv3 RPC service (errno 512). [ 501.863312][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 501.863339][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(full) [ 501.863399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 501.863419][ T31] Call Trace: [ 501.863430][ T31] [ 501.863442][ T31] dump_stack_lvl+0x3d/0x1f0 [ 501.863493][ T31] panic+0x71c/0x800 [ 501.863523][ T31] ? __pfx_panic+0x10/0x10 [ 501.863552][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 501.863591][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 501.863625][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 501.863662][ T31] ? watchdog+0xdda/0x12c0 [ 501.863701][ T31] ? watchdog+0xdcd/0x12c0 [ 501.863739][ T31] watchdog+0xdeb/0x12c0 [ 501.863778][ T31] ? __pfx_watchdog+0x10/0x10 [ 501.863809][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 501.863856][ T31] ? __kthread_parkme+0x19e/0x250 [ 501.863907][ T31] ? __pfx_watchdog+0x10/0x10 [ 501.863940][ T31] kthread+0x3c2/0x780 [ 501.863973][ T31] ? __pfx_kthread+0x10/0x10 [ 501.864002][ T31] ? __pfx_kthread+0x10/0x10 [ 501.864034][ T31] ? __pfx_kthread+0x10/0x10 [ 501.864065][ T31] ? __pfx_kthread+0x10/0x10 [ 501.864097][ T31] ? rcu_is_watching+0x12/0xc0 [ 501.864146][ T31] ? __pfx_kthread+0x10/0x10 [ 501.864180][ T31] ret_from_fork+0x45/0x80 [ 501.864211][ T31] ? __pfx_kthread+0x10/0x10 [ 501.864244][ T31] ret_from_fork_asm+0x1a/0x30 [ 501.864312][ T31] [ 501.864619][ T31] Kernel Offset: disabled