last executing test programs: 11m20.755493492s ago: executing program 2 (id=295): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyv5\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, r1, 0x319, 0x70bd2c, 0x25dfdbf9, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44004}, 0x4000040) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop11\x00', 0x40, 0x0) mmap$auto(0x81, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x7ffe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r2, 0xc0044dff, 0x0) 11m19.497125951s ago: executing program 2 (id=300): socket(0x2b, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) sysfs$auto(0x2, 0x46, 0x0) (async) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 64) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x10b000, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000080)="f6af10") (async) mmap$auto(0x4, 0x8, 0x7fff, 0x19, r1, 0x986) (async, rerun: 32) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) (async, rerun: 32) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x2, "fb2704573a53cf995e9bd50d9a038ae9ba8b6bb523af71be779551bea8bb46e0", @inferred=r2}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0x101000000000000, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) unshare$auto(0x40000080) (async) close_range$auto(r2, r8, 0xb) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) fstatfs$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000480)="48fca9fce87c944c01b8294348d59fc327dd2324b3227b01000000fc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93105005ffd950b25b6d6316b35c28be563bfc910854064afb220730381dd1aeb760a16f2ddeb8ab31d7326410c253994ef8357c5febdf418af0531da669796dc6c822b116373fbff3030766a950daac881c0b6cd381c6ae71a525957be40b3a3a736b10b683aaa86ec520d5b057bb27a9d04e8db745be3e25509f0cf71d49f43941b1cef2da82dc76b368b5aa8397025ecfdb077364819c1c628b3489e936cd36b820f72f660e6f304ea0000", 0xe0) write$auto(0xca, &(0x7f0000000200)='\x04>A\x01\x99;\xf46\xd0\xca\x8f)', 0x7f) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf250a000000080003000000000008000200", @ANYRES32=r7, @ANYBLOB="08000100000300002dba8d21083ceb5de42960818d1ef16d8459578e019b1b064a7d26d1fbf6d31bb8d56c654aea269458bdce113fbad26b3c04ddbab1a24d676897135d0e"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, &(0x7f00000001c0)={0x9, 0x1, 0x6}) 11m17.928589178s ago: executing program 2 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x96, 0xac, "f13240d9eb450d55b82817c2eedb8d236191678e6e978acabfb8aed3a2a7b46783005212db8ed267e1e92dc06fd002fbf3f0ac4655cd9e72af5d3a3860ce4b8208b7e1133f66718d5327b528159a63177cec3b9ed96005478576007d54b1b0028e2451b1aed4e82c7daa173336e3a83d6090314943ed1e974a88c925d2ac3f7fbcc5895e80d8474d707426c0d9f2873e38a6"}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x1004c000) r2 = prctl$auto_PR_SET_MM_START_CODE(0x10100000, 0x1, 0x0, 0x6, 0x3) ioctl$auto_FS_IOC_READ_VERITY_METADATA2(r2, 0xc0286687, &(0x7f00000001c0)="e75fc2ac4cd49e51dd9213be843379a54c78838b8efd2ce4d33a5fc766a9e23d074f19aecc972b64ab393a5d4937ba55d816114296454d06f0e737059d62df8a86b75e40fa5bb5c40b8ccd503c1a070734e7446ec3d302e9278fc4482cc7bdc4f7b9ec115177db7c94a47c8ec8ff6345be617fc6647dbcfaef73e753d9c145a8") r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x106, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x8080) write$auto(r2, &(0x7f0000000400)='nl80211\x00', 0x41) r5 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x220003, 0x0) close_range$auto(r5, r0, 0x8) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_WME={0x4c, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x96}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5a}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x82}]}, @NL80211_ATTR_FILS_KEK={0x26, 0xf2, "b0f91645af474ca347f6d373b24040c105bc5fae88e9dd02343b58e957f94b82481a"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000640), r2) sendmsg$auto_NLBL_MGMT_C_VERSION(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r6, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x9}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x321}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x40008004) r7 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(r2, 0x8004b707, &(0x7f0000000740)=0x7f) write$auto_force_devcoredump_fops_hci_vhci(r7, &(0x7f0000000780)="5341460519cc9385661fcf9e6c93f6af8b75895aef348627", 0x18) r8 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0xc0, 0x0) ioctl$auto_BTRFS_IOC_RM_DEV_V2(r8, 0x5000943a, &(0x7f0000000800)={@raw=0x6a0, 0x1, 0x3, @unused, @name="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"}) r9 = gettid() sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000002a00)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000001840)={0x115c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x1133, 0x2d, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @pid=r9}, @generic="f77178e6e052f3e8f4c2e0c87ed467c5cdbf1ddbc35f215c98cd40c9", @nested={0xcf, 0xa6, 0x0, 0x1, [@generic="a94fdfd6ea5d4ddfa0920ce39743a6594ca7969f3f4eaa7279fc512b355cc4805b04ee2ab80744aee885bfc0e7d55b155c947a719e58c275eb94937e8a50cad4fdfa576811250e5000a1c884b1e4f1eeed77b55e342532031727d86fd8d919f65f1548b518a0f5ba93c9ae9032c0ca63470f4e133bae18d73039bcff8185b84bf931c6af6ff5d295dc9035f280f92249a77a", @generic="0ba367671ebd0a8fc257104efc23c0bdce0af5f88dacd36926829d7303fab575f2d77b94c9c1e7dfd9", @nested={0x4, 0xe}, @nested={0x4, 0x56}, @nested={0x4, 0x150}, @nested={0x4, 0x1e}]}, @generic="a1bd3c31b807283084afe663381c4bae641e8539ed10152456da11c97057f198f25dddf823c82d101ab4f0ccc1de2e0f61b348dc4e10a519bd6dae", @generic="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"]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x5}]}, 0x115c}}, 0x40000) r10 = ioctl$auto_TUNGETVNETLE2(r7, 0x800454dd, &(0x7f0000002a40)=0x3) close_range$auto(r5, r2, 0x98) ioctl$auto_TIOCGDEV2(r2, 0x80045432, &(0x7f0000002a80)=0x1000) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, r2, 0x9) r11 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_CTRLRATE(r11, 0xc0045103, &(0x7f0000002b00)="0fe9934d137b357b90f2cc5135ba1e9d6a5d63449af8f9cb034b4ba516cd1bff40ad2a9a3ca041ea3d613803464006f0b3caf8e04a3307e3ea5817927d9c2cde62f88e7095ff9345a30e8c21ae05f6041f32e3991d3b42bafc9424ad40bae95aff8ff7a24381666de3d7fa8f7e95361806719f43a89250480a9a396cbc1e98d094ccbe972356ae7ffc76360b70552adc7fe5cc6e401bb3d67a328d18973b0de2b8fbc40024a01fc5da8bc89bc824be4c85fc61a77accbb54e20b8078eb2c4cb552104862ecf10963139c4fc2ef8c70239b10d45ece8b682ee1f19bf15e50253069632794bc0c7e0b6d984ef6e4c33a0411e2a5aa5f8fb901dada3087a931baa1a52c0f9de6e9d6a989392d26e45e774d7d4a45d708091baa1075988af3f9b247269c9aca13de53a3ff5f5123faa1dff1127ca8518d0a33ffcce2304d3e4973c324ca267c91ea5acf653854240f8836fb5d1e8cd310c4add1dd832088bd12194779e452f4c091423930f6282089e6cd3645572a30d8b905c88c86313df68d8a5141e0729b9130327be74b8315a5a85aa3cac44a99bc6b1fe0a23438d1c18b8350c0665fa4de46144e4cbdb12c5d4abd68ac2194c21b9cf68c46baff5213ebce54b675537f27ab81eb9120c16e70460992b40b56a99153f9a4a9f91914c27c37433811198a1af3d713ff897e2efdcbdc3f1c039cbb03c80873d27a652f054d86f9b83f6cc4a8567f9df6d8f852f23d70ed1d6dcd8cef3e7c1d48cf662e7060bd0b8c4de4e114d60341e2d20d19b96e228ca3f5c707467ffe6640b8299353c276528b0d766d4eb491766a2190bf67635e140922ebd449ce3b0271582d655a2a5d45e5f06ca04f45403ec4a9d55642dcb083a5dd29ecedb95c45857b9b3eeea5e50de470f267d119a3422ac58a787dfd7e3e1c3ac1bdce98131cd3fedd00b1d286bc9b5935e0994fb1c3ef2e56e7d7b88fa283a4007ddf200111e2716af2e646a4bcf8a3c3d7438209da6440497ee74904d4c556b9fb1177f38c86cb8c7e8c09169d5e72a379ff3fd3f61bdf04896aec59b728047f59a5cdc951458da216690bad953be003c05c228ee2ff9b162e53c49a0cf519e6e69063ab61a97751e37e3ef2c3fe66cfba7df8a28fba979156bae183581c61abb36d7c04e4327ec36c6adf9e8bf0cb898414c58a6cff8faf0e568ec7883531b8d5fc07b66c509aa939f02104034018c0d1bd2077c53b9e7f12c4d277da902ac875aa6aef51b35c34c950f523d71f3fa83dcb405c5ba5d69f96e0ce96f88a8dc18071041970255a12c8c1f1c0a30842b652a8296878542822ec89e8cde4db282d45a446218e470fb714f9f0ff0987d599c00e215a31070b92f3d8b47dea1322d49b90494b9660967e3f0c729b46b538f14a2c43f2dad709e03227e7ade162a90c60e51f1f762a54b1c515ed3d1a1d87a95e9fba1c160ef7b9ff60267459b6d0a21e5c52afd59dffed291a2118508249990d92124e3d826be6c12988d0a7ce540f610e779d4c89d3ac54d2f225bb6a35ebc6a64490046db0acc138461fba8e8c868c4d1c385de765beb45cdd877fc7a1f5602b7ca4ad4448ed9b77600f22710da4af10393ebf94a2cdf07381de0327740cdc4badacd223c176ee377282c7cce747efbccaa79c14ce69f2595620220500fa1034037a8391b519792b1f05c9c5f4170021e42cdad1828e7d16e62db2d548c97c8be585e6381d66faf0aa74a5e7b1c286796a67dfada3498099bec2615a058aa5b5348c755bea0efc3c8bb0b78076f5c0e33f60c6d9b40a9204aea4493a9889a5af96e30fa5813b887ea58fc0bf1d04897fa0cbfe8778eaa04505e26cfd79a8e6a1662c1316e77dd5721ef5dda73b44aa85869ed4080fe973cb40262e1972cd0fa1e16db82c8d5d16402ca94dc0ea8e90937095d69110c615cce6dc5b9b914ce2afdbff37f9fd931179f6e97d99ad8886c3d7de4e24962b6cd96a240d8941c722a8b3c9f85726f888d1f6dafa64d32879595091de50e62de1cdd6fd7292556b5cb44736a62cc3ddc08120de5653bed6f717eb70cb1e3aef099b302345e285c6d52198a96779509552508ec1bddd9dbd73e77b3638426de6b6ef148194e58fee8ec6d5c50db64c3a294f30b64def1c85fcaacea4b1cf6db3d0edfc2eb9fa36c99eea4bb8b5eefba1947ad2927f7167dd2eecd1242a1e5c9535797daf179658de12abdad2d3091a6cc254c2eff68fd115392fecfc8da9942689480e65ab16988571ee786175dee941105b782188d825d2b22ec157980ddd5372037e46c7d569482e4baf86a3ce4a0f273c4140922b3eb0a9355eb09c36e626ad3291476cc632bb1b98121460b90b5855f4aa11f26199a2d59a46ff52cc037acb7af7b244305099cfbdea54fe8ffca86527ed918cfe19e2b978eca51d0bea78399d09a0a6f8491e0173bc98b5140bd6666aab5395538735d60f5f583d0a464008d32e92e932e97a0920934d59f9b95b1e2971dc4d7c2c7eab586d72dadc203f93807052bc4de92cba0024523667e8e7dff0f3c6f3ae1137ea82162689377c79b87aa88467c83be4691371b75d47855686dfed2396c858de577d12b97f77539b068017244afb1a77cb6dbb615777b8906315f9c5e5220b5969b04e3f3a2ae97c46beffc15c2161cb824811d0fc194866d118933e05e5daf2c8cf16ae0e1cb8eb552c1ead3d0cd325510f6172c683b4bc99cc286eeea70bdd41a136e71c6fa27e23951ad92a642fa843b707ff2bdf291abbf72444732fbfe12d3f53c1e60f5612744c04482c1d4bfb929478249e1a9efbf12f8686395480cfe2d9510abd4b3f77b0d08eb9ddd61ba9de8ad857af6402ce12ffae29f6bd5b62d45ab2729d40269a29f427e36fa3e88832f28f149e9db9e0c0b35fc6a67a24e044a570f0717156f283101339a87974e758832b7e9fdacdcfc9463c66610585aecbe44aa9faca2e3b469a60820825b6e7a42d432070cbb17dea36366413678116219a126d31c52b887e6043b2bf1becaa43b568042d36cb7df618517f33c4fe8fb7536d3cef59af7ddf4fc7aad45dc3ed9ea2a2eab828887a3f181b153d0f220c553d0bee1c5baa3d05a731d384872d7ccbb902abc606b1b3d99cb7a3b14f36e2d7050fa00c09339c1e393eec1add78ed2cddc5f78f311e7e4eb68c97736bcdf531f145145a85414c2e8276f34d6c0f9c67f5edb2c3c8a3956c5ae1811b7679f144248a2a23b2decd4909b1f25947562b20beaeb1029ae98cc21685b3e28886a1011f97ad1f8916f27dc95305bfef982654003e25047d48bd5d2e63a98c2faf4bf6b7db6988e51bd5a2f8d826994b808fcf5e31a4a3b4254c65b877aefe34a4614012a01dfc910a44fe5a89f3b2fd943c1646ec49d41aad0a7971273760d153d72c5adbf13caaaf84f89f9db9476fa868a3290bcb8474b0355dcd725e732d3c1b6ab05c21610bc38ffb573d66115786ed7a109f6366d5ec0e53fe6d16f690e0962d19f83dd6b082f872d85e14c4121ab82be8d50cb9546f05b4b17743d1f4d040bd438bd413481c74aa6d63c9a347901f0492630c980e42da1856f1659a5949503d9edd0a226646c72b86340ce64b1ebda84b24b50a4dcd9ac56d4e25211828846a737f95c059ac5ed8c75fb2d12d841835794336c8be84072204508d5940bf7affa60bfb7044f5f88eece8407fa8d98dd5ce0e8ace8bb42dd45021cfe3f5ad54e981d1cfe5ca4e4f408c9ce652e6bdd654cf263fbbb671cbf75d212f6dd6ded8e286365ebb2a0c301a8dabcfb1d5b8ab5a58d97acc097979cb3506ffbecd1d744ceed20595b2b0f6d0be4f7a842914e048add1cced1289adc532bc50cd926da7888d7ed029915e6b6f96b02c32e23b244c951d2674a12d7911c35892d8c3a2d20c9825c46568d24f547c5c4ca194e16ee25f2d44fc9cc25c8cc683a0d8c654e65d10818068434c4782492a76ecc8d6140a404aa310d31a2063e329e55b1d2df5c2b8ec30bf3ee9ebd30359680299065461306a0fc6ded7fb14655ed21e9f23b5097b8e9ebb090ab28a98f79ef969dc2770ec58cfc313d96153706e03b7f8991db25ff9323dac59fd3786437b173a20ce129832d369ce561165c63f7e6ed987bff5ec7c46c8d1a8ef944b63e01f05fc33d920ab3adb03e86a5f7e3637ff6020ae6236c26260e7de1c71a45ba04a3e5cecd37e9275babbff15af476c4eaf288b55f3e8cacd5df85687084e256f4e61ce84ed75d752ead69cd7dd96cd11fe85b9677f278759d124262619ae7d9f01812b46fb1764a938169e2f1dc7dacf79ddaf4b1f3f818e50bf2bbeb3c92c94f85fb4cff6fc74e85554519f45ef602007cc5f032e027e205493cc8cf9c1f7edf876d658de97c4a5852f439d9c4b472b5dd3dac497ed047d57e2528169772f021aafbe28486d8827acfde323097cfd92f743b91ac54df77b350ada05e7877c544ed6b64269d615047f0a471f6b86ab65933fbe8b41922df22d162c2fd8c47910acf3f2bd39392244044cd9caf4e5d8bd20de80fcd9e41c1c7fd0fb765648bfb5dfd8edf57d71c090ed1515b26d93733e95f893456ea44d773f090a40a14b2ebf346dffe02419278684cfc34ee5297e92462c3ab10a23d3927df707b66488657ee6b63014c058a253634a9df15b1fae3c6d1ef57734cd1dfa5ce80d6eed6d415ff98ebef8f9f00c6ea1d96df1f0701afa2665063c5c74cc9d7ab3bfc036f61c930242f1ab994c29f2c2810cdd505154d0b19a48e2f1045c2a0e577e981af998e9c03f41bd24c531011a1a3edf48ec1808c86f951b38c9edf06af945666d33f2ea5bce58c45a10f0084f502a3ee8116cd7727ccb78fa5506d44268f61b22c5efaeff9a931fbcaba1f3d104124095379797afcfa8fb39c8d7de4e0fff6363ec83d226fc06f0e932b3df2f58314fe6c54c76ae79f6a05577a3fe3d47124c39b10e8a78b6c6a5dda078b745961a7006e1c99c98bb2df5cca15fef572cbe589948099d98435f13d1b65eae95656166349bbf65df0765924a82ba033b41670f95b6c0f87bc90bc8f5c643d7b55bfebcb55abbf18785e3b2e0c4be6966f861753f16df685cf5eaf3b133c7b774168b9c5604081a18bbaa70d220a6fa16e8a8268bcdf15552dce043fa55ae9440ac879c5ff5c911c7708b60fca55481c045d8f2a8748010677d3e8c17adb14344bb998a55ce54fab6bad186c7d930449b1bdc2300dfff644e48d4aa10bffb8c03860693676af04c81da5f2b0dc129f8d623857bb8c439b2466ef7f069c1ef83dc323309e0617e7b16e016cc3de0ade9ea0a5d19d662199b4c65bb60766a7b230984667ed3e516a1ca374207370b93a5ce72c6f3357ff275908b79662eefe6643c30f7b33d7205297c193f39f8edd2dd7e91dcb8aef3509f3dcdfce3030b12a81850f4d4a209f556f10e0f7a6d433d83e0c09b9f07e31aef5f876508cb084a42392946469ebea9269597a6f41784c644ae7bccf024bc82eed149cf6ac875740945b4d903453a095e7447541411184f0a7d4e1b7509a154c3a0866884510814f55b2e36c962c36fa7766dba9b01e44b2cf7047ccf807161563da8656ad2f0cbf3c6a8f82c7554b0b0ff972bc5ae6ce90ae4821e218cff54b08cc39783f03ec244121403ce68d0cc0221db8930ba57b1597d2198a03cd34bd9496ea471dc2ee9fc391449462a423a8b1718ddb6b57c3fbe8bff9f8943c293163c5e57feb3d9fe64a9e0b25b2acd17a2453986b22e05cd35743c945b9fc1452b26") socket(0x21, 0x5, 0x0) ioctl$auto_UI_DEV_CREATE(r10, 0x5501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4) 11m17.527640459s ago: executing program 2 (id=307): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) io_uring_register$auto(0x100000001, 0x14, 0x0, 0x5) 11m17.281322283s ago: executing program 2 (id=308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11m16.861015209s ago: executing program 2 (id=310): mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) futex$auto(&(0x7f0000000080)=0x4, 0x5, 0xe, &(0x7f0000000100)={0xf52, 0xe}, &(0x7f00000001c0)=0x9, 0x7915080b) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) writev$auto(r3, &(0x7f0000000140)={&(0x7f0000002ac0), 0xe4}, 0x4) mmap$auto(0x10, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unlink$auto(0x0) mlock$auto(0x9, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r4 = socket(0x2, 0x1, 0x100) execve$auto(0x0, &(0x7f0000000180)=0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x2, 0x7) io_submit$auto(0x8000000000000000, 0x80000003, &(0x7f0000000040)=0x0) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) r5 = getsockopt$auto(r4, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) getsockopt$auto_SO_ERROR(r4, 0x6, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000002c0), r5) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400d1) 11m1.472305605s ago: executing program 32 (id=310): mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) futex$auto(&(0x7f0000000080)=0x4, 0x5, 0xe, &(0x7f0000000100)={0xf52, 0xe}, &(0x7f00000001c0)=0x9, 0x7915080b) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) writev$auto(r3, &(0x7f0000000140)={&(0x7f0000002ac0), 0xe4}, 0x4) mmap$auto(0x10, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unlink$auto(0x0) mlock$auto(0x9, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r4 = socket(0x2, 0x1, 0x100) execve$auto(0x0, &(0x7f0000000180)=0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x2, 0x7) io_submit$auto(0x8000000000000000, 0x80000003, &(0x7f0000000040)=0x0) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) r5 = getsockopt$auto(r4, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) getsockopt$auto_SO_ERROR(r4, 0x6, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000002c0), r5) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000", @ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200400d1) 8m36.15036716s ago: executing program 3 (id=728): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptyt6\x00', 0x0, 0x0) mmap$auto(0x6, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyd0\x00', 0x0, 0x0) prctl$auto(0x7, 0x3, 0x0, 0x7, 0xfd) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyc7\x00', 0x0, 0x0) ioctl$auto_TIOCGETD(r0, 0x5424, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptyt6\x00', 0x0, 0x0) (async) mmap$auto(0x6, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyd0\x00', 0x0, 0x0) (async) prctl$auto(0x7, 0x3, 0x0, 0x7, 0xfd) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyc7\x00', 0x0, 0x0) (async) ioctl$auto_TIOCGETD(r0, 0x5424, 0x0) (async) 8m35.957283918s ago: executing program 3 (id=729): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x4}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)={0x2c, r3, 0x705, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) r4 = socket(0x2, 0x801, 0x106) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x24008041) 8m35.577157457s ago: executing program 3 (id=732): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) r0 = open(0x0, 0x161342, 0x100) ioctl$NS_GET_PARENT(r0, 0x40305828, 0x0) 8m35.07712317s ago: executing program 3 (id=735): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r0 = socket(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'ip6gre0\x00'}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty3\x00', 0x2a401, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x8910, 0x0) mmap$auto(0x1, 0x20009, 0x4000000000df, 0x800000000eb1, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x242180, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x1a) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) clock_adjtime$auto(0xb, &(0x7f00000000c0)={0xfffffff9, 0x0, 0x0, 0xc, 0x8001, 0x1, 0xfffffffe, 0x0, 0x0, 0x3, 0x9, {0x1, 0xe6}, 0x9406, 0x1003, 0x5, 0x4, 0x0, 0x203, 0x1, 0x2, 0x40, 0xa5dd, 0xfffffffe}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000004c0)='-dev/audio1\x00\xf9\x93&\b\xbd\xdc\xe3\xe4Z\xcc\xe8\"P\xfe\xab\xd0J_\xf7\x87\xdaS2O\xdf\f\xf9\xa0\xf5\xf3\xebN\xb7\x14V0\x9a\xfdD\xbe\xb3\x01\xbbp\x8d<\xb7@5\xfd\xfa/(\xdf\'&p>\x16\xa6\x12tS\x1ev\xbe\xfb\xab\x15\x861\xac>h\x13%\x16\xcb\xf17\x8b\xedG\xbf\x06\x19\x8a;\x01AY\x7f\x04P).\xa4\xcb\xdem\x1c\x88(im\x98\xc9u\xec=\xf4 E\x9dgJ\x92\x94\xfb\xee\x82X\x8e\x1e\xd1[\x0f\'\x06\xf8\x90i\x8e\xaa\xaa\x0eH\x90\x95\xf4\xda\x96#\xfa\xf1u\xfc\t\x05o\xfdY:\xdc\x9d\xbfy\xe2\xd9\x14\xb3\xd1\b\xad\x95I\xa1{y\xcf\x15(\x18\xbd\xfa7\xb1\x96dZ\x1c$y&]\x93\xd93\x8c?\x8b\xa4j\x8d\x0e\xf5\xe2\xa9\xc0\xd0C\x89\xc1\tV \x9d\x93?\x85Sfz\xd5\x178\x93\xf0\v\xa8\xeb\x9e\x9b\xe8\t\xd0\xf8\xf1\xc6\xcbg\xac\x103I\x17\xd3\xa4\xc7k\xf1\xdb\xedU-\x8e\xa8\x1b\x9f\x02g\xd8\xa5W\x85\xf8\x1e{\xae s\x8cL+I\xdc\x06 \x18\xe0\x98\x19\xd2\"\xd3\xbbZ\x991\x90\'H{vo\xd5\xdc\x96F\xce\x1b\xa3\xe4\xdf\x18\xec\x10tp\x8c\xae\x8fl\xef\x8b\x8a\x14D\xdf\x05K>\x1e\rH_60$f\xa7Z#\xd5\xb2\x86\x89\x1e\xb5q5N7\xd91J\x19@\x87\x9c\xfd*\x89\xf9o\xe3xV\xd7\xffko\xeef\x80f&\xe5A\xa8\xc1\xdd\xe8\x9d\x90\xc3\xaa\x05I#\xaeE\x02-F\x13\x85\xee\x81\xf5J\xc1\x91\xefP\xd5FT\xe6\xf1\xcei\xaey\x1d}\xd7\xd0\x9b\xdbU\xb6\xae\x06', 0x200000007a8) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 8m33.878056992s ago: executing program 3 (id=738): r0 = socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000280)=0xfffffffffffffffd) (rerun: 64) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/248, 0xf8) (async) capset$auto(&(0x7f0000000040)={0x6, 0x0}, &(0x7f0000000080)={0x80, 0x100, 0x1000}) r3 = prctl$auto(0x8000000, 0x1, r2, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x40001, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000001140)='/proc/self/oom_adj\x00', 0x8042, 0x0) read$auto(r4, 0x0, 0x1f40) (async) r5 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x1, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0xa}, 0x3) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) (async) mmap$auto(0x1000c, 0x20009, 0x6, 0xeb1, 0x405, 0x993) mmap$auto(0x3, 0x400008, 0xdf, 0x9b70, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_NET_DM_CMD_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xd0008}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRES32=r6], 0xec}, 0x1, 0x0, 0x0, 0x4040895}, 0x20000880) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x9) (async, rerun: 32) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) (rerun: 32) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) (async) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x1) (async) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x810004, 0x9, 0x8000000008011, 0x3, 0x8000) socket(0x25, 0x5, 0x0) 8m33.553141831s ago: executing program 3 (id=741): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x3, 0x100) (async) socket(0x11, 0x3, 0x2) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) getsockopt$auto(0x6, 0x107, 0x14, 0x0, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x1fd, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) (async) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) eventfd$auto(0x3) eventfd$auto(0x0) 8m18.222771506s ago: executing program 33 (id=741): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x3, 0x100) (async) socket(0x11, 0x3, 0x2) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) getsockopt$auto(0x6, 0x107, 0x14, 0x0, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x1fd, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) open(&(0x7f0000000000)='./file0\x00', 0xa240, 0x15e) (async) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) eventfd$auto(0x3) eventfd$auto(0x0) 48.521473229s ago: executing program 4 (id=4153): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) process_vm_readv$auto(0x0, 0x0, 0x40000000001, 0x0, 0xa, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) pwrite64$auto(r1, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) (async) r2 = memfd_secret$auto(0x66c6) mmap$auto(0xfffffffffffffffe, 0x20009, 0x1, 0xffffffffffffecd5, r2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) sendmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async) ioctl$auto(0x3, 0x80000541b, 0x38) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) (async) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)) r4 = getpid() timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000140)={@sival_ptr=&(0x7f0000000080)="6b9c1c6bd535aa7c33ea27b80fa2aa759da3e262dd55d3e4eb39c7a16c5601ee2eaae854e9df597a2581a6c8089d7dd10fcec11aa224716b78ead416df2a94ff9d4612b956dedbe5728efdd94de783413aa26cd1075c82c0d8f0f9a7d7c65a51ca72eb59e3c9fbce1f3ce92aa2584c9636e47e439fd092ed33b718dc339b9de98bc9edd660390c32c273b36d10905fc205c5cc8def4686548b15ba18a5d62a7d8b6711e30ef2f17b86ab9e93", @raw=0x1, 0x401, @_tid=r4}, &(0x7f0000000180)=0x8c) write$auto(r0, &(0x7f0000000040)='\xce*+#\x00', 0x80) 48.244413045s ago: executing program 4 (id=4154): mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r1) 46.883764313s ago: executing program 4 (id=4158): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_proc_page_owner_operations_page_owner(r0, &(0x7f0000002080)=""/4096, 0x1000) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x20, 0x5}, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r1, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r1, 0x4, 0x4) sysfs$auto(0x3, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0x80000001}}, 0x3, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230027bd7000fcdbdf2508ffe9000c00038005000180030000000400028008"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty34\x00', 0x8000, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r5, 0x80dc5521, r4) semctl$auto_GETNCNT(0x0, 0x0, 0xe, 0xa8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket(0x2a, 0x2, 0x0) ioctl$auto(r6, 0x8912, 0x38) 45.323835984s ago: executing program 4 (id=4163): prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r2, 0x0, 0x0) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x19, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xfffffffe, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x7, 0x2, 0x9, 0x5, 0x1, 0x7, 0xb3, 0xc, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}, 0x1fe, 0x81) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_UNLOCK(0x200, 0xc, &(0x7f0000001340)={{0x33c, 0xee00, 0x0, 0xffff129a, 0x6, 0x4, 0x101}, 0x3ff, 0x200, 0x1, 0x3, @inferred=0x0, @raw=0x1, 0xb0fc, 0x0, &(0x7f0000001140), &(0x7f0000001240)="b84715281ddec019e72aeaf72098c1e75dc7c1d6e353dff804f7f17598a5e3727bb531248c92fb8cf667076b3e2b25215de9b7bd27a303622c2d4c6cb8f7b3a5b6bcad6a5bf011c6afd8df9427bd8a0cd16a92c8e72b0d5b4e88f6e3923d34b937272c40fc3ae19a067a6b4144b8af52f218faf71590e7f419c446474d10b867ea631caa867d0789138c5185af52b1ff821ad46ebf43e410b8c499202b9efbe3ee07720c67378c95ae5f"}) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000001700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000016c0)={&(0x7f0000003340)=ANY=[@ANYBLOB="d01d0000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="c72154657a21889b8e75cf15f34b9da4a4c437672b5e5bf978f8c89f1024b318fdc6acec219b8e6ae6ac2db7502ce6041b680ff37c72c2003ae041f018c852aef52338f035719eb5fb2dad623edd4ee5be27591d15e973787755a3d23b8eaea244689f176fda1684b72da64a629ef037e97e5fef18e9ed236a761ae3d27be2524d4e5f5c778b927d8c305f56f948e2fa74e748a044e753a37cf93d57e03d6c5cd30ee1aed11fec5b33e206de861f032b96557567abcfeaf2e92c3c028756660d56aa0662e2f4966a080073000000000014009580080041000200000008004800", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08008c00", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="9a502ea473ce3480dd2ad4cdcda3c1ed202dbd815e17deb38a0e205d858dd422ef8d4d4426a3ffeff56268e0754f2517f8799d520ceb9ce6d9980ade60125f2674665fd3386305f5614bddde65d61502d6495def38480fb488af5d4ccbb2240668d8a89ea552d85b3635561878f66229c9d09de133de968cdd4f1e3d8be49eeb12d38f0f4a19cd98b73543df1906a8ebb9509724b5b374bd1ab7a3140bf5617965a10b72d3950278c5486459f775740cc4d6aa8bfb45a9dd747490b3c01cc36101860a5645613d84807bca7d3c639bbb844190adfce5c5d682e791aff33e745a8f69141263f3f341fa2740f0585ed82b622c27853db7e137d8f4743b4fe9b092bdc311c11d99091a248dbdefa81ef935d547b424f7a984d1b48c550c005f0006000000000000000075c797c0fba365f674af4294940ab74835a2ae7e41246d9b150cde38da83016230dc200ace251c97297dfebfb8d4c7b50ab4a95e9991e3a2f10b3f09c721473fa8326ee835ba7fb82efba8e7e7ec613363d3eab8706ed277b59ea6510e9d0fdda0f6c727dbea11340f931c0e20e924a89c034b161fd8165f88c511c0983d8da414f35971fba6253d57684421c0cbb62740b1db37b1f0d8d6a12bdc550cfde91c0943ce4830d4b65eae45d7d264caa74833b76e2cabfb799096fc21f69443a129eedff92b08e81781858f7489fcad7bc309019d77afd8146b82a128d32e23b9523befc870f990dc0fb35b506879419e2af44007a4fe4198247e3b3f352e4f0decce9126a0494bc56646ba23a14ee28770a9e7ac97be169ecf036ab663ad99aee71c2e7cda484dfda686b413cdccebee4588a38f39741d08a5d5a2c59bfa38d227919f653596c7163855ed7f929a17cb3daeeb2b60e31db55dbcb3bd2f029577beb0f7071ad85e481d39e42f4a23b14c9a7a1110394bcb26558da2a7cefc5b204bf1e1d860a6d69f03b985e64ebce04328d75849879886e0c17bb36875f187d204715648289fe7cfc5a131b777694fad84b3d30400b3800400f700040084800f002e002f6465762f74747931370000000008009000", @ANYRES32=r0, @ANYBLOB="08001700", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\b\x00\b\x00\t\x00\x00\x00'], 0x1dd0}, 0x1, 0x0, 0x0, 0x24000001}, 0x40) r7 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8240, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) 44.907068202s ago: executing program 4 (id=4165): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1002}, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) 44.558998376s ago: executing program 4 (id=4167): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0x4b564d07, 0x400, 0x1000000000000010}]}) sendfile$auto(r0, r0, 0x0, 0x10000800000003) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty7\x00', 0x101681, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyde\x00', 0xa0102, 0x0) read$auto(0x3, 0x0, 0x30) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r4 = open(0x0, 0xeee00, 0x31) mmap$auto(0x3ff, 0x1, 0x6, 0x12, r4, 0x0) socket(0x2, 0x1, 0x106) syz_clone(0x200a0080, 0x0, 0x0, 0x0, 0x0, 0x0) 29.362425335s ago: executing program 34 (id=4167): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0x4b564d07, 0x400, 0x1000000000000010}]}) sendfile$auto(r0, r0, 0x0, 0x10000800000003) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty7\x00', 0x101681, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyde\x00', 0xa0102, 0x0) read$auto(0x3, 0x0, 0x30) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) r4 = open(0x0, 0xeee00, 0x31) mmap$auto(0x3ff, 0x1, 0x6, 0x12, r4, 0x0) socket(0x2, 0x1, 0x106) syz_clone(0x200a0080, 0x0, 0x0, 0x0, 0x0, 0x0) 12.114296173s ago: executing program 1 (id=4239): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x1, 0x8000000008011, 0x3, 0xfffffffffffffffd) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x80080, 0x0) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x8, 0x6, 0x5, 0x0, 0x0, 0xee01, 0x0, 0x2000000006, 0x20000000000003, 0x0, 0x7, 0x8, 0x5, 0x1000000001, 0x4, 0x1, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) (async) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) socket(0x3, 0x80000, 0x6) (async) socket(0x3, 0x80000, 0x6) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x28, 0x1, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000001380)={0x2, 0x0, [{0x277, 0x400, 0xffffffffffffffff}]}) write$auto(0x3, 0x0, 0x7fffffff) socket(0x2, 0x3, 0xa) (async) r3 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(r3, 0x0, 0x400fffd, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0) ioctl$auto(r4, 0x80045439, r4) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) socket(0x5, 0x5, 0x0) 8.503159274s ago: executing program 1 (id=4246): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd5/power/control\x00', 0x8140, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4, 0x4}, 0x7a, 0x0, 0x0, 0x63bd) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r2, 0x8000450a, r2) 8.49350012s ago: executing program 0 (id=4248): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$auto_UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, 0x0) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f836c34d10", @ANYRES16=r2, @ANYBLOB="0100253d7000fddbdf2501000000180007800c000180080001800000000008002300", @ANYRES32=0x0, @ANYBLOB="0cea01000600000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008880) 8.134661203s ago: executing program 0 (id=4249): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) r2 = prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x1c, r3, 0x3, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_CHANNELS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x118, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x6, 0x15, "7ba5"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x10, 0xb, '/dev/nullb0\x00'}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x584}, @HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '@'}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x5}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_CIPHER_SUPPORT={0xbd, 0x18, "532a0ab5a95659d4142390c40a12860af022e576c614b0efbaf8e767845f35e32af2facde37d934a03c82875ea2cb2ccdc6e6b6e92b78bd585f535e0d2ace7bfc6ab739c1ac76f84356d628da59e64610f5c52d7da3f8d409dda08ae4c6142f4cedc692ea17c800542ec33c3a9017365b7a34458422c59f502c6e941fa8ec22b59a106bc216c28737ce9863b25f87a4037988d2b68a1606f7da4c23a8e16cead569c901850176b9c728e55a8c5f6edfe63609d351326ead244"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x4}]}, 0x118}}, 0x40004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0000, 0x0) 7.514237927s ago: executing program 5 (id=4251): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r5, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) readv$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7}, 0x8) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r6, 0x0, 0x20) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r7, 0x0, 0x2) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xc44c1, 0x0) 7.511832636s ago: executing program 1 (id=4252): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002a80), r0) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002a80), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) (async) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$auto_RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000200)=0x9) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) (async) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r4, 0x0, 0x20) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x2003f0, 0x15) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="09072b5498f0eddbdf250300000005"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/wg0/accept_untracked_na\x00', 0x10300, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) (async) r5 = socket(0xa, 0x5, 0x0) setsockopt$auto(r5, 0x10000000084, 0x4, 0x0, 0x4) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec10\x00', 0x101901, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) r7 = epoll_create$auto(0x4) epoll_ctl$auto(r7, 0x1, r6, 0x0) 6.852140648s ago: executing program 6 (id=4207): utime$auto(0x0, 0xfffffffffffffffc) mmap$auto(0xfffffffffffffffc, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1, 0x10401}, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="000500706d953c1eaa7e9220621e7bc95d35cdb4567832bec123419c8982d6a078d983d5cd9364f92b15b53d887dfcb6fd3e8a5d8c699663a0f31cfa0032eeee82567175bc9697ad1bfc442d61d0c7e48eb7a4faef561a5e36d5ae9485d8518f1a30d1139c2b793c41aded8fb82ef6ed78033888303f6ac935765f6e850e782373d7b4a918f0a048486baabbab1a4cd0231eab275c61261a025abbe421d47c14a4cbe0afedb10a2150f132da49ab1f8ea5447240c3571cbe6280315baf408ba4cff935bbcbe5834efcf709f52214a7f79c719d006d0e47e3f7cfbbbe48de1a3d0403f35d156850a46baca5d6a3", @ANYRES16=r4, @ANYBLOB="01002bbd7000fadbdf250400000004000d00"], 0x18}}, 0x4044820) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0xffffffffffffffff) mmap$auto(0x0, 0x420008, 0x7fffffffffffffff, 0xeb1, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3f) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x12, 0x1fe, 0x8000) io_uring_setup$auto(0xa, 0x0) setsockopt$auto(0x3, 0x1084, 0xf, 0x0, 0x8) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0xc048aeca, 0x0) getsockopt$auto_SO_PEERSEC(r2, 0x2, 0x1f, &(0x7f0000000000)='/dev/loop-control\x00', &(0x7f0000000080)=0x6) 6.455906279s ago: executing program 5 (id=4253): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0x6) (async) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) (async) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) r0 = socket(0x2, 0x801, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r1 = clone3$auto(0x0, 0x10001) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) socket(0x25, 0x6, 0x1) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x7, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x2201, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x2201, 0x0) prctl$auto(0x940b, 0x1, r1, 0x3, 0x1000000000200000) (async) prctl$auto(0x940b, 0x1, r1, 0x3, 0x1000000000200000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7ff, 0x1, 0xd, 0x1, 0x4, 0x8, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2000000000000002, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0xfffffffffffffffe, 0x400109, 0x1fb, 0x9b72, 0x2, 0x8000) fsopen$auto(0x0, 0x1) (async) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) close_range$auto(r3, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 4.905345464s ago: executing program 6 (id=4254): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x301, 0x5) (async) r1 = prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async, rerun: 32) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000020, 0x400, 0x9}]}) (async, rerun: 64) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) socket(0x1e, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x81, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x5, 0x6d40, 0x1, 0x2, 0x1200]}, 0x0) (rerun: 32) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) (async) mmap$auto(0x80000, 0x2020009, 0x3, 0x78, r1, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (rerun: 32) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00C\x00\x00', @ANYRES64=r3, @ANYBLOB="100026bd7000fedbbc25030000000800040008000000060007000000000000000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async, rerun: 64) socket(0x10, 0x2, 0x0) (rerun: 64) 4.901038332s ago: executing program 5 (id=4255): open(0x0, 0x4242, 0xe1d2b27bdc14aabc) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r0 = socket(0xa, 0x1, 0x100) (async) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) (async) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x405, 0x5, 0x3}}}) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) (async) r2 = socket(0x11, 0x3, 0x2) getsockopt$auto(r2, 0x107, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) (async) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(0xffffffffffffffff, 0x5, 0x0, 0x1) (async) open(0x0, 0x2a4c0, 0x40) (async, rerun: 32) execve$auto(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') (rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0xd) 4.477288855s ago: executing program 1 (id=4256): socket(0x10, 0x2, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) socket(0x28, 0x1, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x7ffffffb, 0x13, 0x401, 0x8000) capset$auto(0x0, 0xfffffffffffffffe) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x8, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c50000000000ef3d00"}) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) close_range$auto(r1, r0, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0xc0045401, 0xffffffffffffffff) mmap$auto(0x400, 0x100000020009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) ioctl$auto(0x3, 0x3, 0x38) mmap$auto(0xfffffffffffffffb, 0x2000c, 0xe4, 0x20eb1, 0x40000000000a5, 0x8000000a) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/fail-nth\x00', 0x151241, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88100, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x40, 0x3, 0x0, 0xfffffffffffffff7, 0xffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000240)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x1000000004, 0x4000000000df, 0x10000000000eb1, 0x401, 0x8000) setresuid$auto(0x2, 0x7, 0x0) r3 = socket(0x2, 0x4, 0x0) getsockopt$auto(r3, 0x0, 0x41, 0x0, &(0x7f0000000240)=0x4) io_uring_setup$auto(0x1ced, 0x0) 3.661937732s ago: executing program 0 (id=4257): r0 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffff5fdffe00, &(0x7f0000000400)=';') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) fsconfig$auto_FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='/dev/dma_heap/system\x00', &(0x7f0000000080)="5622a7fcf8700a93e3d9223f4b57ea6f16c35dd83f45f7d48b1fa8a99d310f17afbcaad85bbbe074963e4226676c16d8d9a2ed7fe9a2e18ec97a4a15c0bcb0b95441cc8d054d5f252832590e7ab10afcd8c1448580442942acf1ad4420d44aaf6afd6f104b0831e94fbbcf9d7fbec4894f9219c8b3ba875b74ca83ba513d9783e765ccfe2bd2fc564b87cb112c7d0fe157721816f1dc26245f3a250c4cfc92e1148123f0eee6f9a389fdc8859a64d4209d25a0432b5022070813bfa03b3b1abadb75fce2563d75d9a52a58367253568643eb5f74125dec14225993d009c54b0956e3cbf10035d256a1fbf3d860896123093ed64e8da68ded", 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x20800, 0x0) r4 = fcntl$auto(0x3, 0x4, 0xa553) r5 = memfd_secret$auto(0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000008d03147e77cc1d13df98bbef0c63678a5f60d890b3718a00003810000", @ANYRES32=r9, @ANYBLOB="08000a01020a0000"], 0x24}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xe8, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000090) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) unshare$auto(0x40000080) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) readahead$auto(r0, 0x3, 0x200) 3.540127988s ago: executing program 6 (id=4258): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000200000008000300000400000a00050000000000000000000a0000f0ffffffffffff00000a0000000000f1ff07000000"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0xffffffffffffffff, 0x8, 0x3) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)="000004") write$auto(r0, 0x0, 0x41ec) socket(0x2, 0x3, 0x100) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000280), 0x7a5dc0, 0x0) r2 = fanotify_init$auto(0x4, 0x2) ioctl$auto(0x3, 0x541b, 0x10000000000402) write$auto(r2, 0x0, 0x81) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000004c0)="4b6883fddc1f44aaa9b87917e5821a0000000000000080ff0ff06e79", 0x1c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000000006}, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0x14, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="41002dbd7000fbdbdf2505000000257520dfc021031c0c6b11ad31506282d505d898af215302df2f5ad4535c6303d5b7807a95bee94c63fe61288627ce06e8ddd4a00e70723145a90bf75d6dcebb476ab6a5e69519c20542d0d9a1f3ec9f54b524a6773009ddb7b1d1446aad887c1524cf97517909f736f4de78a0953465e77efdec950f3a7df38462ca70e0115feaa16765b027a22540b78dd409bc714f61b94db80c9fd607451fbc537abf05d151e0bf1fe08eae94cc29c5a5"], 0x14}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) pkey_free$auto(0xfffffffd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) 2.765216524s ago: executing program 5 (id=4259): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) io_uring_setup$auto(0x85, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) ioctl$auto(r0, 0x4008af03, r0) 2.669311638s ago: executing program 1 (id=4260): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x6, 0x5, 0x2) (async) userfaultfd$auto(0x1) (async) r1 = socket(0xa, 0x801, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r3, 0xae03, 0xaf) (async) io_uring_setup$auto(0x3, 0x0) (async) r4 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=r1, 0x4, @old_prog_fd=r4}, 0xa3) (async) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000004c0)='nfsd\x00~T\x93Q\x92-|\x1ei=\'8&\x13~\xd9t\xec\v\xc3\xfd\x8b\x1a\xd0wWXfa\f\v_\x9e:\x88\x9ej\x1aYAW\xa5a\x13\x9c\xae\x17\x7fob\xde\xb3\\\x94\xfal\xf2Y\xfd+\xf2\xf8\x88\xc4\xb8fI\xde6#mP\xe7\x85\'\x1b\x04\xcd\x1fW\x88T\xe9\x1e\xb7\xa20\t\x17\xc16\f\x05?-\xb2\x91\x1f\x8b}\n\xd7~\xdd\xb6\xee\xf1 \x9d\xd8\xd2kt}\xe3\xe4Q\xc4\x81\x11\xc0,\x89\xa5)\xf0y4\xb6\x9e\xf0h\x7f\x04\x91\x92|b\xe9\xcd\x10\x92\xe2\x03Op\x14Fe\xb6\x11\x9c\xe5\xe4X+\x94\xe4rJ\xf1\xa6\x86\xf0\xbd\x04uin', 0x800, 0x0) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3375, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (async) r7 = getsid$auto(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100"], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x240, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x98}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_BSS_SELECT={0x1b4, 0xe3, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @uid=0xee01}, @nested={0x18c, 0xf8, 0x0, 0x1, [@typed={0x91, 0xb5, 0x0, 0x0, @binary="a621ef2c0ed958be3434d301c5ad6710568065f187459976c5bf8e9a9d0dffebf3ef3742c0a5b489cea71fcf9883efdde17ff086efe89777ec54d69d1942ca8bc00ca8eb5ecd1b27051c15aa869e8832e3f83113ee8e3bb7ce610327431bee0e2e1dc34013958b0b1a848db1158cbdf8a6827e5cf6405402bb4bc6fd46837de9ead231dd5370150674ccd246e4"}, @typed={0x33, 0x113, 0x0, 0x0, @binary="5ad9765ede784d0ef779373c4d4a563b80caf874f79e3f35a15335d7ab4f7fec34c1db3b3eeb2d8f0350969d33351f"}, @nested={0x4, 0x50}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x6}, @generic="c6d7a7ee063ec7cf91cca61df5321f033aa928304d6cb8e6d416eab2356b37d8401c34a91b0d4e1f2df12aeea7a9f48ccbfde620127390f9b44b99e00a94361cf618f22057a80f1c02bc08b171e4a33b2cbcd1c4c8c88ef7eeb097c2324171d562d8639da215101b50ac7e89970606dfd72df5c1885e43b1a1daef466298ab8aadd4e3ca90f146351cae5e8e0236f4f65d74d944e6b77e175917a4bf5c3ed6515cd621a9e495306c06271b8a02682fc6e8d9c165"]}, @typed={0x8, 0x4a, 0x0, 0x0, @uid}, @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x8001}, @NL80211_ATTR_MBSSID_CONFIG={0x48, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r9}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x6}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x81}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x44}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x1}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xf9}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xc}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}]}, 0x240}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2.647165665s ago: executing program 0 (id=4261): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x5, 0xffffffffffff0003, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x68003, 0x1) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x97) mmap$auto(0x800, 0x9, 0xb2, 0x9b72, 0xc76, 0x8000) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) sendmsg$auto(r2, 0x0, 0x5) select$auto(0x9, &(0x7f00000000c0)={[0xeeca, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) 2.36118359s ago: executing program 5 (id=4262): msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000600)={{0x81, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x16}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x9, 0x7, 0x101, 0x3, 0xe, 0x8, @raw=0x2, @raw=0x2}) (async) r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010028bd7000ffdadf2506e18f3a1ceafc1919ca613552f90f87"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x371b42, 0x188) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10b9330e4cfcf998df252d06000069bbe7cf2faf05000000000000001b299781a08e2b5f71a3300bcebcc409bb74f33b2d37959c66cdf80d7ccd31e4dc129d633caea6712197e3e79e8fb4dbe9e48abba82ef3eb966615c964662b9c85f3f467c7986641fd1d5f74cf95be139b339b62bd04fda45a0a4580d625e30e653616000000000000f841922f0b"], 0x14}}, 0x0) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x27ff) (async) msgget$auto(0xc, 0x77d9) (async) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) (async) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x84, 0x22, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) (async) read$auto(0x3, 0x0, 0x80) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x2, 0x0) read$auto(r2, &(0x7f0000000580)='\x00', 0xa3eb) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000680)={0x8, 0x1, 0xa, 0x8, 0x2000000b, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0xfffffff8, 0x5, 0x20000000003, 0x5, 0xb0, 0x9, 0x6, 0x3, 0x5, 0xa, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x2, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x839, 0x1, 0x4, 0x0, 0x10000, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x4, 0x0, 0x9, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2000000000000002], "a496587fef3edf0fe52f0600000000000000e2694a298ac8647a12ac0483d30cd3803d217a0af852b3eb69169b3980fc6ef15c0ea52c475e1a23c74a754180c439fda774867a33a5600de24b124468b9a74c82c9c65d581133b92a7ab89670082d6b33eb7ce0fe2c236cbd12830c6ee4e2519ee8931b63f6fb78a66d505f5d89c9f484a0e955b07a021ce50c55a54dd563d107"}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="504a98eed60000000000200000000000", @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.889373824s ago: executing program 5 (id=4263): r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) (async) read$auto_fops_u64_ro_(r0, &(0x7f00000001c0)=""/148, 0x94) (async) socket(0xa, 0x1, 0x107) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) (async) futex$auto(0x0, 0x3, 0x0, 0x0, 0x0, 0x440a48d3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sched_get_priority_min$auto(0x40) (async) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x1, 0x0) (async) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x1ed242, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_EPCS_CFG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x11) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0x7}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x80000007, 0xe, 0x0) 1.534236299s ago: executing program 6 (id=4264): openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80002, 0x0) poll$auto(0x0, 0x2, 0x7) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r1 = open(0x0, 0x4242, 0x40) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x24000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) msync$auto(0x8, 0x6, 0x5) open(0x0, 0x22240, 0x55) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80002, 0x0) (async) poll$auto(0x0, 0x2, 0x7) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) (async) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) (async) open(0x0, 0x4242, 0x40) (async) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x24000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) (async) msync$auto(0x8, 0x6, 0x5) (async) open(0x0, 0x22240, 0x55) (async) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) (async) 1.446615012s ago: executing program 0 (id=4265): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) exit$auto(0x6) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x5402, 0xffffffffffffffff) ioctl$auto(0x3, 0x541b, 0x38) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mprotect$auto(0x0, 0x806121, 0x6) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x80000001]}, 0x0, 0x0, &(0x7f0000001040)) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x30, 0x0, 0x20056b) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000004180)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x9f}]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r4 = setfsuid$auto(0xee01) keyctl$auto(0x1d, 0xffffffffffffffff, r4, 0x0, 0x6) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000fcdbdf250100ddff0c00050003000000000001000c00050000000000000000000c000780080005f8", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40080c4}, 0x40090) close_range$auto(r1, r1, 0xc0) 1.349200614s ago: executing program 1 (id=4266): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f00000001c0)={0x0, 0x8, 0x80}) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0) ioctl$auto_OTPSELECT(r2, 0x80044d0d, &(0x7f00000000c0)=0x10009) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(0x3, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) 312.375843ms ago: executing program 0 (id=4267): unshare$auto(0x40000080) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e010600020000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x45441, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0080, 0x0) pread64$auto(r3, 0x0, 0xb69c, 0x6) pipe$auto(0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 0s ago: executing program 6 (id=4268): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x80000, 0xffff0004) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x3, 0x0, 0x8000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000440)={"e863192c8ee2c138c20ae365128c2bc22cf83f1a7155aed629c4952dc7dff02a", 0x80, 0x7, 0x5, 0x8, 0x7, 0xffffffffffffffff}) shmctl$auto_SHM_STAT_ANY(0x80, 0xf, 0x0) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0xfff) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) kernel console output (not intermixed with test programs):                       syzkaller syzkaller login: [ 536.861318][T12656] FAULT_INJECTION: forcing a failure. [ 536.861318][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 536.883253][T12656] CPU: 0 UID: 0 PID: 12656 Comm: syz.5.1138 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 536.883305][T12656] Tainted: [U]=USER [ 536.883316][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.883335][T12656] Call Trace: [ 536.883345][T12656] [ 536.883358][T12656] dump_stack_lvl+0x16c/0x1f0 [ 536.883412][T12656] should_fail_ex+0x512/0x640 [ 536.883457][T12656] ? __kmalloc_noprof+0xbf/0x510 [ 536.883502][T12656] ? kvm_set_irq_routing+0xf3/0x980 [ 536.883534][T12656] should_failslab+0xc2/0x120 [ 536.883557][T12656] __kmalloc_noprof+0xd2/0x510 [ 536.883599][T12656] kvm_set_irq_routing+0xf3/0x980 [ 536.883634][T12656] ? kvm_ioapic_init+0x416/0x550 [ 536.883672][T12656] kvm_arch_vm_ioctl+0x941/0x1cf0 [ 536.883702][T12656] ? ima_match_policy+0x7f9/0x22e0 [ 536.883728][T12656] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 536.883761][T12656] ? __lock_acquire+0x622/0x1c90 [ 536.883801][T12656] ? __lock_acquire+0x622/0x1c90 [ 536.883840][T12656] ? __lock_acquire+0x622/0x1c90 [ 536.883879][T12656] ? __lock_acquire+0x622/0x1c90 [ 536.883934][T12656] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.883964][T12656] ? is_bpf_text_address+0x94/0x1a0 [ 536.883997][T12656] ? kernel_text_address+0x8d/0x100 [ 536.884036][T12656] ? __kernel_text_address+0xd/0x40 [ 536.884074][T12656] ? unwind_get_return_address+0x59/0xa0 [ 536.884113][T12656] ? arch_stack_walk+0xa6/0x100 [ 536.884147][T12656] ? stack_trace_save+0x8e/0xc0 [ 536.884173][T12656] ? __pfx_stack_trace_save+0x10/0x10 [ 536.884200][T12656] ? stack_depot_save_flags+0x28/0xa40 [ 536.884237][T12656] ? __lock_acquire+0xb8a/0x1c90 [ 536.884273][T12656] ? kasan_save_stack+0x42/0x60 [ 536.884306][T12656] ? kasan_save_stack+0x33/0x60 [ 536.884339][T12656] ? kasan_save_track+0x14/0x30 [ 536.884372][T12656] ? kasan_save_free_info+0x3b/0x60 [ 536.884399][T12656] ? __kasan_slab_free+0x51/0x70 [ 536.884434][T12656] ? kfree+0x2b4/0x4d0 [ 536.884460][T12656] ? tomoyo_path_number_perm+0x470/0x580 [ 536.884488][T12656] ? security_file_ioctl+0x9b/0x240 [ 536.884522][T12656] ? __x64_sys_ioctl+0xb7/0x210 [ 536.884548][T12656] ? do_syscall_64+0xcd/0x490 [ 536.884589][T12656] kvm_vm_ioctl+0x19bb/0x3da0 [ 536.884639][T12656] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 536.884693][T12656] ? kasan_quarantine_put+0x10a/0x240 [ 536.884727][T12656] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.884766][T12656] ? find_held_lock+0x2b/0x80 [ 536.884792][T12656] ? tomoyo_path_number_perm+0x295/0x580 [ 536.884825][T12656] ? tomoyo_path_number_perm+0x18d/0x580 [ 536.884855][T12656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 536.884883][T12656] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 536.884922][T12656] ? do_vfs_ioctl+0x523/0x1a60 [ 536.884949][T12656] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 536.884997][T12656] ? find_held_lock+0x2b/0x80 [ 536.885020][T12656] ? hook_file_ioctl_common+0x145/0x410 [ 536.885052][T12656] ? __fget_files+0x20e/0x3c0 [ 536.885089][T12656] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 536.885129][T12656] __x64_sys_ioctl+0x18e/0x210 [ 536.885159][T12656] do_syscall_64+0xcd/0x490 [ 536.885196][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.885250][T12656] RIP: 0033:0x7f644f98e929 [ 536.885269][T12656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.885293][T12656] RSP: 002b:00007f6450735038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.885316][T12656] RAX: ffffffffffffffda RBX: 00007f644fbb6080 RCX: 00007f644f98e929 [ 536.885331][T12656] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 536.885346][T12656] RBP: 00007f644fa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 536.885361][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.885374][T12656] R13: 0000000000000000 R14: 00007f644fbb6080 R15: 00007ffda145c298 [ 536.885404][T12656] [ 537.270299][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.890476][T12668] FAULT_INJECTION: forcing a failure. [ 537.890476][T12668] name fail_futex, interval 1, probability 0, space 0, times 0 [ 537.904671][T12668] CPU: 0 UID: 0 PID: 12668 Comm: syz.4.1140 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 537.904720][T12668] Tainted: [U]=USER [ 537.904731][T12668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.904750][T12668] Call Trace: [ 537.904760][T12668] [ 537.904771][T12668] dump_stack_lvl+0x16c/0x1f0 [ 537.904826][T12668] should_fail_ex+0x512/0x640 [ 537.904878][T12668] get_futex_key+0x293/0x1540 [ 537.904922][T12668] ? __pfx_get_futex_key+0x10/0x10 [ 537.904961][T12668] ? __mutex_trylock_common+0xe9/0x250 [ 537.905017][T12668] futex_wake+0xe7/0x4e0 [ 537.905067][T12668] ? __pfx_futex_wake+0x10/0x10 [ 537.905110][T12668] ? __lock_acquire+0xb8a/0x1c90 [ 537.905175][T12668] do_futex+0x1e3/0x350 [ 537.905216][T12668] ? __pfx_do_futex+0x10/0x10 [ 537.905252][T12668] ? __might_fault+0xe3/0x190 [ 537.905311][T12668] mm_release+0x24e/0x300 [ 537.905350][T12668] do_exit+0x68b/0x2bd0 [ 537.905415][T12668] ? __pfx_do_exit+0x10/0x10 [ 537.905459][T12668] ? do_raw_spin_lock+0x12c/0x2b0 [ 537.905507][T12668] ? find_held_lock+0x2b/0x80 [ 537.905546][T12668] do_group_exit+0xd3/0x2a0 [ 537.905595][T12668] get_signal+0x2673/0x26d0 [ 537.905642][T12668] ? poll_select_finish+0x377/0x6b0 [ 537.905689][T12668] ? __pfx_get_signal+0x10/0x10 [ 537.905731][T12668] ? __pfx_do_futex+0x10/0x10 [ 537.905776][T12668] arch_do_signal_or_restart+0x8f/0x790 [ 537.905818][T12668] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 537.905869][T12668] ? xfd_validate_state+0x61/0x180 [ 537.905912][T12668] ? __pfx_ksys_write+0x10/0x10 [ 537.905969][T12668] exit_to_user_mode_loop+0x84/0x110 [ 537.906024][T12668] do_syscall_64+0x3f6/0x490 [ 537.906076][T12668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.906109][T12668] RIP: 0033:0x7f4bda98e929 [ 537.906135][T12668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.906167][T12668] RSP: 002b:00007f4bd87f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 537.906199][T12668] RAX: fffffffffffffdfe RBX: 00007f4bdabb6080 RCX: 00007f4bda98e929 [ 537.906221][T12668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 537.906241][T12668] RBP: 00007f4bdaa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 537.906261][T12668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.906281][T12668] R13: 0000000000000000 R14: 00007f4bdabb6080 R15: 00007ffee21d2b68 [ 537.906322][T12668] [ 538.155883][ C0] vkms_vblank_simulate: vblank timer overrun [ 539.027958][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1143'. [ 540.184429][ T5849] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 540.184477][ T5849] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 540.203211][ T5849] Bluetooth: hci1: Dropping invalid advertising data [ 540.210576][ T5849] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 540.210625][ T5849] Bluetooth: hci1: Dropping invalid advertising data [ 540.224828][ T5849] Bluetooth: hci1: Dropping invalid advertising data [ 540.233086][ T5849] Bluetooth: hci1: Malformed LE Event: 0x02 [ 542.559007][T12746] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1153'. [ 542.835877][ T5849] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 562.858678][T13906] Process accounting paused [ 570.126932][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 570.172196][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 570.193321][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 570.212594][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 570.242315][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 571.550191][T14325] chnl_net:caif_netlink_parms(): no params data found [ 571.788095][T12683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.078157][T12683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.283980][ T51] Bluetooth: hci2: command tx timeout [ 572.338726][T12683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.690983][T12683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.772029][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.779264][T14325] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.817088][T14325] bridge_slave_0: entered allmulticast mode [ 572.828181][T14325] bridge_slave_0: entered promiscuous mode [ 572.844860][T14325] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.861009][T14325] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.885300][T14325] bridge_slave_1: entered allmulticast mode [ 572.913441][T14325] bridge_slave_1: entered promiscuous mode [ 573.119816][T14325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.166552][T14325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.250743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.257306][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.470874][T14325] team0: Port device team_slave_0 added [ 573.505439][T14325] team0: Port device team_slave_1 added [ 573.739071][T12683] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.837967][T14325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.871789][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.968133][T14325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.024156][T14325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.042045][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.136902][T14325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.361711][ T51] Bluetooth: hci2: command tx timeout [ 574.471032][T14325] hsr_slave_0: entered promiscuous mode [ 574.488818][T14325] hsr_slave_1: entered promiscuous mode [ 574.502982][T14325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.510642][T14325] Cannot create hsr debugfs directory [ 576.443192][ T51] Bluetooth: hci2: command tx timeout [ 576.696631][T12683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.726801][T12683] bond0 (unregistering): Released all slaves [ 576.927381][T12683] tipc: Left network mode [ 578.472731][T12683] hsr_slave_0: left promiscuous mode [ 578.518542][T12683] hsr_slave_1: left promiscuous mode [ 578.534190][ T51] Bluetooth: hci2: command tx timeout [ 578.540330][T12683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.569252][T12683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.649403][T12683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.706532][T12683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.837640][T12683] veth1_macvtap: left promiscuous mode [ 578.871713][T12683] veth0_macvtap: left promiscuous mode [ 578.877582][T12683] veth1_vlan: left promiscuous mode [ 578.912900][T12683] veth0_vlan: left promiscuous mode [ 581.342767][T12683] team0 (unregistering): Port device team_slave_0 removed [ 584.932968][T14325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.951355][T14325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 585.074040][T14325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 585.123492][T14325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.581946][T14325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.685435][T14325] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.754508][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.761886][T12682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.838598][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.845885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.997812][T14325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.235047][T14325] veth0_vlan: entered promiscuous mode [ 587.289213][T14325] veth1_vlan: entered promiscuous mode [ 587.489210][T14325] veth0_macvtap: entered promiscuous mode [ 587.530893][T14325] veth1_macvtap: entered promiscuous mode [ 587.636451][T14325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.728611][T14325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.775067][T14325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.817579][T14325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.837282][T14325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.861736][T14325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.285247][T12683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.337521][T12683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.497014][ T6798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.535051][ T6798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.165065][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 589.945479][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.956270][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.965925][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.975149][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.983025][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 590.405733][T12683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.608766][T12683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.870838][T12683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.169534][T12683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.473193][T15248] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 591.818208][T15253] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 591.828185][T15190] chnl_net:caif_netlink_parms(): no params data found [ 592.045184][ T5849] Bluetooth: hci1: command tx timeout [ 592.673870][T15190] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.693447][T15190] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.700796][T15190] bridge_slave_0: entered allmulticast mode [ 592.734513][T15190] bridge_slave_0: entered promiscuous mode [ 592.777535][T15190] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.831791][T15190] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.859415][T15190] bridge_slave_1: entered allmulticast mode [ 592.893903][T15190] bridge_slave_1: entered promiscuous mode [ 593.008911][T12683] bridge_slave_1: left allmulticast mode [ 593.030514][T12683] bridge_slave_1: left promiscuous mode [ 593.051957][T12683] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.125886][T12683] bridge_slave_0: left allmulticast mode [ 593.142018][T12683] bridge_slave_0: left promiscuous mode [ 593.147923][T12683] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.122535][ T5849] Bluetooth: hci1: command tx timeout [ 595.813261][T15397] program syz.1.3034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.201722][ T5849] Bluetooth: hci1: command tx timeout [ 596.379721][T12683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.430933][T12683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.468852][T12683] bond0 (unregistering): Released all slaves [ 596.658216][T15190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.685554][T15190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.022431][T15190] team0: Port device team_slave_0 added [ 597.086448][T15190] team0: Port device team_slave_1 added [ 597.375770][T15190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.400367][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.466051][T15190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.637797][T15190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.645393][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.686048][T15190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.238800][T15190] hsr_slave_0: entered promiscuous mode [ 598.268749][T15190] hsr_slave_1: entered promiscuous mode [ 598.277375][T15190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.291495][ T5849] Bluetooth: hci1: command tx timeout [ 598.298227][T15190] Cannot create hsr debugfs directory [ 599.191300][T12683] hsr_slave_0: left promiscuous mode [ 599.225189][T12683] hsr_slave_1: left promiscuous mode [ 599.304161][T12683] veth1_macvtap: left promiscuous mode [ 599.309804][T12683] veth0_macvtap: left promiscuous mode [ 599.361806][T12683] veth1_vlan: left promiscuous mode [ 599.367261][T12683] veth0_vlan: left promiscuous mode [ 600.799371][T15573] FAULT_INJECTION: forcing a failure. [ 600.799371][T15573] name fail_futex, interval 1, probability 0, space 0, times 0 [ 600.942442][T15573] CPU: 0 UID: 0 PID: 15573 Comm: syz.1.3139 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 600.942491][T15573] Tainted: [U]=USER [ 600.942502][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.942521][T15573] Call Trace: [ 600.942531][T15573] [ 600.942543][T15573] dump_stack_lvl+0x16c/0x1f0 [ 600.942593][T15573] should_fail_ex+0x512/0x640 [ 600.942644][T15573] get_futex_key+0x1d0/0x1540 [ 600.942688][T15573] ? __pfx_get_futex_key+0x10/0x10 [ 600.942729][T15573] ? stack_trace_save+0x8e/0xc0 [ 600.942772][T15573] futex_wait_setup+0x84/0x510 [ 600.942829][T15573] __futex_wait+0x194/0x2f0 [ 600.942878][T15573] ? __pfx___futex_wait+0x10/0x10 [ 600.942939][T15573] ? __pfx_futex_wake_mark+0x10/0x10 [ 600.943001][T15573] ? __futex_hash.constprop.0+0x1e9/0x440 [ 600.943044][T15573] futex_wait+0xe8/0x380 [ 600.943089][T15573] ? __pfx_futex_wait+0x10/0x10 [ 600.943159][T15573] do_futex+0x229/0x350 [ 600.943200][T15573] ? __pfx_do_futex+0x10/0x10 [ 600.943244][T15573] ? __pfx___might_resched+0x10/0x10 [ 600.943286][T15573] __x64_sys_futex+0x1e0/0x4c0 [ 600.943328][T15573] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 600.943372][T15573] ? __pfx___x64_sys_futex+0x10/0x10 [ 600.943411][T15573] ? ksys_mmap_pgoff+0x85/0x5c0 [ 600.943445][T15573] ? xfd_validate_state+0x61/0x180 [ 600.943504][T15573] do_syscall_64+0xcd/0x490 [ 600.943555][T15573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.943588][T15573] RIP: 0033:0x7f05fdf8e929 [ 600.943614][T15573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.943647][T15573] RSP: 002b:00007f05feebb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 600.943677][T15573] RAX: ffffffffffffffda RBX: 00007f05fe1b5fa8 RCX: 00007f05fdf8e929 [ 600.943698][T15573] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f05fe1b5fa8 [ 600.943719][T15573] RBP: 00007f05fe1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 600.943738][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05fe1b5fac [ 600.943758][T15573] R13: 0000000000000000 R14: 00007fffbed31f60 R15: 00007fffbed32048 [ 600.943799][T15573] [ 601.168753][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.595136][T15190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 603.637636][T15190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 603.673749][T15190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 603.716276][T15190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 604.045251][T15190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.132168][T15190] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.175134][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.182410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.234066][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.241342][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.743591][T15190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.023503][T15808] FAULT_INJECTION: forcing a failure. [ 606.023503][T15808] name fail_futex, interval 1, probability 0, space 0, times 0 [ 606.038058][T15808] CPU: 0 UID: 0 PID: 15808 Comm: syz.1.3259 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 606.038121][T15808] Tainted: [U]=USER [ 606.038132][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.038155][T15808] Call Trace: [ 606.038166][T15808] [ 606.038178][T15808] dump_stack_lvl+0x16c/0x1f0 [ 606.038238][T15808] should_fail_ex+0x512/0x640 [ 606.038295][T15808] get_futex_key+0x1d0/0x1540 [ 606.038340][T15808] ? __pfx_get_futex_key+0x10/0x10 [ 606.038394][T15808] futex_wake+0xe7/0x4e0 [ 606.038452][T15808] ? __pfx_futex_wake+0x10/0x10 [ 606.038501][T15808] ? rcu_is_watching+0x12/0xc0 [ 606.038553][T15808] do_futex+0x1e3/0x350 [ 606.038594][T15808] ? __pfx_do_futex+0x10/0x10 [ 606.038640][T15808] ? __pfx___might_resched+0x10/0x10 [ 606.038683][T15808] __x64_sys_futex+0x1e0/0x4c0 [ 606.038727][T15808] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 606.038771][T15808] ? __pfx___x64_sys_futex+0x10/0x10 [ 606.038813][T15808] ? xfd_validate_state+0x61/0x180 [ 606.038856][T15808] ? __pfx___do_sys_close_range+0x10/0x10 [ 606.038928][T15808] do_syscall_64+0xcd/0x490 [ 606.038982][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.039016][T15808] RIP: 0033:0x7f05fdf8e929 [ 606.039044][T15808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.039078][T15808] RSP: 002b:00007f05fee9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 606.039111][T15808] RAX: ffffffffffffffda RBX: 00007f05fe1b6088 RCX: 00007f05fdf8e929 [ 606.039132][T15808] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f05fe1b608c [ 606.039153][T15808] RBP: 00007f05fe1b6080 R08: 00007f05feebc000 R09: 0000000000000000 [ 606.039174][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05fe1b608c [ 606.039194][T15808] R13: 0000000000000000 R14: 00007fffbed31f60 R15: 00007fffbed32048 [ 606.039238][T15808] [ 606.974942][T15190] veth0_vlan: entered promiscuous mode [ 607.009938][T15190] veth1_vlan: entered promiscuous mode [ 607.087128][T15190] veth0_macvtap: entered promiscuous mode [ 607.108092][T15190] veth1_macvtap: entered promiscuous mode [ 607.157644][T15190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.190136][T15190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.214667][T15190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.227358][T15190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.238373][T15190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.261773][T15190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.425841][T12683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.448809][T12683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.508974][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.529135][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.832344][T15881] Ignoring unsupported numa_zonelist_order value: [ 607.832344][T15881] [ 608.955643][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 608.999613][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 609.016036][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 609.043200][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 609.051188][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 609.100259][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 609.416208][ T1138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.634101][ T1138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 609.828390][ T1138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.970712][ T1138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.081962][ T5849] Bluetooth: hci0: command tx timeout [ 611.260173][T15968] input: f as /devices/virtual/input/input37 [ 612.296037][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.311070][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.337854][ T1138] bond0 (unregistering): Released all slaves [ 612.398311][T15918] chnl_net:caif_netlink_parms(): no params data found [ 612.876047][T15993] ptrace attach of "./syz-executor exec"[15190] was attempted by "./syz-executor exec"[15993] [ 613.155069][T15918] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.164954][ T5849] Bluetooth: hci0: command tx timeout [ 613.184106][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.191791][T15918] bridge_slave_0: entered allmulticast mode [ 613.199490][T15918] bridge_slave_0: entered promiscuous mode [ 613.211034][T15918] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.218535][T15918] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.232027][T15918] bridge_slave_1: entered allmulticast mode [ 613.245248][T15918] bridge_slave_1: entered promiscuous mode [ 613.478712][T15918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.707898][T15918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.741865][ T1138] hsr_slave_0: left promiscuous mode [ 613.759253][ T1138] hsr_slave_1: left promiscuous mode [ 613.777393][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.790043][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.805506][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.821754][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.867530][ T1138] veth1_macvtap: left promiscuous mode [ 613.881834][ T1138] veth0_macvtap: left promiscuous mode [ 613.887595][ T1138] veth1_vlan: left promiscuous mode [ 613.901931][ T1138] veth0_vlan: left promiscuous mode [ 614.947880][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 615.036162][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 615.241757][ T5849] Bluetooth: hci0: command tx timeout [ 616.014595][T15918] team0: Port device team_slave_0 added [ 616.027028][T15918] team0: Port device team_slave_1 added [ 616.155786][T15918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.168300][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.202201][T15918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.223485][T15918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.230526][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.258860][T15918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.438309][T15918] hsr_slave_0: entered promiscuous mode [ 616.458840][T15918] hsr_slave_1: entered promiscuous mode [ 617.322664][ T5849] Bluetooth: hci0: command tx timeout [ 617.938254][T15918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 618.069683][T15918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 618.098049][T15918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 618.162042][T15918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 618.569975][T15918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.637547][T16206] random: crng reseeded on system resumption [ 618.794506][T15918] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.827099][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.834349][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.903241][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.910444][ T9954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.987587][T15918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.195922][T15918] veth0_vlan: entered promiscuous mode [ 620.248962][T15918] veth1_vlan: entered promiscuous mode [ 620.722281][T15918] veth0_macvtap: entered promiscuous mode [ 620.743710][T15918] veth1_macvtap: entered promiscuous mode [ 621.013131][T15918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.078119][T15918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.151337][T15918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.181839][T15918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.190656][T15918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.237169][T15918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.458938][T16288] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3503'. [ 621.524568][T16292] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3503'. [ 621.607194][ T6798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.638924][ T6798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.724221][T12683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.749268][T12683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.172737][T16316] Invalid ELF header magic: != ELF [ 622.491211][T16316] can: request_module (can-proto-0) failed. [ 623.078451][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.103238][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.114242][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.126950][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.140487][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 623.904579][ T9954] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.153005][T16360] [ 624.257484][ T9954] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.348495][T16332] chnl_net:caif_netlink_parms(): no params data found [ 624.410952][ T9954] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.539448][ T9954] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.985249][T16332] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.000595][T16332] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.032141][T16332] bridge_slave_0: entered allmulticast mode [ 625.040234][T16332] bridge_slave_0: entered promiscuous mode [ 625.168320][T16332] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.188029][T16332] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.206376][T16332] bridge_slave_1: entered allmulticast mode [ 625.219745][T16332] bridge_slave_1: entered promiscuous mode [ 625.242076][ T5849] Bluetooth: hci3: command tx timeout [ 625.448685][T16332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.485623][T16332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.497058][ T9954] bridge_slave_1: left allmulticast mode [ 625.515090][ T9954] bridge_slave_1: left promiscuous mode [ 625.520850][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.612078][ T9954] bridge_slave_0: left allmulticast mode [ 625.621500][ T9954] bridge_slave_0: left promiscuous mode [ 625.668905][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.327191][ T5849] Bluetooth: hci3: command tx timeout [ 627.754501][ T9954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.773971][ T9954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.787089][ T9954] bond0 (unregistering): Released all slaves [ 627.978983][ T9954] .SR: left promiscuous mode [ 628.143989][T16332] team0: Port device team_slave_0 added [ 628.171045][T16332] team0: Port device team_slave_1 added [ 628.219671][ T9954] HfR: left promiscuous mode [ 628.806288][T16332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.817085][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.853155][T16332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.883999][T16332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.902643][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.961664][T16332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.401952][ T5849] Bluetooth: hci3: command tx timeout [ 629.410904][T16468] could not allocate digest TFM handle [ 629.563732][T16332] hsr_slave_0: entered promiscuous mode [ 629.589173][T16332] hsr_slave_1: entered promiscuous mode [ 629.598739][T16332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.612423][T16332] Cannot create hsr debugfs directory [ 629.867243][ T9954] hsr_slave_0: left promiscuous mode [ 629.873834][ T9954] hsr_slave_1: left promiscuous mode [ 629.879798][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.887375][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.917333][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.927990][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.946205][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3536'. [ 630.010105][ T9954] veth1_macvtap: left promiscuous mode [ 630.015923][ T9954] veth0_macvtap: left promiscuous mode [ 630.588157][ T9954] team0 (unregistering): Port device team_slave_1 removed [ 630.644484][ T9954] team0 (unregistering): Port device team_slave_0 removed [ 631.499445][ T5849] Bluetooth: hci3: command tx timeout [ 632.482667][ T31] audit: type=1804 audit(4295000646.938:19): pid=16520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3542" name="/newroot/8/file0" dev="tmpfs" ino=60 res=1 errno=0 [ 632.520386][ T31] audit: type=1800 audit(4295000646.938:20): pid=16520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3542" name="file0" dev="tmpfs" ino=60 res=0 errno=0 [ 632.539949][T16332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 632.594680][T16522] .RRo\&p: entered promiscuous mode [ 632.617780][T16332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 632.669647][T16332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 632.714396][T16332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 633.004723][T16332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.153332][T16332] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.185179][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.192475][T12683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.294172][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.301465][ T9955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.705890][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.721715][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.333670][T16332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.366301][T16588] Unable to find swap-space signature [ 636.447894][T16608] syz.1.3553(16608): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 636.745927][T16332] veth0_vlan: entered promiscuous mode [ 636.783558][T16332] veth1_vlan: entered promiscuous mode [ 636.903415][T16332] veth0_macvtap: entered promiscuous mode [ 636.923655][T16332] veth1_macvtap: entered promiscuous mode [ 636.948663][T16332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.981059][T16332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.007175][T16332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.029953][T16332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.050273][T16332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.071875][T16332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.222334][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.261845][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.326660][ T6798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.342128][ T6798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.980073][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 640.634592][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 641.748972][T16703] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input39 [ 642.670367][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'. [ 643.347744][T16733] can: request_module (can-proto-3) failed. [ 644.273507][T16747] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 644.597291][ T5849] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 647.655441][T16800] delete_channel: no stack [ 648.652898][T16837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3590'. [ 650.258473][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3596'. [ 650.268527][T16859] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3596'. [ 651.905590][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'. [ 652.544246][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 653.764662][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3605'. [ 653.862575][T16909] ipvlan0: entered allmulticast mode [ 653.889396][T16909] veth0_vlan: entered allmulticast mode [ 655.417469][T16934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.427387][T16934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.638772][T16987] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 658.954934][T16989] netlink: 346 bytes leftover after parsing attributes in process `syz.0.3617'. [ 659.275372][T16988] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 660.090052][T17009] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 663.325047][ T5849] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 668.523638][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3651'. [ 668.555381][T17146] bond0: option all_slaves_active: invalid value (10) [ 669.198342][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 669.506800][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'. [ 670.725192][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 670.969652][T17176] ptp ptp0: delete virtual clock ptp3 [ 671.159694][T17176] ptp ptp0: delete virtual clock ptp2 [ 671.305036][T17176] ptp ptp0: delete virtual clock ptp1 [ 671.431242][T17176] ptp ptp0: only physical clock in use now [ 672.925851][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3667'. [ 672.999107][T17238] FAULT_INJECTION: forcing a failure. [ 672.999107][T17238] name failslab, interval 1, probability 0, space 0, times 0 [ 673.058055][T17238] CPU: 0 UID: 0 PID: 17238 Comm: syz.0.3666 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 673.058110][T17238] Tainted: [U]=USER [ 673.058121][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 673.058141][T17238] Call Trace: [ 673.058152][T17238] [ 673.058164][T17238] dump_stack_lvl+0x16c/0x1f0 [ 673.058218][T17238] should_fail_ex+0x512/0x640 [ 673.058264][T17238] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 673.058311][T17238] should_failslab+0xc2/0x120 [ 673.058342][T17238] __kmalloc_cache_noprof+0x6a/0x3e0 [ 673.058384][T17238] ? do_raw_spin_lock+0x12c/0x2b0 [ 673.058435][T17238] ? find_held_lock+0x2b/0x80 [ 673.058468][T17238] ? ip6addrlbl_alloc+0x9a/0x2c0 [ 673.058514][T17238] ip6addrlbl_alloc+0x9a/0x2c0 [ 673.058559][T17238] ip6addrlbl_net_init+0x13d/0x400 [ 673.058616][T17238] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 673.058659][T17238] ops_init+0x1df/0x5f0 [ 673.058718][T17238] setup_net+0x1ff/0x510 [ 673.058766][T17238] ? lockdep_init_map_type+0x5c/0x280 [ 673.058813][T17238] ? __pfx_setup_net+0x10/0x10 [ 673.058866][T17238] ? debug_mutex_init+0x37/0x70 [ 673.058905][T17238] copy_net_ns+0x2a6/0x5f0 [ 673.058940][T17238] create_new_namespaces+0x3ea/0xa90 [ 673.058987][T17238] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 673.059029][T17238] ksys_unshare+0x45b/0xa40 [ 673.059074][T17238] ? __pfx_ksys_unshare+0x10/0x10 [ 673.059117][T17238] ? xfd_validate_state+0x61/0x180 [ 673.059174][T17238] __x64_sys_unshare+0x31/0x40 [ 673.059222][T17238] do_syscall_64+0xcd/0x490 [ 673.059274][T17238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.059307][T17238] RIP: 0033:0x7ffbd478e929 [ 673.059334][T17238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.059368][T17238] RSP: 002b:00007ffbd5676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 673.059401][T17238] RAX: ffffffffffffffda RBX: 00007ffbd49b6080 RCX: 00007ffbd478e929 [ 673.059423][T17238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 673.059443][T17238] RBP: 00007ffbd4810b39 R08: 0000000000000000 R09: 0000000000000000 [ 673.059463][T17238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.059483][T17238] R13: 0000000000000000 R14: 00007ffbd49b6080 R15: 00007fff4cf8c228 [ 673.059527][T17238] [ 673.731312][ T8480] udevd[8480]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 673.768119][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 674.340681][T17241] tty tty53: ldisc open failed (-12), clearing slot 52 [ 677.116699][T17304] input: f as /devices/virtual/input/input44 [ 677.161796][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3680'. [ 679.681395][T17343] FAULT_INJECTION: forcing a failure. [ 679.681395][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 679.724981][T17343] CPU: 0 UID: 0 PID: 17343 Comm: syz.0.3689 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 679.725045][T17343] Tainted: [U]=USER [ 679.725056][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.725076][T17343] Call Trace: [ 679.725086][T17343] [ 679.725099][T17343] dump_stack_lvl+0x16c/0x1f0 [ 679.725157][T17343] should_fail_ex+0x512/0x640 [ 679.725204][T17343] ? fs_reclaim_acquire+0xae/0x150 [ 679.725248][T17343] should_failslab+0xc2/0x120 [ 679.725280][T17343] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 679.725333][T17343] ? security_inode_alloc+0x3b/0x2b0 [ 679.725377][T17343] security_inode_alloc+0x3b/0x2b0 [ 679.725415][T17343] inode_init_always_gfp+0xce4/0x1030 [ 679.725470][T17343] alloc_inode+0x86/0x240 [ 679.725505][T17343] sock_alloc+0x40/0x280 [ 679.725536][T17343] __sock_create+0xc1/0x8d0 [ 679.725582][T17343] __sys_socket+0x14d/0x260 [ 679.725619][T17343] ? __fget_files+0x20e/0x3c0 [ 679.725664][T17343] ? __pfx___sys_socket+0x10/0x10 [ 679.725702][T17343] ? xfd_validate_state+0x61/0x180 [ 679.725756][T17343] __x64_sys_socket+0x72/0xb0 [ 679.725793][T17343] ? lockdep_hardirqs_on+0x7c/0x110 [ 679.725840][T17343] do_syscall_64+0xcd/0x490 [ 679.725894][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.725927][T17343] RIP: 0033:0x7ffbd478e929 [ 679.725954][T17343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.725987][T17343] RSP: 002b:00007ffbd5697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 679.726028][T17343] RAX: ffffffffffffffda RBX: 00007ffbd49b5fa0 RCX: 00007ffbd478e929 [ 679.726051][T17343] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 679.726072][T17343] RBP: 00007ffbd4810b39 R08: 0000000000000000 R09: 0000000000000000 [ 679.726093][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.726117][T17343] R13: 0000000000000000 R14: 00007ffbd49b5fa0 R15: 00007fff4cf8c228 [ 679.726161][T17343] [ 679.726198][T17343] socket: no more sockets [ 680.613851][T17357] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2b0 pfn:0x78000 [ 680.679229][T17357] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 680.712948][T17357] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 680.727556][T17357] raw: 00000000000002b0 ffff888025b19c00 00000001ffffffff 0000000000000000 [ 680.746605][T17357] page dumped because: unmovable page [ 680.784805][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 680.785006][T17357] page_owner tracks the page as allocated [ 680.841403][T17357] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 7108, tgid 7106 (syz.2.217), ts 187600429405, free_ts 186775006171 [ 680.845528][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 680.902627][T17356] phram: not enough arguments [ 680.921712][T17357] post_alloc_hook+0x1c0/0x230 [ 680.947939][T17357] get_page_from_freelist+0x1321/0x3890 [ 680.962405][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3693'. [ 681.027447][T17357] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 681.081603][T17357] alloc_pages_mpol+0x1fb/0x550 [ 681.097960][T17357] alloc_pages_noprof+0x131/0x390 [ 681.192900][T17357] relay_open_buf.part.0+0x262/0xc80 [ 681.198334][T17357] relay_open+0x653/0xad0 [ 681.306570][T17357] do_blk_trace_setup+0x503/0xb50 [ 681.511749][T17357] blk_trace_setup+0xed/0x1b0 [ 681.511800][T17357] blk_trace_ioctl+0x146/0x280 [ 681.511839][T17357] blkdev_ioctl+0x108/0x6d0 [ 681.511878][T17357] __x64_sys_ioctl+0x18e/0x210 [ 681.511916][T17357] do_syscall_64+0xcd/0x490 [ 681.511967][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.512004][T17357] page last free pid 4930 tgid 4930 stack trace: [ 681.512025][T17357] __free_frozen_pages+0x7fe/0x1180 [ 681.512068][T17357] tlb_remove_table_rcu+0x116/0x1a0 [ 681.512122][T17357] rcu_core+0x799/0x14e0 [ 681.512153][T17357] handle_softirqs+0x216/0x8e0 [ 681.512190][T17357] do_softirq+0xb2/0xf0 [ 681.512224][T17357] __local_bh_enable_ip+0x100/0x120 [ 681.512262][T17357] cfg80211_inform_single_bss_data+0x9ae/0x1df0 [ 681.512319][T17357] cfg80211_inform_bss_data+0x224/0x3bc0 [ 681.512372][T17357] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 681.512429][T17357] ieee80211_bss_info_update+0x310/0xab0 [ 681.512479][T17357] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 681.512527][T17357] ieee80211_iface_work+0xbf4/0x1020 [ 681.512575][T17357] cfg80211_wiphy_work+0x3df/0x550 [ 681.512607][T17357] process_one_work+0x9cc/0x1b70 [ 681.512662][T17357] worker_thread+0x6c8/0xf10 [ 681.512714][T17357] kthread+0x3c5/0x780 [ 681.906974][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 684.818729][T17431] program syz.1.3702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 685.880657][T17448] FAULT_INJECTION: forcing a failure. [ 685.880657][T17448] name failslab, interval 1, probability 0, space 0, times 0 [ 685.904070][T17448] CPU: 1 UID: 0 PID: 17448 Comm: syz.5.3707 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 685.904126][T17448] Tainted: [U]=USER [ 685.904137][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.904159][T17448] Call Trace: [ 685.904170][T17448] [ 685.904182][T17448] dump_stack_lvl+0x16c/0x1f0 [ 685.904239][T17448] should_fail_ex+0x512/0x640 [ 685.904289][T17448] ? __kvmalloc_node_noprof+0x124/0x620 [ 685.904346][T17448] should_failslab+0xc2/0x120 [ 685.904380][T17448] __kvmalloc_node_noprof+0x137/0x620 [ 685.904428][T17448] ? lockdep_init_map_type+0x5c/0x280 [ 685.904475][T17448] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 685.904538][T17448] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 685.904587][T17448] v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 685.904640][T17448] vicodec_open+0x1a9/0xf90 [ 685.904692][T17448] v4l2_open+0x222/0x490 [ 685.904737][T17448] ? __pfx_v4l2_open+0x10/0x10 [ 685.904788][T17448] chrdev_open+0x234/0x6a0 [ 685.904840][T17448] ? __pfx_apparmor_file_open+0x10/0x10 [ 685.904883][T17448] ? __pfx_chrdev_open+0x10/0x10 [ 685.904936][T17448] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 685.904989][T17448] do_dentry_open+0x741/0x1c10 [ 685.905041][T17448] ? __pfx_chrdev_open+0x10/0x10 [ 685.905106][T17448] vfs_open+0x82/0x3f0 [ 685.905146][T17448] path_openat+0x1de4/0x2cb0 [ 685.905207][T17448] ? __pfx_path_openat+0x10/0x10 [ 685.905258][T17448] ? __lock_acquire+0xb8a/0x1c90 [ 685.905310][T17448] do_filp_open+0x20b/0x470 [ 685.905360][T17448] ? __pfx_do_filp_open+0x10/0x10 [ 685.905439][T17448] ? alloc_fd+0x471/0x7d0 [ 685.905496][T17448] do_sys_openat2+0x11b/0x1d0 [ 685.905535][T17448] ? __pfx_do_sys_openat2+0x10/0x10 [ 685.905590][T17448] __x64_sys_openat+0x174/0x210 [ 685.905629][T17448] ? __pfx___x64_sys_openat+0x10/0x10 [ 685.905687][T17448] do_syscall_64+0xcd/0x490 [ 685.905748][T17448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.905783][T17448] RIP: 0033:0x7f318958e929 [ 685.905811][T17448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.905845][T17448] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 685.905877][T17448] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 685.905900][T17448] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 685.905923][T17448] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 685.905944][T17448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.905966][T17448] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 685.906011][T17448] [ 687.693091][T17465] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3709'. [ 687.746621][T17465] veth0_macvtap: left promiscuous mode [ 688.295268][T17483] bridge0: port 3(vlan1) entered blocking state [ 688.439155][T17483] bridge0: port 3(vlan1) entered disabled state [ 688.494828][T17483] vlan1: entered allmulticast mode [ 688.511404][T17483] veth0_vlan: entered allmulticast mode [ 688.556826][T17483] vlan1: entered promiscuous mode [ 688.569720][T17483] bridge0: port 3(vlan1) entered blocking state [ 688.576179][T17483] bridge0: port 3(vlan1) entered forwarding state [ 693.082047][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 693.615368][T17545] input: f as /devices/virtual/input/input45 [ 694.300600][ T5849] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 694.300647][ T5849] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 694.318272][ T5849] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 694.358822][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3729'. [ 694.414071][T17563] FAULT_INJECTION: forcing a failure. [ 694.414071][T17563] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 694.492518][T17563] CPU: 0 UID: 0 PID: 17563 Comm: syz.1.3729 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 694.492568][T17563] Tainted: [U]=USER [ 694.492579][T17563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.492596][T17563] Call Trace: [ 694.492606][T17563] [ 694.492618][T17563] dump_stack_lvl+0x16c/0x1f0 [ 694.492670][T17563] should_fail_ex+0x512/0x640 [ 694.492749][T17563] _copy_from_user+0x2e/0xd0 [ 694.492801][T17563] copy_msghdr_from_user+0x98/0x160 [ 694.492849][T17563] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 694.492922][T17563] ___sys_sendmsg+0xfe/0x1d0 [ 694.492982][T17563] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.493028][T17563] ? __lock_acquire+0x622/0x1c90 [ 694.493121][T17563] __sys_sendmsg+0x16d/0x220 [ 694.493169][T17563] ? __pfx___sys_sendmsg+0x10/0x10 [ 694.493243][T17563] do_syscall_64+0xcd/0x490 [ 694.493295][T17563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.493327][T17563] RIP: 0033:0x7f05fdf8e929 [ 694.493352][T17563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.493384][T17563] RSP: 002b:00007f05fee79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.493414][T17563] RAX: ffffffffffffffda RBX: 00007f05fe1b6160 RCX: 00007f05fdf8e929 [ 694.493434][T17563] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 000000000000000c [ 694.493454][T17563] RBP: 00007f05fee79090 R08: 0000000000000000 R09: 0000000000000000 [ 694.493472][T17563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.493495][T17563] R13: 0000000000000000 R14: 00007f05fe1b6160 R15: 00007fffbed32048 [ 694.493537][T17563] [ 696.130951][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.137721][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.986276][T17601] netlink: 'syz.4.3737': attribute type 21 has an invalid length. [ 697.029036][T17601] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3737'. [ 698.003765][T17629] openvswitch: netlink: IPv4 tunnel dst address is zero [ 698.164648][T17631] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 698.641385][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3746'. [ 698.698387][T17633] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3746'. [ 705.117827][T17734] random: crng reseeded on system resumption [ 706.766183][T17779] vivid-002: kernel_thread() failed [ 707.264560][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3771'. [ 708.029329][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 708.392226][T17799] svc: failed to register nfsdv3 RPC service (errno 111). [ 708.401339][T17799] svc: failed to register nfsaclv3 RPC service (errno 111). [ 709.456456][T17824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3778'. [ 709.577704][T17820] tipc: Started in network mode [ 709.645346][T17820] tipc: Node identity ee00, cluster identity 4711 [ 709.695846][T17820] tipc: Node number set to 60928 [ 712.545738][T17865] ptrace attach of "./syz-executor exec"[17867] was attempted by "./syz-executor exec"[17865] [ 713.564386][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 714.769177][ T5849] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 719.769991][T17934] FAULT_INJECTION: forcing a failure. [ 719.769991][T17934] name failslab, interval 1, probability 0, space 0, times 0 [ 719.831936][T17934] CPU: 0 UID: 0 PID: 17934 Comm: syz.1.3800 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 719.831990][T17934] Tainted: [U]=USER [ 719.832001][T17934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.832021][T17934] Call Trace: [ 719.832031][T17934] [ 719.832044][T17934] dump_stack_lvl+0x16c/0x1f0 [ 719.832102][T17934] should_fail_ex+0x512/0x640 [ 719.832151][T17934] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 719.832207][T17934] should_failslab+0xc2/0x120 [ 719.832239][T17934] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 719.832288][T17934] ? __proc_create+0xc3/0x8c0 [ 719.832341][T17934] ? __proc_create+0x2ce/0x8c0 [ 719.832397][T17934] __proc_create+0x2ce/0x8c0 [ 719.832449][T17934] ? __pfx___proc_create+0x10/0x10 [ 719.832522][T17934] ? __lock_acquire+0x622/0x1c90 [ 719.832582][T17934] proc_create_reg+0x7d/0x180 [ 719.832617][T17934] proc_create_net_data+0x8e/0x1b0 [ 719.832672][T17934] ? __pfx_proc_create_net_data+0x10/0x10 [ 719.832738][T17934] ? __pfx_phonet_init_net+0x10/0x10 [ 719.832779][T17934] phonet_init_net+0x66/0x120 [ 719.832812][T17934] ops_init+0x1df/0x5f0 [ 719.832872][T17934] setup_net+0x1ff/0x510 [ 719.832922][T17934] ? lockdep_init_map_type+0x5c/0x280 [ 719.832970][T17934] ? __pfx_setup_net+0x10/0x10 [ 719.833033][T17934] ? debug_mutex_init+0x37/0x70 [ 719.833070][T17934] copy_net_ns+0x2a6/0x5f0 [ 719.833105][T17934] create_new_namespaces+0x3ea/0xa90 [ 719.833150][T17934] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 719.833188][T17934] ksys_unshare+0x45b/0xa40 [ 719.833233][T17934] ? __pfx_ksys_unshare+0x10/0x10 [ 719.833279][T17934] ? xfd_validate_state+0x61/0x180 [ 719.833335][T17934] __x64_sys_unshare+0x31/0x40 [ 719.833377][T17934] do_syscall_64+0xcd/0x490 [ 719.833428][T17934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.833461][T17934] RIP: 0033:0x7f05fdf8e929 [ 719.833486][T17934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.833517][T17934] RSP: 002b:00007f05feebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 719.833547][T17934] RAX: ffffffffffffffda RBX: 00007f05fe1b5fa0 RCX: 00007f05fdf8e929 [ 719.833567][T17934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 719.833587][T17934] RBP: 00007f05fe010b39 R08: 0000000000000000 R09: 0000000000000000 [ 719.833607][T17934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.833625][T17934] R13: 0000000000000000 R14: 00007f05fe1b5fa0 R15: 00007fffbed32048 [ 719.833668][T17934] [ 720.402130][T17939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3801'. [ 720.649904][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3801'. [ 721.778922][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3806'. [ 723.390816][T17972] netlink: 306 bytes leftover after parsing attributes in process `syz.0.3810'. [ 726.346381][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'. [ 727.053330][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 728.311405][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'. [ 729.358074][ T5849] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 729.358127][ T5849] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 729.381277][ T5849] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 729.381315][ T5849] Bluetooth: hci1: adv larger than maximum supported [ 729.389863][ T5849] Bluetooth: hci1: Unknown advertising packet type: 0x70 [ 729.396766][ T5849] Bluetooth: hci1: Malformed LE Event: 0x0d [ 729.618796][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3824'. [ 730.077406][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3826'. [ 730.139704][T18078] nbd: device at index 4128 is going down [ 730.613791][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 732.714397][T18103] FAULT_INJECTION: forcing a failure. [ 732.714397][T18103] name failslab, interval 1, probability 0, space 0, times 0 [ 732.818917][T18103] CPU: 0 UID: 0 PID: 18103 Comm: syz.5.3831 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 732.818975][T18103] Tainted: [U]=USER [ 732.818987][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 732.819007][T18103] Call Trace: [ 732.819019][T18103] [ 732.819033][T18103] dump_stack_lvl+0x16c/0x1f0 [ 732.819090][T18103] should_fail_ex+0x512/0x640 [ 732.819140][T18103] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 732.819199][T18103] should_failslab+0xc2/0x120 [ 732.819231][T18103] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 732.819286][T18103] ? __d_alloc+0x31/0xaa0 [ 732.819343][T18103] __d_alloc+0x31/0xaa0 [ 732.819418][T18103] d_alloc_pseudo+0x1c/0xc0 [ 732.819458][T18103] alloc_file_pseudo+0xcf/0x230 [ 732.819510][T18103] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 732.819570][T18103] __shmem_file_setup+0x1a3/0x330 [ 732.819621][T18103] shmem_zero_setup+0x93/0x1a0 [ 732.819676][T18103] __mmap_region+0x1ece/0x25e0 [ 732.819750][T18103] ? __pfx___mmap_region+0x10/0x10 [ 732.819801][T18103] ? rcu_is_watching+0x12/0xc0 [ 732.819847][T18103] ? rcu_is_watching+0x12/0xc0 [ 732.819883][T18103] ? trace_sched_exit_tp+0xde/0x130 [ 732.819926][T18103] ? __schedule+0x1181/0x5de0 [ 732.819976][T18103] ? __lock_acquire+0xb8a/0x1c90 [ 732.820037][T18103] ? __pfx___schedule+0x10/0x10 [ 732.820132][T18103] ? trace_cap_capable+0x18d/0x200 [ 732.820192][T18103] mmap_region+0x1ab/0x3f0 [ 732.820263][T18103] ? __get_unmapped_area+0x267/0x440 [ 732.820307][T18103] do_mmap+0xa3e/0x1210 [ 732.820352][T18103] ? __pfx_do_mmap+0x10/0x10 [ 732.820391][T18103] ? __pfx_down_write_killable+0x10/0x10 [ 732.820432][T18103] vm_mmap_pgoff+0x281/0x450 [ 732.820476][T18103] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 732.820521][T18103] ? __x64_sys_futex+0x1e0/0x4c0 [ 732.820562][T18103] ? __x64_sys_futex+0x1e9/0x4c0 [ 732.820610][T18103] ksys_mmap_pgoff+0x7d/0x5c0 [ 732.820646][T18103] ? xfd_validate_state+0x61/0x180 [ 732.820690][T18103] ? __pfx_do_writev+0x10/0x10 [ 732.820748][T18103] __x64_sys_mmap+0x125/0x190 [ 732.820805][T18103] do_syscall_64+0xcd/0x490 [ 732.820859][T18103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.820893][T18103] RIP: 0033:0x7f318958e929 [ 732.820921][T18103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.820955][T18103] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 732.820989][T18103] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 732.821012][T18103] RDX: 00000000000000df RSI: 000000000002000c RDI: 0000000000000000 [ 732.821033][T18103] RBP: 00007f3189610b39 R08: 00040000000000a5 R09: 0000000000008000 [ 732.821056][T18103] R10: 0000000000020eb1 R11: 0000000000000246 R12: 0000000000000000 [ 732.821076][T18103] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 732.821119][T18103] [ 734.045422][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 734.663348][T18110] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 734.669459][T18110] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 734.825160][T18129] netlink: 314 bytes leftover after parsing attributes in process `syz.1.3837'. [ 734.890407][T18130] netlink: 314 bytes leftover after parsing attributes in process `syz.1.3837'. [ 734.973174][T18110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 734.979494][T18110] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 735.142428][T18110] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 735.235161][T18110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 735.247756][T18110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 735.349276][T18110] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 735.382656][T18110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 735.529096][T18110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 735.728008][T18120] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 735.909050][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3839'. [ 736.122025][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 736.605481][ T8479] udevd[8479]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 736.667557][T18153] FAULT_INJECTION: forcing a failure. [ 736.667557][T18153] name failslab, interval 1, probability 0, space 0, times 0 [ 736.803375][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.5.3841 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 736.803431][T18153] Tainted: [U]=USER [ 736.803441][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 736.803462][T18153] Call Trace: [ 736.803474][T18153] [ 736.803486][T18153] dump_stack_lvl+0x16c/0x1f0 [ 736.803545][T18153] should_fail_ex+0x512/0x640 [ 736.803593][T18153] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 736.803644][T18153] should_failslab+0xc2/0x120 [ 736.803677][T18153] __kmalloc_cache_noprof+0x6a/0x3e0 [ 736.803724][T18153] ? snd_card_file_add+0x52/0x330 [ 736.803764][T18153] snd_card_file_add+0x52/0x330 [ 736.803803][T18153] snd_rawmidi_open+0x2cc/0xbf0 [ 736.803853][T18153] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 736.803904][T18153] ? kobject_get_unless_zero+0x156/0x1e0 [ 736.803965][T18153] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 736.804012][T18153] snd_open+0x1fe/0x450 [ 736.804066][T18153] ? __pfx_snd_open+0x10/0x10 [ 736.804119][T18153] chrdev_open+0x234/0x6a0 [ 736.804170][T18153] ? __pfx_apparmor_file_open+0x10/0x10 [ 736.804213][T18153] ? __pfx_chrdev_open+0x10/0x10 [ 736.804268][T18153] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 736.804327][T18153] do_dentry_open+0x741/0x1c10 [ 736.804378][T18153] ? __pfx_chrdev_open+0x10/0x10 [ 736.804437][T18153] vfs_open+0x82/0x3f0 [ 736.804478][T18153] path_openat+0x1de4/0x2cb0 [ 736.804541][T18153] ? __pfx_path_openat+0x10/0x10 [ 736.804593][T18153] ? __lock_acquire+0xb8a/0x1c90 [ 736.804645][T18153] do_filp_open+0x20b/0x470 [ 736.804695][T18153] ? __pfx_do_filp_open+0x10/0x10 [ 736.804776][T18153] ? alloc_fd+0x471/0x7d0 [ 736.804834][T18153] do_sys_openat2+0x11b/0x1d0 [ 736.804872][T18153] ? __pfx_do_sys_openat2+0x10/0x10 [ 736.804912][T18153] ? __sys_sendmsg+0x18c/0x220 [ 736.804967][T18153] __x64_sys_openat+0x174/0x210 [ 736.805004][T18153] ? __pfx___x64_sys_openat+0x10/0x10 [ 736.805057][T18153] do_syscall_64+0xcd/0x490 [ 736.805110][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.805143][T18153] RIP: 0033:0x7f318958e929 [ 736.805170][T18153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.805201][T18153] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.805234][T18153] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 736.805257][T18153] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 736.805279][T18153] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 736.805307][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.805328][T18153] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 736.805372][T18153] [ 737.087196][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 737.195867][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3843'. [ 737.252868][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 737.403147][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 738.201677][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 739.161782][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 739.342469][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 739.487510][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 741.250276][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 741.424667][T18219] FAULT_INJECTION: forcing a failure. [ 741.424667][T18219] name failslab, interval 1, probability 0, space 0, times 0 [ 741.446679][T18219] CPU: 1 UID: 0 PID: 18219 Comm: syz.1.3853 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 741.446734][T18219] Tainted: [U]=USER [ 741.446745][T18219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 741.446764][T18219] Call Trace: [ 741.446776][T18219] [ 741.446790][T18219] dump_stack_lvl+0x16c/0x1f0 [ 741.446850][T18219] should_fail_ex+0x512/0x640 [ 741.446899][T18219] ? __kmalloc_noprof+0xbf/0x510 [ 741.446962][T18219] ? kvm_io_bus_register_dev+0x1b9/0x7f0 [ 741.446996][T18219] should_failslab+0xc2/0x120 [ 741.447030][T18219] __kmalloc_noprof+0xd2/0x510 [ 741.447091][T18219] kvm_io_bus_register_dev+0x1b9/0x7f0 [ 741.447141][T18219] kvm_pic_init+0x25e/0x380 [ 741.447195][T18219] kvm_arch_vm_ioctl+0x8fd/0x1cf0 [ 741.447239][T18219] ? ima_match_policy+0x7f9/0x22e0 [ 741.447276][T18219] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 741.447321][T18219] ? __lock_acquire+0x622/0x1c90 [ 741.447378][T18219] ? __lock_acquire+0x622/0x1c90 [ 741.447436][T18219] ? __lock_acquire+0x622/0x1c90 [ 741.447492][T18219] ? __lock_acquire+0x622/0x1c90 [ 741.447573][T18219] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 741.447617][T18219] ? is_bpf_text_address+0x94/0x1a0 [ 741.447666][T18219] ? kernel_text_address+0x8d/0x100 [ 741.447722][T18219] ? __kernel_text_address+0xd/0x40 [ 741.447777][T18219] ? unwind_get_return_address+0x59/0xa0 [ 741.447832][T18219] ? arch_stack_walk+0xa6/0x100 [ 741.447882][T18219] ? stack_trace_save+0x8e/0xc0 [ 741.447928][T18219] ? __pfx_stack_trace_save+0x10/0x10 [ 741.447969][T18219] ? stack_depot_save_flags+0x28/0xa40 [ 741.448022][T18219] ? __lock_acquire+0xb8a/0x1c90 [ 741.448074][T18219] ? kasan_save_stack+0x42/0x60 [ 741.448121][T18219] ? kasan_save_stack+0x33/0x60 [ 741.448168][T18219] ? kasan_save_track+0x14/0x30 [ 741.448216][T18219] ? kasan_save_free_info+0x3b/0x60 [ 741.448255][T18219] ? __kasan_slab_free+0x51/0x70 [ 741.448304][T18219] ? kfree+0x2b4/0x4d0 [ 741.448342][T18219] ? tomoyo_path_number_perm+0x470/0x580 [ 741.448381][T18219] ? security_file_ioctl+0x9b/0x240 [ 741.448419][T18219] ? __x64_sys_ioctl+0xb7/0x210 [ 741.448457][T18219] ? do_syscall_64+0xcd/0x490 [ 741.448513][T18219] kvm_vm_ioctl+0x19bb/0x3da0 [ 741.448592][T18219] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 741.448672][T18219] ? kasan_quarantine_put+0x10a/0x240 [ 741.448728][T18219] ? lockdep_hardirqs_on+0x7c/0x110 [ 741.448782][T18219] ? find_held_lock+0x2b/0x80 [ 741.448819][T18219] ? tomoyo_path_number_perm+0x295/0x580 [ 741.448867][T18219] ? tomoyo_path_number_perm+0x18d/0x580 [ 741.448908][T18219] ? do_raw_spin_unlock+0xc4/0x230 [ 741.448976][T18219] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 741.449018][T18219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 741.449073][T18219] ? do_vfs_ioctl+0x523/0x1a60 [ 741.449113][T18219] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 741.449182][T18219] ? find_held_lock+0x2b/0x80 [ 741.449217][T18219] ? hook_file_ioctl_common+0x145/0x410 [ 741.449264][T18219] ? __fget_files+0x20e/0x3c0 [ 741.449317][T18219] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 741.449375][T18219] __x64_sys_ioctl+0x18e/0x210 [ 741.449419][T18219] do_syscall_64+0xcd/0x490 [ 741.449473][T18219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.449508][T18219] RIP: 0033:0x7f05fdf8e929 [ 741.449536][T18219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.449570][T18219] RSP: 002b:00007f05feebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.449604][T18219] RAX: ffffffffffffffda RBX: 00007f05fe1b5fa0 RCX: 00007f05fdf8e929 [ 741.449627][T18219] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 741.449649][T18219] RBP: 00007f05fe010b39 R08: 0000000000000000 R09: 0000000000000000 [ 741.449670][T18219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.449691][T18219] R13: 0000000000000000 R14: 00007f05fe1b5fa0 R15: 00007fffbed32048 [ 741.449735][T18219] [ 741.861660][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 742.921039][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'. [ 742.971981][T18233] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3854'. [ 744.229946][T18262] [U] [ 744.233161][T18262] [U] [ 744.235935][T18262] [U] [ 744.238704][T18262] [U] [ 744.337240][T18262] [U] [ 744.340065][T18262] [U] [ 744.342834][T18262] [U] [ 744.345601][T18262] [U] [ 744.576218][T18262] [U] [ 744.579022][T18262] [U] [ 744.581795][T18262] [U] [ 744.584566][T18262] [U] [ 744.672097][T18273] [U] [ 745.763994][T18281] zswap: compressor not available [ 746.351893][T18298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3870'. [ 748.448789][T18316] FAULT_INJECTION: forcing a failure. [ 748.448789][T18316] name failslab, interval 1, probability 0, space 0, times 0 [ 748.466654][T18316] CPU: 0 UID: 0 PID: 18316 Comm: syz.0.3874 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 748.466708][T18316] Tainted: [U]=USER [ 748.466719][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.466738][T18316] Call Trace: [ 748.466749][T18316] [ 748.466761][T18316] dump_stack_lvl+0x16c/0x1f0 [ 748.466817][T18316] should_fail_ex+0x512/0x640 [ 748.466865][T18316] ? __kmalloc_noprof+0xbf/0x510 [ 748.466919][T18316] ? memcg_list_lru_alloc+0x4e9/0x740 [ 748.466968][T18316] should_failslab+0xc2/0x120 [ 748.467010][T18316] __kmalloc_noprof+0xd2/0x510 [ 748.467060][T18316] ? __lock_acquire+0x622/0x1c90 [ 748.467115][T18316] memcg_list_lru_alloc+0x4e9/0x740 [ 748.467180][T18316] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 748.467243][T18316] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 748.467297][T18316] __memcg_slab_post_alloc_hook+0x133/0x960 [ 748.467341][T18316] ? kasan_save_track+0x14/0x30 [ 748.467393][T18316] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 748.467444][T18316] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 748.467499][T18316] ? __d_alloc+0x31/0xaa0 [ 748.467568][T18316] __d_alloc+0x31/0xaa0 [ 748.467614][T18316] ? _raw_spin_unlock+0x28/0x50 [ 748.467660][T18316] d_make_root+0x3e/0x90 [ 748.467689][T18316] simple_fill_super+0x278/0x720 [ 748.467739][T18316] ? __pfx_nfsd_fill_super+0x10/0x10 [ 748.467776][T18316] nfsd_fill_super+0x90/0x530 [ 748.467809][T18316] ? __pfx_set_anon_super_fc+0x10/0x10 [ 748.467870][T18316] ? __pfx_nfsd_fill_super+0x10/0x10 [ 748.467906][T18316] get_tree_keyed+0x10e/0x1d0 [ 748.467955][T18316] vfs_get_tree+0x8e/0x340 [ 748.468014][T18316] path_mount+0x1414/0x2020 [ 748.468068][T18316] ? kmem_cache_free+0x2d1/0x4d0 [ 748.468114][T18316] ? __pfx_path_mount+0x10/0x10 [ 748.468171][T18316] ? putname+0x154/0x1a0 [ 748.468207][T18316] __x64_sys_mount+0x28d/0x310 [ 748.468259][T18316] ? __pfx___x64_sys_mount+0x10/0x10 [ 748.468310][T18316] ? getname_flags.part.0+0x1c5/0x550 [ 748.468355][T18316] do_syscall_64+0xcd/0x490 [ 748.468405][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.468438][T18316] RIP: 0033:0x7ffbd478e929 [ 748.468464][T18316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.468497][T18316] RSP: 002b:00007ffbd5676038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 748.468528][T18316] RAX: ffffffffffffffda RBX: 00007ffbd49b6080 RCX: 00007ffbd478e929 [ 748.468549][T18316] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 0000000000000000 [ 748.468569][T18316] RBP: 00007ffbd4810b39 R08: 0000000000000000 R09: 0000000000000000 [ 748.468588][T18316] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 748.468606][T18316] R13: 0000000000000000 R14: 00007ffbd49b6080 R15: 00007fff4cf8c228 [ 748.468648][T18316] [ 749.577596][T18327] ovs_: entered promiscuous mode [ 751.194738][T18352] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3882'. [ 751.242478][T18353] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3882'. [ 751.636260][T18360] FAULT_INJECTION: forcing a failure. [ 751.636260][T18360] name fail_futex, interval 1, probability 0, space 0, times 0 [ 751.715016][T18360] CPU: 1 UID: 0 PID: 18360 Comm: syz.0.3884 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 751.715072][T18360] Tainted: [U]=USER [ 751.715084][T18360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.715105][T18360] Call Trace: [ 751.715116][T18360] [ 751.715129][T18360] dump_stack_lvl+0x16c/0x1f0 [ 751.715185][T18360] should_fail_ex+0x512/0x640 [ 751.715242][T18360] get_futex_key+0x1d0/0x1540 [ 751.715289][T18360] ? __pfx_get_futex_key+0x10/0x10 [ 751.715334][T18360] ? stack_trace_save+0x8e/0xc0 [ 751.715379][T18360] futex_wait_setup+0x84/0x510 [ 751.715438][T18360] __futex_wait+0x194/0x2f0 [ 751.715490][T18360] ? __pfx___futex_wait+0x10/0x10 [ 751.715546][T18360] ? __pfx_futex_wake_mark+0x10/0x10 [ 751.715611][T18360] ? __futex_hash.constprop.0+0x1e9/0x440 [ 751.715653][T18360] futex_wait+0xe8/0x380 [ 751.715701][T18360] ? __pfx_futex_wait+0x10/0x10 [ 751.715771][T18360] do_futex+0x229/0x350 [ 751.715822][T18360] ? __pfx_do_futex+0x10/0x10 [ 751.715867][T18360] ? __pfx___might_resched+0x10/0x10 [ 751.715909][T18360] __x64_sys_futex+0x1e0/0x4c0 [ 751.715952][T18360] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 751.715996][T18360] ? __pfx___x64_sys_futex+0x10/0x10 [ 751.716040][T18360] ? __pfx___do_sys_close_range+0x10/0x10 [ 751.716102][T18360] do_syscall_64+0xcd/0x490 [ 751.716153][T18360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.716187][T18360] RIP: 0033:0x7ffbd478e929 [ 751.716212][T18360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.716246][T18360] RSP: 002b:00007ffbd56760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 751.716279][T18360] RAX: ffffffffffffffda RBX: 00007ffbd49b6088 RCX: 00007ffbd478e929 [ 751.716302][T18360] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffbd49b6088 [ 751.716323][T18360] RBP: 00007ffbd49b6080 R08: 0000000000000000 R09: 0000000000000000 [ 751.716343][T18360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbd49b608c [ 751.716363][T18360] R13: 0000000000000000 R14: 00007fff4cf8c140 R15: 00007fff4cf8c228 [ 751.716404][T18360] [ 751.934800][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.919652][T18391] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3890'. [ 755.232679][T18389] zswap: compressor 000 not available [ 755.637621][T18401] netlink: 354 bytes leftover after parsing attributes in process `syz.1.3894'. [ 757.457897][T18433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3899'. [ 757.571369][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.578023][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.598737][T18441] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3900'. [ 757.699385][T18437] sctp: [Deprecated]: syz.0.3899 (pid 18437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 757.699385][T18437] Use struct sctp_sack_info instead [ 760.097010][T18480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 760.354002][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3910'. [ 760.418580][T18486] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3910'. [ 760.505273][T18486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3910'. [ 761.634026][T18487] kexec: Could not allocate control_code_buffer [ 761.720287][T18494] netlink: 'syz.4.3912': attribute type 20 has an invalid length. [ 761.789462][T18494] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3912'. [ 761.855328][T18494] IPv6: NLM_F_CREATE should be specified when creating new route [ 764.020589][T18516] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3916'. [ 767.059459][T18559] FAULT_INJECTION: forcing a failure. [ 767.059459][T18559] name failslab, interval 1, probability 0, space 0, times 0 [ 767.111742][T18559] CPU: 0 UID: 0 PID: 18559 Comm: syz.0.3925 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 767.111798][T18559] Tainted: [U]=USER [ 767.111809][T18559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 767.111828][T18559] Call Trace: [ 767.111838][T18559] [ 767.111851][T18559] dump_stack_lvl+0x16c/0x1f0 [ 767.111905][T18559] should_fail_ex+0x512/0x640 [ 767.111953][T18559] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 767.112005][T18559] should_failslab+0xc2/0x120 [ 767.112037][T18559] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 767.112085][T18559] ? d_instantiate+0x77/0x90 [ 767.112112][T18559] ? alloc_empty_file+0x55/0x1e0 [ 767.112151][T18559] alloc_empty_file+0x55/0x1e0 [ 767.112187][T18559] alloc_file_pseudo+0x13a/0x230 [ 767.112245][T18559] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 767.112301][T18559] ? alloc_fd+0x471/0x7d0 [ 767.112353][T18559] sock_alloc_file+0x50/0x210 [ 767.112409][T18559] __sys_socket+0x1c0/0x260 [ 767.112445][T18559] ? __x64_sys_openat+0x174/0x210 [ 767.112484][T18559] ? __pfx___sys_socket+0x10/0x10 [ 767.112522][T18559] ? xfd_validate_state+0x61/0x180 [ 767.112580][T18559] __x64_sys_socket+0x72/0xb0 [ 767.112616][T18559] ? lockdep_hardirqs_on+0x7c/0x110 [ 767.112670][T18559] do_syscall_64+0xcd/0x490 [ 767.112723][T18559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.112756][T18559] RIP: 0033:0x7ffbd478e929 [ 767.112782][T18559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.112815][T18559] RSP: 002b:00007ffbd5697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 767.112846][T18559] RAX: ffffffffffffffda RBX: 00007ffbd49b5fa0 RCX: 00007ffbd478e929 [ 767.112868][T18559] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 767.112888][T18559] RBP: 00007ffbd4810b39 R08: 0000000000000000 R09: 0000000000000000 [ 767.112907][T18559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.112926][T18559] R13: 0000000000000000 R14: 00007ffbd49b5fa0 R15: 00007fff4cf8c228 [ 767.112970][T18559] [ 768.167351][T18567] netlink: 'syz.5.3926': attribute type 1 has an invalid length. [ 768.277498][T18570] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 775.165802][T18631] delete_channel: no stack [ 779.446544][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3951'. [ 780.394480][T18720] FAULT_INJECTION: forcing a failure. [ 780.394480][T18720] name failslab, interval 1, probability 0, space 0, times 0 [ 780.435246][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.5.3956 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 780.435301][T18720] Tainted: [U]=USER [ 780.435311][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.435331][T18720] Call Trace: [ 780.435341][T18720] [ 780.435354][T18720] dump_stack_lvl+0x16c/0x1f0 [ 780.435408][T18720] should_fail_ex+0x512/0x640 [ 780.435455][T18720] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 780.435503][T18720] should_failslab+0xc2/0x120 [ 780.435536][T18720] __kmalloc_cache_noprof+0x6a/0x3e0 [ 780.435579][T18720] ? fib_net_init+0x1a4/0x3f0 [ 780.435620][T18720] fib_net_init+0x1a4/0x3f0 [ 780.435653][T18720] ? __pfx___register_sysctl_table+0x10/0x10 [ 780.435707][T18720] ? __pfx_fib_net_init+0x10/0x10 [ 780.435741][T18720] ? lockdep_init_map_type+0x5c/0x280 [ 780.435788][T18720] ? do_init_timer+0xc9/0x110 [ 780.435829][T18720] ? devinet_init_net+0x5c2/0x910 [ 780.435872][T18720] ? __pfx_fib_net_init+0x10/0x10 [ 780.435904][T18720] ops_init+0x1df/0x5f0 [ 780.435958][T18720] setup_net+0x1ff/0x510 [ 780.436007][T18720] ? lockdep_init_map_type+0x5c/0x280 [ 780.436052][T18720] ? __pfx_setup_net+0x10/0x10 [ 780.436107][T18720] ? debug_mutex_init+0x37/0x70 [ 780.436144][T18720] copy_net_ns+0x2a6/0x5f0 [ 780.436181][T18720] create_new_namespaces+0x3ea/0xa90 [ 780.436228][T18720] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 780.436277][T18720] ksys_unshare+0x45b/0xa40 [ 780.436323][T18720] ? __pfx_ksys_unshare+0x10/0x10 [ 780.436370][T18720] ? xfd_validate_state+0x61/0x180 [ 780.436427][T18720] __x64_sys_unshare+0x31/0x40 [ 780.436472][T18720] do_syscall_64+0xcd/0x490 [ 780.436524][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.436556][T18720] RIP: 0033:0x7f318958e929 [ 780.436582][T18720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.436613][T18720] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 780.436644][T18720] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 780.436665][T18720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 780.436684][T18720] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 780.436704][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.436723][T18720] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 780.436763][T18720] [ 781.155947][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3954'. [ 783.098329][T18756] netlink: 'syz.4.3963': attribute type 5 has an invalid length. [ 783.182922][T18756] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 783.190862][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3963'. [ 783.317067][T18756] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3963'. [ 786.383214][T18805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3976'. [ 786.597845][T18797] FAULT_INJECTION: forcing a failure. [ 786.597845][T18797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.612755][T18797] CPU: 1 UID: 0 PID: 18797 Comm: syz.5.3973 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 786.612810][T18797] Tainted: [U]=USER [ 786.612821][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 786.612842][T18797] Call Trace: [ 786.612853][T18797] [ 786.612866][T18797] dump_stack_lvl+0x16c/0x1f0 [ 786.612922][T18797] should_fail_ex+0x512/0x640 [ 786.612989][T18797] __fpu_restore_sig+0xfe/0x13a0 [ 786.613037][T18797] ? __pfx___fpu_restore_sig+0x10/0x10 [ 786.613102][T18797] ? __might_fault+0xe3/0x190 [ 786.613147][T18797] ? __might_fault+0x13b/0x190 [ 786.613203][T18797] fpu__restore_sig+0x151/0x190 [ 786.613245][T18797] restore_sigcontext+0x4c9/0x6a0 [ 786.613284][T18797] ? __pfx_restore_sigcontext+0x10/0x10 [ 786.613354][T18797] ? __pfx_restore_altstack+0x10/0x10 [ 786.613404][T18797] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.613447][T18797] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.613500][T18797] __do_sys_rt_sigreturn+0x1bb/0x230 [ 786.613540][T18797] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 786.613594][T18797] do_syscall_64+0xcd/0x490 [ 786.613648][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.613682][T18797] RIP: 0033:0x7f318958e927 [ 786.613708][T18797] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 786.613740][T18797] RSP: 002b:00007f318a397038 EFLAGS: 00000246 [ 786.613771][T18797] RAX: 0000000000000000 RBX: 00007f31897b6080 RCX: 00007f318958e929 [ 786.613794][T18797] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 0000000000000003 [ 786.613815][T18797] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 786.613835][T18797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.613855][T18797] R13: 0000000000000000 R14: 00007f31897b6080 R15: 00007ffdcf510658 [ 786.613898][T18797] [ 786.840606][T18805] bond0: (slave bond_slave_0): Releasing backup interface [ 788.375691][T18835] Invalid ELF header magic: != ELF [ 790.063076][T18873] FAULT_INJECTION: forcing a failure. [ 790.063076][T18873] name failslab, interval 1, probability 0, space 0, times 0 [ 790.104853][T18873] CPU: 0 UID: 0 PID: 18873 Comm: syz.5.3990 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 790.104904][T18873] Tainted: [U]=USER [ 790.104915][T18873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.104934][T18873] Call Trace: [ 790.104944][T18873] [ 790.104956][T18873] dump_stack_lvl+0x16c/0x1f0 [ 790.105009][T18873] should_fail_ex+0x512/0x640 [ 790.105063][T18873] should_failslab+0xc2/0x120 [ 790.105094][T18873] __kmalloc_cache_noprof+0x6a/0x3e0 [ 790.105140][T18873] ? proc_self_get_link+0x1a9/0x230 [ 790.105189][T18873] proc_self_get_link+0x1a9/0x230 [ 790.105235][T18873] ? __pfx_proc_self_get_link+0x10/0x10 [ 790.105277][T18873] step_into+0x195b/0x2270 [ 790.105328][T18873] ? __pfx_step_into+0x10/0x10 [ 790.105376][T18873] ? lookup_fast+0x156/0x610 [ 790.105422][T18873] walk_component+0xfc/0x5b0 [ 790.105465][T18873] link_path_walk+0x627/0xe20 [ 790.105521][T18873] path_openat+0x1b0/0x2cb0 [ 790.105565][T18873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.105614][T18873] ? __pfx_path_openat+0x10/0x10 [ 790.105675][T18873] ? __lock_acquire+0xb8a/0x1c90 [ 790.105726][T18873] do_filp_open+0x20b/0x470 [ 790.105773][T18873] ? __pfx_do_filp_open+0x10/0x10 [ 790.105852][T18873] ? alloc_fd+0x471/0x7d0 [ 790.105907][T18873] do_sys_openat2+0x11b/0x1d0 [ 790.105943][T18873] ? __pfx_do_sys_openat2+0x10/0x10 [ 790.105993][T18873] __x64_sys_openat+0x174/0x210 [ 790.106030][T18873] ? __pfx___x64_sys_openat+0x10/0x10 [ 790.106086][T18873] do_syscall_64+0xcd/0x490 [ 790.106138][T18873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.106174][T18873] RIP: 0033:0x7f318958e929 [ 790.106199][T18873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.106229][T18873] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 790.106258][T18873] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 790.106280][T18873] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 790.106302][T18873] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 790.106321][T18873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.106341][T18873] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 790.106383][T18873] [ 794.802707][ T5849] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 797.184004][T18959] FAULT_INJECTION: forcing a failure. [ 797.184004][T18959] name failslab, interval 1, probability 0, space 0, times 0 [ 797.215899][T18959] CPU: 1 UID: 0 PID: 18959 Comm: syz.5.4006 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 797.215954][T18959] Tainted: [U]=USER [ 797.215965][T18959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 797.215984][T18959] Call Trace: [ 797.216001][T18959] [ 797.216014][T18959] dump_stack_lvl+0x16c/0x1f0 [ 797.216070][T18959] should_fail_ex+0x512/0x640 [ 797.216118][T18959] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 797.216166][T18959] should_failslab+0xc2/0x120 [ 797.216199][T18959] __kmalloc_cache_noprof+0x6a/0x3e0 [ 797.216263][T18959] ? percpu_ref_init+0xec/0x410 [ 797.216308][T18959] ? __pfx_free_ioctx_users+0x10/0x10 [ 797.216352][T18959] percpu_ref_init+0xec/0x410 [ 797.216391][T18959] ? __init_waitqueue_head+0xca/0x150 [ 797.216428][T18959] ioctx_alloc+0x2db/0x2120 [ 797.216489][T18959] ? find_held_lock+0x2b/0x80 [ 797.216524][T18959] ? __pfx_ioctx_alloc+0x10/0x10 [ 797.216565][T18959] ? __might_fault+0x13b/0x190 [ 797.216625][T18959] __x64_sys_io_setup+0xc9/0x210 [ 797.216674][T18959] do_syscall_64+0xcd/0x490 [ 797.216728][T18959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.216762][T18959] RIP: 0033:0x7f318958e929 [ 797.216790][T18959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.216825][T18959] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 797.216857][T18959] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 797.216879][T18959] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 797.216900][T18959] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 797.216920][T18959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.216939][T18959] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 797.216983][T18959] [ 798.252336][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4011'. [ 798.346786][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4011'. [ 799.231202][ T5849] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 799.797947][T19011] FAULT_INJECTION: forcing a failure. [ 799.797947][T19011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 799.880828][T19011] CPU: 1 UID: 0 PID: 19011 Comm: syz.1.4014 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 799.880881][T19011] Tainted: [U]=USER [ 799.880891][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.880909][T19011] Call Trace: [ 799.880918][T19011] [ 799.880930][T19011] dump_stack_lvl+0x16c/0x1f0 [ 799.880983][T19011] should_fail_ex+0x512/0x640 [ 799.881037][T19011] get_futex_key+0x1d0/0x1540 [ 799.881077][T19011] ? __pfx___schedule+0x10/0x10 [ 799.881120][T19011] ? __pfx_get_futex_key+0x10/0x10 [ 799.881170][T19011] futex_wait_setup+0x84/0x510 [ 799.881228][T19011] __futex_wait+0x194/0x2f0 [ 799.881277][T19011] ? __pfx___futex_wait+0x10/0x10 [ 799.881332][T19011] ? __pfx_futex_wake_mark+0x10/0x10 [ 799.881396][T19011] ? __futex_hash.constprop.0+0x1e9/0x440 [ 799.881442][T19011] futex_wait+0xe8/0x380 [ 799.881487][T19011] ? __pfx_futex_wait+0x10/0x10 [ 799.881554][T19011] ? __lock_acquire+0x622/0x1c90 [ 799.881608][T19011] do_futex+0x229/0x350 [ 799.881648][T19011] ? __pfx_do_futex+0x10/0x10 [ 799.881686][T19011] ? __fget_files+0x204/0x3c0 [ 799.881739][T19011] __x64_sys_futex+0x1e0/0x4c0 [ 799.881786][T19011] ? __pfx___x64_sys_futex+0x10/0x10 [ 799.881828][T19011] ? __sys_setsockopt+0x140/0x1a0 [ 799.881886][T19011] do_syscall_64+0xcd/0x490 [ 799.881937][T19011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.881969][T19011] RIP: 0033:0x7f05fdf8e929 [ 799.881995][T19011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.882028][T19011] RSP: 002b:00007f05feebb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 799.882058][T19011] RAX: ffffffffffffffda RBX: 00007f05fe1b5fa8 RCX: 00007f05fdf8e929 [ 799.882080][T19011] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f05fe1b5fa8 [ 799.882099][T19011] RBP: 00007f05fe1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 799.882121][T19011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05fe1b5fac [ 799.882141][T19011] R13: 0000000000000000 R14: 00007fffbed31f60 R15: 00007fffbed32048 [ 799.882183][T19011] [ 800.744716][T19019] QAT: Invalid ioctl 21531 [ 804.159447][T19065] vhci_hcd: invalid port number 23 [ 804.171876][T19065] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 805.446631][T19094] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 805.446631][T19094] program syz.0.4028 not setting count and/or reply_len properly [ 805.619119][T19100] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.619498][T19103] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.619726][T19103] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.619942][T19103] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.620158][T19103] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.620367][T19103] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.620581][T19103] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 805.620825][T19103] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4031'. [ 806.007011][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.007084][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.032557][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.032633][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.050682][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.050756][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.303822][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.303897][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.877938][T19098] tty tty46: ldisc open failed (-12), clearing slot 45 [ 807.629568][T19127] HfR: entered promiscuous mode [ 809.321506][ T31] audit: type=1400 audit(4294967451.860:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=19155 comm="syz.0.4044" [ 810.363977][T19162] Malformed UNC in devname [ 810.363977][T19162] [ 810.411821][T19162] CIFS: VFS: Malformed UNC in devname [ 812.479827][T19212] type: 256 invalid [ 812.519148][T19210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4056'. [ 812.580425][T19210] hsr_slave_0: left promiscuous mode [ 812.628264][T19210] hsr_slave_1: left promiscuous mode [ 813.059522][T19219] Invalid ELF header magic: != ELF [ 813.780761][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'. [ 814.012290][T19247] netlink: 354 bytes leftover after parsing attributes in process `syz.1.4063'. [ 814.173873][T19244] nbd: illegal input index -5 [ 814.578087][T19222] kexec: Could not allocate control_code_buffer [ 815.689280][T19270] could not allocate digest TFM handle [ 816.515949][T19280] netlink: 74 bytes leftover after parsing attributes in process `syz.4.4069'. [ 816.900506][T19278] zswap: compressor not available [ 817.385971][T19301] FAULT_INJECTION: forcing a failure. [ 817.385971][T19301] name failslab, interval 1, probability 0, space 0, times 0 [ 817.413442][T19301] CPU: 1 UID: 0 PID: 19301 Comm: syz.1.4071 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 817.413494][T19301] Tainted: [U]=USER [ 817.413504][T19301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.413523][T19301] Call Trace: [ 817.413534][T19301] [ 817.413547][T19301] dump_stack_lvl+0x16c/0x1f0 [ 817.413602][T19301] should_fail_ex+0x512/0x640 [ 817.413648][T19301] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 817.413702][T19301] should_failslab+0xc2/0x120 [ 817.413734][T19301] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 817.413785][T19301] ? security_file_alloc+0x34/0x2b0 [ 817.413834][T19301] security_file_alloc+0x34/0x2b0 [ 817.413877][T19301] init_file+0x93/0x4c0 [ 817.413909][T19301] alloc_empty_file+0x73/0x1e0 [ 817.413944][T19301] alloc_file_pseudo+0x13a/0x230 [ 817.413981][T19301] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 817.414025][T19301] ? alloc_fd+0x471/0x7d0 [ 817.414074][T19301] sock_alloc_file+0x50/0x210 [ 817.414126][T19301] __sys_socket+0x1c0/0x260 [ 817.414164][T19301] ? __pfx___sys_socket+0x10/0x10 [ 817.414201][T19301] ? xfd_validate_state+0x61/0x180 [ 817.414244][T19301] ? __pfx_do_writev+0x10/0x10 [ 817.414295][T19301] __x64_sys_socket+0x72/0xb0 [ 817.414331][T19301] ? lockdep_hardirqs_on+0x7c/0x110 [ 817.414377][T19301] do_syscall_64+0xcd/0x490 [ 817.414428][T19301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.414462][T19301] RIP: 0033:0x7f05fdf8e929 [ 817.414488][T19301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.414521][T19301] RSP: 002b:00007f05fee9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 817.414553][T19301] RAX: ffffffffffffffda RBX: 00007f05fe1b6080 RCX: 00007f05fdf8e929 [ 817.414575][T19301] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000023 [ 817.414595][T19301] RBP: 00007f05fe010b39 R08: 0000000000000000 R09: 0000000000000000 [ 817.414615][T19301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.414634][T19301] R13: 0000000000000000 R14: 00007f05fe1b6080 R15: 00007fffbed32048 [ 817.414677][T19301] [ 818.315437][T19310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4074'. [ 819.010072][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.016576][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.102624][T19343] FAULT_INJECTION: forcing a failure. [ 820.102624][T19343] name failslab, interval 1, probability 0, space 0, times 0 [ 820.242289][T19343] CPU: 0 UID: 0 PID: 19343 Comm: syz.5.4081 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 820.242347][T19343] Tainted: [U]=USER [ 820.242359][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 820.242380][T19343] Call Trace: [ 820.242391][T19343] [ 820.242404][T19343] dump_stack_lvl+0x16c/0x1f0 [ 820.242462][T19343] should_fail_ex+0x512/0x640 [ 820.242512][T19343] ? __kmalloc_noprof+0xbf/0x510 [ 820.242566][T19343] ? lsm_blob_alloc+0x68/0x90 [ 820.242617][T19343] should_failslab+0xc2/0x120 [ 820.242649][T19343] __kmalloc_noprof+0xd2/0x510 [ 820.242708][T19343] lsm_blob_alloc+0x68/0x90 [ 820.242760][T19343] security_sk_alloc+0x30/0x270 [ 820.242799][T19343] sk_prot_alloc+0xfb/0x2a0 [ 820.242838][T19343] sk_alloc+0x36/0xc20 [ 820.242885][T19343] unix_create1+0xa6/0x700 [ 820.242929][T19343] unix_create+0x10e/0x1d0 [ 820.242973][T19343] __sock_create+0x338/0x8d0 [ 820.243029][T19343] __sys_socketpair+0x1d8/0x5a0 [ 820.243073][T19343] ? __pfx___sys_socketpair+0x10/0x10 [ 820.243119][T19343] ? xfd_validate_state+0x61/0x180 [ 820.243166][T19343] ? __pfx_ksys_write+0x10/0x10 [ 820.243223][T19343] __x64_sys_socketpair+0x96/0x100 [ 820.243264][T19343] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.243312][T19343] do_syscall_64+0xcd/0x490 [ 820.243365][T19343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.243398][T19343] RIP: 0033:0x7f318958e929 [ 820.243426][T19343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.243460][T19343] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 820.243492][T19343] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 820.243514][T19343] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 820.243536][T19343] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 820.243556][T19343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.243577][T19343] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 820.243620][T19343] [ 822.959478][T19395] CIFS mount error: No usable UNC path provided in device string! [ 822.959478][T19395] [ 822.969836][T19395] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 824.075099][T19391] kexec: Could not allocate control_code_buffer [ 824.526600][T19415] futex_wake_op: syz.4.4097 tries to shift op by -9; fix this program [ 824.986063][T19421] FAULT_INJECTION: forcing a failure. [ 824.986063][T19421] name failslab, interval 1, probability 0, space 0, times 0 [ 825.006571][T19421] CPU: 0 UID: 0 PID: 19421 Comm: syz.5.4099 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 825.006625][T19421] Tainted: [U]=USER [ 825.006636][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.006653][T19421] Call Trace: [ 825.006662][T19421] [ 825.006675][T19421] dump_stack_lvl+0x16c/0x1f0 [ 825.006727][T19421] should_fail_ex+0x512/0x640 [ 825.006773][T19421] ? __kmalloc_noprof+0xbf/0x510 [ 825.006822][T19421] ? lsm_blob_alloc+0x68/0x90 [ 825.006868][T19421] should_failslab+0xc2/0x120 [ 825.006897][T19421] __kmalloc_noprof+0xd2/0x510 [ 825.006950][T19421] lsm_blob_alloc+0x68/0x90 [ 825.006997][T19421] security_sk_alloc+0x30/0x270 [ 825.007030][T19421] sk_prot_alloc+0xfb/0x2a0 [ 825.007065][T19421] sk_alloc+0x36/0xc20 [ 825.007109][T19421] inet6_create+0x381/0x1300 [ 825.007179][T19421] ? inet6_create+0x7f/0x1300 [ 825.007236][T19421] __sock_create+0x338/0x8d0 [ 825.007283][T19421] __sys_socket+0x14d/0x260 [ 825.007322][T19421] ? __pfx___sys_socket+0x10/0x10 [ 825.007361][T19421] ? syscall_user_dispatch+0x78/0x140 [ 825.007421][T19421] __x64_sys_socket+0x72/0xb0 [ 825.007460][T19421] do_syscall_64+0xcd/0x490 [ 825.007512][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.007545][T19421] RIP: 0033:0x7f318958e929 [ 825.007579][T19421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.007613][T19421] RSP: 002b:00007f318a3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 825.007644][T19421] RAX: ffffffffffffffda RBX: 00007f31897b5fa0 RCX: 00007f318958e929 [ 825.007665][T19421] RDX: 0000000000000106 RSI: 0000000000000801 RDI: 000000000000000a [ 825.007685][T19421] RBP: 00007f3189610b39 R08: 0000000000000000 R09: 0000000000000000 [ 825.007705][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.007726][T19421] R13: 0000000000000000 R14: 00007f31897b5fa0 R15: 00007ffdcf510658 [ 825.007768][T19421] [ 825.449521][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 825.997467][T19442] netlink: 146 bytes leftover after parsing attributes in process `syz.4.4101'. [ 827.470085][T19468] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4108'. [ 830.895929][T19503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.937831][ T31] audit: type=1800 audit(4294967474.503:22): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4121" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 831.971971][T19523] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4123'. [ 832.147000][T19516] can: request_module (can-proto-0) failed. [ 834.388922][T19544] random: crng reseeded on system resumption [ 838.116826][T19577] netlink: 306 bytes leftover after parsing attributes in process `syz.1.4133'. [ 838.529466][T19583] < [ 838.530208][T19583] FAULT_INJECTION: forcing a failure. [ 838.530208][T19583] name failslab, interval 1, probability 0, space 0, times 0 [ 838.679532][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.0.4134 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 838.679585][T19583] Tainted: [U]=USER [ 838.679596][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.679617][T19583] Call Trace: [ 838.679627][T19583] [ 838.679640][T19583] dump_stack_lvl+0x16c/0x1f0 [ 838.679696][T19583] should_fail_ex+0x512/0x640 [ 838.679743][T19583] ? fs_reclaim_acquire+0xae/0x150 [ 838.679787][T19583] should_failslab+0xc2/0x120 [ 838.679819][T19583] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 838.679874][T19583] ? security_inode_alloc+0x3b/0x2b0 [ 838.679918][T19583] security_inode_alloc+0x3b/0x2b0 [ 838.679956][T19583] inode_init_always_gfp+0xce4/0x1030 [ 838.680010][T19583] alloc_inode+0x86/0x240 [ 838.680045][T19583] path_from_stashed+0x2be/0xb00 [ 838.680094][T19583] ? do_raw_spin_lock+0x12c/0x2b0 [ 838.680161][T19583] ? __pfx_path_from_stashed+0x10/0x10 [ 838.680215][T19583] ? do_raw_spin_unlock+0x172/0x230 [ 838.680276][T19583] ns_get_path+0x5f/0x80 [ 838.680320][T19583] proc_ns_get_link+0x121/0x260 [ 838.680367][T19583] ? __pfx_proc_ns_get_link+0x10/0x10 [ 838.680416][T19583] ? atime_needs_update+0x8b/0x710 [ 838.680456][T19583] ? __pfx_proc_ns_get_link+0x10/0x10 [ 838.680501][T19583] step_into+0x1a29/0x2270 [ 838.680555][T19583] ? __pfx_step_into+0x10/0x10 [ 838.680596][T19583] ? find_held_lock+0x2b/0x80 [ 838.680646][T19583] path_openat+0x6db/0x2cb0 [ 838.680708][T19583] ? __pfx_path_openat+0x10/0x10 [ 838.680761][T19583] ? __lock_acquire+0xb8a/0x1c90 [ 838.680813][T19583] do_filp_open+0x20b/0x470 [ 838.680863][T19583] ? __pfx_do_filp_open+0x10/0x10 [ 838.680942][T19583] ? alloc_fd+0x471/0x7d0 [ 838.680998][T19583] do_sys_openat2+0x11b/0x1d0 [ 838.681036][T19583] ? __pfx_do_sys_openat2+0x10/0x10 [ 838.681090][T19583] __x64_sys_openat+0x174/0x210 [ 838.681130][T19583] ? __pfx___x64_sys_openat+0x10/0x10 [ 838.681199][T19583] do_syscall_64+0xcd/0x490 [ 838.681253][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.681286][T19583] RIP: 0033:0x7ffbd478d290 [ 838.681313][T19583] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 838.681345][T19583] RSP: 002b:00007ffbd5696f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 838.681378][T19583] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ffbd478d290 [ 838.681399][T19583] RDX: 0000000000000002 RSI: 00007ffbd5696fa0 RDI: 00000000ffffff9c [ 838.681420][T19583] RBP: 00007ffbd5696fa0 R08: 0000000000000000 R09: 0000000000000000 [ 838.681440][T19583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 838.681460][T19583] R13: 0000000000000000 R14: 00007ffbd49b5fa0 R15: 00007fff4cf8c228 [ 838.681501][T19583] [ 839.529520][T19595] zswap: compressor 000 not available [ 839.715464][T19602] Line length is too long: Should be less than 4094 [ 839.820001][T19605] Line length is too long: Should be less than 4094 [ 846.683276][T19696] usb usb36: usbfs: process 19696 (syz.1.4155) did not claim interface 0 before use [ 847.602870][T19715] Invalid ELF header magic: != ELF [ 848.165538][T19728] vhci_hcd: invalid port number 16 [ 848.229741][T19728] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 848.989274][T19743] ima: policy update failed [ 849.010137][ T31] audit: type=1802 audit(4294967491.571:23): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4162" res=0 errno=0 [ 852.518218][T19774] CIFS mount error: No usable UNC path provided in device string! [ 852.518218][T19774] [ 852.544787][T19774] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 853.173090][T19787] ima: policy update failed [ 853.179832][T19787] netlink: 25 bytes leftover after parsing attributes in process `syz.5.4174'. [ 853.189535][ T31] audit: type=1802 audit(4294967495.753:24): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4174" res=0 errno=0 [ 855.082204][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4179'. [ 855.526005][T19816] FAULT_INJECTION: forcing a failure. [ 855.526005][T19816] name failslab, interval 1, probability 0, space 0, times 0 [ 855.626736][T19816] CPU: 0 UID: 0 PID: 19816 Comm: syz.1.4180 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 855.626789][T19816] Tainted: [U]=USER [ 855.626800][T19816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.626819][T19816] Call Trace: [ 855.626830][T19816] [ 855.626842][T19816] dump_stack_lvl+0x16c/0x1f0 [ 855.626896][T19816] should_fail_ex+0x512/0x640 [ 855.626954][T19816] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 855.627009][T19816] should_failslab+0xc2/0x120 [ 855.627040][T19816] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 855.627091][T19816] ? security_file_alloc+0x34/0x2b0 [ 855.627140][T19816] security_file_alloc+0x34/0x2b0 [ 855.627183][T19816] init_file+0x93/0x4c0 [ 855.627216][T19816] alloc_empty_file+0x73/0x1e0 [ 855.627251][T19816] alloc_file_pseudo+0x13a/0x230 [ 855.627288][T19816] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 855.627329][T19816] ? do_raw_spin_unlock+0x172/0x230 [ 855.627388][T19816] __anon_inode_getfile+0xe8/0x280 [ 855.627443][T19816] anon_inode_getfile_fmode+0x37/0xa0 [ 855.627492][T19816] __do_sys_fanotify_init+0x96d/0xc00 [ 855.627534][T19816] do_syscall_64+0xcd/0x490 [ 855.627587][T19816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.627620][T19816] RIP: 0033:0x7f05fdf8e929 [ 855.627646][T19816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.627679][T19816] RSP: 002b:00007f05feebb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 855.627709][T19816] RAX: ffffffffffffffda RBX: 00007f05fe1b5fa0 RCX: 00007f05fdf8e929 [ 855.627731][T19816] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 855.627750][T19816] RBP: 00007f05fe010b39 R08: 0000000000000000 R09: 0000000000000000 [ 855.627771][T19816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.627789][T19816] R13: 0000000000000000 R14: 00007f05fe1b5fa0 R15: 00007fffbed32048 [ 855.627831][T19816] [ 858.247150][T19848] program syz.5.4186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.833673][T19876] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 863.749398][T19924] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 866.230903][T19973] netlink: 146 bytes leftover after parsing attributes in process `syz.5.4210'. [ 866.346301][T19982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 866.372092][T19982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 866.398434][T19982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 866.417649][T19982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 866.425759][T19982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 867.655949][ T6801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.945631][ T6801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.334077][ T6801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.524346][T19982] Bluetooth: hci1: command tx timeout [ 868.937913][ T6801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.383903][T19981] chnl_net:caif_netlink_parms(): no params data found [ 870.584462][T19982] Bluetooth: hci1: command tx timeout [ 870.736742][T19981] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.743965][T19981] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.793487][T19981] bridge_slave_0: entered allmulticast mode [ 870.848487][T19981] bridge_slave_0: entered promiscuous mode [ 870.901777][T19981] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.918507][T19981] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.934511][T19981] bridge_slave_1: entered allmulticast mode [ 870.949128][T19981] bridge_slave_1: entered promiscuous mode [ 871.180215][ T6801] vlan1: left allmulticast mode [ 871.188586][ T6801] veth0_vlan: left allmulticast mode [ 871.193961][ T6801] vlan1: left promiscuous mode [ 871.224750][ T6801] bridge0: port 3(vlan1) entered disabled state [ 871.329683][ T6801] bridge_slave_1: left allmulticast mode [ 871.335656][ T6801] bridge_slave_1: left promiscuous mode [ 871.341502][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.488510][ T6801] bridge_slave_0: left allmulticast mode [ 871.504267][ T6801] bridge_slave_0: left promiscuous mode [ 871.510239][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.364459][T20138] slcan: can't register candev [ 872.382610][T20138] Falling back ldisc for ttyS2. [ 872.664458][T19982] Bluetooth: hci1: command tx timeout [ 873.397996][ T6801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.428221][ T6801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.448238][ T6801] bond0 (unregistering): Released all slaves [ 873.564793][ T6801] HfR: left promiscuous mode [ 873.606935][T19981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.649313][T19981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.851190][T19981] team0: Port device team_slave_0 added [ 874.036903][T19981] team0: Port device team_slave_1 added [ 874.183919][T20163] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 874.346693][T19981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.353730][T19981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.435659][T19981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.516337][T19981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.523678][T19981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.568191][T20164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 874.604317][T19981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.747708][T19982] Bluetooth: hci1: command tx timeout [ 875.215244][T19981] hsr_slave_0: entered promiscuous mode [ 875.222212][T19981] hsr_slave_1: entered promiscuous mode [ 875.255121][T19981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.263592][T19981] Cannot create hsr debugfs directory [ 876.222605][ T6801] hsr_slave_0: left promiscuous mode [ 876.299487][ T6801] hsr_slave_1: left promiscuous mode [ 876.318557][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.367280][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.422489][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.500403][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.527120][T20204] delete_channel: no stack [ 876.574983][T19982] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 876.673710][ T6801] veth1_macvtap: left promiscuous mode [ 876.714989][ T6801] veth0_macvtap: left promiscuous mode [ 876.743765][ T6801] veth1_vlan: left promiscuous mode [ 876.761212][ T6801] veth0_vlan: left promiscuous mode [ 877.380276][T20226] binder: 20219:20226 ioctl c00c620f 200000000340 returned -22 [ 878.524752][ T6801] team0 (unregistering): Port device team_slave_1 removed [ 878.622634][ T6801] team0 (unregistering): Port device team_slave_0 removed [ 880.443353][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.451361][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.034426][T19981] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 881.096176][T19981] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 881.258163][T19981] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 881.311635][T19981] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 881.492667][T20248] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4236'. [ 881.572127][T20252] random: crng reseeded on system resumption [ 882.493062][T19981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.720557][T19981] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.825884][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.833111][ T6799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.934134][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.941502][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.725527][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4241'. [ 884.149408][T19981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.501263][T20309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 884.613354][T20309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 884.658226][T20309] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 884.729164][T20309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 884.768994][T20309] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 884.851495][T20309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 884.894690][T20309] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 885.029701][T20309] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 885.798409][T19981] veth0_vlan: entered promiscuous mode [ 885.848724][T19981] veth1_vlan: entered promiscuous mode [ 885.944016][T19981] veth0_macvtap: entered promiscuous mode [ 885.981780][T19981] veth1_macvtap: entered promiscuous mode [ 886.033180][T19981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.077759][T19981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.123274][T19981] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.137088][T19981] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.147342][T19981] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.160638][T19981] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.269875][T19982] Bluetooth: hci2: command 0x0406 tx timeout [ 886.664476][T19982] Bluetooth: hci0: command 0x0406 tx timeout [ 886.696903][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.709866][ T6803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.746989][T19982] Bluetooth: hci3: command 0x0c1a tx timeout [ 886.747638][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.764381][ T6803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.905523][T19982] Bluetooth: hci1: command 0x0c1a tx timeout [ 888.179924][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4252'. [ 888.790653][T19982] Bluetooth: hci0: command 0x0406 tx timeout [ 888.824897][T19982] Bluetooth: hci3: command 0x0c1a tx timeout [ 888.995073][T19982] Bluetooth: hci1: command 0x0c1a tx timeout [ 891.064364][T19982] Bluetooth: hci1: command 0x0c1a tx timeout [ 892.735008][T19982] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 892.735061][T19982] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 892.750870][T19982] Bluetooth: hci1: adv larger than maximum supported [ 892.750924][T19982] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 892.774393][T19982] Bluetooth: hci1: Unknown advertising packet type: 0x32 [ 892.781663][T19982] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 892.789040][T19982] Bluetooth: hci1: adv larger than maximum supported [ 892.796183][T19982] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 894.400653][T20512] [ 894.410056][T20512] ====================================================== [ 894.417281][T20512] WARNING: possible circular locking dependency detected [ 894.424323][T20512] 6.16.0-rc5-syzkaller #0 Tainted: G U [ 894.431273][T20512] ------------------------------------------------------ [ 894.438302][T20512] syz.0.4267/20512 is trying to acquire lock: [ 894.444380][T20512] ffff88802ffba868 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: ptp_clock_adjtime+0x527/0x760 [ 894.454177][T20512] [ 894.454177][T20512] but task is already holding lock: [ 894.461566][T20512] ffff88802ffba130 (&clk->rwsem){++++}-{4:4}, at: get_clock_desc+0x125/0x240 [ 894.470420][T20512] [ 894.470420][T20512] which lock already depends on the new lock. [ 894.470420][T20512] [ 894.480941][T20512] [ 894.480941][T20512] the existing dependency chain (in reverse order) is: [ 894.489964][T20512] [ 894.489964][T20512] -> #1 (&clk->rwsem){++++}-{4:4}: [ 894.497292][T20512] down_write+0x92/0x200 [ 894.502101][T20512] posix_clock_unregister+0x4d/0xd0 [ 894.507856][T20512] ptp_clock_unregister+0x14f/0x250 [ 894.513600][T20512] ptp_vclock_unregister+0x11a/0x160 [ 894.519479][T20512] unregister_vclock+0x108/0x1a0 [ 894.524973][T20512] device_for_each_child_reverse+0x133/0x1a0 [ 894.531500][T20512] n_vclocks_store+0x4b6/0x6d0 [ 894.536816][T20512] dev_attr_store+0x58/0x80 [ 894.541860][T20512] sysfs_kf_write+0xf2/0x150 [ 894.547084][T20512] kernfs_fop_write_iter+0x354/0x510 [ 894.553036][T20512] vfs_write+0x6c4/0x1150 [ 894.557921][T20512] ksys_write+0x12a/0x250 [ 894.562806][T20512] do_syscall_64+0xcd/0x490 [ 894.567863][T20512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.574308][T20512] [ 894.574308][T20512] -> #0 (&ptp->n_vclocks_mux){+.+.}-{4:4}: [ 894.582324][T20512] __lock_acquire+0x126f/0x1c90 [ 894.587760][T20512] lock_acquire+0x179/0x350 [ 894.592824][T20512] __mutex_lock+0x199/0xb90 [ 894.597920][T20512] ptp_clock_adjtime+0x527/0x760 [ 894.603406][T20512] pc_clock_adjtime+0x115/0x1e0 [ 894.608803][T20512] __do_sys_clock_adjtime+0x172/0x290 [ 894.614726][T20512] do_syscall_64+0xcd/0x490 [ 894.619779][T20512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.626213][T20512] [ 894.626213][T20512] other info that might help us debug this: [ 894.626213][T20512] [ 894.636450][T20512] Possible unsafe locking scenario: [ 894.636450][T20512] [ 894.643905][T20512] CPU0 CPU1 [ 894.649287][T20512] ---- ---- [ 894.654665][T20512] rlock(&clk->rwsem); [ 894.658852][T20512] lock(&ptp->n_vclocks_mux); [ 894.666174][T20512] lock(&clk->rwsem); [ 894.672779][T20512] lock(&ptp->n_vclocks_mux); [ 894.677567][T20512] [ 894.677567][T20512] *** DEADLOCK *** [ 894.677567][T20512] [ 894.685807][T20512] 1 lock held by syz.0.4267/20512: [ 894.690926][T20512] #0: ffff88802ffba130 (&clk->rwsem){++++}-{4:4}, at: get_clock_desc+0x125/0x240 [ 894.700190][T20512] [ 894.700190][T20512] stack backtrace: [ 894.706092][T20512] CPU: 0 UID: 0 PID: 20512 Comm: syz.0.4267 Tainted: G U 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 894.706125][T20512] Tainted: [U]=USER [ 894.706132][T20512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 894.706147][T20512] Call Trace: [ 894.706155][T20512] [ 894.706164][T20512] dump_stack_lvl+0x116/0x1f0 [ 894.706200][T20512] print_circular_bug+0x275/0x350 [ 894.706233][T20512] check_noncircular+0x14c/0x170 [ 894.706300][T20512] __lock_acquire+0x126f/0x1c90 [ 894.706336][T20512] lock_acquire+0x179/0x350 [ 894.706368][T20512] ? ptp_clock_adjtime+0x527/0x760 [ 894.706396][T20512] ? __pfx___might_resched+0x10/0x10 [ 894.706426][T20512] __mutex_lock+0x199/0xb90 [ 894.706460][T20512] ? ptp_clock_adjtime+0x527/0x760 [ 894.706488][T20512] ? ptp_clock_adjtime+0x527/0x760 [ 894.706521][T20512] ? __pfx___mutex_lock+0x10/0x10 [ 894.706555][T20512] ? __pfx___might_resched+0x10/0x10 [ 894.706583][T20512] ? down_read+0x13d/0x480 [ 894.706603][T20512] ? __pfx_down_read+0x10/0x10 [ 894.706626][T20512] ? __pfx_ptp_clock_adjtime+0x10/0x10 [ 894.706653][T20512] ? ptp_clock_adjtime+0x527/0x760 [ 894.706679][T20512] ptp_clock_adjtime+0x527/0x760 [ 894.706708][T20512] ? __pfx_ptp_clock_adjtime+0x10/0x10 [ 894.706735][T20512] pc_clock_adjtime+0x115/0x1e0 [ 894.706763][T20512] ? __pfx_pc_clock_adjtime+0x10/0x10 [ 894.706795][T20512] ? __pfx_pc_clock_adjtime+0x10/0x10 [ 894.706822][T20512] __do_sys_clock_adjtime+0x172/0x290 [ 894.706856][T20512] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 894.706889][T20512] ? __pfx_do_futex+0x10/0x10 [ 894.706925][T20512] ? xfd_validate_state+0x61/0x180 [ 894.706960][T20512] ? rcu_is_watching+0x12/0xc0 [ 894.706985][T20512] do_syscall_64+0xcd/0x490 [ 894.707021][T20512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.707058][T20512] RIP: 0033:0x7ffbd478e929 [ 894.707076][T20512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.707100][T20512] RSP: 002b:00007ffbd5676038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 894.707121][T20512] RAX: ffffffffffffffda RBX: 00007ffbd49b6080 RCX: 00007ffbd478e929 [ 894.707136][T20512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffffb [ 894.707150][T20512] RBP: 00007ffbd4810b39 R08: 0000000000000000 R09: 0000000000000000 [ 894.707164][T20512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.707177][T20512] R13: 0000000000000000 R14: 00007ffbd49b6080 R15: 00007fff4cf8c228 [ 894.707198][T20512] [ 894.956101][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 896.851820][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.977528][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.107563][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.151355][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.346183][ T49] bridge_slave_1: left allmulticast mode [ 897.351874][ T49] bridge_slave_1: left promiscuous mode [ 897.377566][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.406537][ T49] bridge_slave_0: left allmulticast mode [ 897.412424][ T49] bridge_slave_0: left promiscuous mode [ 897.434486][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.076578][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.125189][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.141776][ T49] bond0 (unregistering): Released all slaves [ 898.557337][ T49] hsr_slave_0: left promiscuous mode [ 898.584267][ T49] hsr_slave_1: left promiscuous mode [ 898.594403][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.602194][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.637246][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.654279][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.678654][ T49] veth1_macvtap: left promiscuous mode [ 898.694496][ T49] veth0_macvtap: left promiscuous mode [ 898.700258][ T49] veth1_vlan: left promiscuous mode [ 898.724336][ T49] veth0_vlan: left promiscuous mode [ 899.284581][ T49] team0 (unregistering): Port device team_slave_1 removed [ 899.365071][ T49] team0 (unregistering): Port device team_slave_0 removed [ 900.110889][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.181543][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.241422][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.352654][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.567411][ T49] bridge_slave_1: left allmulticast mode [ 900.573136][ T49] bridge_slave_1: left promiscuous mode [ 900.592740][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.654953][ T49] bridge_slave_0: left allmulticast mode [ 900.661167][ T49] bridge_slave_0: left promiscuous mode [ 900.674627][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.001319][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.012160][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.023759][ T49] bond0 (unregistering): Released all slaves [ 901.116850][ T49] .RRo\&p: left promiscuous mode [ 901.169698][ T49] tipc: Left network mode [ 901.636192][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.654292][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.665719][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.673177][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.718290][ T49] veth1_macvtap: left promiscuous mode [ 901.723970][ T49] veth0_macvtap: left promiscuous mode [ 901.733555][ T49] veth1_vlan: left promiscuous mode [ 901.739095][ T49] veth0_vlan: left promiscuous mode [ 901.918763][ T49] team0 (unregistering): Port device team_slave_1 removed [ 901.933453][ T49] team0 (unregistering): Port device team_slave_0 removed [ 902.363662][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.421513][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.470421][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.532327][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.626228][ T49] bridge_slave_1: left allmulticast mode [ 902.635012][ T49] bridge_slave_1: left promiscuous mode [ 902.641543][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.651324][ T49] bridge_slave_0: left allmulticast mode [ 902.658366][ T49] bridge_slave_0: left promiscuous mode [ 902.664678][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.800152][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.810967][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.822017][ T49] bond0 (unregistering): Released all slaves [ 903.065254][ T49] hsr_slave_0: left promiscuous mode [ 903.071138][ T49] hsr_slave_1: left promiscuous mode [ 903.077324][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.085737][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.093425][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.101014][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.111489][ T49] veth1_macvtap: left promiscuous mode [ 903.117094][ T49] veth0_macvtap: left promiscuous mode [ 903.122668][ T49] veth1_vlan: left promiscuous mode [ 903.128125][ T49] veth0_vlan: left promiscuous mode [ 903.287905][ T49] team0 (unregistering): Port device team_slave_1 removed [ 903.300440][ T49] team0 (unregistering): Port device team_slave_0 removed