last executing test programs: 7m27.602193161s ago: executing program 3 (id=1024): readv$auto(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)="ec2c77b83a6dc7bf60fdf4d2faff963959d08d411a57a2ab8b92817526d715d52a531ef6a71b6a6ae449e7f1ddc0187337827045c218702673256672ad38d4dabcdacb6c5c7688370c5cebd5248b7fa43fc57d4490868a8fc001f416ec09adcad4e2ad176fa7f738049918f30c7ddc7f0859133c10062a3bb65e25fbe0f3c0efbb289b779e3ac7ab1288e0114471ed82e3cd646b5699fb2ac9ff789705332e87771f329fe62baa5bcafc88e0c970189b45f54cad429a02fee1f479564a55f837f9e8537738b7a62b7823d99db2607723cdca637adc547953df130a3635a92e6a9e27eef6ca6b58b827a3392b9aabbe488021e1e2eb33407e8a", 0x7}, 0xffffffffffff4e1e) r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="3a91ea3e14000055c5c900", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x4) setsockopt$auto_SO_OOBINLINE(r0, 0xeb6, 0xa, &(0x7f0000000280)='MAC80211_HWSIM\x00', 0xfffffff7) ioctl$auto_SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2, &(0x7f0000000080)="f2fbfab7c3cc97972c701f153db49e53bbcb48513860e886066666cbca5ab6450423941b1ed2ecd8112a9945d8b14b598a24f78ebc73781bc063cb12f9f197c57003037c2805b09e939ef6becc052067ab9f513d436371") openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) r1 = waitid$auto(0x42, 0xffffffffffffffff, &(0x7f0000000240)={@siginfo_0_0={0x7, 0x7d2, 0xd5ae, @_sigfault={&(0x7f00000000c0)="4ba6a403b94fd1f75aa81163a7af0e349a8b2abe5e6c7fbf7c5082a67f38520dbdc7692997aa45e63b6b16e806371967f4d563fcf251b4a49080e02c5463c66752df", @_addr_lsb=0x8}}}, 0x2, &(0x7f00000002c0)={{0x7ff, 0xffffffffffffffff}, {0x4e, 0x7}, 0x7f, 0x9, 0x1000000000000006, 0x3fffffff80000000, 0x800, 0x7, 0x5, 0x7, 0x9, 0x3, 0x10001, 0x9577, 0x9, 0x9}) bpf$auto(0x12, &(0x7f0000000040)=@link_detach={0xffffffffffffffff}, 0x26) r3 = geteuid() shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000001180)={{0x8, 0xffffffffffffffff, 0x0, 0x6, 0xdf7, 0x7, 0x9f71}, 0x80000000, 0x800, 0xfffffffffffffff8, 0x1, @inferred=r1, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000140)="995d45922db8a829198ebce22bd5f42e563b53a249de9c8b5d392d88426369a73c6fe6f66de06f9f4964cd20af595ff4f1e8bf7f8642d6", &(0x7f0000000180)="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"}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r5, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x54) fstat$auto(r2, &(0x7f0000001200)={0x1, 0x8000000000000001, 0xfffffffffffffb52, 0x3ff, r3, r4, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x6, 0x8000000000000000, 0x5, 0x7f, 0x100000001}) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x2, &(0x7f0000000d00)={@siginfo_0_0={0x4, 0xfffffffa, 0x0, @_kill={r1, r3}}}, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000340)={0x6, 0x2274, 0x100000000, 0xb, 0x4, 0xffffffffffffffff}) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) msgctl$auto(0x3, 0x19, &(0x7f0000000380)={{0x800, r3, 0xee01, 0xfffffffb, 0x0, 0xfffffffd, 0x5}, &(0x7f00000002c0), &(0x7f0000000300)=0xc, 0x2, 0x5, 0x6, 0x0, 0x5, 0x40, 0xe, 0xc1d, @inferred=r6, @inferred=r7}) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) mmap$auto(0x2, 0x40000000008, 0x6, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mount_setattr$auto(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0xe9f) 7m27.350599632s ago: executing program 3 (id=1029): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x2, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xffd8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) write$auto(0x3, 0x0, 0xffeb) 7m27.227887566s ago: executing program 3 (id=1030): r0 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) (rerun: 64) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) (rerun: 32) socket(0xa3ba92d0332e1b69, 0x3, 0xc24) (async, rerun: 32) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd3c, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async, rerun: 64) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r0, 0x4018bc0e, &(0x7f0000000080)={0x1, 0x0, 0xe171, 0x8}) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3ff, 0x7, 0xd, 0x1, 0x9, 0x3, 0x15f4da0a, 0x3, 0x3, 0x20000000000003, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$auto_TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0x8) close_range$auto(r4, r3, 0x9) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) (async) sendmsg$auto_NFC_CMD_VENDOR(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="902f00b034e80bda5c7c908ffe90555b1e5473310760aa09ea8339d748a8035a1a690612d3c574f3fdd95c3ada6911b0574fcd228b21d1b74f21226c04f3ccacc394f088e914019b8aa69b8f86a3b3d312450a41a18c3a8c175d5434cacf990bca53fd2226e041c66a58906ea74d4c723b1ae5a5479507092c1bd15d817c1ed5407593925bc736", @ANYBLOB="94d5718d9e5f80d7735ea77a4405afe32f2516d4e9fcef42281562c80e4bb50cd79583192527e2ca413690507866364d07e5481922607b93cd9fe3d34a57db8014cb4296b37b8088d2023cf197cf17e73c89974ff1d27c4dd50dee739100c67606f9dde15aefdf5f60a921db1a9d398ca997061bc12c6113fe6d3dc23f4b9a5f54ca", @ANYBLOB="08002cbd7000ffdbdf251d000000080001000800000005000b0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004014) (async) mmap$auto(0x4, 0x10001, 0x3, 0xeb1, 0x0, 0x9000) (async, rerun: 32) setsockopt$auto(r1, 0xc, 0x7fff, 0x0, 0x7) (async, rerun: 32) socket(0xa, 0x5, 0x94) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) 7m26.898870319s ago: executing program 3 (id=1031): memfd_secret$auto(0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x408042, 0x0) 7m26.826712876s ago: executing program 3 (id=1032): rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r0 = socket(0x27, 0x800, 0xa5) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x2404c004) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "551e7285968d8e86bd4794a0e875ee9f7b35db28d0a7e72b7a19039c336389cb57a05ba0582cc612c6c0be4beb4cc54d8337d40c93638ba34c4a0435c32a206e808194584d8c359d418662d18943a5e3c6234e712a096205457b56f0a1e5d4d19835696295a54f38117d9d751e23b5fb61daa5a6b2c75148106dc167a20061e3fe55cc53ffadf62b0945da4b27515a0102a8d2d002a842362b4744b8972a5e11e8a6aab89c7b85947f3901d696d459641aa7e6b89b73387ec5fa2d2af6c992213d82c5774c4bcd4187585bcf652af094e988e75002e01f607abf5e25ae0f5548fd13175b681fc059c1f9160aef893bae78cf6cf62c30fa3f0c5c60cbe383a9c0cc1289519b0c7cff81cc3b4fec739fad19c662b0f98d607b61d825d10e2dd3b27b0f7a6b1adc5a452f344c39da5f086ea7c5d99674ca69c4f5635776e67c151bad72f906cd65231da3a55d6056e23b00686723714fabd752f3e2c86dafdee9d379230c0abeabfde9cf88cae099f3ccc76ea7e64a3734ced5ffe749a8012db53ad4d6a5e347bdd83bb409c1bdb762f4aba145df74833d73ccd583797d4fb4ed3e0c7c29d502aacaef02e114d9e60ca6b0bcb28f825f5d49e94ccd2f830933c39a3ba3782505453e3de872ad8da84a6a22aaa62970428bb9a95d1817dbeeded1c53c5d508dea6cc53d80153b05f954c263278bb9c8bc02f3b1805dd9299dc8b97ebff0165d615ba7bf5ce8c490f4dd273642a18267b0a61a594cb1d608f3dffb292991ea32bb647a6f9b951f283e118dc73b45843b5aa883410e402e3bec9ba889ec237462042cedaed761cca0c3b7058d3ffc276c9a75e18b79804f4e21650d911edbedb9fedd31959a8783b1e39d7d6408554bddb2a5d67703d225fe4422bf2367ca483e77fe479495be3235f4c77b3872a9e33946d2602486b83e84e7d8d1742d369e2d00b9dbb552385502c0f597b3615bed54de65af106b58d2b6bebbdd3fe625152527af965b67e9424da7be2e2574e1492aed568d4faaa9da508e0a2e687876fa291e38b7c3ef38643e2c49e0d46d0f2d53352da2f184c4ced2305865ab0ad1435644419773ea82336ffdf62dd325a6a8b2d199d96dba8a13bb5a86ff65b80818ceb37ee8a2b2a8813b33e474e5b110e1ed13dbc4f52efabbce38935a8ada53a0ed5a1a01453a254a1dc528492159591aa192ff6cfa0b372caf236c78d1a0c94dc37916746358b4cf3cc1c0132657818ce6465e58936dbf5991dfb74ff97382c066ba0ceb06ac4f0c005e4c9166e94161bc08e1c23df7ed3419b10ae229aa6bafb19e6af003c9e319956723d839dc50a7edd8d80bce971ba504e0aac811d76e65acffdc4f7e9836396ba98b824be6cc704c59f5849642b191437a5cf902fc1ac491e8c59241586c6791b282b5cfae57eb7e6792048c4769b5b3f21987ec5097e530fd001da5d2999db4ded708225e9a53a2b48d2be3401a063da3c19168769eccaef710d7c2e06818bb05c4a9aa0ce2785a5a6d2846bac9836f1905a9b042029dcc59d918450b6affb522fbf78116941c5cef4ecb82a2134ee8e67ea6091170b67bfc3abec9e2cfc8208d4ba3bb732230fe6a9470c1152ebdc31bbce93cb742b4484bc1cef4298ce897a36c7e8b3ef8bd1b0e3d4dfa46da8bf89b06d67d8a5da465e8f68f999ec38ef8d1b7972125d2d8492680f6698419313afb74b5f715c90aa5ca0a6ea5561acd89a25d0fd066234b1752d6535251be347d8e69afea162f0ae84aa08a1a5475e6860af5956babe0530b6349e918fa97f14e6a83f7e2054c85ec37424757c49c6b76a889cde8473eebc495ac1088fda54f5c70bb17ef4873bf7b524ae892cd8267adfcd1e7054ac0c8b904855f816cbab8a6c5332d2221060b97931130187e1f07b0b9fad917c06f56d3f9fbca9d0ad93c300d88a6025359eb609e86c2b604d6834cde1351ccb0ba238715d6a77953f58b23a78db05bc38cf1e47d5336226a966af0a88fa19b4d992fc82310b7fceee45a202bfdf759dedee618361082881f91f85020e5282fd6a4ff376455f09bd1ca73b165498937eb7396525f9be44e1d5455f2fb0e9b0d79a2b05104239ddb65afabac40f2568353278905243edcffa25dbe93c91fd0982c77eb13c90cde8107888e9891ed1f3fd75b91f275544db3fb132c587243bdd433ad395ec44311df726aa04c20709aa456adebeba0e42ba8be3710f9e8f307febbb8bf1971d6e02b435ec6e209f6d3e3200f51b17e97c7b8eed34b6b297b03db790c857329989e778133d2f9ca40e62aafa5a053d416a09d36a78e1b0716aa049da6fc9fedc96a02d10a13260d6f7cc86a7c681b97ec9987e16bb190e75137bc3e3ce64b51a599f1ebed0683f55240e49eeb6588a13b55c266ee997d1b237f0deefa3bd5670293249c6e79decfc6ee39a08d1ffb71231ed36b9aea01fd0804fc591b7100e6cf5cf97ddb1871afe44a534f2eeafb12d217c6684d474f19bf7d957b11429843723823da2e555a9a9f9d5af6d1ddd40a59a67c459581604f280f4412b0a4b8736bbdd1cd2d4d27cd273ad39d3d52036832e968f93ff343a92f4001c8a2c43ec1f3377c67f3b49f6297de1e2dc5a10abafbf034a029e5d1d89e627fc3741ab5fa68afc24fdf22b6ef215e0927fff8bdb671ef6314ecaa7a8397292e699b693600e49f9e428604fed71f05f2775c224eead65c378539b80ff7f475c68933366da1f76e0542991277c4147358c34ad37a5d81bd1810f39ebf7ece6a0054f4bf5f846bd95f9ba31ea606c226d267d95ad95c29b897fb1fba58f121939ff3c41535d1199c71c9f6bd928eae64c7884affef531df2c690e7cbc000518097ed7ef60d0bc9cf05abc36e724c11185b73612978a9c6fa58b5d27e763fc2cf74fef5084129fbf47847b947e6a9d860fab7a802045357badb25231f48356934b4754e8e5727060e4e17a5ec333500b2942851a8e97c9df3d9d925877dbf322f0b9518d96b16987df8bd2fc176bef7de39db55679009471caad67b3795f9adf591b6605dbd00c75062cdb538caeb1e3c80db54860a1b2b8d5dd6537fecf2df1dc0ab37769325cb019f954b1bc105cbd896d5dbe4b40469b05cd98d053bf2c7f0ed6449bdfd13fbf93f4ce3ec680064f919a6f448937625090f072abe26bdb0c6c379637948a3c62c8aa20e46c8c86deafd1b5cdfac216aa17ddd7a86a5e3c56ba2036f965194ed0fdeb4966bc01240351f8352079749618c35f344408996cb1f0756af37917a3ceb97c72eb14e3d2efc70011ef07a6547ce5f1332ba45eeaed4ba1529a9e9d4af5137b63d94cf2d80bc84e26049a1293ecd769c5ff406f3b2952ea56ae9eb5bb5c1ce072f80211d5d8d26dc72ede3c5bd14c28e3f8f119fcd3cf0ea800ddafcc718e9d724a305bc348093cf0964c6efe93049a1c0f8e2fa2c1f0422a09247fd52a7f4518af3e284d0fd4a864d41308f1600a2c97b1cf45f684b9b0af091de1db32b003bfc44f45d51d017ec5d06736e035e0d2cf65d7000299362b4102a487715c44b960c299545c3a33e209bb2641ffffdb1c35a1e3ebd3e34733051c980a49070e317eff14bba561e2fedd7e9f4d252051fd15255e98f7c41891342b28b0322c028d912eb474bbc9e86e0b18993ba33d4e6b78187a36fd0cdf0341753c29302b99756d0c449f353765d051518fc06c675e11f82fe9521ae18a903d96e556bf84478390ad141170c0e0990cfe393b2560d76a186a5bfe4edd18b1be4b417deba365b7cd52539eaffc7f499ed846032b6a33e0df76dd86ef1e8f6e15e608bccfe3847ef8df42de3acc04856cb890fe5f12c811ad808b215b4dc936360b858c80c0ebed18bf2dbec3ea127f071809a26395e027c73913da152e387774a1a063bbe652cc265c0498e3da96eb63a1a467404729a9f16f81b7462844f76962fd72f209f93fddf1c240a95d4094f1506cde954ec4a711d2be412aa438278aad4fdefcc925102bdba564e8896e77e5cd528b10c32c8529738a9f8128017ea5afa2c5ae6bd77f4fd4a501159cde94c14c3752d34809712dd76a70e5ef57acc9c66ade916a42a778a4310d557cd9bfc0a70b7b6f72e38bc7a94680d371364b8c8605dcf9dedd5a452d4e2eee05dd3aa0c5e1a5ead1a498d361a14e7bebadd1d42d6590f83ee597ba1c79a582a75cb562b0089ca9974d4a6e494e8df78db65b340b7e4c4a6bf34b09afa260fa3dab80550437d16dccf9cfd609d91a8282f8ca7fe4b7c623e2335261f784e7122e5b290dc100af06b0806edba47ba75ae41cc0f498218991cf9c42492f97dec71ad0a9cb8c6bfee30c2690e1ad47b8c5631def9e0f4238015542846b5118936e3c12fdf7e1e43004edabe47602ebb7fe1eb4af7a9a44c3d7558c9d47b2d7e6c9b51a0b39dbe192c579881d1133c078e45cdfe3a159467059e189787042830fd2d8de351b6903900ef35767ccd73d28d16e1e1ddae9674da771f074aa8c1e024abbdf316415b1b91a483a4572cf644b2bbd092eafecef21c1845701a527f0d675e1cbff2363fdd2085640edc7936e84970d478a4c4806b820f12aedf7826abf4ed816b3496d3693ad21c60bb565ade13e12ff59dba6722374c384c72229987916f1dc8792b5e7e33057c302d93f7e63f5a18c711f168dd0829b3f894e1e82a6736f6989798586709c59d139c2d450e31c804106a55108ecbfdee94f401f5c0ba2e7d214f7a7b1a5dde17d09bd7f2b3db196a397afa855901657a9d2308aabcf82950a28512ef1851b010f8dfcc96a1e0f0ebc737e374ed3acbeb9660ed37469d624e1c1341e27ebcf2e889b5b3e93adb41af058d26b37f06924038333723c25b24fe5f3db2d747810d3f729f8351b9f2a5c3a84d106eb6024e1b78a2a17c079d80a41da6ae73fc279caf574d90f98e6c5dd8e85b59e429f3c5afdc981f8a0c3f170cd083157c3763b047ce2973e033e207523a3395f4a30628a7c1b3903948be71b5d901fcd4c6cf5195c6828c3681464b4c3b0b4f846e01225ef8d2f42e5011b4256ef2117a32777dfe5adc28cac7a3429ca9d84e7d1d0ec9fa4ead975355b10b800a61aed3266b9b99ecf491929de9e9ba24209bf7dd5880143df0142664d5c0ccfb168a0476c50a6c67576ac3206a3af55feb072a89344a74358bd84a82138dfb8780fea2631dfd34fab03469c49dce4148fc07656394111a2e3fc63c1f1e9d718f84ac69b3cee050879962f2a3a3466ef609e2ff14bddad613edcc02bd55444577450c2a9a0e9acfec8bdea90b4c6a7fdf323b16799a3f34375c75c0f7bbfa402a9feb93e418293b2ca90cf1182320f9e97f198957ae83b89276ea5305dfa0fb697c8fb085478accfeeea9d4ec048f049fd7d0eef0df15c2af18029a9edf620b3f714b2da5f466303b7208dd77c1e52dca33737dfd41892bddd202d4beb525aed140abb8b8f02a2ab5a507756636e1011ec5c9d10a73a4e70c0e8e18240d06b234507e192be2d5b142d1e7fb65beee88dded7e670c9f7802004940952a5661d28df7446f334ed25d1162d0e77b4b189e66dc908d6e600c9129fba6f424f21af091c37822c242ace2b606317a173989d6eb890a056b19487d738f431eebccf3e9f408f9fb50c5cdd2b6e0846ee2ae400c7d5abaf96566f93130dac325466e9b87922015bad26b82c9e9ea45b09c386bffce51526b997658626f63cdce4d3c2180379c57610b65edf55816c8a446aaa2494979"}, 0x6, 0x3, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x27fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) socket(0x15, 0xa, 0x5) r2 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xb, 0x10000, 0x16, 0x401, 0x8) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b40)={0x1c, r4, 0xf1b, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xad}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x8040) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000326bd7000fedbdf25040000000500060096000000140001000000000000000000000200000000000114009b3d02a8b7e00100"/68], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40810) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) 7m25.623364837s ago: executing program 3 (id=1038): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) mmap$auto(0x80, 0x40009, 0xe2, 0x100009b72, 0x7, 0x28400) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x2c, 0x6}, 0x0, 0x1001) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8000000000000001, 0x6, 0x9, 0x10, 0xfffffffffffffffa, 0x8000000000000001) io_uring_setup$auto(0x1fe, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x4000000403c6f2b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x161342, 0x100) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff6, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x81, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x400000, 0x1cc) ioprio_set$auto(0x2, 0x0, 0x208) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x7) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) write$auto(r1, 0x0, 0x7fffffff) 7m10.5742628s ago: executing program 32 (id=1038): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) mmap$auto(0x80, 0x40009, 0xe2, 0x100009b72, 0x7, 0x28400) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x2c, 0x6}, 0x0, 0x1001) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8000000000000001, 0x6, 0x9, 0x10, 0xfffffffffffffffa, 0x8000000000000001) io_uring_setup$auto(0x1fe, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x4000000403c6f2b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x161342, 0x100) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff6, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x81, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x400000, 0x1cc) ioprio_set$auto(0x2, 0x0, 0x208) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x7) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) write$auto(r1, 0x0, 0x7fffffff) 10.34286957s ago: executing program 0 (id=2761): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b46, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x1ff, 0xfffffffffffffffe, 0x0, 0x1, 0x9) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) close_range$auto(0x2, 0x8, 0x0) getpgrp(0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x60282, 0x0) msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8}) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) write$auto(r1, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x10000, 0xf4, 0xa, 0xeb1, 0x401, 0x5) socket(0x2, 0x1, 0x106) socket(0x18, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 8.614905494s ago: executing program 0 (id=2767): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) (async, rerun: 32) mincore$auto(0x1000, 0x8001, 0x0) (rerun: 32) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) clock_getres$auto(0xfffffffffffffffb, 0x0) (async, rerun: 32) socket(0x11, 0x80003, 0x300) (async, rerun: 32) socket(0x1d, 0x2, 0x7) (async, rerun: 32) socket(0x15, 0xa, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000080)=""/218, 0xda) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mlockall$auto(0x7) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0xeb1, r1, 0x8000) (async) epoll_wait$auto(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x8}, 0x7, 0x0) (async) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) personality$auto(0xfffffffc) (async) uname$auto(&(0x7f0000000240)={"fc685f71205fad1cb07f3e67d49ca513219e5cd8e010a4393fc468a7c27ff25b3d6a3f3540d153f788ae9f976eb8ad13af309148c74748a98a086e1030ae014236", "9c93244e3d563f0aa13f22a230414ac25ef6d8108920d762077fdf97a7967b55e0127ffae56dee5ccff7b8625876c376b4be546a02eea99f9069212f129d6fe2ad", "491ea26a688b8658035455079bd72a42d030bd6a4cdd4b02d50236cfc9a94c566b98f5d8d7689b4b9a4ffd1513fd5bafa188603808790096b8f4854035edacdf05", "eb9dce7ad83b583285f5a6217510229bfde2caf616acd1dc1df95c1b28e210c750f58f24693ab743348cd3e161b875f0a696fd94f0c154917eca09863e20b43e47", "c31b9f193ec75b094a1f400a2229101e86416b0ccdd2dab4e531ccb4ed9ec9d4560b1516df5c67c8244ad926ce5a51ef90b80248edaf1b654f695b6b4e6cbdd475", "e93dac6cf9221b10088ae454d2244a030654fa614f960905bfc97b029a1756f5700eadd486f0b060601a16fb0913d64929102abf4e30c8ebe2946d351cc99b7bcf"}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xffffffffffffffff) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zram0\x00', 0x121002, 0x0) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x89a2, 0x8) (async, rerun: 32) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) write$auto(0x3, 0x0, 0x5c8) (rerun: 32) 6.705089995s ago: executing program 0 (id=2773): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x100000001) (async) r4 = socket(0xa, 0x2, 0x3a) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff00"}, 0x66) (async) capset$auto(&(0x7f0000000180)={0x976f, 0x0}, &(0x7f00000001c0)={0x4f8, 0xa70, 0xfffffffe}) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x578, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_MASK={0xf0, 0x7, 0x0, 0x1, [@nested={0xec, 0xb2, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x4}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x3ff}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0xf8da}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x14f}, @generic="f8cd305773a3a28f80333b09a0ecbda60d6558a685e428c5334e46a84878ab33b54f187809131b77f196e1cbb0b49c57492fdbdef55d839ea80267a7b7f0a059cdc49c59a392ce45de332cc4929f26dbe344c37fdd0631aecfc970e6f14bc816ceda90c287a04f9da2d9497b1ada4c4cdef12981b91b3fcad7033bd88bdc1a25ee8508a7d9dbd8f646f137063ccb0863430fee402e1c7007fc883081af07889c"]}]}, @OVS_FLOW_ATTR_MASK={0x276, 0x7, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @fd=r2}, @generic="cb6d04da88b7cd848d9a52176bc0d5b74e20ae6b4a6aa7536da7372f92b997c5c742e667a142c33c988edc29d85a636bc1c3acbf4357f01f49e141b31cc70c448681961e057b0b8d10b78aeab321cb09891c94ed2de1399b7a77df34de80e5c8b0d6b2ac3ba958fe91f4f430f7d2de343631a5cbe2ba65c9a123c5652e070faace8a506c7e83d191b14532ca6b18cafbbd878eef7556f913622d97b007b55988ad5a5a898ad9", @nested={0x1a5, 0x47, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xf4}, @generic="44994831651cf6fd9fe8cebdf295a908818951a285300bcc929f7718a19817966a07ad1192b693445fed42cd2d52cbe9747da43709788a20817ec6ed7bf5dfb8d5952f10b4520c38a3b94d2425007e8886f507a7d3dc72d17de4c6cb082c51330d39d7a8233d835489b42bc8e7f5ddad95d763717091c907f756c3761ea97e6820dcd3e8e2c53d2eb7571af730d45116b4701137da7dd53c45d1941d63fc0b967d87707ec8f1be379886a8a8ba9afe7b084c439a76761819271e85dee6b2f4c27323ca", @generic="a66d0ea74b2ef9912fdb33fd0679bad41d952f7b8cd6f402a202350d49590345632c7c0b10748fdc324d4f1419b6d33c1b304f25096f62df13fe140bbe73691bfcfe1ccd7ea4e500fbc9ea207d8cf5e5fafc2f4db8982dd886f4d098572c3247b8ac1c2f4250621db2f1e2b6e69e3a1470af8329c5450805dea803996b2940b05165f878c5b8248232abc138d83efff48129a8aab6d555a7b0861023", @nested={0x4, 0xaa}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@multicast2}, @generic="735a0c6e164da7420186f55127b09e21317af9323635a56a6e3af931fe046ea63ba6", @typed={0x8, 0xc4, 0x0, 0x0, @u32=0x9}]}, @nested={0x8, 0x4a, 0x0, 0x1, [@nested={0x4, 0x5}]}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@mcast2}]}, @OVS_FLOW_ATTR_ACTIONS={0x1e9, 0x2, 0x0, 0x1, [@nested={0x48, 0x4f, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x62, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x113, 0x0, 0x0, @pid=r5}, @typed={0x10, 0xac, 0x0, 0x0, @str='\'\\${)@:+.}!\x00'}, @nested={0x4, 0x13}, @nested={0x4, 0x9e}, @typed={0x14, 0x100, 0x0, 0x0, @ipv6=@remote}]}, @generic="2ab0ca09ae03eb0708b27daeee2c324269e341136fba9199eb36771a8435178be635854cf89d0d75d030f37738f946d258f954fa448b14c7909cef4fa172ba2e6d5594a33933f990b70c71cd191f9e6f7c5256626541287a29ddb416f4b7b0", @typed={0x4, 0x150}, @generic="5848909cca25f5ad65bf7e040002132d647679", @generic="f02722930ab9eb8f4a93d656633e42d6348d6b8de219ca5a1dd4793badf68a162391e30593", @generic="c2ff7cea50cbc793a05d81dc39a1495c886bec07db885b8f7b7d97d92fdf331314bf36421e90b83778d92ccd6889200bb94b409e573691cde5e7361190e3f37f3394a94806526708f1deb6fddfb0e8c025136847e49e0516cd68583f70bf3e76f00adbcfd15d0a4e25af0a7e99db01f265", @generic="15e1ddb295dc537d3b76f347653341cbe7b88ee1e1ab134b88b175a997d8856e25f1efb08468c941b3b1954514a306061a84463c5a17374aceea832110b65b05435204ba0adf790fef739d055cd4d02ea1637ab60ee0ed0452b53c42af8808be4b6f433b3567569105d3d375378bb1c192a81bbb21385f61746460b73c69963654b3f438db4418810d342d41d59603f64c"]}]}, 0x578}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r6 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) (async) r7 = socket(0x2, 0x5, 0x0) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) socket(0x2, 0x2, 0x1) (async) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) (async) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TIOCGWINSZ2(r8, 0x5413, &(0x7f0000000000)) (async) r9 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000002c0), r6) r10 = setfsuid$auto(0xee00) setreuid$auto(r10, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r12, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x6) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x184, r9, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x167, 0x3, 0x0, 0x1, [@generic="77f5ef4e0ba2de3cabd2dc8501eb6e63b3b9bcbeabb7c5ac9021480b3411b87f413c84b60ee92b2dcfaf39969c559bec4ea16fe29123c9411e71c0e14ed6ce4d53f8836ab84745a69cf2691f8cc7892894a9b194a0de615f4ec2a7f20d2336c3eb4944698d38cec4348071ed9f2e89", @nested={0xf3, 0xee, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @ipv4=@multicast1}, @generic="ae903df3141c86dc0b328bd6da10c07329681971beab514ab48d883b57fed0f1b7b61aa2abbeb07d90a94ecffbc9b02375793202f5c513d2f4bfa317d33a4f37b3048654198998b33c7e8d665a61d664e9af02204156c97da6c55c2c964b193020ad124e9a09431290f106653fa2c625676963573c6682372b360d3c2532e98ca3378fe0f9366ece40ddccf9d128f054fe66a897dab80e5c7be9e14b93eb9ddecbda6bc763669cec493159", @typed={0x8, 0x25, 0x0, 0x0, @uid=r10}, @typed={0x20, 0xd3, 0x0, 0x0, @binary="2c5c244c1550bf5b4c8487334593b0848bc3debb3fb59fb157514f39"}, @typed={0xc, 0x12f, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x55, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r12}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fstat$auto(0x2, 0x0) (async) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) (async) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x1c, 0x4, 0xf, 0x63, 0x400, 0x0, 0x1, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) eventfd$auto(0xfffffe01) (async) socket$nl_generic(0x10, 0x3, 0x10) 6.182841344s ago: executing program 0 (id=2776): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef307143959554d"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x24000810) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x0) fstatfs$auto(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x4020ae76, r6) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) 6.028505526s ago: executing program 2 (id=2778): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000500"/16, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r0, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd95, 0x2}, 0x0, 0x7ffffffff000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000b4cd0b0221722731c69aeb1f0ae1aa95c4444b9207ed646266dfa54f8b28337a9c09d53bb2bf6acfeb90f9086f0bd13699fd535b9e0b5538328cc26572e4836dee87d5f2cf", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf254900000019000d019bfcc642fb8222e81879d39dc6fd94f765ecdeabfd000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket(0x15, 0x5, 0x0) bind$auto(r3, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xe}, 0x69) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x40047459, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) fsopen$auto(0x0, 0x1) 4.861788417s ago: executing program 2 (id=2780): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000e00)="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", 0xcb6) socket(0x5, 0x3, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r3 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2060009, 0x3, 0xeb2, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x1f1, 0xca9, 0x0, 0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0xa}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 4.823688075s ago: executing program 1 (id=2782): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x62942, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) pwritev2$auto(0xffffffffffffffff, 0x0, 0x8000000000000004, 0xffffffffffffffff, 0x4, 0x8) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) ioctl$auto_EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ifb1/duplex\x00', 0x2cb42, 0x0) (async) mmap$auto(0x0, 0x40006, 0xdf, 0x19, 0x7, 0x28000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) (async) iopl$auto(0x3) (async, rerun: 64) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0}, 0x0, 0x8) (rerun: 64) bind$auto(0x3, &(0x7f0000000080)=@generic={0x3, "68194373648c8cf4466903937bcc"}, 0x6b) (async) r4 = gettid() rt_sigqueueinfo$auto(r4, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000000b24f38a43e0a8d7f4b5d2778c379cf1860801cba9baa5e03f86044145489f6b539f0868cbe495e523b07e3e3bb0ac03534baa201000000000000", @ANYRES32=0x4, @ANYBLOB="080001002f66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) write$auto(r3, 0x0, 0x82) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r7, 0x0, 0x1f40) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) r9 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x228c0, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=@raw_tracepoint={0x101, r9, 0x0, 0x100}, 0x4) unshare$auto(0x40000080) 4.622764748s ago: executing program 4 (id=2783): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x1, 0x5, 0x106) rseq$auto(&(0x7f0000000440)={0x10, 0x401, 0x0, 0x803, 0x7, 0x7fff, "a3da7599b89a1dbe922004887459b6524162d09cac1ca4043e3d9f6bbf79956c4f12d70824eea4264a7fbd93c9c7442319ebe58548f25e1d26ab5d5206cda67fbf6654a39615e5d3bf6b4facc1d66b997066d1dd33fb2b0cef09ac0b45dc6d484727ed03f3eb636c4b4ad7e2675c60b3e68367aa1dc547"}, 0x8000, 0x2000000, 0x8000006) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r2) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f000000a580)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000d487c299bdebd92b633b67b9a194ec56d789004cf28f45935d5d4a4c73d560f1debd7f38068c1b7b0c762c75e7bb718a45ff0b74c82ffc0394fdbbd8bedf6fb2c697667ee6845139acb09d29d4c4b063b37140f522d0c809da9a5f62231aa2f10f1c8d627bd6b3434864590ee6c5a7cc5a07d5d31b000000", @ANYRESHEX, @ANYBLOB="01002abd7000fddbdf251b00000008009a0002000200"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040040) fanotify_init$auto(0x65, 0x2) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf250100000005020a0005"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10004081) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, 0x8, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) migrate_pages$auto(0x0, 0x3, 0x0, 0x0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0xd0f861175345b4ee, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/kvm/irq_exits\x00', 0x22002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$auto_SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)) r4 = socket(0x10, 0x80002, 0x8) close_range$auto(r4, r4, 0x0) pipe$auto(0x0) splice$auto(r4, 0x0, 0x2, 0x0, 0x3fb, 0x9) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) syz_clone(0x7630e0c3684ca6b2, 0x0, 0x40, 0x0, 0x0, 0x0) 3.754818176s ago: executing program 1 (id=2784): prctl$auto(0x4, 0x1, 0x3ff, 0x8000000000000001, 0x9) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x11, 0x0, 0x1fe) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) open(0x0, 0x40, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) umount2$auto(&(0x7f0000000080)='/dev/mapper/control\x00', 0x0) rseq$auto(&(0x7f0000000000)={0x4, 0x7c, 0x7, 0x6, 0x8, 0x1, "50cad5fe762915f20216fb526f955018e6fb23e86b4fbdc2e849e7a9249dfed9eb58104305f4cbd6be2e1ea631465d3519bc06bd60254a66b16229ff3e030df27755ad2fb3c3ffe783"}, 0x7, 0x6, 0x3) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) 3.519053187s ago: executing program 4 (id=2785): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r0 = socket(0xa, 0x3, 0x5) (rerun: 64) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x200001, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) (async) ioctl$auto(0x3, 0x80000541b, 0x38) shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000001080)={{0x8, 0xee01, 0xffffffffffffffff, 0x6, 0xffffff92, 0xf, 0x5}, 0x9, 0x31f, 0x1, 0x5, @raw=0x7fffffff, @inferred=0xffffffffffffffff, 0x8, 0x0, 0x0, &(0x7f0000001040)="fd655b"}) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) read$auto_bm_status_operations_binfmt_misc(r2, &(0x7f0000001100)=""/4096, 0x1000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) (async) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x80000002, 0xd, 0x10000, 0x7, 0x3, 0x7fffffff, r1, [], {0x6, 0x1ff, 0x8c48, 0x2a2, 0x10100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x3, 0x5, 0x3, 0x40, 0x76c5, 0x8, 0xbb15}}) (async, rerun: 64) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000) (rerun: 64) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/team_slave_1/anycast_delay\x00', 0x143402, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000000100)="cdd37cefb2", 0x5) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) socket(0x23, 0x5, 0x0) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x6, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x10001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x800, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r4, 0x9210641f, 0xd) listen$auto(0x3, 0x81) (async) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) 2.906431099s ago: executing program 2 (id=2786): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc90}, 0x40080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x7111}, 0x8) write$auto(0x3, 0x0, 0xffd8) 2.771817044s ago: executing program 4 (id=2787): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r0, 0x540a, 0x0) (async, rerun: 32) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async, rerun: 32) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0xffffffffffffffff) (rerun: 32) migrate_pages$auto(0x0, 0x3, 0x0, &(0x7f0000000140)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 32) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r3) (async) msgctl$auto_MSG_STAT_ANY(0x6, 0xd, &(0x7f0000000280)={{0x3ce011d3, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1}, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x34, 0x0, 0x965c, 0x5, 0x8, 0x4, 0x4, 0xfff7, 0x2, @inferred, @raw=0x6}) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41001000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r4, 0x604, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x800}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x104, 0x2d, 0x0, 0x1, [@nested={0xf7, 0x90, 0x0, 0x1, [@generic="ff4a34da6f94d713bb4a1e00fb91a3e219d54dcb", @typed={0x8, 0x12b, 0x0, 0x0, @uid=r5}, @generic="4392877733ce35444658226ee7b041544b15788982217012cd4be561fbdfb2717b5f8bfaeb81028e3b880df8be4637cdb37518b28928d0e5e3c1ea783c7263519e275c626f277753fb39f34f9b1f0e6432edda8fe628270089dbfecbca0f3fcea7682e59676c07ef8d0e233a74367b5aac54cf7ffb713a84823e41f3ed97583b4f6cd95067a1588ed19d6ecfdb3355fdfbcc8ce66a49517eab6760efc8e9d8a8b2c95d692d3297b5a3325542b5661efb1ea438540311f2a10b0b5dfe3f1515cd9c945e827ee865807fbcad2e8e89cc", @nested={0x4, 0x10f}, @nested={0x4, 0xe6}]}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0xff}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x9, 0x3, 0x0, 0x6, 0x4) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) r6 = socket(0x2, 0x3, 0xa) (async) r7 = socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x254, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x174, 0x2, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @fd=r6}, @nested={0x168, 0x127, 0x0, 0x1, [@nested={0x4, 0x25}, @generic="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", @generic="e29b8e7846d4423b7ce28e89ed80803c5dee5a0df9af784983682cc3fab87e60029dbd19785754959bbc1528c943b017ed51f3db13fde476cbf16581992ea9968f46656ac5d98c48984721c7a7cb5b177e515c87e582b3c02cfdb21ec3e64a6c00e105149b"]}]}, @TIPC_NLA_MEDIA={0xca, 0x5, 0x0, 0x1, [@generic="52532dd320e7f53ea6fa30778579258a0b4a2b56f1bc20e47433fe10ad8dd7cfdc2a35ba35e5bd190cdb2efef4cb7354bc1bc5ac560832775b5422ea900a6fd037dc85243c43a7114a889ee90bbaccbcecd79d4847cfda7945196ca81286073936f9a87660121ec16c5cf13f1be99b53d406c7ee731158fdbbc254a91480b3d5954176d7ec2b507b03204bf7736b2931707b6bb6a459ae2ef17e4bb81b9f516abfda798477d19f98b61f5fbe50a589ea62", @generic="ab7ae65854c77e940f1b5332faed5eba131d979a0c"]}]}, 0x254}}, 0xa803) (async, rerun: 64) ioctl$auto_KVM_CREATE_VM(r7, 0x4008ae8a, 0x0) (rerun: 64) 2.770234663s ago: executing program 1 (id=2788): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x10000000084, 0x19, 0x0, 0x8) 2.527971632s ago: executing program 2 (id=2789): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20800, 0x0) ioctl$auto_SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000100)="b5af8abdd024aade135d0e8ab37e685a53d96119acf0e47ed653d56bfef3f56abe0c98ab") 2.430782422s ago: executing program 4 (id=2790): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) socket(0x10, 0x2, 0xc) (async) r1 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010) read$auto(r0, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x421, 0xb5a}, 0x9, 0x32a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r4, 0x4, 0x14, &(0x7f0000000040)='\x00', &(0x7f00000000c0)=0xf0b7) (async) getsockopt$auto_SO_RCVTIMEO_OLD(r4, 0x4, 0x14, &(0x7f0000000040)='\x00', &(0x7f00000000c0)=0xf0b7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r7, 0x0, 0x41000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x18, 0x4, 0x0) 2.304355978s ago: executing program 2 (id=2791): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r1, 0x10000000084, 0x19, 0x0, 0x8) 1.904005798s ago: executing program 0 (id=2792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), 0xffffffffffffffff) r2 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000080)=0xf75e) r3 = semctl$auto_GETPID(0x6e0, 0x55, 0xb, 0x7) r4 = openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x600, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f0000000100)={0x15e8, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x784}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x8}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x7}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x2eb15239}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x200}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x49831fdf}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0xd55d}, @THERMAL_GENL_ATTR_TZ_GOV={0x159c, 0xc, 0x0, 0x1, [@nested={0x293, 0x4e, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @fd=r2}, @typed={0x6, 0x13c, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x149}, @generic="109813d4223bb1008a9a67b6d4680d2ef0d5c0f1662f199a6deb198e82df45266d4cc31be8bf18868eef908057e119d027e77510125690ba95ea058e1d817e90f3c651b21e365dbb6d954e940b91478f69b7bc8945d311395ee0283681be0806463e7b0eb2cdc8a4b3bf596dcaae53d01c6dbd0d8c658aef70093a78ab490bd44b6f06652c26a93df530058d3df7ccf507aec9f9b882225e4a3b33c7bc6c4f655acc0ae5673a78b486670926153a37c2c44105163735dd975fa0e5608da083d2249450956a200d19", @typed={0xbe, 0x128, 0x0, 0x0, @binary="9dc2d0a08dd2f1a85b4c1d20b6cf44064ff30eeaceafb1aee82259b955389d1b6c07119ed7739d6d0c71b0934df902866521d7d871ace727980277e4634279c5bc6cb4c12eef324418b1b1a84e72254ef294173119e24c3bbbb9a95bb9d4ddb6ec92332c46c5247c0b3643c4546d42db960ad1aea986174b156f5fb48ad07e82616a0f5b0e59ab6cdf0dd732d5a5e8e19f2aaec7f46e52c496010a1bcb2e6e769771fd1cd5d173ee4faada3acad27ed59a37c3e78127f0291892"}, @typed={0x8, 0x12e, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x122}, @generic="8d032b08f0c00be0709bcf913687f4b4d38a3975378cbc2daf092be62401746288c97bb7c4dc5e2d0cb05ee051209670ee1623716a3fe8de722d67bbf816abecb7e686898b2614f764c86424c3efc18e55ff50cce30e746fbf48", @generic="cc200aa0088140ee95c5004df5a8cc4c954d128ac639709014acc0ddc9", @typed={0x6f, 0xe9, 0x0, 0x0, @binary="eedf6ef647d9e2ebc696fe08419145bae4250d8adcddd27d9b69915784a6c15c99f41323b476e461c67ba9d30559c861615a6b5219e15041397b31927f3016a363c1036ea78bf30af1baf4e6ac8d53a21712f5b83613c291a4c41b711df51a894ca344fd0c7cbd6bbcf310"}]}, @nested={0x20d, 0x10, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic="53eb179a8f9192df30141ae847199d0ad264ba38b65f1e7481ed333d4623b21908222c8182fdd923269a61d36dca30b67b637bd47e5dea1ec650e89943a2f2badbecf1cd1dbb672386b4dcc55505a8961455", @generic="70d9fc7cc1a76dbcb9cee78fdba762d822cdc1866e5c9a13c9831bda53627dd5233e40c55aa80023e3cb079cec4db45d9b58c9095bebe0a7da27dcee4dfb1fe01902f2a20cbd1001c14014f66025fe0b45d5b08edd0cc5d45cc45786146d3dea3773abad9d1624fc749a", @typed={0x8, 0x101, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xdf}, @generic="ba63276418ea9e930f2726868078047435b98352d53f5162549d923bdc5cff4225ddccfccc2358580edf8625fb78d2d919e9c1c1e95b710cd129854e5e7712bacf5a2dac2d48ca9bd4916279f5843f2c6beaed1eb32375ee6ead7164431bb72ef6b22130f507ede1ef6a0cab137fa59bdc68a7e07fc6d8711468f01dd60e7b7203f650ac568b8d9c4be7df1960a1fd952a2bcad254e0ba424918a423199dfe2bee921eba7a64e9198cc86a85ef3f63261e388710bb1bfa76f453d2d33ee9c26cc16e2350046bcae86b434d4cebc32877616254aed61f8e611f97", @nested={0x4, 0x14b}, @typed={0x8, 0x48, 0x0, 0x0, @fd=r4}, @generic="a6f74bd59290fd141c00c7ed0441ea6739fca17eaa2d42d49d6849dc37c8baa017defe709895a5be619c902fe6dd1d6592d440710656111b359a1d58684ddd6662c7c51031dcb2192accc51363c0efd96f60f002806f0f"]}, @nested={0x109c, 0x12f, 0x0, 0x1, [@generic="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", @generic="a3b0a4e8e88cec30050beecec52f09c255340187b502ab923bcdc6d8e723e4cb415209ca0c69d8d1e44420db630953b6784ada8b4f078b777bac28b755f26e31cc38f26dc8ba91f7292d7aa0cb0f313837f5d302c6b72e3ed9a2385cd80cc5fab36d268fe241ceb3efbeecff78e806e66967cedba54fd0f26d832d29147bb0dc332bcc32fb2b2b9c3b7ae799", @nested={0x4, 0xb7}, @nested={0x4, 0x100}, @nested={0x4, 0x133}]}, @nested={0x10, 0xe9, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @u32=0x1ff}, @typed={0x4, 0x118}]}, @typed={0x8, 0xc5, 0x0, 0x0, @fd}, @typed={0x2b, 0x100, 0x0, 0x0, @binary="8e886152a465070103d4f2ef54ce88e0f536f60115e16131667d35b0eb7be1ce850a1f32c1b12b"}, @typed={0xc, 0xc1, 0x0, 0x0, @u64=0x8000}, @typed={0x5, 0xce, 0x0, 0x0, @str='\x00'}]}]}, 0x15e8}, 0x1, 0x0, 0x0, 0x11}, 0x240000c0) ioctl$auto_FIONCLEX(r0, 0x5450, 0x0) setsockopt$auto(r0, 0xc0000000, 0x400, &(0x7f0000001780)='thermal\x00', 0x2a) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001800), r2) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x3c, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) fadvise64$auto_POSIX_FADV_NORMAL(r0, 0xa, 0x38, 0x0) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001900), r0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001940)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port1/over_current_count\x00', 0x20000, 0x0) write$auto_tap_fops_tap(r2, &(0x7f00000019c0)="790ae3da6584c43a2ef9629703d3cd851af5416919842742c1e05d216cedabf258f06938121c8c4566827889982e9d9930b70ebd1635dfe0400c9348139856cc485354a1c47226052cd5e77283a740823c08e7703a8b356cdf341407a64b4c030d00b40c9ebdb37d826e6e220a9b27b724261b3e73185b3eb542142abfac6d05378eb2ade0a591a8a477b9edf33b52469106a9683de452b07bb80a3ec06c43616a65473f9e395b9b013cca9643936415a36850eeaacff6c0d4174648c90451d7c8a7d13b3b4dcd390a417102f162ab011fb013bd96a235311c39891f0e21ff49c3bb62c2575551d9c414d3b32a8fed95", 0xf0) sendmmsg$auto(r0, &(0x7f0000002c40)={{&(0x7f0000001ac0)="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", 0x5, &(0x7f0000002b80)={&(0x7f0000002ac0)="0bae62994c96f21fe236f67c09474a91850d406f19685a98a8695b20b8951572cc98f0065459ab83ed5cbf00bd0c45ae97d19ccc72d509070627ca097f6440f0db2f48d1c3ce8241bf6a76bfd871073bf12b4061fd4b22b0be703192316ef29da45d9d23f3e6203d5f93aa6a390b51d4b453165652296e20901edd46c5a51c455a2d01df", 0x72}, 0x6, &(0x7f0000002bc0)="4769b4ebb5d5865edf38cf9f542af2cb178f0f864ac2b1d020fc4acbd550139531e152bb2e1a06b8f4440a425662666576a31bb06ecfbdb98de52ef1de5001d0e4fdd48f37e93e24b432d0a02f086c83", 0x5, 0x1}, 0x2}, 0x7b, 0xff) read$auto(r2, &(0x7f0000002c80)='&^%\x16[\x00', 0x180000000000000) r8 = io_uring_setup$auto(0xffffffec, &(0x7f0000002cc0)={0x400, 0x7, 0x6, 0x8001, 0x97c, 0x0, r7, [0x8, 0xd453, 0xbc], {0x379, 0x7, 0x2, 0x2, 0x7, 0x80000000, 0x9, 0x0, 0xb}, {0x61, 0x8, 0xa, 0x5, 0x9, 0xffffffff, 0x400, 0x2, 0x1ff}}) close_range$auto(r0, r8, 0x3) r9 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000002d40)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x2000, 0x0) r10 = io_uring_setup$auto(0x4, &(0x7f0000002d80)={0x8, 0x7, 0x9, 0x7, 0x0, 0x6, r9, [0x5, 0x80000001, 0x6], {0x7, 0x7ff, 0x5, 0xef, 0x10, 0x9, 0x80000000, 0x1000, 0x7}, {0x8, 0xae5, 0x7f, 0x1, 0x9, 0x7ff, 0x1, 0x2, 0x298}}) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r11, &(0x7f0000002f00)={&(0x7f0000002e00), 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x68, r6, 0x910, 0x70bd2a, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x8}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x6006}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x10001}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0xdb5}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) getegid() r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002f80), r0) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r12, &(0x7f00000042c0)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004280)={&(0x7f0000002fc0)={0x12a4, r13, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_SSID={0x14, 0x34, "b1b64a807a0137fc2f6a6b1f467ee77c"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_MBSSID_ELEMS={0x124d, 0x133, 0x0, 0x1, [@typed={0x14, 0x33, 0x0, 0x0, @ipv6=@local}, @nested={0x114f, 0x8d, 0x0, 0x1, [@generic="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", @generic="66166c7122f03bc111c5b55592443be4c3abd3a99dcc23315b47c774b2bb3eaedefc8ff489b4e58fe41c675036d4626c69ab9d200da2a02abb", @generic="4c34bc1ab91d1c363975a037234de15ce0f766a50877528a452dbd54a00c2cfb80546c984e6c4f805f7ccc43aca188ec8fbe8eddbf48e582522ec0734a3e87928d", @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x22}, @typed={0x8, 0x86, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x47, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x74}, @generic="9cd53230d8f52cef21b0153ab2b5e0182f3889635951e8097accfb1a02041a5de769e3d65cdd349d6022c2d9765a571cd095964f625706090b6493bb4f607ef09b008b434a7b860e3c0ec014b3a421d53dea80f4e8b69c9d7b150dcaa45cca57f103a10e88b065bbc784323d12d30bbaf41a09106d4815ae3b4db71a5aaaea1c72289847de4429f4717dea8f8d68656924b977ee60fad381990bba156e78bc14f9d0c5411db0e0d800adc52cd1"]}, @generic="193b218b0d6633e35f64b6267d3838bc0bd9f111790668b686a8da5e00a9995cc96675b07e7f0d565baae1c6d2ea7a5ab416d7a1c78ab6fcf9bda9171f6010eb86219f9648d15f87ca71fe867e491fdc62432838e3905f96fb8c79307793849669acb6acd569e2e2b5231c1a96801cf31937dae0810945980086d0638cce13e337e93988ac9b693d599a1a9657dd104934d9a8543a0ff39badaf48219d24c2cb928c4aef5c2e192c5269e3a23d6ee5a27e94c66b45ad6c335954fbbf4cbd71bf6d4da6e22d4a15c0ac70bcda5a8e64a1d67bc5576cb81d77d8", @typed={0x4, 0x91}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0xbd}]}]}, @NL80211_ATTR_SSID={0x21, 0x34, "e193212bc2c0041785b65c2e2dae91ee1339a5025a3a52f2d9270f2b86"}, @NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r14 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000004300)='/sys/devices/virtual/bluetooth/hci4\x00', 0x20583, 0x0) ioctl$auto_XFS_IOC_FSCOUNTS(r14, 0x80205871, &(0x7f0000004340)={0xc, 0x200, 0x7fffffffffffffff, 0x7}) r15 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000004380)='/dev/sg0\x00', 0x200801, 0x0) ioctl$auto_SCSI_IOCTL_DOORUNLOCK(r15, 0x5381, &(0x7f00000043c0)) ioctl$auto_FS_IOC_ZERO_RANGE(r10, 0x40305839, 0x200) 1.734363411s ago: executing program 4 (id=2793): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/mcfilter6\x00', 0x121080, 0x0) getsockopt$auto_SO_BUSY_POLL(r0, 0x7fffffff, 0x2e, &(0x7f0000000000)=']}\x00', &(0x7f0000000040)=0x8001) (async) getsockopt$auto_SO_BUSY_POLL(r0, 0x7fffffff, 0x2e, &(0x7f0000000000)=']}\x00', &(0x7f0000000040)=0x8001) r1 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r1, 0x6a, 0xea98, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7) (async) read$auto(r2, 0x0, 0x7) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r6, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r7, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r5, 0x0, 0x814) (async) sendmsg$auto_TIPC_NL_LINK_GET(r5, 0x0, 0x814) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x3806, 0x80000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) memfd_create$auto(0x0, 0xd) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/4096, 0x1000) (async) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/4096, 0x1000) 1.73117647s ago: executing program 1 (id=2794): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) 1.415296508s ago: executing program 0 (id=2795): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x80000001, 0x580f, 0x112f4a02, 0x8000000008011, 0x3, 0x1) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0x80000000eb1, 0xffffffffffffffff, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) write$auto_proc_pid_attr_operations_base(0xffffffffffffffff, &(0x7f0000000240)="c837b82802749ee4f24b4e9af6634e3353e6", 0x12) r1 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r1, 0x1, 0xd, 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x9) close_range$auto(0x2, 0xa, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44b, 0xa, 0x5, 0x1007181, 0x8a0d, 0x4, 0x7, 0x9, 0x1, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x80000005, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x85, 0x2000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x200000000, 0x0, 0x829d, 0x800000000000000, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x7953, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x3, 0x0, 0xfffffffffffffffd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, 0xb, 0xc) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0d, &(0x7f0000000580)="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") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(r0, 0x0, 0x7ff) recvmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000080)="9d0c709d830371f013a3f58df15720e41f9d4aceda823fe514a4dcf23ee0bca1bc2f7ebee98b129ec537ca6422a2835bbba5d6a389d8c77a44c7d6439265c2b1981f1ffa1dffd989f9cc208e0dce9a648718bf92200bc88a14be2cb694f5a31b5fe8699006c3af155eb1087b254b3a2819968d25b4e02da23d8f16fd0acd3da61419d729ce33879ad0b97ecd25a96ee66e8f6c167a42acf7b6c1bc91a27e704bf00b5f73015a59ecf6934527ebd9dbb02b7f89357f", 0x487, &(0x7f0000000380)={&(0x7f0000000140)="20d9", 0x5}, 0x0, &(0x7f00000003c0)="e8682908514a4104f062802ebfd182dba5e88a1c98e58c4aca23c22a59d34443de3529fdca16f2859b7a0ac5c87c6a", 0x398000, 0xc9}, 0x84}, 0xeeae, 0xfffffffe, &(0x7f0000000440)={0x2, 0x1}) write$auto(r2, 0x0, 0xffd1) 1.194985846s ago: executing program 4 (id=2796): ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x200000000020089, 0x4000000000df, 0xeb5, 0x401, 0x7fff) r0 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000100)=0x1) read$auto_qrtr_tun_ops_tun(r0, &(0x7f0000000140)=""/57, 0x39) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x6, 0xffffffffffffffff, @relative_id=0x2, 0x9}, 0xa3) sendto$auto(r1, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) mmap$auto(0x3, 0x20006, 0xf4, 0x12, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x10}, 0x3) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x20000080) r4 = io_uring_setup$auto(0x58, &(0x7f0000000080)={0x7fffffff, 0x5265c74a, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x23d8, 0x6, 0xf, 0x4000029f, 0x100, 0x7f, 0x80000, 0x6, 0x2}, {0x203, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x7, 0xfffffffe}}) unshare$auto(0x40000080) r5 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r5, &(0x7f0000000240)=""/177, 0xb1) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x7, 0x4}}, 0x0) rt_sigaction$auto(0xe, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) unshare$auto(0x40000080) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)="abe992006e6c61660434583a9ebeeee8f3d44b4addcabf", 0x1) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r4) mmap$auto(0x0, 0x20009, 0x10000, 0xeb1, r5, 0x8000) ioctl$auto(0xffffffffffffffff, 0xfffffffd, r4) 360.09665ms ago: executing program 1 (id=2797): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x404cc90}, 0x40080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x7111}, 0x8) write$auto(0x3, 0x0, 0xffd8) 138.351757ms ago: executing program 2 (id=2798): semctl$auto_SETVAL(0x0, 0x10000, 0x10, 0xc2c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710e}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x710e}, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0x3c, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="9b6f56d8", @ANYRES16=0x0, @ANYRES32=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10008010}, 0x8000) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0xfffffdef) open(0x0, 0xd02, 0xc3) (async) r2 = open(0x0, 0xd02, 0xc3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/o2cb/logmask/HB_BIO\x00', 0x102, 0x0) sendfile$auto(r3, r0, 0x0, 0x751b) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)="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", 0x5}, 0x2) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)="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", 0x5}, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmsg$auto_NFC_CMD_GET_SE(r4, 0x0, 0x24060004) mbind$auto(0x7, 0x800606, 0x8006, &(0x7f00000002c0)=0x8000ffff, 0x8, 0x3) socket(0x2, 0x2, 0x0) connect$auto(0x3, 0x0, 0x40e7) socket(0x1e, 0x1, 0x0) (async) r5 = socket(0x1e, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x181440, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) (async) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'rose0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'rose0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'pim6reg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f801000095a035857a1f568a8610183acedd0e563723648222cf35c064350227db688e5cd7457e5853ede9451caf80cc5cf33cfab447dbd30b0c728cff3cf7e9f1a5af7d38f3cefccd86a9908ed30e9da09b911aeeb7965a1b9cc8fca5f6bad380c2d8441837f8891cfdf1cc66e6e9532723533e6062c3c697452343eb8dc4597751ecbd4583a57082767aca206c2ed35120088d1f558c1f2c63cdbaa497b910d701e3e3a065e6f2ce474e5d507e", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf25060000001c000180080003000700000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300020000002c0001801400020073797a5f74756e0000000000000000001400020070696d367265670000000000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300070000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYBLOB="5800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006e657464657673696d30000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESDEC, @ANYBLOB="080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ff0f0000780001800800030005000000080003000800000008000100", @ANYRES32=r1, @ANYBLOB="08000300a90000001400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265670000000000000000000008000300010000001400020070696d36724567678ab706ece74338079f3dabd4440000000000", @ANYBLOB="31d9b4c253e1aa3a5cf24d1d8ca9877537798844c66a49b01e99256ea4b105a0f66b5326eeaf63a701bf928352c793cac3", @ANYBLOB="40000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300c2b4d14f08000100", @ANYRES32=r8, @ANYBLOB="1400020076657468305f746f5f7465616d0000000c000180080003000500000044000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="080003000100010014000200687372300000000000000000000000001400020076657468315f746f5f62726964676500"], 0x1f8}, 0x1, 0x0, 0x0, 0x14}, 0x4881) (async) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000900)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f801000095a035857a1f568a8610183acedd0e563723648222cf35c064350227db688e5cd7457e5853ede9451caf80cc5cf33cfab447dbd30b0c728cff3cf7e9f1a5af7d38f3cefccd86a9908ed30e9da09b911aeeb7965a1b9cc8fca5f6bad380c2d8441837f8891cfdf1cc66e6e9532723533e6062c3c697452343eb8dc4597751ecbd4583a57082767aca206c2ed35120088d1f558c1f2c63cdbaa497b910d701e3e3a065e6f2ce474e5d507e", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf25060000001c000180080003000700000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300020000002c0001801400020073797a5f74756e0000000000000000001400020070696d367265670000000000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300070000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYBLOB="5800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006e657464657673696d30000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESDEC, @ANYBLOB="080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ff0f0000780001800800030005000000080003000800000008000100", @ANYRES32=r1, @ANYBLOB="08000300a90000001400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265670000000000000000000008000300010000001400020070696d36724567678ab706ece74338079f3dabd4440000000000", @ANYBLOB="31d9b4c253e1aa3a5cf24d1d8ca9877537798844c66a49b01e99256ea4b105a0f66b5326eeaf63a701bf928352c793cac3", @ANYBLOB="40000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300c2b4d14f08000100", @ANYRES32=r8, @ANYBLOB="1400020076657468305f746f5f7465616d0000000c000180080003000500000044000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="080003000100010014000200687372300000000000000000000000001400020076657468315f746f5f62726964676500"], 0x1f8}, 0x1, 0x0, 0x0, 0x14}, 0x4881) pwrite64$auto(r6, 0x0, 0x1, 0x8) (async) pwrite64$auto(r6, 0x0, 0x1, 0x8) 0s ago: executing program 1 (id=2799): move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) epoll_create$auto(0xfbfc) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) bpf$auto(0x0, 0x0, 0x6f3) (async) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"}) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 0x6c0 [ 303.189194][ T9773] ubi_attach+0x5e7/0x4bd0 [ 303.189248][ T9773] ? __pfx_ubi_msg+0x10/0x10 [ 303.189291][ T9773] ? __pfx_ubi_attach+0x10/0x10 [ 303.189332][ T9773] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 303.189371][ T9773] ? __vmalloc_node_noprof+0xad/0xf0 [ 303.189409][ T9773] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 303.189453][ T9773] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 303.189520][ T9773] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 303.189562][ T9773] ? __pfx_get_mtd_device+0x10/0x10 [ 303.189606][ T9773] ctrl_cdev_ioctl+0x337/0x3d0 [ 303.189649][ T9773] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 303.189700][ T9773] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 303.189745][ T9773] __x64_sys_ioctl+0x18e/0x210 [ 303.189784][ T9773] do_syscall_64+0xcd/0x490 [ 303.189815][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.189843][ T9773] RIP: 0033:0x7f459d38e969 [ 303.189866][ T9773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.189893][ T9773] RSP: 002b:00007f459e132038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.189919][ T9773] RAX: ffffffffffffffda RBX: 00007f459d5b6160 RCX: 00007f459d38e969 [ 303.189937][ T9773] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000006 [ 303.189955][ T9773] RBP: 00007f459d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 303.189971][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.189988][ T9773] R13: 0000000000000000 R14: 00007f459d5b6160 R15: 00007ffd8b40dd18 [ 303.190025][ T9773] [ 303.190036][ T9773] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 303.224421][ T9773] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 304.545077][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 304.818485][ T9818] netlink: 252 bytes leftover after parsing attributes in process `syz.2.803'. [ 304.838303][ T9818] netlink: 252 bytes leftover after parsing attributes in process `syz.2.803'. [ 305.426073][ T9820] Invalid ELF header magic: != ELF [ 307.571742][ T9873] random: crng reseeded on system resumption [ 310.695650][ T9947] [ 311.032048][ T9959] random: crng reseeded on system resumption [ 311.477112][ T9972] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 311.665106][ T9975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.835'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             [ 591.044223][T15396] capability: warning: `syz.0.1923' uses deprecated v2 capabilities in a way that may be insecure [ 591.160602][ T5846] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 591.160644][ T5846] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 591.176956][ T5846] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 591.271965][T15400] random: crng reseeded on system resumption [ 592.161116][T15418] syz.4.1928 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 596.798791][T15532] openvswitch: netlink: Duplicate key (type 15). [ 596.970985][ T5846] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 596.971027][ T5846] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 596.990919][ T5846] Bluetooth: hci0: Dropping invalid advertising data [ 596.998612][ T5846] Bluetooth: hci0: Dropping invalid advertising data [ 597.006031][ T5846] Bluetooth: hci0: Dropping invalid advertising data [ 597.012819][ T5846] Bluetooth: hci0: Malformed LE Event: 0x02 [ 598.026131][T15563] openvswitch: netlink: Flow actions attr not present in new flow. [ 601.231964][T15624] Invalid ELF header magic: != ELF [ 601.933970][T15640] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1972'. [ 602.572110][T15647] can: request_module (can-proto-0) failed. [ 602.581903][ T30] audit: type=1326 audit(4295032502.643:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15654 comm="syz.4.1977" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefbb98e969 code=0x0 [ 603.068417][T15673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1979'. [ 603.098631][T15673] netlink: 'syz.2.1979': attribute type 11 has an invalid length. [ 603.131532][T15673] netlink: 'syz.2.1979': attribute type 11 has an invalid length. [ 603.148842][T15673] netlink: 'syz.2.1979': attribute type 11 has an invalid length. [ 603.916733][T15673] could not allocate digest TFM handle binfmt_misc [ 604.428751][T15692] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 604.547059][T15692] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 605.967322][T15722] can: request_module (can-proto-0) failed. [ 606.465782][T15749] random: crng reseeded on system resumption [ 610.565113][T12117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.578505][T12117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.588427][T12117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.607528][T12117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.627595][T12117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.019099][T15860] netlink: 'syz.4.2022': attribute type 4 has an invalid length. [ 611.140973][T15857] can: request_module (can-proto-0) failed. [ 611.452685][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.687736][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.832006][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.920528][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.935256][T15852] chnl_net:caif_netlink_parms(): no params data found [ 612.271174][T15852] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.285313][T15852] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.294957][T15852] bridge_slave_0: entered allmulticast mode [ 612.315284][T15852] bridge_slave_0: entered promiscuous mode [ 612.359824][T15852] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.367270][T15852] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.375129][T15852] bridge_slave_1: entered allmulticast mode [ 612.382514][T15852] bridge_slave_1: entered promiscuous mode [ 612.527263][T15852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.542290][T15852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.675392][T12117] Bluetooth: hci1: command tx timeout [ 612.741883][T15896] ubi: mtd0 is already attached to ubi0 [ 612.869725][T15898] kernel read not supported for file /set_event_notrace_pid (pid: 15898 comm: syz.0.2028) [ 612.900789][ T30] audit: type=1800 audit(4295032512.953:24): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2028" name="set_event_notrace_pid" dev="tracefs" ino=11 res=0 errno=0 [ 613.181553][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.192565][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.202322][ T13] bond0 (unregistering): Released all slaves [ 613.299111][T15852] team0: Port device team_slave_0 added [ 613.440639][T15852] team0: Port device team_slave_1 added [ 613.676531][T15852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.689775][T15852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.717597][T15852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.850117][T15852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.869027][T15852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.915160][T15852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.200793][T15852] hsr_slave_0: entered promiscuous mode [ 614.225878][T15852] hsr_slave_1: entered promiscuous mode [ 614.232306][T15852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.264575][T15852] Cannot create hsr debugfs directory [ 614.404275][ T13] hsr_slave_0: left promiscuous mode [ 614.433737][ T13] hsr_slave_1: left promiscuous mode [ 614.452319][ T13] veth1_macvtap: left promiscuous mode [ 614.452416][ T13] veth0_macvtap: left promiscuous mode [ 614.760065][T12117] Bluetooth: hci1: command tx timeout [ 615.061275][ T13] team0 (unregistering): Port device team_slave_1 removed [ 615.104371][ T13] team0 (unregistering): Port device team_slave_0 removed [ 616.676314][T15852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 616.702766][T15852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 616.723729][T15852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 616.829414][T15852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 616.834342][T12117] Bluetooth: hci1: command tx timeout [ 617.148883][T15852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.338295][T15852] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.364566][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.371733][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.425846][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.432997][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.602842][T16015] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 618.914170][T12117] Bluetooth: hci1: command tx timeout [ 619.278291][T16014] can: request_module (can-proto-0) failed. [ 619.416884][T16004] kexec: Could not allocate control_code_buffer [ 619.712908][T15852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.819994][T15852] veth0_vlan: entered promiscuous mode [ 620.121672][T15852] veth1_vlan: entered promiscuous mode [ 620.166043][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.185046][ T30] audit: type=1800 audit(4295032520.243:25): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2047" name="trigger" dev="tracefs" ino=19680823 res=0 errno=0 [ 620.227195][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.445611][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.570559][T15852] veth0_macvtap: entered promiscuous mode [ 620.591034][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.608479][T15852] veth1_macvtap: entered promiscuous mode [ 620.632521][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.668358][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.698658][T15852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.745385][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.777033][T15852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.792862][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 620.806836][T15852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.824884][T15852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.833707][T15852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.856166][T15852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.089269][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.119395][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.178750][ T6866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.187363][ T6866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.786943][T16095] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 622.786952][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2059'. [ 624.807229][T16155] can: request_module (can-proto-0) failed. [ 626.561277][T16207] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 626.693114][T16210] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 626.818789][T16219] random: crng reseeded on system resumption [ 626.938894][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2081'. [ 627.455795][T16233] netlink: 'syz.1.2084': attribute type 11 has an invalid length. [ 628.299883][T16250] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078002000 pfn:0x78000 [ 628.320808][T16250] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 628.328329][T16250] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 628.337990][T16250] raw: ffff888078002000 ffff888030d65c00 00000001ffffffff 0000000000000000 [ 628.367046][T16250] page dumped because: unmovable page [ 628.384895][T16250] page_owner tracks the page as allocated [ 628.390965][T16250] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 8237, tgid 8235 (syz.3.479), ts 228555520134, free_ts 210405301490 [ 628.414143][T16250] post_alloc_hook+0x1c0/0x230 [ 628.419810][T16250] get_page_from_freelist+0x1321/0x3890 [ 628.427661][T16250] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 628.492614][T16250] alloc_pages_mpol+0x1fb/0x550 [ 628.515064][T16250] alloc_pages_noprof+0x131/0x390 [ 628.542023][T16250] relay_open_buf.part.0+0x262/0xc80 [ 628.547906][T16250] relay_open+0x653/0xad0 [ 628.552582][T16250] do_blk_trace_setup+0x503/0xb50 [ 628.559518][T16250] blk_trace_setup+0xed/0x1b0 [ 628.585642][T16250] blk_trace_ioctl+0x146/0x280 [ 628.611469][T16250] blkdev_ioctl+0x108/0x6d0 [ 628.617205][T16250] __x64_sys_ioctl+0x18e/0x210 [ 628.622748][T16250] do_syscall_64+0xcd/0x490 [ 628.627763][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.644034][T16250] page last free pid 5831 tgid 5831 stack trace: [ 628.654005][T16250] __free_frozen_pages+0x7fe/0x1180 [ 628.666203][T16250] qlist_free_all+0x4d/0x120 [ 628.673970][T16250] kasan_quarantine_reduce+0x195/0x1e0 [ 628.691275][T16250] __kasan_slab_alloc+0x69/0x90 [ 628.712120][T16250] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 628.734906][T16250] anon_vma_fork+0xe6/0x620 [ 628.739476][T16250] dup_mmap+0x152e/0x21d0 [ 628.966526][T16250] copy_process+0x4081/0x76a0 [ 628.966589][T16253] could not allocate digest TFM handle binfmt_misc [ 628.971265][T16250] kernel_clone+0xfc/0x960 [ 629.013282][T16280] random: crng reseeded on system resumption [ 629.034766][T16250] __do_sys_clone+0xce/0x120 [ 629.039489][T16250] do_syscall_64+0xcd/0x490 [ 629.044234][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.239606][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.245997][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.422970][T16285] can: request_module (can-proto-0) failed. [ 630.622032][T16332] Invalid ELF header magic: != ELF [ 630.683070][T16336] can: request_module (can-proto-3) failed. [ 631.887827][T16360] mkiss: ax0: crc mode is auto. [ 635.512343][T16468] usbip-vudc usbip-vudc.0: gadget not bound [ 636.825746][T16507] FAULT_INJECTION: forcing a failure. [ 636.825746][T16507] name failslab, interval 1, probability 0, space 0, times 0 [ 636.852717][T16507] CPU: 0 UID: 0 PID: 16507 Comm: syz.1.2132 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 636.852759][T16507] Tainted: [U]=USER [ 636.852765][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.852778][T16507] Call Trace: [ 636.852785][T16507] [ 636.852793][T16507] dump_stack_lvl+0x16c/0x1f0 [ 636.852818][T16507] should_fail_ex+0x512/0x640 [ 636.852844][T16507] ? __kmalloc_noprof+0xbf/0x510 [ 636.852879][T16507] ? lsm_blob_alloc+0x68/0x90 [ 636.852905][T16507] should_failslab+0xc2/0x120 [ 636.852926][T16507] __kmalloc_noprof+0xd2/0x510 [ 636.852974][T16507] lsm_blob_alloc+0x68/0x90 [ 636.853002][T16507] security_sk_alloc+0x30/0x270 [ 636.853036][T16507] sk_prot_alloc+0xfb/0x2a0 [ 636.853065][T16507] sk_alloc+0x36/0xc20 [ 636.853099][T16507] tipc_sk_create+0xcf/0x21a0 [ 636.853134][T16507] ? find_held_lock+0x2b/0x80 [ 636.853155][T16507] ? __sock_create+0x2f2/0x8d0 [ 636.853188][T16507] __sock_create+0x338/0x8d0 [ 636.853221][T16507] __sys_socketpair+0x1d8/0x5a0 [ 636.853253][T16507] ? __pfx___sys_socketpair+0x10/0x10 [ 636.853286][T16507] ? xfd_validate_state+0x61/0x180 [ 636.853314][T16507] ? __pfx_do_pwritev+0x10/0x10 [ 636.853350][T16507] __x64_sys_socketpair+0x96/0x100 [ 636.853379][T16507] ? lockdep_hardirqs_on+0x7c/0x110 [ 636.853414][T16507] do_syscall_64+0xcd/0x490 [ 636.853437][T16507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.853458][T16507] RIP: 0033:0x7ffbb278e969 [ 636.853475][T16507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.853495][T16507] RSP: 002b:00007ffbb3549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 636.853515][T16507] RAX: ffffffffffffffda RBX: 00007ffbb29b5fa0 RCX: 00007ffbb278e969 [ 636.853529][T16507] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 636.853542][T16507] RBP: 00007ffbb2810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 636.853555][T16507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.853568][T16507] R13: 0000000000000000 R14: 00007ffbb29b5fa0 R15: 00007ffe402966e8 [ 636.853594][T16507] [ 637.388511][T16510] can: request_module (can-proto-0) failed. [ 638.607425][T16550] FAULT_INJECTION: forcing a failure. [ 638.607425][T16550] name failslab, interval 1, probability 0, space 0, times 0 [ 638.620112][ T30] audit: type=1804 audit(4295032538.663:26): pid=16550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2139" name="/newroot/22/file0" dev="tmpfs" ino=134 res=1 errno=0 [ 638.620213][T16550] CPU: 0 UID: 0 PID: 16550 Comm: syz.2.2139 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 638.620263][T16550] Tainted: [U]=USER [ 638.620274][T16550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 638.620291][T16550] Call Trace: [ 638.620301][T16550] [ 638.620311][T16550] dump_stack_lvl+0x16c/0x1f0 [ 638.620347][T16550] should_fail_ex+0x512/0x640 [ 638.620384][T16550] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 638.620437][T16550] should_failslab+0xc2/0x120 [ 638.620470][T16550] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 638.620519][T16550] ? audit_log_start+0x2c5/0x7f0 [ 638.620569][T16550] audit_log_start+0x2c5/0x7f0 [ 638.620613][T16550] ? __pfx_audit_log_start+0x10/0x10 [ 638.620653][T16550] ? __lock_acquire+0xb8a/0x1c90 [ 638.620713][T16550] integrity_audit_message+0x10c/0x580 [ 638.620748][T16550] ? take_dentry_name_snapshot+0x314/0x7d0 [ 638.620784][T16550] ? __pfx_integrity_audit_message+0x10/0x10 [ 638.620819][T16550] ? take_dentry_name_snapshot+0x319/0x7d0 [ 638.620860][T16550] integrity_audit_msg+0x41/0x60 [ 638.620896][T16550] ima_collect_measurement+0x784/0xa40 [ 638.620951][T16550] ? __pfx_ima_collect_measurement+0x10/0x10 [ 638.621022][T16550] ? do_raw_read_unlock+0x44/0xe0 [ 638.621078][T16550] ? vfs_getxattr_alloc+0xec/0x340 [ 638.621131][T16550] ? ima_get_hash_algo+0x27c/0x400 [ 638.621164][T16550] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 638.621206][T16550] ? process_measurement+0x11fa/0x23e0 [ 638.621241][T16550] process_measurement+0x11fa/0x23e0 [ 638.621291][T16550] ? __pfx_process_measurement+0x10/0x10 [ 638.621382][T16550] ? futex_private_hash_put+0xc7/0x240 [ 638.621416][T16550] ? futex_hash_put+0x3e/0x50 [ 638.621454][T16550] ima_file_mmap+0x1b1/0x1d0 [ 638.621490][T16550] ? __pfx_ima_file_mmap+0x10/0x10 [ 638.621536][T16550] ? __lock_acquire+0x622/0x1c90 [ 638.621592][T16550] security_mmap_file+0x88c/0x990 [ 638.621630][T16550] vm_mmap_pgoff+0xec/0x450 [ 638.621666][T16550] ? find_held_lock+0x2b/0x80 [ 638.621695][T16550] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 638.621736][T16550] ? __fget_files+0x20e/0x3c0 [ 638.621787][T16550] ksys_mmap_pgoff+0x32c/0x5c0 [ 638.621830][T16550] __x64_sys_mmap+0x125/0x190 [ 638.621876][T16550] do_syscall_64+0xcd/0x490 [ 638.621910][T16550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.621940][T16550] RIP: 0033:0x7f966c58e969 [ 638.621963][T16550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.621992][T16550] RSP: 002b:00007f966d456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 638.622019][T16550] RAX: ffffffffffffffda RBX: 00007f966c7b5fa0 RCX: 00007f966c58e969 [ 638.622039][T16550] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 638.622058][T16550] RBP: 00007f966c610ab1 R08: 0000000000000003 R09: 0000000000000000 [ 638.622077][T16550] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 638.622095][T16550] R13: 0000000000000000 R14: 00007f966c7b5fa0 R15: 00007ffde1d20a48 [ 638.622135][T16550] [ 638.622148][T16550] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 638.980742][T16550] audit: out of memory in audit_log_start [ 640.365354][T16571] Invalid ELF header magic: != ELF [ 642.087340][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2151'. [ 642.402577][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2152'. [ 643.643076][T16627] can: request_module (can-proto-0) failed. [ 645.084737][T16667] can: request_module (can-proto-0) failed. [ 646.215875][T16688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2168'. [ 646.406735][T16700] can: request_module (can-proto-0) failed. [ 646.748307][T16710] FAULT_INJECTION: forcing a failure. [ 646.748307][T16710] name fail_futex, interval 1, probability 0, space 0, times 0 [ 646.835772][T16710] CPU: 0 UID: 0 PID: 16710 Comm: syz.1.2170 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 646.835823][T16710] Tainted: [U]=USER [ 646.835833][T16710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.835851][T16710] Call Trace: [ 646.835861][T16710] [ 646.835872][T16710] dump_stack_lvl+0x16c/0x1f0 [ 646.835908][T16710] should_fail_ex+0x512/0x640 [ 646.835952][T16710] get_futex_key+0x1d0/0x1540 [ 646.836001][T16710] ? __pfx_get_futex_key+0x10/0x10 [ 646.836039][T16710] ? __pfx___schedule+0x10/0x10 [ 646.836084][T16710] ? find_held_lock+0x2b/0x80 [ 646.836121][T16710] futex_wait_setup+0x9d/0x550 [ 646.836177][T16710] __futex_wait+0x194/0x2f0 [ 646.836222][T16710] ? __pfx___futex_wait+0x10/0x10 [ 646.836273][T16710] ? __pfx_futex_wake_mark+0x10/0x10 [ 646.836321][T16710] ? preempt_schedule_common+0x44/0xc0 [ 646.836383][T16710] futex_wait+0xe8/0x380 [ 646.836427][T16710] ? __pfx_futex_wait+0x10/0x10 [ 646.836486][T16710] ? do_writev+0x218/0x340 [ 646.836536][T16710] do_futex+0x229/0x350 [ 646.836575][T16710] ? __pfx_do_futex+0x10/0x10 [ 646.836610][T16710] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 646.836663][T16710] __x64_sys_futex+0x1e0/0x4c0 [ 646.836700][T16710] ? fput+0x70/0xf0 [ 646.836728][T16710] ? __pfx___x64_sys_futex+0x10/0x10 [ 646.836764][T16710] ? xfd_validate_state+0x61/0x180 [ 646.836800][T16710] ? __pfx_do_writev+0x10/0x10 [ 646.836851][T16710] do_syscall_64+0xcd/0x490 [ 646.836883][T16710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.836910][T16710] RIP: 0033:0x7ffbb278e969 [ 646.836932][T16710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.836961][T16710] RSP: 002b:00007ffbb35490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 646.836994][T16710] RAX: ffffffffffffffda RBX: 00007ffbb29b5fa8 RCX: 00007ffbb278e969 [ 646.837013][T16710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffbb29b5fa8 [ 646.837032][T16710] RBP: 00007ffbb29b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 646.837050][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbb29b5fac [ 646.837068][T16710] R13: 0000000000000000 R14: 00007ffe40296600 R15: 00007ffe402966e8 [ 646.837105][T16710] [ 647.824655][T16721] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2171'. [ 648.665816][T16733] FAULT_INJECTION: forcing a failure. [ 648.665816][T16733] name failslab, interval 1, probability 0, space 0, times 0 [ 648.715968][T16733] CPU: 0 UID: 0 PID: 16733 Comm: syz.2.2173 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 648.716019][T16733] Tainted: [U]=USER [ 648.716028][T16733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.716044][T16733] Call Trace: [ 648.716053][T16733] [ 648.716064][T16733] dump_stack_lvl+0x16c/0x1f0 [ 648.716097][T16733] should_fail_ex+0x512/0x640 [ 648.716131][T16733] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 648.716176][T16733] should_failslab+0xc2/0x120 [ 648.716206][T16733] __kmalloc_cache_noprof+0x6a/0x3e0 [ 648.716248][T16733] ? rfkill_fop_open+0x56/0x750 [ 648.716290][T16733] ? __pfx_rfkill_fop_open+0x10/0x10 [ 648.716327][T16733] rfkill_fop_open+0x56/0x750 [ 648.716364][T16733] ? kobject_get_unless_zero+0x156/0x1e0 [ 648.716399][T16733] ? __pfx_rfkill_fop_open+0x10/0x10 [ 648.716438][T16733] misc_open+0x35a/0x420 [ 648.716465][T16733] ? __pfx_misc_open+0x10/0x10 [ 648.716490][T16733] chrdev_open+0x234/0x6a0 [ 648.716517][T16733] ? __pfx_apparmor_file_open+0x10/0x10 [ 648.716545][T16733] ? __pfx_chrdev_open+0x10/0x10 [ 648.716576][T16733] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 648.716622][T16733] do_dentry_open+0x741/0x1c10 [ 648.716668][T16733] ? __pfx_chrdev_open+0x10/0x10 [ 648.716702][T16733] vfs_open+0x82/0x3f0 [ 648.716737][T16733] path_openat+0x1de4/0x2cb0 [ 648.716794][T16733] ? __pfx_path_openat+0x10/0x10 [ 648.716839][T16733] ? __lock_acquire+0xb8a/0x1c90 [ 648.716882][T16733] do_filp_open+0x20b/0x470 [ 648.716925][T16733] ? __pfx_do_filp_open+0x10/0x10 [ 648.717002][T16733] ? alloc_fd+0x471/0x7d0 [ 648.717054][T16733] do_sys_openat2+0x11b/0x1d0 [ 648.717088][T16733] ? __pfx_do_sys_openat2+0x10/0x10 [ 648.717139][T16733] __x64_sys_openat+0x174/0x210 [ 648.717173][T16733] ? __pfx___x64_sys_openat+0x10/0x10 [ 648.717224][T16733] do_syscall_64+0xcd/0x490 [ 648.717256][T16733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.717285][T16733] RIP: 0033:0x7f966c58e969 [ 648.717307][T16733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.717335][T16733] RSP: 002b:00007f966d435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 648.717362][T16733] RAX: ffffffffffffffda RBX: 00007f966c7b6080 RCX: 00007f966c58e969 [ 648.717381][T16733] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 648.717400][T16733] RBP: 00007f966c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 648.717417][T16733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.717433][T16733] R13: 0000000000000000 R14: 00007f966c7b6080 R15: 00007ffde1d20a48 [ 648.717470][T16733] [ 649.398466][T16745] bridge0: port 3(ipvlan1) entered blocking state [ 649.414490][T16745] bridge0: port 3(ipvlan1) entered disabled state [ 649.425597][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 649.465231][T16745] FAULT_INJECTION: forcing a failure. [ 649.465231][T16745] name failslab, interval 1, probability 0, space 0, times 0 [ 649.478954][T16745] CPU: 1 UID: 0 PID: 16745 Comm: syz.0.2178 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 649.478995][T16745] Tainted: [U]=USER [ 649.479004][T16745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 649.479020][T16745] Call Trace: [ 649.479029][T16745] [ 649.479038][T16745] dump_stack_lvl+0x16c/0x1f0 [ 649.479069][T16745] should_fail_ex+0x512/0x640 [ 649.479101][T16745] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 649.479149][T16745] should_failslab+0xc2/0x120 [ 649.479178][T16745] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 649.479222][T16745] ? __d_alloc+0x31/0xaa0 [ 649.479252][T16745] __d_alloc+0x31/0xaa0 [ 649.479280][T16745] d_alloc_pseudo+0x1c/0xc0 [ 649.479313][T16745] alloc_file_pseudo+0xcf/0x230 [ 649.479347][T16745] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 649.479380][T16745] ? do_raw_spin_unlock+0x172/0x230 [ 649.479429][T16745] __anon_inode_getfile+0xf7/0x3a0 [ 649.479477][T16745] anon_inode_getfd+0x52/0xb0 [ 649.479519][T16745] __x64_sys_fsopen+0x18b/0x240 [ 649.479550][T16745] do_syscall_64+0xcd/0x490 [ 649.479579][T16745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.479605][T16745] RIP: 0033:0x7f7d1ed8e969 [ 649.479626][T16745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.479653][T16745] RSP: 002b:00007f7d1fca4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 649.479678][T16745] RAX: ffffffffffffffda RBX: 00007f7d1efb5fa0 RCX: 00007f7d1ed8e969 [ 649.479696][T16745] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 649.479712][T16745] RBP: 00007f7d1ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 649.479727][T16745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.479743][T16745] R13: 0000000000000000 R14: 00007f7d1efb5fa0 R15: 00007ffdd7aef608 [ 649.479778][T16745] [ 651.382876][T16767] can: request_module (can-proto-0) failed. [ 651.881350][T16792] FAULT_INJECTION: forcing a failure. [ 651.881350][T16792] name failslab, interval 1, probability 0, space 0, times 0 [ 651.894315][T16792] CPU: 1 UID: 0 PID: 16792 Comm: syz.2.2184 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 651.894346][T16792] Tainted: [U]=USER [ 651.894353][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.894364][T16792] Call Trace: [ 651.894371][T16792] [ 651.894378][T16792] dump_stack_lvl+0x16c/0x1f0 [ 651.894401][T16792] should_fail_ex+0x512/0x640 [ 651.894426][T16792] ? __kmalloc_noprof+0xbf/0x510 [ 651.894461][T16792] ? ops_init+0x77/0x5f0 [ 651.894486][T16792] should_failslab+0xc2/0x120 [ 651.894506][T16792] __kmalloc_noprof+0xd2/0x510 [ 651.894538][T16792] ? __raw_spin_lock_init+0x3a/0x110 [ 651.894574][T16792] ops_init+0x77/0x5f0 [ 651.894597][T16792] setup_net+0x1ff/0x510 [ 651.894617][T16792] ? lockdep_init_map_type+0x5c/0x280 [ 651.894645][T16792] ? __pfx_setup_net+0x10/0x10 [ 651.894668][T16792] ? debug_mutex_init+0x37/0x70 [ 651.894689][T16792] copy_net_ns+0x2a6/0x5f0 [ 651.894716][T16792] create_new_namespaces+0x3ea/0xa90 [ 651.894744][T16792] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 651.894768][T16792] ksys_unshare+0x45b/0xa40 [ 651.894795][T16792] ? __pfx_ksys_unshare+0x10/0x10 [ 651.894822][T16792] ? xfd_validate_state+0x61/0x180 [ 651.894857][T16792] __x64_sys_unshare+0x31/0x40 [ 651.894883][T16792] do_syscall_64+0xcd/0x490 [ 651.894905][T16792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.894925][T16792] RIP: 0033:0x7f966c58e969 [ 651.894941][T16792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.894960][T16792] RSP: 002b:00007f966d456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 651.894979][T16792] RAX: ffffffffffffffda RBX: 00007f966c7b5fa0 RCX: 00007f966c58e969 [ 651.894992][T16792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 651.895004][T16792] RBP: 00007f966c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 651.895015][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.895027][T16792] R13: 0000000000000000 R14: 00007f966c7b5fa0 R15: 00007ffde1d20a48 [ 651.895052][T16792] [ 653.483104][T16812] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 653.837010][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 654.008544][T16809] kernel read not supported for file /set_event_notrace_pid (pid: 16809 comm: syz.1.2188) [ 654.077930][ T30] audit: type=1800 audit(4294967305.352:27): pid=16809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2188" name="set_event_notrace_pid" dev="tracefs" ino=11 res=0 errno=0 [ 654.475079][T16834] can: request_module (can-proto-0) failed. [ 654.741499][T16846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2197'. [ 656.223491][T16872] tipc: Started in network mode [ 656.228592][T16872] tipc: Node identity ee00, cluster identity 4711 [ 656.235232][T16872] tipc: Node number set to 60928 [ 657.634588][T16893] can: request_module (can-proto-0) failed. [ 658.117676][T16901] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 660.628485][T16941] mkiss: ax0: crc mode is auto. [ 660.896603][T16942] can: request_module (can-proto-0) failed. [ 662.615572][T16986] FAULT_INJECTION: forcing a failure. [ 662.615572][T16986] name failslab, interval 1, probability 0, space 0, times 0 [ 662.652498][T16990] mkiss: ax0: crc mode is auto.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         [ 675.564960][T17284] dup_mmap+0x152e/0x21d0 [ 675.569449][T17284] copy_process+0x4081/0x76a0 [ 675.570681][T17299] CPU: 1 UID: 0 PID: 17299 Comm: syz.2.2288 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 675.570729][T17299] Tainted: [U]=USER [ 675.570739][T17299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.570757][T17299] Call Trace: [ 675.570767][T17299] [ 675.570778][T17299] dump_stack_lvl+0x16c/0x1f0 [ 675.570816][T17299] should_fail_ex+0x512/0x640 [ 675.570860][T17299] _copy_to_iter+0x29f/0x16f0 [ 675.570907][T17299] ? chacha_block_generic+0x211/0x330 [ 675.570945][T17299] ? __pfx__copy_to_iter+0x10/0x10 [ 675.570995][T17299] ? __pfx___might_resched+0x10/0x10 [ 675.571026][T17299] ? crng_make_state+0x48e/0x6d0 [ 675.571078][T17299] get_random_bytes_user+0x17f/0x3c0 [ 675.571126][T17299] ? __pfx_get_random_bytes_user+0x10/0x10 [ 675.571181][T17299] ? do_futex+0x122/0x350 [ 675.571222][T17299] ? fd_install+0x225/0x750 [ 675.571268][T17299] ? import_ubuf+0x1b6/0x220 [ 675.571308][T17299] __x64_sys_getrandom+0x183/0x290 [ 675.571357][T17299] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 675.571406][T17299] ? __x64_sys_openat+0x174/0x210 [ 675.571460][T17299] do_syscall_64+0xcd/0x490 [ 675.571493][T17299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.571523][T17299] RIP: 0033:0x7f966c58e969 [ 675.571547][T17299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.571576][T17299] RSP: 002b:00007f966d456038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 675.571605][T17299] RAX: ffffffffffffffda RBX: 00007f966c7b5fa0 RCX: 00007f966c58e969 [ 675.571625][T17299] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 675.571643][T17299] RBP: 00007f966c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 675.571663][T17299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.571681][T17299] R13: 0000000000000000 R14: 00007f966c7b5fa0 R15: 00007ffde1d20a48 [ 675.571720][T17299] [ 675.783365][T17284] kernel_clone+0xfc/0x960 [ 675.787853][T17284] __do_sys_clone+0xce/0x120 [ 675.831695][T17284] do_syscall_64+0xcd/0x490 [ 675.836295][T17284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.987412][T17288] could not allocate digest TFM handle binfmt_misc [ 677.258073][T17331] mkiss: ax0: crc mode is auto. [ 677.405950][T17337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2295'. [ 677.510324][T17337] vcan0: entered promiscuous mode [ 678.999553][T17372] ubi: mtd0 is already attached to ubi0 [ 679.005485][T17372] ubi0: detaching mtd0 [ 679.011896][T17372] ubi0: mtd0 is detached [ 679.908248][T17386] openvswitch: netlink: Duplicate key (type 15). [ 680.590097][T12117] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 680.590137][T12117] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 680.604909][T12117] Bluetooth: hci4: Dropping invalid advertising data [ 680.612037][T12117] Bluetooth: hci4: Dropping invalid advertising data [ 680.618789][T12117] Bluetooth: hci4: Dropping invalid advertising data [ 680.625464][T12117] Bluetooth: hci4: Malformed LE Event: 0x02 [ 680.810646][T17406] vhci_hcd: invalid port number 242 [ 680.816537][T17406] vhci_hcd: default hub control req: f2ff vffff i00f2 l65535 [ 681.903287][T17434] can: request_module (can-proto-0) failed. [ 683.217502][T17468] FAULT_INJECTION: forcing a failure. [ 683.217502][T17468] name failslab, interval 1, probability 0, space 0, times 0 [ 683.246768][T17468] CPU: 0 UID: 0 PID: 17468 Comm: syz.0.2322 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 683.246812][T17468] Tainted: [U]=USER [ 683.246821][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 683.246837][T17468] Call Trace: [ 683.246846][T17468] [ 683.246859][T17468] dump_stack_lvl+0x16c/0x1f0 [ 683.246892][T17468] should_fail_ex+0x512/0x640 [ 683.246925][T17468] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 683.246977][T17468] should_failslab+0xc2/0x120 [ 683.247008][T17468] __kmalloc_cache_noprof+0x6a/0x3e0 [ 683.247049][T17468] ? input_allocate_device+0xc5/0x350 [ 683.247100][T17468] input_allocate_device+0xc5/0x350 [ 683.247146][T17468] uinput_ioctl_handler.isra.0+0x8bb/0x1df0 [ 683.247186][T17468] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 683.247232][T17468] ? find_held_lock+0x2b/0x80 [ 683.247279][T17468] ? __pfx_uinput_ioctl+0x10/0x10 [ 683.247315][T17468] __x64_sys_ioctl+0x18e/0x210 [ 683.247354][T17468] do_syscall_64+0xcd/0x490 [ 683.247392][T17468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.247420][T17468] RIP: 0033:0x7f7d1ed8e969 [ 683.247442][T17468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.247470][T17468] RSP: 002b:00007f7d1fca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.247496][T17468] RAX: ffffffffffffffda RBX: 00007f7d1efb5fa0 RCX: 00007f7d1ed8e969 [ 683.247514][T17468] RDX: 0000200000000300 RSI: 00000000405c5503 RDI: 000000000000000a [ 683.247531][T17468] RBP: 00007f7d1ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 683.247548][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.247564][T17468] R13: 0000000000000000 R14: 00007f7d1efb5fa0 R15: 00007ffdd7aef608 [ 683.247600][T17468] [ 684.404110][T17511] can: request_module (can-proto-0) failed. [ 684.627962][T17492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.634205][T17492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.640334][T17492] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 684.649144][T17492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.656228][T17492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.662481][T17492] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 684.670825][T17492] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 684.680320][T17509] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 684.980011][T17532] Invalid ELF header magic: != ELF [ 686.021052][T17555] can: request_module (can-proto-3) failed. [ 686.097956][T12117] Bluetooth: hci2: command 0x0c1a tx timeout [ 686.655137][T12117] Bluetooth: hci4: command 0x0c1a tx timeout [ 686.661251][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 686.735207][T12117] Bluetooth: hci1: command 0x0c1a tx timeout [ 686.936997][T17578] netlink: 'syz.4.2341': attribute type 1 has an invalid length. [ 687.169624][T17585] binder: 17581:17585 unknown command 7 [ 687.175767][T17585] binder: 17581:17585 ioctl c0306201 0 returned -22 [ 687.587353][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 688.667658][T17613] netlink: 'syz.0.2348': attribute type 10 has an invalid length. [ 688.686295][T17613] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2348'. [ 688.735932][T12117] Bluetooth: hci3: command 0x0c1a tx timeout [ 688.824581][T12117] Bluetooth: hci1: command 0x0c1a tx timeout [ 689.618396][T17663] FAULT_INJECTION: forcing a failure. [ 689.618396][T17663] name failslab, interval 1, probability 0, space 0, times 0 [ 689.651621][T17663] CPU: 1 UID: 0 PID: 17663 Comm: syz.2.2358 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 689.651671][T17663] Tainted: [U]=USER [ 689.651689][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.651707][T17663] Call Trace: [ 689.651718][T17663] [ 689.651730][T17663] dump_stack_lvl+0x16c/0x1f0 [ 689.651764][T17663] should_fail_ex+0x512/0x640 [ 689.651802][T17663] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 689.651856][T17663] should_failslab+0xc2/0x120 [ 689.651888][T17663] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 689.651938][T17663] ? mas_alloc_nodes+0x18b/0x8b0 [ 689.651988][T17663] mas_alloc_nodes+0x18b/0x8b0 [ 689.652042][T17663] mas_node_count_gfp+0x105/0x130 [ 689.652091][T17663] mas_preallocate+0x77b/0xda0 [ 689.652133][T17663] ? __pfx_mas_preallocate+0x10/0x10 [ 689.652179][T17663] ? vma_merge_new_range+0x37f/0xa00 [ 689.652223][T17663] ? vm_area_alloc+0x1f/0x160 [ 689.652266][T17663] ? lockdep_init_map_type+0x5c/0x280 [ 689.652315][T17663] __mmap_region+0x1108/0x25e0 [ 689.652371][T17663] ? __pfx___mmap_region+0x10/0x10 [ 689.652422][T17663] ? rcu_is_watching+0x12/0xc0 [ 689.652465][T17663] ? rcu_is_watching+0x12/0xc0 [ 689.652498][T17663] ? trace_sched_exit_tp+0xde/0x130 [ 689.652535][T17663] ? __schedule+0x1181/0x5de0 [ 689.652607][T17663] ? __pfx___schedule+0x10/0x10 [ 689.652715][T17663] ? trace_cap_capable+0x18d/0x200 [ 689.652776][T17663] mmap_region+0x1ab/0x3f0 [ 689.652805][T17663] ? __get_unmapped_area+0x267/0x440 [ 689.652851][T17663] do_mmap+0xa3e/0x1210 [ 689.652898][T17663] ? __pfx_do_mmap+0x10/0x10 [ 689.652933][T17663] ? __pfx_down_write_killable+0x10/0x10 [ 689.652971][T17663] vm_mmap_pgoff+0x281/0x450 [ 689.653006][T17663] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 689.653043][T17663] ? __x64_sys_futex+0x1e0/0x4c0 [ 689.653075][T17663] ? __x64_sys_futex+0x1e9/0x4c0 [ 689.653112][T17663] ksys_mmap_pgoff+0x7d/0x5c0 [ 689.653142][T17663] ? xfd_validate_state+0x61/0x180 [ 689.653177][T17663] ? __pfx_do_writev+0x10/0x10 [ 689.653218][T17663] __x64_sys_mmap+0x125/0x190 [ 689.653259][T17663] do_syscall_64+0xcd/0x490 [ 689.653287][T17663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.653314][T17663] RIP: 0033:0x7f966c58e969 [ 689.653334][T17663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.653360][T17663] RSP: 002b:00007f966d456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 689.653384][T17663] RAX: ffffffffffffffda RBX: 00007f966c7b5fa0 RCX: 00007f966c58e969 [ 689.653401][T17663] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 689.653419][T17663] RBP: 00007f966c610ab1 R08: ffff7ffffffffffa R09: 0000000000008000 [ 689.653439][T17663] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 689.653457][T17663] R13: 0000000000000000 R14: 00007f966c7b5fa0 R15: 00007ffde1d20a48 [ 689.653499][T17663] [ 689.939708][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.555452][T17685] tipc: Enabling of bearer rejected, media not registered [ 690.660544][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.667411][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.892911][T12117] Bluetooth: hci1: command 0x0c1a tx timeout [ 694.101610][T17718] kexec: Could not allocate control_code_buffer [ 694.285239][T17753] WARNING! power/level is deprecated; use power/control instead [ 695.251488][T17766] ubi0: attaching mtd0 [ 695.257111][T17766] ubi0: scanning is finished [ 695.322354][T17766] ubi0 warning: ubi_read_volume_table: volume table copy #2 is corrupted [ 695.333538][T17766] ubi0: volume table was restored [ 695.456444][T17778] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input30 [ 695.638778][T17766] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 695.742271][T17766] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 695.755890][T17766] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 695.797331][T17766] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 695.815098][T17766] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 695.863969][T17766] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 695.943885][T17766] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 597688515 [ 695.963967][T17766] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 696.013861][T17783] ubi0: background thread "ubi_bgt0d" started, PID 17783 [ 696.206483][T17786] mkiss: ax0: crc mode is auto. [ 700.655406][T17888] random: crng reseeded on system resumption [ 700.927791][T17898] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2405'. [ 701.733398][T17907] tipc: Enabling of bearer rejected, media not registered [ 703.101101][T17919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 703.108156][T17919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 703.114276][T17919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 703.121044][T17919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.252561][T17963] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 704.278038][T17963] audit: out of memory in audit_log_start [ 704.303774][ T30] audit: type=1800 audit(4294968362.141:29): pid=17963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2418" name="file0" dev="tmpfs" ino=3088 res=0 errno=0 [ 704.498488][T12117] Bluetooth: hci2: command 0x0c1a tx timeout [ 705.138642][T12117] Bluetooth: hci1: command 0x0c1a tx timeout [ 705.139316][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 705.144833][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 705.669257][T17990] FAULT_INJECTION: forcing a failure. [ 705.669257][T17990] name failslab, interval 1, probability 0, space 0, times 0 [ 705.708800][T17990] CPU: 0 UID: 0 PID: 17990 Comm: syz.1.2424 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 705.708843][T17990] Tainted: [U]=USER [ 705.708853][T17990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.708869][T17990] Call Trace: [ 705.708877][T17990] [ 705.708887][T17990] dump_stack_lvl+0x16c/0x1f0 [ 705.708919][T17990] should_fail_ex+0x512/0x640 [ 705.708952][T17990] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 705.709002][T17990] should_failslab+0xc2/0x120 [ 705.709032][T17990] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 705.709078][T17990] ? shmem_alloc_inode+0x25/0x50 [ 705.709133][T17990] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 705.709173][T17990] shmem_alloc_inode+0x25/0x50 [ 705.709204][T17990] alloc_inode+0x61/0x240 [ 705.709242][T17990] new_inode+0x22/0x1c0 [ 705.709272][T17990] ? trace_cap_capable+0x18d/0x200 [ 705.709317][T17990] shmem_get_inode+0x19a/0xfb0 [ 705.709355][T17990] ? __vm_enough_memory+0x184/0x3f0 [ 705.709390][T17990] __shmem_file_setup+0x279/0x330 [ 705.709437][T17990] shmem_zero_setup+0x93/0x1a0 [ 705.709487][T17990] __mmap_region+0x1ed0/0x25e0 [ 705.709542][T17990] ? __pfx___mmap_region+0x10/0x10 [ 705.709589][T17990] ? rcu_is_watching+0x12/0xc0 [ 705.709627][T17990] ? rcu_is_watching+0x12/0xc0 [ 705.709657][T17990] ? trace_sched_exit_tp+0xde/0x130 [ 705.709693][T17990] ? __schedule+0x1181/0x5de0 [ 705.709760][T17990] ? __pfx___schedule+0x10/0x10 [ 705.709851][T17990] ? trace_cap_capable+0x18d/0x200 [ 705.709905][T17990] mmap_region+0x1ab/0x3f0 [ 705.709932][T17990] ? __get_unmapped_area+0x267/0x440 [ 705.709973][T17990] do_mmap+0xa3e/0x1210 [ 705.710016][T17990] ? __pfx_do_mmap+0x10/0x10 [ 705.710053][T17990] ? __pfx_down_write_killable+0x10/0x10 [ 705.710095][T17990] vm_mmap_pgoff+0x281/0x450 [ 705.710134][T17990] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 705.710184][T17990] ? __x64_sys_futex+0x1e0/0x4c0 [ 705.710219][T17990] ? __x64_sys_futex+0x1e9/0x4c0 [ 705.710262][T17990] ksys_mmap_pgoff+0x7d/0x5c0 [ 705.710294][T17990] ? xfd_validate_state+0x61/0x180 [ 705.710332][T17990] ? __task_pid_nr_ns+0x17c/0x500 [ 705.710375][T17990] __x64_sys_mmap+0x125/0x190 [ 705.710421][T17990] do_syscall_64+0xcd/0x490 [ 705.710454][T17990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.710483][T17990] RIP: 0033:0x7ffbb278e969 [ 705.710507][T17990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.710536][T17990] RSP: 002b:00007ffbb3549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 705.710564][T17990] RAX: ffffffffffffffda RBX: 00007ffbb29b5fa0 RCX: 00007ffbb278e969 [ 705.710583][T17990] RDX: 00004000000000e2 RSI: 0000000000000005 RDI: 0000000000000000 [ 705.710601][T17990] RBP: 00007ffbb2810ab1 R08: ffffffffffffffff R09: 0000000000008000 [ 705.710619][T17990] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 705.710637][T17990] R13: 0000000000000000 R14: 00007ffbb29b5fa0 R15: 00007ffe402966e8 [ 705.710676][T17990] [ 707.285580][T18012] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 712.555200][T18121] blkio.reset_stats is deprecated [ 714.584200][T18156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'. [ 714.627524][T18150] ubi: mtd0 is already attached to ubi0 [ 716.215992][T18177] FAULT_INJECTION: forcing a failure. [ 716.215992][T18177] name failslab, interval 1, probability 0, space 0, times 0 [ 716.252427][T18177] CPU: 0 UID: 0 PID: 18177 Comm: syz.0.2457 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 716.252474][T18177] Tainted: [U]=USER [ 716.252483][T18177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.252499][T18177] Call Trace: [ 716.252507][T18177] [ 716.252518][T18177] dump_stack_lvl+0x16c/0x1f0 [ 716.252564][T18177] should_fail_ex+0x512/0x640 [ 716.252601][T18177] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 716.252651][T18177] should_failslab+0xc2/0x120 [ 716.252681][T18177] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 716.252725][T18177] ? __x64_sys_futex+0x1e9/0x4c0 [ 716.252769][T18177] ? getname_flags.part.0+0x4c/0x550 [ 716.252813][T18177] getname_flags.part.0+0x4c/0x550 [ 716.252855][T18177] getname_flags+0x93/0xf0 [ 716.252899][T18177] __x64_sys_mknod+0x74/0xb0 [ 716.252969][T18177] do_syscall_64+0xcd/0x490 [ 716.253005][T18177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.253038][T18177] RIP: 0033:0x7f7d1ed8e969 [ 716.253064][T18177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.253097][T18177] RSP: 002b:00007f7d1fc83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 716.253126][T18177] RAX: ffffffffffffffda RBX: 00007f7d1efb6080 RCX: 00007f7d1ed8e969 [ 716.253146][T18177] RDX: 00000000000000cb RSI: 00000000000000c9 RDI: 0000200000000040 [ 716.253164][T18177] RBP: 00007f7d1ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 716.253180][T18177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.253197][T18177] R13: 0000000000000000 R14: 00007f7d1efb6080 R15: 00007ffdd7aef608 [ 716.253243][T18177] [ 716.422125][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.019311][T18184] ptp ptp0: new virtual clock ptp1 [ 717.070655][T18184] ptp ptp0: new virtual clock ptp2 [ 717.079948][T18184] ptp ptp0: new virtual clock ptp3 [ 717.094963][T18184] ptp ptp0: guarantee physical clock free running [ 718.532710][T18216] can: request_module (can-proto-0) failed. [ 718.867730][T18219] can: request_module (can-proto-0) failed. [ 719.481772][T18231] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2472'. [ 719.519042][T18231] FAULT_INJECTION: forcing a failure. [ 719.519042][T18231] name failslab, interval 1, probability 0, space 0, times 0 [ 719.586635][T18231] CPU: 1 UID: 0 PID: 18231 Comm: syz.0.2472 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 719.586679][T18231] Tainted: [U]=USER [ 719.586688][T18231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.586704][T18231] Call Trace: [ 719.586713][T18231] [ 719.586723][T18231] dump_stack_lvl+0x16c/0x1f0 [ 719.586755][T18231] should_fail_ex+0x512/0x640 [ 719.586788][T18231] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 719.586832][T18231] should_failslab+0xc2/0x120 [ 719.586862][T18231] __kmalloc_cache_noprof+0x6a/0x3e0 [ 719.586900][T18231] ? lockdep_hardirqs_on+0x7c/0x110 [ 719.586945][T18231] ? alloc_fs_context+0x57/0x9c0 [ 719.586993][T18231] alloc_fs_context+0x57/0x9c0 [ 719.587043][T18231] __x64_sys_fsopen+0xeb/0x240 [ 719.587074][T18231] do_syscall_64+0xcd/0x490 [ 719.587104][T18231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.587133][T18231] RIP: 0033:0x7f7d1ed8e969 [ 719.587155][T18231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.587182][T18231] RSP: 002b:00007f7d1fca4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 719.587209][T18231] RAX: ffffffffffffffda RBX: 00007f7d1efb5fa0 RCX: 00007f7d1ed8e969 [ 719.587226][T18231] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 719.587242][T18231] RBP: 00007f7d1ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 719.587259][T18231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.587283][T18231] R13: 0000000000000000 R14: 00007f7d1efb5fa0 R15: 00007ffdd7aef608 [ 719.587320][T18231] [ 719.758914][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.789956][T18246] ima: policy update failed [ 719.819084][T18229] can: request_module (can-proto-0) failed. [ 719.825207][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 719.833171][ T30] audit: type=1802 audit(4294968377.614:30): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2474" res=0 errno=0 [ 719.875378][ T5899] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 720.049144][T18254] netlink: 'syz.1.2477': attribute type 11 has an invalid length. [ 720.237488][T18259] netlink: 'syz.0.2478': attribute type 11 has an invalid length. [ 721.635050][T18277] Invalid ELF header magic: != ELF [ 721.805556][T18275] can: request_module (can-proto-0) failed. [ 722.995216][T12117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 723.013721][T12117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 723.026372][T12117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 723.044536][T12117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 723.058894][T12117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.306243][T18290] can: request_module (can-proto-0) failed. [ 723.493224][T18291] chnl_net:caif_netlink_parms(): no params data found [ 723.594058][T18302] sd 0:0:1:0: PR command failed: 1026 [ 723.613971][T18302] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 723.659696][T18302] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 723.757274][T18291] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.868209][T18291] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.877991][T18291] bridge_slave_0: entered allmulticast mode [ 723.886882][T18291] bridge_slave_0: entered promiscuous mode [ 723.902583][T18291] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.912752][T18291] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.934161][T18291] bridge_slave_1: entered allmulticast mode [ 723.949721][T18291] bridge_slave_1: entered promiscuous mode [ 724.254717][T18291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.279144][T18291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.678538][T18291] team0: Port device team_slave_0 added [ 724.754588][T18291] team0: Port device team_slave_1 added [ 724.989245][T18291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.996550][T18291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.022897][T18291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.066580][T18291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.078394][T18291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.118253][T18291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.159176][T12117] Bluetooth: hci0: command tx timeout [ 725.342106][T18291] hsr_slave_0: entered promiscuous mode [ 725.352561][T18291] hsr_slave_1: entered promiscuous mode [ 725.359110][T18291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.366768][T18291] Cannot create hsr debugfs directory [ 725.982834][T18291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.169639][T18291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.500478][T18291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.688976][T18291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.953047][T18291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.977315][T18291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 727.004303][T18291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.023441][T18291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 727.232374][T12117] Bluetooth: hci0: command tx timeout [ 727.456625][T18291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.780474][T18291] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.959622][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.966777][T16323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.002189][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.009330][T16323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.643650][T18291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.844796][T18291] veth0_vlan: entered promiscuous mode [ 728.897016][T18291] veth1_vlan: entered promiscuous mode [ 729.199570][T18291] veth0_macvtap: entered promiscuous mode [ 729.258195][T18291] veth1_macvtap: entered promiscuous mode [ 729.301610][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'. [ 729.321257][T12117] Bluetooth: hci0: command tx timeout [ 729.350231][T18291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.459036][T18291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.531638][T18291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.540351][T18291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.549497][T18291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.558272][T18291] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.786102][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 729.944845][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.971135][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.152550][ T8694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.175206][ T8694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.393604][T12117] Bluetooth: hci0: command tx timeout [ 734.783828][T18486] netlink: 'syz.1.2516': attribute type 1 has an invalid length. [ 734.791705][T18486] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2516'. [ 735.146533][T18493] FAULT_INJECTION: forcing a failure. [ 735.146533][T18493] name failslab, interval 1, probability 0, space 0, times 0 [ 735.172944][T18493] CPU: 0 UID: 0 PID: 18493 Comm: syz.1.2517 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 735.172993][T18493] Tainted: [U]=USER [ 735.173004][T18493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 735.173022][T18493] Call Trace: [ 735.173031][T18493] [ 735.173043][T18493] dump_stack_lvl+0x16c/0x1f0 [ 735.173078][T18493] should_fail_ex+0x512/0x640 [ 735.173116][T18493] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 735.173170][T18493] should_failslab+0xc2/0x120 [ 735.173202][T18493] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 735.173252][T18493] ? alloc_empty_file+0x55/0x1e0 [ 735.173293][T18493] alloc_empty_file+0x55/0x1e0 [ 735.173330][T18493] path_openat+0xda/0x2cb0 [ 735.173379][T18493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.173425][T18493] ? __pfx_path_openat+0x10/0x10 [ 735.173475][T18493] ? __lock_acquire+0xb8a/0x1c90 [ 735.173522][T18493] do_filp_open+0x20b/0x470 [ 735.173571][T18493] ? __pfx_do_filp_open+0x10/0x10 [ 735.173648][T18493] ? alloc_fd+0x471/0x7d0 [ 735.173704][T18493] do_sys_openat2+0x11b/0x1d0 [ 735.173740][T18493] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.173811][T18493] __x64_sys_openat+0x174/0x210 [ 735.173849][T18493] ? __pfx___x64_sys_openat+0x10/0x10 [ 735.173904][T18493] do_syscall_64+0xcd/0x490 [ 735.173937][T18493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.173967][T18493] RIP: 0033:0x7f959818e969 [ 735.173991][T18493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.174020][T18493] RSP: 002b:00007f9599069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 735.174048][T18493] RAX: ffffffffffffffda RBX: 00007f95983b5fa0 RCX: 00007f959818e969 [ 735.174068][T18493] RDX: 0000000000101001 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 735.174087][T18493] RBP: 00007f9598210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 735.174106][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.174123][T18493] R13: 0000000000000000 R14: 00007f95983b5fa0 R15: 00007ffec595e968 [ 735.174163][T18493] [ 735.381755][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.956736][T18508] netlink: 'syz.1.2519': attribute type 11 has an invalid length. [ 738.193948][T18556] program syz.1.2529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 739.098095][T18575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 739.179040][T18575] nbd: must specify at least one socket [ 739.231933][T18574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 739.313555][T18574] nbd: must specify at least one socket [ 739.673351][T18587] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 740.680402][T18591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 740.695239][T18591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 740.702121][T18591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 740.710215][T18591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 740.725349][T18591] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 740.775688][T18591] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 742.137027][T12117] Bluetooth: hci3: command 0x0c1a tx timeout [ 742.757314][T12117] Bluetooth: hci1: command 0x0c1a tx timeout [ 742.763661][T12117] Bluetooth: hci0: command 0x0c1a tx timeout [ 742.767818][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 743.349673][T18695] mkiss: ax0: crc mode is auto. [ 743.629821][T18698] netlink: 'syz.1.2562': attribute type 11 has an invalid length. [ 744.838528][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 744.868424][T18737] input: jJǸ-9%vlQ J8fi as /devices/virtual/input/input34 [ 746.920292][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 747.482574][T18787] mkiss: ax0: crc mode is auto. [ 748.459997][T18805] netlink: 'syz.0.2584': attribute type 11 has an invalid length. [ 749.749231][ T9179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.798821][ T9179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.833002][ T9179] bond0 (unregistering): Released all slaves [ 749.841996][ T5839] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 749.842036][ T5839] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 749.857300][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 749.857382][ T5839] Bluetooth: hci1: Malformed LE Event: 0x0d [ 750.984414][ T9179] hsr_slave_0: left promiscuous mode [ 750.998129][ T9179] hsr_slave_1: left promiscuous mode [ 751.048841][ T9179] veth1_macvtap: left promiscuous mode [ 751.065586][ T9179] veth0_macvtap: left promiscuous mode [ 751.164283][T18840] random: crng reseeded on system resumption [ 751.880081][T18846] netlink: 'syz.0.2594': attribute type 11 has an invalid length. [ 751.960971][T18849] netlink: 'syz.2.2596': attribute type 11 has an invalid length. [ 752.136477][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.143497][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.903598][ T9179] team0 (unregistering): Port device team_slave_1 removed [ 753.175776][ T9179] team0 (unregistering): Port device team_slave_0 removed [ 754.538777][T18892] Process accounting resumed [ 755.132126][T18900] FAULT_INJECTION: forcing a failure. [ 755.132126][T18900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.171033][T18900] CPU: 1 UID: 0 PID: 18900 Comm: syz.0.2604 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 755.171073][T18900] Tainted: [U]=USER [ 755.171079][T18900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.171091][T18900] Call Trace: [ 755.171098][T18900] [ 755.171105][T18900] dump_stack_lvl+0x16c/0x1f0 [ 755.171129][T18900] should_fail_ex+0x512/0x640 [ 755.171159][T18900] should_fail_alloc_page+0xe7/0x130 [ 755.171190][T18900] prepare_alloc_pages+0x3c2/0x610 [ 755.171217][T18900] ? rcu_is_watching+0x12/0xc0 [ 755.171241][T18900] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 755.171299][T18900] ? rcu_is_watching+0x12/0xc0 [ 755.171322][T18900] ? trace_mm_page_alloc+0x11f/0x1a0 [ 755.171349][T18900] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 755.171384][T18900] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.171421][T18900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 755.171458][T18900] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 755.171503][T18900] ? alloc_vmap_area+0xdc8/0x29c0 [ 755.171528][T18900] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 755.171558][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.171586][T18900] ? do_syscall_64+0xcd/0x490 [ 755.171606][T18900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.171641][T18900] alloc_pages_bulk_noprof+0x71c/0x1410 [ 755.171688][T18900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 755.171724][T18900] ? policy_nodemask+0xea/0x4e0 [ 755.171748][T18900] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 755.171783][T18900] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 755.171816][T18900] kasan_populate_vmalloc+0xf1/0x1f0 [ 755.171853][T18900] alloc_vmap_area+0x959/0x29c0 [ 755.171887][T18900] ? __pfx_alloc_vmap_area+0x10/0x10 [ 755.171929][T18900] __get_vm_area_node+0x1ca/0x330 [ 755.171958][T18900] __vmalloc_node_range_noprof+0x271/0x14b0 [ 755.171986][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.172017][T18900] ? __lock_acquire+0xb8a/0x1c90 [ 755.172043][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.172074][T18900] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 755.172103][T18900] ? __alloc_pages_noprof+0xb/0x1b0 [ 755.172133][T18900] ? ___kmalloc_large_node+0x84/0x1e0 [ 755.172173][T18900] ? find_held_lock+0x2b/0x80 [ 755.172196][T18900] __kvmalloc_node_noprof+0x308/0x620 [ 755.172226][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.172253][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.172283][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.172308][T18900] __do_sys_listmount+0x1c2/0xec0 [ 755.172339][T18900] ? __x64_sys_futex+0x1e0/0x4c0 [ 755.172362][T18900] ? __x64_sys_futex+0x1e9/0x4c0 [ 755.172386][T18900] ? __pfx___do_sys_listmount+0x10/0x10 [ 755.172424][T18900] do_syscall_64+0xcd/0x490 [ 755.172445][T18900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.172465][T18900] RIP: 0033:0x7f7d1ed8e969 [ 755.172480][T18900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.172500][T18900] RSP: 002b:00007f7d1fc83038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 755.172518][T18900] RAX: ffffffffffffffda RBX: 00007f7d1efb6080 RCX: 00007f7d1ed8e969 [ 755.172532][T18900] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 755.172544][T18900] RBP: 00007f7d1ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 755.172556][T18900] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 755.172567][T18900] R13: 0000000000000000 R14: 00007f7d1efb6080 R15: 00007ffdd7aef608 [ 755.172592][T18900] [ 755.539894][T18900] syz.0.2604: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 755.555220][T18900] CPU: 0 UID: 0 PID: 18900 Comm: syz.0.2604 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 755.555261][T18900] Tainted: [U]=USER [ 755.555270][T18900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.555285][T18900] Call Trace: [ 755.555294][T18900] [ 755.555305][T18900] dump_stack_lvl+0x16c/0x1f0 [ 755.555353][T18900] warn_alloc+0x248/0x3a0 [ 755.555408][T18900] ? __pfx_warn_alloc+0x10/0x10 [ 755.555458][T18900] ? kfree+0x2b4/0x4d0 [ 755.555506][T18900] ? __get_vm_area_node+0x208/0x330 [ 755.555552][T18900] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 755.555602][T18900] ? __lock_acquire+0xb8a/0x1c90 [ 755.555642][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.555691][T18900] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 755.555734][T18900] ? __alloc_pages_noprof+0xb/0x1b0 [ 755.555781][T18900] ? ___kmalloc_large_node+0x84/0x1e0 [ 755.555816][T18900] ? find_held_lock+0x2b/0x80 [ 755.555853][T18900] __kvmalloc_node_noprof+0x308/0x620 [ 755.555897][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.555938][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.555984][T18900] ? __do_sys_listmount+0x1c2/0xec0 [ 755.556022][T18900] __do_sys_listmount+0x1c2/0xec0 [ 755.556068][T18900] ? __x64_sys_futex+0x1e0/0x4c0 [ 755.556104][T18900] ? __x64_sys_futex+0x1e9/0x4c0 [ 755.556141][T18900] ? __pfx___do_sys_listmount+0x10/0x10 [ 755.556209][T18900] do_syscall_64+0xcd/0x490 [ 755.556240][T18900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.556268][T18900] RIP: 0033:0x7f7d1ed8e969 [ 755.556290][T18900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.556316][T18900] RSP: 002b:00007f7d1fc83038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 755.556341][T18900] RAX: ffffffffffffffda RBX: 00007f7d1efb6080 RCX: 00007f7d1ed8e969 [ 755.556359][T18900] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 755.556375][T18900] RBP: 00007f7d1ee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 755.556396][T18900] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 755.556413][T18900] R13: 0000000000000000 R14: 00007f7d1efb6080 R15: 00007ffdd7aef608 [ 755.556448][T18900] [ 755.556458][T18900] Mem-Info: [ 755.801541][T18898] can: request_module (can-proto-3) failed. [ 755.921485][T18900] active_anon:12609 inactive_anon:2456 isolated_anon:0 [ 755.921485][T18900] active_file:21479 inactive_file:38601 isolated_file:0 [ 755.921485][T18900] unevictable:770 dirty:489 writeback:0 [ 755.921485][T18900] slab_reclaimable:11688 slab_unreclaimable:100177 [ 755.921485][T18900] mapped:26606 shmem:2697 pagetables:1341 [ 755.921485][T18900] sec_pagetables:0 bounce:0 [ 755.921485][T18900] kernel_misc_reclaimable:0 [ 755.921485][T18900] free:1292420 free_pcp:17291 free_cma:0 [ 755.970057][T18900] Node 0 active_anon:50436kB inactive_anon:9824kB active_file:85912kB inactive_file:154276kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:105752kB dirty:1956kB writeback:0kB shmem:9248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12096kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 756.064257][T18900] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 756.126448][T18900] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.181796][T18900] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 756.191449][T18900] Node 0 DMA32 free:1249008kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50388kB inactive_anon:9824kB active_file:80304kB inactive_file:154304kB unevictable:1544kB writepending:1956kB present:3129332kB managed:2541088kB mlocked:0kB bounce:0kB free_pcp:64632kB local_pcp:45208kB free_cma:0kB [ 756.275151][T18900] lowmem_reserve[]: 0 0 1 1 1 [ 756.280040][T18900] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1496kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 756.318036][T18922] netlink: 'syz.4.2606': attribute type 11 has an invalid length. [ 756.322491][T18900] lowmem_reserve[]: 0 0 0 0 0 [ 756.387342][T18900] Node 1 Normal free:3917812kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:3232kB local_pcp:0kB free_cma:0kB [ 756.430019][T18900] lowmem_reserve[]: 0 0 0 0 0 [ 756.448726][T18900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 756.467734][T18900] Node 0 DMA32: 2634*4kB (UME) 1434*8kB (UME) 1360*16kB (UME) 901*32kB (UME) 329*64kB (UME) 353*128kB (UME) 273*256kB (UM) 167*512kB (UME) 78*1024kB (UM) 14*2048kB (UM) 206*4096kB (UM) = 1246552kB [ 756.532684][T18900] Node 0 Normal: 2*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 756.551818][T18900] Node 1 Normal: 183*4kB (UME) 59*8kB (UME) 42*16kB (UME) 219*32kB (UME) 89*64kB (UM) 34*128kB (UME) 16*256kB (UME) 5*512kB (U) 3*1024kB (UE) 3*2048kB (UME) 948*4096kB (M) = 3917812kB [ 756.573330][T18900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.593645][T18900] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.626797][T18900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.642093][T18900] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.722523][T18900] 61754 total pagecache pages [ 756.784450][T18900] 5 pages in swap cache [ 756.788641][T18900] Free swap = 120876kB [ 756.792809][T18900] Total swap = 124996kB [ 756.810249][T18900] 2097051 pages RAM [ 756.814083][T18900] 0 pages HighMem/MovableOnly [ 756.873413][T18900] 429737 pages reserved [ 756.903848][T18900] 0 pages cma reserved [ 757.612612][T18957] netlink: 'syz.2.2616': attribute type 11 has an invalid length. [ 758.118214][T18962] Invalid ELF header magic: != ELF [ 758.983042][T18975] can: request_module (can-proto-0) failed. [ 760.562423][T19022] can: request_module (can-proto-0) failed. [ 762.242874][T19053] netlink: 'syz.0.2635': attribute type 2 has an invalid length. [ 762.275171][T19054] netlink: 'syz.0.2635': attribute type 2 has an invalid length. [ 762.620536][T19068] FAULT_INJECTION: forcing a failure. [ 762.620536][T19068] name failslab, interval 1, probability 0, space 0, times 0 [ 762.633386][T19068] CPU: 0 UID: 0 PID: 19068 Comm: syz.1.2637 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 762.633436][T19068] Tainted: [U]=USER [ 762.633447][T19068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.633465][T19068] Call Trace: [ 762.633475][T19068] [ 762.633487][T19068] dump_stack_lvl+0x16c/0x1f0 [ 762.633524][T19068] should_fail_ex+0x512/0x640 [ 762.633571][T19068] ? __kmalloc_noprof+0xbf/0x510 [ 762.633621][T19068] ? ops_init+0x77/0x5f0 [ 762.633650][T19068] should_failslab+0xc2/0x120 [ 762.633682][T19068] __kmalloc_noprof+0xd2/0x510 [ 762.633732][T19068] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 762.633767][T19068] ops_init+0x77/0x5f0 [ 762.633811][T19068] setup_net+0x1ff/0x510 [ 762.633841][T19068] ? lockdep_init_map_type+0x5c/0x280 [ 762.633884][T19068] ? __pfx_setup_net+0x10/0x10 [ 762.633921][T19068] ? debug_mutex_init+0x37/0x70 [ 762.633955][T19068] copy_net_ns+0x2a6/0x5f0 [ 762.633995][T19068] create_new_namespaces+0x3ea/0xa90 [ 762.634038][T19068] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 762.634075][T19068] ksys_unshare+0x45b/0xa40 [ 762.634116][T19068] ? __pfx_ksys_unshare+0x10/0x10 [ 762.634158][T19068] ? xfd_validate_state+0x61/0x180 [ 762.634211][T19068] __x64_sys_unshare+0x31/0x40 [ 762.634249][T19068] do_syscall_64+0xcd/0x490 [ 762.634282][T19068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.634311][T19068] RIP: 0033:0x7f959818e969 [ 762.634335][T19068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.634363][T19068] RSP: 002b:00007f9599027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 762.634391][T19068] RAX: ffffffffffffffda RBX: 00007f95983b6160 RCX: 00007f959818e969 [ 762.634410][T19068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 762.634427][T19068] RBP: 00007f9598210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 762.634456][T19068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.634472][T19068] R13: 0000000000000000 R14: 00007f95983b6160 R15: 00007ffec595e968 [ 762.634512][T19068] [ 764.408677][T19087] netlink: 'syz.2.2644': attribute type 11 has an invalid length. [ 764.623848][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 764.633328][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 764.643041][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 764.651929][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 764.660085][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 765.282822][T19091] chnl_net:caif_netlink_parms(): no params data found [ 765.598930][T19091] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.607303][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.614511][T19091] bridge_slave_0: entered allmulticast mode [ 765.623021][T19091] bridge_slave_0: entered promiscuous mode [ 765.632173][T19091] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.639774][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.649427][T19091] bridge_slave_1: entered allmulticast mode [ 765.657647][T19091] bridge_slave_1: entered promiscuous mode [ 765.763313][T19091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.818968][T19091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.999291][T19091] team0: Port device team_slave_0 added [ 766.046964][T19091] team0: Port device team_slave_1 added [ 766.346751][T19091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.353755][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.454782][T19123] Invalid ELF header magic: != ELF [ 766.474765][T19091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.494596][T19091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.529020][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.599574][T19091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.779802][ T5839] Bluetooth: hci2: command tx timeout [ 766.887895][T19091] hsr_slave_0: entered promiscuous mode [ 766.947255][T19091] hsr_slave_1: entered promiscuous mode [ 767.930291][T19140] netlink: 266 bytes leftover after parsing attributes in process `syz.1.2652'. [ 767.951175][T19140] IPv6: NLM_F_CREATE should be specified when creating new route [ 768.441063][T19147] netlink: 'syz.2.2653': attribute type 11 has an invalid length. [ 768.488947][T19091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.740769][T19091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.755376][T19140] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 768.847472][ T5839] Bluetooth: hci2: command tx timeout [ 768.898639][T19091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.072708][T19142] zswap: compressor not available [ 769.200927][T19091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 769.232220][T19091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 769.269923][T19091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 769.297636][T19091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 769.546061][T19091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.617937][T19091] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.658872][T16313] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.666046][T16313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.691156][T19163] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2657'. [ 769.707209][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.714406][T16316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.857145][T19091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 769.886933][T19091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.976703][T19176] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 770.924179][ T5839] Bluetooth: hci2: command tx timeout [ 771.067992][T19091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.168898][T19091] veth0_vlan: entered promiscuous mode [ 771.227373][T19091] veth1_vlan: entered promiscuous mode [ 771.325348][T19091] veth0_macvtap: entered promiscuous mode [ 771.347661][T19091] veth1_macvtap: entered promiscuous mode [ 771.380596][T19091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.427251][T19091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.460227][T19091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.512503][T19091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.537423][T19091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.561252][T19091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.585805][ T5839] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 771.585860][ T5839] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 771.600693][ T5839] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 771.944223][T16305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.975981][T16305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.113951][T16313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.123385][T16313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.498254][T19214] netlink: 'syz.2.2666': attribute type 11 has an invalid length. [ 773.007910][ T5839] Bluetooth: hci2: command tx timeout [ 773.174385][T19239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'. [ 773.228757][T19239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.263999][T19239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.313753][T19239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.349512][T19230] can: request_module (can-proto-0) failed. [ 773.361955][T19239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.517853][ T30] audit: type=1800 audit(4294968433.329:31): pid=19306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2685" name="lu_gp_id" dev="configfs" ino=70839 res=0 errno=0 [ 775.704581][T19296] can: request_module (can-proto-0) failed. [ 776.970337][T19333] FAULT_INJECTION: forcing a failure. [ 776.970337][T19333] name failslab, interval 1, probability 0, space 0, times 0 [ 776.970400][T19333] CPU: 1 UID: 0 PID: 19333 Comm: syz.1.2690 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 776.970439][T19333] Tainted: [U]=USER [ 776.970449][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.970481][T19333] Call Trace: [ 776.970489][T19333] [ 776.970497][T19333] dump_stack_lvl+0x16c/0x1f0 [ 776.970524][T19333] should_fail_ex+0x512/0x640 [ 776.970554][T19333] ? __kmalloc_noprof+0xbf/0x510 [ 776.970594][T19333] ? vc_allocate+0x489/0x880 [ 776.970621][T19333] should_failslab+0xc2/0x120 [ 776.970645][T19333] __kmalloc_noprof+0xd2/0x510 [ 776.970694][T19333] vc_allocate+0x489/0x880 [ 776.970724][T19333] ? __pfx_vc_allocate+0x10/0x10 [ 776.970766][T19333] con_install+0xa1/0x600 [ 776.970798][T19333] ? __pfx_con_install+0x10/0x10 [ 776.970832][T19333] ? __pfx_con_install+0x10/0x10 [ 776.970862][T19333] tty_init_dev.part.0+0x9c/0x500 [ 776.970897][T19333] tty_open+0xa50/0xf90 [ 776.970939][T19333] ? __pfx_tty_open+0x10/0x10 [ 776.970971][T19333] ? chrdev_open+0x58c/0x6a0 [ 776.970997][T19333] ? __pfx_tty_open+0x10/0x10 [ 776.971029][T19333] chrdev_open+0x234/0x6a0 [ 776.971052][T19333] ? __pfx_chrdev_open+0x10/0x10 [ 776.971077][T19333] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 776.971118][T19333] do_dentry_open+0x741/0x1c10 [ 776.971156][T19333] ? __pfx_chrdev_open+0x10/0x10 [ 776.971184][T19333] vfs_open+0x82/0x3f0 [ 776.971215][T19333] path_openat+0x1de4/0x2cb0 [ 776.971261][T19333] ? __pfx_path_openat+0x10/0x10 [ 776.971299][T19333] ? __lock_acquire+0xb8a/0x1c90 [ 776.971334][T19333] do_filp_open+0x20b/0x470 [ 776.971370][T19333] ? __pfx_do_filp_open+0x10/0x10 [ 776.971430][T19333] ? alloc_fd+0x471/0x7d0 [ 776.971474][T19333] do_sys_openat2+0x11b/0x1d0 [ 776.971503][T19333] ? __pfx_do_sys_openat2+0x10/0x10 [ 776.971544][T19333] __x64_sys_openat+0x174/0x210 [ 776.971573][T19333] ? __pfx___x64_sys_openat+0x10/0x10 [ 776.971626][T19333] do_syscall_64+0xcd/0x490 [ 776.971652][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.971682][T19333] RIP: 0033:0x7f959818e969 [ 776.971699][T19333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.971721][T19333] RSP: 002b:00007f9599048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 776.971743][T19333] RAX: ffffffffffffffda RBX: 00007f95983b6080 RCX: 00007f959818e969 [ 776.971759][T19333] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 776.971773][T19333] RBP: 00007f9598210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 776.971787][T19333] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 776.971800][T19333] R13: 0000000000000000 R14: 00007f95983b6080 R15: 00007ffec595e968 [ 776.971829][T19333] [ 780.501167][T19396] random: crng reseeded on system resumption [ 781.179978][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 785.147000][T19451] can: request_module (can-proto-0) failed. [ 785.695835][T19480] netlink: 'syz.4.2719': attribute type 11 has an invalid length. [ 788.705435][T19500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 788.712557][T19500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 788.721967][T19500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 788.728724][T19500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.737049][T19500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 788.757179][T19500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 789.108052][T19537] netlink: 'syz.2.2731': attribute type 11 has an invalid length. [ 789.317605][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.444156][T19526] delete_channel: no stack [ 790.752636][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 790.758731][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 790.766690][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 792.831565][T19567] Bluetooth: hci2: command 0x0c1a tx timeout [ 794.361519][T19634] FAULT_INJECTION: forcing a failure. [ 794.361519][T19634] name failslab, interval 1, probability 0, space 0, times 0 [ 794.430896][T19634] CPU: 1 UID: 0 PID: 19634 Comm: syz.2.2750 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 794.430948][T19634] Tainted: [U]=USER [ 794.430959][T19634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 794.430977][T19634] Call Trace: [ 794.430988][T19634] [ 794.430999][T19634] dump_stack_lvl+0x16c/0x1f0 [ 794.431034][T19634] should_fail_ex+0x512/0x640 [ 794.431071][T19634] ? __kmalloc_noprof+0xbf/0x510 [ 794.431122][T19634] ? sk_prot_alloc+0x1a8/0x2a0 [ 794.431158][T19634] should_failslab+0xc2/0x120 [ 794.431191][T19634] __kmalloc_noprof+0xd2/0x510 [ 794.431246][T19634] sk_prot_alloc+0x1a8/0x2a0 [ 794.431289][T19634] sk_alloc+0x36/0xc20 [ 794.431350][T19634] __netlink_create+0x5e/0x2c0 [ 794.431377][T19634] ? __wake_up+0x3f/0x60 [ 794.431414][T19634] netlink_create+0x39e/0x620 [ 794.431446][T19634] ? __pfx_genl_bind+0x10/0x10 [ 794.431486][T19634] ? __pfx_genl_unbind+0x10/0x10 [ 794.431525][T19634] ? __pfx_genl_release+0x10/0x10 [ 794.431572][T19634] __sock_create+0x338/0x8d0 [ 794.431621][T19634] __sys_socket+0x14d/0x260 [ 794.431662][T19634] ? __x64_sys_openat+0x174/0x210 [ 794.431700][T19634] ? __pfx___sys_socket+0x10/0x10 [ 794.431756][T19634] __x64_sys_socket+0x72/0xb0 [ 794.431796][T19634] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.431849][T19634] do_syscall_64+0xcd/0x490 [ 794.431883][T19634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.431914][T19634] RIP: 0033:0x7f966c58e969 [ 794.431940][T19634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.431972][T19634] RSP: 002b:00007f966d456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 794.432002][T19634] RAX: ffffffffffffffda RBX: 00007f966c7b5fa0 RCX: 00007f966c58e969 [ 794.432022][T19634] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 794.432041][T19634] RBP: 00007f966c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 794.432060][T19634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.432078][T19634] R13: 0000000000000000 R14: 00007f966c7b5fa0 R15: 00007ffde1d20a48 [ 794.432118][T19634] [ 794.912170][T19567] Bluetooth: hci2: command 0x0c1a tx timeout [ 796.115542][T19654] can: request_module (can-proto-0) failed. [ 796.193030][T19654] can: request_module (can-proto-0) failed. [ 796.307926][T19654] can: request_module (can-proto-0) failed. [ 796.479015][T19673] random: crng reseeded on system resumption [ 796.526454][T19654] can: request_module (can-proto-0) failed. [ 796.606428][T19673] Unrecognized hibernate image header format! [ 796.612695][T19673] PM: hibernation: Image mismatch: architecture specific data [ 796.695799][T19654] can: request_module (can-proto-0) failed. [ 796.888939][T19654] can: request_module (can-proto-0) failed. [ 798.975282][T19710] netlink: 'syz.2.2766': attribute type 11 has an invalid length. [ 800.786191][T19738] can: request_module (can-proto-0) failed. [ 803.281323][T19782] FAULT_INJECTION: forcing a failure. [ 803.281323][T19782] name failslab, interval 1, probability 0, space 0, times 0 [ 803.294601][T19782] CPU: 0 UID: 0 PID: 19782 Comm: syz.1.2782 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 803.294649][T19782] Tainted: [U]=USER [ 803.294659][T19782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.294677][T19782] Call Trace: [ 803.294688][T19782] [ 803.294700][T19782] dump_stack_lvl+0x16c/0x1f0 [ 803.294736][T19782] should_fail_ex+0x512/0x640 [ 803.294775][T19782] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 803.294832][T19782] should_failslab+0xc2/0x120 [ 803.294866][T19782] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 803.294918][T19782] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 803.294961][T19782] acpi_ut_create_generic_state+0x5c/0xb0 [ 803.294994][T19782] acpi_ps_push_scope+0x22/0x230 [ 803.295039][T19782] acpi_ps_parse_loop+0x9f3/0x1d00 [ 803.295089][T19782] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 803.295127][T19782] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 803.295181][T19782] ? acpi_ut_create_thread_state+0x63/0x170 [ 803.295226][T19782] acpi_ps_parse_aml+0x3c1/0xcb0 [ 803.295273][T19782] acpi_ps_execute_method+0x55a/0xb30 [ 803.295322][T19782] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 803.295375][T19782] acpi_ns_evaluate+0x76c/0xca0 [ 803.295422][T19782] ? kasan_save_track+0x14/0x30 [ 803.295477][T19782] acpi_evaluate_object+0x1fa/0xa90 [ 803.295517][T19782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.295559][T19782] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 803.295597][T19782] ? __mutex_trylock_common+0xe9/0x250 [ 803.295649][T19782] acpi_evaluate_integer+0xdd/0x200 [ 803.295703][T19782] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 803.295774][T19782] ? __pfx_status_show+0x10/0x10 [ 803.295811][T19782] status_show+0xa0/0x120 [ 803.295848][T19782] ? __pfx_status_show+0x10/0x10 [ 803.295897][T19782] dev_attr_show+0x53/0xe0 [ 803.295944][T19782] ? __pfx_dev_attr_show+0x10/0x10 [ 803.295987][T19782] sysfs_kf_seq_show+0x213/0x3e0 [ 803.296041][T19782] seq_read_iter+0x509/0x12c0 [ 803.296105][T19782] kernfs_fop_read_iter+0x40f/0x5a0 [ 803.296144][T19782] ? rw_verify_area+0xcf/0x680 [ 803.296194][T19782] vfs_read+0x8bc/0xc60 [ 803.296253][T19782] ? __pfx___mutex_lock+0x10/0x10 [ 803.296286][T19782] ? __pfx_vfs_read+0x10/0x10 [ 803.296364][T19782] ksys_read+0x12a/0x250 [ 803.296413][T19782] ? __pfx_ksys_read+0x10/0x10 [ 803.296474][T19782] do_syscall_64+0xcd/0x490 [ 803.296510][T19782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.296549][T19782] RIP: 0033:0x7f959818e969 [ 803.296576][T19782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.296606][T19782] RSP: 002b:00007f9599069038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 803.296642][T19782] RAX: ffffffffffffffda RBX: 00007f95983b5fa0 RCX: 00007f959818e969 [ 803.296663][T19782] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 803.296683][T19782] RBP: 00007f9598210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 803.296702][T19782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.296720][T19782] R13: 0000000000000000 R14: 00007f95983b5fa0 R15: 00007ffec595e968 [ 803.296763][T19782] [ 803.666321][T19782] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 803.824941][T19786] FAULT_INJECTION: forcing a failure. [ 803.824941][T19786] name failslab, interval 1, probability 0, space 0, times 0 [ 803.825009][T19786] CPU: 1 UID: 0 PID: 19786 Comm: syz.1.2782 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 803.825055][T19786] Tainted: [U]=USER [ 803.825065][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.825083][T19786] Call Trace: [ 803.825093][T19786] [ 803.825105][T19786] dump_stack_lvl+0x16c/0x1f0 [ 803.825142][T19786] should_fail_ex+0x512/0x640 [ 803.825179][T19786] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 803.825235][T19786] should_failslab+0xc2/0x120 [ 803.825277][T19786] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 803.825326][T19786] ? __proc_create+0xc3/0x8c0 [ 803.825358][T19786] ? __proc_create+0x2ce/0x8c0 [ 803.825407][T19786] __proc_create+0x2ce/0x8c0 [ 803.825467][T19786] ? __pfx___proc_create+0x10/0x10 [ 803.825525][T19786] _proc_mkdir+0xb9/0x200 [ 803.825565][T19786] ? __pfx__proc_mkdir+0x10/0x10 [ 803.825608][T19786] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 803.825667][T19786] proc_net_ns_init+0x265/0x410 [ 803.825703][T19786] ? __pfx_proc_net_ns_init+0x10/0x10 [ 803.825735][T19786] ops_init+0x1e2/0x5f0 [ 803.825772][T19786] setup_net+0x1ff/0x510 [ 803.825804][T19786] ? lockdep_init_map_type+0x5c/0x280 [ 803.825848][T19786] ? __pfx_setup_net+0x10/0x10 [ 803.825885][T19786] ? debug_mutex_init+0x37/0x70 [ 803.825920][T19786] copy_net_ns+0x2a6/0x5f0 [ 803.825965][T19786] create_new_namespaces+0x3ea/0xa90 [ 803.826010][T19786] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 803.826048][T19786] ksys_unshare+0x45b/0xa40 [ 803.826090][T19786] ? __pfx_ksys_unshare+0x10/0x10 [ 803.826132][T19786] ? xfd_validate_state+0x61/0x180 [ 803.826185][T19786] __x64_sys_unshare+0x31/0x40 [ 803.826227][T19786] do_syscall_64+0xcd/0x490 [ 803.826269][T19786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.826301][T19786] RIP: 0033:0x7f959818e969 [ 803.826325][T19786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.826354][T19786] RSP: 002b:00007f9599048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 803.826382][T19786] RAX: ffffffffffffffda RBX: 00007f95983b6080 RCX: 00007f959818e969 [ 803.826403][T19786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 803.826421][T19786] RBP: 00007f9598210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 803.826440][T19786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.826457][T19786] R13: 0000000000000000 R14: 00007f95983b6080 R15: 00007ffec595e968 [ 803.826498][T19786] [ 804.769134][T19788] tty tty7: ldisc open failed (-12), clearing slot 6 [ 807.817138][T19869] ================================================================== [ 807.817157][T19869] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 807.817199][T19869] Read of size 256 at addr ffff88807679a3f8 by task syz.2.2798/19869 [ 807.817223][T19869] [ 807.817239][T19869] CPU: 1 UID: 0 PID: 19869 Comm: syz.2.2798 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 807.817279][T19869] Tainted: [U]=USER [ 807.817288][T19869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.817304][T19869] Call Trace: [ 807.817313][T19869] [ 807.817323][T19869] dump_stack_lvl+0x116/0x1f0 [ 807.817350][T19869] print_report+0xcd/0x680 [ 807.817376][T19869] ? __virt_addr_valid+0x81/0x610 [ 807.817403][T19869] ? __phys_addr+0xe8/0x180 [ 807.817450][T19869] ? fbcon_prepare_logo+0xa03/0xc70 [ 807.817485][T19869] kasan_report+0xe0/0x110 [ 807.817515][T19869] ? fbcon_prepare_logo+0xa03/0xc70 [ 807.817554][T19869] kasan_check_range+0x100/0x1b0 [ 807.817588][T19869] __asan_memcpy+0x23/0x60 [ 807.817626][T19869] fbcon_prepare_logo+0xa03/0xc70 [ 807.817667][T19869] fbcon_init+0xd77/0x1900 [ 807.817702][T19869] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 807.817742][T19869] visual_init+0x31d/0x620 [ 807.817769][T19869] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 807.817810][T19869] store_bind+0x61d/0x760 [ 807.817844][T19869] ? sysfs_file_kobj+0xe4/0x290 [ 807.817882][T19869] ? __pfx_store_bind+0x10/0x10 [ 807.817913][T19869] dev_attr_store+0x58/0x80 [ 807.817954][T19869] ? __pfx_dev_attr_store+0x10/0x10 [ 807.817990][T19869] sysfs_kf_write+0xef/0x150 [ 807.818028][T19869] kernfs_fop_write_iter+0x354/0x510 [ 807.818065][T19869] ? __pfx_sysfs_kf_write+0x10/0x10 [ 807.818109][T19869] vfs_write+0x6c4/0x1150 [ 807.818153][T19869] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 807.818191][T19869] ? __pfx___mutex_lock+0x10/0x10 [ 807.818219][T19869] ? __pfx_vfs_write+0x10/0x10 [ 807.818272][T19869] ksys_write+0x12a/0x250 [ 807.818314][T19869] ? __pfx_ksys_write+0x10/0x10 [ 807.818362][T19869] do_syscall_64+0xcd/0x490 [ 807.818391][T19869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.818420][T19869] RIP: 0033:0x7f966c58e969 [ 807.818443][T19869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.818471][T19869] RSP: 002b:00007f966d456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.818498][T19869] RAX: ffffffffffffffda RBX: 00007f966c7b5fa0 RCX: 00007f966c58e969 [ 807.818517][T19869] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 807.818534][T19869] RBP: 00007f966c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 807.818562][T19869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.818579][T19869] R13: 0000000000000000 R14: 00007f966c7b5fa0 R15: 00007ffde1d20a48 [ 807.818605][T19869] [ 807.818615][T19869] [ 807.818621][T19869] Allocated by task 18291: [ 807.818635][T19869] kasan_save_stack+0x33/0x60 [ 807.818675][T19869] kasan_save_track+0x14/0x30 [ 807.818713][T19869] __kasan_slab_alloc+0x89/0x90 [ 807.818735][T19869] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 807.818776][T19869] kmalloc_reserve+0x18b/0x2c0 [ 807.818806][T19869] __alloc_skb+0x166/0x380 [ 807.818825][T19869] ndisc_alloc_skb+0xd8/0x530 [ 807.818859][T19869] ndisc_send_rs+0x36b/0x670 [ 807.818893][T19869] addrconf_rs_timer+0x40d/0x840 [ 807.818928][T19869] call_timer_fn+0x19a/0x620 [ 807.818955][T19869] __run_timers+0x6ef/0x960 [ 807.818983][T19869] run_timer_base+0x114/0x190 [ 807.819011][T19869] run_timer_softirq+0x1a/0x40 [ 807.819041][T19869] handle_softirqs+0x219/0x8e0 [ 807.819066][T19869] __irq_exit_rcu+0x109/0x170 [ 807.819089][T19869] irq_exit_rcu+0x9/0x30 [ 807.819113][T19869] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 807.819151][T19869] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.819178][T19869] [ 807.819184][T19869] Freed by task 19724: [ 807.819197][T19869] kasan_save_stack+0x33/0x60 [ 807.819239][T19869] kasan_save_track+0x14/0x30 [ 807.819280][T19869] kasan_save_free_info+0x3b/0x60 [ 807.819313][T19869] __kasan_slab_free+0x51/0x70 [ 807.819337][T19869] kmem_cache_free+0x2d1/0x4d0 [ 807.819375][T19869] skb_free_head+0x1b7/0x210 [ 807.819413][T19869] skb_release_data+0x776/0x9c0 [ 807.819436][T19869] sk_skb_reason_drop+0x129/0x1a0 [ 807.819462][T19869] skb_queue_purge_reason+0x2b0/0x420 [ 807.819491][T19869] packet_release+0x82d/0xd90 [ 807.819525][T19869] __sock_release+0xb0/0x270 [ 807.819550][T19869] sock_close+0x1c/0x30 [ 807.819573][T19869] __fput+0x402/0xb70 [ 807.819597][T19869] task_work_run+0x150/0x240 [ 807.819633][T19869] do_exit+0x864/0x2bd0 [ 807.819675][T19869] do_group_exit+0xd3/0x2a0 [ 807.819705][T19869] get_signal+0x2673/0x26d0 [ 807.819729][T19869] arch_do_signal_or_restart+0x8f/0x790 [ 807.819754][T19869] irqentry_exit_to_user_mode+0x12a/0x270 [ 807.819777][T19869] asm_exc_page_fault+0x26/0x30 [ 807.819798][T19869] [ 807.819804][T19869] The buggy address belongs to the object at ffff88807679a3c0 [ 807.819804][T19869] which belongs to the cache skbuff_small_head of size 704 [ 807.819825][T19869] The buggy address is located 56 bytes inside of [ 807.819825][T19869] freed 704-byte region [ffff88807679a3c0, ffff88807679a680) [ 807.819850][T19869] [ 807.819856][T19869] The buggy address belongs to the physical page: [ 807.819866][T19869] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76798 [ 807.819888][T19869] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 807.819908][T19869] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 807.819936][T19869] page_type: f5(slab) [ 807.819957][T19869] raw: 00fff00000000040 ffff88801f6f2b40 0000000000000000 dead000000000001 [ 807.819979][T19869] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 807.820003][T19869] head: 00fff00000000040 ffff88801f6f2b40 0000000000000000 dead000000000001 [ 807.820025][T19869] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 807.820047][T19869] head: 00fff00000000002 ffffea0001d9e601 00000000ffffffff 00000000ffffffff [ 807.820068][T19869] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 807.820082][T19869] page dumped because: kasan: bad access detected [ 807.820094][T19869] page_owner tracks the page as allocated [ 807.820102][T19869] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 59, tgid 59 (kworker/u8:4), ts 101261294368, free_ts 100943174508 [ 807.820143][T19869] post_alloc_hook+0x1c0/0x230 [ 807.820181][T19869] get_page_from_freelist+0x1321/0x3890 [ 807.820219][T19869] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 807.820256][T19869] alloc_pages_mpol+0x1fb/0x550 [ 807.820279][T19869] new_slab+0x23b/0x330 [ 807.820308][T19869] ___slab_alloc+0xd9c/0x1940 [ 807.820338][T19869] __slab_alloc.constprop.0+0x56/0xb0 [ 807.820371][T19869] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 807.820408][T19869] kmalloc_reserve+0x18b/0x2c0 [ 807.820435][T19869] __alloc_skb+0x166/0x380 [ 807.820459][T19869] inet6_rt_notify+0x10d/0x4b0 [ 807.820494][T19869] fib6_add_rt2node+0x24ae/0x3660 [ 807.820519][T19869] fib6_add+0x628/0x1d90 [ 807.820542][T19869] ip6_ins_rt+0xb5/0x110 [ 807.820592][T19869] __ipv6_ifa_notify+0xa6b/0xd60 [ 807.820617][T19869] addrconf_dad_completed+0x19a/0x10d0 [ 807.820650][T19869] page last free pid 5942 tgid 5942 stack trace: [ 807.820675][T19869] __free_frozen_pages+0x7fe/0x1180 [ 807.820708][T19869] __put_partials+0x16d/0x1c0 [ 807.820740][T19869] qlist_free_all+0x4d/0x120 [ 807.820774][T19869] kasan_quarantine_reduce+0x195/0x1e0 [ 807.820809][T19869] __kasan_slab_alloc+0x69/0x90 [ 807.820830][T19869] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 807.820866][T19869] jbd2__journal_start+0x193/0x6a0 [ 807.820890][T19869] __ext4_journal_start_sb+0x195/0x690 [ 807.820929][T19869] ext4_dirty_inode+0xa1/0x130 [ 807.820949][T19869] __mark_inode_dirty+0x1ee/0xe50 [ 807.820974][T19869] generic_update_time+0xcf/0xf0 [ 807.820994][T19869] file_update_time+0x17d/0x1c0 [ 807.821015][T19869] ext4_page_mkwrite+0x35e/0x1760 [ 807.821035][T19869] do_page_mkwrite+0x174/0x380 [ 807.821055][T19869] __handle_mm_fault+0x3829/0x5490 [ 807.821085][T19869] handle_mm_fault+0x589/0xd10 [ 807.821115][T19869] [ 807.821120][T19869] Memory state around the buggy address: [ 807.821133][T19869] ffff88807679a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 807.821150][T19869] ffff88807679a300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 807.821166][T19869] >ffff88807679a380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 807.821181][T19869] ^ [ 807.821196][T19869] ffff88807679a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 807.821214][T19869] ffff88807679a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 807.821228][T19869] ================================================================== [ 807.845949][T19869] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 807.845975][T19869] CPU: 1 UID: 0 PID: 19869 Comm: syz.2.2798 Tainted: G U 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 807.846017][T19869] Tainted: [U]=USER [ 807.846027][T19869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.846044][T19869] Call Trace: [ 807.846053][T19869] [ 807.846064][T19869] dump_stack_lvl+0x3d/0x1f0 [ 807.846095][T19869] panic+0x71c/0x800 [ 807.846136][T19869] ? __pfx_panic+0x10/0x10 [ 807.846174][T19869] ? irqentry_exit+0x3b/0x90 [ 807.846201][T19869] ? lockdep_hardirqs_on+0x7c/0x110 [ 807.846248][T19869] ? preempt_schedule_thunk+0x16/0x30 [ 807.846284][T19869] ? fbcon_prepare_logo+0xa03/0xc70 [ 807.846320][T19869] ? preempt_schedule_common+0x44/0xc0 [ 807.846368][T19869] ? check_panic_on_warn+0x1f/0xb0 [ 807.846421][T19869] ? fbcon_prepare_logo+0xa03/0xc70 [ 807.846454][T19869] check_panic_on_warn+0xab/0xb0 [ 807.846493][T19869] end_report+0x107/0x170 [ 807.846536][T19869] kasan_report+0xee/0x110 [ 807.846565][T19869] ? fbcon_prepare_logo+0xa03/0xc70 [ 807.846604][T19869] kasan_check_range+0x100/0x1b0 [ 807.846640][T19869] __asan_memcpy+0x23/0x60 [ 807.846681][T19869] fbcon_prepare_logo+0xa03/0xc70 [ 807.846723][T19869] fbcon_init+0xd77/0x1900 [ 807.846758][T19869] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 807.846799][T19869] visual_init+0x31d/0x620 [ 807.846828][T19869] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 807.846869][T19869] store_bind+0x61d/0x760 [ 807.846903][T19869] ? sysfs_file_kobj+0xe4/0x290 [ 807.846949][T19869] ? __pfx_store_bind+0x10/0x10 [ 807.846991][T19869] dev_attr_store+0x58/0x80 [ 807.847025][T19869] ? __pfx_dev_attr_store+0x10/0x10 [ 807.847061][T19869] sysfs_kf_write+0xef/0x150 [ 807.847099][T19869] kernfs_fop_write_iter+0x354/0x510 [ 807.847130][T19869] ? __pfx_sysfs_kf_write+0x10/0x10 [ 807.847168][T19869] vfs_write+0x6c4/0x1150 [ 807.847209][T19869] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 807.847243][T19869] ? __pfx___mutex_lock+0x10/0x10 [ 807.847269][T19869] ? __pfx_vfs_write+0x10/0x10 [ 807.847320][T19869] ksys_write+0x12a/0x250 [ 807.847359][T19869] ? __pfx_ksys_write+0x10/0x10 [ 807.847407][T19869] do_syscall_64+0xcd/0x490 [ 807.847435][T19869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.847462][T19869] RIP: 0033:0x7f966c58e969 [ 807.847482][T19869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.847510][T19869] RSP: 002b:00007f966d456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 807.847537][T19869] RAX: ffffffffffffffda RBX: 00007f966c7b5fa0 RCX: 00007f966c58e969 [ 807.847556][T19869] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 807.847573][T19869] RBP: 00007f966c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 807.847590][T19869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.847607][T19869] R13: 0000000000000000 R14: 00007f966c7b5fa0 R15: 00007ffde1d20a48 [ 807.847634][T19869] [ 807.847945][T19869] Kernel Offset: disabled