last executing test programs: 5m44.978638575s ago: executing program 3 (id=1416): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4831, 0x40eb2, r0, 0x300000000000) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0xa, 0x525, 0x7fffffffffffffff, 0xc0000000000010, 0xffffffffffffffff, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x4, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/platform/dummy_hcd.5/usb6/serial\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x88880, 0x0) lseek$auto(0x3, 0x2, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, [0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00dddf2900f7f576c1ba0ac225ee9cc766c8f4ef00f64b52c575f46b538de701d16a125ae407659c0a0b388ec294511bf653c457321f4912e7c9b97078ce63e21563d3378272ee839abbff6b0864aed6150bdc07", @ANYBLOB="11002d", @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20008094}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x21, 0x1, 0xfffffffc) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) r4 = getsockopt$auto(r1, 0x84, 0x80, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop14/queue/scheduler\x00', 0x448940, 0x0) r5 = userfaultfd$auto(0x1) statx$auto(r5, 0x0, 0x1000, 0x8, 0x0) socket(0xa, 0x3, 0x3b) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000380)="165e948151993ec715d5d2c104008094017cd77ed242d505d40709bf354769941b4e3f7fde86122b27e7564eadc98bc58dcbcc4807a7db896255fabcaa9ce238db575fbb1dfeebbcda9f795e9b626c24c4610f812bd12e740d12f6612bb16ec6d09e3a2b26f9000000004cdbf3d5d8052a68dbc7bf1c609b7fc49efdaf9715fcd7101e4130bfae12d4121db7aa7193b4143665f90000003d96aecc651ce48f70a6b719313edb94fbca07002625ac5c3b7a9f9b98887c79381b6d7e4b6a", 0xbd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) 5m44.235691437s ago: executing program 3 (id=1419): r0 = socket(0x1b, 0x3, 0x76) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xe0742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) shmat$auto(0x42, &(0x7f0000000080)='[@\x00', 0xb84) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x9e090491, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xfffffffffffff000, 0xb97) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x200, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub4/info\x00', 0xa0000, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xeffb}, 0x3) 5m40.868777708s ago: executing program 3 (id=1426): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) getsockopt$auto_SO_PEERSEC(0xffffffffffffffff, 0x200, 0x1f, &(0x7f0000000040)='+\xf0[+%:\x00', &(0x7f0000000080)=0x1db) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0xff, 0x9, 0x4, 0xfffffffd, 0x40000007, 0x3, 0xffffffffffffffff, [0xfffffff6, 0x9, 0x4], {0xf7ffff80, 0x9, 0xe, 0xb831, 0x0, 0x2, 0x3, 0xc, 0x2}, {0x9, 0xa, 0x8, 0x1, 0xa, 0x0, 0x4, 0x100006, 0xf}}) r0 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000380)={&(0x7f0000000180), 0xf}, 0x2e, 0x0, 0x7, 0x1083}, 0x1e24}, 0x2, 0x5) 5m40.621022967s ago: executing program 3 (id=1427): prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x0, 0x1e9ab0ae, 0x573e680, 0x7159cb6a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) geteuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf25021b000004000180200001801c002f8014004200fe800046b3e1dc74a01ba400000000aa0400f780fb5782110a70b4d5c44b284d3478e86fcc9b4bf2d4e119d12698c014018fdcfc8a6773950c528ffcc0457aceec252126cb57fb5e93eff48cd1027843f5ae529899b4340cd3760abc4b5ce0b4b8ebd4913041e31e45bfc4d34f7d115b9b4ba8c922288d2e35a4f16460e0b62c172a2cfe1ec3da2f904fd2e7909cd6f9f05ccd06f72c3bb61e9a8f4593e20daa7d98459679f6b940d0edb912d0a8b8e53a33a9c014c60012057cf1ae46cc1da8a60f91c763d37f9c9ded02cb8dc1fb2f3b811f8a577735bd8dc884e5e292b000c358ab28f8c15ceaf6e9df9b"], 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/clockevents/broadcast/current_device\x00', 0x181400, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0x11, 0x0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'pim6reg1\x00'}) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r6, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r7, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc050}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec18\x00', 0x0, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x101000, 0x0) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 5m40.03410019s ago: executing program 3 (id=1429): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x88900, 0x0) readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1c/xrun_debug\x00', 0x8f3b7a51b8162d21, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40942, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x0, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x300, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) 5m38.744103332s ago: executing program 3 (id=1434): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x400404, 0xe3, 0x9b72, 0x2, 0x80000001) read$auto(0xffffffffffffffff, 0x0, 0x80000000006) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0x200008, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000440)={{0x4}, {0x3, 0x6}, 0x8, 0x8000000000000000, 0xf0d, 0x4, 0xd95, 0x0, 0x100000001, 0xfffffffffffff9c7, 0x8000000, 0x0, 0x1, 0x4, 0xf34f, 0x3}) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r4, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x6) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000440)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x4, 0x40003, 0x15f4da0a, 0x3, 0x400000040000003, 0x200000003, 0x2, 0x1, 0x3, 0x100, 0x2, 0x6]}, 0x0) 5m23.531993119s ago: executing program 32 (id=1434): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x400404, 0xe3, 0x9b72, 0x2, 0x80000001) read$auto(0xffffffffffffffff, 0x0, 0x80000000006) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0x200008, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000440)={{0x4}, {0x3, 0x6}, 0x8, 0x8000000000000000, 0xf0d, 0x4, 0xd95, 0x0, 0x100000001, 0xfffffffffffff9c7, 0x8000000, 0x0, 0x1, 0x4, 0xf34f, 0x3}) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r4, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x6) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000440)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x4, 0x40003, 0x15f4da0a, 0x3, 0x400000040000003, 0x200000003, 0x2, 0x1, 0x3, 0x100, 0x2, 0x6]}, 0x0) 24.715813798s ago: executing program 0 (id=2335): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="9ab50f4ecf847be05f351e6488b61b974daa95047bb74b315eed6dca52dbdae0242fcfb571a66c97616937dd93b97753a5af8eadde84d075a946b81cdc6c72bd40aad677442d78a9994343e93dbf7822b41297f10050e625de61812235419b61ca6e1cf512102bf572750799aa3964739a05ea21d618836df2cf96ebcc6d292f0545e1eb5e66f83ca5b02974f6e1cd2acedee5d3b4ffdafe41befaaf1e517f633ea0e3d67782d4189bdf2c6a65f72859659a9ab103b7813b1630bb6f2fb4863586abb50472130ea12c4b4aba1e6bc7bac83382aa3bba6fc507788cd0b19beec49ae5b89b5a91aa0048f0d058daad9b1f0a396c35595d66e0ca73bd85830896d61370d97956eed87e06c4199bb2afa4338793b007e67835158c000971ca880dc7ee66113cf14495b0f4339cef5ac32c775d7db142f0a63d7fe953177f2ef74fbe6791a0dbbeddb2060899962e8a45a9fa8f07c39e260873330d84b00875d18b79e1c773918de40b9d457e92aa8cb305e4d88c10e8e27e7452362269216617b6688155473a8ce9850ba6627d1dc13f6b12679cb1a2c292ec5f4179b5f3b3375ad86b07e9d0ce7b00aa9ed5ca064645dc63be31d980f23257e30f76da5b7c7b9288b1f9201526113dc5a1bb6868da8c4097911a19863753cab06714d88848a93cfb183d2fc04ef62292aca7030578e9deb86077d38502dffc31e5eba12846f302793061d70cd92f6e8dcea38a4d51e9d96e20e49b70fab676aa1e69ce4ad9350001eaa3dd7f9af5aedf664876fe6fdac17799b2046f62fe5052ed5f3408fe2f1c716e9e9a1f5ba039a39db432c6dab2ec3a720a0415baca171e6e611c14bb511444af9e559223a1e9d2692ce839be9168d82477cbef48d915698ab249e58667942914a841828f4e15d5bb6d00fddbdd6b5b170f0326be5d5e2f515e7e5a8933fcacbd3d14f5d03a3b85a28462f3b22c5a0fea03f8ea21b5a0de0b1ff8ff47e2a6a7d2da26ec901d27ca5816108494e1ee2d8e9c1af62daa7e2f9437a735d504bb46dd720578ed308f70609188ce6a15d30bd9fe10e4c028f46450a7572256f84d1d59444e4a08d6f79811115506206e4d6714cb12dac45a6a85be8913ba01d71e5f19d6e90d830958a3f56923edb5a0efc8346d4d193a0abbb658f219279a5d9f5c5d524e5f000cfe9943beb70eb5994e26aadbd3f47dc18003165b39b5cf718900ab4b845a0493481ee388fccfc460859bd85fa63c0b58b775d3729db3c1cc58573e36b3bd33dd890a9d26a2a3a8b2def1a7c6eb3129cdceff29d3ec2ff52b9bd2ecb7ebc103706366c9e88c089f332d8bb380dc3afe436e490a538cd8c43ea63bd65e9486ce2c52e55d9eca84b24cc77f33e2c3096a04705dedc238779c4a497082d6d6a7dfb3b5259112546874411622e28e15c70ad98fd1e916843b06c4ee3f13c3cfdf5fc0d393391bad9d68335c0b4e32c4407c60ba070eeb6dd282b2f7ff6134e039eb011f0b4026f2ed46426fb07a335c21614dbabfb7cef26b96f29b0805642e9b0f5d9c675d5cf89111791600d330d8503efd3ee384e5e7fe02b8137f8881e8ac23eb4f4fa6a1a88a9fa8dfa9e446bb7f117a3d6687b2d2d505c461703eb5df4032b9371ebe49710c8e8244f10943a516bb84307769d12ea0d2c5244d8f41e646d162706cb35b9ac6e2e1650eddf1cca58c1a8fd2c8e6fc485ab478dd2a0913ffdce715d775f38c4b692d16cab3a24edc5fe496dc98a68451eb4776db277465525780d92bcaeebf145408a6607f86fc94043ee30683106cde9c71edd460f783e602465f32554c09376860d3d9420badf095ff9fdfb3311af5800eda2ee5741e555ea42b121d1f7001b471df869b7b2b0de36a31b443e75bc8f101884c227fab4951f0bd1b503f9d5c816afe75061648eec404c1ed0eb57e4f8a5e966f45227be127369550f5daec076d5020274a9a5bac078e700dd9b95ba961be08f97fcd543f88691e32d0aa9f8776f58c96de8cce194aee6f9010d7710b692ddfa24457a3a623b91d743521dfe43a21ecce2863356308526687c7ed1169386be11059614cd138d439725ac4b5c0a9e04f503dd1461e57935de94a12a64d18c1845500665f81bae9ef33033a4a2d04ca381da212a68e1f267f03ffb71db53ff0da93176b47ff0568a5acee10190c12c9fda1543c318229708f6985e224ce750e9ca937d6927c1de7e5fd7e7db6cd42478e0d11a97e8959ce0118d556960d4cfde1625c72220ac1988fc3c69850d00a08246bda3846b623e0c1a731d47ba3216fa91139d5f5a8af9897fb08bc53e682e669e4a20962f841e13da43b62ad6eba654f815c2ad347ae279ab134cca6a1ebd06e822cdceeb58d4329d501c216357a12fd92fa0c27de77e756cdec09698284802eb2d21ca7e1a3619da2591c1fe29d4da0744f1110594f57a20c286f78b1111814c55715e05e4c753bc0242c9abb850b508e061c1179d88fb11b33bb1f34d05cb38e99a57d1a06ea61590431db1cf22817c85f885978f08f92335e997eff96a5feb784e410d41a953a6d92eb5973c08aa728ab673c0e693f47055c112d8efc8bd84f4c85b2f160b4c47da302cfa214b822b68276fbd50933facc06956aea16f35e61e859072749a49f13d33376ec41f7dc85625e1e48fc821317f43b0be304f448eb1de7c68ba84e774a2d22b1d3f55c144f59c15fc19c6df45ac3ac6461df9aebebfc8738b7b2e0dbdd99909498a3741d9101d82540a64b5e7a149e1f98a0788704a843faece338d465826b58f3e11aef73d44efdce1739b1927c45248d32be74ea0fabbe17e7c0657cc68419d96f19119493ab5569c86aa80b6bc4b410b011a12e1ad5365c674720c2f2a4c78962affef7e63c4ca0d4235f977ae416153edef6402b95ec61cb561759217002b66a78b65819d1b649a85308943148ac025410dbe4f9f18694a1c7289118035f454f81e1d9b6ab076ddb50e8c7b8ed2fd36d4dd6c5c928041afc8936fa83244aa9dbf08676cc30580d8fee518e24ed4089b63f9930c194e048b88cec98f9190a81f1a09e80c2af63e4738d4bf6c8e4eff41a846a25f8d74ab88f9d85c9b059bab15fc1fc485e1f92fa4f41a3a275e9609ea0c7dff7c9488f482067f38f4e8f424007498ac1da9eeba9857b34dc21d552dada4aff917d37463fb054ddedf52ab3def2813fd115e3f36c3f82719a486d2605aadd9c3e708261e2acf13fa9cd81fa2f23aea49b3a42b3ad43bd140ccb5c274c099062d1148d1def0171c5b8b49ac6b462de5246523cee3bb96d6340c8992114ce7f3d0d6ef92f02bfe3142dc1cc03310ea49fe1000b6a5e2353e25b4d373830a2030f7a7f33c60d583ca9ecf9930a22fb8415364d22a1f5aa8ebd95930123e04edaa80b5bdd0473a2c95be3797d6100145d674498fea24a87009149aa27a7060ccaf0ea0675a0c498370beff8978604ac3d3aec9cf3ad53ec8a698c5e1a44d0a4be22e5a16547db9eef5577d6ecd5a2967c4d4255e8908ccb347fe7cb5a7246345035a7a8a12993f8fdc661ffd3a84736ee9a5852dcf8e3aca4afa19a598c9379dd6d3c594e9aa54c1b5f0a2add05c979c76f9d1796c2072e0a6b5348ec199aa7abb34cde352f97e61823977723500867f803371f115c3528b30442fdd828f872d7c962f21053d6fb1fea2ac4e273902edf14d1b9c362f76c67ee7ff175ddb443afd3bab63767d2a64416d50015c09ae0a0faf5b6cbd39a31b7d324d110a84800f2c541cb39836c4cc2e7de0596b78e580533c1dc1126acc7aa5e8d2c2680b511ef4160351e924411b092a94c0a6df787eea3a6960ee27c1480ffc3dd286af35183020315a00ea9dc2384edb0a9c420c12a35ef16fa73d6caf07d796416768be12fad0fd636304918b7cc7901d5db64e6d3d1f7560b859c2044f38e46eec7c2cca01492309c948880326e60fb540bec547626cb5ceb48eae7f0bdd5f38b7ca69159bf39e5a6dee36f2199bae38a2d21e3316c8debcadfb4121af4446cc9fe2a536689816f66510d8906a1f96db1b71a7ab1a9de45e67d93586db93397eae71e6eca1e84531ba50ee9ab11bc01eba40063e74b0efd6ae4ab90bb50e2312861c92b43720e83d3bad50bf66f87be98c40b275339177dba753ddab002b07827ab860e9613a1bb0c13e690dbd71f5a30578e5ab1d1426ca07cb698f30cdfe1853a10fa976822da5c1b3ab8bd6df956e74a667867b94f26b696b9379ab818eed48a13fa6a3590cc1b6e159f25d3f7f7c5178ae84974460d7880b84aa90077a0a8dce82fd6bed76df7cf1dd42b33ec26cdf374ff068db186ddf08112eabfcd7b3f25afaa765bc831a3c7e7d93d6794c2c92d1223de9b15217632aa17ee09651556d0617219d9142f155dd8b1d87cf31715113519edbfdc5d6849feb239a73b53f94430f8e7ee022cdf8cc9aeb877e4109db461e6dd68351a1522d41854ff59a91b854cab163329442c01cbc3b352c8068131c8c22f7b9220e009e3890f396d5fe69137e2f0b52b27d190705cc4dac692ebb7d9662268cc641d03804d7f5bc99437e49a3e2e6b8879d37322faaec90df4a1201bb1f58d1eedadf74df18be13e0aff304b583da98589aa22e27b1f78beaea663e3182d2b12a2f3c835c0feb3001d787b297a2aaaaa649fbd9269dc534c810ea064d6d27d54e54f73e39ed4ef101491c144f7010aa2519587cda497d770763f60e6d9df6672c3a47991d757b7ccaa38550f42d0ed724b52c04a61e3670a3af1bab73543112f20b4b17e1ca567c2e2dfd8ded52e80ef79f2f0ca312099a2905ee699a61eb34aee75c974ba6c8e6b6f8d4346baa5164edbf9f892f5b20fe2e4d63d697e17a41ff323e114e5b8f8bf9204ac842e4cb0eaf872ed92e92a09a61e17010be88bcffa11a464e9dd15f772b17a0a26a384a6bbe80a2bed2c5f3c5db439384781893c68f35e7f04dd4b90fb35566b4b5e230410f2a88302436113a0d7ce0a589e9155273ffee7fc927dd0f1e5592c727a2bcfe61eb5d95811981d0d307406d5da4c6c164be156558675bc34d2bb1e9bfb3ff557b101892ba10bce45f85ff739acb1513058e74ebf675dafc64501525b510f70338d31ba19b7ab4eae92c2c33d59b616fbeacb0b0af4615a08b316d9ea8ef31b7e27f0d286aa4f918d8fd553d8e463df06cd6a7303b5f0ee14e2b60e910f02e7e4eeb55ca3b1210050359d9f662556ba38c50ea31080fe172438b438af83572cd33451fb92ec62ab10d4a439c571ee290d524270a0cc90665c9f6347f9f3d78efcda9e6e13a255f9080f66dbf0030cb9c1d10ade44412bb9e5783a86e35eb5b28095f52942b83013967d661e2e7bd9b525f1fb8b0d127dce73876805ed4954bd7cf9cf6f43c06c4463dc9d339394e2f83304223627d76d61b245140f440446d4e6eabe0450034f82b1d6f2d6d090895de305a84e7bb7824ad84429aa50775536dbda7bcacadfe01b5d6ca8e46b897c21122655677a176bab6b260deb3d6803607b9aa85d74e748aedc17537bb0bd0b4800cd9ad3705b9960a61f501a4bdaee05309c5537189a8d616554429de7717674aa88674733fb68eeab898aade23712c8058a855904f4e7085115f36b6df394864d88e6cf183753248eefad820ff3f1dda2ff430da2c16633f7bb86fced18a6217c71a412287f31c1699553ad9695195a95baca9cd3f6510d9dbcb5a404fb02d4a6a476090ffab0efa6") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="030727bd7000ff"], 0x14}, 0x1, 0x0, 0x60000000, 0x985}, 0x4) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) ioperm$auto(0x2, 0x6, 0x8) 23.661748153s ago: executing program 0 (id=2337): socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/user_power\x00', 0x60a40, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x2, 0xd, 0x9, 0x948b, 0x8, 0x15f4da0a, 0x2, 0x3, 0x62, 0x80000005, 0xa, 0x5, 0xd, 0xfffffffffffffffd, 0xd]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2000000000006]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) pipe2$auto(0x0, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r1, &(0x7f0000000240)='!', 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 22.602195384s ago: executing program 0 (id=2339): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x6b) 22.286727281s ago: executing program 0 (id=2340): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0x56a, &(0x7f00000001c0)='*]-,\x00', &(0x7f0000000200)="7c99fc0e6a0eb31fb80188e4620264f53255bc6282f9bd47a810b41a81c2680960a2aa0e27172f49a2bde1666a81332e1402a25b427f0281e6aed5be20", 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x4, 0x6, 0x0) r6 = socket(0xa, 0x3, 0xff) getpeername$auto(0x3, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000002e036dafcc82ab888fc4b817266bdc6fbc327d00b0e76d62df417bca48b44e9798a82c2cdada9a1808ddaf73c340544376d7f9db4e20de59868f145c45773ce0a7ee0a3500a494fb720f8f7221f8b1d5f2969ca2e9e8793cacc6426e721d155dbfa8b94d27a081d3d9d9b5", @ANYRES64, @ANYBLOB="050326bd7000fcdbdf251f000000050004000900000008000200010000000800030004000000050006000e000000"], 0x34}, 0x1, 0x0, 0x0, 0x34044040}, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth0_vlan/drop_unicast_in_l2_multicast\x00', 0x16901, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioprio_set$auto(0x80000, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r5, 0x0, 0x7, 0x8000000000008000) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:00.0/enable\x00', 0x18b042, 0x0) mprotect$auto(0x1ffff000, 0xffffffffffffffff, 0xd) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), r6) 19.177961934s ago: executing program 0 (id=2344): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004600)={0x2050, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2038, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x202d, 0x4, 0x0, 0x1, [@generic="fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4c52d520334c57c56a5fe9358c7a8b45d2c39492577b0c60cedaffccee1b2ebd9a11ad0eab4d390826b494ea05d6578176f70cd9cfc566abf6d1329a68a6a6fc28a2e2c669c39ce8", @nested={0x1f70, 0x122, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x5ae3693d}, @typed={0x4, 0x3b}, @nested={0x1f5c, 0x8b, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@local}, @nested={0x1f48, 0xbc, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x4}, @nested={0x1f1a, 0x98, 0x0, 0x1, [@generic, @nested={0x4, 0x142}, @nested={0x1e68, 0x4f, 0x0, 0x1, [@nested={0x1e64, 0xeb, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @uid}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8}, @generic="ae479b08e6bd0a254417457c996cf26cec9968bb79193b55", @nested={0x115c, 0xe6, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x13d, 0x0, 0x0, @uid}, @generic="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", @generic="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"]}, @nested={0xcd8, 0x4, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @fd}, @nested={0x4, 0x33}, @generic="60459644219488b0fc8609458320c80a5d6689ba38586d0717f34dd72e6eb9c640", @nested={0x4, 0x13}, @typed={0x8, 0x63, 0x0, 0x0, @fd}, @generic="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"]}]}]}, @typed={0xf, 0x13b, 0x0, 0x0, @str='/dev/vbi12\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @pid}, @generic, @generic="548d10ff813c12384a1695503744c2c6e8e73c8917b403c82ae0f73574df954c08528206aceda4aa913194d8234526a356c6010d917ca2a4357ba1b76fc577f94042691e5cfbe9bda43d6ba8fa55eeabb51771b1f047da89442ac8d4b7fa95d66ed58575bbf1dad9167662932fa21515acb7a947eeeae5f968208870aaaa33d39ca7cb284b840f3af0223f47e14316f2045e"]}, @nested={0x10, 0xae, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x4, 0xd0}, @nested={0x4, 0x123}]}]}, @generic]}]}]}]}]}, 0x2050}, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r1, 0x251) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000118, 0x400, 0x2}]}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x560d, 0x38) socket(0x2b, 0x801, 0x100) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r5, r5, 0x0, 0x10000800000003) socket(0x2, 0x801, 0x100) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) preadv$auto(r6, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x2000003f, 0x4, 0x1}) 14.381342721s ago: executing program 0 (id=2352): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x60a40, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x2, 0xd, 0x9, 0x948b, 0x8, 0x15f4da0a, 0x2, 0x3, 0x62, 0x80000005, 0xa, 0x5, 0xd, 0xfffffffffffffffd, 0xd]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2000000000006]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) pipe2$auto(0x0, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r1, &(0x7f0000000240)='!', 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 10.958167947s ago: executing program 2 (id=2360): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) fcntl$auto_F_SET_RW_HINT(r2, 0x40c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1f0, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_ASSOCIATIONS={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1d3, 0x2e, 0x0, 0x1, [@generic="c2f54637f73aac129034b1f041c80f9f744f3d777826cd2122dd2663507b5da3df", @generic="d84ae433dbf215fc6357d04d2a45877c02555123b6e1cdabcc0cbe36c9e712fb43a0de4a2071c2dc810ba3216b3e775adc4d4f02463ba0681892dfa34ba1fb2504532fe9", @nested={0x14, 0xd3, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @uid}, @nested={0x4, 0x1d8a}, @nested={0x4, 0x95}]}, @nested={0xc4, 0x3e, 0x0, 0x1, [@nested={0x4, 0x86}, @nested={0x4, 0xe4}, @nested={0x4, 0x1d}, @nested={0x4, 0xd0}, @nested={0x4, 0x40}, @generic="b8ae3b2f48645f5cc59ea89b73b425ff6307fefbabed180dc8c44f9dbdd9e7c4a2dfd3ddbe9239adaf8d0beb20043c75c3723059a10e46ab779b57494ec4426c23d8f954e665b97f3eece2a3fade43ece2048a096d0bc5e8d56d0895dfdfb428fe65fed4613e64728ab340d5baa3360746bbe6eb9837febcbb4ed077e30dd14b70453c076181af30a4d43e31c8cac45573f9ca5a", @nested={0x4, 0x41}, @typed={0x14, 0xe8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @generic="29df6c203ab7f77664d7b9fa9d8a1909f434af60d87e299311475e81557cddbe39b40766bbf4694c89bed1b7ae33494cf5ba6422749870da0b4a351de978f715beed62c9cc42762a3c58e0c25c2001593939ff0908ecb3a86f32817fa2c50cebef11c9de5f0043d4f6d24ce9bbd94c0014aa35efe8674fe013e35d63905bb6b82c2c9c42ed90cbe85d34ca5a6764d7614f53"]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x48054) 6.863974375s ago: executing program 1 (id=2364): close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x155) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyye\x00', 0x101142, 0x0) ioctl$auto(0x3, 0x541a, r3) 6.863723485s ago: executing program 4 (id=2365): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004600)={0x2050, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2038, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x202d, 0x4, 0x0, 0x1, [@generic="fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4c52d520334c57c56a5fe9358c7a8b45d2c39492577b0c60cedaffccee1b2ebd9a11ad0eab4d390826b494ea05d6578176f70cd9cfc566abf6d1329a68a6a6fc28a2e2c669c39ce8", @nested={0x1f70, 0x122, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x5ae3693d}, @typed={0x4, 0x3b}, @nested={0x1f5c, 0x8b, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@local}, @nested={0x1f48, 0xbc, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x4}, @nested={0x1f1a, 0x98, 0x0, 0x1, [@generic, @nested={0x4, 0x142}, @nested={0x1e68, 0x4f, 0x0, 0x1, [@nested={0x1e64, 0xeb, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @uid}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8}, @generic="ae479b08e6bd0a254417457c996cf26cec9968bb79193b55", @nested={0x115c, 0xe6, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x13d, 0x0, 0x0, @uid}, @generic="7088381fc88b04772f89d9656437ffa164876983f8264375e097044179eca25008878f28f7aa68de23722aad203d6869b2052e4053c67054feed9810eef1a065a22f2a2e1c27eaa2f2d18f32af48a7cc6860581ab33d385ae42abdbac47f4ac4169e65c197a2c89d39983d786f081ee78096ae6e18f2f8cc40fe8c7115728042962a18775418a8c584568104f5d37e0445ec31ca30dbdf5bb5490c3337bdfd47cc159db08f283af4c36f973d7ed19e027a6019dc6a49eaf759eb50f73b5162aba513d10e9a0dd61b597531192bb03a27e0dcc0bb24846b9bd3e33432fd2b585f613f67aba3f9e82c47ce20c5b27a82201bde79c58eb7afda692d4d6dc1e56e5824c9b73a746ffe13708146463f3b78ec98f6b6f419844ae2aff60c54cb80fa0aa0c3ce9c3707a30ff9d95e0fb7ef124e381364ef2184429fdeca08ca7a6f10d507a32427a440a1d145804d49af59feca0325fceb00cf8e1d314df6b88730719af6f2811dd6d2176760d8d6e3dae095f46c728e533643db37eccb131e881492668142afb38a6e53d53c1471a93a3b07200d59abf78135b5a9ac23d4925b457fbd0d586daa7bb820b6651d3f61365a8d0f06b772581d4452f6bdf0b87bf9d6da1c01a2dd02ee797fc33fb3bb46df11f521d783ff2e3d4556d78357f2e750ad6b37072e340223b69309bfa445f32bf6691393a084111d7245e07ccabc0675636e9ec5ee4d0cd50b60393a0dcc64659838cf4bd5a2170e56321ea2d403036e308b64ff90aa540b2408e5c3a425589c9c3c2e87d192ddcd503cd50bef9c8baef6bfd6e9fe68749bc47819b3ffaa71ca3fe6fa95119c52197508a33a69cef7f27c486f523b44c4760446bea70ab35bef87d1d6225f7579441a47f7fe65194fd07d319e7cfb9b86fd9e21ffa91679345cf07d446caf830379fac352c3d525609bdaa0a94f3888c81e6bd7a77a3b5583da0211e81e667321e7b41304e023d803e1801fa4ad6b7809fae6e28b8efa68278417be5ab3af10f5f4e745c0c1cb25d1b960538b4beffb5347e60adb2e055ce8bacfb2b12439f865de02124853cbd77db1283e35283050143a5867094f14073bd81465e9fedecab856c003b9258a0507b6c844dde31ce33c24e4718b93d4ed2eb4a8586b40c04cced977bfdbc9f8d62284f4fb9d6eef7c35d7b67c84a32bb54e063016dbb463c4f62b4b9fe247016c6c5638980bc34c4b11c11789782480b00e336a69e16508305d49c1e7f5b4b45e7fdcea917299f0fbad81e82941d15d74d13ee2cb69b1e1ebbc0a403e00c9b1e0f3a36dc585e890d727431acc08d2101fd4b99aa5a4ce4b238897ac8909f571f3ddb44c9d07db9f8449f3ff1b74ddb607b2e476748b163cbeaf4cd61dce57a119f13b167e3f9d63629a6448bd81d432755f0cc08060e5f7e67d89fd8fb7fe0297b72d3a8cbf0992e3741efeb97866922d0dd73e3844ec9a896e598c4e24f907900011b230668bdce1b931d683426ce0d1e418ace91b61e24b21817bbbf4e286bb3edc20e05f9a75c36f856c817f7f0eeb0219ed088e3ef3009aa81d96f94e5f322ab274cfdcc9026f9a018b85d9ef1366d2058e08e3e066645a67f3362b4d28841e3fbecf69710f5d3b8251a6aa99d90dfb1b181819432ccec9fdbebd34306de823c7feb8b56819558680835af2ff7423ab3289675b9684e2f19d4bbe0772a10711500209f8e01210998dde6a3113a8cce3648622bf675018c9633bf71ad9f706d7301515f086b2c2bc4e6ed5c7e4d0d675e2b95aeaef2066db95279a8057fa93113aad69cf996dc004e961a40af2548672ba3f22ab267db3cb2831039a9c3e960e8ef6e2e6af65a483553c18dc1f622f1418cf0de4169bd1d6a17796450e92b28a446c38350a5d3693078c56eafa3e6f760d8ed1059992daa17298b5d44a578b9c2a572331bf8e073af20f27e60d569a0b3e175dcdba94bbc65b0444aa64f51a1d9a496cebffc4a2883ed97fc9ff3a5639c7972a0f29bdde36b3412d6fa370fc91f017b68709c061a57f7a426160e5bcee53ddd96d182c1080d22065a1f36ce179e4ca942ba8e295a30926c4e38722b03b7cbae36f001070595b74d41fe57228a8cdf6f8bcb062fd9ab18d7cc8774ec844bafb7fc7d2716ecdfc8d6e9f79c5c379e2a83e437ac748a9f661306d9076ce4cabdf52381bbcf658b1726a997be6313abe5847fd4aaac7a7cb44a5e051a3f17a850381f9226e15f05a720a707e38546b2b960faa477835361e5ef86a7783f1bf4bc5cd1d2df1dabf90974355ec91f69db09a4edb977c06f89f2b101c67776462db639b10cc49fd61c7403321ed9e56acbe6f7ee8a99b4eed9cde47b18b35da33c98464cece4be62404face6150bb793359a8f7c485ec2d64a334c0ad7e8e73157ef9a6f47a095a09c3167391c193106e6222b9a27088c6120b57fa55b45a3ee608ecae75910c3dfd963f52110b0c41eff94b23547f5e4cf2ab021e6df9f26e43c0e60f3be87e2cfb586fc2ad3560718f4273b1e7e127f8ef50577f6e139c70f6024903d5c75cb9e5f5b568a30e98881f4eb5d7324b2c5583361ca37e4247ca95c0e118ae4e63742be2c25f7fd8577b21909af407abe52a635f2f3aef4054ae36248680ffcbad54ca5eb8de50640a952b6cb594668bedf6c42134a136a97203b1dcd34574584b482f2aa2c5ac5afd86f359be494b7570cc529de01d53841db26e7ccb5394837b72ef64322455433dc01f9f01b96f2b04deedb05ae4c8a0bf3186c22aae90575f8e9ffc59090b040a2b9e6ca22a658281444c18eafc81e75c9e4e86c0f074372c4e211750025e4acf77d93074d8ad3a33957bd61509524c62460986245b4c115e95ff34d972c1def5835f5b766d18fb4a24ac759bd02293f24ec46d1ce1ca14f1a7ca10b5f873daf51554c19775abb85dffc20cb998f0c5bed305d93124d843bb85b1f70a3b89f16af0988cb89ec8114cfd25b85f8ad6cda09c361d1062c6781ab227f1cdcfb3b403ce90de63c9fbc714574b2c8e256fc73357400abfedb0228145a7368bce1d1ddbacc20a24d0901f1ff21373d08316504c780bf6dab86bb98b6026c5a7509c8cd888de058c769a0db9b1904d5d9d9cd934fd0be46c1fe66006c46e84f4b0d059975ce1211006450d5e582dca0c757083696c070108b2f6ae80e30c8c4c0bea1f3e085cbe04a899108519eb005e028d942502415e9542a6f820579975a577590dc5959fb17ee9e0393ec23934f586f050510b0258016ae7225554e7c2e82c91b5a360b1e727be5253db03b3220a0badcd19db1e416f0d07b7f55b96015ecba3fd07aecd50fc86a4378fae31b31678347b60aeb07e9bf487473d4755957a0cc0363e30dfa9cff743ed7009027e703ce35025fad0dae238915780f94c00953134074f52a5f5e1f138dc78047bc3da0a1164e7706da422d21ff3944ad4d5d24f5b6ecb6e08a6eae26350e3efbf56ff9790f13a0fad64858b424862840f492cad02a66e606ac079d2aad456cae5a3262a59435d4839b467855e91558d83cf90b9d06d095cc6c54a5327667bd280edaaa08f07d2ad852811992c1582747d1d24b445cb5444a24217046eabd70e08f45a6d18193e4c57ca5f0e4140c7debe933d018afa7cf078a48366ed6967a26dd2bf6a14ee54f2e771d79bf67ea2fd1b042469567c45f20b92191c483b4d7031ac0ab01705431034f1ac499802cc8fe30a25d8572affbf0927ecb4f0d26ce9bcf0669d9fb385039efb8b9a0c34953b19b877e316d8667abb684f8df1ee574206069885f7f3da552bd71aba35f46229fb86ff63fb7c557ffc2542ebe46bf0ba033460a91cfc0a018b1808b05a7e030ae08d26b34c94bfcaed112e8152569fadb19e6f9b7535feaf6a29ae29f52b19fe017172434734f020525d85f7a57e8369005353a6091de51452a07db60db3c7a297283d472d6890b1b2119faca7e5c613c2dbbbc08d7ac860280f62fe65746f4592fca42bc7af75206e68d0a51c9f99f5a8ca09ad84f46783f180567a156d4c742fbadda98a53f6b1b0ec1971ac7b978dfe7906b2fd7b7f8650a0d5bf156992e6e6d72363bedc9be3c2b3db8c83d7c406c3d9911629a93602180b92d4d6462653aca51df753421336ebc6baddede738495e24c424b12fb484bb2a765745e649ee4364d13c82fea1a8a5285dbff1c4a293dd12fe34df5b2b06fe981aca3321b2464f7e4021df5b2de9ab5b104b9ecb87058950c90903718e90a5d04abfd8d350ebad46d0a3a3c487a4a54c1ae6056d2f95c2db7b83a72fa55dc47530a4eb39c9583ed3a2ae15d48beebb3d82e107f0a287f997bfce3867773e15389de1f5096ad65cef89bd67fcdb3221a2e20cd3bc3e55e9b827fe6e25f8aed5d5ed2f36722c1cc53983da1b8d502d493cd47ee19140cd61d95b6db15c007cdac28546862ef015ab222e4c7d52bf22c968a5446aed779bdb41453c7dfc29f3ad22c21ccd4bb5829900da1c11a599aea79c727f3d3ee894266b1031e5a735fba7c361b05b8fe4534d838d1aa1f722bf17d447be9292577b9a4e14e842c60fd6995272f5c1be53869e02ea555fdf1b352deb4c0a9c9f0b6f36b51bdfd4655fcbe436f51d803307a1be0034e0e169eb4af8f55d3bae301556f146cbc7977e19b37bc00650da67962b1bc13f7700fdafa28307611410dbf3cc8c9f7cbeaa1fd61707c3eedd5f0afb82151f4a0c63f832654f43b9ef3894b61b74cc8bfef266ab455bcfcbd738ecba40c65cfb6f335f454b0c5bcd93aebadb2d6f18e08df701a2a3cec7f2e131a833d7f69e2088d5420db38d796f2c2b4d42b3f066e3bbc745b3e8312b670bb8da3309987f6c0cebf21d975b7ec7debc66405d4da2ae5e1078298a2ffd1687ed8ab2174e03159a84dc59e5e7c1340e2cf31de2cd54358b95207d7260ed945d2724793d53beb2d3c5dea9d18975dff5cd86c4175f301913fe95e13340c0bf2350c2f3b71453ad6f22e89b4a929f14e204b97c66c58225e61095eea7756f4ca321f71f59bac3824ec63826bfdbd97ff8147dfb733d1af61fd22b03ad3b9dd19435c321434bccc05c1ad8098272180f8ca9e71085d3df284e7df288d735990392c288806361446f2ec37a0a519276b6d14467827d1b42dfa39ed8bc09c03c00b8cc7812190111c6f56183ef5de051a8f9d2d3302c6fb66d59ef4c8023ec2a5b643596239fa27a234bb8a278d48b13373ac7f72f1cc2bf7edb31e4a1f36c49aefe50e9820596d17cc9ec60a673c6037cf7192d5813f1a970c6f7855933a86c07bb3d1d08c805fba1b3de554246db0631ff4a9ec0557f98fb2fcfeed157f34c92ac4182085d183a4c2ab9984388cfb240fd61385619232485931758e3430df44f6f72e90dcae9539cc6dd3255057cbc2dde367873b9a7cfabc515d50fc0124ecf40b668039a76277055feed60319887a86d33413258f867ac95c179a4eeb968358fc0b189ce8507bf0ab8693c81cc92d5b1c3d8de72aa2d0c07acdd2d851199c69038db939e3f5bb9e0a14d7b401021501094c0459eb97dd07114389af721ce2e0803ce56454cbac2d05122b1d067a61a93f8ecb2986b2d7816b164e8d4a456eb6f278237f678be2fb13a762fae4e3adc5db82b17f21e765e74ca8f04753ab9e5aea04c054eb2113146080538e6ad179933087fd0f92ee9b768f8913e74714311e9d97da858d5eba4e622ed852dd6bb2a4e12", @generic="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"]}, @nested={0xcd8, 0x4, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @fd}, @nested={0x4, 0x33}, @generic="60459644219488b0fc8609458320c80a5d6689ba38586d0717f34dd72e6eb9c640", @nested={0x4, 0x13}, @typed={0x8, 0x63, 0x0, 0x0, @fd}, @generic="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"]}]}]}, @typed={0xf, 0x13b, 0x0, 0x0, @str='/dev/vbi12\x00'}, @typed={0x8, 0x8c, 0x0, 0x0, @pid}, @generic, @generic="548d10ff813c12384a1695503744c2c6e8e73c8917b403c82ae0f73574df954c08528206aceda4aa913194d8234526a356c6010d917ca2a4357ba1b76fc577f94042691e5cfbe9bda43d6ba8fa55eeabb51771b1f047da89442ac8d4b7fa95d66ed58575bbf1dad9167662932fa21515acb7a947eeeae5f968208870aaaa33d39ca7cb284b840f3af0223f47e14316f2045e"]}, @nested={0x10, 0xae, 0x0, 0x1, [@nested={0x4, 0x10c}, @nested={0x4, 0xd0}, @nested={0x4, 0x123}]}]}, @generic]}]}]}]}]}, 0x2050}, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r1, 0x251) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000118, 0x400, 0x2}]}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x560d, 0x38) socket(0x2b, 0x801, 0x100) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r5, r5, 0x0, 0x10000800000003) socket(0x2, 0x801, 0x100) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) preadv$auto(r6, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x2000003f, 0x4, 0x1}) 5.961573541s ago: executing program 2 (id=2366): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) close_range$auto(0x2, 0xa, 0x0) unlink$auto(0x0) r1 = socket(0x1d, 0x2, 0x7) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf251000000005003700010000000a000800aaaaaaaaaaaa0000050011000900000008003600880e00000a001000aaaaaaaaaabb000005003000010000000800320009000000"], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x44840) getpeername$auto(0x200000003, 0x0, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf0100000000b9000000", @ANYRES32, @ANYBLOB="240081800500010004000000050002008100000005000200000000000500010003000000080027002e01000008006900fc876048"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4004010) 5.567995443s ago: executing program 4 (id=2367): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x6b) 5.133614569s ago: executing program 4 (id=2368): mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x8470}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0xffffffc0) r3 = timerfd_create$auto(0x9, 0x0) timerfd_settime$auto(r3, 0xfffffffd, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) read$auto_proc_pid_numa_maps_operations_internal(r3, &(0x7f0000000040)=""/75, 0x4b) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pselect6$auto(0x1, 0x0, &(0x7f0000000240)={[0xf, 0x5e9, 0x8, 0x8e, 0xd, 0xfffffffffffff801, 0x2d44b40f, 0x831f, 0x4, 0xb911, 0x2, 0x81, 0x4, 0x6, 0x1, 0x5]}, 0x0, 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) 4.322140273s ago: executing program 1 (id=2369): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="050725bd61001cfebbc92109"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 4.188326198s ago: executing program 1 (id=2370): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004041}, 0x40100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) memfd_create$auto(0x0, 0x7) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x1003, 0x1, 0x948b, 0x3, 0x9, 0xfffffffffffffffd, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x6, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setfsgid$auto(0xee00) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdfb3df131db9a98348c8", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="04008b000e5d6445ea330700000000000000c66d2a3a11b546b49f6b00a60e18ca5a02000000000000007da1c4069561926df8d9b56dab78105958f2f218a2"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)='-7', 0x3a) r6 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x711000, 0x0) ioctl$auto_SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000380)="a25fa0de629da9b78126783e2b32696dc2932d7dcad07c6df9436aca675c42798a249085d382d5d6c47a2475bddc1d6b500763708b46ffbd510897f4b4601ed8bf1d378b7da1475cb6c784c5f2636725e402b5531c0474546466d8e9e9d1b2f324b5404c74637972b402a638fc7dfb07708bae3e3916e5b0d83c2eca5365e860a833de6a5f8813b7c170c8cd64087e7c7e136903893a9bbd9f27d99da6cde21d21e946c78b2cd35f917087d02d625d3e205ddd4aa601b1487eade658fce8d69cb02d7087f2eb7759b3ed7bd927d4736b30c6ee4d8015d64ccc97a2b5af3aea6d3fb21471cddbae35bd6e194d") 3.819962873s ago: executing program 2 (id=2371): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) madvise$auto(0x5, 0x6, 0xfffffc00) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0xdb) userfaultfd$auto(0x1) r2 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0], 0x68}, 0x1, 0x0, 0x0, 0x40440d2}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r3], 0x1ac}}, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto(0x2, 0x1) 3.710744963s ago: executing program 2 (id=2372): close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x155) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyye\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541a, r2) 3.270937187s ago: executing program 4 (id=2373): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x40100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) memfd_create$auto(0x0, 0x7) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x1003, 0x1, 0x948b, 0x3, 0x9, 0xfffffffffffffffd, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x6, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setfsgid$auto(0xee00) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdfb3df131db9a98348c8", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="04008b000e5d6445ea330700000000000000c66d2a3a11b546b49f6b00a60e18ca5a02000000000000007da1c4069561926df8d9b56dab78105958f2f218a2"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)='-7', 0x3a) r6 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x711000, 0x0) ioctl$auto_SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000380)="a25fa0de629da9b78126783e2b32696dc2932d7dcad07c6df9436aca675c42798a249085d382d5d6c47a2475bddc1d6b500763708b46ffbd510897f4b4601ed8bf1d378b7da1475cb6c784c5f2636725e402b5531c0474546466d8e9e9d1b2f324b5404c74637972b402a638fc7dfb07708bae3e3916e5b0d83c2eca5365e860a833de6a5f8813b7c170c8cd64087e7c7e136903893a9bbd9f27d99da6cde21d21e946c78b2cd35f917087d02d625d3e205ddd4aa601b1487eade658fce8d69cb02d7087f2eb7759b3ed7bd927d4736b30c6ee4d8015d64ccc97a2b5af3aea6d3fb21471cddbae35bd6e194d") 2.672697978s ago: executing program 2 (id=2374): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) r1 = socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r4, 0x80044d76, &(0x7f00000001c0)) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd4\x00', 0x1a9382, 0x0) ioctl$auto(0x3, 0x1260, 0x7fffffffffffffff) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r6 = socket(0x23, 0x5, 0x0) prctl$auto_PR_SET_MM_ENV_END(0x989, 0xb, r5, 0x8000, 0x9) bind$auto(r6, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)=@task_fd_query={r5, r6, 0x8, 0xc, 0x80000000, 0x7, r0, 0xef77, 0xff}, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000084) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x474, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME={0x440, 0x33, "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"}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xb}, @NL80211_ATTR_EHT_CAPABILITY={0x16, 0x136, "e205df6aecd2042b02ebbd9ca9bce97c8286"}]}, 0x474}, 0x1, 0x0, 0x0, 0x4000}, 0x48001) io_uring_setup$auto(0x6, 0x0) close_range$auto(r2, r1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0_to_bond\x00', 0x284000, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.671128807s ago: executing program 1 (id=2381): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) close_range$auto(0x2, 0xa, 0x0) unlink$auto(&(0x7f0000000380)='./file0\x00') r1 = socket(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_HARDIF(r1, 0x0, 0x44840) getpeername$auto(0x200000003, 0x0, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf0100000000b9000000", @ANYRES32, @ANYBLOB="240081800500010004000000050002008100000005000200000000000500010003000000080027002e01000008006900fc876048"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4004010) 1.660573436s ago: executing program 4 (id=2375): close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x155) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541a, r3) 1.262314596s ago: executing program 2 (id=2376): close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x155) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyye\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541a, r2) 981.617556ms ago: executing program 1 (id=2377): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xd, 0x8, 0x8000000008011, 0x3, 0x400000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) 260.427125ms ago: executing program 1 (id=2378): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="9ab50f4ecf847be05f351e6488b61b974daa95047bb74b315eed6dca52dbdae0242fcfb571a66c97616937dd93b97753a5af8eadde84d075a946b81cdc6c72bd40aad677442d78a9994343e93dbf7822b41297f10050e625de61812235419b61ca6e1cf512102bf572750799aa3964739a05ea21d618836df2cf96ebcc6d292f0545e1eb5e66f83ca5b02974f6e1cd2acedee5d3b4ffdafe41befaaf1e517f633ea0e3d67782d4189bdf2c6a65f72859659a9ab103b7813b1630bb6f2fb4863586abb50472130ea12c4b4aba1e6bc7bac83382aa3bba6fc507788cd0b19beec49ae5b89b5a91aa0048f0d058daad9b1f0a396c35595d66e0ca73bd85830896d61370d97956eed87e06c4199bb2afa4338793b007e67835158c000971ca880dc7ee66113cf14495b0f4339cef5ac32c775d7db142f0a63d7fe953177f2ef74fbe6791a0dbbeddb2060899962e8a45a9fa8f07c39e260873330d84b00875d18b79e1c773918de40b9d457e92aa8cb305e4d88c10e8e27e7452362269216617b6688155473a8ce9850ba6627d1dc13f6b12679cb1a2c292ec5f4179b5f3b3375ad86b07e9d0ce7b00aa9ed5ca064645dc63be31d980f23257e30f76da5b7c7b9288b1f9201526113dc5a1bb6868da8c4097911a19863753cab06714d88848a93cfb183d2fc04ef62292aca7030578e9deb86077d38502dffc31e5eba12846f302793061d70cd92f6e8dcea38a4d51e9d96e20e49b70fab676aa1e69ce4ad9350001eaa3dd7f9af5aedf664876fe6fdac17799b2046f62fe5052ed5f3408fe2f1c716e9e9a1f5ba039a39db432c6dab2ec3a720a0415baca171e6e611c14bb511444af9e559223a1e9d2692ce839be9168d82477cbef48d915698ab249e58667942914a841828f4e15d5bb6d00fddbdd6b5b170f0326be5d5e2f515e7e5a8933fcacbd3d14f5d03a3b85a28462f3b22c5a0fea03f8ea21b5a0de0b1ff8ff47e2a6a7d2da26ec901d27ca5816108494e1ee2d8e9c1af62daa7e2f9437a735d504bb46dd720578ed308f70609188ce6a15d30bd9fe10e4c028f46450a7572256f84d1d59444e4a08d6f79811115506206e4d6714cb12dac45a6a85be8913ba01d71e5f19d6e90d830958a3f56923edb5a0efc8346d4d193a0abbb658f219279a5d9f5c5d524e5f000cfe9943beb70eb5994e26aadbd3f47dc18003165b39b5cf718900ab4b845a0493481ee388fccfc460859bd85fa63c0b58b775d3729db3c1cc58573e36b3bd33dd890a9d26a2a3a8b2def1a7c6eb3129cdceff29d3ec2ff52b9bd2ecb7ebc103706366c9e88c089f332d8bb380dc3afe436e490a538cd8c43ea63bd65e9486ce2c52e55d9eca84b24cc77f33e2c3096a04705dedc238779c4a497082d6d6a7dfb3b5259112546874411622e28e15c70ad98fd1e916843b06c4ee3f13c3cfdf5fc0d393391bad9d68335c0b4e32c4407c60ba070eeb6dd282b2f7ff6134e039eb011f0b4026f2ed46426fb07a335c21614dbabfb7cef26b96f29b0805642e9b0f5d9c675d5cf89111791600d330d8503efd3ee384e5e7fe02b8137f8881e8ac23eb4f4fa6a1a88a9fa8dfa9e446bb7f117a3d6687b2d2d505c461703eb5df4032b9371ebe49710c8e8244f10943a516bb84307769d12ea0d2c5244d8f41e646d162706cb35b9ac6e2e1650eddf1cca58c1a8fd2c8e6fc485ab478dd2a0913ffdce715d775f38c4b692d16cab3a24edc5fe496dc98a68451eb4776db277465525780d92bcaeebf145408a6607f86fc94043ee30683106cde9c71edd460f783e602465f32554c09376860d3d9420badf095ff9fdfb3311af5800eda2ee5741e555ea42b121d1f7001b471df869b7b2b0de36a31b443e75bc8f101884c227fab4951f0bd1b503f9d5c816afe75061648eec404c1ed0eb57e4f8a5e966f45227be127369550f5daec076d5020274a9a5bac078e700dd9b95ba961be08f97fcd543f88691e32d0aa9f8776f58c96de8cce194aee6f9010d7710b692ddfa24457a3a623b91d743521dfe43a21ecce2863356308526687c7ed1169386be11059614cd138d439725ac4b5c0a9e04f503dd1461e57935de94a12a64d18c1845500665f81bae9ef33033a4a2d04ca381da212a68e1f267f03ffb71db53ff0da93176b47ff0568a5acee10190c12c9fda1543c318229708f6985e224ce750e9ca937d6927c1de7e5fd7e7db6cd42478e0d11a97e8959ce0118d556960d4cfde1625c72220ac1988fc3c69850d00a08246bda3846b623e0c1a731d47ba3216fa91139d5f5a8af9897fb08bc53e682e669e4a20962f841e13da43b62ad6eba654f815c2ad347ae279ab134cca6a1ebd06e822cdceeb58d4329d501c216357a12fd92fa0c27de77e756cdec09698284802eb2d21ca7e1a3619da2591c1fe29d4da0744f1110594f57a20c286f78b1111814c55715e05e4c753bc0242c9abb850b508e061c1179d88fb11b33bb1f34d05cb38e99a57d1a06ea61590431db1cf22817c85f885978f08f92335e997eff96a5feb784e410d41a953a6d92eb5973c08aa728ab673c0e693f47055c112d8efc8bd84f4c85b2f160b4c47da302cfa214b822b68276fbd50933facc06956aea16f35e61e859072749a49f13d33376ec41f7dc85625e1e48fc821317f43b0be304f448eb1de7c68ba84e774a2d22b1d3f55c144f59c15fc19c6df45ac3ac6461df9aebebfc8738b7b2e0dbdd99909498a3741d9101d82540a64b5e7a149e1f98a0788704a843faece338d465826b58f3e11aef73d44efdce1739b1927c45248d32be74ea0fabbe17e7c0657cc68419d96f19119493ab5569c86aa80b6bc4b410b011a12e1ad5365c674720c2f2a4c78962affef7e63c4ca0d4235f977ae416153edef6402b95ec61cb561759217002b66a78b65819d1b649a85308943148ac025410dbe4f9f18694a1c7289118035f454f81e1d9b6ab076ddb50e8c7b8ed2fd36d4dd6c5c928041afc8936fa83244aa9dbf08676cc30580d8fee518e24ed4089b63f9930c194e048b88cec98f9190a81f1a09e80c2af63e4738d4bf6c8e4eff41a846a25f8d74ab88f9d85c9b059bab15fc1fc485e1f92fa4f41a3a275e9609ea0c7dff7c9488f482067f38f4e8f424007498ac1da9eeba9857b34dc21d552dada4aff917d37463fb054ddedf52ab3def2813fd115e3f36c3f82719a486d2605aadd9c3e708261e2acf13fa9cd81fa2f23aea49b3a42b3ad43bd140ccb5c274c099062d1148d1def0171c5b8b49ac6b462de5246523cee3bb96d6340c8992114ce7f3d0d6ef92f02bfe3142dc1cc03310ea49fe1000b6a5e2353e25b4d373830a2030f7a7f33c60d583ca9ecf9930a22fb8415364d22a1f5aa8ebd95930123e04edaa80b5bdd0473a2c95be3797d6100145d674498fea24a87009149aa27a7060ccaf0ea0675a0c498370beff8978604ac3d3aec9cf3ad53ec8a698c5e1a44d0a4be22e5a16547db9eef5577d6ecd5a2967c4d4255e8908ccb347fe7cb5a7246345035a7a8a12993f8fdc661ffd3a84736ee9a5852dcf8e3aca4afa19a598c9379dd6d3c594e9aa54c1b5f0a2add05c979c76f9d1796c2072e0a6b5348ec199aa7abb34cde352f97e61823977723500867f803371f115c3528b30442fdd828f872d7c962f21053d6fb1fea2ac4e273902edf14d1b9c362f76c67ee7ff175ddb443afd3bab63767d2a64416d50015c09ae0a0faf5b6cbd39a31b7d324d110a84800f2c541cb39836c4cc2e7de0596b78e580533c1dc1126acc7aa5e8d2c2680b511ef4160351e924411b092a94c0a6df787eea3a6960ee27c1480ffc3dd286af35183020315a00ea9dc2384edb0a9c420c12a35ef16fa73d6caf07d796416768be12fad0fd636304918b7cc7901d5db64e6d3d1f7560b859c2044f38e46eec7c2cca01492309c948880326e60fb540bec547626cb5ceb48eae7f0bdd5f38b7ca69159bf39e5a6dee36f2199bae38a2d21e3316c8debcadfb4121af4446cc9fe2a536689816f66510d8906a1f96db1b71a7ab1a9de45e67d93586db93397eae71e6eca1e84531ba50ee9ab11bc01eba40063e74b0efd6ae4ab90bb50e2312861c92b43720e83d3bad50bf66f87be98c40b275339177dba753ddab002b07827ab860e9613a1bb0c13e690dbd71f5a30578e5ab1d1426ca07cb698f30cdfe1853a10fa976822da5c1b3ab8bd6df956e74a667867b94f26b696b9379ab818eed48a13fa6a3590cc1b6e159f25d3f7f7c5178ae84974460d7880b84aa90077a0a8dce82fd6bed76df7cf1dd42b33ec26cdf374ff068db186ddf08112eabfcd7b3f25afaa765bc831a3c7e7d93d6794c2c92d1223de9b15217632aa17ee09651556d0617219d9142f155dd8b1d87cf31715113519edbfdc5d6849feb239a73b53f94430f8e7ee022cdf8cc9aeb877e4109db461e6dd68351a1522d41854ff59a91b854cab163329442c01cbc3b352c8068131c8c22f7b9220e009e3890f396d5fe69137e2f0b52b27d190705cc4dac692ebb7d9662268cc641d03804d7f5bc99437e49a3e2e6b8879d37322faaec90df4a1201bb1f58d1eedadf74df18be13e0aff304b583da98589aa22e27b1f78beaea663e3182d2b12a2f3c835c0feb3001d787b297a2aaaaa649fbd9269dc534c810ea064d6d27d54e54f73e39ed4ef101491c144f7010aa2519587cda497d770763f60e6d9df6672c3a47991d757b7ccaa38550f42d0ed724b52c04a61e3670a3af1bab73543112f20b4b17e1ca567c2e2dfd8ded52e80ef79f2f0ca312099a2905ee699a61eb34aee75c974ba6c8e6b6f8d4346baa5164edbf9f892f5b20fe2e4d63d697e17a41ff323e114e5b8f8bf9204ac842e4cb0eaf872ed92e92a09a61e17010be88bcffa11a464e9dd15f772b17a0a26a384a6bbe80a2bed2c5f3c5db439384781893c68f35e7f04dd4b90fb35566b4b5e230410f2a88302436113a0d7ce0a589e9155273ffee7fc927dd0f1e5592c727a2bcfe61eb5d95811981d0d307406d5da4c6c164be156558675bc34d2bb1e9bfb3ff557b101892ba10bce45f85ff739acb1513058e74ebf675dafc64501525b510f70338d31ba19b7ab4eae92c2c33d59b616fbeacb0b0af4615a08b316d9ea8ef31b7e27f0d286aa4f918d8fd553d8e463df06cd6a7303b5f0ee14e2b60e910f02e7e4eeb55ca3b1210050359d9f662556ba38c50ea31080fe172438b438af83572cd33451fb92ec62ab10d4a439c571ee290d524270a0cc90665c9f6347f9f3d78efcda9e6e13a255f9080f66dbf0030cb9c1d10ade44412bb9e5783a86e35eb5b28095f52942b83013967d661e2e7bd9b525f1fb8b0d127dce73876805ed4954bd7cf9cf6f43c06c4463dc9d339394e2f83304223627d76d61b245140f440446d4e6eabe0450034f82b1d6f2d6d090895de305a84e7bb7824ad84429aa50775536dbda7bcacadfe01b5d6ca8e46b897c21122655677a176bab6b260deb3d6803607b9aa85d74e748aedc17537bb0bd0b4800cd9ad3705b9960a61f501a4bdaee05309c5537189a8d616554429de7717674aa88674733fb68eeab898aade23712c8058a855904f4e7085115f36b6df394864d88e6cf183753248eefad820ff3f1dda2ff430da2c16633f7bb86fced18a6217c71a412287f31c1699553ad9695195a95baca9cd3f6510d9dbcb5a404fb02d4a6a476090ffab0efa6") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80", @ANYRES16, @ANYBLOB="030727bd7000ff"], 0x14}, 0x1, 0x0, 0x60000000, 0x985}, 0x4) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="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", 0x417) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) ioperm$auto(0x2, 0x6, 0x8) 0s ago: executing program 4 (id=2379): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) close_range$auto(0x2, 0xa, 0x0) unlink$auto(0x0) r1 = socket(0x1d, 0x2, 0x7) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf251000000005003700010000000a000800aaaaaaaaaaaa0000050011000900000008003600880e00000a001000aaaaaaaaaabb000005003000010000000800320009000000"], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x44840) getpeername$auto(0x200000003, 0x0, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf0100000000b9000000", @ANYRES32, @ANYBLOB="240081800500010004000000050002008100000005000200000000000500010003000000080027002e01000008006900fc876048"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4004010) kernel console output (not intermixed with test programs): __pfx_chrdev_open+0x10/0x10 [ 538.323011][T17300] vfs_open+0x82/0x3f0 [ 538.323066][T17300] path_openat+0x1de4/0x2cb0 [ 538.323118][T17300] ? __pfx_path_openat+0x10/0x10 [ 538.323169][T17300] do_filp_open+0x20b/0x470 [ 538.323208][T17300] ? __pfx_do_filp_open+0x10/0x10 [ 538.323276][T17300] ? alloc_fd+0x471/0x7d0 [ 538.323323][T17300] do_sys_openat2+0x11b/0x1d0 [ 538.323372][T17300] ? __pfx_do_sys_openat2+0x10/0x10 [ 538.323437][T17300] __x64_sys_openat+0x174/0x210 [ 538.323488][T17300] ? __pfx___x64_sys_openat+0x10/0x10 [ 538.323557][T17300] do_syscall_64+0xcd/0x490 [ 538.323603][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.323636][T17300] RIP: 0033:0x7fa0a3d8ebe9 [ 538.323663][T17300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.323696][T17300] RSP: 002b:00007fa0a4b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 538.323727][T17300] RAX: ffffffffffffffda RBX: 00007fa0a3fb5fa0 RCX: 00007fa0a3d8ebe9 [ 538.323748][T17300] RDX: 0000000000129800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 538.323768][T17300] RBP: 00007fa0a3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 538.323787][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.323804][T17300] R13: 00007fa0a3fb6038 R14: 00007fa0a3fb5fa0 R15: 00007ffd888cffd8 [ 538.323846][T17300] [ 542.352838][T17362] kexec: Could not allocate control_code_buffer [ 542.448134][T17418] FAULT_INJECTION: forcing a failure. [ 542.448134][T17418] name failslab, interval 1, probability 0, space 0, times 0 [ 542.517518][T17418] CPU: 0 UID: 0 PID: 17418 Comm: syz.0.1308 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 542.517581][T17418] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 542.517596][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.517616][T17418] Call Trace: [ 542.517627][T17418] [ 542.517639][T17418] dump_stack_lvl+0x16c/0x1f0 [ 542.517684][T17418] should_fail_ex+0x512/0x640 [ 542.517730][T17418] ? fs_reclaim_acquire+0xae/0x150 [ 542.517791][T17418] should_failslab+0xc2/0x120 [ 542.517835][T17418] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 542.517875][T17418] ? security_inode_alloc+0x3b/0x2b0 [ 542.517914][T17418] security_inode_alloc+0x3b/0x2b0 [ 542.517947][T17418] inode_init_always_gfp+0xce4/0x1030 [ 542.517983][T17418] alloc_inode+0x86/0x240 [ 542.518022][T17418] new_inode+0x22/0x1c0 [ 542.518065][T17418] bdev_alloc+0x2b/0x420 [ 542.518097][T17418] __alloc_disk_node+0x116/0x630 [ 542.518142][T17418] __blk_mq_alloc_disk+0x89/0x120 [ 542.518179][T17418] nbd_dev_add+0x492/0xbb0 [ 542.518216][T17418] ? find_held_lock+0x2b/0x80 [ 542.518244][T17418] ? __pfx_nbd_dev_add+0x10/0x10 [ 542.518280][T17418] ? nbd_genl_connect+0x98e/0x1c60 [ 542.518343][T17418] ? bpf_lsm_capable+0x9/0x10 [ 542.518371][T17418] ? __radix_tree_lookup+0x21f/0x2c0 [ 542.518409][T17418] nbd_genl_connect+0x8b0/0x1c60 [ 542.518455][T17418] ? __pfx_nbd_genl_connect+0x10/0x10 [ 542.518497][T17418] ? __nla_parse+0x40/0x60 [ 542.518533][T17418] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 542.518581][T17418] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 542.518635][T17418] genl_family_rcv_msg_doit+0x209/0x2f0 [ 542.518678][T17418] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 542.518725][T17418] ? genl_get_cmd+0x194/0x580 [ 542.518790][T17418] ? __radix_tree_lookup+0x21f/0x2c0 [ 542.518830][T17418] genl_rcv_msg+0x55c/0x800 [ 542.518881][T17418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.518927][T17418] ? __pfx_nbd_genl_connect+0x10/0x10 [ 542.518991][T17418] netlink_rcv_skb+0x158/0x420 [ 542.519034][T17418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.519085][T17418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.519144][T17418] ? netlink_deliver_tap+0x1ae/0xd30 [ 542.519191][T17418] genl_rcv+0x28/0x40 [ 542.519236][T17418] netlink_unicast+0x5a7/0x870 [ 542.519284][T17418] ? __pfx_netlink_unicast+0x10/0x10 [ 542.519328][T17418] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 542.519368][T17418] ? __lock_acquire+0xb97/0x1ce0 [ 542.519421][T17418] netlink_sendmsg+0x8d1/0xdd0 [ 542.519471][T17418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.519519][T17418] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 542.519558][T17418] ____sys_sendmsg+0xa95/0xc70 [ 542.519605][T17418] ? copy_msghdr_from_user+0x10a/0x160 [ 542.519644][T17418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.519703][T17418] ? __pfx_futex_wake_mark+0x10/0x10 [ 542.519766][T17418] ___sys_sendmsg+0x134/0x1d0 [ 542.519813][T17418] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.519905][T17418] __sys_sendmsg+0x16d/0x220 [ 542.519947][T17418] ? __pfx___sys_sendmsg+0x10/0x10 [ 542.519987][T17418] ? __x64_sys_futex+0x1e0/0x4c0 [ 542.520053][T17418] do_syscall_64+0xcd/0x490 [ 542.520098][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.520131][T17418] RIP: 0033:0x7f0208b8ebe9 [ 542.520158][T17418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.520194][T17418] RSP: 002b:00007f0209a80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.520225][T17418] RAX: ffffffffffffffda RBX: 00007f0208db5fa0 RCX: 00007f0208b8ebe9 [ 542.520247][T17418] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000008 [ 542.520267][T17418] RBP: 00007f0208c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 542.520286][T17418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.520305][T17418] R13: 00007f0208db6038 R14: 00007f0208db5fa0 R15: 00007ffc1c9f2208 [ 542.520346][T17418] [ 542.914233][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.067865][T17418] nbd: failed to add new device [ 544.465724][T17473] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 544.658267][T17480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 545.794057][T17511] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 545.806927][T17517] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 547.842583][T17558] sp0: Synchronizing with TNC [ 548.529867][T17579] FAULT_INJECTION: forcing a failure. [ 548.529867][T17579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.575377][T17584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1328'. [ 548.605305][T17579] CPU: 1 UID: 0 PID: 17579 Comm: syz.2.1330 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 548.605364][T17579] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 548.605377][T17579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.605397][T17579] Call Trace: [ 548.605407][T17579] [ 548.605419][T17579] dump_stack_lvl+0x16c/0x1f0 [ 548.605463][T17579] should_fail_ex+0x512/0x640 [ 548.605513][T17579] _copy_from_user+0x2e/0xd0 [ 548.605565][T17579] inet_ioctl+0x31c/0x3f0 [ 548.605617][T17579] ? __pfx_inet_ioctl+0x10/0x10 [ 548.605671][T17579] ? kasan_quarantine_put+0x10a/0x240 [ 548.605707][T17579] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.605762][T17579] ? tomoyo_path_number_perm+0x18d/0x580 [ 548.605807][T17579] packet_ioctl+0xb3/0x280 [ 548.605859][T17579] sock_do_ioctl+0x115/0x280 [ 548.605907][T17579] ? __pfx_sock_do_ioctl+0x10/0x10 [ 548.605979][T17579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 548.606039][T17579] sock_ioctl+0x227/0x6b0 [ 548.606071][T17579] ? __pfx_sock_ioctl+0x10/0x10 [ 548.606097][T17579] ? hook_file_ioctl_common+0x145/0x410 [ 548.606157][T17579] ? __pfx_sock_ioctl+0x10/0x10 [ 548.606188][T17579] __x64_sys_ioctl+0x18e/0x210 [ 548.606240][T17579] do_syscall_64+0xcd/0x490 [ 548.606284][T17579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.606321][T17579] RIP: 0033:0x7fa0a3d8ebe9 [ 548.606346][T17579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.606377][T17579] RSP: 002b:00007fa0a4b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.606408][T17579] RAX: ffffffffffffffda RBX: 00007fa0a3fb5fa0 RCX: 00007fa0a3d8ebe9 [ 548.606430][T17579] RDX: 0000000000000008 RSI: 000000000000890b RDI: 0000000000000001 [ 548.606450][T17579] RBP: 00007fa0a4b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 548.606470][T17579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.606489][T17579] R13: 00007fa0a3fb6038 R14: 00007fa0a3fb5fa0 R15: 00007ffd888cffd8 [ 548.606532][T17579] [ 551.836726][T17760] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 552.407988][T17778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1341'. [ 556.280443][T17918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 556.611262][T17823] kexec: Could not allocate control_code_buffer [ 557.011035][ T5946] Process accounting resumed [ 558.563796][T17994] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 558.810614][T17998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 560.713209][T18046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1364'. [ 566.042830][T18203] FAULT_INJECTION: forcing a failure. [ 566.042830][T18203] name failslab, interval 1, probability 0, space 0, times 0 [ 566.173638][T18203] CPU: 0 UID: 0 PID: 18203 Comm: syz.3.1378 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 566.173703][T18203] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 566.173719][T18203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.173738][T18203] Call Trace: [ 566.173749][T18203] [ 566.173762][T18203] dump_stack_lvl+0x16c/0x1f0 [ 566.173808][T18203] should_fail_ex+0x512/0x640 [ 566.173853][T18203] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 566.173899][T18203] should_failslab+0xc2/0x120 [ 566.173941][T18203] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 566.173982][T18203] ? __kernfs_new_node+0xd2/0x8e0 [ 566.174030][T18203] __kernfs_new_node+0xd2/0x8e0 [ 566.174078][T18203] ? __pfx___kernfs_new_node+0x10/0x10 [ 566.174131][T18203] ? find_held_lock+0x2b/0x80 [ 566.174164][T18203] ? kernfs_root+0xee/0x2a0 [ 566.174226][T18203] kernfs_new_node+0x13c/0x1e0 [ 566.174275][T18203] __kernfs_create_file+0x53/0x350 [ 566.174312][T18203] sysfs_add_file_mode_ns+0x207/0x3c0 [ 566.174361][T18203] internal_create_group+0x578/0xf30 [ 566.174414][T18203] ? __pfx_internal_create_group+0x10/0x10 [ 566.174464][T18203] ? kernfs_create_link+0x1bd/0x240 [ 566.174504][T18203] internal_create_groups+0x9d/0x150 [ 566.174543][T18203] device_add+0xf30/0x1aa0 [ 566.174591][T18203] ? __pfx_device_add+0x10/0x10 [ 566.174629][T18203] ? lockdep_init_map_type+0x5c/0x280 [ 566.174663][T18203] ? __init_waitqueue_head+0xca/0x150 [ 566.174709][T18203] netdev_register_kobject+0x1a9/0x3d0 [ 566.174750][T18203] register_netdevice+0x13dc/0x2270 [ 566.174790][T18203] ? __pfx_register_netdevice+0x10/0x10 [ 566.174830][T18203] ? __pfx_loopback_net_init+0x10/0x10 [ 566.174857][T18203] register_netdev+0x34/0x50 [ 566.174889][T18203] loopback_net_init+0x7a/0x170 [ 566.174915][T18203] ? __pfx_loopback_net_init+0x10/0x10 [ 566.174939][T18203] ops_init+0x1e2/0x5f0 [ 566.174973][T18203] setup_net+0x10f/0x380 [ 566.175002][T18203] ? lockdep_init_map_type+0x5c/0x280 [ 566.175035][T18203] ? __pfx_setup_net+0x10/0x10 [ 566.175068][T18203] ? debug_mutex_init+0x37/0x70 [ 566.175094][T18203] copy_net_ns+0x2a6/0x5f0 [ 566.175131][T18203] create_new_namespaces+0x3ea/0xa90 [ 566.175166][T18203] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 566.175196][T18203] ksys_unshare+0x45b/0xa40 [ 566.175229][T18203] ? __pfx_ksys_unshare+0x10/0x10 [ 566.175262][T18203] ? xfd_validate_state+0x61/0x180 [ 566.175307][T18203] __x64_sys_unshare+0x31/0x40 [ 566.175340][T18203] do_syscall_64+0xcd/0x490 [ 566.175374][T18203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.175397][T18203] RIP: 0033:0x7f1d2b78ebe9 [ 566.175416][T18203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.175440][T18203] RSP: 002b:00007f1d2c6c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 566.175461][T18203] RAX: ffffffffffffffda RBX: 00007f1d2b9b5fa0 RCX: 00007f1d2b78ebe9 [ 566.175477][T18203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 566.175491][T18203] RBP: 00007f1d2b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 566.175505][T18203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.175518][T18203] R13: 00007f1d2b9b6038 R14: 00007f1d2b9b5fa0 R15: 00007fffe4dcac78 [ 566.175549][T18203] [ 567.110856][T18223] FAULT_INJECTION: forcing a failure. [ 567.110856][T18223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 567.138498][T18223] CPU: 0 UID: 0 PID: 18223 Comm: syz.3.1380 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 567.138566][T18223] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 567.138582][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.138602][T18223] Call Trace: [ 567.138614][T18223] [ 567.138627][T18223] dump_stack_lvl+0x16c/0x1f0 [ 567.138675][T18223] should_fail_ex+0x512/0x640 [ 567.138728][T18223] should_fail_alloc_page+0xe7/0x130 [ 567.138775][T18223] prepare_alloc_pages+0x3c2/0x610 [ 567.138824][T18223] ? rcu_is_watching+0x12/0xc0 [ 567.138862][T18223] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 567.138904][T18223] ? css_rstat_updated+0x1c2/0x510 [ 567.138941][T18223] ? __pfx_css_rstat_updated+0x10/0x10 [ 567.138990][T18223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 567.139046][T18223] ? __lock_acquire+0x62e/0x1ce0 [ 567.139094][T18223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 567.139147][T18223] ? policy_nodemask+0xea/0x4e0 [ 567.139192][T18223] alloc_pages_mpol+0x1fb/0x550 [ 567.139235][T18223] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 567.139294][T18223] ? __lock_acquire+0x62e/0x1ce0 [ 567.139340][T18223] folio_alloc_mpol_noprof+0x36/0x2f0 [ 567.139389][T18223] vma_alloc_folio_noprof+0xed/0x1e0 [ 567.139437][T18223] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 567.139496][T18223] do_pte_missing+0x2230/0x3ba0 [ 567.139530][T18223] ? find_held_lock+0x2b/0x80 [ 567.139570][T18223] __handle_mm_fault+0x152a/0x2a50 [ 567.139614][T18223] ? __pfx___handle_mm_fault+0x10/0x10 [ 567.139649][T18223] ? __pte_offset_map_lock+0x174/0x310 [ 567.139692][T18223] ? find_held_lock+0x2b/0x80 [ 567.139734][T18223] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 567.139793][T18223] handle_mm_fault+0x589/0xd10 [ 567.139836][T18223] __get_user_pages+0x551/0x34a0 [ 567.139900][T18223] ? __pfx___get_user_pages+0x10/0x10 [ 567.139962][T18223] populate_vma_page_range+0x267/0x3f0 [ 567.140017][T18223] ? __pfx_populate_vma_page_range+0x10/0x10 [ 567.140068][T18223] ? __pfx_find_vma_intersection+0x10/0x10 [ 567.140118][T18223] ? do_mmap+0x69c/0x1210 [ 567.140170][T18223] __mm_populate+0x1d8/0x380 [ 567.140222][T18223] ? __pfx___mm_populate+0x10/0x10 [ 567.140286][T18223] ? up_write+0x1b2/0x520 [ 567.140339][T18223] vm_mmap_pgoff+0x37f/0x470 [ 567.140391][T18223] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 567.140449][T18223] ? __x64_sys_futex+0x1e0/0x4c0 [ 567.140488][T18223] ? __x64_sys_futex+0x1e9/0x4c0 [ 567.140536][T18223] ksys_mmap_pgoff+0x7d/0x5c0 [ 567.140580][T18223] ? xfd_validate_state+0x61/0x180 [ 567.140625][T18223] ? __pfx_do_writev+0x10/0x10 [ 567.140665][T18223] __x64_sys_mmap+0x125/0x190 [ 567.140720][T18223] do_syscall_64+0xcd/0x490 [ 567.140768][T18223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.140801][T18223] RIP: 0033:0x7f1d2b78ebe9 [ 567.140826][T18223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.140858][T18223] RSP: 002b:00007f1d2c6c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 567.140890][T18223] RAX: ffffffffffffffda RBX: 00007f1d2b9b5fa0 RCX: 00007f1d2b78ebe9 [ 567.140911][T18223] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 567.140930][T18223] RBP: 00007f1d2b811e19 R08: 0000000000000002 R09: 0000000000008000 [ 567.140950][T18223] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 567.140969][T18223] R13: 00007f1d2b9b6038 R14: 00007f1d2b9b5fa0 R15: 00007fffe4dcac78 [ 567.141013][T18223] [ 570.486336][T18338] Process accounting resumed [ 570.881491][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 571.053856][T18400] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 571.996755][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.005607][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.414319][T18425] nbd: socks must be embedded in a SOCK_ITEM attr [ 572.487857][T18425] block nbd0: shutting down sockets [ 574.310334][T18458] ubi0: attaching mtd0 [ 574.347346][T18458] ubi0: scanning is finished [ 574.352483][T18458] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 574.490564][T18462] FAULT_INJECTION: forcing a failure. [ 574.490564][T18462] name fail_futex, interval 1, probability 0, space 0, times 0 [ 574.555246][T18458] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 574.564263][T18462] CPU: 1 UID: 0 PID: 18462 Comm: syz.2.1407 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 574.564320][T18462] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 574.564335][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.564353][T18462] Call Trace: [ 574.564364][T18462] [ 574.564376][T18462] dump_stack_lvl+0x16c/0x1f0 [ 574.564421][T18462] should_fail_ex+0x512/0x640 [ 574.564470][T18462] get_futex_key+0xff0/0x1560 [ 574.564516][T18462] ? __pfx_get_futex_key+0x10/0x10 [ 574.564554][T18462] ? __mutex_trylock_common+0xe9/0x250 [ 574.564620][T18462] futex_wake+0xea/0x530 [ 574.564670][T18462] ? __pfx_futex_wake+0x10/0x10 [ 574.564738][T18462] do_futex+0x1e3/0x350 [ 574.564781][T18462] ? __pfx_do_futex+0x10/0x10 [ 574.564818][T18462] ? __might_fault+0xe3/0x190 [ 574.564868][T18462] mm_release+0x24e/0x300 [ 574.564910][T18462] do_exit+0x68e/0x2bf0 [ 574.564962][T18462] ? __pfx_do_exit+0x10/0x10 [ 574.565007][T18462] ? do_raw_spin_lock+0x12c/0x2b0 [ 574.565055][T18462] ? find_held_lock+0x2b/0x80 [ 574.565093][T18462] do_group_exit+0xd3/0x2a0 [ 574.565141][T18462] get_signal+0x2673/0x26d0 [ 574.565194][T18462] ? __pfx_get_signal+0x10/0x10 [ 574.565231][T18462] ? do_futex+0x122/0x350 [ 574.565271][T18462] ? __pfx_do_futex+0x10/0x10 [ 574.565314][T18462] arch_do_signal_or_restart+0x8f/0x790 [ 574.565358][T18462] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 574.565413][T18462] ? xfd_validate_state+0x61/0x180 [ 574.565469][T18462] exit_to_user_mode_loop+0x84/0x110 [ 574.565520][T18462] do_syscall_64+0x3f6/0x490 [ 574.565565][T18462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.565602][T18462] RIP: 0033:0x7fa0a3d8ebe9 [ 574.565626][T18462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.565658][T18462] RSP: 002b:00007fa0a4b4c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 574.565689][T18462] RAX: fffffffffffffe00 RBX: 00007fa0a3fb5fa8 RCX: 00007fa0a3d8ebe9 [ 574.565710][T18462] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa0a3fb5fa8 [ 574.565730][T18462] RBP: 00007fa0a3fb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 574.565749][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.565769][T18462] R13: 00007fa0a3fb6038 R14: 00007ffd888cfef0 R15: 00007ffd888cffd8 [ 574.565811][T18462] [ 574.807522][T18465] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 574.993368][T18408] kexec: Could not allocate control_code_buffer [ 575.168555][T18493] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1410'. [ 575.197880][T18493] FAULT_INJECTION: forcing a failure. [ 575.197880][T18493] name failslab, interval 1, probability 0, space 0, times 0 [ 575.211077][T18493] CPU: 1 UID: 0 PID: 18493 Comm: syz.3.1410 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 575.211134][T18493] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 575.211148][T18493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.211166][T18493] Call Trace: [ 575.211178][T18493] [ 575.211189][T18493] dump_stack_lvl+0x16c/0x1f0 [ 575.211232][T18493] should_fail_ex+0x512/0x640 [ 575.211277][T18493] ? nsim_fib_event_nb+0x45e/0x10d0 [ 575.211306][T18493] should_failslab+0xc2/0x120 [ 575.211345][T18493] __kmalloc_noprof+0xd2/0x510 [ 575.211387][T18493] nsim_fib_event_nb+0x45e/0x10d0 [ 575.211423][T18493] ? lock_acquire+0x179/0x350 [ 575.211464][T18493] notifier_call_chain+0xbc/0x410 [ 575.211501][T18493] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 575.211539][T18493] atomic_notifier_call_chain+0x71/0x1c0 [ 575.211581][T18493] call_fib_notifiers+0x33/0x70 [ 575.211628][T18493] fib6_add_rt2node+0x1d0f/0x3670 [ 575.211690][T18493] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 575.211751][T18493] ? fib6_add+0x628/0x1d90 [ 575.211773][T18493] fib6_add+0x628/0x1d90 [ 575.211804][T18493] ? do_raw_spin_lock+0x12c/0x2b0 [ 575.211848][T18493] ? __pfx_fib6_add+0x10/0x10 [ 575.211871][T18493] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.211925][T18493] ip6_route_add.part.0+0xc1/0x1d0 [ 575.211964][T18493] inet6_rtm_newroute+0x185/0x1a0 [ 575.212002][T18493] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 575.212041][T18493] ? __lock_acquire+0x62e/0x1ce0 [ 575.212096][T18493] ? find_held_lock+0x2b/0x80 [ 575.212122][T18493] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 575.212160][T18493] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 575.212198][T18493] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 575.212238][T18493] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 575.212278][T18493] rtnetlink_rcv_msg+0x95b/0xe90 [ 575.212319][T18493] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.212367][T18493] ? ref_tracker_free+0x37c/0x830 [ 575.212412][T18493] netlink_rcv_skb+0x158/0x420 [ 575.212450][T18493] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.212492][T18493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.212543][T18493] ? netlink_deliver_tap+0x1ae/0xd30 [ 575.212585][T18493] netlink_unicast+0x5a7/0x870 [ 575.212634][T18493] ? __pfx_netlink_unicast+0x10/0x10 [ 575.212670][T18493] ? __pfx___might_resched+0x10/0x10 [ 575.212698][T18493] ? __lock_acquire+0xb97/0x1ce0 [ 575.212744][T18493] netlink_sendmsg+0x8d1/0xdd0 [ 575.212787][T18493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.212829][T18493] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 575.212866][T18493] ____sys_sendmsg+0xa95/0xc70 [ 575.212912][T18493] ? copy_msghdr_from_user+0x10a/0x160 [ 575.212947][T18493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.212997][T18493] ? kfree+0x24f/0x4d0 [ 575.213020][T18493] ? __pfx__kstrtoull+0x10/0x10 [ 575.213061][T18493] ___sys_sendmsg+0x134/0x1d0 [ 575.213099][T18493] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.213168][T18493] ? __pfx___might_resched+0x10/0x10 [ 575.213203][T18493] __sys_sendmmsg+0x200/0x420 [ 575.213243][T18493] ? __pfx___sys_sendmmsg+0x10/0x10 [ 575.213291][T18493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.213343][T18493] ? fput+0x9b/0xd0 [ 575.213408][T18493] ? ksys_write+0x1ac/0x250 [ 575.213440][T18493] ? __pfx_ksys_write+0x10/0x10 [ 575.213479][T18493] __x64_sys_sendmmsg+0x9c/0x100 [ 575.213515][T18493] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.213549][T18493] do_syscall_64+0xcd/0x490 [ 575.213588][T18493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.213623][T18493] RIP: 0033:0x7f1d2b78ebe9 [ 575.213647][T18493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.213676][T18493] RSP: 002b:00007f1d2c6a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 575.213702][T18493] RAX: ffffffffffffffda RBX: 00007f1d2b9b6090 RCX: 00007f1d2b78ebe9 [ 575.213721][T18493] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000006 [ 575.213738][T18493] RBP: 00007f1d2c6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 575.213755][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.213771][T18493] R13: 00007f1d2b9b6128 R14: 00007f1d2b9b6090 R15: 00007fffe4dcac78 [ 575.213808][T18493] [ 576.137346][T18498] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1411'. [ 576.207740][T18504] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1413'. [ 576.613640][T18505] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 581.295552][T18597] netlink: zone id is out of range [ 581.327938][T18597] netlink: zone id is out of range [ 581.357612][ T30] audit: type=1804 audit(6049927719.084:26): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1427" name="/newroot/338/file0" dev="tmpfs" ino=1793 res=1 errno=0 [ 581.388006][T18595] netlink: set zone limit has 8 unknown bytes [ 581.412936][T18597] netlink: del zone limit has 4 unknown bytes [ 583.404300][T18704] FAULT_INJECTION: forcing a failure. [ 583.404300][T18704] name failslab, interval 1, probability 0, space 0, times 0 [ 583.417501][T18704] CPU: 1 UID: 0 PID: 18704 Comm: syz.2.1435 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 583.417568][T18704] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 583.417583][T18704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.417602][T18704] Call Trace: [ 583.417613][T18704] [ 583.417625][T18704] dump_stack_lvl+0x16c/0x1f0 [ 583.417690][T18704] should_fail_ex+0x512/0x640 [ 583.417735][T18704] ? __kvmalloc_node_noprof+0x124/0x620 [ 583.417777][T18704] should_failslab+0xc2/0x120 [ 583.417822][T18704] __kvmalloc_node_noprof+0x137/0x620 [ 583.417858][T18704] ? lockdep_init_map_type+0x5c/0x280 [ 583.417905][T18704] ? alloc_netdev_mqs+0xae5/0x1500 [ 583.417956][T18704] ? alloc_netdev_mqs+0xae5/0x1500 [ 583.417995][T18704] alloc_netdev_mqs+0xae5/0x1500 [ 583.418057][T18704] ppp_ioctl+0x1761/0x2660 [ 583.418109][T18704] ? find_held_lock+0x2b/0x80 [ 583.418140][T18704] ? __pfx_ppp_ioctl+0x10/0x10 [ 583.418195][T18704] ? __fget_files+0x20e/0x3c0 [ 583.418238][T18704] ? __pfx_ppp_ioctl+0x10/0x10 [ 583.418284][T18704] __x64_sys_ioctl+0x18e/0x210 [ 583.418338][T18704] do_syscall_64+0xcd/0x490 [ 583.418384][T18704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.418418][T18704] RIP: 0033:0x7fa0a3d8ebe9 [ 583.418445][T18704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.418478][T18704] RSP: 002b:00007fa0a4b2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.418509][T18704] RAX: ffffffffffffffda RBX: 00007fa0a3fb6090 RCX: 00007fa0a3d8ebe9 [ 583.418531][T18704] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 583.418550][T18704] RBP: 00007fa0a3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 583.418568][T18704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.418589][T18704] R13: 00007fa0a3fb6128 R14: 00007fa0a3fb6090 R15: 00007ffd888cffd8 [ 583.418631][T18704] [ 583.923451][T18689] ima: policy update failed [ 583.934563][ T30] audit: type=1802 audit(6049927721.658:27): pid=18689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1434" res=0 errno=0 [ 584.752987][T18745] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 586.334054][T18805] futex_wake_op: syz.1.1440 tries to shift op by -9; fix this program [ 586.871576][T18815] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 587.724618][T18872] random: crng reseeded on system resumption [ 588.160742][T18815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.229339][T18815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.624036][T18884] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 589.564024][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1449'. [ 589.881017][T18911] [U]  [ 590.027584][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 594.805145][T19073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1463'. [ 594.823739][T19073] bridge_slave_1: left allmulticast mode [ 594.850268][T19073] bridge_slave_1: left promiscuous mode [ 594.914140][T19073] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.979381][T19073] bridge_slave_0: left allmulticast mode [ 595.053512][T19073] bridge_slave_0: left promiscuous mode [ 595.059304][T19073] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.454084][T19092] kexec: Could not allocate control_code_buffer [ 597.862323][T19123] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 599.172735][T19165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.184962][T19165] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.212495][T19165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.232814][T19165] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.254950][T19165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 599.262392][T19162] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 601.370333][T19165] Bluetooth: hci4: command tx timeout [ 602.098915][T19294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1482'. [ 602.604125][T19275] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 603.319862][T19161] chnl_net:caif_netlink_parms(): no params data found [ 603.429560][T19165] Bluetooth: hci4: command tx timeout [ 604.747473][T19161] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.782997][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.790342][T19161] bridge_slave_0: entered allmulticast mode [ 604.852146][T19161] bridge_slave_0: entered promiscuous mode [ 605.120952][T19161] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.156449][T19161] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.177541][T19161] bridge_slave_1: entered allmulticast mode [ 605.203739][T19161] bridge_slave_1: entered promiscuous mode [ 605.498968][T19165] Bluetooth: hci4: command tx timeout [ 605.610734][T19161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.680222][T19161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.119802][T19161] team0: Port device team_slave_0 added [ 606.158010][T19161] team0: Port device team_slave_1 added [ 606.832444][T19161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.871669][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.950289][T19161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.081401][T19161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.088466][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.229776][T19161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.568276][T19165] Bluetooth: hci4: command tx timeout [ 607.771800][T19647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1490'. [ 608.062348][T19161] hsr_slave_0: entered promiscuous mode [ 608.081574][T19161] hsr_slave_1: entered promiscuous mode [ 608.118290][T19161] debugfs: 'hsr0' already exists in 'hsr' [ 608.154536][T19161] Cannot create hsr debugfs directory [ 608.782704][T19722] netlink: zone id is out of range [ 608.790006][T19722] netlink: zone id is out of range [ 608.795374][T19722] netlink: zone id is out of range [ 608.801841][T19722] netlink: zone id is out of range [ 608.808818][T19722] netlink: zone id is out of range [ 608.908509][T19722] netlink: zone id is out of range [ 608.920268][T19722] netlink: zone id is out of range [ 608.938606][T19722] netlink: zone id is out of range [ 609.034805][T19722] netlink: zone id is out of range [ 609.060622][T19722] netlink: zone id is out of range [ 609.232895][T19161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 609.335886][T19161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 609.414082][T18690] Process accounting paused [ 609.422008][T19161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 609.627637][T19161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 610.031529][T19666] kexec: Could not allocate control_code_buffer [ 610.923526][T19161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.946334][T19161] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.056708][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.064023][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.304763][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.312817][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.875333][T16861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.208250][T19806] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 612.227189][T16861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.255840][T19161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.576268][T16861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.694020][T16861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.308417][T19819] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 613.354454][T19819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 613.369326][T19819] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 613.376495][T19819] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 613.400081][T19819] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 613.578762][T19819] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 613.589297][T19161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.381781][T19887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1503'. [ 614.731045][ T5870] Bluetooth: hci0: command 0x0406 tx timeout [ 615.387301][T19899] Bluetooth: hci2: command 0x0406 tx timeout [ 615.447390][T19906] Bluetooth: hci4: command 0x0c1a tx timeout [ 615.453502][T19906] Bluetooth: hci3: command 0x0c1a tx timeout [ 615.573831][T16861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.610314][T16861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.648251][T16861] bond0 (unregistering): Released all slaves [ 616.100862][T19922] net_ratelimit: 672 callbacks suppressed [ 616.100892][T19922] netlink: zone id is out of range [ 616.193501][T19922] netlink: zone id is out of range [ 616.198677][T19922] netlink: zone id is out of range [ 616.280348][T19922] netlink: zone id is out of range [ 616.322624][T19922] netlink: zone id is out of range [ 616.384946][T19922] netlink: zone id is out of range [ 616.414439][T19922] netlink: zone id is out of range [ 616.419654][T19922] netlink: zone id is out of range [ 616.436781][T19922] netlink: zone id is out of range [ 616.463509][T19922] netlink: zone id is out of range [ 616.926212][T19161] veth0_vlan: entered promiscuous mode [ 617.202236][T19161] veth1_vlan: entered promiscuous mode [ 617.470147][T19161] veth0_macvtap: entered promiscuous mode [ 617.555184][T19908] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.878895][T19161] veth1_macvtap: entered promiscuous mode [ 618.442177][T19161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.575297][T19161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.611189][T19902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.643093][T19902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.765474][ T30] audit: type=1800 audit(6049927756.679:28): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1513" name="version" dev="configfs" ino=46668 res=0 errno=0 [ 618.920230][T19902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.929612][T19902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.098880][T19996] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 619.587324][T19908] Bluetooth: hci4: command 0x0c1a tx timeout [ 619.592623][T20004] nbd: couldn't find device at index 33904 [ 619.831093][T19902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.877516][T19902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.209747][T19904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.229618][T19904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.582667][T20084] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 622.580934][T20102] syz.2.1523 (20102): /proc/20101/oom_adj is deprecated, please use /proc/20101/oom_score_adj instead. [ 622.707676][T20114] nbd: couldn't find device at index 33904 [ 622.729743][ T30] audit: type=1800 audit(6049927760.659:29): pid=20115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1523" name="version" dev="configfs" ino=47005 res=0 errno=0 [ 623.131846][T16861] hsr_slave_0: left promiscuous mode [ 623.140828][T16861] hsr_slave_1: left promiscuous mode [ 623.141773][T16861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.141804][T16861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.168244][T16861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.184799][T16861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.255310][T16861] veth1_macvtap: left promiscuous mode [ 623.255398][T16861] veth0_macvtap: left promiscuous mode [ 623.255550][T16861] veth1_vlan: left promiscuous mode [ 623.255659][T16861] veth0_vlan: left promiscuous mode [ 623.809358][T20139] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 623.994147][T20143] FAULT_INJECTION: forcing a failure. [ 623.994147][T20143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 624.013293][T20143] CPU: 1 UID: 0 PID: 20143 Comm: syz.0.1528 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 624.013357][T20143] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 624.013373][T20143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.013391][T20143] Call Trace: [ 624.013409][T20143] [ 624.013422][T20143] dump_stack_lvl+0x16c/0x1f0 [ 624.013470][T20143] should_fail_ex+0x512/0x640 [ 624.013531][T20143] should_fail_alloc_page+0xe7/0x130 [ 624.013583][T20143] prepare_alloc_pages+0x3c2/0x610 [ 624.013632][T20143] ? rcu_is_watching+0x12/0xc0 [ 624.013670][T20143] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 624.013716][T20143] ? check_irq_usage+0xcb/0x920 [ 624.013767][T20143] ? pcpu_next_md_free_region+0x108/0x380 [ 624.013825][T20143] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 624.013866][T20143] ? pcpu_chunk_refresh_hint+0x2b5/0x360 [ 624.013921][T20143] ? __pfx_pcpu_chunk_refresh_hint+0x10/0x10 [ 624.013992][T20143] ? pcpu_block_update_hint_alloc+0x86b/0xb80 [ 624.014039][T20143] __alloc_pages_noprof+0xb/0x1b0 [ 624.014076][T20143] pcpu_populate_chunk+0x110/0xb00 [ 624.014110][T20143] ? mark_held_locks+0x49/0x80 [ 624.014152][T20143] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 624.014195][T20143] pcpu_alloc_noprof+0x86a/0x1470 [ 624.014253][T20143] tbl_mask_cache_alloc+0xeb/0x200 [ 624.014286][T20143] ovs_flow_tbl_init+0x24/0x600 [ 624.014319][T20143] ? kasan_save_track+0x14/0x30 [ 624.014360][T20143] ovs_dp_cmd_new+0x251/0xe60 [ 624.014419][T20143] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 624.014466][T20143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 624.014518][T20143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 624.014581][T20143] genl_family_rcv_msg_doit+0x209/0x2f0 [ 624.014632][T20143] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 624.014694][T20143] ? bpf_lsm_capable+0x9/0x10 [ 624.014724][T20143] ? security_capable+0x7e/0x260 [ 624.014758][T20143] ? ns_capable+0xd7/0x110 [ 624.014796][T20143] genl_rcv_msg+0x55c/0x800 [ 624.014847][T20143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.014896][T20143] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 624.014947][T20143] netlink_rcv_skb+0x158/0x420 [ 624.014989][T20143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.015040][T20143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.015102][T20143] ? netlink_deliver_tap+0x1ae/0xd30 [ 624.015148][T20143] genl_rcv+0x28/0x40 [ 624.015191][T20143] netlink_unicast+0x5a7/0x870 [ 624.015242][T20143] ? __pfx_netlink_unicast+0x10/0x10 [ 624.015285][T20143] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 624.015325][T20143] ? __lock_acquire+0xb97/0x1ce0 [ 624.015378][T20143] netlink_sendmsg+0x8d1/0xdd0 [ 624.015440][T20143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.015490][T20143] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 624.015533][T20143] ____sys_sendmsg+0xa95/0xc70 [ 624.015586][T20143] ? copy_msghdr_from_user+0x10a/0x160 [ 624.015627][T20143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.015691][T20143] ? __pfx_futex_wake_mark+0x10/0x10 [ 624.015747][T20143] ___sys_sendmsg+0x134/0x1d0 [ 624.015790][T20143] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.015883][T20143] __sys_sendmsg+0x16d/0x220 [ 624.015926][T20143] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.015964][T20143] ? __x64_sys_futex+0x1e0/0x4c0 [ 624.016033][T20143] do_syscall_64+0xcd/0x490 [ 624.016077][T20143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.016110][T20143] RIP: 0033:0x7f0208b8ebe9 [ 624.016137][T20143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.016171][T20143] RSP: 002b:00007f0209a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.016203][T20143] RAX: ffffffffffffffda RBX: 00007f0208db6090 RCX: 00007f0208b8ebe9 [ 624.016226][T20143] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 624.016247][T20143] RBP: 00007f0208c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 624.016267][T20143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.016286][T20143] R13: 00007f0208db6128 R14: 00007f0208db6090 R15: 00007ffc1c9f2208 [ 624.016330][T20143] [ 624.016529][T20143] percpu: allocation failed, size=2048 align=4 atomic=0, failed to populate [ 624.462562][T20143] CPU: 0 UID: 0 PID: 20143 Comm: syz.0.1528 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 624.462627][T20143] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 624.462642][T20143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.462662][T20143] Call Trace: [ 624.462673][T20143] [ 624.462687][T20143] dump_stack_lvl+0x16c/0x1f0 [ 624.462733][T20143] pcpu_alloc_noprof+0x115e/0x1470 [ 624.462796][T20143] tbl_mask_cache_alloc+0xeb/0x200 [ 624.462830][T20143] ovs_flow_tbl_init+0x24/0x600 [ 624.462863][T20143] ? kasan_save_track+0x14/0x30 [ 624.462909][T20143] ovs_dp_cmd_new+0x251/0xe60 [ 624.462958][T20143] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 624.463007][T20143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 624.463060][T20143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 624.463123][T20143] genl_family_rcv_msg_doit+0x209/0x2f0 [ 624.463180][T20143] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 624.463245][T20143] ? bpf_lsm_capable+0x9/0x10 [ 624.463278][T20143] ? security_capable+0x7e/0x260 [ 624.463319][T20143] ? ns_capable+0xd7/0x110 [ 624.463358][T20143] genl_rcv_msg+0x55c/0x800 [ 624.463418][T20143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.463469][T20143] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 624.463524][T20143] netlink_rcv_skb+0x158/0x420 [ 624.463571][T20143] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.463624][T20143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.463687][T20143] ? netlink_deliver_tap+0x1ae/0xd30 [ 624.463739][T20143] genl_rcv+0x28/0x40 [ 624.463784][T20143] netlink_unicast+0x5a7/0x870 [ 624.463836][T20143] ? __pfx_netlink_unicast+0x10/0x10 [ 624.463880][T20143] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 624.463920][T20143] ? __lock_acquire+0xb97/0x1ce0 [ 624.463981][T20143] netlink_sendmsg+0x8d1/0xdd0 [ 624.464033][T20143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.464086][T20143] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 624.464129][T20143] ____sys_sendmsg+0xa95/0xc70 [ 624.464182][T20143] ? copy_msghdr_from_user+0x10a/0x160 [ 624.464229][T20143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.464298][T20143] ? __pfx_futex_wake_mark+0x10/0x10 [ 624.464358][T20143] ___sys_sendmsg+0x134/0x1d0 [ 624.464404][T20143] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.464506][T20143] __sys_sendmsg+0x16d/0x220 [ 624.464552][T20143] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.464593][T20143] ? __x64_sys_futex+0x1e0/0x4c0 [ 624.464666][T20143] do_syscall_64+0xcd/0x490 [ 624.464713][T20143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.464747][T20143] RIP: 0033:0x7f0208b8ebe9 [ 624.464777][T20143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.464810][T20143] RSP: 002b:00007f0209a5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.464841][T20143] RAX: ffffffffffffffda RBX: 00007f0208db6090 RCX: 00007f0208b8ebe9 [ 624.464862][T20143] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 624.464883][T20143] RBP: 00007f0208c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 624.464904][T20143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.464927][T20143] R13: 00007f0208db6128 R14: 00007f0208db6090 R15: 00007ffc1c9f2208 [ 624.464971][T20143] [ 624.819305][T20151] i2c i2c-0: delete_device: Extra parameters [ 626.975327][T20156] kexec: Could not allocate control_code_buffer [ 628.705909][T20181] kexec: Could not allocate control_code_buffer [ 629.007315][T16861] team0 (unregistering): Port device team_slave_1 removed [ 629.153353][T16861] team0 (unregistering): Port device team_slave_0 removed [ 631.935331][T20281] nbd: couldn't find device at index 33904 [ 631.966624][T20284] net_ratelimit: 672 callbacks suppressed [ 631.966652][T20284] netlink: zone id is out of range [ 631.977854][T20284] netlink: zone id is out of range [ 631.983189][T20284] netlink: zone id is out of range [ 631.988653][T20284] netlink: zone id is out of range [ 631.994413][T20284] netlink: zone id is out of range [ 631.999730][T20284] netlink: zone id is out of range [ 632.005016][T20284] netlink: zone id is out of range [ 632.010177][T20284] netlink: zone id is out of range [ 632.015724][T20284] netlink: zone id is out of range [ 632.141779][T20284] netlink: zone id is out of range [ 633.121996][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.154975][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.949626][T20314] zswap: compressor È®9Q›¾z%;0*l H`Bkãjë™wj§Ó³<85Åè'.Y[«`ÿÛ2ÑY$¼`ÔYvÚgÖ´óqÊ"b%…zËN[O EiF¸iü»(ShÀ„3Kxá>ÔRS=óþkHÑÉŸƒÆÿ{è?BýÌò½ÑbŠëÞ4)>øªÚ not available [ 634.809892][T19899] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 634.809937][T19899] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 634.825316][T19899] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 635.908632][T20388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1557'. [ 636.004601][T20390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 640.373672][T20545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'. [ 641.023100][T20571] net_ratelimit: 672 callbacks suppressed [ 641.023128][T20571] netlink: zone id is out of range [ 641.037426][T20576] FAULT_INJECTION: forcing a failure. [ 641.037426][T20576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.051631][T20571] netlink: zone id is out of range [ 641.057193][T20571] netlink: zone id is out of range [ 641.062453][T20571] netlink: zone id is out of range [ 641.136625][T20571] netlink: zone id is out of range [ 641.142965][T20576] CPU: 0 UID: 0 PID: 20576 Comm: syz.0.1573 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 641.143022][T20576] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 641.143037][T20576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.143054][T20576] Call Trace: [ 641.143064][T20576] [ 641.143075][T20576] dump_stack_lvl+0x16c/0x1f0 [ 641.143120][T20576] should_fail_ex+0x512/0x640 [ 641.143170][T20576] _copy_to_user+0x32/0xd0 [ 641.143225][T20576] simple_read_from_buffer+0xcb/0x170 [ 641.143287][T20576] proc_fail_nth_read+0x197/0x240 [ 641.143323][T20576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.143360][T20576] ? rw_verify_area+0xcf/0x6c0 [ 641.143392][T20576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.143426][T20576] vfs_read+0x1e4/0xcf0 [ 641.143468][T20576] ? __pfx___mutex_lock+0x10/0x10 [ 641.143509][T20576] ? __pfx_vfs_read+0x10/0x10 [ 641.143558][T20576] ? __fget_files+0x20e/0x3c0 [ 641.143604][T20576] ksys_read+0x12a/0x250 [ 641.143639][T20576] ? __pfx_ksys_read+0x10/0x10 [ 641.143687][T20576] do_syscall_64+0xcd/0x490 [ 641.143733][T20576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.143766][T20576] RIP: 0033:0x7f0208b8d5fc [ 641.143791][T20576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 641.143823][T20576] RSP: 002b:00007f0209a80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 641.143896][T20576] RAX: ffffffffffffffda RBX: 00007f0208db5fa0 RCX: 00007f0208b8d5fc [ 641.143917][T20576] RDX: 000000000000000f RSI: 00007f0209a800a0 RDI: 0000000000000003 [ 641.143937][T20576] RBP: 00007f0209a80090 R08: 0000000000000000 R09: 0000000000000000 [ 641.143956][T20576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.143976][T20576] R13: 00007f0208db6038 R14: 00007f0208db5fa0 R15: 00007ffc1c9f2208 [ 641.144020][T20576] [ 641.362262][T20571] netlink: zone id is out of range [ 641.446852][T20571] netlink: zone id is out of range [ 641.581502][T20571] netlink: zone id is out of range [ 641.586704][T20571] netlink: zone id is out of range [ 641.735374][T20571] netlink: zone id is out of range [ 642.160524][T20590] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 642.182855][T20590] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 642.402720][T20596] random: crng reseeded on system resumption [ 646.776683][T20735] net_ratelimit: 1354 callbacks suppressed [ 646.776712][T20735] netlink: zone id is out of range [ 646.802536][T20735] netlink: zone id is out of range [ 646.812615][T20735] netlink: zone id is out of range [ 646.833077][T20735] netlink: zone id is out of range [ 646.839102][T20735] netlink: zone id is out of range [ 646.844639][T20735] netlink: zone id is out of range [ 646.849805][T20735] netlink: zone id is out of range [ 646.855661][T20735] netlink: zone id is out of range [ 646.860851][T20735] netlink: zone id is out of range [ 646.866487][T20735] netlink: zone id is out of range [ 649.073105][T20805] IPVS: length: 131 != 8 [ 649.113005][T20805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1590'. [ 649.512800][T20818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1591'. [ 649.711083][T20805] mac80211_hwsim hwsim60 wlan1: entered allmulticast mode [ 651.196459][T20858] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 651.585053][T20850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 651.959094][T20850] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.329790][T20850] bridge_slave_1 (unregistering): left allmulticast mode [ 652.418636][T20850] bridge_slave_1 (unregistering): left promiscuous mode [ 652.484248][T20850] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.511110][T20861] kexec: Could not allocate control_code_buffer [ 652.733878][T20885] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 654.574919][T20955] FAULT_INJECTION: forcing a failure. [ 654.574919][T20955] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.636789][T20955] CPU: 1 UID: 0 PID: 20955 Comm: syz.0.1604 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 654.636849][T20955] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 654.636863][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.636881][T20955] Call Trace: [ 654.636891][T20955] [ 654.636904][T20955] dump_stack_lvl+0x16c/0x1f0 [ 654.636949][T20955] should_fail_ex+0x512/0x640 [ 654.637000][T20955] should_fail_alloc_page+0xe7/0x130 [ 654.637045][T20955] prepare_alloc_pages+0x3c2/0x610 [ 654.637093][T20955] ? rcu_is_watching+0x12/0xc0 [ 654.637128][T20955] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 654.637171][T20955] ? __lock_acquire+0xb97/0x1ce0 [ 654.637231][T20955] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 654.637271][T20955] ? do_raw_spin_lock+0x12c/0x2b0 [ 654.637322][T20955] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 654.637380][T20955] ? find_held_lock+0x2b/0x80 [ 654.637421][T20955] ? __lock_acquire+0xb97/0x1ce0 [ 654.637462][T20955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.637511][T20955] ? policy_nodemask+0xea/0x4e0 [ 654.637557][T20955] alloc_pages_mpol+0x1fb/0x550 [ 654.637600][T20955] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 654.637655][T20955] folio_alloc_mpol_noprof+0x36/0x2f0 [ 654.637706][T20955] shmem_alloc_folio+0x135/0x160 [ 654.637758][T20955] shmem_alloc_and_add_folio+0x499/0xc20 [ 654.637806][T20955] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 654.637846][T20955] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 654.637891][T20955] shmem_get_folio_gfp+0x67f/0x1600 [ 654.637938][T20955] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 654.637977][T20955] ? __pfx_timestamp_truncate+0x10/0x10 [ 654.638023][T20955] shmem_fault+0x1fe/0xa30 [ 654.638063][T20955] ? __pfx_shmem_fault+0x10/0x10 [ 654.638098][T20955] ? __lock_acquire+0x62e/0x1ce0 [ 654.638144][T20955] ? __pfx___up_read+0x10/0x10 [ 654.638187][T20955] ? inode_to_bdi+0x9e/0x160 [ 654.638237][T20955] ? __pfx_filemap_map_pages+0x10/0x10 [ 654.638276][T20955] __do_fault+0x10a/0x490 [ 654.638319][T20955] ? __pfx_filemap_map_pages+0x10/0x10 [ 654.638364][T20955] do_pte_missing+0x1a6/0x3ba0 [ 654.638399][T20955] ? find_held_lock+0x2b/0x80 [ 654.638431][T20955] ? __handle_mm_fault+0x14fd/0x2a50 [ 654.638471][T20955] __handle_mm_fault+0x152a/0x2a50 [ 654.638517][T20955] ? __pfx___handle_mm_fault+0x10/0x10 [ 654.638554][T20955] ? __pte_offset_map_lock+0x174/0x310 [ 654.638600][T20955] ? find_held_lock+0x2b/0x80 [ 654.638646][T20955] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 654.638706][T20955] handle_mm_fault+0x589/0xd10 [ 654.638749][T20955] __get_user_pages+0x551/0x34a0 [ 654.638809][T20955] ? down_read_killable+0x220/0x4b0 [ 654.638854][T20955] ? __lock_acquire+0x62e/0x1ce0 [ 654.638895][T20955] ? __pfx___get_user_pages+0x10/0x10 [ 654.638955][T20955] __gup_longterm_locked+0x2dd/0x17e0 [ 654.639018][T20955] ? __pfx___gup_longterm_locked+0x10/0x10 [ 654.639073][T20955] ? try_get_folio+0x255/0x730 [ 654.639114][T20955] ? find_held_lock+0x2b/0x80 [ 654.639147][T20955] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 654.639202][T20955] gup_fast_fallback+0xf78/0x23f0 [ 654.639282][T20955] ? __pfx_gup_fast_fallback+0x10/0x10 [ 654.639334][T20955] ? ___kmalloc_large_node+0x114/0x160 [ 654.639393][T20955] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.639434][T20955] ? rcu_is_watching+0x12/0xc0 [ 654.639474][T20955] pin_user_pages_fast+0xa7/0xf0 [ 654.639524][T20955] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 654.639585][T20955] io_pin_pages+0xe1/0x1e0 [ 654.639633][T20955] io_sqe_buffer_register+0x16f/0x2010 [ 654.639709][T20955] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 654.639759][T20955] ? rcu_is_watching+0x12/0xc0 [ 654.639802][T20955] ? iovec_from_user+0xbb/0x140 [ 654.639836][T20955] io_sqe_buffers_register+0x1ed/0x860 [ 654.639897][T20955] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 654.639955][T20955] ? __mutex_trylock_common+0xe9/0x250 [ 654.639999][T20955] ? __pfx___mutex_trylock_common+0x10/0x10 [ 654.640051][T20955] __io_uring_register+0x21e2/0x23c0 [ 654.640095][T20955] ? trace_contention_end+0xdd/0x130 [ 654.640140][T20955] ? __pfx___io_uring_register+0x10/0x10 [ 654.640197][T20955] ? __pfx___mutex_lock+0x10/0x10 [ 654.640250][T20955] ? __fget_files+0x20e/0x3c0 [ 654.640297][T20955] __x64_sys_io_uring_register+0x169/0x280 [ 654.640345][T20955] do_syscall_64+0xcd/0x490 [ 654.640394][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.640424][T20955] RIP: 0033:0x7f0208b8ebe9 [ 654.640450][T20955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.640482][T20955] RSP: 002b:00007f0209a5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 654.640512][T20955] RAX: ffffffffffffffda RBX: 00007f0208db6090 RCX: 00007f0208b8ebe9 [ 654.640534][T20955] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 654.640555][T20955] RBP: 00007f0209a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 654.640575][T20955] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 654.640594][T20955] R13: 00007f0208db6128 R14: 00007f0208db6090 R15: 00007ffc1c9f2208 [ 654.640638][T20955] [ 655.144421][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.033942][T20978] net_ratelimit: 1354 callbacks suppressed [ 656.033964][T20978] netlink: zone id is out of range [ 656.072096][T20978] netlink: zone id is out of range [ 656.078350][T20978] netlink: zone id is out of range [ 656.185491][T20978] netlink: zone id is out of range [ 656.190997][T20978] netlink: zone id is out of range [ 656.211079][T20978] netlink: zone id is out of range [ 656.216516][T20978] netlink: zone id is out of range [ 656.221737][T20978] netlink: zone id is out of range [ 656.232335][T20978] netlink: zone id is out of range [ 656.242502][T20978] netlink: zone id is out of range [ 657.956194][T21038] nbd: couldn't find device at index 33904 [ 660.516353][T21133] zswap: compressor not available [ 660.686269][ T30] audit: type=1804 audit(6049927798.827:30): pid=21159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1618" name="/newroot/429/file0" dev="tmpfs" ino=2263 res=1 errno=0 [ 660.775012][ T30] audit: type=1804 audit(6049927798.867:31): pid=21160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1618" name="/newroot/429/file0" dev="tmpfs" ino=2263 res=1 errno=0 [ 660.850867][ T30] audit: type=1800 audit(6049927798.897:32): pid=21159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1618" name="file0" dev="tmpfs" ino=2263 res=0 errno=0 [ 663.223222][T21228] FAULT_INJECTION: forcing a failure. [ 663.223222][T21228] name failslab, interval 1, probability 0, space 0, times 0 [ 663.223279][T21228] CPU: 1 UID: 0 PID: 21228 Comm: syz.4.1626 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 663.223335][T21228] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 663.223351][T21228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.223370][T21228] Call Trace: [ 663.223382][T21228] [ 663.223394][T21228] dump_stack_lvl+0x16c/0x1f0 [ 663.223442][T21228] should_fail_ex+0x512/0x640 [ 663.223487][T21228] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 663.223549][T21228] should_failslab+0xc2/0x120 [ 663.223595][T21228] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 663.223635][T21228] ? __pfx_map_id_range_down+0x10/0x10 [ 663.223683][T21228] ? fput+0x9b/0xd0 [ 663.223726][T21228] ? prepare_creds+0x2c/0x7d0 [ 663.223782][T21228] prepare_creds+0x2c/0x7d0 [ 663.223832][T21228] __sys_setuid+0x9a/0x440 [ 663.223868][T21228] do_syscall_64+0xcd/0x490 [ 663.223913][T21228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.223945][T21228] RIP: 0033:0x7fda1cf8ebe9 [ 663.223971][T21228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.224004][T21228] RSP: 002b:00007fda1de50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 663.224036][T21228] RAX: ffffffffffffffda RBX: 00007fda1d1b5fa0 RCX: 00007fda1cf8ebe9 [ 663.224058][T21228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 663.224077][T21228] RBP: 00007fda1d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 663.224096][T21228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.224115][T21228] R13: 00007fda1d1b6038 R14: 00007fda1d1b5fa0 R15: 00007ffe60ce44d8 [ 663.224155][T21228] [ 665.693366][T21248] tty tty45: ldisc open failed (-12), clearing slot 44 [ 666.165040][T21282] nbd: couldn't find device at index 33904 [ 666.317889][T21217] kexec: Could not allocate control_code_buffer [ 667.438853][T21302] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 668.520665][T21361] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1634'. [ 671.173036][T21485] net_ratelimit: 672 callbacks suppressed [ 671.173058][T21485] netlink: zone id is out of range [ 671.203741][T21485] netlink: zone id is out of range [ 671.230185][T21485] netlink: zone id is out of range [ 671.236570][T21485] netlink: zone id is out of range [ 671.245372][T21485] netlink: zone id is out of range [ 671.257336][T21485] netlink: zone id is out of range [ 671.270677][T21485] netlink: zone id is out of range [ 671.307113][T21485] netlink: zone id is out of range [ 671.312629][T21485] netlink: zone id is out of range [ 671.319094][T21485] netlink: zone id is out of range [ 671.375919][T21488] nbd: couldn't find device at index 33904 [ 671.689232][T21486] futex_wake_op: syz.0.1645 tries to shift op by -9; fix this program [ 672.018272][T21497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1648'. [ 672.962353][T21546] FAULT_INJECTION: forcing a failure. [ 672.962353][T21546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.991524][T21546] CPU: 1 UID: 0 PID: 21546 Comm: syz.4.1652 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 672.991584][T21546] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 672.991600][T21546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.991618][T21546] Call Trace: [ 672.991629][T21546] [ 672.991641][T21546] dump_stack_lvl+0x16c/0x1f0 [ 672.991686][T21546] should_fail_ex+0x512/0x640 [ 672.991736][T21546] _copy_from_iter+0x29f/0x16f0 [ 672.991791][T21546] ? __alloc_skb+0x200/0x380 [ 672.991829][T21546] ? __pfx__copy_from_iter+0x10/0x10 [ 672.991894][T21546] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 672.991934][T21546] ? __lock_acquire+0xb97/0x1ce0 [ 672.991988][T21546] netlink_sendmsg+0x829/0xdd0 [ 672.992043][T21546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.992092][T21546] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 672.992134][T21546] ____sys_sendmsg+0xa95/0xc70 [ 672.992184][T21546] ? copy_msghdr_from_user+0x10a/0x160 [ 672.992225][T21546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.992295][T21546] ___sys_sendmsg+0x134/0x1d0 [ 672.992340][T21546] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.992417][T21546] ? __mutex_unlock_slowpath+0x140/0x800 [ 672.992471][T21546] __sys_sendmsg+0x16d/0x220 [ 672.992512][T21546] ? __pfx___sys_sendmsg+0x10/0x10 [ 672.992581][T21546] do_syscall_64+0xcd/0x490 [ 672.992626][T21546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.992659][T21546] RIP: 0033:0x7fda1cf8ebe9 [ 672.992684][T21546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.992717][T21546] RSP: 002b:00007fda1de50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.992748][T21546] RAX: ffffffffffffffda RBX: 00007fda1d1b5fa0 RCX: 00007fda1cf8ebe9 [ 672.992768][T21546] RDX: 00000000140000e4 RSI: 00002000000005c0 RDI: 0000000000000003 [ 672.992789][T21546] RBP: 00007fda1de50090 R08: 0000000000000000 R09: 0000000000000000 [ 672.992809][T21546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.992828][T21546] R13: 00007fda1d1b6038 R14: 00007fda1d1b5fa0 R15: 00007ffe60ce44d8 [ 672.992875][T21546] [ 675.148624][T21648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 675.252158][T21651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'. [ 675.800001][T21663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1662'. [ 675.823101][T21663] nbd: must specify a size in bytes for the device [ 677.871276][T21692] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 678.327278][T21789] net_ratelimit: 1354 callbacks suppressed [ 678.327306][T21789] netlink: zone id is out of range [ 678.339201][T21789] netlink: zone id is out of range [ 678.345812][T21789] netlink: zone id is out of range [ 678.389866][T21789] netlink: zone id is out of range [ 678.396251][T21789] netlink: zone id is out of range [ 678.402241][T21789] netlink: zone id is out of range [ 678.407580][T21789] netlink: zone id is out of range [ 678.418803][T21789] netlink: zone id is out of range [ 678.426614][T21789] netlink: zone id is out of range [ 678.432002][T21789] netlink: zone id is out of range [ 679.680622][T21835] mtrr: base(0x8000) is not aligned on a size(0x10000) boundary [ 680.688034][T21878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 681.758407][T21909] nbd: couldn't find device at index 33904 [ 684.443213][T22014] nbd: couldn't find device at index 33904 [ 688.110286][T22088] FAULT_INJECTION: forcing a failure. [ 688.110286][T22088] name fail_futex, interval 1, probability 0, space 0, times 0 [ 688.158943][ T30] audit: type=1800 audit(6049927826.430:33): pid=22100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1694" name="version" dev="configfs" ino=52363 res=0 errno=0 [ 688.232317][T22088] CPU: 1 UID: 0 PID: 22088 Comm: syz.4.1693 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 688.232382][T22088] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 688.232397][T22088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 688.232418][T22088] Call Trace: [ 688.232429][T22088] [ 688.232442][T22088] dump_stack_lvl+0x16c/0x1f0 [ 688.232490][T22088] should_fail_ex+0x512/0x640 [ 688.232556][T22088] get_futex_key+0x1d0/0x1560 [ 688.232599][T22088] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 688.232639][T22088] ? __pfx_get_futex_key+0x10/0x10 [ 688.232684][T22088] ? __pfx_wake_up_new_task+0x10/0x10 [ 688.232745][T22088] futex_wake+0xea/0x530 [ 688.232793][T22088] ? kernel_clone+0x253/0x930 [ 688.232836][T22088] ? __pfx_futex_wake+0x10/0x10 [ 688.232904][T22088] do_futex+0x1e3/0x350 [ 688.232948][T22088] ? __pfx_do_futex+0x10/0x10 [ 688.232992][T22088] ? __pfx___do_sys_clone+0x10/0x10 [ 688.233042][T22088] __x64_sys_futex+0x1e0/0x4c0 [ 688.233090][T22088] ? __pfx___x64_sys_futex+0x10/0x10 [ 688.233132][T22088] ? xfd_validate_state+0x61/0x180 [ 688.233179][T22088] ? __pfx_do_writev+0x10/0x10 [ 688.233227][T22088] do_syscall_64+0xcd/0x490 [ 688.233273][T22088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.233307][T22088] RIP: 0033:0x7fda1cf8ebe9 [ 688.233334][T22088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.233368][T22088] RSP: 002b:00007fda1de500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 688.233401][T22088] RAX: ffffffffffffffda RBX: 00007fda1d1b5fa8 RCX: 00007fda1cf8ebe9 [ 688.233423][T22088] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda1d1b5fac [ 688.233444][T22088] RBP: 00007fda1d1b5fa0 R08: 00007fda1de51000 R09: 0000000000000000 [ 688.233465][T22088] R10: 00000000000000ba R11: 0000000000000246 R12: 0000000000000000 [ 688.233485][T22088] R13: 00007fda1d1b6038 R14: 00007ffe60ce43f0 R15: 00007ffe60ce44d8 [ 688.233536][T22088] [ 689.624185][T22115] net_ratelimit: 672 callbacks suppressed [ 689.624227][T22115] netlink: zone id is out of range [ 689.656617][T22115] netlink: zone id is out of range [ 689.662179][T22115] netlink: zone id is out of range [ 689.667359][T22115] netlink: zone id is out of range [ 689.675818][T22115] netlink: zone id is out of range [ 689.687619][T22115] netlink: zone id is out of range [ 689.790433][T22105] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 689.867381][T22115] netlink: zone id is out of range [ 689.884665][T22115] netlink: zone id is out of range [ 689.890576][T22115] netlink: zone id is out of range [ 689.911434][T22115] netlink: zone id is out of range [ 690.493527][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 694.244421][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.251604][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.271006][T22268] futex_wake_op: syz.2.1717 tries to shift op by -9; fix this program [ 701.602462][T22446] net_ratelimit: 2036 callbacks suppressed [ 701.602542][T22446] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 702.500296][T22411] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 703.482087][T22506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1738'. [ 703.492104][T22506] macvtap0: left promiscuous mode [ 703.497254][T22506] macvtap0: left allmulticast mode [ 704.494266][T22545] ima: policy update failed [ 704.499697][ T30] audit: type=1802 audit(6049927842.865:34): pid=22545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1741" res=0 errno=0 [ 704.623382][T22555] nbd: couldn't find device at index 33904 [ 704.840094][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'. [ 705.039659][T22565] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 706.277619][T22655] netlink: zone id is out of range [ 706.297178][T22655] netlink: zone id is out of range [ 706.302976][T22655] netlink: zone id is out of range [ 706.324058][T22655] netlink: zone id is out of range [ 706.330225][T22655] netlink: zone id is out of range [ 706.337812][T22655] netlink: zone id is out of range [ 706.343039][T22655] netlink: zone id is out of range [ 706.348702][T22655] netlink: zone id is out of range [ 706.354024][T22655] netlink: zone id is out of range [ 706.773867][T22667] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 707.660120][T22707] input: fÅ as /devices/virtual/input/input15 [ 708.066366][T19899] Bluetooth: hci0: Malformed HCI Event [ 708.071990][T19899] Bluetooth: hci0: Malformed HCI Event [ 708.243177][T22715] zswap: compressor not available [ 708.781451][ T30] audit: type=1800 audit(6049927847.167:35): pid=22769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1759" name="version" dev="configfs" ino=53609 res=0 errno=0 [ 709.005858][T22773] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 711.135059][T22827] net_ratelimit: 673 callbacks suppressed [ 711.135103][T22827] netlink: zone id is out of range [ 711.240422][T22827] netlink: zone id is out of range [ 711.245659][T22827] netlink: zone id is out of range [ 711.250989][T22827] netlink: zone id is out of range [ 711.256645][T22827] netlink: zone id is out of range [ 711.264585][T22827] netlink: zone id is out of range [ 711.271707][T22827] netlink: zone id is out of range [ 711.279303][T22827] netlink: zone id is out of range [ 711.288254][T22827] netlink: zone id is out of range [ 711.308817][T22827] netlink: zone id is out of range [ 715.141974][T23006] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 716.999572][T23042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1782'. [ 717.746818][ T30] audit: type=1800 audit(6049927856.184:36): pid=23065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1785" name="version" dev="configfs" ino=54375 res=0 errno=0 [ 718.703689][T23089] net_ratelimit: 1354 callbacks suppressed [ 718.703752][T23089] netlink: zone id is out of range [ 718.837266][T23089] netlink: zone id is out of range [ 718.916030][T23089] netlink: zone id is out of range [ 718.924404][T23089] netlink: zone id is out of range [ 718.931537][T23089] netlink: zone id is out of range [ 718.956275][T23089] netlink: zone id is out of range [ 718.971901][T23089] netlink: zone id is out of range [ 718.987456][T23089] netlink: zone id is out of range [ 719.002568][T23089] netlink: zone id is out of range [ 719.013646][T23089] netlink: zone id is out of range [ 721.340668][ T30] audit: type=1800 audit(6049927859.792:37): pid=23176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1797" name="version" dev="configfs" ino=54070 res=0 errno=0 [ 724.102803][T23244] net_ratelimit: 1354 callbacks suppressed [ 724.102874][T23244] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 728.539683][T23349] FAULT_INJECTION: forcing a failure. [ 728.539683][T23349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.539736][T23349] CPU: 0 UID: 0 PID: 23349 Comm: syz.4.1818 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 728.539798][T23349] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 728.539812][T23349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 728.539831][T23349] Call Trace: [ 728.539842][T23349] [ 728.539853][T23349] dump_stack_lvl+0x16c/0x1f0 [ 728.539899][T23349] should_fail_ex+0x512/0x640 [ 728.539949][T23349] _copy_from_iter+0x29f/0x16f0 [ 728.540006][T23349] ? __alloc_skb+0x200/0x380 [ 728.540044][T23349] ? __pfx__copy_from_iter+0x10/0x10 [ 728.540097][T23349] ? __pfx___might_resched+0x10/0x10 [ 728.540130][T23349] ? __lock_acquire+0xb97/0x1ce0 [ 728.540182][T23349] netlink_sendmsg+0x829/0xdd0 [ 728.540230][T23349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.540279][T23349] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 728.540318][T23349] ____sys_sendmsg+0xa95/0xc70 [ 728.540369][T23349] ? copy_msghdr_from_user+0x10a/0x160 [ 728.540408][T23349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.540477][T23349] ___sys_sendmsg+0x134/0x1d0 [ 728.540519][T23349] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.540597][T23349] ? __mutex_unlock_slowpath+0x140/0x800 [ 728.540650][T23349] __sys_sendmsg+0x16d/0x220 [ 728.540692][T23349] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.540760][T23349] do_syscall_64+0xcd/0x490 [ 728.540812][T23349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.540849][T23349] RIP: 0033:0x7fda1cf8ebe9 [ 728.540874][T23349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.540907][T23349] RSP: 002b:00007fda1de50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.540937][T23349] RAX: ffffffffffffffda RBX: 00007fda1d1b5fa0 RCX: 00007fda1cf8ebe9 [ 728.540958][T23349] RDX: 0000000000044044 RSI: 0000200000006200 RDI: 0000000000000003 [ 728.540979][T23349] RBP: 00007fda1de50090 R08: 0000000000000000 R09: 0000000000000000 [ 728.540999][T23349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.541018][T23349] R13: 00007fda1d1b6038 R14: 00007fda1d1b5fa0 R15: 00007ffe60ce44d8 [ 728.541061][T23349] [ 729.815478][T23399] netlink: zone id is out of range [ 729.824085][T23399] netlink: zone id is out of range [ 730.001687][T23399] netlink: zone id is out of range [ 730.006853][T23399] netlink: zone id is out of range [ 730.061140][T23399] netlink: zone id is out of range [ 730.130951][T23399] netlink: zone id is out of range [ 730.147151][T23399] netlink: zone id is out of range [ 730.314653][T23399] netlink: zone id is out of range [ 730.573541][T23399] netlink: zone id is out of range [ 730.717765][T23399] netlink: zone id is out of range [ 732.031937][T23443] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1827'. [ 732.109389][T23439] Invalid ELF header magic: != ELF [ 732.470706][ T30] audit: type=1800 audit(6049927870.890:38): pid=23451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1828" name="version" dev="configfs" ino=55478 res=0 errno=0 [ 733.173225][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'. [ 733.198319][T23472] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1832'. [ 737.508074][T23593] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 738.726797][T23626] net_ratelimit: 672 callbacks suppressed [ 738.726818][T23626] netlink: zone id is out of range [ 738.849551][T23626] netlink: zone id is out of range [ 738.854851][T23626] netlink: zone id is out of range [ 738.861040][T23626] netlink: zone id is out of range [ 738.867575][T23626] netlink: zone id is out of range [ 739.033796][T23626] netlink: zone id is out of range [ 739.223328][T23626] netlink: zone id is out of range [ 739.238923][T23626] netlink: zone id is out of range [ 739.273784][T23626] netlink: zone id is out of range [ 739.279119][T23626] netlink: zone id is out of range [ 740.253469][T23648] netlink: 226 bytes leftover after parsing attributes in process `syz.4.1851'. [ 740.594427][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 742.764418][T23733] ksmbd: Unknown IPC event: 14, ignore. [ 743.743014][T23768] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 745.019898][ T30] audit: type=1800 audit(6049927883.595:39): pid=23801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1868" name="members" dev="configfs" ino=56824 res=0 errno=0 [ 745.190416][T23803] sg_write: process 1916 (syz.2.1869) changed security contexts after opening file descriptor, this is not allowed. [ 745.225550][ T30] audit: type=1800 audit(6049927883.796:40): pid=23809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1870" name="version" dev="configfs" ino=55807 res=0 errno=0 [ 746.489708][T23820] netlink: 'syz.0.1881': attribute type 1 has an invalid length. [ 749.223389][T23892] FAULT_INJECTION: forcing a failure. [ 749.223389][T23892] name failslab, interval 1, probability 0, space 0, times 0 [ 749.268349][T23892] CPU: 1 UID: 0 PID: 23892 Comm: syz.0.1879 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 749.268410][T23892] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 749.268425][T23892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.268444][T23892] Call Trace: [ 749.268455][T23892] [ 749.268467][T23892] dump_stack_lvl+0x16c/0x1f0 [ 749.268514][T23892] should_fail_ex+0x512/0x640 [ 749.268566][T23892] should_failslab+0xc2/0x120 [ 749.268611][T23892] __kmalloc_cache_noprof+0x6a/0x3e0 [ 749.268647][T23892] ? sctp_add_bind_addr+0xae/0x3f0 [ 749.268684][T23892] sctp_add_bind_addr+0xae/0x3f0 [ 749.268720][T23892] sctp_copy_local_addr_list+0x349/0x550 [ 749.268772][T23892] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 749.268816][T23892] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 749.268859][T23892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.268914][T23892] sctp_bind_addr_copy+0xe0/0x530 [ 749.268956][T23892] sctp_connect_new_asoc+0x1c9/0x770 [ 749.269004][T23892] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 749.269051][T23892] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 749.269103][T23892] __sctp_connect+0x3f3/0xc60 [ 749.269153][T23892] ? do_raw_spin_lock+0x12c/0x2b0 [ 749.269204][T23892] ? __pfx___sctp_connect+0x10/0x10 [ 749.269252][T23892] ? __pfx_sctp_inet_connect+0x10/0x10 [ 749.269300][T23892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.269351][T23892] ? __pfx_sctp_inet_connect+0x10/0x10 [ 749.269399][T23892] sctp_inet_connect+0x15f/0x200 [ 749.269445][T23892] __sys_connect_file+0x141/0x1a0 [ 749.269481][T23892] __sys_connect+0x13b/0x160 [ 749.269511][T23892] ? __pfx___sys_connect+0x10/0x10 [ 749.269554][T23892] ? __pfx_ksys_write+0x10/0x10 [ 749.269596][T23892] __x64_sys_connect+0x72/0xb0 [ 749.269624][T23892] ? lockdep_hardirqs_on+0x7c/0x110 [ 749.269658][T23892] do_syscall_64+0xcd/0x490 [ 749.269699][T23892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.269733][T23892] RIP: 0033:0x7f0208b8ebe9 [ 749.269765][T23892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.269797][T23892] RSP: 002b:00007f0209a80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 749.269826][T23892] RAX: ffffffffffffffda RBX: 00007f0208db5fa0 RCX: 00007f0208b8ebe9 [ 749.269847][T23892] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 749.269867][T23892] RBP: 00007f0209a80090 R08: 0000000000000000 R09: 0000000000000000 [ 749.269887][T23892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.269906][T23892] R13: 00007f0208db6038 R14: 00007f0208db5fa0 R15: 00007ffc1c9f2208 [ 749.269948][T23892] [ 749.534234][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.862577][T23903] net_ratelimit: 2037 callbacks suppressed [ 749.862608][T23903] netlink: zone id is out of range [ 749.887826][T23903] netlink: zone id is out of range [ 749.893163][T23903] netlink: zone id is out of range [ 749.898804][T23903] netlink: zone id is out of range [ 749.904152][T23903] netlink: zone id is out of range [ 750.017788][T23903] netlink: zone id is out of range [ 750.023094][T23903] netlink: zone id is out of range [ 750.113030][T23903] netlink: zone id is out of range [ 750.151384][T23903] netlink: zone id is out of range [ 750.157794][T23903] netlink: zone id is out of range [ 750.195462][T23902] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 752.289792][ T30] audit: type=1800 audit(6049927890.903:41): pid=24011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1892" name="version" dev="configfs" ino=56204 res=0 errno=0 [ 753.269497][T24056] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 753.885942][T24065] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 755.323539][T24082] net_ratelimit: 672 callbacks suppressed [ 755.323561][T24082] netlink: zone id is out of range [ 755.355026][T24082] netlink: zone id is out of range [ 755.368912][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.377049][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.391611][T24082] netlink: zone id is out of range [ 755.405020][T24083] netlink: zone id is out of range [ 755.408930][T24082] netlink: zone id is out of range [ 755.415606][T24082] netlink: zone id is out of range [ 755.429608][T24083] netlink: zone id is out of range [ 755.435870][T24083] netlink: zone id is out of range [ 755.441727][T24083] netlink: zone id is out of range [ 755.447721][T24083] netlink: zone id is out of range [ 757.158517][T24107] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 757.378946][ T30] audit: type=1800 audit(6049927896.010:42): pid=24121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1902" name="members" dev="configfs" ino=57508 res=0 errno=0 [ 759.567616][T24172] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 762.581859][ T30] audit: type=1800 audit(6049927901.227:43): pid=24252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1920" name="version" dev="configfs" ino=57618 res=0 errno=0 [ 763.816084][T24280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 763.842086][T24280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 763.866913][T24280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 763.874004][T24280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 764.529523][T24315] net_ratelimit: 1354 callbacks suppressed [ 764.529548][T24315] netlink: zone id is out of range [ 764.549223][T24315] netlink: zone id is out of range [ 764.554946][T24315] netlink: zone id is out of range [ 764.566044][T24315] netlink: zone id is out of range [ 764.625601][T24315] netlink: zone id is out of range [ 764.630853][T24315] netlink: zone id is out of range [ 764.636685][T24315] netlink: zone id is out of range [ 764.642181][T24315] netlink: zone id is out of range [ 764.661332][T24315] netlink: zone id is out of range [ 764.666522][T24315] netlink: zone id is out of range [ 765.865191][T19908] Bluetooth: hci4: command 0x0c1a tx timeout [ 765.873721][T19899] Bluetooth: hci3: command 0x0c1a tx timeout [ 765.881954][T19899] Bluetooth: hci2: command 0x0406 tx timeout [ 765.889933][T19906] Bluetooth: hci0: command 0x0406 tx timeout [ 769.572431][T24433] nbd: couldn't find device at index 33904 [ 769.607888][T24432] futex_wake_op: syz.2.1947 tries to shift op by -9; fix this program [ 770.330768][T24439] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 771.617686][T24506] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 778.018814][T24703] net_ratelimit: 1354 callbacks suppressed [ 778.027451][T24703] netlink: zone id is out of range [ 778.033027][T24703] netlink: zone id is out of range [ 778.038306][T24703] netlink: zone id is out of range [ 778.051386][T24703] netlink: zone id is out of range [ 778.112822][T24703] netlink: zone id is out of range [ 778.118218][T24703] netlink: zone id is out of range [ 778.131181][T24703] netlink: zone id is out of range [ 778.136594][T24703] netlink: zone id is out of range [ 778.142134][T24703] netlink: zone id is out of range [ 778.147305][T24703] netlink: zone id is out of range [ 781.134415][T24767] ima: policy update failed [ 781.148757][ T30] audit: type=1802 audit(6049927919.913:44): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1982" res=0 errno=0 [ 783.542455][T24812] ima: policy update failed [ 783.643353][ T30] audit: type=1802 audit(6049927922.426:45): pid=24812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1991" res=0 errno=0 [ 783.940339][T24817] ima: policy update failed [ 783.954117][ T30] audit: type=1802 audit(6049927922.728:46): pid=24817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1993" res=0 errno=0 [ 784.174927][T24825] nbd: couldn't find device at index 33904 [ 784.659460][T24838] nbd: couldn't find device at index 33904 [ 784.684771][ T30] audit: type=1800 audit(6049927923.462:47): pid=24840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1997" name="version" dev="configfs" ino=60566 res=0 errno=0 [ 786.439037][T24923] FAULT_INJECTION: forcing a failure. [ 786.439037][T24923] name failslab, interval 1, probability 0, space 0, times 0 [ 786.467830][T24923] CPU: 0 UID: 0 PID: 24923 Comm: syz.0.1999 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 786.467896][T24923] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 786.467908][T24923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.467923][T24923] Call Trace: [ 786.467932][T24923] [ 786.467942][T24923] dump_stack_lvl+0x16c/0x1f0 [ 786.467977][T24923] should_fail_ex+0x512/0x640 [ 786.468010][T24923] ? __kmalloc_noprof+0xbf/0x510 [ 786.468040][T24923] ? lsm_blob_alloc+0x68/0x90 [ 786.468081][T24923] should_failslab+0xc2/0x120 [ 786.468127][T24923] __kmalloc_noprof+0xd2/0x510 [ 786.468176][T24923] lsm_blob_alloc+0x68/0x90 [ 786.468223][T24923] security_sk_alloc+0x30/0x270 [ 786.468251][T24923] sk_prot_alloc+0xfb/0x2a0 [ 786.468290][T24923] sk_alloc+0x36/0xc20 [ 786.468328][T24923] inet_create+0x3a1/0x1040 [ 786.468352][T24923] ? inet_create+0x93/0x1040 [ 786.468380][T24923] __sock_create+0x335/0x8d0 [ 786.468425][T24923] mptcp_subflow_create_socket+0xf5/0xed0 [ 786.468468][T24923] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 786.468515][T24923] __mptcp_nmpc_sk+0x182/0x7d0 [ 786.468553][T24923] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 786.468601][T24923] ? __local_bh_enable_ip+0xa4/0x120 [ 786.468633][T24923] mptcp_getsockopt+0xcf8/0xe20 [ 786.468668][T24923] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 786.468703][T24923] ? find_held_lock+0x2b/0x80 [ 786.468726][T24923] ? __might_fault+0xe3/0x190 [ 786.468753][T24923] ? __might_fault+0xe3/0x190 [ 786.468778][T24923] ? __might_fault+0x13b/0x190 [ 786.468815][T24923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 786.468851][T24923] do_sock_getsockopt+0x34a/0x440 [ 786.468889][T24923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 786.468930][T24923] ? __fget_files+0x204/0x3c0 [ 786.468986][T24923] __sys_getsockopt+0x123/0x1b0 [ 786.469039][T24923] __x64_sys_getsockopt+0xbd/0x160 [ 786.469080][T24923] ? do_syscall_64+0x91/0x490 [ 786.469124][T24923] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.469166][T24923] do_syscall_64+0xcd/0x490 [ 786.469212][T24923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.469247][T24923] RIP: 0033:0x7f0208b8ebe9 [ 786.469275][T24923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.469320][T24923] RSP: 002b:00007f0209a5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 786.469354][T24923] RAX: ffffffffffffffda RBX: 00007f0208db6090 RCX: 00007f0208b8ebe9 [ 786.469377][T24923] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 786.469397][T24923] RBP: 00007f0208c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 786.469417][T24923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.469436][T24923] R13: 00007f0208db6128 R14: 00007f0208db6090 R15: 00007ffc1c9f2208 [ 786.469478][T24923] [ 787.653034][T24966] net_ratelimit: 1354 callbacks suppressed [ 787.653057][T24966] netlink: zone id is out of range [ 787.675681][T24966] netlink: zone id is out of range [ 787.681661][T24966] netlink: zone id is out of range [ 787.687343][T24966] netlink: zone id is out of range [ 787.692650][T24966] netlink: zone id is out of range [ 787.697825][T24966] netlink: zone id is out of range [ 787.820651][T24966] netlink: zone id is out of range [ 787.830563][T24966] netlink: zone id is out of range [ 787.835865][T24966] netlink: zone id is out of range [ 787.852009][T24966] netlink: zone id is out of range [ 788.945165][ T30] audit: type=1800 audit(6049927927.744:48): pid=25007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2008" name="version" dev="configfs" ino=60849 res=0 errno=0 [ 792.692713][ T30] audit: type=1800 audit(6049927931.483:49): pid=25100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2018" name="version" dev="configfs" ino=59925 res=0 errno=0 [ 793.753715][T25115] random: crng reseeded on system resumption [ 795.255353][T25136] net_ratelimit: 1354 callbacks suppressed [ 795.255375][T25136] netlink: zone id is out of range [ 795.266726][T25136] netlink: zone id is out of range [ 795.385914][T25136] netlink: zone id is out of range [ 795.395506][T25136] netlink: zone id is out of range [ 795.401196][T25136] netlink: zone id is out of range [ 795.414815][T25136] netlink: zone id is out of range [ 795.452343][T25136] netlink: zone id is out of range [ 795.458250][T25136] netlink: zone id is out of range [ 795.480781][T25136] netlink: zone id is out of range [ 795.488265][T25136] netlink: zone id is out of range [ 796.508535][T25161] nbd: couldn't find device at index 33904 [ 798.495236][T25240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 798.823394][ T30] audit: type=1800 audit(6049927937.675:50): pid=25261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2035" name="version" dev="configfs" ino=61333 res=0 errno=0 [ 800.186948][T25273] ima: policy update failed [ 800.275762][ T30] audit: type=1802 audit(6049927939.133:51): pid=25273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2038" res=0 errno=0 [ 800.348590][T25296] nbd: couldn't find device at index 33904 [ 801.745753][T25377] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 801.801729][T25377] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 801.851087][T25377] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 802.088290][T25384] net_ratelimit: 1354 callbacks suppressed [ 802.088311][T25384] netlink: zone id is out of range [ 802.099704][T25384] netlink: zone id is out of range [ 802.105355][T25384] netlink: zone id is out of range [ 802.111911][T25384] netlink: zone id is out of range [ 802.117576][T25384] netlink: zone id is out of range [ 802.122828][T25384] netlink: zone id is out of range [ 802.136117][T25384] netlink: zone id is out of range [ 802.208675][T25384] netlink: zone id is out of range [ 802.214042][T25384] netlink: zone id is out of range [ 802.220777][T25384] netlink: zone id is out of range [ 802.489880][T25387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2046'. [ 804.017954][T25432] random: crng reseeded on system resumption [ 805.417214][T25454] nbd: couldn't find device at index 33904 [ 809.050012][T25540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2062'. [ 809.594185][T25561] ALSA: mixer_oss: invalid OSS volume '0' [ 809.614022][T25561] ALSA: mixer_oss: invalid OSS volume '' [ 810.672830][T25629] delete_channel: no stack [ 810.892363][T25629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'. [ 811.521673][T25667] syz.1.2073(25667): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 812.772034][T25714] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 812.788389][T25706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2082'. [ 812.811477][T25714] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 813.221348][T25760] ima: policy update failed [ 813.264612][ T30] audit: type=1802 audit(4294968326.680:52): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2084" res=0 errno=0 [ 814.066275][T25798] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 814.169885][T25802] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 814.350486][T25811] ima: policy update failed [ 814.368410][ T30] audit: type=1802 audit(4294968327.785:53): pid=25811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2094" res=0 errno=0 [ 814.576216][T25819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2093'. [ 815.037967][T25851] nbd: couldn't find device at index 33904 [ 815.047292][T25849] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 815.099540][T25849] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 815.489392][T25870] random: crng reseeded on system resumption [ 815.883508][T25907] ima: policy update failed [ 815.907827][ T30] audit: type=1802 audit(4294968329.332:54): pid=25907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2103" res=0 errno=0 [ 816.454833][T25973] random: crng reseeded on system resumption [ 816.496745][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.505146][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.430223][T25993] net_ratelimit: 1354 callbacks suppressed [ 817.430243][T25993] netlink: zone id is out of range [ 817.581928][T25993] netlink: zone id is out of range [ 817.640873][T25993] netlink: zone id is out of range [ 817.683759][T25993] netlink: zone id is out of range [ 817.702018][T25993] netlink: zone id is out of range [ 817.715983][T25993] netlink: zone id is out of range [ 817.729802][T25993] netlink: zone id is out of range [ 817.735412][T25993] netlink: zone id is out of range [ 817.740745][T25993] netlink: zone id is out of range [ 817.746001][T25993] netlink: zone id is out of range [ 818.151312][ T30] audit: type=1800 audit(4294968331.583:55): pid=26008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2110" name="version" dev="configfs" ino=62391 res=0 errno=0 [ 818.668189][T26013] ima: policy update failed [ 818.677754][ T30] audit: type=1802 audit(4294968332.126:56): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2113" res=0 errno=0 [ 818.909306][T26024] nbd: couldn't find device at index 33904 [ 820.548545][T26110] ima: policy update failed [ 820.553458][ T30] audit: type=1802 audit(4294968334.004:57): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2123" res=0 errno=0 [ 821.837054][T26128] netlink: 'syz.1.2127': attribute type 27 has an invalid length. [ 821.849410][T26128] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2127'. [ 822.058217][T26125] zswap: compressor not available [ 822.633085][T26168] net_ratelimit: 1354 callbacks suppressed [ 822.633113][T26168] netlink: zone id is out of range [ 822.644575][T26168] netlink: zone id is out of range [ 822.684819][T26168] netlink: zone id is out of range [ 822.690459][T26168] netlink: zone id is out of range [ 822.752472][T26168] netlink: zone id is out of range [ 822.758496][T26168] netlink: zone id is out of range [ 822.854735][T26168] netlink: zone id is out of range [ 822.861060][T26168] netlink: zone id is out of range [ 822.866750][T26168] netlink: zone id is out of range [ 822.877294][T26168] netlink: zone id is out of range [ 822.971783][T26180] nbd: couldn't find device at index 33904 [ 825.155495][T26245] netlink: 9570 bytes leftover after parsing attributes in process `syz.2.2137'. [ 827.847542][T26324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2142'. [ 829.612657][T26447] net_ratelimit: 2036 callbacks suppressed [ 829.612685][T26447] netlink: zone id is out of range [ 829.633096][T26447] netlink: zone id is out of range [ 829.639949][T26447] netlink: zone id is out of range [ 829.703904][T26447] netlink: zone id is out of range [ 829.710417][T26447] netlink: zone id is out of range [ 829.715769][T26447] netlink: zone id is out of range [ 829.721983][T26447] netlink: zone id is out of range [ 829.727464][T26447] netlink: zone id is out of range [ 829.734113][T26447] netlink: zone id is out of range [ 829.739298][T26447] netlink: zone id is out of range [ 834.466593][T26565] nbd: couldn't find device at index 33904 [ 834.848113][ T30] audit: type=1800 audit(4294968348.341:58): pid=26576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2167" name="version" dev="configfs" ino=64407 res=0 errno=0 [ 835.080446][T26578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2168'. [ 837.221387][T26673] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 838.664314][T26736] blktrace: Concurrent blktraces are not allowed on loop2 [ 838.856444][T26747] nbd: couldn't find device at index 33904 [ 838.970365][T19908] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 838.970412][T19908] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15 [ 838.985676][T19908] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 839.801325][T26814] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 840.864326][T26835] futex_wake_op: syz.0.2186 tries to shift op by -9; fix this program [ 842.145670][T26893] nbd: couldn't find device at index 33904 [ 842.347609][T26915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'. [ 843.097766][ T30] audit: type=1800 audit(4294968356.640:59): pid=26948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2196" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 843.321289][T26954] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 843.392788][T26954] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 843.544936][T26969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2197'. [ 844.015383][T26929] random: crng reseeded on system resumption [ 848.222238][T27146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2208'. [ 848.328843][T27153] nbd: couldn't find device at index 33904 [ 848.853214][T27185] ima: policy update failed [ 848.872227][ T30] audit: type=1802 audit(4294968362.447:60): pid=27185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2212" res=0 errno=0 [ 849.410498][T27203] net_ratelimit: 672 callbacks suppressed [ 849.410524][T27203] netlink: zone id is out of range [ 849.477954][T27203] netlink: zone id is out of range [ 849.488069][T27203] netlink: zone id is out of range [ 849.569085][T27203] netlink: zone id is out of range [ 849.651918][T27203] netlink: zone id is out of range [ 849.700750][T27203] netlink: zone id is out of range [ 849.728119][T27203] netlink: zone id is out of range [ 849.798308][T27203] netlink: zone id is out of range [ 849.828747][T27203] netlink: zone id is out of range [ 849.838145][T27203] netlink: zone id is out of range [ 851.588474][T27254] futex_wake_op: syz.1.2219 tries to shift op by -9; fix this program [ 853.362874][T27277] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 854.386916][T27289] ima: policy update failed [ 854.391747][ T30] audit: type=1802 audit(4294968368.003:61): pid=27289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2226" res=0 errno=0 [ 855.013375][ T30] audit: type=1800 audit(4294968368.626:62): pid=27304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2229" name="version" dev="configfs" ino=66435 res=0 errno=0 [ 856.567788][T27322] futex_wake_op: syz.4.2232 tries to shift op by -9; fix this program [ 857.590069][T27360] ima: policy update failed [ 857.606398][ T30] audit: type=1802 audit(4294968371.238:63): pid=27360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2237" res=0 errno=0 [ 858.176755][T27371] net_ratelimit: 672 callbacks suppressed [ 858.176782][T27371] netlink: zone id is out of range [ 858.221582][T27371] netlink: zone id is out of range [ 858.226912][T27371] netlink: zone id is out of range [ 858.232295][T27371] netlink: zone id is out of range [ 858.238644][T27371] netlink: zone id is out of range [ 858.247247][T27371] netlink: zone id is out of range [ 858.265933][T27371] netlink: zone id is out of range [ 858.272575][T27371] netlink: zone id is out of range [ 858.278054][T27371] netlink: zone id is out of range [ 858.296490][T27371] netlink: zone id is out of range [ 858.829755][ T30] audit: type=1800 audit(4294968372.464:64): pid=27396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2241" name="version" dev="configfs" ino=67614 res=0 errno=0 [ 860.239674][T27448] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 860.951069][T27448] FAULT_INJECTION: forcing a failure. [ 860.951069][T27448] name fail_futex, interval 1, probability 0, space 0, times 0 [ 861.025632][T27448] CPU: 1 UID: 0 PID: 27448 Comm: syz.4.2245 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 861.025699][T27448] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 861.025715][T27448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 861.025735][T27448] Call Trace: [ 861.025747][T27448] [ 861.025760][T27448] dump_stack_lvl+0x16c/0x1f0 [ 861.025809][T27448] should_fail_ex+0x512/0x640 [ 861.025863][T27448] get_futex_key+0x1d0/0x1560 [ 861.025909][T27448] ? __pfx_get_futex_key+0x10/0x10 [ 861.025949][T27448] ? kasan_quarantine_put+0x10a/0x240 [ 861.025986][T27448] ? lockdep_hardirqs_on+0x7c/0x110 [ 861.026035][T27448] futex_wake+0xea/0x530 [ 861.026088][T27448] ? __pfx_futex_wake+0x10/0x10 [ 861.026144][T27448] ? ksys_write+0x190/0x250 [ 861.026193][T27448] do_futex+0x1e3/0x350 [ 861.026234][T27448] ? __pfx_do_futex+0x10/0x10 [ 861.026288][T27448] __x64_sys_futex+0x1e0/0x4c0 [ 861.026331][T27448] ? fput+0x9b/0xd0 [ 861.026376][T27448] ? __pfx___x64_sys_futex+0x10/0x10 [ 861.026416][T27448] ? ksys_write+0x1ac/0x250 [ 861.026506][T27448] ? __pfx_ksys_write+0x10/0x10 [ 861.026566][T27448] do_syscall_64+0xcd/0x490 [ 861.026613][T27448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.026647][T27448] RIP: 0033:0x7fda1cf8ebe9 [ 861.026674][T27448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.026711][T27448] RSP: 002b:00007fda1de500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 861.026743][T27448] RAX: ffffffffffffffda RBX: 00007fda1d1b5fa8 RCX: 00007fda1cf8ebe9 [ 861.026766][T27448] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda1d1b5fac [ 861.026788][T27448] RBP: 00007fda1d1b5fa0 R08: 00007fda1de51000 R09: 0000000000000000 [ 861.026810][T27448] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 861.026832][T27448] R13: 00007fda1d1b6038 R14: 00007ffe60ce43f0 R15: 00007ffe60ce44d8 [ 861.026876][T27448] [ 863.478737][T27492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2249'. [ 863.603738][T27501] net_ratelimit: 672 callbacks suppressed [ 863.603759][T27501] netlink: zone id is out of range [ 863.667168][T27501] netlink: zone id is out of range [ 863.804212][T27501] netlink: zone id is out of range [ 863.892497][T27501] netlink: zone id is out of range [ 863.897742][T27501] netlink: zone id is out of range [ 863.933242][T27501] netlink: zone id is out of range [ 864.051585][T27501] netlink: zone id is out of range [ 864.056779][T27501] netlink: zone id is out of range [ 864.104583][T27501] netlink: zone id is out of range [ 864.127044][T27501] netlink: zone id is out of range [ 864.994487][T27554] ima: policy update failed [ 865.021326][ T30] audit: type=1802 audit(4294968378.673:65): pid=27554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2255" res=0 errno=0 [ 867.860566][T27642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2260'. [ 868.724341][T27668] net_ratelimit: 2036 callbacks suppressed [ 868.724364][T27668] netlink: set zone limit has 8 unknown bytes [ 868.905603][T27686] netlink: zone id is out of range [ 868.911140][T27686] netlink: zone id is out of range [ 868.916295][T27686] netlink: zone id is out of range [ 868.937839][T27686] netlink: zone id is out of range [ 868.943826][T27686] netlink: zone id is out of range [ 869.117178][T27686] netlink: zone id is out of range [ 869.122751][T27686] netlink: zone id is out of range [ 869.137073][T27686] netlink: zone id is out of range [ 869.144071][T27686] netlink: zone id is out of range [ 871.068422][T27747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2272'. [ 874.571478][T27825] ima: policy update failed [ 874.576473][ T30] audit: type=1802 audit(4294968388.288:66): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2276" res=0 errno=0 [ 875.551928][T27838] net_ratelimit: 1355 callbacks suppressed [ 875.551957][T27838] netlink: zone id is out of range [ 875.563517][T27838] netlink: zone id is out of range [ 875.578367][T27838] netlink: zone id is out of range [ 875.583597][T27838] netlink: zone id is out of range [ 875.588944][T27838] netlink: zone id is out of range [ 875.632909][T27838] netlink: zone id is out of range [ 875.638751][T27838] netlink: zone id is out of range [ 875.643955][T27838] netlink: zone id is out of range [ 875.649181][T27838] netlink: zone id is out of range [ 875.654435][T27838] netlink: zone id is out of range [ 877.654810][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.654926][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.102241][T27872] kexec: Could not allocate control_code_buffer [ 882.205770][T27967] net_ratelimit: 672 callbacks suppressed [ 882.205796][T27967] netlink: zone id is out of range [ 882.217189][T27967] netlink: zone id is out of range [ 882.223038][T27967] netlink: zone id is out of range [ 882.246289][T27967] netlink: zone id is out of range [ 882.255889][T27967] netlink: zone id is out of range [ 882.332481][T27967] netlink: zone id is out of range [ 882.338705][T27967] netlink: zone id is out of range [ 882.346362][T27967] netlink: zone id is out of range [ 882.365324][T27967] netlink: zone id is out of range [ 882.417279][T27967] netlink: zone id is out of range [ 882.902818][T19899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.915017][T19899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.929649][T19899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.952483][T19899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.980759][T19899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 882.990219][T19916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.469213][T19916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.317952][T19916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.551549][T19916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.042297][T19899] Bluetooth: hci1: command tx timeout [ 885.332019][T28001] chnl_net:caif_netlink_parms(): no params data found [ 885.915728][T28161] ima: policy update failed [ 885.944509][ T30] audit: type=1802 audit(4294968399.702:67): pid=28161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2305" res=0 errno=0 [ 886.840006][T19916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.867366][T19916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.881103][T19916] bond0 (unregistering): Released all slaves [ 887.112916][T19899] Bluetooth: hci1: command tx timeout [ 887.742491][T28001] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.774016][T28001] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.802308][T28001] bridge_slave_0: entered allmulticast mode [ 887.833583][T28001] bridge_slave_0: entered promiscuous mode [ 887.905690][T28001] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.934329][T28001] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.965969][T28001] bridge_slave_1: entered allmulticast mode [ 887.994119][T28001] bridge_slave_1: entered promiscuous mode [ 888.388813][T28001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.532245][T28001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.548797][T28336] net_ratelimit: 2036 callbacks suppressed [ 888.548863][T28336] netlink: zone id is out of range [ 888.560457][T28336] netlink: zone id is out of range [ 888.567077][T28336] netlink: zone id is out of range [ 888.579416][T28336] netlink: zone id is out of range [ 888.597715][T28336] netlink: zone id is out of range [ 888.609344][T28336] netlink: zone id is out of range [ 888.614638][T28336] netlink: zone id is out of range [ 888.620221][T28336] netlink: zone id is out of range [ 888.626591][T28336] netlink: zone id is out of range [ 888.631906][T28336] netlink: zone id is out of range [ 889.006535][T28001] team0: Port device team_slave_0 added [ 889.171533][T28001] team0: Port device team_slave_1 added [ 889.190035][T19899] Bluetooth: hci1: command tx timeout [ 889.863326][T28001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.884782][T28001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.962493][T28001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.043432][T28001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.055240][T28001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.087311][T28418] netlink: 226 bytes leftover after parsing attributes in process `syz.0.2313'. [ 890.104514][T28001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.135870][T28418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 890.434425][ T30] audit: type=1800 audit(4294968404.213:68): pid=28464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2317" name="version" dev="configfs" ino=69256 res=0 errno=0 [ 890.517208][T28001] hsr_slave_0: entered promiscuous mode [ 890.833815][T28001] hsr_slave_1: entered promiscuous mode [ 890.848047][T28001] debugfs: 'hsr0' already exists in 'hsr' [ 890.861437][T28001] Cannot create hsr debugfs directory [ 891.257658][T19899] Bluetooth: hci1: command tx timeout [ 891.833557][T28548] ima: policy update failed [ 891.838586][ T30] audit: type=1802 audit(4294968405.619:69): pid=28548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2320" res=0 errno=0 [ 892.359033][T28582] nbd: couldn't find device at index 33904 [ 892.870203][T28623] netlink: 226 bytes leftover after parsing attributes in process `syz.1.2324'. [ 893.004106][T28623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'. [ 893.510253][ T30] audit: type=1800 audit(4294968407.307:70): pid=28660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2325" name="version" dev="configfs" ino=69414 res=0 errno=0 [ 894.837282][T28001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.889203][T28001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.028634][T28001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.158329][T28723] ima: policy update failed [ 895.163085][ T30] audit: type=1802 audit(4294968408.965:71): pid=28723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2329" res=0 errno=0 [ 895.384981][T28001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.669874][T28748] net_ratelimit: 674 callbacks suppressed [ 895.669895][T28748] netlink: zone id is out of range [ 895.687849][T28748] netlink: zone id is out of range [ 895.703273][T28748] netlink: zone id is out of range [ 895.708549][T28748] netlink: zone id is out of range [ 895.740130][T28748] netlink: zone id is out of range [ 895.750289][T28748] netlink: zone id is out of range [ 895.761140][T28748] netlink: zone id is out of range [ 895.766931][T28748] netlink: zone id is out of range [ 895.772297][T28748] netlink: zone id is out of range [ 895.777532][T28748] netlink: zone id is out of range [ 896.161666][T28001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.244562][T28768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 896.282007][T28001] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.582426][T20387] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.589656][T20387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.867879][T20387] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.875120][T20387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.256026][T28001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.983934][T28001] veth0_vlan: entered promiscuous mode [ 899.089115][T28001] veth1_vlan: entered promiscuous mode [ 899.428909][T28001] veth0_macvtap: entered promiscuous mode [ 899.507889][T28001] veth1_macvtap: entered promiscuous mode [ 899.788300][T28001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.253041][T28001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.770646][T20387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.848175][T20387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.040548][T20387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.370481][T28971] net_ratelimit: 1354 callbacks suppressed [ 901.370503][T28971] netlink: zone id is out of range [ 901.439327][T20387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.484220][T28971] netlink: zone id is out of range [ 901.526030][T28971] netlink: zone id is out of range [ 901.740840][T28971] netlink: zone id is out of range [ 901.783659][T28971] netlink: zone id is out of range [ 901.829404][T28971] netlink: zone id is out of range [ 901.873673][T28971] netlink: zone id is out of range [ 901.883251][T28971] netlink: zone id is out of range [ 901.889889][T28971] netlink: zone id is out of range [ 901.895554][T28971] netlink: zone id is out of range [ 902.603710][T19902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.614202][T19902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.142889][T19916] hsr_slave_0: left promiscuous mode [ 903.162099][T19916] hsr_slave_1: left promiscuous mode [ 903.197968][T19916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.241610][T19916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.341667][T19916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.415909][T19916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.580231][T19916] veth1_macvtap: left promiscuous mode [ 903.605012][T19916] veth0_macvtap: left promiscuous mode [ 903.622298][T19916] veth1_vlan: left promiscuous mode [ 903.631055][ T30] audit: type=1800 audit(4294968417.475:72): pid=29030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2347" name="version" dev="configfs" ino=72026 res=0 errno=0 [ 903.804854][T19916] veth0_vlan: left promiscuous mode [ 904.777418][T29033] ima: policy update failed [ 904.829223][ T30] audit: type=1802 audit(4294968418.660:73): pid=29033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2348" res=0 errno=0 [ 906.503220][T19916] team0 (unregistering): Port device team_slave_1 removed [ 906.551874][T19916] team0 (unregistering): Port device team_slave_0 removed [ 907.041580][T19944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.049995][T19944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.648463][T29114] net_ratelimit: 1354 callbacks suppressed [ 907.649011][T29114] netlink: zone id is out of range [ 907.660319][T29114] netlink: zone id is out of range [ 907.669062][T29114] netlink: zone id is out of range [ 907.759322][T29114] netlink: zone id is out of range [ 907.764717][T29114] netlink: zone id is out of range [ 907.770423][T29114] netlink: zone id is out of range [ 907.776216][T29114] netlink: zone id is out of range [ 907.783446][T29114] netlink: zone id is out of range [ 907.789039][T29114] netlink: zone id is out of range [ 907.794821][T29114] netlink: zone id is out of range [ 909.033899][T29135] nbd: couldn't find device at index 33904 [ 909.823662][T19908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.843029][T19908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.864820][T19908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.892811][T19908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.922599][T19908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 911.065296][T19916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.357669][T19916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.459168][T29144] chnl_net:caif_netlink_parms(): no params data found [ 911.704966][T19916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.039471][T19908] Bluetooth: hci2: command tx timeout [ 912.229820][T29144] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.254642][T29144] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.284327][T29144] bridge_slave_0: entered allmulticast mode [ 912.312643][T29144] bridge_slave_0: entered promiscuous mode [ 912.354202][T29144] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.364746][T29144] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.372070][T29144] bridge_slave_1: entered allmulticast mode [ 912.423594][T29144] bridge_slave_1: entered promiscuous mode [ 912.825361][T29144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.967203][T29144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.355141][T29144] team0: Port device team_slave_0 added [ 913.413314][T29144] team0: Port device team_slave_1 added [ 913.476529][T19916] bridge_slave_1: left allmulticast mode [ 913.490670][T19916] bridge_slave_1: left promiscuous mode [ 913.510226][T19916] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.566412][T19916] bridge_slave_0: left allmulticast mode [ 913.584050][T19916] bridge_slave_0: left promiscuous mode [ 913.599684][T19916] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.105891][T19908] Bluetooth: hci2: command tx timeout [ 914.825123][T19916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.849106][T29508] net_ratelimit: 672 callbacks suppressed [ 914.849127][T29508] netlink: zone id is out of range [ 914.860709][T29508] netlink: zone id is out of range [ 914.866079][T29508] netlink: zone id is out of range [ 914.872448][T29508] netlink: zone id is out of range [ 914.877934][T29508] netlink: zone id is out of range [ 914.885341][T29508] netlink: zone id is out of range [ 914.893960][T29508] netlink: zone id is out of range [ 914.899238][T29508] netlink: zone id is out of range [ 914.905739][T29508] netlink: zone id is out of range [ 914.911049][T29508] netlink: zone id is out of range [ 914.921563][T19916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.950050][T19916] bond0 (unregistering): Released all slaves [ 915.124918][T29144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.135653][T29144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.238568][T29144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.255517][T29144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.284291][T29144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.320006][T29144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.567982][T29144] hsr_slave_0: entered promiscuous mode [ 915.610384][T29144] hsr_slave_1: entered promiscuous mode [ 915.617128][T29144] debugfs: 'hsr0' already exists in 'hsr' [ 915.639106][T29144] Cannot create hsr debugfs directory [ 916.231727][T19908] Bluetooth: hci2: command tx timeout [ 916.685303][T29633] nbd: couldn't find device at index 33904 [ 917.774375][T29699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2370'. [ 918.248338][T19908] Bluetooth: hci2: command tx timeout [ 918.373890][T29144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 918.639562][T29781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2373'. [ 918.717766][T29144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 918.745938][T29144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 918.849063][T29144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 919.026194][T29801] random: crng reseeded on system resumption [ 920.173852][T29144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.311360][T29144] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.452829][T29295] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.460093][T29295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.602090][T29295] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.609323][T29295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.635117][T29885] ================================================================== [ 921.643231][T29885] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 921.651272][T29885] Read of size 8 at addr ffff888028786000 by task syz.1.2378/29885 [ 921.659192][T29885] [ 921.661545][T29885] CPU: 1 UID: 0 PID: 29885 Comm: syz.1.2378 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 921.661596][T29885] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 921.661611][T29885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.661630][T29885] Call Trace: [ 921.661641][T29885] [ 921.661653][T29885] dump_stack_lvl+0x116/0x1f0 [ 921.661694][T29885] print_report+0xcd/0x630 [ 921.661732][T29885] ? __virt_addr_valid+0x81/0x610 [ 921.661767][T29885] ? __phys_addr+0xe8/0x180 [ 921.661802][T29885] ? force_devcd_write+0x312/0x340 [ 921.661856][T29885] kasan_report+0xe0/0x110 [ 921.661893][T29885] ? force_devcd_write+0x312/0x340 [ 921.661936][T29885] force_devcd_write+0x312/0x340 [ 921.661973][T29885] ? __pfx_force_devcd_write+0x10/0x10 [ 921.662016][T29885] ? __debugfs_file_get+0x1fe/0x840 [ 921.662060][T29885] ? __pfx___debugfs_file_get+0x10/0x10 [ 921.662107][T29885] full_proxy_write+0x12e/0x1a0 [ 921.662151][T29885] ? __pfx_full_proxy_write+0x10/0x10 [ 921.662193][T29885] vfs_write+0x29d/0x11d0 [ 921.662227][T29885] ? __pfx___mutex_lock+0x10/0x10 [ 921.662263][T29885] ? __pfx_vfs_write+0x10/0x10 [ 921.662306][T29885] ? __fget_files+0x20e/0x3c0 [ 921.662340][T29885] ksys_write+0x12a/0x250 [ 921.662372][T29885] ? __pfx_ksys_write+0x10/0x10 [ 921.662409][T29885] do_syscall_64+0xcd/0x490 [ 921.662446][T29885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.662476][T29885] RIP: 0033:0x7ff78598ebe9 [ 921.662499][T29885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.662528][T29885] RSP: 002b:00007ff78689b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 921.662554][T29885] RAX: ffffffffffffffda RBX: 00007ff785bb5fa0 RCX: 00007ff78598ebe9 [ 921.662574][T29885] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 921.662591][T29885] RBP: 00007ff785a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 921.662608][T29885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.662625][T29885] R13: 00007ff785bb6038 R14: 00007ff785bb5fa0 R15: 00007ffcd725e658 [ 921.662653][T29885] [ 921.662663][T29885] [ 921.878824][T29885] Allocated by task 5865: [ 921.883171][T29885] kasan_save_stack+0x33/0x60 [ 921.887893][T29885] kasan_save_track+0x14/0x30 [ 921.892653][T29885] __kasan_kmalloc+0xaa/0xb0 [ 921.897279][T29885] vhci_open+0x4c/0x430 [ 921.901492][T29885] misc_open+0x35a/0x420 [ 921.905760][T29885] chrdev_open+0x231/0x6a0 [ 921.910288][T29885] do_dentry_open+0x97f/0x1530 [ 921.915077][T29885] vfs_open+0x82/0x3f0 [ 921.919180][T29885] path_openat+0x1de4/0x2cb0 [ 921.923800][T29885] do_filp_open+0x20b/0x470 [ 921.928326][T29885] do_sys_openat2+0x11b/0x1d0 [ 921.933045][T29885] __x64_sys_openat+0x174/0x210 [ 921.938026][T29885] do_syscall_64+0xcd/0x490 [ 921.942647][T29885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.948561][T29885] [ 921.951035][T29885] Freed by task 9956: [ 921.955217][T29885] kasan_save_stack+0x33/0x60 [ 921.959962][T29885] kasan_save_track+0x14/0x30 [ 921.964718][T29885] kasan_save_free_info+0x3b/0x60 [ 921.969814][T29885] __kasan_slab_free+0x60/0x70 [ 921.974620][T29885] kfree+0x2b4/0x4d0 [ 921.978546][T29885] vhci_release+0xbb/0xf0 [ 921.983012][T29885] __fput+0x3ff/0xb70 [ 921.987058][T29885] task_work_run+0x150/0x240 [ 921.991692][T29885] do_exit+0x86f/0x2bf0 [ 921.995896][T29885] do_group_exit+0xd3/0x2a0 [ 922.000446][T29885] get_signal+0x2673/0x26d0 [ 922.004976][T29885] arch_do_signal_or_restart+0x8f/0x790 [ 922.010559][T29885] exit_to_user_mode_loop+0x84/0x110 [ 922.015902][T29885] do_syscall_64+0x3f6/0x490 [ 922.020545][T29885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.026478][T29885] [ 922.028829][T29885] The buggy address belongs to the object at ffff888028786000 [ 922.028829][T29885] which belongs to the cache kmalloc-1k of size 1024 [ 922.042912][T29885] The buggy address is located 0 bytes inside of [ 922.042912][T29885] freed 1024-byte region [ffff888028786000, ffff888028786400) [ 922.056688][T29885] [ 922.059123][T29885] The buggy address belongs to the physical page: [ 922.065544][T29885] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28780 [ 922.074500][T29885] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 922.083124][T29885] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 922.090797][T29885] page_type: f5(slab) [ 922.094819][T29885] raw: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122 [ 922.103704][T29885] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 922.112324][T29885] head: 00fff00000000040 ffff88801b841dc0 dead000000000100 dead000000000122 [ 922.121121][T29885] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 922.130013][T29885] head: 00fff00000000003 ffffea0000a1e001 00000000ffffffff 00000000ffffffff [ 922.138728][T29885] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 922.147423][T29885] page dumped because: kasan: bad access detected [ 922.153850][T29885] page_owner tracks the page as allocated [ 922.159575][T29885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 36, tgid 36 (kworker/u8:2), ts 17503690590, free_ts 0 [ 922.178136][T29885] post_alloc_hook+0x1c0/0x230 [ 922.182951][T29885] get_page_from_freelist+0x132b/0x38e0 [ 922.188535][T29885] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 922.194458][T29885] new_slab+0x94/0x330 [ 922.198552][T29885] ___slab_alloc+0xcf2/0x1740 [ 922.203255][T29885] __slab_alloc.constprop.0+0x56/0xb0 [ 922.208750][T29885] __kmalloc_node_noprof+0x2ed/0x500 [ 922.214105][T29885] blk_alloc_flush_queue+0x11e/0x2d0 [ 922.219454][T29885] blk_mq_alloc_and_init_hctx+0xc70/0x11c0 [ 922.225386][T29885] __blk_mq_realloc_hw_ctxs+0x495/0x610 [ 922.231424][T29885] blk_mq_init_allocated_queue+0x3af/0x1240 [ 922.237378][T29885] blk_mq_alloc_queue+0x1bb/0x280 [ 922.242442][T29885] scsi_alloc_sdev+0x888/0xd70 [ 922.247234][T29885] scsi_probe_and_add_lun+0x76b/0xd80 [ 922.252653][T29885] __scsi_scan_target+0x1e8/0x580 [ 922.257795][T29885] scsi_scan_channel+0x149/0x1e0 [ 922.262898][T29885] page_owner free stack trace missing [ 922.268282][T29885] [ 922.270621][T29885] Memory state around the buggy address: [ 922.276353][T29885] ffff888028785f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 922.284443][T29885] ffff888028785f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 922.292664][T29885] >ffff888028786000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.301010][T29885] ^ [ 922.305101][T29885] ffff888028786080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.313306][T29885] ffff888028786100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.321389][T29885] ================================================================== [ 922.492904][T29144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.919791][T29885] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 922.927051][T29885] CPU: 0 UID: 0 PID: 29885 Comm: syz.1.2378 Tainted: GF R U 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 922.938994][T29885] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 922.946052][T29885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 922.956118][T29885] Call Trace: [ 922.959405][T29885] [ 922.962359][T29885] dump_stack_lvl+0x3d/0x1f0 [ 922.966976][T29885] vpanic+0x6e8/0x7a0 [ 922.970984][T29885] ? __pfx_vpanic+0x10/0x10 [ 922.975515][T29885] ? __pfx_vprintk_emit+0x10/0x10 [ 922.980562][T29885] ? force_devcd_write+0x312/0x340 [ 922.985702][T29885] panic+0xca/0xd0 [ 922.989483][T29885] ? __pfx_panic+0x10/0x10 [ 922.993979][T29885] ? force_devcd_write+0x312/0x340 [ 922.999149][T29885] ? preempt_schedule_common+0x44/0xc0 [ 923.004667][T29885] ? preempt_schedule_thunk+0x16/0x30 [ 923.010108][T29885] check_panic_on_warn+0xab/0xb0 [ 923.015110][T29885] end_report+0x107/0x170 [ 923.019585][T29885] kasan_report+0xee/0x110 [ 923.024040][T29885] ? force_devcd_write+0x312/0x340 [ 923.029282][T29885] force_devcd_write+0x312/0x340 [ 923.034254][T29885] ? __pfx_force_devcd_write+0x10/0x10 [ 923.039756][T29885] ? __debugfs_file_get+0x1fe/0x840 [ 923.045012][T29885] ? __pfx___debugfs_file_get+0x10/0x10 [ 923.050705][T29885] full_proxy_write+0x12e/0x1a0 [ 923.055604][T29885] ? __pfx_full_proxy_write+0x10/0x10 [ 923.061012][T29885] vfs_write+0x29d/0x11d0 [ 923.065403][T29885] ? __pfx___mutex_lock+0x10/0x10 [ 923.070468][T29885] ? __pfx_vfs_write+0x10/0x10 [ 923.075268][T29885] ? __fget_files+0x20e/0x3c0 [ 923.080095][T29885] ksys_write+0x12a/0x250 [ 923.084456][T29885] ? __pfx_ksys_write+0x10/0x10 [ 923.089693][T29885] do_syscall_64+0xcd/0x490 [ 923.094251][T29885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.100351][T29885] RIP: 0033:0x7ff78598ebe9 [ 923.104880][T29885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.124530][T29885] RSP: 002b:00007ff78689b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.133085][T29885] RAX: ffffffffffffffda RBX: 00007ff785bb5fa0 RCX: 00007ff78598ebe9 [ 923.141090][T29885] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 923.149108][T29885] RBP: 00007ff785a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 923.157289][T29885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.165386][T29885] R13: 00007ff785bb6038 R14: 00007ff785bb5fa0 R15: 00007ffcd725e658 [ 923.173411][T29885] [ 923.176882][T29885] Kernel Offset: disabled [ 923.181220][T29885] Rebooting in 86400 seconds..