last executing test programs: 8.080662371s ago: executing program 3 (id=479): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) sysfs$auto(0x2, 0x200000001d, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setresuid$auto(0xfffffffffffffffd, 0xfdffffffffffffff, 0xffffffffffffffff) setresuid$auto(0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r1) r4 = setfsuid$auto(0x0) setuid$auto(r4) r5 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r5) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x266c, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8}, @THERMAL_GENL_ATTR_TZ_NAME={0x1a4, 0xa, 'I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x2}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x7a1482e3}, @THERMAL_GENL_ATTR_CDEV={0x22f9, 0xe, 0x0, 0x1, [@nested={0x103, 0xd5, 0x0, 0x1, [@generic="345e251a43842ebe734ee6c0afb0e6bb71357305e8850c7fb7961be740842cee819bd7eebbd152c3f4f484dff50cd92723211e57c6816aec2bc2d5f98661bc17777cf0b33a9b6e4c74cc78a29528687e278c741b528ddb9b6fb14edbd84d870d5d55ac78254cdd2f51ec1c2b805b9adab6452cee50bcecbc09d24f35634d764574a35e911a53af414c992b4fead80521", @typed={0xc, 0x141, 0x0, 0x0, @u64=0x100}, @generic="24975b967bdffda43d108c7f19d540cc11321ef3b28cc4b6cfc7e8bcd95e8bc392c55510ccfee898bbb8366b2b9f7e6788af4eed7b5150da", @generic="7069fd32776396b2a7ef3f06a2773bebb231b5cb364a879976bdfd8a969f9f149294c2938048282ca82005"]}, @generic="a0a44f5693a9699b4133bc16c52d1e71b91640d18528d4bab836e2d28d94b4c69afd487a393cf71293ae28487bfa3120268f52d1de53cdb96264cedea6fed36ac312c47c2397600bdbe2a5b2d0601cf03c5663ce210a5160bb50c2a0193798bf173acf3e2597295c52cd1b1251bb3df183e4524b9440a9bdb5334d3f054dadc59159537b393d68ed29e944c1bab0e077b9821f4eb0bc245263", @typed={0x6, 0x51, 0x0, 0x0, @str='/\x00'}, @generic="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", @typed={0x8, 0x5f, 0x0, 0x0, @uid}, @nested={0x1140, 0x84, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @fd=r2}, @generic="1eee43d04650d1f3ad3fa648f562ea1c36ad1568f3d5e811ba26b6261c9597997d74b2e7d9eec36397327cd82cc76eaa80709061540c96487b0036166ed6a170b546ca49bbd27bd3730c7db88c713597b5464d3dafa298f2579c86261105c0b05dc77c0428bdaf61452d1e55d409ca703cdc99a57f9b67f380e85a49035aa5f75b20318a5a33c596c7cd3d197eb73c27ada1f647cdd43eb7826e9471430cace880d8e0cdf22aaeee930e63814758f81a45bf9f", @nested={0x4, 0x7f}, @generic="2f2c62487c709d1e6d39bc5caecb3905333091834e9827fc4b478ff033d07429522121472a4cb26c263c5d4b386b31bd922697b679153f4c7507b44952a77701840beac3703951c538cedf99383e21512a459e5a74ad8bcd753c4f8e863b0377b085d812492be80094fef9fd8d61cafac9", @typed={0x1004, 0x12, 0x0, 0x0, @binary="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"}, @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @nested={0x8, 0xeb, 0x0, 0x1, [@nested={0x4, 0xd1}, @generic]}]}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x3}, @THERMAL_GENL_ATTR_THRESHOLD={0x195, 0x18, 0x0, 0x1, [@nested={0x10c, 0xe6, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x66}, @typed={0x8, 0xe7, 0x0, 0x0, @u32=0x925}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x1522c912}, @typed={0x8, 0x60, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xda}, @nested={0x4, 0x2b}, @generic="7b6f9514e6a2749750d1194ce2a7e7b495228d672ebf7440250b462880bc7f8faabfc003e007337d36fb8b566ec3267642b82920ebd8dfc4b57c84f2507db6bf7fd8f48acd0e8eaf1848a2ac8d5da2b345d981755366965485b8d69694cc4ea607fd1d74ec5290b639ea41499bc63b1e6f611e402155ed546c46a708ee0f2e15a7be299f31e6270003d19bc8c6782fb9e1939e64e332418ad246a46d4d9313a59e7afbd89e7431ff3faf701e099a5d466027ba04af33c348c3b7542bcceeeb5585567b4e709b3fa1ff3852b1d4f2fdbbe80ebefd14e93357", @nested={0x4, 0xa3}]}, @typed={0x8, 0x1, 0x0, 0x0, @uid=r4}, @nested={0x71, 0xd9, 0x0, 0x1, [@generic="c25cad04e90b3d73084319dc44b808c49c631a389945e670e2011e08626f811cd5c31e567b2fbf125e5b9a7c6afe7a2b38f2093a8241c8204aef269e3616ff42bca1e22fe34004df1400c55778a0a1faefee91dfc562285122ab57cca54a265bfcabc398e061af8769", @nested={0x4, 0xea}]}, @generic="ed", @typed={0x8, 0xd7, 0x0, 0x0, @pid=r5}]}]}, 0x266c}, 0x1, 0x0, 0x0, 0x4000}, 0xffc5a4140b1b58a7) 6.23732968s ago: executing program 3 (id=483): sched_setaffinity$auto(0x1, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) unshare$auto(0x40000080) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) ioctl$auto_X86_IOC_WRMSR_REGS(r1, 0xc02063a1, &(0x7f0000000440)=[0x7acb, 0x6, 0x9, 0x3, 0x4, 0x7f, 0x3, 0x2]) prctl$auto_PR_SCHED_CORE_CREATE(0x5, 0x1, 0x0, 0x3, 0x8) sendfile$auto(r0, r1, 0x0, 0x7) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bpq5/threaded\x00', 0x82942, 0x0) sendfile$auto(r2, r2, 0x0, 0x200) shutdown$auto(0x200000003, 0x2) 5.752457708s ago: executing program 2 (id=486): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)={0x124c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_RESULT={0x1238, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1084, 0x5, 0x0, 0x1, [{0x1080, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x24, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x7}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x47, 0x1, "15498343c724307734086992dc1e25a2a9103e4bf48686438120218fc18eb8d92081607cef938d982b98b2ffabb3d4697d0e992a1ea9d3b471e918ae07e413f97503f8"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b0, 0x5, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x80, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xfffff7f7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x1c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x8}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x100}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, '+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb3, 0x1, "adcb04a58b3c2f134a15760485188573b1cab1d6ed2698c24fdf710d4b3aa02e3d7206d8e192d58f52ccb69d864b538b8c63b8931a461b0050253fe028240d8b51489a8d52d59f5088bc258b350f375c597e492406740eed2730170fcc3f336f8984bdd9509765de2517c0b82b11ee8c84f1bfcf02152e5664f172dd6025ddb37ce75221e11f3db64fbf6953ac9b5f7bf14ccddc2e65070aa3eecd7a88c038f6ae9bc539ca6b583f997fcbb21becf7"}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x48, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x9}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x628}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x1}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x7}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}]}]}]}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000140)='0[.[\x00', 0xcd04) r6 = socket(0x10, 0x2, 0x14) sendmsg$auto_NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES16=0x0, @ANYBLOB="01002bbddbb0000000000000d311"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x400000c) sysfs$auto(0x2, 0x101000000000007, 0x0) keyctl$auto(0xffff8000, 0x8000, 0x2d, 0xc4, 0x0) r7 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r7, 0x8000) 3.861999522s ago: executing program 0 (id=492): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) (async) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x0) (async) sendfile$auto(r3, r3, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xffffffff, 0xfffffffffffffffd, 0x4d4, 0x10, r2, 0xa) madvise$auto(0x0, 0xffffffffffff0004, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 3.797932856s ago: executing program 2 (id=493): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7ffc) socket(0x23, 0x2, 0x0) unshare$auto(0x40000080) socket(0x2c, 0x2, 0x8) socket(0xa, 0x1, 0x84) rseq$auto(0x0, 0x8000, 0x0, 0x6) madvise$auto(0x1, 0x100, 0x15) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0xc0485619, 0x38) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) unshare$auto(0x40000080) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, 0x0, 0x44044) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpgrp(0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, r0, 0xfffffffffffffff5, 0x7) r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000001080)={&(0x7f0000000080), 0x5c2}, 0x5) r2 = socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x8, 0x15f4da0a, 0x8000000000000000, 0x68, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xacc, 0x5, 0x3, 0x14, r2, 0x8004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sched_rr_get_interval$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5f0027527c680b39ca532723356f24b1cade9185d017e9aa161f1e6703999f32b614150d2917dcbeefb7565f23f6ae4eeddad28a1e77f4a3b09c4a43f39c0fd6ebbe01079971018f0a93509213462b0d5899673400"/94, @ANYBLOB="1c0000000b5197761a161020998b479b5037c3f914c6558784f56e0513eda44388b270d4f9eece61824d031ab61ea5d0c8dfbd101f5c324db2367f49e926a65f9313d11ce487e8c62d266f7c", @ANYRESOCT=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x810}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 3.584862474s ago: executing program 3 (id=495): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0xa, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800b594a97873c1e47ee617b60b3fac56441f79abac54fcaf4d95372bb7690ba0a8fad"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d00"}, 0x66) io_submit$auto(0x3c57b780, 0x9, &(0x7f00000000c0)=&(0x7f0000000080)={0x6, 0x1, 0xffffffff, 0x1, 0x4, r0, 0x0, 0xffff, 0x400, 0x0, 0x5}) (async) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) read$auto(r0, 0x0, 0xe7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 64) io_setup$auto(0x7ffb, &(0x7f0000000100)) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) r4 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r4) (async) r5 = socket(0x22, 0x4, 0xffff7ffe) (async, rerun: 64) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) write$auto(r5, 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r6, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) pivot_root$auto(0x0, 0x0) (async, rerun: 64) open(0x0, 0x7ffd, 0x12) (async, rerun: 64) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x2003f0, 0x15) (async) socket(0x2, 0x1, 0x0) setresuid$auto(0x0, 0x7, 0x8080) 3.399871349s ago: executing program 0 (id=496): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x5, 0x7fff, 0x6, 0x80020000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0x6, 0x7ffffffd, 0x3, 0x7, 0x9}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x51842, 0x8) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c6, 0x1e2) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045438, 0x0) write$auto(0x3, 0x0, 0x100082) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) 2.867791143s ago: executing program 1 (id=497): mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0xa, 0x2, 0x73) sendto$auto(r2, 0x0, 0x402, 0xfe80, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x400, 0x0, 0x2000000000, 0x5}, 0x2}, 0x9, 0x80) io_uring_setup$auto(0x6ea2, 0x0) r3 = socket(0x11, 0x800, 0x7) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40026f34, 0x0) connect$auto(r2, &(0x7f0000000440)=@phonet={0x23, 0xb, 0x51, 0xfb}, 0x52) shutdown$auto(0x200000003, 0x2) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r4, 0x2, &(0x7f0000000380)={@_si_pad}, 0x4) timer_gettime$auto(0x4, &(0x7f0000000080)={{}, {0x4, 0x3ff}}) connect$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @local}, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x7}, 0x6, 0x0, 0x5, 0x1}, 0x5}, 0xb9, 0x100) 2.526040935s ago: executing program 0 (id=498): r0 = syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x2000021}, 0x0, 0x0, 0x0, 0x0}, 0x58) mq_open$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x3, 0x6, 0x100000001, 0x62}) mmap$auto(0x8001, 0xff, 0x80000001, 0x1010, 0xffffffffffffffff, 0x28004) mmap$auto(0xc1, 0x2000, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xb}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b5, 0xffff, 0xd, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40000) socket(0x29, 0x5, 0x8) socket(0xa, 0x1, 0x100) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r3, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x0, 0x9, 0x7) prctl$auto(0x20000004, 0x1, r0, 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) 2.453361768s ago: executing program 1 (id=499): mmap$auto(0xdb3b, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x6a) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='a\x00', @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES32=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f00000000c0), 0x2200}, 0x4, 0x0, 0x9, 0x8}, 0x7}, 0xfff, 0x66a6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x101041, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r2, 0x50009404, &(0x7f0000000140)={@inferred, "6dfabf47568ba8f3565935a3e03a2ebfa0b96f727139e0560aa20e45327f2e448b4a6d031a2484fea1f4ba52abadd88b595f989a9c9c7bda520ac80cab88650cd286148f79c158ecb903ef90018c5f72b74549cd93910519b7a40d92f6d5d73519205210d9fc0369e55be5102159b4404c64608dec7f189a9384116505270bb226e1da81fd854fabc9dab0913da994f908fb660eeab57955938064b38b8591d37cb4691be0f67711dedb1add9965729dbbfce67fd669d25d4cfff0cf82d14f24d7ffb4e18f8d5692aab5c6e8ef5a7db5c192fe3c1f00c9c0efdff65807173e9c9b417598776bb462311f0c50a6ea7599dc31f909442b305ed7993b2458f7c9a47ce455bc609c31a1f9a964600fdd1577bede45ec24335cde549f5b82829c3a2d7b77adce46d8fb15c6661e0f7c94385fcd90491501eb0eac124a3a87e38f87fa86da45a1330e3752efcdde41745624452cb0b57cf7796c6e67a6e4202c6f84726046a213522b950e0daf96ba751baac7f853500615e01f1c05721dd78d6f2ccaf5b235f0f5c7be7512abeeb9f114e27eb0533ebd923fe07830eabc6b5f2f3e53e70d8ccd3e1a9794fc399ab95f738ef8839a57ca34cb14827bbbccc274be7d2c8e8de10ee260173ad7b942259ea58994f9357a656e432d7c108293203600a0fb85192c2ad376c7d31c146d3c900c8f31e4a5767d13148c83e40ae2da3ff60b0b52cd2e9f72a55560e8912afd8a839138a060cc8e6b84529e70be640d28265fb274e42657f9ec6212a6c4f734128c83e19b42fa02fe39e093ca405fd7c2465d3016ab6371b34061a17613c5433c51eb85a9c1e1d999e76c8cc883bbd75a00ff9140ecf80b079f6dc3c79d49c55b5a2f242bcfb9144d3282a0b11bf4c93aa460361265576b2b9adec111c0c5c98465fb852a8e4dd18d71a2117fdab799415621b404c4e3b77eea2b997b207abef7bea1f59831da1f5e43334f3809cc908e37a8a718d5aa30c63835f9de60cbee1c28feca90ee1ace8efafaabbee81f484daa57b076d3b777eabeeff657c114d1cacbfaa8f7ec2717e04dcc5a5481c7f8c122df0ce54dc156738a266a5fffe77c40b294c707394c04094502a15fd861adcedaa8683855415c1cc117fc5437a65467a5db214472204657c3ad51f29d1cfe4c51281f2210db716eb39c12b2d79005c137e039620fb4a79ce49f383bb1381d3a05f6676afe7e4275cb8865352de3cab47078be7085d81c3f647ec162221fcc629688ab9bd99effec49484806d02b705d72042dc65b7a58563a46f10b4b47a8580c608160702f80dfc4c391de5d1b2cf0669c4e65ba41da30eb5993406041a72e7b31023c3b452c4bf45240fecec442ab39ffa0fb68dcc011e6543a6cfb38585e48f3f47cc5df10964c700d56ada1105c2f290804b49049b7ca3620e0132c7300081ee2b583b9663177e1c894ee3b276b501a62a63c18f522880da1262cc15c3abdde2255e9472f65207fd95ba1fe0052586fa19eb3bbb09f493d287fe757dd5407a1613b719df4bd1e97ca655fd9ad0bdb830cc5988eee85fa37801c95b1d0fccd42330790af274cf24487ca65aec3a1cc3e97c7368de9c6c869f9239a3a0cf11422eca297dcd209a17625855a563258e57724ee95dc9d39cddc128965a7edb7bba31ad92acd2e98b7dbbd05d18f84f9439109424249c9674c508c149a34762ceff8dc3a5dc6497a9daf20308a269c025da05dd2f550925fcd94045cf398fee70c6f110652d3075af0a765fa32c4bdbe59ce1d82ca966c81385eefe70e47e3677ee42ecde76c0f34e364b2405bd12332a2fdb71390a318a965c71ad2617eca5e13f73338516dde2d5781eb02f11ade8439876e1170b7d52a60cc3ec27aea4babaa08e575552aa56e8f4095e993b922a84fb0984d62887d418979eb4c2d589bcfeae7685a86ef0179ac65967f0411f1829194496c5495b86c4f93a3602b127d9d493477ec0992a9aaddc5bd30caeea2b2cc36675ec3dd3496b7f368c2a259a28481049935c9074a51d5df8ee91a6b692498f505298ed16a1238f0166e3defc98af0abfb08c084bf94f0b286b9f865e9e6a5ae6861137a05adf95f1242505688328b093b3770f53ddca7169bd48763f571eb3a366d81aa2a41a1e1b3b142da1cc91edb2e8db14a763145c93c4c033a374903cc4ae80ec29dfb8d76a5138103ff9f63a439f359bcef0dfca6c6e996a32a035eb4f29c14117fc48292eee73b4a7927772d0433f1804e229a6d23eb638b477bd4b20d9a069ee170a5af21a81506b92ac731661b07c8baf523510dd98755c3ebea4d8da5727b1289874d8bc241604bae60b3ea33b484fad9ec29ef455e2b64d50debd22aa7b932f3e80644a588a743a9532e71d9fcb89a522d8159c89c50647e078ec932c3b88d448856fc249aea673667cbfd96d9b51e5c56c0ba7c1c009095c987723195aa4a87fee9d620f40556fe099150ff3ee583a7241ee56c9982ae6daaaff7d1130e2f0ab9ba9f017c741ab1140513613aaf43e21c5ee78440c7d45f5b281e71d67ab2c282d2ded68179672641df06a8ae583d3aaaaea62f3a1e055d3fc1762f43ec1cbda20002b981958b36736fba45701c6b6f6ce88d20acf908d3f594afceca5d0286808a55313246f2c560037ff40715d3c4d558ef7c7a39395b287e45f6bf1f7220bc3d236f5851b4d7e31d86df1351a96a0b73507ddd20e58436cec55aeb8aaf5ba52aeb6a2fa9d60fdef36127554d28c1337defd75eaa50925aec7bd46279f923cc18ce8720381f4e656fe85022c53139aa1ed501358c6df9cbb138512b91216ef0fa20e68e9a9edaca40737cc43f55284cbc19a00e96b8233471f014dd737b3b9b8de188c53c06307243e4c1d85d5f04ea48a3b96ce599b2a61a2fa132a4c17bd233cc24730a51c40a5631def5950fa274088cd73b6a600cd4aa411a22b406379abcf0f785c25190667bf8e72480c8c4d33dd5891c77067671aadc3bef9a5d0d511f99cffbc9c327ae24226019408f4850bdd6586c6a8ff591aaec8eb7a411613b7a6c70807ad89d0062719fb3ae2c6fc78327ba128255128bd6ba9bf092162cfcfa5a8bc757475db13b02b6da39ac49c8c9164ff57625abc1eb8d67c636bdce70542604de18d417c4c007839d1d6f1d75daf255dce4230a9cf3155bcc344fb88735e11761813bcdacb5e4ecd6266b0e98e0407f12f370abc69d6b1b36f7323e2e9161a14752400c51a54aedcc78c5a9bcf4557ed829ba0ebe3c76a77965a2e75be76c3ea4d41c007ea4b008575100183b8dafe92504a01a4c7d88c689401c0d8c4a2980dc9269699e25a97fffa65c2a567f298a793430fb405e4c0bf5538b817e723f51fe37281b7c840b16eb327c7a6b38a3da97d0281e50cc95f8dbcc03111a2e9358d2d490d1d498539ae7f5dfbb0fe1a9a68e86d7185e7691b48bcf6bce70c93ca84f9eb9c981461b2ab75c018215891a0685d02a3df26109cc14ddbf2dd41dfa4995e83c85ae41e0947d99fb932660d1a03e1873fc9509b6c6a20f3d2c5b99494aa790bb072722d228ac759e5a2cd7b2bf374705719c720fcf7685811038844a7028e8024e9e27c5c0685eb865bc1e69c04b98e49af8cd79ac66c69c92c18a7c76b6f878207ea78c986dab9e4c0631e8a1ca11cde7b1b7f5db9979c0f0135b743e83c4df6a5bc0fa4d06de6869caa5eb381694b59dda8f3a87f27be1f7b73708eec78064a33f241f2468545875c9212cac3797eacf35ab263ebbacad4fae385d17e4e894337581ab8b8deb6e781aa605cfc232e0657b15b2754fed2c797800d92f69df163e93565db63454933e0c4553591f55142a745e820bc5156952a1af5915cf48f8d86214c2230da3250feaaa7667b325ddcd309acf98398efa360d93d0511b17b5745e07a86975cf7f05af82535cccfda347dde1bdc3bbc3a29a5486637a167fa4b7ac9f29ea0823cf4ad94fd340e74e94c33a2c8f8bf7262c29bae22348d820afa85aff5016cad6e4116cb3e0585ada021514930258ccbc642582e8484a2205df7a9d95a3cb01048758d153da8631f36fa508c6db3044381d97fa2b47338a57a10643257c07ffb8249eec0db5e018818e23dfb5cc98890b3cb45d3660d08153976973e5b37d8fbcc5e9dd5d21821c8503e1b1fd4834cbaaf9fac34327e2612c9b7f8b2595b21cab1782f9a18a526499db569ddf62530abfd611b14b975291487090af7f756d3d4290d48b4589f0e5f86648a5f80c9eef10b43f3e7e02483b44f7b1668335b78d184a0a18b7395fd7f22f13eaf0bc3439e09eefcfec2aa2fa85c7258df90c751fbd45b7246f8de84b40bc9619b66c3ec7c851a368d498692823d342051bc10c25f3b953898b8361604c1d45b210c6f32608023faab5fe88e915e12a37e7bcafce6a1790fc35a7809228777cedad651a518315c0dc1cc3036f33420ecdcd86448efd9ed9b564ec93cb6ef199d4bdd2e3ce9b4be62968836cd991a20cca6c4d3944285742e545d72be24f3b482069c04df74fadd845519ba546fbf05ea1ac4a4e133414c3a0ae7b3e7716c9760ec6ac882efea3cfba019051d3c93c1a7bbc04cba76335a033def7cfe97c17a63cd5be301aeb913e0de85d6ed97a2cdbca50839a895d89cfe6434ec57a1caa72c718f885a4ba91c30af2e6a33fee31c36a48a6f188cc1fab3422454af80fb03b831004d18a8810e7667d855d3043191fabdbd979e1ecd73b4ede3c4c8f06f003ddd5b4fa9b202ac7e65adc9f7815c07b4d5a7a3bc2a50db1c1fe12cb858c5dbf0bf5aa777271056b1660afbd0036e0241c17976d3e20cdef0fb05daa5103f77d3a5c597e6bbb2658bcd8acc5b37b174b9924d49cb9b2acb79a0ac1dd46dba6b7a0cdc51af5a84eda2a2e90fa30c2cad8dec435c2527ea87e2c1fd7cd99b6a1f8257ddc8f8630cb0eefe7e10595181d0d9b8bceab41529d90dc70e2a8d362ec1ccf48558ed6e31792d693af792281e58b8bf0534eecdfd46e9c2f6b79f3dc5cded912854f4482584c120d25aff1159b36975dcb1531bc3d8b6495444a3c1a45cea3cc9bb1b15eded1f6cc75d69269a05fbbf97d42131a5d9b2df06e6b55978cbe17b779c88a962c16ba5026779086b85786138c4212e52a437e20b9b491a828ab6c098fb31c6195dc9deba00c504db1ebb8186ac934b82829dba448fbfebdcdf9da88555f358fc335c4a81986cd2546fc99fb687f71250eafe3403a0c11d0c1c95c5f18fba4bbf1576d9892aaf32806de9e5d7c94850d384b0fd1af2223a83eb78643de8645683e859aef234600dbc46ec6acc16b8c240a8172db7aad7486b1f2ca6d6e9c468c39c6f860ddbb39766fb6891d8199b62e26fdd8aebe92c85eca06f44c3e4a9e99b819bf38d4b275e33bfd8a246099835945f9fa8e4b9cc6bb8baafc44e5f914d48bf88cf4e718147934c08ba7974314e6fe12afee9b5e53a90fdc357929972da5596a838a5e48e68272560f9b520226136512590916a1943bf880707f9830fca4a8353564c3f8a2c36c93f313fa17803b0ccaffe336991b018835fbbde9f55245a08fa76101783e18dc78d5b401364b0dcb111401f5a88cbe2823d14df503a09becf409c0dfb221d24c0e24d79bdaa0b16db2557f63183650e712d348d4ef058b794fabbf8faf5903cc5acf1db11ca613584d35f79a754af859ffcb1f2a2d26b27cc65a1ea02e288bd24a169e09274ff343d3d0b93d2397df2d10834e3877420508512c69a8"}) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0xc080aebe, 0x100000000000000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x4, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7ff, 0x9, 0x3, 0xffffffffffffb853, 0x4, 0x5, 0x1, 0x10001, 0x2, 0x80800001, 0x3, 0x6d3c, 0xacf0, 0x4, 0x100000004]}, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) write$auto(0x3, 0x0, 0xffd9) ioctl$auto(0x3, 0x7fffffff, 0x38) setsockopt$auto_SO_RCVLOWAT(r3, 0x9, 0x12, &(0x7f0000001140)='.(\x00', 0x3) 2.23600149s ago: executing program 3 (id=500): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x80000001, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x3) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0xc3, 0x0) setsockopt$auto(r0, 0x1, 0x10, &(0x7f0000000280)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\x00\x00\x00\x00\x04\x00\x00\x00*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xba) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r1) sendmsg$auto_NL80211_CMD_GET_STATION(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000002440)={0x28, r2, 0x4bcedae9142a5f4d, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINKS={0x14, 0x138, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_ATTR_MAC={0xb, 0x6, "519c7b1e0c977a"}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004001}, 0x40) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb}) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f00000003c0)={{0x4, 0x0, 0xee01, 0x18, 0x9, 0x21, 0x6}, 0xe, 0xc4, 0x1, 0x4, @inferred, @raw=0x4c000, 0x3, 0x0, 0x0, 0x0}) 2.047814573s ago: executing program 1 (id=501): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0xa7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) timer_create$auto(0x3, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f00000005c0)={0x4, 0x5, 0x100000000000009, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x80000000000000b, 0x40800405, 0x9, 0x9, 0x0, 0xd, 0x200000000006, 0x9}) r0 = socket(0x10, 0x2, 0x0) setsockopt$auto(r0, 0xe2e4, 0x2, &(0x7f00000004c0)='-\x00', 0x400) statmount$auto(0x0, &(0x7f0000000180)={0x100, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6fa, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x2, 0x4, 0x80b1, 0xa, 0x0, 0x10001, 0x80, 0xffffffff, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x85, 0x7, 0x6, 0x2, 0x0, 0x0, [0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x7ffc, 0x4000000, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xec4e, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x7f, 0xb1e3, 0x7, 0x19, r0, 0x2) r1 = bpf$auto(0x0, &(0x7f0000000000)=@query={@target_fd=0xffffffffffffffff, 0x9, 0xfff, 0x7, 0x1, @count=0x10, 0x0, 0x2008, 0x2, 0x3, 0x4}, 0x9f) r3 = socket(0x10, 0x2, 0x6) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x2000000, 0x8028}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20008000) write$auto(r2, &(0x7f0000000840)='\x80\xef\xbc\xb5\xcf\x1f\x8f\x97\xc1\xdc\x9d`\xe1=\'\xfc:\xb6\xf7w\xe2J=N\xf2~\xf3\xf4\xf2yS\xd9V\x9b\xd9\xc0\xdf\xa1\xb8\xfd\x9e\xb0-\xd8\b\xbc\x14\x06%\x9d\xb1\xc4Q\x93\xba2A\x1f&k\xf1\x81\xe1\xec\x8c\xcfP~\xce\xf4lF\xafLo;k\xe7\xdc&\xc1\xf5\x8f\x18E\xbb\xdc\x9c6FLAUB`\x7f\x98\'\xeb\x7f\xca\x06\xd3\x90\x96\xf12\xeb\xd3\xfe\x8d\xe1S\x8f\x839\xaa\xc32\xc2\xf8-\xb3\xc7\'[\xd4\xb4~\fx\xf8h\x9bOC\b\x90\xad+\x04\xbe\xb9\xf3x[\x17s\x0f\xce\x1d\xc9)\xbcg\xe6\xdcV;#\x92P\x96\xe7F\x03M\x9bD\xba\xd0\xf6\xc1\xcd\xdf\xdb\xa5\xd0\f\xcd\xea\xed x\xcb\x00\xa0\xba\xa5\x18\xf0\x8d|\x1dwJl\xff\xff\xff\xff\xff\xff\xff\xff\x8b\x19\xf6\xa4\xf2\xb0\xf9\xf6\x87R\x00\x0e{\xbfd\xee\xe8\x8f\xa2H\x9c\xd8\x02;\xe3-d\xc2\x15:\x1d*\x8d\xf1yG\x19f/[\x17R,\'a>\xe6~\xd3\xb7\xaf\x90>l\xac\x12\xe9UtxH-u\xb2\xb8>L\xc5\xd9#\x1dU=\'I\xa3\x0ef\x8d\xcc\xb3\x1b\x02\xbe\x8a\xabNc\x9a\xc1\xd9\xe3Zl\x19O\x8eg\x8c(\x8c\x7f\xeb\xcb\x90\xd0\xd6\xe84\x19\xa7s\x1d,\xdb\x11\xbdH\xc87\x12\xa6\fBR\xcdzq\v\v\xba$?\xbe\xcc\xce\xb9 \x9e\x8ci\xec\xba\x93\xa1=\xc2\xa88\x93\x8c\n2\xed$\x94\xb2\x96\xf3\xe3E\x9d\xbd\xf2OL\x02\xffg\x12`+o\xbf\xf0/\x04\x84d\xe8\x00\x9c\x9b\xf0\x05^\"y%\xd6\\4\xbd\x9bc\xd7\xb2\xf5,0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000", @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r3, 0x28000) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r5 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r5, 0x0, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680), 0xfffffffffffffe77) 1.357871426s ago: executing program 1 (id=505): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x5) socket(0x1d, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socket(0x1f, 0x2, 0x200000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x189001, 0x0) write$auto(r2, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) mmap$auto(0x0, 0x4020009, 0xdf, 0x10000000000eb1, 0x401, 0x8000) capset$auto(0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/qcserial/unbind\x00', 0x0, 0x0) read$auto(r4, &(0x7f0000000100)='\xcb%)\x00', 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.207339255s ago: executing program 3 (id=506): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r2}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f00000015c0)="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", 0x1000) r3 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg1\x00'}) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r3, 0x0) read$auto_ptdump_fops_(r3, &(0x7f00000005c0)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) 832.015982ms ago: executing program 0 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0) (async) landlock_restrict_self$auto(r0, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) (async) unshare$auto(0x200) (async) ioctl$auto_NS_GET_TGID_IN_PIDNS(r2, 0x8004b709, &(0x7f0000000140)=0x3) (async) r3 = syz_clone(0xac259200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x8800) r4 = syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/time\x00') setns(r4, 0x0) (async) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) (async) ppoll$auto(&(0x7f0000000040)={r1, 0x7, 0x5}, 0x6, &(0x7f00000000c0)={0x6, 0x1}, &(0x7f0000000100)={0x2}, 0x8) 663.823605ms ago: executing program 0 (id=508): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fstatfs$auto(0x3, 0x0) (async) ioctl$auto_VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r0, 0x0, 0x3ff) (async) close_range$auto(0x2, r0, 0x0) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) (async) prctl$auto(0x25, 0x2, 0x7fffffffefff, 0x8, 0x800000000000) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4000000401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x5414, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0c5833b1dcff", 0x49}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) (async) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) 574.181685ms ago: executing program 2 (id=509): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='\"\x81=\xe2\xad\xff\xf1y\xb3\x1d]\n\xcf\xfa\xee@\"', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xc}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x13, 0x2, 0x9) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x40006, 0x3, 0x38, 0xffffffffffffffff, 0x28000) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x400500, 0x0) ioctl$auto_VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000380)=r3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:03.0/d3cold_allowed\x00', 0x2400, 0x0) read$auto(r5, 0x0, 0x1000001d) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000480), r6) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video44\x00', 0x8a240, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x17, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x8, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) 350.169337ms ago: executing program 2 (id=510): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8200) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x7, 0x0, 0x4) (async) shutdown$auto(0x200000003, 0x2) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x11, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x5, 0x5, 0x7, 0xb2, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff25be, 0x0, 0x23c, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47800000]}, 0x1fe, 0x82) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) (async) open(0x0, 0x22240, 0x44) (async) socket(0x2, 0x3, 0xa) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) ftruncate$auto(r0, 0x5) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040045) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0xa0, 0x6, 0xf00, 0x15, 0xfff, 0x0, 0x0}) 260.542117ms ago: executing program 1 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r2, 0x0) (async) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) (async) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x14, r4, 0x701, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) recvmmsg$auto(r3, &(0x7f0000000240)={{&(0x7f0000000080)="2a733f0417e244e6d6b0e6a45edce6ea2085a58659a24a3e94076aa83c98265a877f4be3000c7e44b67d2adbdb9bf99df85180bf703306188aa45325be8b47e2b6db8fec07fe7dd518c7aab2613832f143e85e3476094c579bfd7507cfe6b3a538e1bf81c19c86cf014fe6cc9921c14d73525d80a872000ba144d5d5bb1a2ce78a697652680e2a68b56e90a1a3b3d5840f923e2b49fac74947c47325ab68b2f32e1fa8d9c2b530", 0x1, &(0x7f0000000180)={&(0x7f0000000140)="8b04128c048a3a318c4cf91bfe6eddaeadbca8a9060e", 0x9}, 0x80, &(0x7f00000001c0)="d9c3e5c25e6d8ab2cf5c7a153bbba853b78d8bcbb7a0c04af24f3c4ed8506f66fa1e268b3e30b34a62ea7e2eb104b56f0be61e63d4be7377c520eee5aa97c97edea6858930af0a20c1c35bd494ab40b3d13cf949", 0x8000, 0x8}, 0x2e}, 0x200, 0x6, 0x0) r5 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0x80001, 0x0) write$auto(r5, &(0x7f0000000240)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x03\x00\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xb5\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2=\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8\xe83\x90P?\xe2B\x85)\xcc\x1f\xa1\xf8\xad]J\x90\xe7E\xa5\xfc\xfc\x9c\xa5\xd1\xab\xd7@\x94V\xbd\xba\xb1 \x9d,\x1e\x03\xd7SX?\x1a\xc7Y\xc2\xddh\xc8$\x8b#\x89\xad\"P\x81^Uq2- \x92\xcd\xf8\x8cU\nSx\xf9\xdc\xe9.t]\xec\xeb)\xf3\xa6OYBHE$\x98\xac\xa58^\x0e\xf5\xd6\xa1\xc7\xf35\xf9\x929FYr\\?\x80~nI\x92\x94\xca\x8c\xaaYmI2\x9a`#r\n %\xe5\xf0\x90DI\xac^\x96@\x10sD\x987\x9a=;\x98\x81\xbb\xf4)ts\x9eO,\'\xd0UI\xab[S\x8e\x11)\x8e|0\xa4F-\x9d\xc0\xe1=I\xcf(\x14\xb2\xe4\xb4\xb2\xb7\xeb\xa7h\x1c\xf4\xb4\x1c\xd5\x9bkD\xfa-\xd6r:eh\x01\xb6y\xbfM\xad\"\x04\xd69\xadn\x81\xc0*\x92\xe8\x9b+(\x8bF\xa1\xe4t\x1a\xf1\xca\xd1\x06A\xef\xc5d;\xbe\xe3[\x7ff\xf9}f\x9bL\xd65\xba\xf1\xcb\xe7\xfc\x03j\xd4\xa7O\x8e\xba\xb3\xf1_\xf4\xa3\xea\"\x84\x105\xe1\xa5Tzk\xe9\x10\xf8\xaa\xe3\xff\xa7\x9crMP\x1a@U\xb3+\xd0\xaa\x9a\x91f\xb3ozf\r\xb1\xd4\xaf\xe4\xbee5\xb1\xc5G\xac#\x93XE\x8f\xee\xce\xb5\x86\x89\xbf\xbda\x98S\xbb\x83\xd5\xe8vr\x9f\xadr\xfd\xe34\xc61j\xe7\xd1\xe8eF\xdd\xdb_\xa2p\a\xa8\xc4T\fAQ\xe0\xc7\x9a\xd0\xca\x19\xb9\xb1(`;vz\xa5\xd4/\x19)\xde\x90C\x1b\xae\x92\xb8\xd1\v\xed\xfe\xce\x86N\xfd\x8c\xb9\xddi\xc0\xe4d\x17\xfb\x95Q\x06\xe6\x97\x1cI\x9f\x80\xaaSG\x05!\r#?\rM\x12\x1b%bPe', 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x39c, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0xa, 0x2, '),!)&\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0xae16}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0x354, 0x2, '\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x03\x00\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa9T\xf9\xcbsX\xa0|Vw\x97\xd80Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xb5\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2=\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8\xe83\x90P?\xe2B\x85)\xcc\x1f\xa1\xf8\xad]J\x90\xe7E\xa5\xfc\xfc\x9c\xa5\xd1\xab\xd7@\x94V\xbd\xba\xb1 \x9d,\x1e\x03\xd7SX?\x1a\xc7Y\xc2\xddh\xc8$\x8b#\x89\xad\"P\x81^Uq2- \x92\xcd\xf8\x8cU\nSx\xf9\xdc\xe9.t]\xec\xeb)\xf3\xa6OYBHE$\x98\xac\xa58^\x0e\xf5\xd6\xa1\xc7\xf35\xf9\x929FYr\\?\x80~nI\x92\x94\xca\x8c\xaaYmI2\x9a`#r\n %\xe5\xf0\x90DI\xac^\x96@\x10sD\x987\x9a=;\x98\x81\xbb\xf4)ts\x9eO,\'\xd0UI\xab[S\x8e\x11)\x8e|0\xa4F-\x9d\xc0\xe1=I\xcf(\x14\xb2\xe4\xb4\xb2\xb7\xeb\xa7h\x1c\xf4\xb4\x1c\xd5\x9bkD\xfa-\xd6r:eh\x01\xb6y\xbfM\xad\"\x04\xd69\xadn\x81\xc0*\x92\xe8\x9b+(\x8bF\xa1\xe4t\x1a\xf1\xca\xd1\x06A\xef\xc5d;\xbe\xe3[\x7ff\xf9}f\x9bL\xd65\xba\xf1\xcb\xe7\xfc\x03j\xd4\xa7O\x8e\xba\xb3\xf1_\xf4\xa3\xea\"\x84\x105\xe1\xa5Tzk\xe9\x10\xf8\xaa\xe3\xff\xa7\x9crMP\x1a@U\xb3+\xd0\xaa\x9a\x91f\xb3ozf\r\xb1\xd4\xaf\xe4\xbee5\xb1\xc5G\xac#\x93XE\x8f\xee\xce\xb5\x86\x89\xbf\xbda\x98S\xbb\x83\xd5\xe8vr\x9f\xadr\xfd\xe34\xc61j\xe7\xd1\xe8eF\xdd\xdb_\xa2p\a\xa8\xc4T\fAQ\xe0\xc7\x9a\xd0\xca\x19\xb9\xb1(`;vz\xa5\xd4/\x19)\xde\x90C\x1b\xae\x92\xb8\xd1\v\xed\xfe\xce\x86N\xfd\x8c\xb9\xddi\xc0\xe4d\x17\xfb\x95Q\x06\xe6\x97\x1cI\x9f\x80\xaaSG\x05!\r#?\rM\x12\x1b%bPe\x00\x00\x00\x00\x00\x00\x00'}]}, 0x39c}}, 0x400c080) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto_FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000002c0)='IPVS\x00', &(0x7f0000000300), 0x5) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) recvfrom$auto(0x3, 0x0, 0x840000000e, 0xf90000, 0x0, 0xfffffffffffffffd) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000000)=ANY=[@ANYBLOB="248858e9edd82f417b6c6dc846000000", @ANYRES16=0x0, @ANYBLOB="2bb22bbd7000fbdbdf2505000000080003800400010008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) 95.204322ms ago: executing program 3 (id=512): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000001800)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYRES32=r3], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4800) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, r1, 0x8000) syslog$auto(0x4, &(0x7f0000000440)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2z3\x99\x9b\x17\x14\x96\xc1\xc8J@\xe4\x18y\x98A1`\"x\"\x8a\xe8\xd1\x81\xca\x9e\x19H\xd2\xa4\x9a\x03R\x7f\xf4\xc8#\x87\x05M\xb6<\xb3\xd4\xa8sN\xd7*\xda!\x15u\x8f\x02\xf6\xc5(\x8dG&\xd4\xfeq\xfcgnH3\xcd\xad\x19\xb4\x06+k\x82\x7f\x03\x00n\xdb\x81\xae\xb5\xef\x9b\xd1\xa8\x17\xef^c*;\x1f\xc7\xdf\xc8', 0x20000004) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x8, 0x1, 0x63, 0x10, 0x3, 0x3}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) rename$auto(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') mkdir$auto(0x0, 0x8) io_uring_setup$auto(0x2, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TCFLSH2(r6, 0x5408, 0x0) 0s ago: executing program 2 (id=513): sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(r0, r0, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x181800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000040)={0x4, 0x7fffffff}) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_def_blk_fops_fs(r4, 0x0, 0x0) fstatfs$auto(r0, &(0x7f0000000240)={0x8000000000000000, 0x401, 0x5, 0x7fffffff, 0x4, 0x8000, 0x8, {[0x3, 0x3]}, 0xc2, 0x401, 0x1eda, [0x10, 0x7, 0x100, 0xc]}) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) ioctl$auto_PPPIOCDISCONN(r3, 0x7439, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 89.505800][ T5825] cgroup: Unknown subsys name 'net' [ 89.682251][ T5825] cgroup: Unknown subsys name 'cpuset' [ 89.691327][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.747086][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.927619][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.938532][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.946926][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.956361][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.964613][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.085074][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.096156][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.105092][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.113758][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.121604][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.129156][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.137775][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.145907][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.179781][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.189071][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.262799][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.280434][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.288845][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.298895][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.308076][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.520282][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 94.744855][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.752794][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.761035][ T5834] bridge_slave_0: entered allmulticast mode [ 94.771005][ T5834] bridge_slave_0: entered promiscuous mode [ 94.785535][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.792848][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.800529][ T5834] bridge_slave_1: entered allmulticast mode [ 94.809410][ T5834] bridge_slave_1: entered promiscuous mode [ 94.880442][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 94.894901][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.932853][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.028506][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 95.044076][ T5834] team0: Port device team_slave_0 added [ 95.079990][ T5834] team0: Port device team_slave_1 added [ 95.176578][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.183637][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.209699][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.237791][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 95.254988][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.262136][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.289220][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.354575][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.362175][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.369708][ T5840] bridge_slave_0: entered allmulticast mode [ 95.376838][ T5840] bridge_slave_0: entered promiscuous mode [ 95.408850][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.416092][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.423643][ T5840] bridge_slave_1: entered allmulticast mode [ 95.430898][ T5840] bridge_slave_1: entered promiscuous mode [ 95.460032][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.467313][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.475424][ T5839] bridge_slave_0: entered allmulticast mode [ 95.482750][ T5839] bridge_slave_0: entered promiscuous mode [ 95.544362][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.552311][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.560424][ T5839] bridge_slave_1: entered allmulticast mode [ 95.567637][ T5839] bridge_slave_1: entered promiscuous mode [ 95.601125][ T5834] hsr_slave_0: entered promiscuous mode [ 95.607555][ T5834] hsr_slave_1: entered promiscuous mode [ 95.648857][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.690274][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.703223][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.714477][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.726510][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.733921][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.741545][ T5846] bridge_slave_0: entered allmulticast mode [ 95.749029][ T5846] bridge_slave_0: entered promiscuous mode [ 95.794872][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.802785][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.811066][ T5846] bridge_slave_1: entered allmulticast mode [ 95.818448][ T5846] bridge_slave_1: entered promiscuous mode [ 95.886453][ T5839] team0: Port device team_slave_0 added [ 95.895950][ T5840] team0: Port device team_slave_0 added [ 95.920307][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.933805][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.944869][ T5839] team0: Port device team_slave_1 added [ 95.952953][ T5840] team0: Port device team_slave_1 added [ 96.029546][ T5155] Bluetooth: hci0: command tx timeout [ 96.057213][ T5846] team0: Port device team_slave_0 added [ 96.064212][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.073374][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.100485][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.112520][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.119807][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.146075][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.159475][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.166459][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.192802][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.203679][ T5155] Bluetooth: hci2: command tx timeout [ 96.214399][ T5846] team0: Port device team_slave_1 added [ 96.220975][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.227951][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.254584][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.268520][ T5155] Bluetooth: hci1: command tx timeout [ 96.340691][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.347945][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.374875][ T5155] Bluetooth: hci3: command tx timeout [ 96.374894][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.433366][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.440754][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.466811][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.483969][ T5839] hsr_slave_0: entered promiscuous mode [ 96.490391][ T5839] hsr_slave_1: entered promiscuous mode [ 96.497005][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.504864][ T5839] Cannot create hsr debugfs directory [ 96.570849][ T5840] hsr_slave_0: entered promiscuous mode [ 96.577174][ T5840] hsr_slave_1: entered promiscuous mode [ 96.585478][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.593315][ T5840] Cannot create hsr debugfs directory [ 96.656648][ T5846] hsr_slave_0: entered promiscuous mode [ 96.663353][ T5846] hsr_slave_1: entered promiscuous mode [ 96.669863][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.677456][ T5846] Cannot create hsr debugfs directory [ 96.940978][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.994553][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.006580][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.037805][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.230390][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.239954][ T926] cfg80211: failed to load regulatory.db [ 97.252907][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.264000][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.281757][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.366469][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.383538][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.422852][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.437949][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.531543][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.543957][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.564699][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.577237][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.611282][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.677856][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.717907][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.725383][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.761742][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.787998][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.795343][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.877822][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.920928][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.928081][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.939710][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.946842][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.986158][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.063770][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.088587][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.095761][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.110851][ T5155] Bluetooth: hci0: command tx timeout [ 98.160028][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.167354][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.192260][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.270883][ T5155] Bluetooth: hci2: command tx timeout [ 98.290064][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.334535][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.341801][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.363662][ T5155] Bluetooth: hci1: command tx timeout [ 98.424377][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.431844][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.439181][ T5155] Bluetooth: hci3: command tx timeout [ 98.555406][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.820541][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.832372][ T5834] veth0_vlan: entered promiscuous mode [ 98.893115][ T5834] veth1_vlan: entered promiscuous mode [ 98.973162][ T5840] veth0_vlan: entered promiscuous mode [ 99.028679][ T5840] veth1_vlan: entered promiscuous mode [ 99.067889][ T5834] veth0_macvtap: entered promiscuous mode [ 99.086626][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.117991][ T5834] veth1_macvtap: entered promiscuous mode [ 99.199629][ T5840] veth0_macvtap: entered promiscuous mode [ 99.223937][ T5840] veth1_macvtap: entered promiscuous mode [ 99.256505][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.275701][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.303629][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.322244][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.332757][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.342657][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.352920][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.361947][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.376248][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.392556][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.402574][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.412439][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.421313][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.445934][ T5846] veth0_vlan: entered promiscuous mode [ 99.512078][ T5846] veth1_vlan: entered promiscuous mode [ 99.651548][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.681926][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.694570][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.705932][ T5839] veth0_vlan: entered promiscuous mode [ 99.707690][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.723163][ T5839] veth1_vlan: entered promiscuous mode [ 99.804392][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.804392][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.804422][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.816527][ T5846] veth0_macvtap: entered promiscuous mode [ 99.838383][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.882139][ T5846] veth1_macvtap: entered promiscuous mode [ 99.933241][ T5839] veth0_macvtap: entered promiscuous mode [ 99.967426][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.970633][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.977898][ T5839] veth1_macvtap: entered promiscuous mode [ 100.020795][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.034868][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.044026][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.053284][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.062889][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.131850][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.154471][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.190039][ T5155] Bluetooth: hci0: command tx timeout [ 100.237340][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.246998][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.253892][ T5923] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 100.256504][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.275551][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.348771][ T5155] Bluetooth: hci2: command tx timeout [ 100.428561][ T5155] Bluetooth: hci1: command tx timeout [ 100.520402][ T5155] Bluetooth: hci3: command tx timeout [ 100.562457][ T5927] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 100.576415][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.618004][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.816569][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.847573][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.850956][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.870895][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.254484][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.298729][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.502632][ T4532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.512170][ T5946] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.526672][ T5947] process 'syz.1.5' launched './file0' with NULL argv: empty string added [ 101.541330][ T4532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.278271][ T5155] Bluetooth: hci0: command tx timeout [ 102.428362][ T5155] Bluetooth: hci2: command tx timeout [ 102.509393][ T5155] Bluetooth: hci1: command tx timeout [ 102.601489][ T5155] Bluetooth: hci3: command tx timeout [ 103.249599][ T5959] FAULT_INJECTION: forcing a failure. [ 103.249599][ T5959] name failslab, interval 1, probability 0, space 0, times 1 [ 103.263281][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.3.4 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 103.263323][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.263340][ T5959] Call Trace: [ 103.263350][ T5959] [ 103.263361][ T5959] dump_stack_lvl+0x16c/0x1f0 [ 103.263392][ T5959] should_fail_ex+0x512/0x640 [ 103.263436][ T5959] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 103.263486][ T5959] should_failslab+0xc2/0x120 [ 103.263516][ T5959] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 103.263561][ T5959] ? vm_area_alloc+0x1f/0x160 [ 103.263606][ T5959] vm_area_alloc+0x1f/0x160 [ 103.263646][ T5959] create_init_stack_vma+0x29/0x700 [ 103.263682][ T5959] alloc_bprm+0x420/0x6f0 [ 103.263726][ T5959] do_execveat_common.isra.0+0x1ce/0x610 [ 103.263786][ T5959] __x64_sys_execve+0x8e/0xb0 [ 103.263830][ T5959] do_syscall_64+0xcd/0x490 [ 103.263862][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.263891][ T5959] RIP: 0033:0x7fc4fe78e929 [ 103.263916][ T5959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.263942][ T5959] RSP: 002b:00007fc4ff5b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 103.263972][ T5959] RAX: ffffffffffffffda RBX: 00007fc4fe9b5fa0 RCX: 00007fc4fe78e929 [ 103.263991][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 103.264007][ T5959] RBP: 00007fc4fe810b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.264022][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.264038][ T5959] R13: 0000000000000000 R14: 00007fc4fe9b5fa0 R15: 00007ffd4223ec58 [ 103.264076][ T5959] [ 103.619093][ T5965] can: request_module (can-proto-0) failed. [ 103.898868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.099197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 104.111240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 104.120149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 104.129110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.141801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.633478][ T5971] Zero length message leads to an empty skb [ 105.025525][ T5987] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input7 [ 105.038278][ T30] audit: type=1800 audit(1749396865.522:2): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10" name="lu_gp_id" dev="configfs" ino=6885 res=0 errno=0 [ 105.759103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.083878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.328698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.338949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.207188][ T6051] mmap: syz.3.21 (6051) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.293515][ T6048] ubi0: attaching mtd0 [ 110.302914][ T6048] ubi0: scanning is finished [ 110.307628][ T6048] ubi0: empty MTD device detected [ 110.998912][ T6048] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.068706][ T6048] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.086720][ T6048] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 111.108324][ T6048] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 111.115875][ T6048] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 111.132969][ T6051] sctp: failed to load transform for md5: -2 [ 111.275131][ T6048] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 111.298365][ T6048] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3755535117 [ 111.312697][ T6048] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 111.328372][ T6060] ubi0: background thread "ubi_bgt0d" started, PID 6060 [ 115.844520][ T6096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.930783][ T6096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.049053][ T6098] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 116.137639][ T6096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.151074][ T6107] netlink: 'syz.1.28': attribute type 11 has an invalid length. [ 116.158915][ T6107] netlink: 'syz.1.28': attribute type 11 has an invalid length. [ 116.419230][ T6096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.425414][ T6096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.009065][ T6096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.140795][ T6096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.146928][ T6096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.287439][ T6096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.439285][ T6096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.445266][ T6096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.524895][ T6096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.632213][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.935211][ T6123] FAULT_INJECTION: forcing a failure. [ 117.935211][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 117.935271][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.0.33 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 117.935308][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.935325][ T6123] Call Trace: [ 117.935340][ T6123] [ 117.935351][ T6123] dump_stack_lvl+0x16c/0x1f0 [ 117.935385][ T6123] should_fail_ex+0x512/0x640 [ 117.935430][ T6123] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 117.935479][ T6123] should_failslab+0xc2/0x120 [ 117.935510][ T6123] __kmalloc_cache_noprof+0x6a/0x3e0 [ 117.935552][ T6123] ? device_create_groups_vargs+0x8a/0x270 [ 117.935598][ T6123] device_create_groups_vargs+0x8a/0x270 [ 117.935642][ T6123] device_create+0xed/0x130 [ 117.935689][ T6123] ? __pfx_device_create+0x10/0x10 [ 117.935725][ T6123] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.935775][ T6123] ? is_console_locked+0x9/0x20 [ 117.935810][ T6123] ? con_is_visible+0x65/0x150 [ 117.935849][ T6123] ? csi_J+0x54a/0xad0 [ 117.935903][ T6123] vcs_make_sysfs+0x32/0x80 [ 117.935944][ T6123] vc_allocate+0x501/0x880 [ 117.935971][ T6123] ? __pfx_vc_allocate+0x10/0x10 [ 117.936012][ T6123] con_install+0xa1/0x600 [ 117.936042][ T6123] ? __pfx_con_install+0x10/0x10 [ 117.936078][ T6123] ? __pfx_con_install+0x10/0x10 [ 117.936107][ T6123] tty_init_dev.part.0+0x9c/0x500 [ 117.936142][ T6123] tty_open+0xa50/0xf90 [ 117.936180][ T6123] ? __pfx_tty_open+0x10/0x10 [ 117.936210][ T6123] ? chrdev_open+0x58c/0x6a0 [ 117.936243][ T6123] ? __pfx_tty_open+0x10/0x10 [ 117.936274][ T6123] chrdev_open+0x234/0x6a0 [ 117.936303][ T6123] ? __pfx_chrdev_open+0x10/0x10 [ 117.936334][ T6123] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 117.936384][ T6123] do_dentry_open+0x741/0x1c10 [ 117.936431][ T6123] ? __pfx_chrdev_open+0x10/0x10 [ 117.936468][ T6123] vfs_open+0x82/0x3f0 [ 117.936508][ T6123] path_openat+0x1de4/0x2cb0 [ 117.936563][ T6123] ? __pfx_path_openat+0x10/0x10 [ 117.936611][ T6123] ? __lock_acquire+0xb8a/0x1c90 [ 117.936654][ T6123] do_filp_open+0x20b/0x470 [ 117.936703][ T6123] ? __pfx_do_filp_open+0x10/0x10 [ 117.936781][ T6123] ? alloc_fd+0x471/0x7d0 [ 117.936837][ T6123] do_sys_openat2+0x11b/0x1d0 [ 117.936873][ T6123] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.936926][ T6123] __x64_sys_openat+0x174/0x210 [ 117.936962][ T6123] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.937017][ T6123] do_syscall_64+0xcd/0x490 [ 117.937053][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.937083][ T6123] RIP: 0033:0x7f515738e929 [ 117.937110][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.937137][ T6123] RSP: 002b:00007f5158244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.937166][ T6123] RAX: ffffffffffffffda RBX: 00007f51575b6080 RCX: 00007f515738e929 [ 117.937185][ T6123] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 117.937204][ T6123] RBP: 00007f5157410b39 R08: 0000000000000000 R09: 0000000000000000 [ 117.937221][ T6123] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 117.937238][ T6123] R13: 0000000000000000 R14: 00007f51575b6080 R15: 00007ffcc5ce34f8 [ 117.937280][ T6123] [ 118.323237][ T6102] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079400dc0 pfn:0x79400 [ 118.323440][ T6102] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 118.323484][ T6102] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 118.323566][ T6102] raw: ffff888079400dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 118.323587][ T6102] page dumped because: unmovable page [ 118.323604][ T6102] page_owner tracks the page as allocated [ 118.324248][ T6102] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5981, tgid 5980 (syz.3.9), ts 106886853947, free_ts 106167279443 [ 118.324315][ T6102] post_alloc_hook+0x1c0/0x230 [ 118.324362][ T6102] get_page_from_freelist+0x1321/0x3890 [ 118.324419][ T6102] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 118.324711][ T6102] alloc_pages_mpol+0x1fb/0x550 [ 118.324745][ T6102] alloc_pages_noprof+0x131/0x390 [ 118.324837][ T6102] brd_submit_bio+0x951/0x10a0 [ 118.324872][ T6102] __submit_bio+0x301/0x690 [ 118.324936][ T6102] submit_bio_noacct_nocheck+0x852/0xd30 [ 118.324978][ T6102] submit_bio_noacct+0x50d/0x1eb0 [ 118.325032][ T6102] __block_write_full_folio+0x735/0xe00 [ 118.325082][ T6102] block_write_full_folio+0x341/0x400 [ 118.325128][ T6102] blkdev_writepages+0xb8/0x140 [ 118.325174][ T6102] do_writepages+0x277/0x600 [ 118.325224][ T6102] filemap_fdatawrite_wbc+0x104/0x160 [ 118.325266][ T6102] __filemap_fdatawrite_range+0xb2/0xf0 [ 118.325322][ T6102] filemap_write_and_wait_range+0xa3/0x130 [ 118.325353][ T6102] page last free pid 5994 tgid 5994 stack trace: [ 118.325373][ T6102] __free_frozen_pages+0x7fe/0x1180 [ 118.325421][ T6102] rcu_core+0x79c/0x14e0 [ 118.325466][ T6102] handle_softirqs+0x219/0x8e0 [ 118.326015][ T6102] do_softirq+0xb2/0xf0 [ 118.326048][ T6102] __local_bh_enable_ip+0x100/0x120 [ 118.326138][ T6102] fpu_clone+0x3a4/0xbf0 [ 118.326169][ T6102] copy_thread+0x451/0xb70 [ 118.326265][ T6102] copy_process+0x457b/0x76a0 [ 118.326302][ T6102] kernel_clone+0xfc/0x960 [ 118.326383][ T6102] __do_sys_clone3+0x212/0x290 [ 118.326420][ T6102] do_syscall_64+0xcd/0x490 [ 118.326504][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.508369][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.902060][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 119.158599][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.471148][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.715967][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.588485][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.228946][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.551508][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.793774][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.861728][ T6123] tty tty26: ldisc open failed (-12), clearing slot 25 [ 121.901045][ T6138] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 121.924882][ T6140] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 122.668932][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.308402][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.453738][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 123.628714][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.824905][ T6175] bridge0: port 3(dummy0) entered blocking state [ 123.832259][ T6175] bridge0: port 3(dummy0) entered disabled state [ 123.858489][ T6175] dummy0: entered allmulticast mode [ 123.890905][ T6175] dummy0: entered promiscuous mode [ 123.897072][ T6175] bridge0: port 3(dummy0) entered blocking state [ 123.903792][ T6175] bridge0: port 3(dummy0) entered forwarding state [ 125.081726][ T6194] input: f as /devices/virtual/input/input9 [ 125.250648][ T6169] FAULT_INJECTION: forcing a failure. [ 125.250648][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 125.482917][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.2.40 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 125.482951][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.482961][ T6169] Call Trace: [ 125.482968][ T6169] [ 125.482977][ T6169] dump_stack_lvl+0x16c/0x1f0 [ 125.483001][ T6169] should_fail_ex+0x512/0x640 [ 125.483027][ T6169] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.483057][ T6169] should_failslab+0xc2/0x120 [ 125.483076][ T6169] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.483105][ T6169] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 125.483135][ T6169] acpi_ut_create_generic_state+0x5c/0xb0 [ 125.483159][ T6169] acpi_ps_push_scope+0x22/0x230 [ 125.483178][ T6169] acpi_ps_parse_loop+0x9f3/0x1d00 [ 125.483212][ T6169] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 125.483237][ T6169] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 125.483262][ T6169] ? acpi_ut_create_thread_state+0x63/0x170 [ 125.483292][ T6169] acpi_ps_parse_aml+0x3c1/0xcb0 [ 125.483311][ T6169] acpi_ps_execute_method+0x55a/0xb30 [ 125.483331][ T6169] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 125.483353][ T6169] acpi_ns_evaluate+0x76c/0xca0 [ 125.483373][ T6169] ? kasan_save_track+0x14/0x30 [ 125.483400][ T6169] acpi_evaluate_object+0x1fa/0xa90 [ 125.483428][ T6169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.483447][ T6169] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 125.483473][ T6169] ? __mutex_trylock_common+0xe9/0x250 [ 125.483501][ T6169] acpi_evaluate_integer+0xdd/0x200 [ 125.483523][ T6169] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 125.483556][ T6169] ? __pfx_status_show+0x10/0x10 [ 125.483570][ T6169] status_show+0xa0/0x120 [ 125.483585][ T6169] ? __pfx_status_show+0x10/0x10 [ 125.483618][ T6169] dev_attr_show+0x53/0xe0 [ 125.483642][ T6169] ? __pfx_dev_attr_show+0x10/0x10 [ 125.483659][ T6169] sysfs_kf_seq_show+0x213/0x3e0 [ 125.483688][ T6169] seq_read_iter+0x506/0x12c0 [ 125.483722][ T6169] kernfs_fop_read_iter+0x40f/0x5a0 [ 125.483740][ T6169] ? rw_verify_area+0xcf/0x680 [ 125.483765][ T6169] vfs_read+0x8bf/0xc60 [ 125.483793][ T6169] ? __pfx___mutex_lock+0x10/0x10 [ 125.483809][ T6169] ? __pfx_vfs_read+0x10/0x10 [ 125.483848][ T6169] ksys_read+0x12a/0x250 [ 125.483871][ T6169] ? __pfx_ksys_read+0x10/0x10 [ 125.483902][ T6169] do_syscall_64+0xcd/0x490 [ 125.483921][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.483938][ T6169] RIP: 0033:0x7fc000b8e929 [ 125.483953][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.483969][ T6169] RSP: 002b:00007fc001971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.483985][ T6169] RAX: ffffffffffffffda RBX: 00007fc000db5fa0 RCX: 00007fc000b8e929 [ 125.483995][ T6169] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 125.484005][ T6169] RBP: 00007fc000c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 125.484014][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.484023][ T6169] R13: 0000000000000000 R14: 00007fc000db5fa0 R15: 00007ffdff1823a8 [ 125.484045][ T6169] [ 125.687482][ T6182] syz.1.43 (6182) used greatest stack depth: 17976 bytes left [ 125.822063][ T6169] ACPI Error: [ 125.869254][ T6198] FAULT_INJECTION: forcing a failure. [ 125.869254][ T6198] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.892408][ T6169] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 126.009133][ T6198] CPU: 1 UID: 0 PID: 6198 Comm: syz.0.45 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 126.009174][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.009191][ T6198] Call Trace: [ 126.009200][ T6198] [ 126.009210][ T6198] dump_stack_lvl+0x16c/0x1f0 [ 126.009245][ T6198] should_fail_ex+0x512/0x640 [ 126.009294][ T6198] _copy_from_user+0x2e/0xd0 [ 126.009324][ T6198] memdup_user_nul+0x6c/0x120 [ 126.009354][ T6198] proc_simple_write+0xc7/0x1b0 [ 126.009386][ T6198] ? __pfx_proc_simple_write+0x10/0x10 [ 126.009418][ T6198] proc_reg_write+0x23d/0x330 [ 126.009463][ T6198] ? __pfx_proc_reg_write+0x10/0x10 [ 126.009503][ T6198] vfs_write+0x2a0/0x1150 [ 126.009568][ T6198] ? __pfx___mutex_lock+0x10/0x10 [ 126.009596][ T6198] ? __pfx_vfs_write+0x10/0x10 [ 126.009652][ T6198] ? __fget_files+0x20e/0x3c0 [ 126.009707][ T6198] ksys_write+0x12a/0x250 [ 126.009747][ T6198] ? __pfx_ksys_write+0x10/0x10 [ 126.009804][ T6198] do_syscall_64+0xcd/0x490 [ 126.009836][ T6198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.009864][ T6198] RIP: 0033:0x7f515738e929 [ 126.009887][ T6198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.009912][ T6198] RSP: 002b:00007f5158265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.009939][ T6198] RAX: ffffffffffffffda RBX: 00007f51575b5fa0 RCX: 00007f515738e929 [ 126.009957][ T6198] RDX: 000000000000003d RSI: 0000200000000280 RDI: 0000000000000003 [ 126.009973][ T6198] RBP: 00007f5158265090 R08: 0000000000000000 R09: 0000000000000000 [ 126.009989][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.010004][ T6198] R13: 0000000000000000 R14: 00007f51575b5fa0 R15: 00007ffcc5ce34f8 [ 126.010043][ T6198] [ 126.696740][ T6203] random: crng reseeded on system resumption [ 127.253346][ T6217] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 128.475279][ C1] sd 0:0:1:0: [sda] tag#6915 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 128.486159][ C1] sd 0:0:1:0: [sda] tag#6915 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 128.832926][ T6244] kAFS: Invalid Command on /proc/fs/afs/cells file [ 128.878443][ T6244] FAULT_INJECTION: forcing a failure. [ 128.878443][ T6244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.908801][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.0.56 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 128.908839][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.908854][ T6244] Call Trace: [ 128.908864][ T6244] [ 128.908874][ T6244] dump_stack_lvl+0x16c/0x1f0 [ 128.908908][ T6244] should_fail_ex+0x512/0x640 [ 128.908957][ T6244] _copy_to_user+0x32/0xd0 [ 128.908989][ T6244] simple_read_from_buffer+0xcb/0x170 [ 128.909029][ T6244] proc_fail_nth_read+0x197/0x270 [ 128.909065][ T6244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.909100][ T6244] ? rw_verify_area+0xcf/0x680 [ 128.909132][ T6244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.909165][ T6244] vfs_read+0x1e1/0xc60 [ 128.909210][ T6244] ? __pfx___mutex_lock+0x10/0x10 [ 128.909239][ T6244] ? __pfx_vfs_read+0x10/0x10 [ 128.909292][ T6244] ? __fget_files+0x20e/0x3c0 [ 128.909345][ T6244] ksys_read+0x12a/0x250 [ 128.909384][ T6244] ? __pfx_ksys_read+0x10/0x10 [ 128.909437][ T6244] do_syscall_64+0xcd/0x490 [ 128.909478][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.909508][ T6244] RIP: 0033:0x7f515738d33c [ 128.909532][ T6244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.909558][ T6244] RSP: 002b:00007f5158265030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.909585][ T6244] RAX: ffffffffffffffda RBX: 00007f51575b5fa0 RCX: 00007f515738d33c [ 128.909604][ T6244] RDX: 000000000000000f RSI: 00007f51582650a0 RDI: 0000000000000004 [ 128.909620][ T6244] RBP: 00007f5158265090 R08: 0000000000000000 R09: 0000000000000000 [ 128.909637][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.909653][ T6244] R13: 0000000000000000 R14: 00007f51575b5fa0 R15: 00007ffcc5ce34f8 [ 128.909693][ T6244] [ 129.757531][ T6245] mkiss: ax0: crc mode is auto. [ 131.105901][ T6258] cougar: G6 mapped to space [ 132.809040][ T6281] kAFS: Invalid Command on /proc/fs/afs/cells file [ 133.082762][ T6275] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079400dc0 pfn:0x79400 [ 133.095958][ T6275] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.179065][ T6275] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 133.220450][ T6275] raw: ffff888079400dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 133.286217][ T6275] page dumped because: unmovable page [ 133.309105][ T6275] page_owner tracks the page as allocated [ 133.328070][ T6275] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5981, tgid 5980 (syz.3.9), ts 106886853947, free_ts 106167279443 [ 133.349598][ T6275] post_alloc_hook+0x1c0/0x230 [ 133.358562][ T6275] get_page_from_freelist+0x1321/0x3890 [ 133.368398][ T6275] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 133.378288][ T6275] alloc_pages_mpol+0x1fb/0x550 [ 133.386707][ T6275] alloc_pages_noprof+0x131/0x390 [ 133.396940][ T6275] brd_submit_bio+0x951/0x10a0 [ 133.406824][ T6275] __submit_bio+0x301/0x690 [ 133.411605][ T6275] submit_bio_noacct_nocheck+0x852/0xd30 [ 133.417432][ T6275] submit_bio_noacct+0x50d/0x1eb0 [ 133.423417][ T6275] __block_write_full_folio+0x735/0xe00 [ 133.429313][ T6275] block_write_full_folio+0x341/0x400 [ 133.434776][ T6275] blkdev_writepages+0xb8/0x140 [ 133.439949][ T6275] do_writepages+0x277/0x600 [ 133.444615][ T6275] filemap_fdatawrite_wbc+0x104/0x160 [ 133.450357][ T6275] __filemap_fdatawrite_range+0xb2/0xf0 [ 133.456076][ T6275] filemap_write_and_wait_range+0xa3/0x130 [ 133.462494][ T6275] page last free pid 5994 tgid 5994 stack trace: [ 133.466773][ T6279] could not allocate digest TFM handle binfmt_misc [ 133.520984][ T6275] __free_frozen_pages+0x7fe/0x1180 [ 133.529137][ T6275] rcu_core+0x79c/0x14e0 [ 133.540745][ T6275] handle_softirqs+0x219/0x8e0 [ 133.545563][ T6275] do_softirq+0xb2/0xf0 [ 133.549984][ T6275] __local_bh_enable_ip+0x100/0x120 [ 133.578633][ T6275] fpu_clone+0x3a4/0xbf0 [ 133.582954][ T6275] copy_thread+0x451/0xb70 [ 133.587494][ T6275] copy_process+0x457b/0x76a0 [ 133.593351][ T6275] kernel_clone+0xfc/0x960 [ 133.597904][ T6275] __do_sys_clone3+0x212/0x290 [ 133.602982][ T6275] do_syscall_64+0xcd/0x490 [ 133.607517][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.020136][ T6308] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 138.146891][ T6351] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.200552][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.211082][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.886463][ T6366] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 144.245423][ T6441] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 145.350477][ T6465] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 145.889478][ T6439] kAFS: Invalid Command on /proc/fs/afs/cells file [ 146.425783][ T6479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.060287][ T6487] netlink: 186 bytes leftover after parsing attributes in process `syz.2.101'. [ 148.854441][ T6515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.878092][ T6513] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 149.363088][ T6509] FAULT_INJECTION: forcing a failure. [ 149.363088][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 149.403213][ T6509] CPU: 0 UID: 0 PID: 6509 Comm: syz.3.106 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 149.403256][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.403272][ T6509] Call Trace: [ 149.403281][ T6509] [ 149.403293][ T6509] dump_stack_lvl+0x16c/0x1f0 [ 149.403327][ T6509] should_fail_ex+0x512/0x640 [ 149.403377][ T6509] should_failslab+0xc2/0x120 [ 149.403410][ T6509] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 149.403466][ T6509] ? stack_depot_save_flags+0x3e0/0xa40 [ 149.403510][ T6509] ? __alloc_skb+0x2b2/0x380 [ 149.403564][ T6509] __alloc_skb+0x2b2/0x380 [ 149.403609][ T6509] ? __pfx___alloc_skb+0x10/0x10 [ 149.403659][ T6509] ? rcu_is_watching+0x12/0xc0 [ 149.403690][ T6509] ? lock_release+0x201/0x2f0 [ 149.403727][ T6509] ? bpf_ksym_find+0x124/0x1c0 [ 149.403767][ T6509] _sctp_make_chunk+0x51/0x270 [ 149.403819][ T6509] sctp_make_shutdown_ack+0x2e/0x340 [ 149.403870][ T6509] sctp_sf_do_9_2_shutdown_ack+0x318/0x7c0 [ 149.403916][ T6509] ? __pfx_sctp_cname+0x10/0x10 [ 149.403944][ T6509] sctp_do_sm+0x181/0x5c80 [ 149.403992][ T6509] ? stack_trace_save+0x8e/0xc0 [ 149.404025][ T6509] ? __pfx_stack_trace_save+0x10/0x10 [ 149.404059][ T6509] ? __pfx_sctp_do_sm+0x10/0x10 [ 149.404102][ T6509] ? check_path.constprop.0+0x24/0x50 [ 149.404187][ T6509] ? ktime_get+0x200/0x310 [ 149.404219][ T6509] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.404274][ T6509] sctp_assoc_bh_rcv+0x392/0x6f0 [ 149.404325][ T6509] sctp_inq_push+0x1db/0x270 [ 149.404367][ T6509] sctp_backlog_rcv+0x169/0x590 [ 149.404412][ T6509] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 149.404464][ T6509] __release_sock+0x35f/0x400 [ 149.404495][ T6509] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 149.404548][ T6509] release_sock+0x5a/0x220 [ 149.404579][ T6509] sctp_close+0x464/0x940 [ 149.404623][ T6509] ? __pfx_sctp_close+0x10/0x10 [ 149.404658][ T6509] ? __pfx___might_resched+0x10/0x10 [ 149.404698][ T6509] ? ip_mc_drop_socket+0x1f/0x280 [ 149.404734][ T6509] ? down_write+0x14d/0x200 [ 149.404771][ T6509] inet_release+0x13c/0x280 [ 149.404819][ T6509] inet6_release+0x4f/0x70 [ 149.404851][ T6509] __sock_release+0xb3/0x270 [ 149.404894][ T6509] ? __pfx_sock_close+0x10/0x10 [ 149.404924][ T6509] sock_close+0x1c/0x30 [ 149.404954][ T6509] __fput+0x3ff/0xb70 [ 149.404997][ T6509] task_work_run+0x150/0x240 [ 149.405045][ T6509] ? __pfx_task_work_run+0x10/0x10 [ 149.405090][ T6509] ? __pfx___do_sys_close_range+0x10/0x10 [ 149.405146][ T6509] exit_to_user_mode_loop+0xeb/0x110 [ 149.405191][ T6509] do_syscall_64+0x3f6/0x490 [ 149.405225][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.405256][ T6509] RIP: 0033:0x7fc4fe78e929 [ 149.405283][ T6509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.405311][ T6509] RSP: 002b:00007fc4ff5b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 149.405340][ T6509] RAX: 0000000000000000 RBX: 00007fc4fe9b5fa0 RCX: 00007fc4fe78e929 [ 149.405358][ T6509] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 149.405375][ T6509] RBP: 00007fc4fe810b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.405392][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.405409][ T6509] R13: 0000000000000000 R14: 00007fc4fe9b5fa0 R15: 00007ffd4223ec58 [ 149.405457][ T6509] [ 149.845299][ T5155] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 149.873052][ T6522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.105'. [ 149.882312][ T6522] nbd: must specify at least one socket [ 151.134426][ T6564] syz.2.114 (6564): attempted to duplicate a private mapping with mremap. This is not supported. [ 151.412537][ T6573] sctp: [Deprecated]: syz.3.117 (pid 6573) Use of int in max_burst socket option deprecated. [ 151.412537][ T6573] Use struct sctp_assoc_value instead [ 152.562143][ T6592] GUP no longer grows the stack in syz.2.119 (6592): 14000-401000 (4000) [ 152.583567][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.2.119 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 152.583619][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.583636][ T6592] Call Trace: [ 152.583648][ T6592] [ 152.583660][ T6592] dump_stack_lvl+0x16c/0x1f0 [ 152.583695][ T6592] gup_vma_lookup+0x1d2/0x220 [ 152.583727][ T6592] __get_user_pages+0x271/0x3b80 [ 152.583775][ T6592] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 152.583803][ T6592] ? kasan_save_stack+0x42/0x60 [ 152.583844][ T6592] ? __pfx___get_user_pages+0x10/0x10 [ 152.583876][ T6592] ? __kmalloc_noprof+0x223/0x510 [ 152.583914][ T6592] ? process_vm_rw+0x216/0x2c0 [ 152.583939][ T6592] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 152.583968][ T6592] ? do_syscall_64+0xcd/0x490 [ 152.584008][ T6592] __gup_longterm_locked+0x20d/0x1850 [ 152.584045][ T6592] ? __lock_acquire+0xb8a/0x1c90 [ 152.584088][ T6592] ? __pfx___gup_longterm_locked+0x10/0x10 [ 152.584140][ T6592] pin_user_pages_remote+0xed/0x140 [ 152.584220][ T6592] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 152.584251][ T6592] ? mm_access+0x22d/0x2e0 [ 152.584298][ T6592] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 152.584342][ T6592] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 152.584373][ T6592] ? iovec_from_user+0xbb/0x140 [ 152.584419][ T6592] ? iovec_from_user+0xbb/0x140 [ 152.584453][ T6592] process_vm_rw+0x216/0x2c0 [ 152.584483][ T6592] ? __pfx_process_vm_rw+0x10/0x10 [ 152.584563][ T6592] ? xfd_validate_state+0x61/0x180 [ 152.584597][ T6592] ? __task_pid_nr_ns+0x17c/0x500 [ 152.584638][ T6592] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 152.584669][ T6592] ? do_syscall_64+0x91/0x490 [ 152.584696][ T6592] ? lockdep_hardirqs_on+0x7c/0x110 [ 152.584742][ T6592] do_syscall_64+0xcd/0x490 [ 152.584775][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.584804][ T6592] RIP: 0033:0x7fc000b8e929 [ 152.584830][ T6592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.584858][ T6592] RSP: 002b:00007fc001950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 152.584886][ T6592] RAX: ffffffffffffffda RBX: 00007fc000db6080 RCX: 00007fc000b8e929 [ 152.584905][ T6592] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000007e [ 152.584923][ T6592] RBP: 00007fc000c10b39 R08: 0000000000000003 R09: 0000000000000000 [ 152.584941][ T6592] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 152.584958][ T6592] R13: 0000000000000000 R14: 00007fc000db6080 R15: 00007ffdff1823a8 [ 152.584998][ T6592] [ 153.109985][ T30] audit: type=1800 audit(4294967298.200:3): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.121" name="version" dev="configfs" ino=9801 res=0 errno=0 [ 154.174757][ T6615] ptrace attach of "./syz-executor exec"[6616] was attempted by "./syz-executor exec"[6615] [ 154.223761][ T6609] Invalid ELF header magic: != ELF [ 154.729024][ T6627] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 154.756177][ T6629] netlink: 25 bytes leftover after parsing attributes in process `syz.1.128'. [ 155.627357][ T6647] could not allocate digest TFM handle [ 155.642316][ T6649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.648944][ T6649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.655315][ T6649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.679236][ T6649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.743982][ T5155] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.751301][ T5155] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.759619][ T5155] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.765878][ T5155] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.760803][ T6715] netlink: 'syz.3.147': attribute type 4 has an invalid length. [ 159.910321][ T6753] nbd: failed to add new device [ 160.062968][ T6755] netlink: 342 bytes leftover after parsing attributes in process `syz.1.155'. [ 160.075811][ T6755] netlink: 342 bytes leftover after parsing attributes in process `syz.1.155'. [ 160.433088][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 161.831996][ T6794] synth uevent: /bus/usb/drivers/ums-cypress: unknown uevent action string [ 162.319505][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 163.155705][ T6821] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079400dc0 pfn:0x79400 [ 163.166439][ T6821] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 163.174151][ T6821] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 163.184505][ T6821] raw: ffff888079400dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 163.193634][ T6821] page dumped because: unmovable page [ 163.206355][ T6821] page_owner tracks the page as allocated [ 163.235054][ T6821] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5981, tgid 5980 (syz.3.9), ts 106886853947, free_ts 106167279443 [ 163.273344][ T6821] post_alloc_hook+0x1c0/0x230 [ 163.279653][ T6821] get_page_from_freelist+0x1321/0x3890 [ 163.287089][ T6821] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 163.296920][ T6821] alloc_pages_mpol+0x1fb/0x550 [ 163.301933][ T6821] alloc_pages_noprof+0x131/0x390 [ 163.312979][ T6821] brd_submit_bio+0x951/0x10a0 [ 163.318507][ T6821] __submit_bio+0x301/0x690 [ 163.339002][ T6821] submit_bio_noacct_nocheck+0x852/0xd30 [ 163.355039][ T6821] submit_bio_noacct+0x50d/0x1eb0 [ 163.360571][ T6821] __block_write_full_folio+0x735/0xe00 [ 163.366838][ T6821] block_write_full_folio+0x341/0x400 [ 163.374442][ T6821] blkdev_writepages+0xb8/0x140 [ 163.379448][ T6821] do_writepages+0x277/0x600 [ 163.385491][ T6821] filemap_fdatawrite_wbc+0x104/0x160 [ 163.392451][ T6821] __filemap_fdatawrite_range+0xb2/0xf0 [ 163.398235][ T6821] filemap_write_and_wait_range+0xa3/0x130 [ 163.404236][ T6821] page last free pid 5994 tgid 5994 stack trace: [ 163.441291][ T6821] __free_frozen_pages+0x7fe/0x1180 [ 163.470200][ T6821] rcu_core+0x79c/0x14e0 [ 163.475674][ T6821] handle_softirqs+0x219/0x8e0 [ 163.507966][ T6821] do_softirq+0xb2/0xf0 [ 163.508518][ T6820] could not allocate digest TFM handle binfmt_misc [ 163.519054][ T6821] __local_bh_enable_ip+0x100/0x120 [ 163.614462][ T6821] fpu_clone+0x3a4/0xbf0 [ 163.651882][ T6821] copy_thread+0x451/0xb70 [ 163.683273][ T6821] copy_process+0x457b/0x76a0 [ 163.693496][ T6821] kernel_clone+0xfc/0x960 [ 163.702387][ T6821] __do_sys_clone3+0x212/0x290 [ 163.707564][ T6821] do_syscall_64+0xcd/0x490 [ 163.728300][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.276857][ T6834] FAULT_INJECTION: forcing a failure. [ 164.276857][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 164.301637][ T6834] CPU: 1 UID: 0 PID: 6834 Comm: syz.3.171 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 164.301682][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.301699][ T6834] Call Trace: [ 164.301708][ T6834] [ 164.301720][ T6834] dump_stack_lvl+0x16c/0x1f0 [ 164.301756][ T6834] should_fail_ex+0x512/0x640 [ 164.301801][ T6834] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 164.301852][ T6834] should_failslab+0xc2/0x120 [ 164.301883][ T6834] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 164.301929][ T6834] ? d_instantiate+0x77/0x90 [ 164.301956][ T6834] ? alloc_empty_file+0x55/0x1e0 [ 164.301992][ T6834] alloc_empty_file+0x55/0x1e0 [ 164.302027][ T6834] alloc_file_pseudo+0x13a/0x230 [ 164.302060][ T6834] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 164.302091][ T6834] ? alloc_fd+0x471/0x7d0 [ 164.302136][ T6834] sock_alloc_file+0x50/0x210 [ 164.302169][ T6834] __sys_socket+0x1c0/0x260 [ 164.302207][ T6834] ? __pfx___sys_socket+0x10/0x10 [ 164.302251][ T6834] ? xfd_validate_state+0x61/0x180 [ 164.302314][ T6834] __x64_sys_socket+0x72/0xb0 [ 164.302350][ T6834] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.302390][ T6834] do_syscall_64+0xcd/0x490 [ 164.302432][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.302460][ T6834] RIP: 0033:0x7fc4fe78e929 [ 164.302484][ T6834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.302512][ T6834] RSP: 002b:00007fc4ff590038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 164.302540][ T6834] RAX: ffffffffffffffda RBX: 00007fc4fe9b6080 RCX: 00007fc4fe78e929 [ 164.302559][ T6834] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 164.302577][ T6834] RBP: 00007fc4fe810b39 R08: 0000000000000000 R09: 0000000000000000 [ 164.302595][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.302612][ T6834] R13: 0000000000000000 R14: 00007fc4fe9b6080 R15: 00007ffd4223ec58 [ 164.302651][ T6834] [ 165.165856][ T6852] netlink: 432 bytes leftover after parsing attributes in process `syz.2.174'. [ 165.878068][ T6860] netlink: 'syz.1.176': attribute type 11 has an invalid length. [ 165.921867][ T6860] netlink: 'syz.1.176': attribute type 11 has an invalid length. [ 165.930085][ T6860] netlink: 432 bytes leftover after parsing attributes in process `syz.1.176'. [ 166.149374][ T6855] WARNING! power/level is deprecated; use power/control instead [ 166.180427][ T6852] hub 8-0:1.0: USB hub found [ 166.260147][ T6852] hub 8-0:1.0: 1 port detected [ 166.399979][ T6863] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079400dc0 pfn:0x79400 [ 166.417150][ T6863] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 166.424472][ T6863] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 166.433616][ T6863] raw: ffff888079400dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 166.444165][ T6863] page dumped because: unmovable page [ 166.451485][ T6863] page_owner tracks the page as allocated [ 166.459129][ T6863] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5981, tgid 5980 (syz.3.9), ts 106886853947, free_ts 106167279443 [ 166.692437][ T6863] post_alloc_hook+0x1c0/0x230 [ 166.741537][ T6863] get_page_from_freelist+0x1321/0x3890 [ 166.747213][ T6863] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 166.758828][ T6863] alloc_pages_mpol+0x1fb/0x550 [ 166.788300][ T6863] alloc_pages_noprof+0x131/0x390 [ 166.793441][ T6863] brd_submit_bio+0x951/0x10a0 [ 166.823263][ T6863] __submit_bio+0x301/0x690 [ 166.827881][ T6863] submit_bio_noacct_nocheck+0x852/0xd30 [ 166.866976][ T6863] submit_bio_noacct+0x50d/0x1eb0 [ 166.887201][ T6863] __block_write_full_folio+0x735/0xe00 [ 166.936275][ T6863] block_write_full_folio+0x341/0x400 [ 166.944390][ T6863] blkdev_writepages+0xb8/0x140 [ 166.964695][ T6863] do_writepages+0x277/0x600 [ 166.973937][ T6879] bridge0: port 3(vlan1) entered blocking state [ 166.974790][ T6863] filemap_fdatawrite_wbc+0x104/0x160 [ 166.987826][ T6879] bridge0: port 3(vlan1) entered disabled state [ 167.019814][ T6863] __filemap_fdatawrite_range+0xb2/0xf0 [ 167.025481][ T6863] filemap_write_and_wait_range+0xa3/0x130 [ 167.026825][ T6879] vlan1: entered allmulticast mode [ 167.037488][ T6879] veth0_vlan: entered allmulticast mode [ 167.049239][ T6863] page last free pid 5994 tgid 5994 stack trace: [ 167.057776][ T6879] vlan1: entered promiscuous mode [ 167.072536][ T6879] bridge0: port 3(vlan1) entered blocking state [ 167.079761][ T6879] bridge0: port 3(vlan1) entered forwarding state [ 167.089963][ T6863] __free_frozen_pages+0x7fe/0x1180 [ 167.095443][ T6863] rcu_core+0x79c/0x14e0 [ 167.101171][ T6863] handle_softirqs+0x219/0x8e0 [ 167.113063][ T6863] do_softirq+0xb2/0xf0 [ 167.117269][ T6863] __local_bh_enable_ip+0x100/0x120 [ 167.147359][ T6863] fpu_clone+0x3a4/0xbf0 [ 167.179092][ T6863] copy_thread+0x451/0xb70 [ 167.217587][ T6863] copy_process+0x457b/0x76a0 [ 167.222521][ T6863] kernel_clone+0xfc/0x960 [ 167.227015][ T6863] __do_sys_clone3+0x212/0x290 [ 167.246370][ T6863] do_syscall_64+0xcd/0x490 [ 167.262087][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.646880][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 168.014361][ T6893] misc userio: No port type given on /dev/userio [ 168.423730][ T6906] block nbd7: not configured, cannot reconfigure [ 169.198457][ T6929] kAFS: Invalid Command on /proc/fs/afs/cells file [ 169.624256][ T6895] Invalid ELF header magic: != ELF [ 169.784140][ T5155] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 169.784197][ T5155] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 169.799564][ T5155] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 170.497478][ T6950] ubi: mtd0 is already attached to ubi0 [ 171.324457][ T6967] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 171.582389][ T6972] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 172.148766][ T30] audit: type=1804 audit(4294967317.220:4): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.200" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 172.225512][ T6986] kAFS: Invalid Command on /proc/fs/afs/cells file [ 172.646819][ T6996] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 173.294432][ T7006] bond0: option all_slaves_active: invalid value () [ 173.389384][ T7015] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 174.506670][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 175.681448][ T7047] netlink: 'syz.3.215': attribute type 16 has an invalid length. [ 175.732291][ T7047] netlink: 326 bytes leftover after parsing attributes in process `syz.3.215'. [ 175.766758][ T7053] netlink: 330 bytes leftover after parsing attributes in process `syz.1.217'. [ 175.837174][ T7047] veth1_macvtap: left promiscuous mode [ 176.043428][ T7044] netlink: 'syz.3.215': attribute type 11 has an invalid length. [ 176.093173][ T7044] netlink: 'syz.3.215': attribute type 11 has an invalid length. [ 179.108371][ T7107] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 182.622172][ T7163] kAFS: Invalid Command on /proc/fs/afs/cells file [ 182.839778][ T7168] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 183.006666][ T7173] kAFS: Invalid Command on /proc/fs/afs/cells file [ 183.288392][ T7170] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 185.524509][ T7213] syz.1.250 uses obsolete (PF_INET,SOCK_PACKET) [ 185.633171][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 185.800330][ T7221] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 187.127911][ T7241] FAULT_INJECTION: forcing a failure. [ 187.127911][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 187.203236][ T7241] CPU: 0 UID: 0 PID: 7241 Comm: syz.2.253 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 187.203278][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.203295][ T7241] Call Trace: [ 187.203304][ T7241] [ 187.203316][ T7241] dump_stack_lvl+0x16c/0x1f0 [ 187.203351][ T7241] should_fail_ex+0x512/0x640 [ 187.203396][ T7241] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 187.203449][ T7241] should_failslab+0xc2/0x120 [ 187.203481][ T7241] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 187.203529][ T7241] ? __d_alloc+0x31/0xaa0 [ 187.203557][ T7241] ? __lock_acquire+0xb8a/0x1c90 [ 187.203600][ T7241] __d_alloc+0x31/0xaa0 [ 187.203633][ T7241] d_alloc+0x4a/0x1e0 [ 187.203663][ T7241] d_alloc_parallel+0xe3/0x12e0 [ 187.203703][ T7241] ? __lock_acquire+0xb8a/0x1c90 [ 187.203743][ T7241] ? look_up_lock_class+0x59/0x150 [ 187.203791][ T7241] ? register_lock_class+0x41/0x4c0 [ 187.203827][ T7241] ? _raw_spin_unlock+0x28/0x50 [ 187.203870][ T7241] ? __pfx_d_alloc_parallel+0x10/0x10 [ 187.203912][ T7241] ? lockdep_init_map_type+0x5c/0x280 [ 187.203955][ T7241] ? lockdep_init_map_type+0x5c/0x280 [ 187.204017][ T7241] __lookup_slow+0x193/0x460 [ 187.204063][ T7241] ? __pfx___lookup_slow+0x10/0x10 [ 187.204127][ T7241] ? lookup_fast+0x156/0x610 [ 187.204174][ T7241] walk_component+0x353/0x5b0 [ 187.204218][ T7241] link_path_walk+0x627/0xe20 [ 187.204282][ T7241] path_openat+0x1b0/0x2cb0 [ 187.204330][ T7241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.204381][ T7241] ? __pfx_path_openat+0x10/0x10 [ 187.204429][ T7241] ? __lock_acquire+0xb8a/0x1c90 [ 187.204475][ T7241] do_filp_open+0x20b/0x470 [ 187.204521][ T7241] ? __pfx_do_filp_open+0x10/0x10 [ 187.204603][ T7241] ? alloc_fd+0x471/0x7d0 [ 187.204657][ T7241] do_sys_openat2+0x11b/0x1d0 [ 187.204692][ T7241] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.204745][ T7241] __x64_sys_openat+0x174/0x210 [ 187.204781][ T7241] ? __pfx___x64_sys_openat+0x10/0x10 [ 187.204833][ T7241] do_syscall_64+0xcd/0x490 [ 187.204866][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.204895][ T7241] RIP: 0033:0x7fc000b8e929 [ 187.204919][ T7241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.204947][ T7241] RSP: 002b:00007fc001971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.204975][ T7241] RAX: ffffffffffffffda RBX: 00007fc000db5fa0 RCX: 00007fc000b8e929 [ 187.204994][ T7241] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 187.205012][ T7241] RBP: 00007fc000c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.205029][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.205046][ T7241] R13: 0000000000000000 R14: 00007fc000db5fa0 R15: 00007ffdff1823a8 [ 187.205106][ T7241] [ 188.567156][ T7262] tipc: Enabling of bearer rejected, media not registered [ 188.687047][ T7267] mkiss: ax0: crc mode is auto. [ 189.211556][ T7281] netlink: 350 bytes leftover after parsing attributes in process `syz.1.259'. [ 189.253707][ T7281] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 5 [ 189.380581][ T7285] random: crng reseeded on system resumption [ 190.444846][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 190.615336][ T7307] can: request_module (can-proto-0) failed. [ 190.718276][ T7309] sp0: Synchronizing with TNC [ 194.590104][ T5155] Bluetooth: hci1: Malformed LE Event: 0x1b [ 194.827695][ T7392] kAFS: Invalid Command on /proc/fs/afs/cells file [ 196.012148][ T7414] sock: sock_set_timeout: `syz.3.283' (pid 7414) tries to set negative timeout [ 196.072031][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 196.102491][ T7410] netlink: 13 bytes leftover after parsing attributes in process `syz.1.281'. [ 196.405338][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.284'. [ 196.495086][ T7420] Invalid ELF header magic: != ELF [ 197.060469][ T7421] could not allocate digest TFM handle [ 197.094778][ T7420] could not allocate digest TFM handle [ 197.238028][ T7421] could not allocate digest TFM handle [ 197.256516][ T7420] could not allocate digest TFM handle [ 199.461151][ T7461] ptrace attach of "./syz-executor exec"[5839] was attempted by ""[7461] [ 199.633309][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.648292][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.923106][ T30] audit: type=1800 audit(4295032790.995:5): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.297" name="lu_gp_id" dev="configfs" ino=12986 res=0 errno=0 [ 200.924426][ T7500] ALUA lu_gp_id: 654336 exceeds maximum: 0x0000ffff [ 202.049635][ T7519] FAULT_INJECTION: forcing a failure. [ 202.049635][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 202.208430][ T7519] CPU: 0 UID: 0 PID: 7519 Comm: syz.2.300 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 202.208473][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.208490][ T7519] Call Trace: [ 202.208501][ T7519] [ 202.208512][ T7519] dump_stack_lvl+0x16c/0x1f0 [ 202.208548][ T7519] should_fail_ex+0x512/0x640 [ 202.208593][ T7519] ? __kmalloc_noprof+0xbf/0x510 [ 202.208641][ T7519] ? ops_init+0x77/0x5f0 [ 202.208681][ T7519] should_failslab+0xc2/0x120 [ 202.208713][ T7519] __kmalloc_noprof+0xd2/0x510 [ 202.208760][ T7519] ? __raw_spin_lock_init+0x3a/0x110 [ 202.208814][ T7519] ops_init+0x77/0x5f0 [ 202.208850][ T7519] setup_net+0x1ff/0x510 [ 202.208888][ T7519] ? lockdep_init_map_type+0x5c/0x280 [ 202.208928][ T7519] ? __pfx_setup_net+0x10/0x10 [ 202.208964][ T7519] ? debug_mutex_init+0x37/0x70 [ 202.208999][ T7519] copy_net_ns+0x2a6/0x5f0 [ 202.209041][ T7519] create_new_namespaces+0x3ea/0xa90 [ 202.209086][ T7519] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 202.209124][ T7519] ksys_unshare+0x45b/0xa40 [ 202.209165][ T7519] ? __pfx_ksys_unshare+0x10/0x10 [ 202.209205][ T7519] ? xfd_validate_state+0x61/0x180 [ 202.209258][ T7519] __x64_sys_unshare+0x31/0x40 [ 202.209296][ T7519] do_syscall_64+0xcd/0x490 [ 202.209329][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.209380][ T7519] RIP: 0033:0x7fc000b8e929 [ 202.209405][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.209433][ T7519] RSP: 002b:00007fc001950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 202.209467][ T7519] RAX: ffffffffffffffda RBX: 00007fc000db6080 RCX: 00007fc000b8e929 [ 202.209487][ T7519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 202.209504][ T7519] RBP: 00007fc000c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 202.209521][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.209538][ T7519] R13: 0000000000000000 R14: 00007fc000db6080 R15: 00007ffdff1823a8 [ 202.209583][ T7519] [ 203.326309][ T7550] vivid-000: kernel_thread() failed [ 205.932597][ T7604] openvswitch: netlink: IP tunnel TTL not specified. [ 206.158880][ T5155] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 206.737049][ T7624] futex_wake_op: syz.0.324 tries to shift op by -9; fix this program [ 207.549676][ T7633] binder: 7632:7633 unknown command 0 [ 207.555135][ T7633] binder: 7632:7633 ioctl c0306201 2000000000c0 returned -22 [ 208.581183][ T7651] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 208.781460][ T7653] capability: warning: `syz.0.328' uses 32-bit capabilities (legacy support in use) [ 210.434496][ T7677] Console: switching to colour VGA+ 80x25 [ 214.648670][ T7783] sctp: [Deprecated]: syz.1.348 (pid 7783) Use of int in maxseg socket option. [ 214.648670][ T7783] Use struct sctp_assoc_value instead [ 216.895998][ T7829] can: request_module (can-proto-5) failed. [ 217.138800][ T7843] random: crng reseeded on system resumption [ 219.734422][ T7893] binder: 7891:7893 ioctl 4030582b 6 returned -22 [ 219.753318][ T7893] binder: 7891:7893 ioctl c0306201 2000000000c0 returned -11 [ 221.379785][ T7937] netlink: 19 bytes leftover after parsing attributes in process `syz.3.377'. [ 221.613389][ T7939] zram: Added device: zram1 [ 225.587373][ T8011] ima: policy update failed [ 225.593969][ T30] audit: type=1802 audit(4294967316.220:6): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.394" res=0 errno=0 [ 226.374930][ T8055] vivid-007: ================= START STATUS ================= [ 226.397091][ T8055] vivid-007: Generate PTS: true [ 226.410708][ T8055] vivid-007: Generate SCR: true [ 226.415742][ T8055] tpg source WxH: 320x240 (Y'CbCr) [ 226.448355][ T8055] tpg field: 1 [ 226.457135][ T8055] tpg crop: (0,0)/320x240 [ 226.462314][ T8055] tpg compose: (0,0)/320x240 [ 226.473587][ T8055] tpg colorspace: 8 [ 226.477438][ T8055] tpg transfer function: 0/0 [ 226.500668][ T8055] tpg Y'CbCr encoding: 0/0 [ 226.514410][ T8055] tpg quantization: 0/0 [ 226.520428][ T8055] tpg RGB range: 0/2 [ 226.524368][ T8055] vivid-007: ================== END STATUS ================== [ 226.766569][ T8058] can: request_module (can-proto-3) failed. [ 227.536108][ T8075] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 230.168721][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.516015][ T8130] cougar: G6 mapped to space [ 236.347991][ T8246] sg_write: data in/out 220/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 236.347991][ T8246] program syz.1.443 not setting count and/or reply_len properly [ 237.260938][ T8257] FAULT_INJECTION: forcing a failure. [ 237.260938][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.289000][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.1.446 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 237.289042][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.289058][ T8257] Call Trace: [ 237.289067][ T8257] [ 237.289077][ T8257] dump_stack_lvl+0x16c/0x1f0 [ 237.289118][ T8257] should_fail_ex+0x512/0x640 [ 237.289169][ T8257] _copy_to_user+0x32/0xd0 [ 237.289202][ T8257] simple_read_from_buffer+0xcb/0x170 [ 237.289241][ T8257] proc_fail_nth_read+0x197/0x270 [ 237.289276][ T8257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.289314][ T8257] ? rw_verify_area+0xcf/0x680 [ 237.289350][ T8257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.289384][ T8257] vfs_read+0x1e1/0xc60 [ 237.289431][ T8257] ? __pfx___mutex_lock+0x10/0x10 [ 237.289459][ T8257] ? __pfx_vfs_read+0x10/0x10 [ 237.289509][ T8257] ? __fget_files+0x20e/0x3c0 [ 237.289564][ T8257] ksys_read+0x12a/0x250 [ 237.289601][ T8257] ? __pfx_ksys_read+0x10/0x10 [ 237.289653][ T8257] do_syscall_64+0xcd/0x490 [ 237.289685][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.289714][ T8257] RIP: 0033:0x7f0225f8d33c [ 237.289735][ T8257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 237.289761][ T8257] RSP: 002b:00007f0226dd3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.289786][ T8257] RAX: ffffffffffffffda RBX: 00007f02261b6080 RCX: 00007f0225f8d33c [ 237.289803][ T8257] RDX: 000000000000000f RSI: 00007f0226dd30a0 RDI: 0000000000000004 [ 237.289819][ T8257] RBP: 00007f0226dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 237.289834][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.289851][ T8257] R13: 0000000000000001 R14: 00007f02261b6080 R15: 00007ffc2ad566d8 [ 237.289889][ T8257] [ 238.386866][ T8296] random: crng reseeded on system resumption [ 240.220159][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.464'. [ 241.467391][ T8349] zswap: compressor not available [ 243.335506][ T8402] snd_virmidi snd_virmidi.0: control 8:131081:6:IA>/[k [ 254.190756][ T8597] dump_stack_lvl+0x16c/0x1f0 [ 254.190790][ T8597] should_fail_ex+0x512/0x640 [ 254.190832][ T8597] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 254.190882][ T8597] should_failslab+0xc2/0x120 [ 254.190921][ T8597] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 254.190964][ T8597] ? __proc_create+0xc3/0x8c0 [ 254.190991][ T8597] ? __proc_create+0x2ce/0x8c0 [ 254.191023][ T8597] __proc_create+0x2ce/0x8c0 [ 254.191052][ T8597] ? __pfx___proc_create+0x10/0x10 [ 254.191086][ T8597] ? _raw_write_unlock+0x28/0x50 [ 254.191131][ T8597] ? proc_register+0x314/0x5f0 [ 254.191163][ T8597] proc_create_reg+0x7d/0x180 [ 254.191197][ T8597] proc_create_net_data+0x8e/0x1b0 [ 254.191228][ T8597] ? __pfx_proc_create_net_data+0x10/0x10 [ 254.191272][ T8597] nfs_fs_proc_net_init+0x141/0x1e0 [ 254.191315][ T8597] nfs_net_init+0x130/0x300 [ 254.191354][ T8597] ? __pfx_nfs_net_init+0x10/0x10 [ 254.191389][ T8597] ops_init+0x1df/0x5f0 [ 254.191425][ T8597] setup_net+0x1ff/0x510 [ 254.191454][ T8597] ? lockdep_init_map_type+0x5c/0x280 [ 254.191496][ T8597] ? __pfx_setup_net+0x10/0x10 [ 254.191531][ T8597] ? debug_mutex_init+0x37/0x70 [ 254.191565][ T8597] copy_net_ns+0x2a6/0x5f0 [ 254.191605][ T8597] create_new_namespaces+0x3ea/0xa90 [ 254.191648][ T8597] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 254.191684][ T8597] ksys_unshare+0x45b/0xa40 [ 254.191724][ T8597] ? __pfx_ksys_unshare+0x10/0x10 [ 254.191760][ T8597] ? xfd_validate_state+0x61/0x180 [ 254.191811][ T8597] __x64_sys_unshare+0x31/0x40 [ 254.191849][ T8597] do_syscall_64+0xcd/0x490 [ 254.191881][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.191917][ T8597] RIP: 0033:0x7fc000b8e929 [ 254.191941][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.191969][ T8597] RSP: 002b:00007fc001971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 254.191996][ T8597] RAX: ffffffffffffffda RBX: 00007fc000db5fa0 RCX: 00007fc000b8e929 [ 254.192015][ T8597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 254.192032][ T8597] RBP: 00007fc000c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 254.192050][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.192067][ T8597] R13: 0000000000000000 R14: 00007fc000db5fa0 R15: 00007ffdff1823a8 [ 254.192108][ T8597] [ 254.456522][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.466599][ T8597] ------------[ cut here ]------------ [ 254.473741][ T8597] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs' [ 254.483426][ T8597] WARNING: CPU: 1 PID: 8597 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 [ 254.492914][ T8597] Modules linked in: [ 254.497112][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.2.513 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 254.509934][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.520112][ T8597] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 254.525900][ T8597] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 00 ba a2 8b 48 c7 c7 20 b9 a2 8b e8 43 92 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 14 7a 5e ff 90 48 b8 00 00 00 00 00 [ 254.546048][ T8597] RSP: 0018:ffffc9000f207b08 EFLAGS: 00010282 [ 254.552772][ T8597] RAX: 0000000000000000 RBX: ffff88803527adc0 RCX: ffffc9000c2eb000 [ 254.561150][ T8597] RDX: 0000000000080000 RSI: ffffffff817aa2d5 RDI: 0000000000000001 [ 254.569193][ T8597] RBP: ffff888032fa5ac0 R08: 0000000000000001 R09: 0000000000000000 [ 254.577504][ T8597] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888032fa5a00 [ 254.585636][ T8597] R13: ffff888032fa5ae4 R14: ffff888034bb5724 R15: dffffc0000000000 [ 254.593663][ T8597] FS: 00007fc0019716c0(0000) GS:ffff888124a62000(0000) knlGS:0000000000000000 [ 254.602745][ T8597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.609365][ T8597] CR2: 0000000000000000 CR3: 000000007c4a6000 CR4: 00000000003526f0 [ 254.617408][ T8597] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.625431][ T8597] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.633501][ T8597] Call Trace: [ 254.636837][ T8597] [ 254.640362][ T8597] ? __pfx_remove_proc_entry+0x10/0x10 [ 254.645850][ T8597] ? cache_destroy_net+0x31/0x50 [ 254.651239][ T8597] ? sunrpc_exit_net+0x37/0x90 [ 254.656043][ T8597] sunrpc_exit_net+0x46/0x90 [ 254.660693][ T8597] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 254.666013][ T8597] ops_undo_list+0x2eb/0xab0 [ 254.670747][ T8597] ? __pfx_ops_undo_list+0x10/0x10 [ 254.675871][ T8597] ? ops_init+0x2fa/0x5f0 [ 254.680302][ T8597] setup_net+0x2e1/0x510 [ 254.684575][ T8597] ? __pfx_setup_net+0x10/0x10 [ 254.689365][ T8597] ? debug_mutex_init+0x37/0x70 [ 254.694281][ T8597] copy_net_ns+0x2a6/0x5f0 [ 254.698735][ T8597] create_new_namespaces+0x3ea/0xa90 [ 254.704147][ T8597] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 254.709927][ T8597] ksys_unshare+0x45b/0xa40 [ 254.714659][ T8597] ? __pfx_ksys_unshare+0x10/0x10 [ 254.719715][ T8597] ? xfd_validate_state+0x61/0x180 [ 254.724885][ T8597] __x64_sys_unshare+0x31/0x40 [ 254.729670][ T8597] do_syscall_64+0xcd/0x490 [ 254.734302][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.741128][ T8597] RIP: 0033:0x7fc000b8e929 [ 254.745600][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.765589][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.772380][ T8597] RSP: 002b:00007fc001971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 254.780883][ T8597] RAX: ffffffffffffffda RBX: 00007fc000db5fa0 RCX: 00007fc000b8e929 [ 254.788891][ T8597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 254.797039][ T8597] RBP: 00007fc000c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 254.805206][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.813395][ T8597] R13: 0000000000000000 R14: 00007fc000db5fa0 R15: 00007ffdff1823a8 [ 254.821510][ T8597] [ 254.824574][ T8597] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 254.832061][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.2.513 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 254.843626][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.854069][ T8597] Call Trace: [ 254.857364][ T8597] [ 254.860332][ T8597] dump_stack_lvl+0x3d/0x1f0 [ 254.864951][ T8597] panic+0x71c/0x800 [ 254.868876][ T8597] ? __pfx_panic+0x10/0x10 [ 254.873334][ T8597] ? show_trace_log_lvl+0x29b/0x3e0 [ 254.878577][ T8597] ? remove_proc_entry+0x45e/0x530 [ 254.883822][ T8597] check_panic_on_warn+0xab/0xb0 [ 254.888794][ T8597] __warn+0xf6/0x3c0 [ 254.892773][ T8597] ? remove_proc_entry+0x45e/0x530 [ 254.897935][ T8597] report_bug+0x3c3/0x580 [ 254.902303][ T8597] ? remove_proc_entry+0x45e/0x530 [ 254.907442][ T8597] handle_bug+0x184/0x210 [ 254.911804][ T8597] exc_invalid_op+0x17/0x50 [ 254.916330][ T8597] asm_exc_invalid_op+0x1a/0x20 [ 254.921209][ T8597] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 254.926953][ T8597] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 00 ba a2 8b 48 c7 c7 20 b9 a2 8b e8 43 92 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 14 7a 5e ff 90 48 b8 00 00 00 00 00 [ 254.946583][ T8597] RSP: 0018:ffffc9000f207b08 EFLAGS: 00010282 [ 254.952673][ T8597] RAX: 0000000000000000 RBX: ffff88803527adc0 RCX: ffffc9000c2eb000 [ 254.960665][ T8597] RDX: 0000000000080000 RSI: ffffffff817aa2d5 RDI: 0000000000000001 [ 254.969181][ T8597] RBP: ffff888032fa5ac0 R08: 0000000000000001 R09: 0000000000000000 [ 254.977171][ T8597] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888032fa5a00 [ 254.985160][ T8597] R13: ffff888032fa5ae4 R14: ffff888034bb5724 R15: dffffc0000000000 [ 254.993174][ T8597] ? __warn_printk+0x1a5/0x350 [ 254.997980][ T8597] ? remove_proc_entry+0x45d/0x530 [ 255.003127][ T8597] ? __pfx_remove_proc_entry+0x10/0x10 [ 255.008789][ T8597] ? cache_destroy_net+0x31/0x50 [ 255.013746][ T8597] ? sunrpc_exit_net+0x37/0x90 [ 255.018567][ T8597] sunrpc_exit_net+0x46/0x90 [ 255.023198][ T8597] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 255.028604][ T8597] ops_undo_list+0x2eb/0xab0 [ 255.033238][ T8597] ? __pfx_ops_undo_list+0x10/0x10 [ 255.038469][ T8597] ? ops_init+0x2fa/0x5f0 [ 255.042825][ T8597] setup_net+0x2e1/0x510 [ 255.047100][ T8597] ? __pfx_setup_net+0x10/0x10 [ 255.051892][ T8597] ? debug_mutex_init+0x37/0x70 [ 255.056774][ T8597] copy_net_ns+0x2a6/0x5f0 [ 255.061222][ T8597] create_new_namespaces+0x3ea/0xa90 [ 255.066714][ T8597] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 255.072371][ T8597] ksys_unshare+0x45b/0xa40 [ 255.076911][ T8597] ? __pfx_ksys_unshare+0x10/0x10 [ 255.082072][ T8597] ? xfd_validate_state+0x61/0x180 [ 255.087243][ T8597] __x64_sys_unshare+0x31/0x40 [ 255.092062][ T8597] do_syscall_64+0xcd/0x490 [ 255.096596][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.102546][ T8597] RIP: 0033:0x7fc000b8e929 [ 255.107156][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.126786][ T8597] RSP: 002b:00007fc001971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 255.135226][ T8597] RAX: ffffffffffffffda RBX: 00007fc000db5fa0 RCX: 00007fc000b8e929 [ 255.143229][ T8597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 255.151311][ T8597] RBP: 00007fc000c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 255.159403][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.167655][ T8597] R13: 0000000000000000 R14: 00007fc000db5fa0 R15: 00007ffdff1823a8 [ 255.175666][ T8597] [ 255.179007][ T8597] Kernel Offset: disabled [ 255.183359][ T8597] Rebooting in 86400 seconds..