last executing test programs: 13m5.875519669s ago: executing program 1 (id=368): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x6, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200004000001, 0x384, 0xfffffffffffffffa, 0x0, 0x0, 0x30, 0x0, 0x864, 0x11, 0x22000, 0x200, 0x0, 0x800084, [0x200, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x401ffc, 0x0, 0xe, 0x1, 0x400, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x2000004, 0x6, 0x0, 0x10000000000008, 0xc32b, 0x8, 0x10000000000, 0xffffffffffffffff, 0x4, 0x2f, 0x0, 0x0, 0x3006, 0x400000000005b8, 0xfffd, 0x0, 0x8000, 0x2, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x1c0000000000000, 0x4, 0xfffffffffffffffd, 0x2, 0x8, 0x10000000007, 0xc567, 0x7ffffffffd]}, 0xb, 0xe0fa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10d441, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pkey_free$auto(0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioperm$auto(0x2, 0x3, 0x383a) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/profile\x00', 0x200000, 0x0) setsockopt$auto_SO_PASSPIDFD(r1, 0x3, 0x4c, &(0x7f00000000c0)='\x00', 0x3) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) r2 = socket(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x400d0}, 0x404c054) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x2, 0x47, &(0x7f0000000140)='/dev/input/event2\x00', &(0x7f0000000180)=0x10) write$auto(r4, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x480080, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRESDEC=r3, @ANYRESOCT=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f00000003c0)={0xa, 0x1, 0x1ff, 0x107, 0x5, 0x6, 0x1ffde, 0x3, 0x7f, 0x9, 0x9, 0x80003, 0x4, 0xd9, 0xb4, 0x81, 0x8, 0x10006, 0x4000081, 0x0, 0x0, 0x9, 0x22000, 0x200, 0x1, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x80, 0x0, 0x1, 0x70624ce7, 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x2000000000000004, 0x10000000000004, 0x10000000000, 0xb668, 0x4, 0xfffffffffffffe00, 0xfffffffffffffffe, 0x0, 0x1005, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0xc, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x8, 0x7, 0xc567, 0xbb], "c5cdca5e64bdd91fb5efa49a509343f5baae235f18c872cb0dbb7f1e33215bf0e978365ef876d25f0fda8c07559d3e8ada7bab266cec5cbaae3e3d1f46b8e695b3d51043a5cca039a0e71694ee3f18c55658df59c2617fad034f0be58b82e763d7d31f079d01ca2e905e7ba0b60b31a939743890c88aebf676a438"}, 0x1fe, 0xd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r6 = socket(0xa, 0x3, 0x3a) bind$auto(r6, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2711}, 0x3e) 13m4.938704431s ago: executing program 1 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="4a000000096cd95858310c045d5634e551c00089b5a331089a629f627494de1a094c758b80afff29850f537aececda1f4956f0bf4859224131e732b9ce1b86ebdc8305589599799bc1f0a1ea5584b8c0f9e6aa67336f59239be18a7a62f0e5ebd45a79bf42c6555ed6d7284905df806182fd7d70f00de558558bdd8944fe16ebd750f0e93aa43467ddabe933deb0b6e42739de1437a992afce7bd35182e6e50054166ceadcd6c235f29cc4b5524a1e3e222d174682a5112af5cdebbca309bed41c552f181e7ea340da1dc7df6d61afc2206fa8f1c4de47781eda8300"/234, @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf254b00000018002c801400028007000080080001000001000004000080"], 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x48884) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe13) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x38100, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r4, 0x0, 0x20) write$auto(r3, 0x0, 0x8ed) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x9, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x8998d5f, 0x100, 0x83, 0x101, 0x6, 0xa6}, {0x100, 0x1, 0x52, 0x5, 0x7fff, 0x3d, 0x3, 0x8, 0x100000000}}) pread64$auto(0xffffffffffffffff, 0x0, 0x59, 0x7) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r5, 0xc0045401, r6) close_range$auto(0x2, 0x8, 0x0) 13m4.723662521s ago: executing program 1 (id=372): r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ftruncate$auto(r0, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x101440, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x33, &(0x7f0000000000)='\x00', 0xbb) unshare$auto(0x8000000) shmget$auto(0x0, 0x2, 0x53af) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x11, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x821a, 0x0, 0x17, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/rpc/nfsd.export/channel\x00', 0x1c9180, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) bpf$auto(0xa, &(0x7f00000001c0)=@token_create={0x0, r1}, 0xa83) r3 = socket(0xa, 0x3, 0x1a) setsockopt$auto(r3, 0x80, 0x0, &(0x7f0000000100)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x05\x00\xb1e\x8a\xd8?\xfe\x87\x02\x1c\xfd\xac\xc7\xaa\n\xf9\x19\xc4#<^\x91\x1d\xda\xc4m\xef\xff(i\xc6@\x91_\vBj\x0eQ\xceV\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) ioperm$auto(0x3b, 0xf99b, 0x6) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) fanotify_init$auto(0x5, 0x2) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket(0x25, 0x80002, 0x8) r5 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x280000, 0x0) io_uring_register$auto(r5, 0x4, &(0x7f00000002c0)="554fe6d8e8563f1a7b7854726bf8759a2fa6863ab28d87351de32d032af6b3c0241a5e1068865f81d1229d24776a6ed1d48f21e098e737e8dbce222c9c99ea0bf8a8d377876684083e59c0f83e961fb3e4313ef0e989a21fd73cbdd27d9c4b40ef4693cb32d6", 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 13m1.429960718s ago: executing program 1 (id=384): lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x300000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) 12m59.709143417s ago: executing program 1 (id=386): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r0) sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x20f4, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x20d0, 0x3, 0x0, 0x1, [@typed={0xca, 0x12b, 0x0, 0x0, @binary="b8a7d53db1e3d1294fd862c44667668ccf50961aaf9a605cbecaf5df465ed6cf23cd3e045e10254464a9282f8769d083af2d237169db16767c466c6bac2e6036c27c945fd5aea05b86d9ee56b4e9875fd430c8c46a901d28b3c5cefa251316fec0b9fe3d9c76dfd85b56af2ac859c21650f482f5e24cc6ae24c3116a73f818adb24f275a91429111cec9abb893ad0ea98e6c825e603d0e504fe44507fa085810a53e9077c97b9a752f40994cf8beb117ae7f8eab67ca75dd761999802a6690149daad34153cc"}, @generic="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", @generic="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"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x20f4}, 0x1, 0x0, 0x0, 0x4008840}, 0x94) msgctl$auto_IPC_SET(0xe4c, 0x1, &(0x7f0000000300)={{0xf3, 0xee01, 0x0, 0x2, 0x4, 0xb, 0x8}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4800000000, 0xfffffffffffffffb, 0x8000, 0x0, 0x1, @raw=0x4, @raw=0xfffffff1}) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, &(0x7f0000000440)='\v', 0x1) 12m59.050927752s ago: executing program 1 (id=387): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') fchown$auto(r0, 0xfffe, 0x7ff) socket(0x21, 0x2, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x8924, 0x8) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000140)=""/250, 0xfa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdf3) ioctl$auto_FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x100, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "3825fae6ffddb9f71563c4"}, @NL80211_ATTR_REKEY_DATA={0xcb, 0x7a, 0x0, 0x1, [@generic="5b9091d1ad4642bf94920e1b6638f91ae29024bcdae3ac11a2b6fa92b76ee9cdd381ee37871e01a8e80afc3e700a14730f9aaa7af8ca65086ddfe13ab1a09a2bb478ef8dce8479abfd207cf9789311b6d05a7c0f7b46c30b7c9f985df334271f28a1b3b299ba82cae5ccd9215c49e3b6637e4f81ac045cb94fe9740be6d5e8ce4e84d5de0c2a55419244d3e327e91d4e0c6a967625a0e8fec223c17b5c09266eb0590acd7476d905a4282ac456c2ea5cc949dcff474c4b773d8e850661656813ab5779106a0746"]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x81}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 12m43.749093312s ago: executing program 32 (id=387): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') fchown$auto(r0, 0xfffe, 0x7ff) socket(0x21, 0x2, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xc8, 0x8924, 0x8) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000140)=""/250, 0xfa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdf3) ioctl$auto_FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x100, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "3825fae6ffddb9f71563c4"}, @NL80211_ATTR_REKEY_DATA={0xcb, 0x7a, 0x0, 0x1, [@generic="5b9091d1ad4642bf94920e1b6638f91ae29024bcdae3ac11a2b6fa92b76ee9cdd381ee37871e01a8e80afc3e700a14730f9aaa7af8ca65086ddfe13ab1a09a2bb478ef8dce8479abfd207cf9789311b6d05a7c0f7b46c30b7c9f985df334271f28a1b3b299ba82cae5ccd9215c49e3b6637e4f81ac045cb94fe9740be6d5e8ce4e84d5de0c2a55419244d3e327e91d4e0c6a967625a0e8fec223c17b5c09266eb0590acd7476d905a4282ac456c2ea5cc949dcff474c4b773d8e850661656813ab5779106a0746"]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x81}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 12m35.871290344s ago: executing program 2 (id=455): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/lowpan0/phys_port_name\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/56, 0x38) r1 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x2800, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0xbc, 0xebd, r1, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x585803, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x2000040080000001, 0xe) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x1, 0x0, 0x6, 0x0) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0x2, 0x8e0, 0x0, 0x50b301a, 0xe4, 0x2c, 0x1, 0x5}) semctl$auto_IPC_SET(0x9, 0x3, 0x1, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/midi1\x00', 0x8a400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000000)=""/193, 0xc1) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x200c0, 0x0) ioperm$auto(0x3, 0xe, 0x2000000000000149) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/nfs_layout_flexfiles/parameters/io_maxretrans\x00', 0x206800, 0x0) read$auto(r6, 0x0, 0x20) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) 12m34.577340276s ago: executing program 2 (id=457): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x9, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x8998d5f, 0x100, 0x83, 0x101, 0x6, 0xa6}, {0x100, 0x1, 0x52, 0x5, 0x7fff, 0x3d, 0x3, 0x8, 0x100000000}}) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioperm$auto(0x2, 0x3, 0x383a) madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000000008000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x101080, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000680)=""/227, 0xe3) madvise$auto(0x0, 0x20499d, 0x9) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250900000008100300", @ANYRES32=r2, @ANYBLOB="5589e7ec2920b68ad1367bbcd4048e9dea0efee10837266fe0b38bdcbbb10d3708bb0d9eb5fd98d39db8da106acd9f2eaaf0306953aa723bb5f48eb100414c7683e7857d23dbd60d3a52924d6b2939cf9be94de100"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000018008000100000000bf8406efe56f7124c400", @ANYRES32=r7, @ANYBLOB="0c0002800800550007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac030000", @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf25050000000500060003000000d60203800077638e1277bb57223c1f46e5f8101f6baffbbf7185bd363d86f9774edbcf60db2456bcd89483b3d8c81128e44576464bbcd1be334dfb55d901a0800400c38031a875e3fcaa5f0e6312708be5b6e198dbb9513b6acd96ee9163b8af74e80e3fea1bc9914d8dffe4c7d609ecb479424faefb96121e1b2f1307b9ed6a3f7826cefa5e24463013cc77bddafd36d669bbd1af238e0cd7b24e53ea56ca92ddf509f6066af5e2e261a694864b42206ad20e6bcfbd05f3305d5b85ab6f7ba59b412262554735d8c896d44e4c2424197f8c5211fe69435d097525cbf6b756e6a81c6f3a38dd5df20e72067fd63114000b00fe8000000000000000000000000000aab6df3068457d16111ffa52dd8ca55cb35d142a261b3b63c84fb884fcd79d180474b9b2b286dc1057dc70e01142261414d672170afcc5915ea931455155116c012e9674fa65f7f95004002a800400f6808a896f68880d16e0e07199da26c68ed6736567", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="59a412ce8512f550b03727c19bd58f3391b4b1704a9438de267881c3468679a3b15673250b1ff342e65e4d3db13c885672197d80cb63a6601d78474412edc8d317dd5d01620334a611aab3366e867bbaec7f9981a61975bae1ebb3d3a3ce91c0", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000000800030068060000140002006772653000000000000000000000000008000300000000000800090009000000380001800800030008000000140002007767300000000000000000000000000008000300ff010000080003008b8900000800030003000000"], 0x3ac}, 0x1, 0x0, 0x0, 0x8010}, 0x814) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) 12m32.183001672s ago: executing program 2 (id=467): mmap$auto(0x0, 0x2020009, 0x1000000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_SHM_STAT_ANY(0xfffffffb, 0xf, &(0x7f00000002c0)={{0x0, 0xffffffffffffffff, 0x0, 0x7, 0xe0000000, 0x40, 0x2}, 0x7fff, 0xffffffff, 0x60000000, 0x5, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x4fbe, 0x0, &(0x7f00000000c0)="74fcb3d766aabeabd2b6741036de05344b378f5feeabb2f5bda5e9df481c83515098bfe2c5b3afe14511deb167ed60a8c09f03919fdcb80ebed62f9c932290f5b5a868b61c756300cd1c58ed22f3350332ee5bcef507422f91b4255f2071aa74982cd65598c768c2f7c8953bac837533f4cd8a3888dbc8b40294fc208624cedb568301ae07ed0215bdf50a9e10ffba148bcbfb3860", &(0x7f0000000240)="c9f4cc450d8483b3bce2016e010db19c381a7eee7c849973414138fe525d850ac7273d68471df75d67a45853acf5c18b47bd858f749b6ba128734f9d2938f2279f154d20c04940710d9a9b7b2c1a1eaec80f6f9414146de3acddcb5340e118403f5fc7ce5d485e8bd78d2d"}) r1 = getegid() keyctl$auto_KEYCTL_REJECT(0x13, 0x0, 0x0, r1, 0x80000001) r2 = semctl$auto_IPC_SET(0x1, 0x101, 0x1, 0x3) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000340)={{0x9, r0, r1, 0x8, 0x70, 0x8, 0x401}, 0x200, 0x9, 0xaed7, 0x5, @inferred=r2, @raw=0x7, 0x5, 0x0, &(0x7f0000000040)="0c5960323b47a8c30e61545f05773f6df4404483dc1d46f96977875381738ba08115cb8ebb2651c2a31b69b5fff0", &(0x7f00000001c0)="67fc5c77"}) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xe, 0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x10}) socket(0x2, 0x6, 0x0) getsockopt$auto(0x4, 0x200000000, 0x15, 0xfffffffffffffffc, 0x0) read$auto(0x3, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_transactions_fops_(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') 12m31.870268841s ago: executing program 2 (id=468): openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x802000, 0x0) mlock$auto(0xfbe8, 0x4) mlock$auto(0x1a81, 0x2) unshare$auto(0x40000080) statmount$auto(&(0x7f00000000c0)={0xc, @raw=0xff, 0x40, 0xa30, 0x4}, &(0x7f0000000400)={0x5, 0x0, 0x6a, 0x0, 0xc7, 0x2, 0x3, 0x1, 0x9, 0x23, 0x6, 0x8, 0xfffffffffffffffe, 0x3, 0x100, 0x4, 0xef85, 0x7fff, 0x7c3c, 0x100, 0x1, 0x0, 0x5, 0x0, 0x4, 0x4, [0x7, 0x81, 0x81, 0x0, 0x3, 0x80000001, 0x3, 0xe18, 0x8, 0x6, 0x7, 0xfffffffffffffff9, 0x59, 0x8, 0x200, 0xf56, 0xfffffffffffffff7, 0x9, 0x7, 0x3, 0x6, 0x8, 0xa4c, 0x229e40000000, 0x4, 0x3, 0xd, 0x1b21, 0x401, 0x1, 0x8000, 0x6, 0x100000001, 0x80000000, 0x400, 0x7, 0x6, 0xff, 0x40, 0x6, 0xbba, 0x5, 0x800, 0xe994, 0xa, 0x5], "0f519964df417f58ced13a605ef15dbdc9ff361117702e4a528ff3b1adc6f0e8eba0090b75689783dae9c32c3a0f890c694d0b4533fd13240808951ef42badafdcdad4f1542e6a1ed00d4e600f97e50a9f970d"}, 0x1000, 0x800) r0 = socket(0xa, 0x801, 0x100) r1 = getsockopt$auto(r0, 0x40000000029, 0x13, 0xfffffffffffffffe, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000780), r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x124, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x3}, @NL80211_ATTR_MESH_ID={0x8, 0x18, "4bb2a6ac"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "3cf943fc9fd59ff557426d0b"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MESH_CONFIG={0xe3, 0x23, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @u32=0xfbb}, @generic="bb9c900a396bc0ecff0f9f488350d08a47e9331b260f71ff0c46acd52222812fbace6350d3ea9de01e4051cb40bca96255ec56505630032fbc5386dcc31877e66a3895c352e09818954c04f6f8d70a4d24d6befdd2105a6341667e0abbf523369379c1a692a97c6331f3a0a98bbb6a9ab08b156c50c445599ec429fde755b158012baa89b5ef00418976cc5e9f9c650a0445b5b0610b8d4a33f58d8fb28a1f2e34d56650d37340a04dbf97cbddbabb25ffe967f42e810e0461ce5905ea535ffdc1f6b25c9c2c4bdabc75eac8ded72c96a922096850bacb"]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000e0}, 0x24005804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf250500000008000100", @ANYRES32=r5, @ANYBLOB="b6a39438e677c8a53a09d769b2475cfa8a9329f39ea06b97af"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'nicvf0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r7 = socket(0x10, 0x2, 0x0) r8 = getsockopt$auto_SO_TYPE(r7, 0x3, 0x3, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/crtc-0/crc/control\x00', &(0x7f0000000280)=0x2) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3a98b1786492911f945f4c076df9576be08f95841970e02b7d9f33f6ecd245", @ANYRES16=r7], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x4040050) unshare$auto(0x7) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) 12m28.761039836s ago: executing program 2 (id=474): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000006880), 0x140, 0x0) ioctl$auto(0x3, 0x5501, 0xfffffffffffff4e0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x10000000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x240003, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) 12m26.811548427s ago: executing program 2 (id=478): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000700)='/proc/thread-self/cmdline\x00', 0x0, 0x0, 0x200) 12m26.21839325s ago: executing program 33 (id=478): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000700)='/proc/thread-self/cmdline\x00', 0x0, 0x0, 0x200) 11m9.784847008s ago: executing program 0 (id=727): io_cancel$auto(0x3, &(0x7f0000000000)={0x3, 0x9, 0x0, 0x10, 0x8, 0x2, 0xff, 0x1, 0x7ff, 0x0, 0x3, 0xffffffffffffffff}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x39, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="00e000", @ANYRES8=r0, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x20048080}, 0x24004800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="720100", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff04000000"]) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 11m9.363862181s ago: executing program 0 (id=729): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/011/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_IOCTL32(r0, 0xc00c5512, &(0x7f0000000180)={0x7, 0x10001, 0xffffff81}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x5, 0xb98) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyw9/power/runtime_status\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f00000006c0)={0x18, 0x0, 0xd3ac6c422733a379, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x48800) sendfile$auto(r2, r0, &(0x7f00000000c0)=0x3, 0xd5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/queue/zoned\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 11m8.921500151s ago: executing program 0 (id=730): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af12, r0) 11m8.721799606s ago: executing program 0 (id=732): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xa0100, 0x0) ioctl$auto_SNDCTL_TMR_SELECT(r0, 0x40045408, 0x0) 11m8.396548608s ago: executing program 0 (id=733): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x112b730c2c00220b, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x1f2) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) semctl$auto_GETALL(0x400, 0x7, 0xd, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x1) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) clone$auto(0x100000000, 0x1, 0x0, 0x0, 0x37) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 11m7.004930098s ago: executing program 0 (id=738): sched_getscheduler$auto(0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r1, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x109301, 0x438) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd5/poll_stat\x00', 0x80, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000280)=""/81, 0x8f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semctl$auto_SEM_STAT(0x2, 0x8, 0x12, 0x7) r5 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_clock\x00', 0x80000, 0x0) bpf$auto(0x3, &(0x7f0000000100)=@task_fd_query={r4, r0, 0x9, 0x5, 0x46, 0x7fffffff, r5, 0x26d, 0x2}, 0x3) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r6, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'ipvlan1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 10m51.756832309s ago: executing program 34 (id=738): sched_getscheduler$auto(0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r1, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x109301, 0x438) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd5/poll_stat\x00', 0x80, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000280)=""/81, 0x8f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semctl$auto_SEM_STAT(0x2, 0x8, 0x12, 0x7) r5 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_clock\x00', 0x80000, 0x0) bpf$auto(0x3, &(0x7f0000000100)=@task_fd_query={r4, r0, 0x9, 0x5, 0x46, 0x7fffffff, r5, 0x26d, 0x2}, 0x3) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r6, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'ipvlan1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 4m16.069489535s ago: executing program 6 (id=2448): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) signalfd4$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8000}, 0x8000, 0x4) unshare$auto(0x40000080) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresgid$auto(0x81, 0x800000a0, 0x8) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x24, 0x0, 0x40020000) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) socket(0x29, 0x4, 0x4) mmap$auto(0x0, 0x20009, 0x800, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x1) pipe$auto(0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2040, 0x0) ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setresuid$auto(0x8, 0x8, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) 4m14.984976874s ago: executing program 6 (id=2451): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xfffffffffffffff9, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x3, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = getpid() read$auto_proc_environ_operations_base(r1, &(0x7f00000000c0)=""/192, 0xc0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffa0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB=']', @ANYRES8=r0], 0x1ac}}, 0x4000014) seccomp$auto(0x1, 0x27, 0xfffffffffffffffd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) poll$auto(0x0, 0x5, 0x49) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r5 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r5, &(0x7f00000001c0)="622d1bfe595046ab5c98199adf260600de16baef6176e6021e1dcedc", 0x1c) 4m13.91877969s ago: executing program 6 (id=2458): r0 = socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000018c0)={0x24, r4, 0x159198c6007aa95d, 0x70bd26, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000ec0)=""/4096, 0x1000) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/loginuid\x00', 0x189040, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r3) r7 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80, 0x1) read$auto(r7, 0x0, 0x1) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000300)="b36a18989f2d6de1b3d3d7d9acc63ebc9eed446066102cfb5398c1bc59abf67b27be28cab0cb82b0f9403bdd952ebffa528baf0f0f293569a1bc17db3f16db2a5062d6d12f8f4594aa02c4d9db46faa3af891c34c69582ad6abd636afaf6fb4507af0bbf836e4844dbebc8bc13d6b9c926f669150cb53d6ab2a9d6b67223205760e615bee745624ffff3410ce96036b9bb3761d8200aaa1f2b759d133c45f219b4fd73cc137a4bc5c45ffe733ef4bc9176d717da4a6925a7bfa38abac701bfb9e10b1737a8c86656d883cde1cddbb3c705f8deecc744ed72d7af1a52644abe8be07176484352ba78177f33c617e9778f9d04eccb7e") sendmsg$auto_OVS_DP_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r6, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) ioctl$auto_MEMWRITE(r7, 0xc0304d18, &(0x7f0000000280)={0x2a7, 0x6, 0x7e, 0x6000cf5a, 0x3ff, 0x5d}) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) 4m12.57055257s ago: executing program 6 (id=2459): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) bind$auto(0x3, &(0x7f0000000080), 0x6b) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x10a, 0x0, 0x0, 0x3ff}, 0xed7138c}, 0x200, 0x0) 4m12.341831701s ago: executing program 6 (id=2461): r0 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="02002dbd700034030000030000001400030000000000000000000000ffffe000000105000100fb00000014000300fe8000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r1, 0x8, 0x1) fcntl$auto(r1, 0x10, 0x2) r2 = socket(0x2, 0x6, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x3, 0x0, 0x3) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x12b902, 0x0) write$auto(0x3, 0x0, 0xffd5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x40080, 0x0) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) rt_sigsuspend$auto(0x0, 0x8) setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17) 4m10.852979869s ago: executing program 6 (id=2465): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x8, 0x7, 0x4af) (async) madvise$auto(0x8, 0x7, 0x4af) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/version\x00', 0x8080, 0x0) lseek$auto(r0, 0x5, 0x0) (async) lseek$auto(r0, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setrlimit$auto(0x1000000007, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socket(0x2, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f0000000000), 0x55) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="19000003d300", 0x6) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) 3m55.718077879s ago: executing program 35 (id=2465): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x8, 0x7, 0x4af) (async) madvise$auto(0x8, 0x7, 0x4af) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/version\x00', 0x8080, 0x0) lseek$auto(r0, 0x5, 0x0) (async) lseek$auto(r0, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setrlimit$auto(0x1000000007, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socket(0x2, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f0000000000), 0x55) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="19000003d300", 0x6) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) 2m28.432003398s ago: executing program 3 (id=2812): mmap$auto(0x0, 0xea1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x7, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7f) r0 = socket(0x15, 0x2, 0x401) r1 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0a00010001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) socket(0x2, 0x8, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x200040, 0x0) mmap$auto(0x0, 0x78, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) open(0x0, 0x161342, 0x100) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) flistxattr$auto(r1, &(0x7f0000000000)='/dev/video0\x00', 0x100) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000040)) getsockopt$auto_SO_SNDLOWAT(r3, 0x4, 0x13, &(0x7f0000000040)='/dev/video0\x00', &(0x7f0000000080)=0x9) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r2, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r5, 0xc0585611, r5) 2m27.529736186s ago: executing program 3 (id=2817): syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x481000, 0x0) mmap$auto(0xfffffffffffffffe, 0x7, 0x6, 0x111, r0, 0xfffffffffffffffc) r1 = socket(0xa, 0x801, 0x1) unshare$auto(0x40000080) ioperm$auto(0x3, 0xe, 0x2000000000000149) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) write$auto(0xca, 0x0, 0x10) sendfile$auto(r2, r2, 0x0, 0x3) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket(0xa, 0x2, 0x3a) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14004a0faa68a040cf743cb5d20000a38ffc7fcd7dd389b92b63b85c944d0e09290ebe5b0ea368926111071f8ebb74bdcf4b6af31013a4d4efa7b1c30d4e6a14d8a002e0c18e2df2ea5cb680196e2c8a02128579fd530da408d75d04a09cebbf8c2712d755cdae5dbd6c41496b4af6b84ce244f403693c20837bfe3d5a55", @ANYRES16=r5, @ANYBLOB="10002abd7000ffdbdf257f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af24, r0) r6 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_BULK32(r7, 0xc0105502, &(0x7f00000002c0)={0x6, 0x7fff, 0x4, 0x8000}) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000180)="e98f0261ced0e4439c30b06020422bb909e494bb27e3012b26b5e81c06000000214ceaece355202ff410602e03a9664fe86a6d9e8bf1", 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x401, 0x20020000) poll$auto(&(0x7f00000001c0)={r1, 0xfffc, 0x7}, 0x1, 0x7c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x1, 0x7, 0xffffffffffbfffff, 0x20000040ebd, r2, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x0) mmap$auto(0x2, 0x400008, 0xdf, 0x10, 0x2, 0x5) read$auto(0x3, 0x0, 0x80) connect$auto(0x3, 0x0, 0x55) 2m24.854488319s ago: executing program 3 (id=2827): unshare$auto(0x40000080) unshare$auto(0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x4000c, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x5) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x40046210, 0x9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/statistics/tx_errors\x00', 0x181400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyaf\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) read$auto(r1, 0x0, 0x9) write$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffffff, 0x0, 0x2b) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 2m22.328149277s ago: executing program 3 (id=2835): set_mempolicy$auto(0x1, &(0x7f0000000080)=0x7b, 0x8) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x28) socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msgsnd$auto(0x9, 0x0, 0x10001, 0x0) unshare$auto(0x40000080) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0) 2m20.821180113s ago: executing program 3 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000030c0)=ANY=[@ANYBLOB="18140000", @ANYRES16=r1, @ANYBLOB="01002ebd5100fbcbdf250100000004000180ff13018004000680398f32525e629163bfcc5d377bd8aed3ff1d26fc3c79ca4357"], 0x1418}, 0x1, 0x0, 0xffff000000000000, 0x40}, 0x4) 2m20.563625972s ago: executing program 3 (id=2838): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty16\x00', 0x599001, 0x0) mmap$auto(0x6, 0xa00006, 0xfffffffffffffff8, 0x40eb1, 0x602, 0x300000000001) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0x2, 0x2, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04\xd4\x14s\xf88ft\xdb.\xf1|\x03\xc7k\x00\x00\x00\x00\x00', 0x81) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffefffffffffffa, 0xfffffffffffffffd, 0xd4, 0x1, 0x7, 0x0, 0x1, 0x368e, 0x29d0, {0xddb5, 0x10000}, 0x5, 0x1, 0x4, 0x7f, 0x0, 0x80000004, 0x84, 0xffffffffffff628f, 0xa747, 0xdeb1, 0x800}) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/dev/audio1\x004\xfa+\x82\xdd\xfb\xff\xff\xff}\x8d\x80z\x1aq\xe4\x84W:\x86M\x86\xac\xc4+\x80\\\xa7\x82M\xcaJ\xa8\xe4\xc3-%\xbdz\xc1Z\a0cJ\x9c\xeb_\xbb9\x80\xd8\xd2\xc0(\x88\x87\x8aZ\xe5\xb9\x99\xac~1\xa5X{\xb7\xee\xc6g\x01X\xc49\xff\x86Y%7\xd4\x1b\xa3\xe5f\xff \f\xd7Ex\xdeSX\xe4\xa1T\x9f\x14\xb9\xaea\x7fB\xac\xa6%\xf1\xfe\x8ayh`\xed\xb0\xc7\xb1\xdb\xbd\x8046\xafOc\xfa\xf2X\b', 0xa3d2) unshare$auto(0x40000080) mmap$auto(0x1000000000000009, 0x4, 0x4000000000df, 0x100000013, r1, 0x3323) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/stat\x00', 0x280c00, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000300)=""/112, 0x70) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0x7ffffffc, 0x4000000000df, 0x4000000040eb4, 0xffffffffffffffff, 0x300000000000) socketpair$auto(0x1e, 0x1, 0x1ea93533, 0x0) connect$auto(r2, 0x0, 0x1009f) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) read$auto_sg_fops_sg(r4, 0x0, 0x0) write$auto(0x3, 0x0, 0x387) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) socket(0x18, 0x6, 0x2) 2m4.335107658s ago: executing program 36 (id=2838): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty16\x00', 0x599001, 0x0) mmap$auto(0x6, 0xa00006, 0xfffffffffffffff8, 0x40eb1, 0x602, 0x300000000001) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0x2, 0x2, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000200)='7\x00\\\xa0\x04\xd4\x14s\xf88ft\xdb.\xf1|\x03\xc7k\x00\x00\x00\x00\x00', 0x81) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffefffffffffffa, 0xfffffffffffffffd, 0xd4, 0x1, 0x7, 0x0, 0x1, 0x368e, 0x29d0, {0xddb5, 0x10000}, 0x5, 0x1, 0x4, 0x7f, 0x0, 0x80000004, 0x84, 0xffffffffffff628f, 0xa747, 0xdeb1, 0x800}) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000005c0)='/dev/audio1\x004\xfa+\x82\xdd\xfb\xff\xff\xff}\x8d\x80z\x1aq\xe4\x84W:\x86M\x86\xac\xc4+\x80\\\xa7\x82M\xcaJ\xa8\xe4\xc3-%\xbdz\xc1Z\a0cJ\x9c\xeb_\xbb9\x80\xd8\xd2\xc0(\x88\x87\x8aZ\xe5\xb9\x99\xac~1\xa5X{\xb7\xee\xc6g\x01X\xc49\xff\x86Y%7\xd4\x1b\xa3\xe5f\xff \f\xd7Ex\xdeSX\xe4\xa1T\x9f\x14\xb9\xaea\x7fB\xac\xa6%\xf1\xfe\x8ayh`\xed\xb0\xc7\xb1\xdb\xbd\x8046\xafOc\xfa\xf2X\b', 0xa3d2) unshare$auto(0x40000080) mmap$auto(0x1000000000000009, 0x4, 0x4000000000df, 0x100000013, r1, 0x3323) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/stat\x00', 0x280c00, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000300)=""/112, 0x70) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0x7ffffffc, 0x4000000000df, 0x4000000040eb4, 0xffffffffffffffff, 0x300000000000) socketpair$auto(0x1e, 0x1, 0x1ea93533, 0x0) connect$auto(r2, 0x0, 0x1009f) read$auto(0xca, 0x0, 0x200) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) read$auto_sg_fops_sg(r4, 0x0, 0x0) write$auto(0x3, 0x0, 0x387) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) socket(0x18, 0x6, 0x2) 5.633642858s ago: executing program 7 (id=3186): socket(0x1f, 0x800, 0xffffff01) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000400) r1 = socket(0x2, 0x1, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmsg$auto_NL80211_CMD_CONNECT(r1, 0x0, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80080, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) shutdown$auto(0x200000003, 0x2) sysfs$auto(0x2, 0x1b, 0x0) socket(0x18, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1, 0x3, 0x4) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xac, 0x0, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_FILS_ERP_REALM={0x83, 0xfa, "fc41d7c867dc5d9b60f90645ceca8161a415a15e6722638669b51a29dac6dfebb7930e4ce1fb3332db22857e58e32e4f584fcc357a62cb40f77992e8c084212900fb3237312bf00f31d5782e74a89e73cd7f65557079b4db869d1560b38c057e6efec258e3f52f387421cf185a7b85bdefdc78e2316a823d5db0af34707422"}, @NL80211_ATTR_BSS_SELECT={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}]}, 0xac}, 0x1, 0x0, 0x0, 0xc1}, 0x400c050) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/209, 0xd1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 4.777950258s ago: executing program 4 (id=3191): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r0, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x7, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x800, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.525404063s ago: executing program 7 (id=3192): connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/scsi/sg/device_hdr\x00', 0x800, 0x0) read$auto_proc_single_file_operations_base(r0, 0x0, 0x0) setsockopt$auto_SO_PASSSEC(r0, 0xb6a, 0x22, &(0x7f0000000100)='*\'-\xd5{-,#-\x00', 0xb) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) r2 = fcntl$auto_F_ADD_SEALS(r1, 0x409, 0xffffffffffffffff) read$auto_force_wakeup_fops_hci_vhci(r2, &(0x7f0000000200)=""/178, 0xb2) sendfile$auto(r1, r1, 0x0, 0x200) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x101440, 0x0) sendmmsg$auto(r3, 0x0, 0x80004, 0x6) open(0x0, 0x261c2, 0x84) r4 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x7) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) r5 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101800, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000300)={r5, 0x0, 0x7, &(0x7f0000000480)="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", 0x4df, &(0x7f0000000040)="4e604e6adf510e9935b57bf567d0d6eefac3d1639a1c2445b651f8d4d277df4918629acbb0137dc33187163ac65f990986c0", &(0x7f0000000140)=0x9}) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r6, 0x0, 0x2b6) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/dummy_hcd.2/usb3/power/wakeup_max_time_ms\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)=""/4096, 0x1000) write$auto(r6, 0x0, 0x7f) socket(0x25, 0x1, 0x8) ioctl$auto(0xffffffffffffffff, 0x8917, 0x24) 4.035869892s ago: executing program 8 (id=3194): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/take_snapshot\x00', 0x1, 0x0) write$auto_nsim_dev_take_snapshot_fops_dev(r0, 0x0, 0x3f00) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf1, 0xb0, @raw=0xfffff010}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7fff) select$auto(0x6, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x1, 0xb, 0x4db11da, 0x3, 0x7f, 0x2, 0x0, 0x32, 0x1, 0x10000, 0x7, 0x6, 0xb83]}, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200041, 0x0) unshare$auto(0x40000080) socket(0x26, 0x5, 0x3a) socket(0x10, 0x2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) ioctl$auto(0x3, 0x890b, 0x38) 3.821819882s ago: executing program 5 (id=3195): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4088, 0xff8) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 3.703969354s ago: executing program 7 (id=3196): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x11, 0x2, 0x3a) r1 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) socket(0x1d, 0x3, 0x1) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') lseek$auto(r1, 0x7fffffffffffffff, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) write$auto(0x3, 0x0, 0x100082) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) madvise$auto(0x0, 0x200007, 0x8) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSDEBUG(r0, 0x40047440, 0x0) 3.562216309s ago: executing program 8 (id=3197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB], 0x4d0}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) ioperm$auto(0x80, 0x4, 0x800) fsmount$auto(0xffffffffffffffff, 0x1000, 0x6) clock_nanosleep$auto(0x8, 0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff, 0x6}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32, @ANYRESOCT=r3], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) 3.358092827s ago: executing program 8 (id=3198): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyee\x00', 0x80, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3c1d}, 0x1, 0xa9, 0x7fff, 0x101) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f00000000c0), 0x34000}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f800000, 0xd9) move_pages$auto(0x1, 0x8f0, 0x0, 0x0, 0x0, 0x8000000000000000) read$auto(0x3, 0x0, 0x80) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x5404, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x4) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4000000401, 0x8000) mmap$auto(0x0, 0xee7, 0xdf, 0x80000009b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0x8}, 0x9) r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$auto(0x7, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x7fb, 0x4000009, 0xa, 0x100000d, 0x5f, 0x2, 0x2}, 0x6f3) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x88) socket(0x2, 0x6, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'netdevsim0\x00'}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) 3.290303544s ago: executing program 4 (id=3199): socket$nl_generic(0x10, 0x3, 0x10) r0 = getsockopt$auto(0x3, 0x11, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) socketcall$auto_SYS_RECVMMSG(0x13, &(0x7f0000000180)=0x100000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x400d8) waitid$auto_P_PID(0x1, r0, &(0x7f0000000200)={@siginfo_0_0={0x1, 0x4, 0x3b, @_kill={0x0, 0xee00}}}, 0x0, &(0x7f0000000280)={{0xc, 0x8}, {0x2b3, 0x7a}, 0x3, 0xe, 0x6, 0x9, 0xb, 0xfffffffffffffdf2, 0x2, 0x5, 0x10, 0x7, 0x975, 0x9, 0xa0d0, 0x7ff}) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f00000000c0)={"8792af45e4609e55f40940acac7cafad23469dc16533d5d6e3bd0ec50cebc3fb", 0x6, 0xc9, 0xfff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) 2.478140669s ago: executing program 5 (id=3200): socket$nl_generic(0x10, 0x3, 0x10) r0 = getsockopt$auto(0x3, 0x11, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) socketcall$auto_SYS_RECVMMSG(0x13, &(0x7f0000000180)=0x100000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x400d8) waitid$auto_P_PID(0x1, r0, &(0x7f0000000200)={@siginfo_0_0={0x1, 0x4, 0x3b, @_kill={0x0, 0xee00}}}, 0x0, &(0x7f0000000280)={{0xc, 0x8}, {0x2b3, 0x7a}, 0x3, 0xe, 0x6, 0x9, 0xb, 0xfffffffffffffdf2, 0x2, 0x5, 0x10, 0x7, 0x975, 0x9, 0xa0d0, 0x7ff}) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f00000000c0)={"8792af45e4609e55f40940acac7cafad23469dc16533d5d6e3bd0ec50cebc3fb", 0x6, 0xc9, 0xfff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) 2.424113054s ago: executing program 7 (id=3201): socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40026f33, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x10) write$auto(0x3, 0x0, 0xffd8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/io.pressure\x00', 0x8200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/112, 0x70) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x8, &(0x7f0000000840)="e50ad2e98703300db9897d07f33ca1eeaf69fe2e42c1ce6e3b71e276a763dada6d6005ca37b73f91ba12b84f2963a90fabbdfd588c4671657f24046c1f5af3c3e7653006d7e2b265f0d0d464c455e04310a9c1993c290d61db330170a6f477a041e623fc536451c3aaab31d1cbfb60f2cfdadb1796a6dfe028d291a758a66a400e84c1a22246c7c8313fe680eddc41ad18df450f4a53b02af44bd4294c52b97c8fb92e9bbc202b454018cbf7cef98f86eeecdb5c5c591e33d0d115bdf9397db9796b988f3181dfa57b08307344df6c89201faf0edc0dc1ccf73fdeaa8ed07e078c1e95519f2e12d9c5177447be22ee2b3fe07c34c2a1c6cadfa117b317086043262b56f9a3ce424adde49e2ee8953c1a2632d11dfea593ee93054de2006e55ee07d0d02c8e47ef2d56463597ea7eccb3e3729f144ca62da4b70b6a26f570f05ae26273e9c0c040f44a6dbbc4ccaef5c29ad3d5231673248cdc971e6204ccb4a2dd24ce6a25b1f5e6398ad180aa362bfbf5c5c0bc3441569e422a907e7f4fddd5a82cfe718417a9946326d57af296077f0399dad1149819213d7673a74962ab8ebebea036cb42de04004ed6e3d4c7eeaa3cb5190317a58ca71847f103206e2907ee7ec83e68a82af92c9e24669c1740a7b38f37d7457cd3a3d23dbe0fb30fe8a6950abd9984183d17407de4cf21c294c309cf6ea1a74aacc752fbafcf4e5a822826373be2c2186c6f3743fd8b1d1d757a862cb877953a0a77d4d3973e5a67040d42f6acc3b45f01ea6ff392dc01dc103e27f4d12886cede2c27ad65403e7210c172792c7b524423063707d4a37dd9eb680d543ca26936e21f2e94b19772230edbcd6dbd5c264680de15599e119ea5bb640cdc53102cf31f31571b0178e38511985cfa8ff77474d310b0fa7abae2285e8993a6858ab7f67d28b96892f4d5e65aefe533a0b1b4c7fe09f112db38fd2aa5bb378058dd5fd8a3b93701bf7dd74b67309160b16d68696837524a18bdfe8161f9e1c9955ee4478852ccbd467d0d06574e2b75315a1d0d4505e2b8bdabecf5bc0185db1908ec3443316214a63021da3e237c376b2ac1d390ede01df37ec9dee070140294983be04b3c404c00f7c59bd6efe51fbceaf975df867f0547dc1ec7f1242df10488d1762bf8294d9d20ac80e49d5dbc46705699a8a4449bf424622d9e50a1efaeef1c180e03a74ebbebabde1c1294644ddf70ac80c003ccc39a2daf3e350d9e8abb02ba3513e3623b9e7ff494c234dc08e1581b2076788db2ecf6b038f40bfb0fdb9ea1188a1b1a20702bd38341eb068f454bf8ebc795742c5fa3caa8f4c3ba56b725d953daa10f75e004b2cc82e005eb7d8e55bfdd4409816ab402465cf5511ce6afbe07aa62e3c8970cdc570a25e03a1a768ddbec79a138381414865be8054745f2372e837c5660070d97837bbf2611e54aca39438039f77af710857ad9963b83d04e7ba834d22114edf2e5ceeedc40fc4166da78db65b39d0e05428a7e1df70166cc18b1c33d14faeb076e862eea8a89a10f8d6b760e1cbee24143ed6ccc5eeeba0361faa0f46b437ee455c588ddd1700788874546a4dad9092158a33e4cdbe3197b2355939b0b1e0131bd802cb9623f1b03a4a507763e3d7b8f33bbb705048eb037474723ddcdf15f0771ab6e37766120c2a75092f0be9d49163b909628a8f87b2d17195c470c9f83b2a5756280167dfea6b768343f211486c017d85e33161770ae8616f8458165efc59aa2568449905a82ceb7a4dd9dabc06b66ebb1aa6af211f4b695540b960d1f6e046b8e88b7fc0cf1412096578e5e31b253bafc170370bdee8371443fb6cfc65f4116da8b03a3ec3886cdf24d8f20954fecc797843b2544cab8a63622e2c0a466536d00af77150eacd2fb6a81e800efa808f36148f376bee441f0801d3e3e992165bf25d8f720c14bf04118937235215f5469c71c760c5153c5c892479b9f74e0103dc3fa36d458f901a35adb7729e6f256eb72314234b546fccef2a497ebbd5f2c9077fe765b2758dc8be318022f1efd57129a1c2793792ec54f9f4edc6a7b6529cff4e40719a4fcee1be61fe13a4fc1e8b214ed3c193734ba9bcb70dea1081a824bb567156e329124fea4aa31781527b9a69e6660e732730cead2c44dc87e43ad52f140f0b6ebfcbb4c09816b39d7c763c726e53fdcd55fcce22f0b389311fe3533c0e79491c57ccbc87ac6a96bd10dbb3768f771b262f3e2e8b1bbe59cfded5911a7d29fb2b320b632476e5bf6d52bc13c7348f56a4d3d2f4e52ca88f6987324c71a722d3e41f727c12a7898364f1e9c3e56605bc76e3df3251339a76028072d43460819b7732bcca12e46e4aaa4b76b8e5abbfb9da171aac5e16fd56330547984d5fcbae34343b273dc0f637a2d014d995cd6ec315f88527c804f5b801373c2e0f06c8d2e1c01740cf47927e58bd408671cd0c72195c85282b6f13ee36c0d42146c772c571cdcd9c1110aae59303bd53a51baf6c5a67ad948dc719c908086d328dd15c780aadac49fda906296dfb9d4447a9a396be3021617941620eeec7c3dc5483d623d838dc80022511fbe5328d69467d6ff05404c93c40dfc2c99306cb012bcb188cc3430ab86c54f66a50863d80bbc12c5b0a66ab50b3ddd7b7a65da9650c42b44015c8f5dc6a5e129baa8eb2d20df1de3eb2cc4686c01e1475e95903576c9590447fff40be572a3593daf14cec5c8812d5d812cd102c311068911f8246b3ed2d00a49736d1546ca70c50b3848dbcdc97378c8853333901b4dfc9b92c1727253f6ae7c4fca6a10f2847de068dd8afc6679df81e2ca075390199cc59c11cb6253a4201a976cac5d2d1a24d6c2f8b445afabe19e19abcb65a8f66cb95dcc4d38c7161e1d8206bc61dfa1ba8ed8996d4505a841af6f2a63edb6fadefc0989c92882b4de68d21dfc37765070b0d42f52b284569a713d28947100f228d8d6738cfb7c453297644b386e3f7441c0ea124e781c99ba3f411a7e4b1318e4e8b6b6ca4bacc8b0ad61b6bf8ca9175341c8a2bd350407196128718dd1dd743ab8de1fee0874afa968f88de333aa4c196b50c79d6e3b0c663be1ddbca05740572b092576986734e17d385e19701e08dcb4d33498b3333d1e4779c1bfdfcfc008383000624efb07b470ef465eac29529c1b37d017d2ce1b65eb6f74dea4b853ac840eab2392161dec0a4d83f84d383bbd53302b6c875ef04691c55c4d1c33904b785047ceb0ff93ef24508d88dac822236d06f7292325f875a670ff860cbc5fb42e50b889d9d233c442237b1edd149b86b20571a699f0a44aa6bb55d4ee7659bd7df2e89cc9dedc73774bfe3a9f1f5a2364ad11c446f142ecac70ad28a90bd0f4c89312f0633f9d439504e0f50eadaaf89ebdfa30658518acb3c4794ad5ad9703cf7f8deafa98428ba62a2894def19bc8628f7286c50779eff6fcbc9adf5f437d851b63844ff6074196e768a30c06fd48ba0314e2885e18da4b32439cf6ec986db64b23f9c3f73599ada43f67a0098969f46650df7f31e63379d95c473ff487e72d50ae9a71d7151a59f655e781fef602c052d473a5c0739f18dc50470954c24cb6789c693f576839b9fedaa3178df89c84c12b149724785b7558841da328c5beb52e796a7d1ad474c571db1079903a401c0cdab4ef53b1b5a60d2acfaef6b06123c4d1d3f93d11bee11267b202089a308076a62e4c75c07a8c221664e3958b148030fb498c5c0f5f6fb32d0e074bc55ecc620157f50c814cb3bf67cdab098ba601278623b31963817fd0c0b1c0261d48d8ffd13f6f5033b4c8cfbf9a95d019739fd61b6e030b3a115441342bda53a10468986adba0e8b14782b165b4b624eae6fe71ce608f510ec63c02f2cf450d3fda35580858fecb1197c11f32114415434147135459532fdb4f2c06bc8ff28b0df338f5ee1dd57d3d51fc37b3f63ec155210be6c86ddbd9a1f1d776f5c1651131761feb104f9d7c76b0b37abeba72d89630cc842379109ed8e94bbbb63146f5c5e0f686454c38987fc0e4394f7fc8cc3cbe4ec82f6dcb0d3fbc032a057808eab403924e315831e983a2843e6084e593541380c744572edf65e4cb19aaf12c06b8f81b78591e6f85d1b6d06f3939cb6700f4af84ecdb2a29d0c3702fdd44e247903eab72ce1f1457630a3cd4a5ae271ae39b3ac19c9b1e4bc3aaffc6095eb9f0f37d21b09b616045f7e681026ade36aa486a987b88cd1b3e2c464b63a67461601d88a3f9a233e6a8fec18ab64dc77ddd110f59c24303f14056b8c2eab31002e0dea6d0ba9a1a61cd1ed14be8a19bef3609930f9b793d13ddbfd43864dabffc3c0a102520c851cbf4b4ed241a12ecadfe7ee7c242e4d447d3152355f3e25ec4fb418a971d63a3abf6d251c2a703f525ceddf331a520b6234eb2d9b63921d17dbfcffc11223bd52d3eac579853710fcdca366a7c2fb870b09a233da15fe17811de2fd8d4abdcdc7ca63ada3d4f374e1af2c46e2694e3d63943f99628ab7fb3c905a71d008a39db2edcde77d09bfe8c3b92a9b3027c46c75d2516451da486a7b7c24a6411e1efe810dec550cd162aedf3440474ad1cfa27be70a5679aaf107129fc0915cd9ad37ed99c8bdf06b231527eed061eb0291d554d49297d924b670eee9a25e90f2b02b25324f51e88818449e01c547d7dec299d259bde731380147bef913b712c79771a26c52442869e1890e4e7220981f38157a3d9baf0ef16ea57f9edd9b440ca9be29f596ad74287042774073d899deb77b7d28746fe587e37f68133c215e81fc2f634619fae116a2f6093d3e0dbe2da8f17afcf3083ce8e15d720fe4156558c7f56ed264ad6b85f195450a70ffc5cf725ec7a548f8696f4807e43e0d3bbf56ce01b6eb903ded0772b488006c4f6e530f704e96d98e1a1d6130777ef963c0233d577b1e1c89a837e296c3a0cd6cb2b56391dc876c3906a780857f3ac3c20ed073b69ac8f2775d6d4e8dcd92af1b89ab975fda7aa60fb0fe4f713990e2bb2917f4932acb154665137fa8e28d23660ababc621fe17cff4e592df3d39d499762e184e89e31d8260757d5e4b2637fbd4ecb5479258520c6fa52d127af10170c503232767ffa19b45a63dde67350bfd327783cd8c23f6122dc1f697070752ae0e433705d884f15891e7f91a272d8ac7d1b1625dd6d3f335d813eb2a2c9c9de306fbab2b5a0b64bd549ee07ac2d59fe503993a61c62902499fc99abedd509232a61ac09ad1e34ca6522e99eaa64d21d30460162204692192ba18f149a9074f02d5192106254395c5303513e5e0d1ad5a126bbba48511d41e69f965f63a4b69e4aa760832b5c4025001e0a1c62349b81b63b4d0de75ada6264f215587b2e28147f142d495a4d9852231970e7132a643c22e2fd746a657c3f6710ad8deb251733648429a94d700c3679c0b107fd3823e48479328400cfa89841c0f86ef88482f4dc86ebf33212fe4321222d77f9068f82021ef207874b0291e2d900e4bcc025af50c5e793621b118159aae463f78235ccf2bfa6dd52b7363646c11fc7509b868fcf34b287c839bf835bc772c7c0e14bea664fa7c03ce34c554ad6b883874b0ae5326ce341d012094da8c27cec132e58d1bcf9191786d58294bfed065906bd90f36bc24220c566509cfa3254851dc7ce82ae5afa838b5f5741893be4aea06df1204b09fea1191ab5babd7c913ba47e25a6641a29cf5ad0a5489e7f560200a031c7310cf95eb4c2eb185f7c74d9e07b8a6772c223ad87e") prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) 2.153745956s ago: executing program 8 (id=3202): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x2, 0x4]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x7, 0x8, 0x7, 0x18, 0x42c8b44c, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy14/statistics/dot11RTSFailureCount\x00', 0x0, 0x0) open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xfffffffffffefffe, 0x15) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) msync$auto(0x0, 0x2000000005, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="54020000", @ANYRES16=0x0, @ANYBLOB="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"/580], 0x254}, 0x1, 0x0, 0x0, 0x4004040}, 0x400c800) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r1, 0x0, 0xeffd) poll$auto(&(0x7f0000003640)={r0, 0x4, 0xffff}, 0x4, 0x100000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r4 = bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x6}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@iter_create={r4, 0x3ff}, 0xc) r5 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0) read$auto_force_suspend_fops_hci_vhci(r5, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) 1.975837518s ago: executing program 4 (id=3203): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/loop10/queue/dax\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = memfd_create$auto(0x0, 0xe) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) fcntl$getown(r0, 0x9) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="88010000f2b73b1bbd059be1fa557b95352a1d5e8a4feb63806b9514671cd28ba6b3f0a65ba0e4f3816460c32a3db92298553b145f722b872762d0377063be238028c664c08f98bd6f29a773ca8e2c05c0ca049d1dfab62c5d20dfa3fb975f9f33a111c2c8fbdd0580511647f68507ee9c92e785b0b6ef66cfd78513e308c6634e8346369eb04e04d210d944f916248783705f49f031586ec5eb0effcc51702f8623c66c58e0f49434c167998f2f2efbc33e27c4f03368ddd9f0cd80068644f50ad96e3caa0fa868a097", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0500020000000000140004006772657461703000000000000000000008000d0000040000"], 0x188}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x4000040) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi12\x00', 0x4002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x7ffe, 0x0) clone$auto(0xb2, 0xffff, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) shutdown$auto(r2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="feffffff66598e2f1f48fd768be9805570f4f58e9200", @ANYRES16=r3, @ANYBLOB="010b27bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfff6, 0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x40040, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3fbffdb2", @ANYRES16=0x0, @ANYBLOB="06022bbd7000fddbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fadvise64$auto(r4, 0x20000008002, 0x4, 0x8) write$auto(0x3, 0x0, 0xfffffdef) 1.6875773s ago: executing program 7 (id=3204): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x10b040, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x44000, 0x0) (async) socket(0x2, 0x1, 0x0) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) open(0x0, 0x2a4c0, 0x0) (async) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mmap$auto(0x3, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0xa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/226, 0xe2) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0x9, 0x19) (async) madvise$auto(0x0, 0x53, 0x9) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) (async) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) r2 = getpgrp(0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) r3 = socket(0x29, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r3, 0x89f0, 0x24) (async) sched_setattr$auto(r2, 0x0, 0xf) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) 1.241816796s ago: executing program 5 (id=3205): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x82040, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SURVEY(r3, 0x0, 0x4000) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, 0x0, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004540), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)={0x18, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}]}, 0x18}}, 0x240480c0) 1.119750465s ago: executing program 7 (id=3206): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x402000c, 0x80000000, 0xeb1, 0xffffffffffffffff, 0x20000008000) mincore$auto(0x1000, 0x8001, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, r0, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40046207, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r0) sendmsg$auto_SMC_PNETID_FLUSH(r0, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESDEC=0x0, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x40802, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x2, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000001340)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) socket(0x25, 0x1, 0x3) r3 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r3, 0x8008b705, 0x1000000000000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 989.539221ms ago: executing program 5 (id=3207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB], 0x4d0}}, 0x4000000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) ioperm$auto(0x80, 0x4, 0x800) fsmount$auto(0xffffffffffffffff, 0x1000, 0x6) clock_nanosleep$auto(0x8, 0x0, 0x0, &(0x7f00000000c0)={0x7fffffffffffffff, 0x6}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) 954.710606ms ago: executing program 4 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x4, 0xffff}, 0x4, 0x100000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) 729.020932ms ago: executing program 8 (id=3209): connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/scsi/sg/device_hdr\x00', 0x800, 0x0) read$auto_proc_single_file_operations_base(r0, 0x0, 0x0) setsockopt$auto_SO_PASSSEC(r0, 0xb6a, 0x22, &(0x7f0000000100)='*\'-\xd5{-,#-\x00', 0xb) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) r2 = fcntl$auto_F_ADD_SEALS(r1, 0x409, 0xffffffffffffffff) read$auto_force_wakeup_fops_hci_vhci(r2, &(0x7f0000000200)=""/178, 0xb2) sendfile$auto(r1, r1, 0x0, 0x200) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x101440, 0x0) sendmmsg$auto(r3, 0x0, 0x80004, 0x6) open(0x0, 0x261c2, 0x84) r4 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x7) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) r5 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101800, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000300)={r5, 0x0, 0x7, &(0x7f0000000480)="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", 0x4df, &(0x7f0000000040)="4e604e6adf510e9935b57bf567d0d6eefac3d1639a1c2445b651f8d4d277df4918629acbb0137dc33187163ac65f990986c0", &(0x7f0000000140)=0x9}) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r6, 0x0, 0x2b6) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/dummy_hcd.2/usb3/power/wakeup_max_time_ms\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)=""/4096, 0x1000) write$auto(r6, 0x0, 0x7f) socket(0x25, 0x1, 0x8) ioctl$auto(0xffffffffffffffff, 0x8917, 0x24) 694.397047ms ago: executing program 4 (id=3210): setresuid$auto(0x2, 0x7, 0x0) setfsuid$auto(0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xa}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x278e18a297a8387c}, 0x24000802) socket(0x2, 0x3, 0x4) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0xb9}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x2, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x109a42, 0x0) write$auto(r5, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) unshare$auto(0x40000080) fcntl$auto(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x20) close_range$auto(0x2, 0x8, 0x0) 691.728428ms ago: executing program 5 (id=3211): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0xad67, 0xdb1, 0x10, 0x7e27, 0x6}) memfd_secret$auto(0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000240), 0x141, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002040)={'veth0\x00'}) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/dynamic_debug/control\x00', 0x602040, 0x0) r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r4, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, r5, 0x737, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) 298.738945ms ago: executing program 5 (id=3212): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/rose10/operstate\x00', 0x4900, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) mbind$auto(0x0, 0x2091ce, 0x4, 0x0, 0x6, 0x202) write$auto(0x3, 0x0, 0xfffffdef) 63.402781ms ago: executing program 4 (id=3213): socket$nl_generic(0x10, 0x3, 0x10) r0 = getsockopt$auto(0x3, 0x11, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x2000, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) socketcall$auto_SYS_RECVMMSG(0x13, &(0x7f0000000180)=0x100000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x400d8) waitid$auto_P_PID(0x1, r0, &(0x7f0000000200)={@siginfo_0_0={0x1, 0x4, 0x3b, @_kill={0x0, 0xee00}}}, 0x0, &(0x7f0000000280)={{0xc, 0x8}, {0x2b3, 0x7a}, 0x3, 0xe, 0x6, 0x9, 0xb, 0xfffffffffffffdf2, 0x2, 0x5, 0x10, 0x7, 0x975, 0x9, 0xa0d0, 0x7ff}) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f00000000c0)={"8792af45e4609e55f40940acac7cafad23469dc16533d5d6e3bd0ec50cebc3fb", 0x6, 0xc9, 0xfff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff}) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) sendfile$auto(r4, 0xffffffffffffffff, 0x0, 0x1) 0s ago: executing program 8 (id=3214): r0 = socket(0x1e, 0x1, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720addee920343990f7d0bbca9dc1fcfef3b84a4c023952b840a0438a65e1badba023db9d415fa7dbe3dfd81756e2ce18346d8003e21a89425e60900000017c4cf3f313ad3560018d2090000002d60ee049f4e596429e11aa8167e8ced0fac3747727d9c00"], 0x1ac}, 0x1, 0x0, 0x0, 0xc8c1}, 0x40000) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x84, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, r0, 0x8000) read$auto(0x3, 0x0, 0xf34) bpf$auto(0x13, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r2) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000009b159e8bca1782991bab00000000000000000080917e6a6a9f41be38bd6ce9cd0e0f44420441927c1f726501c3f45c5a0f1cd69850a87e56626518cc840dd8286cf6f5ad8d2b4233a246bfec1d4e26792d1efd7a46ce118cf5ec7e471572792f789f06ccdaefe8dd3e4a338e209c6d5b092d56c72b5d648e7bff637c", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/nr_requests\x00', 0x1a1842, 0x0) write$auto(r4, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x101040, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x24b7}, 0x8, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x6) socket(0x29, 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) kernel console output (not intermixed with test programs): g+0x10/0x10 [ 749.007575][T16912] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 749.007614][T16912] ? down_read+0xc9/0x330 [ 749.007643][T16912] ? __pfx_down_read+0x10/0x10 [ 749.007673][T16912] ? netlink_deliver_tap+0x1ae/0xd30 [ 749.007706][T16912] genl_rcv+0x28/0x40 [ 749.007736][T16912] netlink_unicast+0x53c/0x7f0 [ 749.007770][T16912] ? __pfx_netlink_unicast+0x10/0x10 [ 749.007803][T16912] ? __phys_addr_symbol+0x30/0x80 [ 749.007827][T16912] ? __check_object_size+0x488/0x710 [ 749.007857][T16912] netlink_sendmsg+0x8b8/0xd70 [ 749.007895][T16912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.007941][T16912] ____sys_sendmsg+0xaaf/0xc90 [ 749.007968][T16912] ? copy_msghdr_from_user+0x10b/0x160 [ 749.008002][T16912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.008026][T16912] ? preempt_schedule_thunk+0x1a/0x30 [ 749.008064][T16912] ? try_to_wake_up+0x953/0x1490 [ 749.008105][T16912] ___sys_sendmsg+0x135/0x1e0 [ 749.008141][T16912] ? __pfx____sys_sendmsg+0x10/0x10 [ 749.008175][T16912] ? wake_up_q+0xb0/0x160 [ 749.008240][T16912] ? do_futex+0x123/0x350 [ 749.008277][T16912] __sys_sendmsg+0x16e/0x220 [ 749.008312][T16912] ? __pfx___sys_sendmsg+0x10/0x10 [ 749.008343][T16912] ? __x64_sys_futex+0x1e1/0x4c0 [ 749.008402][T16912] do_syscall_64+0xcd/0x250 [ 749.008437][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.008472][T16912] RIP: 0033:0x7febc818cde9 [ 749.008495][T16912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.008519][T16912] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.008544][T16912] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 749.008562][T16912] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 749.008578][T16912] RBP: 00007febc820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 749.008595][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.008609][T16912] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 749.008643][T16912] [ 750.055547][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 750.456177][T11923] Bluetooth: hci0: command 0x0406 tx timeout [ 750.462529][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 750.469271][T16451] syz.4.2524 (16451) used greatest stack depth: 18400 bytes left [ 750.695710][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 752.050604][T16974] usbip-vudc usbip-vudc.0: gadget not bound [ 752.540288][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 752.776484][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 753.396872][T17005] ubi0: detaching mtd0 [ 753.518267][T17005] ubi0: mtd0 is detached [ 754.615653][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 754.855778][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 755.785071][T17051] FAULT_INJECTION: forcing a failure. [ 755.785071][T17051] name failslab, interval 1, probability 0, space 0, times 0 [ 755.896695][T17051] CPU: 0 UID: 0 PID: 17051 Comm: syz.4.2660 Not tainted 6.14.0-rc3-syzkaller #0 [ 755.896732][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 755.896747][T17051] Call Trace: [ 755.896756][T17051] [ 755.896766][T17051] dump_stack_lvl+0x16c/0x1f0 [ 755.896802][T17051] should_fail_ex+0x50a/0x650 [ 755.896839][T17051] ? fs_reclaim_acquire+0xae/0x150 [ 755.896874][T17051] ? __register_sysctl_table+0xb4/0x1910 [ 755.896912][T17051] should_failslab+0xc2/0x120 [ 755.896937][T17051] __kmalloc_noprof+0xcb/0x510 [ 755.896985][T17051] __register_sysctl_table+0xb4/0x1910 [ 755.897024][T17051] ? rcu_is_watching+0x12/0xc0 [ 755.897067][T17051] ? __pfx___register_sysctl_table+0x10/0x10 [ 755.897107][T17051] ? is_module_address+0x2a/0x50 [ 755.897142][T17051] ? register_net_sysctl_sz+0x228/0x3e0 [ 755.897175][T17051] ? __asan_memcpy+0x3c/0x60 [ 755.897210][T17051] sysctl_core_net_init+0xe2/0x270 [ 755.897241][T17051] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 755.897268][T17051] ops_init+0x1df/0x5f0 [ 755.897304][T17051] setup_net+0x21f/0x860 [ 755.897339][T17051] ? __pfx_setup_net+0x10/0x10 [ 755.897371][T17051] ? down_read_killable+0xcc/0x380 [ 755.897403][T17051] ? __pfx_down_read_killable+0x10/0x10 [ 755.897432][T17051] ? __raw_spin_lock_init+0x3a/0x110 [ 755.897471][T17051] ? debug_mutex_init+0x37/0x70 [ 755.897497][T17051] copy_net_ns+0x2b4/0x6c0 [ 755.897523][T17051] create_new_namespaces+0x3ea/0xad0 [ 755.897569][T17051] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 755.897611][T17051] ksys_unshare+0x45d/0xa40 [ 755.897637][T17051] ? __pfx_ksys_unshare+0x10/0x10 [ 755.897661][T17051] ? xfd_validate_state+0x5d/0x180 [ 755.897707][T17051] __x64_sys_unshare+0x31/0x40 [ 755.897731][T17051] do_syscall_64+0xcd/0x250 [ 755.897764][T17051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.897798][T17051] RIP: 0033:0x7f1f09b8cde9 [ 755.897818][T17051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.897843][T17051] RSP: 002b:00007f1f0aa87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 755.897868][T17051] RAX: ffffffffffffffda RBX: 00007f1f09da5fa0 RCX: 00007f1f09b8cde9 [ 755.897886][T17051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 755.897902][T17051] RBP: 00007f1f09c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 755.897918][T17051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.897935][T17051] R13: 0000000000000000 R14: 00007f1f09da5fa0 R15: 00007ffe9b4012e8 [ 755.897969][T17051] [ 760.702690][T16513] syz.4.2538 (16513) used greatest stack depth: 17168 bytes left [ 762.270594][T17145] openvswitch: ovs_: Dropping previously announced user features [ 763.484999][T17154] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 765.028353][T17174] FAULT_INJECTION: forcing a failure. [ 765.028353][T17174] name failslab, interval 1, probability 0, space 0, times 0 [ 765.090058][T17174] CPU: 0 UID: 0 PID: 17174 Comm: syz.4.2688 Not tainted 6.14.0-rc3-syzkaller #0 [ 765.090096][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 765.090113][T17174] Call Trace: [ 765.090121][T17174] [ 765.090139][T17174] dump_stack_lvl+0x16c/0x1f0 [ 765.090178][T17174] should_fail_ex+0x50a/0x650 [ 765.090216][T17174] ? fs_reclaim_acquire+0xae/0x150 [ 765.090252][T17174] should_failslab+0xc2/0x120 [ 765.090277][T17174] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 765.090313][T17174] ? __asan_memcpy+0x3c/0x60 [ 765.090342][T17174] ? __kernfs_new_node+0xd3/0x890 [ 765.090378][T17174] __kernfs_new_node+0xd3/0x890 [ 765.090409][T17174] ? kobject_put+0xab/0x5a0 [ 765.090442][T17174] ? __pfx___kernfs_new_node+0x10/0x10 [ 765.090483][T17174] ? lock_acquire.part.0+0x11b/0x380 [ 765.090517][T17174] ? find_held_lock+0x2d/0x110 [ 765.090552][T17174] kernfs_new_node+0x186/0x240 [ 765.090595][T17174] kernfs_create_link+0xcc/0x240 [ 765.090625][T17174] sysfs_do_create_link_sd+0x90/0x140 [ 765.090660][T17174] sysfs_create_link+0x61/0xc0 [ 765.090691][T17174] driver_sysfs_add+0x91/0x2d0 [ 765.090721][T17174] device_bind_driver+0x16/0x70 [ 765.090749][T17174] mac80211_hwsim_new_radio+0x3e7/0x54e0 [ 765.090801][T17174] ? __asan_memset+0x23/0x50 [ 765.090834][T17174] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 765.090879][T17174] hwsim_new_radio_nl+0xb42/0x12b0 [ 765.090917][T17174] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 765.090960][T17174] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 765.090997][T17174] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 765.091041][T17174] genl_family_rcv_msg_doit+0x202/0x2f0 [ 765.091082][T17174] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 765.091119][T17174] ? trace_cap_capable+0x1a2/0x210 [ 765.091161][T17174] ? bpf_lsm_capable+0x9/0x10 [ 765.091187][T17174] ? security_capable+0x7e/0x260 [ 765.091228][T17174] ? ns_capable+0xd7/0x110 [ 765.091265][T17174] genl_rcv_msg+0x565/0x800 [ 765.091305][T17174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.091343][T17174] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 765.091388][T17174] netlink_rcv_skb+0x16b/0x440 [ 765.091420][T17174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 765.091457][T17174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 765.091504][T17174] ? down_read+0xc9/0x330 [ 765.091536][T17174] ? __pfx_down_read+0x10/0x10 [ 765.091568][T17174] ? netlink_deliver_tap+0x1ae/0xd30 [ 765.091603][T17174] genl_rcv+0x28/0x40 [ 765.091633][T17174] netlink_unicast+0x53c/0x7f0 [ 765.091668][T17174] ? __pfx_netlink_unicast+0x10/0x10 [ 765.091702][T17174] ? __phys_addr_symbol+0x30/0x80 [ 765.091726][T17174] ? __check_object_size+0x488/0x710 [ 765.091753][T17174] netlink_sendmsg+0x8b8/0xd70 [ 765.091787][T17174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.091828][T17174] ____sys_sendmsg+0xaaf/0xc90 [ 765.091852][T17174] ? copy_msghdr_from_user+0x10b/0x160 [ 765.091885][T17174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.091907][T17174] ? preempt_schedule_thunk+0x1a/0x30 [ 765.091943][T17174] ? try_to_wake_up+0x953/0x1490 [ 765.091981][T17174] ___sys_sendmsg+0x135/0x1e0 [ 765.092012][T17174] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.092046][T17174] ? wake_up_q+0xb0/0x160 [ 765.092108][T17174] ? do_futex+0x123/0x350 [ 765.092155][T17174] __sys_sendmsg+0x16e/0x220 [ 765.092192][T17174] ? __pfx___sys_sendmsg+0x10/0x10 [ 765.092228][T17174] ? __x64_sys_futex+0x1e1/0x4c0 [ 765.092281][T17174] do_syscall_64+0xcd/0x250 [ 765.092315][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.092348][T17174] RIP: 0033:0x7f1f09b8cde9 [ 765.092371][T17174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.092395][T17174] RSP: 002b:00007f1f0aa87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.092420][T17174] RAX: ffffffffffffffda RBX: 00007f1f09da5fa0 RCX: 00007f1f09b8cde9 [ 765.092437][T17174] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 765.092453][T17174] RBP: 00007f1f09c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 765.092469][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.092484][T17174] R13: 0000000000000000 R14: 00007f1f09da5fa0 R15: 00007ffe9b4012e8 [ 765.092517][T17174] [ 766.335589][T17187] Invalid ELF header magic: != ELF [ 767.790786][ T55] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 768.744335][T17230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2700'. [ 769.152262][T17236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 769.233924][T17236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 769.308533][T17236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 769.379589][T17236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 770.040752][T17254] [ 770.211518][T17256] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 770.853714][T17259] FAULT_INJECTION: forcing a failure. [ 770.853714][T17259] name failslab, interval 1, probability 0, space 0, times 0 [ 770.974069][T17259] CPU: 0 UID: 0 PID: 17259 Comm: syz.4.2708 Not tainted 6.14.0-rc3-syzkaller #0 [ 770.974105][T17259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 770.974120][T17259] Call Trace: [ 770.974127][T17259] [ 770.974138][T17259] dump_stack_lvl+0x16c/0x1f0 [ 770.974175][T17259] should_fail_ex+0x50a/0x650 [ 770.974212][T17259] ? fs_reclaim_acquire+0xae/0x150 [ 770.974247][T17259] should_failslab+0xc2/0x120 [ 770.974273][T17259] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 770.974310][T17259] ? __kernfs_new_node+0xd3/0x890 [ 770.974350][T17259] __kernfs_new_node+0xd3/0x890 [ 770.974388][T17259] ? __pfx___kernfs_new_node+0x10/0x10 [ 770.974420][T17259] ? __pfx_lock_release+0x10/0x10 [ 770.974453][T17259] ? kernfs_add_one+0x39d/0x520 [ 770.974501][T17259] ? up_write+0x1b2/0x520 [ 770.974542][T17259] kernfs_new_node+0x186/0x240 [ 770.974609][T17259] __kernfs_create_file+0x53/0x350 [ 770.974646][T17259] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 770.974687][T17259] internal_create_group+0x56c/0xf10 [ 770.974729][T17259] ? __pfx_internal_create_group+0x10/0x10 [ 770.974768][T17259] ? kernfs_create_link+0x1bd/0x240 [ 770.974800][T17259] internal_create_groups+0x9d/0x150 [ 770.974836][T17259] device_add+0x6d3/0x1a70 [ 770.974880][T17259] ? __pfx_device_add+0x10/0x10 [ 770.974917][T17259] ? __init_waitqueue_head+0xca/0x150 [ 770.974952][T17259] netdev_register_kobject+0x183/0x3a0 [ 770.974992][T17259] register_netdevice+0x147b/0x1eb0 [ 770.975035][T17259] ? __pfx_register_netdevice+0x10/0x10 [ 770.975082][T17259] __ip_tunnel_create+0x4aa/0x690 [ 770.975118][T17259] ? __pfx___ip_tunnel_create+0x10/0x10 [ 770.975151][T17259] ? read_word_at_a_time+0xe/0x20 [ 770.975194][T17259] ip_tunnel_init_net+0x22a/0x790 [ 770.975228][T17259] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 770.975265][T17259] ? __kmalloc_noprof+0x23b/0x510 [ 770.975305][T17259] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 770.975343][T17259] ops_init+0x1df/0x5f0 [ 770.975382][T17259] setup_net+0x21f/0x860 [ 770.975417][T17259] ? __pfx_setup_net+0x10/0x10 [ 770.975444][T17259] ? down_read_killable+0xcc/0x380 [ 770.975472][T17259] ? __pfx_down_read_killable+0x10/0x10 [ 770.975500][T17259] ? __raw_spin_lock_init+0x3a/0x110 [ 770.975539][T17259] ? debug_mutex_init+0x37/0x70 [ 770.975567][T17259] copy_net_ns+0x2b4/0x6c0 [ 770.975592][T17259] create_new_namespaces+0x3ea/0xad0 [ 770.975652][T17259] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 770.975694][T17259] ksys_unshare+0x45d/0xa40 [ 770.975718][T17259] ? __pfx_ksys_unshare+0x10/0x10 [ 770.975738][T17259] ? xfd_validate_state+0x5d/0x180 [ 770.975784][T17259] __x64_sys_unshare+0x31/0x40 [ 770.975808][T17259] do_syscall_64+0xcd/0x250 [ 770.975838][T17259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.975870][T17259] RIP: 0033:0x7f1f09b8cde9 [ 770.975892][T17259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.975916][T17259] RSP: 002b:00007f1f0aa87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 770.975940][T17259] RAX: ffffffffffffffda RBX: 00007f1f09da5fa0 RCX: 00007f1f09b8cde9 [ 770.975958][T17259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 770.975973][T17259] RBP: 00007f1f09c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 770.975989][T17259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.976004][T17259] R13: 0000000000000000 R14: 00007f1f09da5fa0 R15: 00007ffe9b4012e8 [ 770.976037][T17259] [ 771.362152][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 771.368280][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 771.374597][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 771.416785][T11923] Bluetooth: hci2: command 0x0c1a tx timeout [ 771.501183][ T29] audit: type=1800 audit(4294967458.610:18): pid=17278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2712" name="file0" dev="tmpfs" ino=287 res=0 errno=0 [ 771.579488][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2712'. [ 772.913829][T17301] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 773.988383][T17320] ptrace attach of "./syz-executor exec"[7877] was attempted by "./syz-executor exec"[17320] [ 774.641399][T17311] [U]  [ 774.644280][T17311] [U] [ 774.647007][T17311] [U] [ 774.649733][T17311] [U] [ 774.675811][T17311] [U] [ 774.678601][T17311] [U] [ 774.681342][T17311] [U] [ 774.684079][T17311] [U] [ 774.703974][T17311] [U] [ 774.706746][T17311] [U] [ 774.709470][T17311] [U] [ 774.712198][T17311] [U] [ 774.726419][T17311] [U] [ 774.729201][T17311] [U] [ 774.731943][T17311] [U] [ 774.734723][T17311] [U] [ 774.760510][T17311] [U] [ 774.763302][T17311] [U] [ 774.766034][T17311] [U] [ 774.768767][T17311] [U] [ 774.780690][T17311] [U] [ 774.783463][T17311] [U] [ 774.786194][T17311] [U] [ 774.788917][T17311] [U] [ 774.813172][T17311] [U] [ 774.816002][T17311] [U] [ 774.818737][T17311] [U] [ 774.821472][T17311] [U] [ 774.895615][T17311] [U] [ 775.108603][T17343] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 775.352802][T17345] blk_print_req_error: 6 callbacks suppressed [ 775.352824][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.415652][T17345] buffer_io_error: 6 callbacks suppressed [ 775.415673][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.470628][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.521877][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.548174][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.582851][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.612781][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.690231][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.716554][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.745519][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.753483][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.816649][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.824637][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.866004][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.884191][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.905936][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 775.931070][T17345] ldm_validate_partition_table(): Disk read failed. [ 775.955967][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 775.985620][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 776.009979][T17345] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 776.042489][T17345] Buffer I/O error on dev nbd0, logical block 0, async page read [ 776.074691][T17345] Dev nbd0: unable to read RDB block 0 [ 776.142176][T17345] nbd0: unable to read partition table [ 777.206951][T17355] Process accounting resumed [ 778.104944][T17392] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 779.320085][T17428] zero sized request [ 779.583325][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2750'. [ 779.627984][T17437] veth0_to_bond: entered promiscuous mode [ 780.621108][T17466] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 780.798858][T17472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2758'. [ 780.809278][T11923] Bluetooth: hci1: unexpected subevent 0x0a length: 124 > 30 [ 780.987526][T17477] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2758'. [ 781.000276][ T55] Bluetooth: hci1: unexpected subevent 0x0a length: 124 > 30 [ 781.074589][T17472] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 783.152976][T17515] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2770'. [ 785.893474][T17556] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 787.222190][T17584] ovs_: entered promiscuous mode [ 787.637089][T17603] FAULT_INJECTION: forcing a failure. [ 787.637089][T17603] name failslab, interval 1, probability 0, space 0, times 0 [ 787.761252][T17603] CPU: 0 UID: 0 PID: 17603 Comm: syz.7.2785 Not tainted 6.14.0-rc3-syzkaller #0 [ 787.761287][T17603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 787.761301][T17603] Call Trace: [ 787.761309][T17603] [ 787.761318][T17603] dump_stack_lvl+0x16c/0x1f0 [ 787.761354][T17603] should_fail_ex+0x50a/0x650 [ 787.761393][T17603] ? fs_reclaim_acquire+0xae/0x150 [ 787.761426][T17603] ? __register_sysctl_table+0xb4/0x1910 [ 787.761463][T17603] should_failslab+0xc2/0x120 [ 787.761486][T17603] __kmalloc_noprof+0xcb/0x510 [ 787.761525][T17603] __register_sysctl_table+0xb4/0x1910 [ 787.761564][T17603] ? trace_kmalloc+0x2d/0xd0 [ 787.761591][T17603] ? __pfx___register_sysctl_table+0x10/0x10 [ 787.761626][T17603] ? is_module_address+0x2a/0x50 [ 787.761661][T17603] ? register_net_sysctl_sz+0x228/0x3e0 [ 787.761690][T17603] ? __asan_memcpy+0x3c/0x60 [ 787.761722][T17603] ? __pfx_devinet_init_net+0x10/0x10 [ 787.761752][T17603] devinet_init_net+0x378/0x900 [ 787.761785][T17603] ? __pfx_devinet_init_net+0x10/0x10 [ 787.761815][T17603] ops_init+0x1df/0x5f0 [ 787.761855][T17603] setup_net+0x21f/0x860 [ 787.761889][T17603] ? __pfx_setup_net+0x10/0x10 [ 787.761921][T17603] ? down_read_killable+0xcc/0x380 [ 787.761953][T17603] ? __pfx_down_read_killable+0x10/0x10 [ 787.761982][T17603] ? __raw_spin_lock_init+0x3a/0x110 [ 787.762021][T17603] ? debug_mutex_init+0x37/0x70 [ 787.762050][T17603] copy_net_ns+0x2b4/0x6c0 [ 787.762076][T17603] create_new_namespaces+0x3ea/0xad0 [ 787.762121][T17603] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 787.762162][T17603] ksys_unshare+0x45d/0xa40 [ 787.762188][T17603] ? __pfx_ksys_unshare+0x10/0x10 [ 787.762210][T17603] ? xfd_validate_state+0x5d/0x180 [ 787.762266][T17603] __x64_sys_unshare+0x31/0x40 [ 787.762294][T17603] do_syscall_64+0xcd/0x250 [ 787.762327][T17603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.762360][T17603] RIP: 0033:0x7febc818cde9 [ 787.762381][T17603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.762405][T17603] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 787.762430][T17603] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 787.762447][T17603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 787.762462][T17603] RBP: 00007febc820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 787.762477][T17603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.762492][T17603] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 787.762525][T17603] [ 789.940839][T17642] FAULT_INJECTION: forcing a failure. [ 789.940839][T17642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.977679][T17642] CPU: 1 UID: 0 PID: 17642 Comm: syz.3.2795 Not tainted 6.14.0-rc3-syzkaller #0 [ 789.977713][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 789.977727][T17642] Call Trace: [ 789.977734][T17642] [ 789.977744][T17642] dump_stack_lvl+0x16c/0x1f0 [ 789.977777][T17642] should_fail_ex+0x50a/0x650 [ 789.977815][T17642] _copy_from_user+0x2e/0xd0 [ 789.977840][T17642] memdup_user+0x71/0xd0 [ 789.977869][T17642] i2cdev_ioctl_rdwr+0x2db/0x700 [ 789.977904][T17642] i2cdev_ioctl+0x601/0x820 [ 789.977929][T17642] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 789.977954][T17642] ? __fget_files+0x206/0x3a0 [ 789.977991][T17642] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 789.978017][T17642] __x64_sys_ioctl+0x190/0x200 [ 789.978047][T17642] do_syscall_64+0xcd/0x250 [ 789.978077][T17642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.978108][T17642] RIP: 0033:0x7fc17298cde9 [ 789.978127][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.978156][T17642] RSP: 002b:00007fc173869038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 789.978179][T17642] RAX: ffffffffffffffda RBX: 00007fc172ba5fa0 RCX: 00007fc17298cde9 [ 789.978195][T17642] RDX: 0000000000000000 RSI: 0000000000000707 RDI: 0000000000000003 [ 789.978209][T17642] RBP: 00007fc173869090 R08: 0000000000000000 R09: 0000000000000000 [ 789.978224][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.978238][T17642] R13: 0000000000000000 R14: 00007fc172ba5fa0 R15: 00007ffc272c2478 [ 789.978269][T17642] [ 791.648097][T17669] openvswitch: ovs_: Dropping previously announced user features [ 791.815220][T17673] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 794.134895][T17711] openvswitch: ovs_: Dropping previously announced user features [ 795.442550][T17750] openvswitch: ovs_: Dropping previously announced user features [ 796.928961][T17771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2823'. [ 797.969164][T17793] openvswitch: ovs_: Dropping previously announced user features [ 798.516961][T17804] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 800.731878][ T55] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 800.731916][ T55] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 800.748678][ T55] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 800.748766][ T55] Bluetooth: hci4: adv larger than maximum supported [ 800.756822][ T55] Bluetooth: hci4: adv larger than maximum supported [ 800.763796][ T55] Bluetooth: hci4: adv larger than maximum supported [ 800.770710][ T55] Bluetooth: hci4: Malformed LE Event: 0x0d [ 803.045572][ T55] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 808.102912][T17920] openvswitch: ovs_: Dropping previously announced user features [ 808.304483][T17923] FAULT_INJECTION: forcing a failure. [ 808.304483][T17923] name failslab, interval 1, probability 0, space 0, times 0 [ 808.308845][T17914] Process accounting paused [ 808.326251][T17923] CPU: 0 UID: 0 PID: 17923 Comm: syz.7.2852 Not tainted 6.14.0-rc3-syzkaller #0 [ 808.326286][T17923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 808.326301][T17923] Call Trace: [ 808.326309][T17923] [ 808.326320][T17923] dump_stack_lvl+0x16c/0x1f0 [ 808.326353][T17923] should_fail_ex+0x50a/0x650 [ 808.326396][T17923] ? fs_reclaim_acquire+0xae/0x150 [ 808.326428][T17923] ? __register_sysctl_table+0xeaf/0x1910 [ 808.326467][T17923] should_failslab+0xc2/0x120 [ 808.326490][T17923] __kmalloc_noprof+0xcb/0x510 [ 808.326532][T17923] __register_sysctl_table+0xeaf/0x1910 [ 808.326576][T17923] ? __pfx___register_sysctl_table+0x10/0x10 [ 808.326611][T17923] ? is_module_address+0x2a/0x50 [ 808.326644][T17923] ? register_net_sysctl_sz+0x228/0x3e0 [ 808.326674][T17923] ? __asan_memcpy+0x3c/0x60 [ 808.326708][T17923] sysctl_core_net_init+0xe2/0x270 [ 808.326739][T17923] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 808.326767][T17923] ops_init+0x1df/0x5f0 [ 808.326804][T17923] setup_net+0x21f/0x860 [ 808.326841][T17923] ? __pfx_setup_net+0x10/0x10 [ 808.326873][T17923] ? down_read_killable+0xcc/0x380 [ 808.326910][T17923] ? __pfx_down_read_killable+0x10/0x10 [ 808.326940][T17923] ? __raw_spin_lock_init+0x3a/0x110 [ 808.326981][T17923] ? debug_mutex_init+0x37/0x70 [ 808.327012][T17923] copy_net_ns+0x2b4/0x6c0 [ 808.327039][T17923] create_new_namespaces+0x3ea/0xad0 [ 808.327084][T17923] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 808.327124][T17923] ksys_unshare+0x45d/0xa40 [ 808.327151][T17923] ? __pfx_ksys_unshare+0x10/0x10 [ 808.327175][T17923] ? xfd_validate_state+0x5d/0x180 [ 808.327220][T17923] __x64_sys_unshare+0x31/0x40 [ 808.327245][T17923] do_syscall_64+0xcd/0x250 [ 808.327276][T17923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.327309][T17923] RIP: 0033:0x7febc818cde9 [ 808.327329][T17923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.327352][T17923] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 808.327375][T17923] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 808.327393][T17923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 808.327408][T17923] RBP: 00007febc820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 808.327423][T17923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.327439][T17923] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 808.327472][T17923] [ 808.327484][T17923] sysctl could not get directory: /net/core -12 [ 809.101309][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.107800][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.250109][T17933] Invalid ELF header magic: != ELF [ 810.360551][T17944] FAULT_INJECTION: forcing a failure. [ 810.360551][T17944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.455587][T17944] CPU: 0 UID: 0 PID: 17944 Comm: syz.7.2858 Not tainted 6.14.0-rc3-syzkaller #0 [ 810.455620][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 810.455634][T17944] Call Trace: [ 810.455642][T17944] [ 810.455652][T17944] dump_stack_lvl+0x16c/0x1f0 [ 810.455686][T17944] should_fail_ex+0x50a/0x650 [ 810.455725][T17944] _copy_from_iter+0x465/0x1560 [ 810.455755][T17944] ? __pfx__copy_from_iter+0x10/0x10 [ 810.455777][T17944] ? __virt_addr_valid+0x1a4/0x590 [ 810.455807][T17944] ? __virt_addr_valid+0x5e/0x590 [ 810.455831][T17944] ? __phys_addr_symbol+0x30/0x80 [ 810.455853][T17944] ? __check_object_size+0x488/0x710 [ 810.455882][T17944] netlink_sendmsg+0x813/0xd70 [ 810.455917][T17944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.455944][T17944] ? __might_fault+0xe3/0x190 [ 810.455980][T17944] ____sys_sendmsg+0xaaf/0xc90 [ 810.456007][T17944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.456029][T17944] ? __lock_acquire+0xcc5/0x3c40 [ 810.456075][T17944] ___sys_sendmsg+0x135/0x1e0 [ 810.456109][T17944] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.456154][T17944] ? trace_lock_acquire+0x14e/0x1f0 [ 810.456208][T17944] __sys_sendmmsg+0x201/0x420 [ 810.456244][T17944] ? __pfx___sys_sendmmsg+0x10/0x10 [ 810.456286][T17944] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.456327][T17944] ? fput+0x67/0x440 [ 810.456350][T17944] ? ksys_write+0x1ba/0x250 [ 810.456380][T17944] ? __pfx_ksys_write+0x10/0x10 [ 810.456416][T17944] __x64_sys_sendmmsg+0x9c/0x100 [ 810.456446][T17944] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.456472][T17944] do_syscall_64+0xcd/0x250 [ 810.456507][T17944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.456539][T17944] RIP: 0033:0x7febc818cde9 [ 810.456558][T17944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.456580][T17944] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 810.456602][T17944] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 810.456618][T17944] RDX: 0000000000000007 RSI: 0000400000000200 RDI: 0000000000000006 [ 810.456632][T17944] RBP: 00007febc90bb090 R08: 0000000000000000 R09: 0000000000000000 [ 810.456646][T17944] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 810.456660][T17944] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 810.456690][T17944] [ 816.407146][T17992] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 816.425965][T17992] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 816.535818][T17992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 816.562726][T17992] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 817.577261][T11923] Bluetooth: hci4: command 0x0406 tx timeout [ 818.248870][T18013] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 818.459105][T11923] Bluetooth: hci0: command 0x0406 tx timeout [ 818.476454][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 818.497266][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 818.507034][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 818.519521][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 818.535979][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 818.546029][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 818.615661][T11923] Bluetooth: hci2: command 0x0c1a tx timeout [ 818.615732][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 819.038824][T18020] chnl_net:caif_netlink_parms(): no params data found [ 819.532655][T18037] FAULT_INJECTION: forcing a failure. [ 819.532655][T18037] name failslab, interval 1, probability 0, space 0, times 0 [ 819.609373][T18037] CPU: 1 UID: 0 PID: 18037 Comm: syz.7.2878 Not tainted 6.14.0-rc3-syzkaller #0 [ 819.609409][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 819.609425][T18037] Call Trace: [ 819.609434][T18037] [ 819.609445][T18037] dump_stack_lvl+0x16c/0x1f0 [ 819.609481][T18037] should_fail_ex+0x50a/0x650 [ 819.609518][T18037] ? fs_reclaim_acquire+0xae/0x150 [ 819.609551][T18037] ? nfs_alloc_fhandle+0x3b/0x90 [ 819.609575][T18037] should_failslab+0xc2/0x120 [ 819.609599][T18037] __kmalloc_cache_noprof+0x68/0x410 [ 819.609641][T18037] nfs_alloc_fhandle+0x3b/0x90 [ 819.609665][T18037] nfs_init_fs_context+0x65/0x1160 [ 819.609694][T18037] ? __pfx_nfs_init_fs_context+0x10/0x10 [ 819.609722][T18037] alloc_fs_context+0x54a/0x9c0 [ 819.609764][T18037] path_mount+0xb08/0x1f10 [ 819.609809][T18037] ? kmem_cache_free+0x2e2/0x4d0 [ 819.609842][T18037] ? __pfx_path_mount+0x10/0x10 [ 819.609883][T18037] ? putname+0x13c/0x180 [ 819.609910][T18037] __x64_sys_mount+0x28f/0x310 [ 819.609947][T18037] ? __pfx___x64_sys_mount+0x10/0x10 [ 819.609994][T18037] do_syscall_64+0xcd/0x250 [ 819.610025][T18037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.610059][T18037] RIP: 0033:0x7febc818cde9 [ 819.610079][T18037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.610103][T18037] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 819.610128][T18037] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 819.610145][T18037] RDX: 0000400000000100 RSI: 00004000000000c0 RDI: 0000400000000040 [ 819.610162][T18037] RBP: 00007febc820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 819.610177][T18037] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 819.610193][T18037] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 819.610226][T18037] [ 819.903494][T18020] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.921114][T18020] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.955786][T18020] bridge_slave_0: entered allmulticast mode [ 819.996443][T18020] bridge_slave_0: entered promiscuous mode [ 820.123584][T18020] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.145529][T18020] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.152959][T18020] bridge_slave_1: entered allmulticast mode [ 820.181655][T18020] bridge_slave_1: entered promiscuous mode [ 820.597787][T18042] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 820.619568][ T55] Bluetooth: hci3: command tx timeout [ 820.633037][T18020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.718571][T18020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.786459][T18043] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 821.283823][T18020] team0: Port device team_slave_0 added [ 821.333862][T18020] team0: Port device team_slave_1 added [ 821.572606][T18020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.615666][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.735441][T18020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.780941][T18020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.802716][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.873499][T18020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.067980][T18020] hsr_slave_0: entered promiscuous mode [ 822.086372][T18020] hsr_slave_1: entered promiscuous mode [ 822.093089][T18020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.130891][T18020] Cannot create hsr debugfs directory [ 822.705451][ T55] Bluetooth: hci3: command tx timeout [ 823.097213][T18020] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 823.155141][T18020] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 823.218647][T18020] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 823.265613][T18020] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 823.553394][T18020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.657470][T18020] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.769469][ T3423] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.776660][ T3423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.830294][ T3423] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.837536][ T3423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.493864][T18020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.785945][ T55] Bluetooth: hci3: command tx timeout [ 825.850445][T18020] veth0_vlan: entered promiscuous mode [ 825.897006][T18020] veth1_vlan: entered promiscuous mode [ 825.985940][T18020] veth0_macvtap: entered promiscuous mode [ 826.067560][T18020] veth1_macvtap: entered promiscuous mode [ 826.089416][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.119602][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.155604][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.185530][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.223408][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.255444][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.275814][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.286383][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.338660][T18020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.382059][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.435596][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.471391][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.515516][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.529077][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.575470][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.606197][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.625507][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.657003][T18020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.679071][T18020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.724011][T18020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.745527][T18020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.786082][T18020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.855534][ T55] Bluetooth: hci3: command tx timeout [ 827.244860][ T9161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.277665][ T9161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.376739][T12179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.384623][T12179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.987448][T18095] ovs_: entered promiscuous mode [ 829.601634][T18106] netlink: 93 bytes leftover after parsing attributes in process `syz.7.2891'. [ 832.518413][T11923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 832.542184][T11923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 832.551900][T11923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 832.569477][T11923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 832.586141][T11923] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 832.595559][T11923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 833.149896][T18128] chnl_net:caif_netlink_parms(): no params data found [ 833.603658][T18128] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.614344][T18128] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.622358][T18128] bridge_slave_0: entered allmulticast mode [ 833.634043][T18128] bridge_slave_0: entered promiscuous mode [ 833.647220][T18128] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.674765][T18128] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.695712][T18128] bridge_slave_1: entered allmulticast mode [ 833.723815][T18128] bridge_slave_1: entered promiscuous mode [ 833.967264][T18128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.023645][T18128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.117214][T18128] team0: Port device team_slave_0 added [ 834.208547][T18128] team0: Port device team_slave_1 added [ 834.726311][ T55] Bluetooth: hci5: command tx timeout [ 835.122423][T18164] Invalid ELF header magic: != ELF [ 835.196064][T18128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.203570][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.340364][T18128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.392873][T18128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.445568][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.537042][T18128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.146151][ T9167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.698778][ T9167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.738826][T18128] hsr_slave_0: entered promiscuous mode [ 836.766429][T18128] hsr_slave_1: entered promiscuous mode [ 836.775715][ T55] Bluetooth: hci5: command tx timeout [ 836.796243][T18128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.816272][T18128] Cannot create hsr debugfs directory [ 837.210162][ T9167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.570193][ T9167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.352668][ T9167] bridge_slave_1: left allmulticast mode [ 838.363232][ T9167] bridge_slave_1: left promiscuous mode [ 838.397975][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.482938][ T9167] bridge_slave_0: left allmulticast mode [ 838.489177][ T9167] bridge_slave_0: left promiscuous mode [ 838.494957][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.856030][ T55] Bluetooth: hci5: command tx timeout [ 839.486868][ T9167] ovs_ÿÃ: left promiscuous mode [ 839.765839][ T9167] ovs_: left promiscuous mode [ 839.948811][ T9167] ovs_: left promiscuous mode [ 840.137779][ T9167] tipc: Left network mode [ 840.905531][T18128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 840.935746][ T55] Bluetooth: hci5: command tx timeout [ 840.996629][T18128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 841.186941][T18128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 841.300094][T18128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 842.022887][T18128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.104307][T18128] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.366976][T18246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2917'. [ 842.623823][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.631038][ T9157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.246848][T18246] bond0: (slave bond_slave_1): Releasing backup interface [ 843.336664][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.343867][ T9161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.615015][T18128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 843.653464][T18128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 844.317091][ T9167] hsr_slave_0: left promiscuous mode [ 844.421329][ T9167] veth1_macvtap: left promiscuous mode [ 844.450098][ T9167] veth0_macvtap: left promiscuous mode [ 844.472094][ T9167] veth1_vlan: left promiscuous mode [ 844.482130][ T9167] veth0_vlan: left promiscuous mode [ 848.357941][ T9167] team0 (unregistering): Port device team_slave_0 removed [ 850.788314][T18128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.833415][T18294] ovs_ÿÃ: entered promiscuous mode [ 851.995229][T18128] veth0_vlan: entered promiscuous mode [ 852.062701][T18314] FAULT_INJECTION: forcing a failure. [ 852.062701][T18314] name failslab, interval 1, probability 0, space 0, times 0 [ 852.145792][T18314] CPU: 0 UID: 0 PID: 18314 Comm: syz.7.2930 Not tainted 6.14.0-rc3-syzkaller #0 [ 852.145827][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 852.145842][T18314] Call Trace: [ 852.145851][T18314] [ 852.145861][T18314] dump_stack_lvl+0x16c/0x1f0 [ 852.145897][T18314] should_fail_ex+0x50a/0x650 [ 852.145935][T18314] ? fs_reclaim_acquire+0xae/0x150 [ 852.145969][T18314] ? __register_sysctl_table+0xb4/0x1910 [ 852.146005][T18314] should_failslab+0xc2/0x120 [ 852.146031][T18314] __kmalloc_noprof+0xcb/0x510 [ 852.146075][T18314] __register_sysctl_table+0xb4/0x1910 [ 852.146114][T18314] ? rcu_is_watching+0x12/0xc0 [ 852.146159][T18314] ? __pfx___register_sysctl_table+0x10/0x10 [ 852.146195][T18314] ? is_module_address+0x2a/0x50 [ 852.146229][T18314] ? register_net_sysctl_sz+0x228/0x3e0 [ 852.146260][T18314] ? __asan_memcpy+0x3c/0x60 [ 852.146294][T18314] sysctl_core_net_init+0xe2/0x270 [ 852.146325][T18314] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 852.146353][T18314] ops_init+0x1df/0x5f0 [ 852.146391][T18314] setup_net+0x21f/0x860 [ 852.146427][T18314] ? __pfx_setup_net+0x10/0x10 [ 852.146459][T18314] ? down_read_killable+0xcc/0x380 [ 852.146492][T18314] ? __pfx_down_read_killable+0x10/0x10 [ 852.146522][T18314] ? __raw_spin_lock_init+0x3a/0x110 [ 852.146562][T18314] ? debug_mutex_init+0x37/0x70 [ 852.146592][T18314] copy_net_ns+0x2b4/0x6c0 [ 852.146618][T18314] create_new_namespaces+0x3ea/0xad0 [ 852.146664][T18314] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 852.146707][T18314] ksys_unshare+0x45d/0xa40 [ 852.146734][T18314] ? __pfx_ksys_unshare+0x10/0x10 [ 852.146758][T18314] ? xfd_validate_state+0x5d/0x180 [ 852.146802][T18314] __x64_sys_unshare+0x31/0x40 [ 852.146827][T18314] do_syscall_64+0xcd/0x250 [ 852.146860][T18314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.146894][T18314] RIP: 0033:0x7febc818cde9 [ 852.146914][T18314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.146937][T18314] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 852.146962][T18314] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 852.146979][T18314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 852.146994][T18314] RBP: 00007febc820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 852.147011][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.147026][T18314] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 852.147061][T18314] [ 852.493732][T18128] veth1_vlan: entered promiscuous mode [ 852.665105][T18128] veth0_macvtap: entered promiscuous mode [ 852.718042][T18128] veth1_macvtap: entered promiscuous mode [ 852.763265][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.857425][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.875399][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.887819][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.954838][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.973277][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.986046][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.998221][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.018509][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.035410][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.047458][T18128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.085178][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.122286][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.164710][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.191072][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.236763][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.315234][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.355888][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.385416][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.409304][T18128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.512987][T18128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.617246][T18128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.221757][T18128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.261352][T18128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.296299][T18128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.312562][T18128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.532461][T12179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.959387][T12179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.995144][T18359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2943'. [ 855.079740][T18360] program syz.7.2942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.093733][T18359] veth0_macvtap: left promiscuous mode [ 855.110146][T18359] macvtap0: entered allmulticast mode [ 855.245601][T12179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.300093][ T9157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.342520][ T9157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.434537][T12179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.480981][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.496077][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.076135][T12179] bridge_slave_1: left allmulticast mode [ 856.088742][T12179] bridge_slave_1: left promiscuous mode [ 856.118398][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.486382][T12179] bridge_slave_0: left allmulticast mode [ 856.508874][T12179] bridge_slave_0: left promiscuous mode [ 856.514681][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.567040][T11923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 857.605660][T11923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 857.615540][T11923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 857.635681][T11923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 857.642940][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2946'. [ 857.662727][T11923] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 857.675171][T11923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.721505][T12179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.742396][T12179] bond0 (unregistering): Released all slaves [ 859.277746][T12179] ovs_ÿÃ: left promiscuous mode [ 859.401029][T12179] ovs_: left promiscuous mode [ 859.567046][T18402] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2948'. [ 859.735977][T11923] Bluetooth: hci0: command tx timeout [ 860.298577][T18392] chnl_net:caif_netlink_parms(): no params data found [ 860.576608][T18424] FAULT_INJECTION: forcing a failure. [ 860.576608][T18424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.672799][T18424] CPU: 0 UID: 0 PID: 18424 Comm: syz.7.2950 Not tainted 6.14.0-rc3-syzkaller #0 [ 860.672833][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 860.672847][T18424] Call Trace: [ 860.672855][T18424] [ 860.672865][T18424] dump_stack_lvl+0x16c/0x1f0 [ 860.672898][T18424] should_fail_ex+0x50a/0x650 [ 860.672938][T18424] _copy_from_user+0x2e/0xd0 [ 860.672963][T18424] copy_msghdr_from_user+0x99/0x160 [ 860.672995][T18424] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 860.673037][T18424] ? get_pid_task+0xfc/0x250 [ 860.673068][T18424] ___sys_sendmsg+0xff/0x1e0 [ 860.673100][T18424] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.673161][T18424] ? __pfx_vfs_write+0x10/0x10 [ 860.673193][T18424] ? do_sys_openat2+0xb1/0x1e0 [ 860.673221][T18424] __sys_sendmsg+0x16e/0x220 [ 860.673253][T18424] ? __pfx___sys_sendmsg+0x10/0x10 [ 860.673306][T18424] do_syscall_64+0xcd/0x250 [ 860.673337][T18424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.673368][T18424] RIP: 0033:0x7febc818cde9 [ 860.673388][T18424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.673409][T18424] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.673433][T18424] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 860.673449][T18424] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 860.673470][T18424] RBP: 00007febc90bb090 R08: 0000000000000000 R09: 0000000000000000 [ 860.673485][T18424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.673500][T18424] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 860.673531][T18424] [ 861.281248][T18432] ovs_: entered promiscuous mode [ 861.286988][T18392] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.304647][T18392] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.318705][T18392] bridge_slave_0: entered allmulticast mode [ 861.327981][T18392] bridge_slave_0: entered promiscuous mode [ 861.365400][T18392] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.374430][T18392] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.391638][T18392] bridge_slave_1: entered allmulticast mode [ 861.402444][T18392] bridge_slave_1: entered promiscuous mode [ 861.569073][T12179] hsr_slave_0: left promiscuous mode [ 861.604694][T12179] hsr_slave_1: left promiscuous mode [ 861.616096][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.623583][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.680819][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.707785][T12179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.807387][T12179] veth1_macvtap: left promiscuous mode [ 861.812993][T12179] veth0_macvtap: left promiscuous mode [ 861.818666][T11923] Bluetooth: hci0: command tx timeout [ 861.835565][T12179] veth1_vlan: left promiscuous mode [ 861.840950][T12179] veth0_vlan: left promiscuous mode [ 863.759463][T12179] team0 (unregistering): Port device team_slave_1 removed [ 863.895578][T11923] Bluetooth: hci0: command tx timeout [ 863.957547][T12179] team0 (unregistering): Port device team_slave_0 removed [ 864.946124][T18470] netlink: 'syz.7.2957': attribute type 11 has an invalid length. [ 864.954033][T18470] netlink: 'syz.7.2957': attribute type 11 has an invalid length. [ 864.991264][T18470] netlink: 'syz.7.2957': attribute type 11 has an invalid length. [ 865.015491][T18470] netlink: 'syz.7.2957': attribute type 11 has an invalid length. [ 865.023409][T18470] netlink: 'syz.7.2957': attribute type 11 has an invalid length. [ 865.075486][T18470] netlink: 'syz.7.2957': attribute type 11 has an invalid length. [ 865.094295][T18470] netlink: 'syz.7.2957': attribute type 11 has an invalid length. [ 865.693038][T18392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.810942][T18392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.975596][T11923] Bluetooth: hci0: command tx timeout [ 866.088672][T18392] team0: Port device team_slave_0 added [ 866.167076][T18392] team0: Port device team_slave_1 added [ 866.253973][T18392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.282270][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.325280][T18392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.347802][T18392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.354861][T18392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.380797][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.428358][T18392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.608918][T18392] hsr_slave_0: entered promiscuous mode [ 866.615644][T18392] hsr_slave_1: entered promiscuous mode [ 866.622687][T18392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.640738][T18392] Cannot create hsr debugfs directory [ 867.286128][T18499] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2960'. [ 867.728401][T18392] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.756489][T18504] FAULT_INJECTION: forcing a failure. [ 867.756489][T18504] name failslab, interval 1, probability 0, space 0, times 0 [ 867.804341][T18504] CPU: 1 UID: 0 PID: 18504 Comm: syz.4.2962 Not tainted 6.14.0-rc3-syzkaller #0 [ 867.804377][T18504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 867.804393][T18504] Call Trace: [ 867.804400][T18504] [ 867.804411][T18504] dump_stack_lvl+0x16c/0x1f0 [ 867.804448][T18504] should_fail_ex+0x50a/0x650 [ 867.804485][T18504] ? fs_reclaim_acquire+0xae/0x150 [ 867.804519][T18504] should_failslab+0xc2/0x120 [ 867.804543][T18504] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 867.804580][T18504] ? security_inode_alloc+0x3b/0x2b0 [ 867.804611][T18504] security_inode_alloc+0x3b/0x2b0 [ 867.804639][T18504] inode_init_always_gfp+0xce4/0x1030 [ 867.804678][T18504] alloc_inode+0x82/0x230 [ 867.804701][T18504] sock_alloc+0x40/0x280 [ 867.804739][T18504] __sock_create+0xc1/0x8d0 [ 867.804771][T18504] inet_ctl_sock_create+0x96/0x230 [ 867.804806][T18504] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 867.804841][T18504] ? do_init_timer+0xc9/0x110 [ 867.804873][T18504] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 867.804899][T18504] sctp_ctrlsock_init+0x40/0xf0 [ 867.804924][T18504] ops_init+0x1df/0x5f0 [ 867.804963][T18504] setup_net+0x21f/0x860 [ 867.805000][T18504] ? __pfx_setup_net+0x10/0x10 [ 867.805032][T18504] ? down_read_killable+0xcc/0x380 [ 867.805073][T18504] ? __pfx_down_read_killable+0x10/0x10 [ 867.805105][T18504] ? __raw_spin_lock_init+0x3a/0x110 [ 867.805146][T18504] ? debug_mutex_init+0x37/0x70 [ 867.805176][T18504] copy_net_ns+0x2b4/0x6c0 [ 867.805204][T18504] create_new_namespaces+0x3ea/0xad0 [ 867.805250][T18504] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 867.805290][T18504] ksys_unshare+0x45d/0xa40 [ 867.805319][T18504] ? __pfx_ksys_unshare+0x10/0x10 [ 867.805342][T18504] ? xfd_validate_state+0x5d/0x180 [ 867.805381][T18504] __x64_sys_unshare+0x31/0x40 [ 867.805404][T18504] do_syscall_64+0xcd/0x250 [ 867.805434][T18504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.805464][T18504] RIP: 0033:0x7f322558cde9 [ 867.805483][T18504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.805504][T18504] RSP: 002b:00007f3226328038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 867.805527][T18504] RAX: ffffffffffffffda RBX: 00007f32257a5fa0 RCX: 00007f322558cde9 [ 867.805543][T18504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 867.805556][T18504] RBP: 00007f322560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 867.805570][T18504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.805584][T18504] R13: 0000000000000000 R14: 00007f32257a5fa0 R15: 00007fffb3e03f58 [ 867.805618][T18504] [ 868.064117][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.225620][T18504] socket: no more sockets [ 868.328057][T18503] openvswitch: ovs_: Dropping previously announced user features [ 868.547131][T18392] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.138186][T18392] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.157847][T18392] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.289044][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2967'. [ 870.332745][T18546] FAULT_INJECTION: forcing a failure. [ 870.332745][T18546] name failslab, interval 1, probability 0, space 0, times 0 [ 870.419369][T18546] CPU: 1 UID: 0 PID: 18546 Comm: syz.8.2967 Not tainted 6.14.0-rc3-syzkaller #0 [ 870.419408][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 870.419428][T18546] Call Trace: [ 870.419436][T18546] [ 870.419448][T18546] dump_stack_lvl+0x16c/0x1f0 [ 870.419490][T18546] should_fail_ex+0x50a/0x650 [ 870.419538][T18546] ? fs_reclaim_acquire+0xae/0x150 [ 870.419578][T18546] ? device_add+0xccf/0x1a70 [ 870.419616][T18546] should_failslab+0xc2/0x120 [ 870.419654][T18546] __kmalloc_cache_noprof+0x68/0x410 [ 870.419699][T18546] device_add+0xccf/0x1a70 [ 870.419729][T18546] ? dev_set_name+0xc8/0x100 [ 870.419761][T18546] ? __pfx_dev_set_name+0x10/0x10 [ 870.419794][T18546] ? __pfx_device_add+0x10/0x10 [ 870.419840][T18546] add_disk_fwnode+0x468/0x1320 [ 870.419880][T18546] zram_add+0x486/0x6b0 [ 870.419912][T18546] ? __pfx_zram_add+0x10/0x10 [ 870.419970][T18546] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 870.420008][T18546] ? rcu_is_watching+0x12/0xc0 [ 870.420040][T18546] ? __pfx_hot_add_show+0x10/0x10 [ 870.420073][T18546] hot_add_show+0x21/0x80 [ 870.420106][T18546] class_attr_show+0x6f/0xa0 [ 870.420137][T18546] ? __pfx_class_attr_show+0x10/0x10 [ 870.420166][T18546] sysfs_kf_seq_show+0x23e/0x410 [ 870.420204][T18546] seq_read_iter+0x4f4/0x12b0 [ 870.420250][T18546] kernfs_fop_read_iter+0x414/0x580 [ 870.420275][T18546] ? rw_verify_area+0xcf/0x680 [ 870.420307][T18546] vfs_read+0x886/0xbf0 [ 870.420344][T18546] ? __pfx_vfs_read+0x10/0x10 [ 870.420397][T18546] ksys_read+0x12b/0x250 [ 870.420427][T18546] ? __pfx_ksys_read+0x10/0x10 [ 870.420471][T18546] do_syscall_64+0xcd/0x250 [ 870.420504][T18546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.420538][T18546] RIP: 0033:0x7fe50eb8cde9 [ 870.420559][T18546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.420583][T18546] RSP: 002b:00007fe50fa33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 870.420608][T18546] RAX: ffffffffffffffda RBX: 00007fe50eda5fa0 RCX: 00007fe50eb8cde9 [ 870.420626][T18546] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000006 [ 870.420650][T18546] RBP: 00007fe50ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 870.420666][T18546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.420681][T18546] R13: 0000000000000000 R14: 00007fe50eda5fa0 R15: 00007ffe95b27a78 [ 870.420718][T18546] [ 870.680086][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.686480][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.727897][T18548] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input15 [ 870.921840][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2969'. [ 871.529009][T18392] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 871.588433][T18392] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 871.630260][T18392] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 871.700664][T18392] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 872.092592][T18392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.126339][T18392] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.149776][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.157040][ T9157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.498961][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.506146][ T9157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.602630][T18392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 872.695522][T18392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.167349][T18593] FAULT_INJECTION: forcing a failure. [ 873.167349][T18593] name failslab, interval 1, probability 0, space 0, times 0 [ 873.236140][T18593] CPU: 1 UID: 0 PID: 18593 Comm: syz.8.2973 Not tainted 6.14.0-rc3-syzkaller #0 [ 873.236177][T18593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 873.236192][T18593] Call Trace: [ 873.236200][T18593] [ 873.236212][T18593] dump_stack_lvl+0x16c/0x1f0 [ 873.236250][T18593] should_fail_ex+0x50a/0x650 [ 873.236288][T18593] ? fs_reclaim_acquire+0xae/0x150 [ 873.236325][T18593] should_failslab+0xc2/0x120 [ 873.236349][T18593] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 873.236388][T18593] ? __kernfs_new_node+0xd3/0x890 [ 873.236430][T18593] __kernfs_new_node+0xd3/0x890 [ 873.236468][T18593] ? __pfx___kernfs_new_node+0x10/0x10 [ 873.236516][T18593] ? __pfx___lock_acquire+0x10/0x10 [ 873.236557][T18593] kernfs_new_node+0x186/0x240 [ 873.236600][T18593] __kernfs_create_file+0x53/0x350 [ 873.236631][T18593] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 873.236670][T18593] sysfs_create_file_ns+0x13e/0x1d0 [ 873.236701][T18593] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 873.236732][T18593] ? down_read+0xc9/0x330 [ 873.236773][T18593] ? __pfx___up_read+0x10/0x10 [ 873.236812][T18593] ? kobject_put+0xab/0x5a0 [ 873.236850][T18593] device_create_file+0xf2/0x1e0 [ 873.236890][T18593] device_add+0x2c0/0x1a70 [ 873.236927][T18593] ? __pfx_device_add+0x10/0x10 [ 873.236957][T18593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 873.236998][T18593] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 873.237036][T18593] wiphy_register+0x1cab/0x2860 [ 873.237068][T18593] ? __pfx__dev_printk+0x10/0x10 [ 873.237102][T18593] ? __pfx_wiphy_register+0x10/0x10 [ 873.237146][T18593] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 873.237182][T18593] ieee80211_register_hw+0x2455/0x4060 [ 873.237228][T18593] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 873.237258][T18593] ? net_generic+0xea/0x2a0 [ 873.237289][T18593] ? lockdep_init_map_type+0x16d/0x7d0 [ 873.237327][T18593] ? __asan_memset+0x23/0x50 [ 873.237358][T18593] ? __hrtimer_init+0x106/0x2c0 [ 873.237398][T18593] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 873.237455][T18593] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 873.237499][T18593] hwsim_new_radio_nl+0xb42/0x12b0 [ 873.237536][T18593] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 873.237582][T18593] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 873.237619][T18593] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 873.237665][T18593] genl_family_rcv_msg_doit+0x202/0x2f0 [ 873.237703][T18593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 873.237737][T18593] ? trace_cap_capable+0x1a2/0x210 [ 873.237779][T18593] ? bpf_lsm_capable+0x9/0x10 [ 873.237805][T18593] ? security_capable+0x7e/0x260 [ 873.237846][T18593] ? ns_capable+0xd7/0x110 [ 873.237884][T18593] genl_rcv_msg+0x565/0x800 [ 873.237923][T18593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.237959][T18593] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 873.238007][T18593] netlink_rcv_skb+0x16b/0x440 [ 873.238038][T18593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.238076][T18593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.238125][T18593] ? down_read+0xc9/0x330 [ 873.238156][T18593] ? __pfx_down_read+0x10/0x10 [ 873.238188][T18593] ? netlink_deliver_tap+0x1ae/0xd30 [ 873.238225][T18593] genl_rcv+0x28/0x40 [ 873.238255][T18593] netlink_unicast+0x53c/0x7f0 [ 873.238291][T18593] ? __pfx_netlink_unicast+0x10/0x10 [ 873.238324][T18593] ? __phys_addr_symbol+0x30/0x80 [ 873.238350][T18593] ? __check_object_size+0x488/0x710 [ 873.238380][T18593] netlink_sendmsg+0x8b8/0xd70 [ 873.238418][T18593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.238467][T18593] ____sys_sendmsg+0xaaf/0xc90 [ 873.238493][T18593] ? copy_msghdr_from_user+0x10b/0x160 [ 873.238522][T18593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.238567][T18593] ___sys_sendmsg+0x135/0x1e0 [ 873.238599][T18593] ? __pfx___lock_acquire+0x10/0x10 [ 873.238634][T18593] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.238687][T18593] ? __pfx_lock_release+0x10/0x10 [ 873.238735][T18593] ? __pfx_wake_up_bit+0x10/0x10 [ 873.238773][T18593] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 873.238812][T18593] __sys_sendmsg+0x16e/0x220 [ 873.238848][T18593] ? __pfx___sys_sendmsg+0x10/0x10 [ 873.238882][T18593] ? handle_softirqs+0x5bb/0x8f0 [ 873.238915][T18593] ? lockdep_softirqs_on+0x221/0x340 [ 873.238962][T18593] ? __pfx_handle_softirqs+0x10/0x10 [ 873.239007][T18593] do_syscall_64+0xcd/0x250 [ 873.239040][T18593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.239075][T18593] RIP: 0033:0x7fe50eb8cde9 [ 873.239096][T18593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.239120][T18593] RSP: 002b:00007fe50fa33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.239145][T18593] RAX: ffffffffffffffda RBX: 00007fe50eda5fa0 RCX: 00007fe50eb8cde9 [ 873.239162][T18593] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 873.239178][T18593] RBP: 00007fe50ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 873.239194][T18593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.239210][T18593] R13: 0000000000000000 R14: 00007fe50eda5fa0 R15: 00007ffe95b27a78 [ 873.239246][T18593] [ 874.400834][T18392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.105356][T18392] veth0_vlan: entered promiscuous mode [ 875.223852][T18392] veth1_vlan: entered promiscuous mode [ 875.332168][T18392] veth0_macvtap: entered promiscuous mode [ 875.363976][T18392] veth1_macvtap: entered promiscuous mode [ 875.435693][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.498056][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.528278][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.561790][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.572982][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.591732][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.630086][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.651732][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.670399][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.682904][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.702938][T18392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.896777][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.969537][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.005840][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.033474][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.064922][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.103390][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.132818][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.162838][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.195166][T18392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.230789][T18392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.261963][T18392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.604127][T18392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.640325][T18392] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.674590][T18392] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.695486][T18392] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.708606][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2978'. [ 876.965987][T18649] zswap: compressor not available [ 877.633260][ T9154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.685609][ T9154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.848228][ T3423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.901831][ T3423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.934016][T18648] ptrace attach of "./syz-executor exec"[18020] was attempted by "./syz-executor exec"[18648] [ 878.275297][T18677] FAULT_INJECTION: forcing a failure. [ 878.275297][T18677] name failslab, interval 1, probability 0, space 0, times 0 [ 878.300865][T18677] CPU: 0 UID: 0 PID: 18677 Comm: syz.5.2945 Not tainted 6.14.0-rc3-syzkaller #0 [ 878.300904][T18677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 878.300920][T18677] Call Trace: [ 878.300929][T18677] [ 878.300941][T18677] dump_stack_lvl+0x16c/0x1f0 [ 878.300979][T18677] should_fail_ex+0x50a/0x650 [ 878.301017][T18677] ? fs_reclaim_acquire+0xae/0x150 [ 878.301052][T18677] ? __register_sysctl_table+0xb4/0x1910 [ 878.301098][T18677] should_failslab+0xc2/0x120 [ 878.301122][T18677] __kmalloc_noprof+0xcb/0x510 [ 878.301166][T18677] __register_sysctl_table+0xb4/0x1910 [ 878.301205][T18677] ? rcu_is_watching+0x12/0xc0 [ 878.301234][T18677] ? __pfx___register_sysctl_table+0x10/0x10 [ 878.301269][T18677] ? is_module_address+0x2a/0x50 [ 878.301302][T18677] ? register_net_sysctl_sz+0x228/0x3e0 [ 878.301331][T18677] ? __asan_memcpy+0x3c/0x60 [ 878.301367][T18677] sysctl_core_net_init+0xe2/0x270 [ 878.301399][T18677] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 878.301428][T18677] ops_init+0x1df/0x5f0 [ 878.301467][T18677] setup_net+0x21f/0x860 [ 878.301505][T18677] ? __pfx_setup_net+0x10/0x10 [ 878.301538][T18677] ? down_read_killable+0xcc/0x380 [ 878.301567][T18677] ? __pfx_down_read_killable+0x10/0x10 [ 878.301598][T18677] ? __raw_spin_lock_init+0x3a/0x110 [ 878.301638][T18677] ? debug_mutex_init+0x37/0x70 [ 878.301668][T18677] copy_net_ns+0x2b4/0x6c0 [ 878.301695][T18677] create_new_namespaces+0x3ea/0xad0 [ 878.301740][T18677] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 878.301781][T18677] ksys_unshare+0x45d/0xa40 [ 878.301808][T18677] ? __pfx_ksys_unshare+0x10/0x10 [ 878.301831][T18677] ? xfd_validate_state+0x5d/0x180 [ 878.301877][T18677] __x64_sys_unshare+0x31/0x40 [ 878.301901][T18677] do_syscall_64+0xcd/0x250 [ 878.301934][T18677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.301967][T18677] RIP: 0033:0x7f6a2bb8cde9 [ 878.301989][T18677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.302013][T18677] RSP: 002b:00007f6a2ca07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 878.302039][T18677] RAX: ffffffffffffffda RBX: 00007f6a2bda5fa0 RCX: 00007f6a2bb8cde9 [ 878.302057][T18677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 878.302081][T18677] RBP: 00007f6a2bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 878.302098][T18677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.302113][T18677] R13: 0000000000000000 R14: 00007f6a2bda5fa0 R15: 00007ffde1403cf8 [ 878.302148][T18677] [ 878.919466][T18682] sp0: Synchronizing with TNC [ 879.019962][T18687] sp0: Found TNC [ 880.593129][T18732] netlink: 1204 bytes leftover after parsing attributes in process `syz.7.2988'. [ 882.147156][T18749] FAULT_INJECTION: forcing a failure. [ 882.147156][T18749] name failslab, interval 1, probability 0, space 0, times 0 [ 882.194638][T18749] CPU: 0 UID: 0 PID: 18749 Comm: syz.4.2992 Not tainted 6.14.0-rc3-syzkaller #0 [ 882.194676][T18749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 882.194692][T18749] Call Trace: [ 882.194701][T18749] [ 882.194713][T18749] dump_stack_lvl+0x16c/0x1f0 [ 882.194751][T18749] should_fail_ex+0x50a/0x650 [ 882.194788][T18749] ? fs_reclaim_acquire+0xae/0x150 [ 882.194823][T18749] ? devinet_init_net+0x56/0x900 [ 882.194852][T18749] should_failslab+0xc2/0x120 [ 882.194876][T18749] __kmalloc_cache_noprof+0x68/0x410 [ 882.194910][T18749] ? __pfx_proc_create_net_data+0x10/0x10 [ 882.194959][T18749] ? __pfx_devinet_init_net+0x10/0x10 [ 882.194992][T18749] devinet_init_net+0x56/0x900 [ 882.195028][T18749] ? __pfx_devinet_init_net+0x10/0x10 [ 882.195058][T18749] ops_init+0x1df/0x5f0 [ 882.195098][T18749] setup_net+0x21f/0x860 [ 882.195135][T18749] ? __pfx_setup_net+0x10/0x10 [ 882.195168][T18749] ? down_read_killable+0xcc/0x380 [ 882.195200][T18749] ? __pfx_down_read_killable+0x10/0x10 [ 882.195232][T18749] ? __raw_spin_lock_init+0x3a/0x110 [ 882.195272][T18749] ? debug_mutex_init+0x37/0x70 [ 882.195307][T18749] copy_net_ns+0x2b4/0x6c0 [ 882.195330][T18749] create_new_namespaces+0x3ea/0xad0 [ 882.195372][T18749] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 882.195408][T18749] ksys_unshare+0x45d/0xa40 [ 882.195430][T18749] ? __pfx_ksys_unshare+0x10/0x10 [ 882.195453][T18749] ? xfd_validate_state+0x5d/0x180 [ 882.195494][T18749] __x64_sys_unshare+0x31/0x40 [ 882.195516][T18749] do_syscall_64+0xcd/0x250 [ 882.195546][T18749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.195578][T18749] RIP: 0033:0x7f322558cde9 [ 882.195598][T18749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.195618][T18749] RSP: 002b:00007f3226328038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 882.195642][T18749] RAX: ffffffffffffffda RBX: 00007f32257a5fa0 RCX: 00007f322558cde9 [ 882.195659][T18749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 882.195672][T18749] RBP: 00007f322560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 882.195685][T18749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.195700][T18749] R13: 0000000000000000 R14: 00007f32257a5fa0 R15: 00007fffb3e03f58 [ 882.195732][T18749] [ 884.293144][T18777] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 885.351116][T18782] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 886.355605][T18811] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3007'. [ 886.466065][T18811] veth0_macvtap: left promiscuous mode [ 886.512481][T18811] macvtap0: entered allmulticast mode [ 887.072246][T18818] openvswitch: ovs_: Dropping previously announced user features [ 887.758341][T18829] FAULT_INJECTION: forcing a failure. [ 887.758341][T18829] name failslab, interval 1, probability 0, space 0, times 0 [ 887.829358][T18829] CPU: 1 UID: 0 PID: 18829 Comm: syz.4.3012 Not tainted 6.14.0-rc3-syzkaller #0 [ 887.829395][T18829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 887.829410][T18829] Call Trace: [ 887.829419][T18829] [ 887.829430][T18829] dump_stack_lvl+0x16c/0x1f0 [ 887.829477][T18829] should_fail_ex+0x50a/0x650 [ 887.829517][T18829] ? fs_reclaim_acquire+0xae/0x150 [ 887.829553][T18829] should_failslab+0xc2/0x120 [ 887.829578][T18829] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 887.829615][T18829] ? __kernfs_new_node+0xd3/0x890 [ 887.829656][T18829] __kernfs_new_node+0xd3/0x890 [ 887.829691][T18829] ? __pfx___kernfs_new_node+0x10/0x10 [ 887.829722][T18829] ? __pfx___lock_acquire+0x10/0x10 [ 887.829764][T18829] ? lock_acquire.part.0+0x11b/0x380 [ 887.829795][T18829] ? find_held_lock+0x2d/0x110 [ 887.829833][T18829] kernfs_new_node+0x186/0x240 [ 887.829875][T18829] kernfs_create_link+0xcc/0x240 [ 887.829906][T18829] sysfs_do_create_link_sd+0x90/0x140 [ 887.829941][T18829] sysfs_create_link+0x61/0xc0 [ 887.829972][T18829] device_add+0x50c/0x1a70 [ 887.830009][T18829] ? __pfx_device_add+0x10/0x10 [ 887.830040][T18829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.830080][T18829] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 887.830118][T18829] wiphy_register+0x1cab/0x2860 [ 887.830150][T18829] ? __pfx__dev_printk+0x10/0x10 [ 887.830185][T18829] ? __pfx_wiphy_register+0x10/0x10 [ 887.830228][T18829] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 887.830264][T18829] ieee80211_register_hw+0x2455/0x4060 [ 887.830310][T18829] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 887.830340][T18829] ? net_generic+0xea/0x2a0 [ 887.830372][T18829] ? lockdep_init_map_type+0x16d/0x7d0 [ 887.830411][T18829] ? __asan_memset+0x23/0x50 [ 887.830443][T18829] ? __hrtimer_init+0x106/0x2c0 [ 887.830489][T18829] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 887.830547][T18829] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 887.830592][T18829] hwsim_new_radio_nl+0xb42/0x12b0 [ 887.830627][T18829] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 887.830673][T18829] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 887.830711][T18829] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 887.830757][T18829] genl_family_rcv_msg_doit+0x202/0x2f0 [ 887.830796][T18829] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 887.830829][T18829] ? trace_cap_capable+0x1a2/0x210 [ 887.830865][T18829] ? bpf_lsm_capable+0x9/0x10 [ 887.830890][T18829] ? security_capable+0x7e/0x260 [ 887.830930][T18829] ? ns_capable+0xd7/0x110 [ 887.830968][T18829] genl_rcv_msg+0x565/0x800 [ 887.831012][T18829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.831058][T18829] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 887.831117][T18829] netlink_rcv_skb+0x16b/0x440 [ 887.831155][T18829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.831199][T18829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 887.831247][T18829] ? down_read+0xc9/0x330 [ 887.831278][T18829] ? __pfx_down_read+0x10/0x10 [ 887.831310][T18829] ? netlink_deliver_tap+0x1ae/0xd30 [ 887.831347][T18829] genl_rcv+0x28/0x40 [ 887.831377][T18829] netlink_unicast+0x53c/0x7f0 [ 887.831413][T18829] ? __pfx_netlink_unicast+0x10/0x10 [ 887.831447][T18829] ? __phys_addr_symbol+0x30/0x80 [ 887.831478][T18829] ? __check_object_size+0x488/0x710 [ 887.831508][T18829] netlink_sendmsg+0x8b8/0xd70 [ 887.831547][T18829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.831588][T18829] ____sys_sendmsg+0xaaf/0xc90 [ 887.831613][T18829] ? copy_msghdr_from_user+0x10b/0x160 [ 887.831644][T18829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.831683][T18829] ___sys_sendmsg+0x135/0x1e0 [ 887.831719][T18829] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.831746][T18829] ? __pfx_aa_sk_perm+0x10/0x10 [ 887.831802][T18829] ? do_futex+0x123/0x350 [ 887.831837][T18829] __sys_sendmsg+0x16e/0x220 [ 887.831871][T18829] ? __pfx___sys_sendmsg+0x10/0x10 [ 887.831903][T18829] ? __x64_sys_futex+0x1e1/0x4c0 [ 887.831957][T18829] do_syscall_64+0xcd/0x250 [ 887.831990][T18829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.832023][T18829] RIP: 0033:0x7f322558cde9 [ 887.832044][T18829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.832067][T18829] RSP: 002b:00007f3226328038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.832092][T18829] RAX: ffffffffffffffda RBX: 00007f32257a5fa0 RCX: 00007f322558cde9 [ 887.832109][T18829] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 887.832125][T18829] RBP: 00007f322560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 887.832140][T18829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.832155][T18829] R13: 0000000000000000 R14: 00007f32257a5fa0 R15: 00007fffb3e03f58 [ 887.832191][T18829] [ 888.951223][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3009'. [ 890.815982][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3018'. [ 890.892361][T18888] veth0_macvtap: left promiscuous mode [ 890.972626][T18888] macvtap0: entered allmulticast mode [ 891.202310][T18895] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.3019'. [ 891.608004][T18904] misc userio: No port type given on /dev/userio [ 893.845740][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3032'. [ 893.961711][T18958] can: request_module (can-proto-3) failed. [ 895.077223][T18996] ovs_: entered promiscuous mode [ 895.516444][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3036'. [ 895.963397][T19013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3038'. [ 897.126754][T19043] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.3041'. [ 897.766101][T19053] FAULT_INJECTION: forcing a failure. [ 897.766101][T19053] name failslab, interval 1, probability 0, space 0, times 0 [ 897.942264][T19053] CPU: 0 UID: 0 PID: 19053 Comm: syz.4.3042 Not tainted 6.14.0-rc3-syzkaller #0 [ 897.942302][T19053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 897.942318][T19053] Call Trace: [ 897.942327][T19053] [ 897.942338][T19053] dump_stack_lvl+0x16c/0x1f0 [ 897.942377][T19053] should_fail_ex+0x50a/0x650 [ 897.942415][T19053] ? fs_reclaim_acquire+0xae/0x150 [ 897.942452][T19053] should_failslab+0xc2/0x120 [ 897.942477][T19053] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 897.942514][T19053] ? __kernfs_new_node+0xd3/0x890 [ 897.942554][T19053] __kernfs_new_node+0xd3/0x890 [ 897.942590][T19053] ? __pfx___kernfs_new_node+0x10/0x10 [ 897.942621][T19053] ? __pfx_lock_release+0x10/0x10 [ 897.942656][T19053] ? kernfs_add_one+0x39d/0x520 [ 897.942704][T19053] ? up_write+0x1b2/0x520 [ 897.942745][T19053] kernfs_new_node+0x186/0x240 [ 897.942800][T19053] __kernfs_create_file+0x53/0x350 [ 897.942832][T19053] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 897.942873][T19053] internal_create_group+0x56c/0xf10 [ 897.942915][T19053] ? __pfx_internal_create_group+0x10/0x10 [ 897.942955][T19053] ? kernfs_create_link+0x1bd/0x240 [ 897.942988][T19053] internal_create_groups+0x9d/0x150 [ 897.943025][T19053] device_add+0x6d3/0x1a70 [ 897.943062][T19053] ? __pfx_device_add+0x10/0x10 [ 897.943093][T19053] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 897.943133][T19053] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 897.943171][T19053] wiphy_register+0x1cab/0x2860 [ 897.943204][T19053] ? __pfx__dev_printk+0x10/0x10 [ 897.943237][T19053] ? __pfx_wiphy_register+0x10/0x10 [ 897.943282][T19053] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 897.943319][T19053] ieee80211_register_hw+0x2455/0x4060 [ 897.943365][T19053] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 897.943395][T19053] ? net_generic+0xea/0x2a0 [ 897.943428][T19053] ? lockdep_init_map_type+0x16d/0x7d0 [ 897.943466][T19053] ? __asan_memset+0x23/0x50 [ 897.943499][T19053] ? __hrtimer_init+0x106/0x2c0 [ 897.943538][T19053] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 897.943595][T19053] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 897.943641][T19053] hwsim_new_radio_nl+0xb42/0x12b0 [ 897.943679][T19053] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 897.943725][T19053] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 897.943774][T19053] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 897.943822][T19053] genl_family_rcv_msg_doit+0x202/0x2f0 [ 897.943863][T19053] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 897.943900][T19053] ? trace_cap_capable+0x1a2/0x210 [ 897.943936][T19053] ? bpf_lsm_capable+0x9/0x10 [ 897.943961][T19053] ? security_capable+0x7e/0x260 [ 897.944000][T19053] ? ns_capable+0xd7/0x110 [ 897.944039][T19053] genl_rcv_msg+0x565/0x800 [ 897.944078][T19053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 897.944114][T19053] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 897.944152][T19053] ? __pfx___lock_acquire+0x10/0x10 [ 897.944193][T19053] netlink_rcv_skb+0x16b/0x440 [ 897.944224][T19053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 897.944261][T19053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 897.944309][T19053] ? down_read+0xc9/0x330 [ 897.944341][T19053] ? __pfx_down_read+0x10/0x10 [ 897.944373][T19053] ? netlink_deliver_tap+0x1ae/0xd30 [ 897.944433][T19053] genl_rcv+0x28/0x40 [ 897.944465][T19053] netlink_unicast+0x53c/0x7f0 [ 897.944503][T19053] ? __pfx_netlink_unicast+0x10/0x10 [ 897.944535][T19053] ? __phys_addr_symbol+0x30/0x80 [ 897.944561][T19053] ? __check_object_size+0x488/0x710 [ 897.944591][T19053] netlink_sendmsg+0x8b8/0xd70 [ 897.944629][T19053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.944676][T19053] ____sys_sendmsg+0xaaf/0xc90 [ 897.944704][T19053] ? copy_msghdr_from_user+0x10b/0x160 [ 897.944739][T19053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.944781][T19053] ? try_to_wake_up+0x158/0x1490 [ 897.944825][T19053] ___sys_sendmsg+0x135/0x1e0 [ 897.944864][T19053] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.944934][T19053] ? do_futex+0x123/0x350 [ 897.944972][T19053] __sys_sendmsg+0x16e/0x220 [ 897.945007][T19053] ? __pfx___sys_sendmsg+0x10/0x10 [ 897.945041][T19053] ? __x64_sys_futex+0x1e1/0x4c0 [ 897.945093][T19053] do_syscall_64+0xcd/0x250 [ 897.945150][T19053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.945186][T19053] RIP: 0033:0x7f322558cde9 [ 897.945209][T19053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.945236][T19053] RSP: 002b:00007f3226328038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.945261][T19053] RAX: ffffffffffffffda RBX: 00007f32257a5fa0 RCX: 00007f322558cde9 [ 897.945279][T19053] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 897.945300][T19053] RBP: 00007f322560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 897.945315][T19053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.945329][T19053] R13: 0000000000000000 R14: 00007f32257a5fa0 R15: 00007fffb3e03f58 [ 897.945359][T19053] [ 898.420224][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.811348][T19084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3045'. [ 899.989986][T19084] veth0_macvtap: left promiscuous mode [ 900.026756][T19084] macvtap0: entered allmulticast mode [ 900.814908][T19100] ovs_ÿÃ: entered promiscuous mode [ 901.026171][T19103] FAULT_INJECTION: forcing a failure. [ 901.026171][T19103] name failslab, interval 1, probability 0, space 0, times 0 [ 901.092792][T19103] CPU: 0 UID: 0 PID: 19103 Comm: syz.7.3047 Not tainted 6.14.0-rc3-syzkaller #0 [ 901.092819][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 901.092830][T19103] Call Trace: [ 901.092836][T19103] [ 901.092846][T19103] dump_stack_lvl+0x16c/0x1f0 [ 901.092877][T19103] should_fail_ex+0x50a/0x650 [ 901.092906][T19103] ? fs_reclaim_acquire+0xae/0x150 [ 901.092935][T19103] should_failslab+0xc2/0x120 [ 901.092956][T19103] __kmalloc_node_noprof+0xd1/0x510 [ 901.092989][T19103] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 901.093024][T19103] __kvmalloc_node_noprof+0xad/0x1a0 [ 901.093056][T19103] bucket_table_alloc.isra.0+0x86/0x460 [ 901.093095][T19103] rhashtable_init_noprof+0x41a/0x7e0 [ 901.093127][T19103] ? __init_waitqueue_head+0xca/0x150 [ 901.093157][T19103] rhltable_init_noprof+0x20/0x60 [ 901.093191][T19103] sta_info_init+0x5f/0x160 [ 901.093217][T19103] ieee80211_alloc_hw_nm+0x840/0x2260 [ 901.093246][T19103] ? __local_bh_enable_ip+0xa4/0x120 [ 901.093293][T19103] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 901.093341][T19103] ? __asan_memset+0x23/0x50 [ 901.093372][T19103] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 901.093415][T19103] hwsim_new_radio_nl+0xb42/0x12b0 [ 901.093450][T19103] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 901.093492][T19103] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 901.093527][T19103] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 901.093569][T19103] genl_family_rcv_msg_doit+0x202/0x2f0 [ 901.093604][T19103] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 901.093636][T19103] ? trace_cap_capable+0x1a2/0x210 [ 901.093669][T19103] ? bpf_lsm_capable+0x9/0x10 [ 901.093693][T19103] ? security_capable+0x7e/0x260 [ 901.093729][T19103] ? ns_capable+0xd7/0x110 [ 901.093764][T19103] genl_rcv_msg+0x565/0x800 [ 901.093801][T19103] ? __pfx_genl_rcv_msg+0x10/0x10 [ 901.093835][T19103] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 901.093877][T19103] netlink_rcv_skb+0x16b/0x440 [ 901.093905][T19103] ? __pfx_genl_rcv_msg+0x10/0x10 [ 901.093939][T19103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 901.093983][T19103] ? down_read+0xc9/0x330 [ 901.094012][T19103] ? __pfx_down_read+0x10/0x10 [ 901.094038][T19103] ? netlink_deliver_tap+0x1ae/0xd30 [ 901.094069][T19103] genl_rcv+0x28/0x40 [ 901.094095][T19103] netlink_unicast+0x53c/0x7f0 [ 901.094124][T19103] ? __pfx_netlink_unicast+0x10/0x10 [ 901.094152][T19103] ? __phys_addr_symbol+0x30/0x80 [ 901.094174][T19103] ? __check_object_size+0x488/0x710 [ 901.094199][T19103] netlink_sendmsg+0x8b8/0xd70 [ 901.094230][T19103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.094274][T19103] ____sys_sendmsg+0xaaf/0xc90 [ 901.094297][T19103] ? copy_msghdr_from_user+0x10b/0x160 [ 901.094328][T19103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.094360][T19103] ? get_pid_task+0xfc/0x250 [ 901.094386][T19103] ___sys_sendmsg+0x135/0x1e0 [ 901.094417][T19103] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.094480][T19103] ? __pfx_vfs_write+0x10/0x10 [ 901.094507][T19103] ? do_sys_openat2+0xb1/0x1e0 [ 901.094531][T19103] __sys_sendmsg+0x16e/0x220 [ 901.094558][T19103] ? __pfx___sys_sendmsg+0x10/0x10 [ 901.094603][T19103] do_syscall_64+0xcd/0x250 [ 901.094628][T19103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.094655][T19103] RIP: 0033:0x7febc818cde9 [ 901.094670][T19103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.094689][T19103] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.094709][T19103] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 901.094723][T19103] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 901.094735][T19103] RBP: 00007febc90bb090 R08: 0000000000000000 R09: 0000000000000000 [ 901.094748][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 901.094760][T19103] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 901.094786][T19103] [ 907.356616][T19170] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3063'. [ 907.637159][T19190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3065'. [ 907.706463][T19190] veth0_macvtap: left promiscuous mode [ 907.719160][T19190] macvtap0: entered allmulticast mode [ 908.614844][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3067'. [ 909.066972][T19203] random: crng reseeded on system resumption [ 912.126196][T19246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3081'. [ 912.377272][T19251] FAULT_INJECTION: forcing a failure. [ 912.377272][T19251] name failslab, interval 1, probability 0, space 0, times 0 [ 912.445894][T19251] CPU: 1 UID: 0 PID: 19251 Comm: syz.8.3082 Not tainted 6.14.0-rc3-syzkaller #0 [ 912.445931][T19251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 912.445946][T19251] Call Trace: [ 912.445954][T19251] [ 912.445965][T19251] dump_stack_lvl+0x16c/0x1f0 [ 912.446002][T19251] should_fail_ex+0x50a/0x650 [ 912.446040][T19251] ? fs_reclaim_acquire+0xae/0x150 [ 912.446075][T19251] should_failslab+0xc2/0x120 [ 912.446099][T19251] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 912.446136][T19251] ? __kernfs_new_node+0xd3/0x890 [ 912.446176][T19251] __kernfs_new_node+0xd3/0x890 [ 912.446219][T19251] ? __pfx___kernfs_new_node+0x10/0x10 [ 912.446253][T19251] ? __pfx_lock_release+0x10/0x10 [ 912.446288][T19251] ? kernfs_add_one+0x39d/0x520 [ 912.446328][T19251] ? lock_acquire.part.0+0x11b/0x380 [ 912.446361][T19251] ? find_held_lock+0x2d/0x110 [ 912.446399][T19251] kernfs_new_node+0x186/0x240 [ 912.446442][T19251] kernfs_create_link+0xcc/0x240 [ 912.446472][T19251] sysfs_do_create_link_sd+0x90/0x140 [ 912.446508][T19251] sysfs_create_link+0x61/0xc0 [ 912.446539][T19251] device_add+0x593/0x1a70 [ 912.446583][T19251] ? __pfx_device_add+0x10/0x10 [ 912.446616][T19251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 912.446659][T19251] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 912.446697][T19251] wiphy_register+0x1cab/0x2860 [ 912.446730][T19251] ? __pfx__dev_printk+0x10/0x10 [ 912.446765][T19251] ? __pfx_wiphy_register+0x10/0x10 [ 912.446810][T19251] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 912.446847][T19251] ieee80211_register_hw+0x2455/0x4060 [ 912.446893][T19251] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 912.446927][T19251] ? net_generic+0xea/0x2a0 [ 912.446958][T19251] ? lockdep_init_map_type+0x16d/0x7d0 [ 912.446991][T19251] ? __asan_memset+0x23/0x50 [ 912.447021][T19251] ? __hrtimer_init+0x106/0x2c0 [ 912.447062][T19251] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 912.447118][T19251] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 912.447162][T19251] hwsim_new_radio_nl+0xb42/0x12b0 [ 912.447198][T19251] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 912.447244][T19251] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 912.447282][T19251] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 912.447327][T19251] genl_family_rcv_msg_doit+0x202/0x2f0 [ 912.447366][T19251] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 912.447401][T19251] ? trace_cap_capable+0x1a2/0x210 [ 912.447438][T19251] ? bpf_lsm_capable+0x9/0x10 [ 912.447463][T19251] ? security_capable+0x7e/0x260 [ 912.447503][T19251] ? ns_capable+0xd7/0x110 [ 912.447543][T19251] genl_rcv_msg+0x565/0x800 [ 912.447592][T19251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.447630][T19251] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 912.447676][T19251] netlink_rcv_skb+0x16b/0x440 [ 912.447708][T19251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 912.447745][T19251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 912.447794][T19251] ? down_read+0xc9/0x330 [ 912.447825][T19251] ? __pfx_down_read+0x10/0x10 [ 912.447859][T19251] ? netlink_deliver_tap+0x1ae/0xd30 [ 912.447897][T19251] genl_rcv+0x28/0x40 [ 912.447928][T19251] netlink_unicast+0x53c/0x7f0 [ 912.447965][T19251] ? __pfx_netlink_unicast+0x10/0x10 [ 912.447999][T19251] ? __phys_addr_symbol+0x30/0x80 [ 912.448025][T19251] ? __check_object_size+0x488/0x710 [ 912.448056][T19251] netlink_sendmsg+0x8b8/0xd70 [ 912.448094][T19251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.448139][T19251] ____sys_sendmsg+0xaaf/0xc90 [ 912.448168][T19251] ? copy_msghdr_from_user+0x10b/0x160 [ 912.448202][T19251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.448248][T19251] ___sys_sendmsg+0x135/0x1e0 [ 912.448286][T19251] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.448316][T19251] ? __pfx_aa_sk_perm+0x10/0x10 [ 912.448381][T19251] ? do_futex+0x123/0x350 [ 912.448419][T19251] __sys_sendmsg+0x16e/0x220 [ 912.448454][T19251] ? __pfx___sys_sendmsg+0x10/0x10 [ 912.448488][T19251] ? __x64_sys_futex+0x1e1/0x4c0 [ 912.448542][T19251] do_syscall_64+0xcd/0x250 [ 912.448581][T19251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.448618][T19251] RIP: 0033:0x7fe50eb8cde9 [ 912.448639][T19251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.448664][T19251] RSP: 002b:00007fe50fa33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.448690][T19251] RAX: ffffffffffffffda RBX: 00007fe50eda5fa0 RCX: 00007fe50eb8cde9 [ 912.448707][T19251] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 912.448723][T19251] RBP: 00007fe50ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 912.448739][T19251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.448755][T19251] R13: 0000000000000000 R14: 00007fe50eda5fa0 R15: 00007ffe95b27a78 [ 912.448791][T19251] [ 914.423375][T19264] openvswitch: ovs_: Dropping previously announced user features [ 915.036535][T19276] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.3089'. [ 915.144572][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 915.346126][T19284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3091'. [ 915.461154][T19288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3092'. [ 915.856462][T19298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3093'. [ 916.201860][T19306] random: crng reseeded on system resumption [ 916.766033][T19313] FAULT_INJECTION: forcing a failure. [ 916.766033][T19313] name failslab, interval 1, probability 0, space 0, times 0 [ 916.798689][T19311] MTRR 1 not used [ 916.827080][T19313] CPU: 0 UID: 0 PID: 19313 Comm: syz.5.3099 Not tainted 6.14.0-rc3-syzkaller #0 [ 916.827117][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 916.827134][T19313] Call Trace: [ 916.827142][T19313] [ 916.827153][T19313] dump_stack_lvl+0x16c/0x1f0 [ 916.827190][T19313] should_fail_ex+0x50a/0x650 [ 916.827228][T19313] ? fs_reclaim_acquire+0xae/0x150 [ 916.827270][T19313] should_failslab+0xc2/0x120 [ 916.827294][T19313] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 916.827334][T19313] ? security_file_alloc+0x34/0x2b0 [ 916.827371][T19313] security_file_alloc+0x34/0x2b0 [ 916.827403][T19313] init_file+0x93/0x4c0 [ 916.827428][T19313] alloc_empty_file+0x91/0x1e0 [ 916.827455][T19313] path_openat+0xe1/0x2d80 [ 916.827486][T19313] ? hlock_class+0x4e/0x130 [ 916.827512][T19313] ? __lock_acquire+0x15a9/0x3c40 [ 916.827555][T19313] ? __pfx_path_openat+0x10/0x10 [ 916.827590][T19313] ? __pfx___lock_acquire+0x10/0x10 [ 916.827621][T19313] ? lock_acquire.part.0+0x11b/0x380 [ 916.827654][T19313] ? find_held_lock+0x2d/0x110 [ 916.827684][T19313] do_filp_open+0x20c/0x470 [ 916.827718][T19313] ? __pfx_do_filp_open+0x10/0x10 [ 916.827751][T19313] ? find_held_lock+0x2d/0x110 [ 916.827800][T19313] ? alloc_fd+0x41f/0x760 [ 916.827842][T19313] do_sys_openat2+0x17a/0x1e0 [ 916.827869][T19313] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.827897][T19313] ? __pfx___might_resched+0x10/0x10 [ 916.827941][T19313] __x64_sys_openat+0x175/0x210 [ 916.827967][T19313] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.828004][T19313] do_syscall_64+0xcd/0x250 [ 916.828038][T19313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.828072][T19313] RIP: 0033:0x7f6a2bb8cde9 [ 916.828093][T19313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.828116][T19313] RSP: 002b:00007f6a2ca07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 916.828140][T19313] RAX: ffffffffffffffda RBX: 00007f6a2bda5fa0 RCX: 00007f6a2bb8cde9 [ 916.828158][T19313] RDX: 0000000000000401 RSI: 0000400000000640 RDI: ffffffffffffff9c [ 916.828175][T19313] RBP: 00007f6a2bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 916.828191][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.828207][T19313] R13: 0000000000000000 R14: 00007f6a2bda5fa0 R15: 00007ffde1403cf8 [ 916.828240][T19313] [ 916.832476][T19317] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 917.400163][T19327] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3103'. [ 917.766399][T19329] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3102'. [ 917.783811][T19325] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3102'. [ 917.873049][T19336] netlink: 1204 bytes leftover after parsing attributes in process `syz.7.3105'. [ 917.992420][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3105'. [ 918.390957][T19351] openvswitch: ovs_: Dropping previously announced user features [ 918.653105][T19355] FAULT_INJECTION: forcing a failure. [ 918.653105][T19355] name failslab, interval 1, probability 0, space 0, times 0 [ 918.686936][T19355] CPU: 1 UID: 0 PID: 19355 Comm: syz.5.3111 Not tainted 6.14.0-rc3-syzkaller #0 [ 918.686972][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 918.686988][T19355] Call Trace: [ 918.686996][T19355] [ 918.687008][T19355] dump_stack_lvl+0x16c/0x1f0 [ 918.687053][T19355] should_fail_ex+0x50a/0x650 [ 918.687089][T19355] ? fs_reclaim_acquire+0xae/0x150 [ 918.687123][T19355] should_failslab+0xc2/0x120 [ 918.687147][T19355] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 918.687185][T19355] ? mas_alloc_nodes+0x18b/0x8b0 [ 918.687218][T19355] mas_alloc_nodes+0x18b/0x8b0 [ 918.687251][T19355] mas_node_count_gfp+0x105/0x130 [ 918.687280][T19355] mas_preallocate+0x53f/0xce0 [ 918.687319][T19355] ? __pfx_mas_preallocate+0x10/0x10 [ 918.687366][T19355] ? anon_vma_name+0x75/0x100 [ 918.687395][T19355] __split_vma+0x474/0x1160 [ 918.687435][T19355] ? __pfx___split_vma+0x10/0x10 [ 918.687486][T19355] vms_gather_munmap_vmas+0x38b/0x1730 [ 918.687534][T19355] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 918.687573][T19355] ? mas_walk+0x6a6/0x910 [ 918.687612][T19355] __mmap_region+0x328/0x2760 [ 918.687653][T19355] ? __pfx___mmap_region+0x10/0x10 [ 918.687699][T19355] ? hlock_class+0x4e/0x130 [ 918.687724][T19355] ? mark_lock+0xb5/0xc60 [ 918.687761][T19355] ? __pfx_mark_lock+0x10/0x10 [ 918.687791][T19355] ? __pfx___schedule+0x10/0x10 [ 918.687819][T19355] ? schedule+0x298/0x350 [ 918.687886][T19355] ? cap_capable+0xb3/0x250 [ 918.687917][T19355] mmap_region+0x1ab/0x3f0 [ 918.687947][T19355] do_mmap+0xd8d/0x11b0 [ 918.687985][T19355] ? __pfx_do_mmap+0x10/0x10 [ 918.688022][T19355] ? __pfx_down_write_killable+0x10/0x10 [ 918.688063][T19355] vm_mmap_pgoff+0x203/0x3a0 [ 918.688103][T19355] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 918.688144][T19355] ? __x64_sys_futex+0x1e1/0x4c0 [ 918.688172][T19355] ? __x64_sys_futex+0x1ea/0x4c0 [ 918.688207][T19355] ksys_mmap_pgoff+0x7d/0x5c0 [ 918.688237][T19355] ? rcu_is_watching+0x12/0xc0 [ 918.688267][T19355] __x64_sys_mmap+0x125/0x190 [ 918.688305][T19355] do_syscall_64+0xcd/0x250 [ 918.688333][T19355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.688364][T19355] RIP: 0033:0x7f6a2bb8cde9 [ 918.688383][T19355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.688407][T19355] RSP: 002b:00007f6a2ca07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 918.688429][T19355] RAX: ffffffffffffffda RBX: 00007f6a2bda5fa0 RCX: 00007f6a2bb8cde9 [ 918.688446][T19355] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 918.688461][T19355] RBP: 00007f6a2bc0e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 918.688477][T19355] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 918.688492][T19355] R13: 0000000000000000 R14: 00007f6a2bda5fa0 R15: 00007ffde1403cf8 [ 918.688525][T19355] [ 918.974377][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.625970][T19387] __nla_validate_parse: 1 callbacks suppressed [ 920.625992][T19387] netlink: 1204 bytes leftover after parsing attributes in process `syz.8.3121'. [ 920.763669][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3121'. [ 921.697748][T19400] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 922.665092][T19415] FAULT_INJECTION: forcing a failure. [ 922.665092][T19415] name failslab, interval 1, probability 0, space 0, times 0 [ 922.705414][T19415] CPU: 1 UID: 0 PID: 19415 Comm: syz.7.3127 Not tainted 6.14.0-rc3-syzkaller #0 [ 922.705452][T19415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 922.705468][T19415] Call Trace: [ 922.705476][T19415] [ 922.705489][T19415] dump_stack_lvl+0x16c/0x1f0 [ 922.705527][T19415] should_fail_ex+0x50a/0x650 [ 922.705566][T19415] ? fs_reclaim_acquire+0xae/0x150 [ 922.705603][T19415] should_failslab+0xc2/0x120 [ 922.705629][T19415] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 922.705672][T19415] ? __kernfs_new_node+0xd3/0x890 [ 922.705713][T19415] __kernfs_new_node+0xd3/0x890 [ 922.705759][T19415] ? __pfx___kernfs_new_node+0x10/0x10 [ 922.705794][T19415] ? __pfx___lock_acquire+0x10/0x10 [ 922.705839][T19415] ? lock_acquire.part.0+0x11b/0x380 [ 922.705873][T19415] ? find_held_lock+0x2d/0x110 [ 922.705912][T19415] kernfs_new_node+0x186/0x240 [ 922.705956][T19415] kernfs_create_link+0xcc/0x240 [ 922.705987][T19415] sysfs_do_create_link_sd+0x90/0x140 [ 922.706027][T19415] sysfs_create_link+0x61/0xc0 [ 922.706059][T19415] device_add+0x50c/0x1a70 [ 922.706098][T19415] ? __pfx_device_add+0x10/0x10 [ 922.706130][T19415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 922.706170][T19415] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 922.706209][T19415] wiphy_register+0x1cab/0x2860 [ 922.706242][T19415] ? __pfx__dev_printk+0x10/0x10 [ 922.706277][T19415] ? __pfx_wiphy_register+0x10/0x10 [ 922.706323][T19415] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 922.706360][T19415] ieee80211_register_hw+0x2455/0x4060 [ 922.706407][T19415] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 922.706438][T19415] ? net_generic+0xea/0x2a0 [ 922.706471][T19415] ? lockdep_init_map_type+0x16d/0x7d0 [ 922.706510][T19415] ? __asan_memset+0x23/0x50 [ 922.706542][T19415] ? __hrtimer_init+0x106/0x2c0 [ 922.706584][T19415] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 922.706643][T19415] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 922.706689][T19415] hwsim_new_radio_nl+0xb42/0x12b0 [ 922.706736][T19415] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 922.706784][T19415] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 922.706825][T19415] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 922.706874][T19415] genl_family_rcv_msg_doit+0x202/0x2f0 [ 922.706913][T19415] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 922.706948][T19415] ? trace_cap_capable+0x1a2/0x210 [ 922.706985][T19415] ? bpf_lsm_capable+0x9/0x10 [ 922.707011][T19415] ? security_capable+0x7e/0x260 [ 922.707051][T19415] ? ns_capable+0xd7/0x110 [ 922.707090][T19415] genl_rcv_msg+0x565/0x800 [ 922.707130][T19415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 922.707166][T19415] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 922.707214][T19415] netlink_rcv_skb+0x16b/0x440 [ 922.707245][T19415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 922.707283][T19415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 922.707331][T19415] ? down_read+0xc9/0x330 [ 922.707363][T19415] ? __pfx_down_read+0x10/0x10 [ 922.707396][T19415] ? netlink_deliver_tap+0x1ae/0xd30 [ 922.707433][T19415] genl_rcv+0x28/0x40 [ 922.707465][T19415] netlink_unicast+0x53c/0x7f0 [ 922.707502][T19415] ? __pfx_netlink_unicast+0x10/0x10 [ 922.707535][T19415] ? __phys_addr_symbol+0x30/0x80 [ 922.707561][T19415] ? __check_object_size+0x488/0x710 [ 922.707593][T19415] netlink_sendmsg+0x8b8/0xd70 [ 922.707631][T19415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.707679][T19415] ____sys_sendmsg+0xaaf/0xc90 [ 922.707707][T19415] ? copy_msghdr_from_user+0x10b/0x160 [ 922.707747][T19415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 922.707794][T19415] ___sys_sendmsg+0x135/0x1e0 [ 922.707831][T19415] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.707863][T19415] ? __pfx_aa_sk_perm+0x10/0x10 [ 922.707929][T19415] ? do_futex+0x123/0x350 [ 922.707967][T19415] __sys_sendmsg+0x16e/0x220 [ 922.708003][T19415] ? __pfx___sys_sendmsg+0x10/0x10 [ 922.708037][T19415] ? __x64_sys_futex+0x1e1/0x4c0 [ 922.708091][T19415] do_syscall_64+0xcd/0x250 [ 922.708124][T19415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.708160][T19415] RIP: 0033:0x7febc818cde9 [ 922.708182][T19415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.708206][T19415] RSP: 002b:00007febc90bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.708231][T19415] RAX: ffffffffffffffda RBX: 00007febc83a5fa0 RCX: 00007febc818cde9 [ 922.708249][T19415] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 922.708266][T19415] RBP: 00007febc820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 922.708282][T19415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.708298][T19415] R13: 0000000000000000 R14: 00007febc83a5fa0 R15: 00007ffc44196688 [ 922.708335][T19415] [ 923.169573][ C1] vkms_vblank_simulate: vblank timer overrun [ 924.801623][T19439] Process accounting resumed [ 925.776848][T19458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3136'. [ 925.951041][T19461] FAULT_INJECTION: forcing a failure. [ 925.951041][T19461] name failslab, interval 1, probability 0, space 0, times 0 [ 925.964748][T19461] CPU: 1 UID: 0 PID: 19461 Comm: syz.5.3138 Not tainted 6.14.0-rc3-syzkaller #0 [ 925.964779][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 925.964793][T19461] Call Trace: [ 925.964801][T19461] [ 925.964811][T19461] dump_stack_lvl+0x16c/0x1f0 [ 925.964848][T19461] should_fail_ex+0x50a/0x650 [ 925.964884][T19461] ? fs_reclaim_acquire+0xae/0x150 [ 925.964916][T19461] should_failslab+0xc2/0x120 [ 925.964938][T19461] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 925.964972][T19461] ? __asan_memcpy+0x3c/0x60 [ 925.965003][T19461] ? __kernfs_new_node+0xd3/0x890 [ 925.965039][T19461] __kernfs_new_node+0xd3/0x890 [ 925.965074][T19461] ? __pfx___kernfs_new_node+0x10/0x10 [ 925.965104][T19461] ? __pfx_lock_release+0x10/0x10 [ 925.965136][T19461] ? kernfs_add_one+0x39d/0x520 [ 925.965174][T19461] ? lock_acquire.part.0+0x11b/0x380 [ 925.965203][T19461] ? find_held_lock+0x2d/0x110 [ 925.965239][T19461] kernfs_new_node+0x186/0x240 [ 925.965280][T19461] kernfs_create_link+0xcc/0x240 [ 925.965314][T19461] sysfs_do_create_link_sd+0x90/0x140 [ 925.965346][T19461] sysfs_create_link+0x61/0xc0 [ 925.965375][T19461] device_add+0x62e/0x1a70 [ 925.965410][T19461] ? __pfx_device_add+0x10/0x10 [ 925.965440][T19461] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.965489][T19461] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 925.965528][T19461] wiphy_register+0x1cab/0x2860 [ 925.965559][T19461] ? __pfx__dev_printk+0x10/0x10 [ 925.965590][T19461] ? __pfx_wiphy_register+0x10/0x10 [ 925.965635][T19461] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 925.965670][T19461] ieee80211_register_hw+0x2455/0x4060 [ 925.965714][T19461] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 925.965744][T19461] ? net_generic+0xea/0x2a0 [ 925.965776][T19461] ? lockdep_init_map_type+0x16d/0x7d0 [ 925.965814][T19461] ? __asan_memset+0x23/0x50 [ 925.965844][T19461] ? __hrtimer_init+0x106/0x2c0 [ 925.965883][T19461] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 925.965939][T19461] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 925.965984][T19461] hwsim_new_radio_nl+0xb42/0x12b0 [ 925.966020][T19461] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 925.966065][T19461] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 925.966105][T19461] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 925.966146][T19461] genl_family_rcv_msg_doit+0x202/0x2f0 [ 925.966189][T19461] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 925.966223][T19461] ? trace_cap_capable+0x1a2/0x210 [ 925.966259][T19461] ? bpf_lsm_capable+0x9/0x10 [ 925.966286][T19461] ? security_capable+0x7e/0x260 [ 925.966320][T19461] ? ns_capable+0xd7/0x110 [ 925.966350][T19461] genl_rcv_msg+0x565/0x800 [ 925.966384][T19461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 925.966416][T19461] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 925.966456][T19461] netlink_rcv_skb+0x16b/0x440 [ 925.966492][T19461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 925.966530][T19461] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 925.966575][T19461] ? down_read+0xc9/0x330 [ 925.966604][T19461] ? __pfx_down_read+0x10/0x10 [ 925.966635][T19461] ? netlink_deliver_tap+0x1ae/0xd30 [ 925.966670][T19461] genl_rcv+0x28/0x40 [ 925.966699][T19461] netlink_unicast+0x53c/0x7f0 [ 925.966733][T19461] ? __pfx_netlink_unicast+0x10/0x10 [ 925.966764][T19461] ? __phys_addr_symbol+0x30/0x80 [ 925.966788][T19461] ? __check_object_size+0x488/0x710 [ 925.966817][T19461] netlink_sendmsg+0x8b8/0xd70 [ 925.966855][T19461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.966899][T19461] ____sys_sendmsg+0xaaf/0xc90 [ 925.966927][T19461] ? copy_msghdr_from_user+0x10b/0x160 [ 925.966958][T19461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.966990][T19461] ? try_to_wake_up+0x158/0x1490 [ 925.967030][T19461] ___sys_sendmsg+0x135/0x1e0 [ 925.967065][T19461] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.967131][T19461] ? do_futex+0x123/0x350 [ 925.967169][T19461] __sys_sendmsg+0x16e/0x220 [ 925.967202][T19461] ? __pfx___sys_sendmsg+0x10/0x10 [ 925.967232][T19461] ? __x64_sys_futex+0x1e1/0x4c0 [ 925.967282][T19461] do_syscall_64+0xcd/0x250 [ 925.967313][T19461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.967347][T19461] RIP: 0033:0x7f6a2bb8cde9 [ 925.967367][T19461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.967390][T19461] RSP: 002b:00007f6a2ca07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.967414][T19461] RAX: ffffffffffffffda RBX: 00007f6a2bda5fa0 RCX: 00007f6a2bb8cde9 [ 925.967432][T19461] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 925.967447][T19461] RBP: 00007f6a2bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 925.967469][T19461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.967485][T19461] R13: 0000000000000000 R14: 00007f6a2bda5fa0 R15: 00007ffde1403cf8 [ 925.967518][T19461] [ 927.728399][T19477] FAULT_INJECTION: forcing a failure. [ 927.728399][T19477] name failslab, interval 1, probability 0, space 0, times 0 [ 927.741432][T19477] CPU: 1 UID: 0 PID: 19477 Comm: syz.8.3142 Not tainted 6.14.0-rc3-syzkaller #0 [ 927.741461][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 927.741474][T19477] Call Trace: [ 927.741482][T19477] [ 927.741493][T19477] dump_stack_lvl+0x16c/0x1f0 [ 927.741530][T19477] should_fail_ex+0x50a/0x650 [ 927.741566][T19477] ? fs_reclaim_acquire+0xae/0x150 [ 927.741599][T19477] should_failslab+0xc2/0x120 [ 927.741624][T19477] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 927.741660][T19477] ? __xlate_proc_name+0x173/0x210 [ 927.741695][T19477] ? __proc_create+0x2c0/0x8b0 [ 927.741736][T19477] __proc_create+0x2c0/0x8b0 [ 927.741772][T19477] ? __pfx___proc_create+0x10/0x10 [ 927.741811][T19477] ? _raw_spin_unlock+0x28/0x50 [ 927.741841][T19477] proc_create_reg+0x7d/0x180 [ 927.741868][T19477] proc_create_net_data+0x8f/0x1b0 [ 927.741906][T19477] ? __pfx_proc_create_net_data+0x10/0x10 [ 927.741948][T19477] ? __pfx_arp_net_init+0x10/0x10 [ 927.741981][T19477] arp_net_init+0x53/0x70 [ 927.742012][T19477] ops_init+0x1df/0x5f0 [ 927.742084][T19477] setup_net+0x21f/0x860 [ 927.742122][T19477] ? __pfx_setup_net+0x10/0x10 [ 927.742155][T19477] ? down_read_killable+0xcc/0x380 [ 927.742188][T19477] ? __pfx_down_read_killable+0x10/0x10 [ 927.742219][T19477] ? __raw_spin_lock_init+0x3a/0x110 [ 927.742259][T19477] ? debug_mutex_init+0x37/0x70 [ 927.742289][T19477] copy_net_ns+0x2b4/0x6c0 [ 927.742316][T19477] create_new_namespaces+0x3ea/0xad0 [ 927.742362][T19477] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 927.742404][T19477] ksys_unshare+0x45d/0xa40 [ 927.742431][T19477] ? __pfx_ksys_unshare+0x10/0x10 [ 927.742455][T19477] ? xfd_validate_state+0x5d/0x180 [ 927.742502][T19477] __x64_sys_unshare+0x31/0x40 [ 927.742527][T19477] do_syscall_64+0xcd/0x250 [ 927.742559][T19477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.742593][T19477] RIP: 0033:0x7fe50eb8cde9 [ 927.742613][T19477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.742638][T19477] RSP: 002b:00007fe50fa33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 927.742663][T19477] RAX: ffffffffffffffda RBX: 00007fe50eda5fa0 RCX: 00007fe50eb8cde9 [ 927.742680][T19477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 927.742697][T19477] RBP: 00007fe50ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 927.742713][T19477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.742728][T19477] R13: 0000000000000000 R14: 00007fe50eda5fa0 R15: 00007ffe95b27a78 [ 927.742762][T19477] [ 929.007627][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3144'. [ 929.225080][T19483] zswap: compressor not available [ 929.437156][T19494] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3146'. [ 931.916179][T19547] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3158'. [ 931.979269][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.988582][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 933.533886][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3164'. [ 933.613901][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3166'. [ 933.952518][T19582] openvswitch: ovs_ÿÃ: Dropping previously announced user features [ 934.291773][T19587] zswap: compressor not available [ 935.019882][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3175'. [ 935.086731][T19606] netlink: 'syz.5.3173': attribute type 33 has an invalid length. [ 935.094810][T19606] netlink: 322 bytes leftover after parsing attributes in process `syz.5.3173'. [ 935.746382][T19625] zswap: compressor not available [ 936.906634][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3187'. [ 938.544119][T19693] netlink: 1204 bytes leftover after parsing attributes in process `syz.8.3197'. [ 940.521856][T19723] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 940.766825][T19732] HfR: entered promiscuous mode [ 941.135553][T19737] netlink: 1204 bytes leftover after parsing attributes in process `syz.5.3207'. [ 941.759053][T19753] random: crng reseeded on system resumption [ 942.791853][T19758] [ 942.794242][T19758] ====================================================== [ 942.801281][T19758] WARNING: possible circular locking dependency detected [ 942.808318][T19758] 6.14.0-rc3-syzkaller #0 Not tainted [ 942.813705][T19758] ------------------------------------------------------ [ 942.820738][T19758] syz.8.3214/19758 is trying to acquire lock: [ 942.826822][T19758] ffff8880257b8090 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x99/0x2a0 [ 942.835766][T19758] [ 942.835766][T19758] but task is already holding lock: [ 942.843147][T19758] ffff888143bedc88 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 942.854445][T19758] [ 942.854445][T19758] which lock already depends on the new lock. [ 942.854445][T19758] [ 942.864876][T19758] [ 942.864876][T19758] the existing dependency chain (in reverse order) is: [ 942.873927][T19758] [ 942.873927][T19758] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 942.882583][T19758] blk_mq_submit_bio+0x20db/0x25f0 [ 942.888255][T19758] __submit_bio+0x3d1/0x690 [ 942.893310][T19758] submit_bio_noacct_nocheck+0x698/0xd70 [ 942.899497][T19758] submit_bio_noacct+0x50d/0x1ec0 [ 942.905076][T19758] mpage_readahead+0x41d/0x590 [ 942.910390][T19758] read_pages+0x1a7/0xc60 [ 942.915265][T19758] page_cache_ra_unbounded+0x426/0x7d0 [ 942.921269][T19758] force_page_cache_ra+0x24b/0x340 [ 942.926940][T19758] page_cache_sync_ra+0x158/0xa30 [ 942.932519][T19758] filemap_get_pages+0xb62/0x1c30 [ 942.938104][T19758] filemap_read+0x3c5/0xe70 [ 942.943156][T19758] blkdev_read_iter+0x187/0x4b0 [ 942.948558][T19758] vfs_read+0x886/0xbf0 [ 942.953261][T19758] ksys_read+0x12b/0x250 [ 942.958043][T19758] do_syscall_64+0xcd/0x250 [ 942.963085][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.969521][T19758] [ 942.969521][T19758] -> #5 (mapping.invalidate_lock#2){++++}-{4:4}: [ 942.978057][T19758] down_read+0x9a/0x330 [ 942.982746][T19758] filemap_fault+0x2e7/0x2ca0 [ 942.987957][T19758] __do_fault+0x10a/0x490 [ 942.992816][T19758] do_pte_missing+0xecf/0x3e10 [ 942.998123][T19758] __handle_mm_fault+0x1166/0x2c60 [ 943.003774][T19758] handle_mm_fault+0x3fa/0xaa0 [ 943.009086][T19758] __get_user_pages+0x773/0x36f0 [ 943.014558][T19758] __gup_longterm_locked+0x212/0x1870 [ 943.020464][T19758] gup_fast_fallback+0x1802/0x2690 [ 943.026104][T19758] pin_user_pages_fast+0xa8/0x100 [ 943.031659][T19758] iov_iter_extract_pages+0x3a5/0x2010 [ 943.037639][T19758] bio_iov_iter_get_pages+0x37c/0x1100 [ 943.043634][T19758] blkdev_direct_IO+0x1120/0x1c50 [ 943.049185][T19758] blkdev_write_iter+0x6f9/0xdd0 [ 943.054655][T19758] vfs_write+0x5ae/0x1150 [ 943.059512][T19758] ksys_write+0x12b/0x250 [ 943.064377][T19758] do_syscall_64+0xcd/0x250 [ 943.069405][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.075831][T19758] [ 943.075831][T19758] -> #4 (&mm->mmap_lock){++++}-{4:4}: [ 943.083397][T19758] __might_fault+0x11b/0x190 [ 943.088510][T19758] _copy_from_user+0x29/0xd0 [ 943.093616][T19758] csum_and_copy_from_iter_full+0x218/0x1e20 [ 943.100126][T19758] ip_generic_getfrag+0x175/0x260 [ 943.105677][T19758] raw6_getfrag+0x22d/0x2a0 [ 943.110700][T19758] __ip6_append_data.isra.0+0x3dca/0x4650 [ 943.116945][T19758] ip6_append_data+0x1e6/0x500 [ 943.122234][T19758] rawv6_sendmsg+0x15c9/0x4610 [ 943.127516][T19758] inet_sendmsg+0x119/0x140 [ 943.132552][T19758] ____sys_sendmsg+0x98c/0xc90 [ 943.137838][T19758] ___sys_sendmsg+0x135/0x1e0 [ 943.143048][T19758] __sys_sendmsg+0x16e/0x220 [ 943.148164][T19758] do_syscall_64+0xcd/0x250 [ 943.153196][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.159621][T19758] [ 943.159621][T19758] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 943.167361][T19758] lock_sock_nested+0x3a/0xf0 [ 943.172569][T19758] inet_autobind+0x1a/0x1a0 [ 943.177597][T19758] inet_send_prepare+0x317/0x530 [ 943.183060][T19758] inet_sendmsg+0x43/0x140 [ 943.188004][T19758] sock_sendmsg+0x389/0x490 [ 943.193033][T19758] __sock_xmit+0x1e8/0x4f0 [ 943.197981][T19758] nbd_send_cmd+0x8ec/0x1c90 [ 943.203097][T19758] nbd_queue_rq+0x941/0x1220 [ 943.208213][T19758] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 943.214289][T19758] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 943.221150][T19758] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 943.227669][T19758] blk_mq_run_hw_queue+0x239/0x670 [ 943.233318][T19758] blk_mq_flush_plug_list+0x673/0x1c60 [ 943.239302][T19758] __blk_flush_plug+0x2c5/0x4b0 [ 943.244673][T19758] __submit_bio+0x547/0x690 [ 943.249696][T19758] submit_bio_noacct_nocheck+0x698/0xd70 [ 943.255864][T19758] submit_bio_noacct+0x50d/0x1ec0 [ 943.261411][T19758] block_read_full_folio+0x812/0xa50 [ 943.267230][T19758] filemap_read_folio+0xc6/0x2a0 [ 943.272693][T19758] do_read_cache_folio+0x263/0x5c0 [ 943.278336][T19758] read_part_sector+0xd4/0x310 [ 943.283629][T19758] adfspart_check_ICS+0x94/0x940 [ 943.289098][T19758] bdev_disk_changed+0x71f/0x1520 [ 943.294652][T19758] blkdev_get_whole+0x187/0x290 [ 943.300025][T19758] bdev_open+0x2c7/0xe20 [ 943.304791][T19758] blkdev_open+0x272/0x3f0 [ 943.309730][T19758] do_dentry_open+0x735/0x1c40 [ 943.315024][T19758] vfs_open+0x82/0x3f0 [ 943.319616][T19758] path_openat+0x1e88/0x2d80 [ 943.324732][T19758] do_filp_open+0x20c/0x470 [ 943.329761][T19758] do_sys_openat2+0x17a/0x1e0 [ 943.334958][T19758] __x64_sys_openat+0x175/0x210 [ 943.340332][T19758] do_syscall_64+0xcd/0x250 [ 943.345360][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.351782][T19758] [ 943.351782][T19758] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 943.359447][T19758] __mutex_lock+0x19b/0xb10 [ 943.364478][T19758] nbd_queue_rq+0x424/0x1220 [ 943.369592][T19758] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 943.375662][T19758] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 943.382524][T19758] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 943.389039][T19758] blk_mq_run_hw_queue+0x239/0x670 [ 943.394684][T19758] blk_mq_flush_plug_list+0x673/0x1c60 [ 943.400667][T19758] __blk_flush_plug+0x2c5/0x4b0 [ 943.406040][T19758] __submit_bio+0x547/0x690 [ 943.411067][T19758] submit_bio_noacct_nocheck+0x698/0xd70 [ 943.417225][T19758] submit_bio_noacct+0x50d/0x1ec0 [ 943.422774][T19758] block_read_full_folio+0x812/0xa50 [ 943.428594][T19758] filemap_read_folio+0xc6/0x2a0 [ 943.434055][T19758] do_read_cache_folio+0x263/0x5c0 [ 943.439695][T19758] read_part_sector+0xd4/0x310 [ 943.444990][T19758] adfspart_check_ICS+0x94/0x940 [ 943.450457][T19758] bdev_disk_changed+0x71f/0x1520 [ 943.456014][T19758] blkdev_get_whole+0x187/0x290 [ 943.461387][T19758] bdev_open+0x2c7/0xe20 [ 943.466154][T19758] blkdev_open+0x272/0x3f0 [ 943.471099][T19758] do_dentry_open+0x735/0x1c40 [ 943.476392][T19758] vfs_open+0x82/0x3f0 [ 943.480983][T19758] path_openat+0x1e88/0x2d80 [ 943.486101][T19758] do_filp_open+0x20c/0x470 [ 943.491132][T19758] do_sys_openat2+0x17a/0x1e0 [ 943.496330][T19758] __x64_sys_openat+0x175/0x210 [ 943.501705][T19758] do_syscall_64+0xcd/0x250 [ 943.506733][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.513157][T19758] [ 943.513157][T19758] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 943.520377][T19758] __mutex_lock+0x19b/0xb10 [ 943.525406][T19758] nbd_queue_rq+0xbe/0x1220 [ 943.530432][T19758] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 943.536500][T19758] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 943.543361][T19758] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 943.549874][T19758] blk_mq_run_hw_queue+0x239/0x670 [ 943.555517][T19758] blk_mq_flush_plug_list+0x673/0x1c60 [ 943.561500][T19758] __blk_flush_plug+0x2c5/0x4b0 [ 943.566876][T19758] __submit_bio+0x547/0x690 [ 943.571904][T19758] submit_bio_noacct_nocheck+0x698/0xd70 [ 943.578062][T19758] submit_bio_noacct+0x50d/0x1ec0 [ 943.583615][T19758] block_read_full_folio+0x812/0xa50 [ 943.589433][T19758] filemap_read_folio+0xc6/0x2a0 [ 943.594896][T19758] do_read_cache_folio+0x263/0x5c0 [ 943.600533][T19758] read_part_sector+0xd4/0x310 [ 943.605835][T19758] adfspart_check_ICS+0x94/0x940 [ 943.611306][T19758] bdev_disk_changed+0x71f/0x1520 [ 943.616860][T19758] blkdev_get_whole+0x187/0x290 [ 943.622234][T19758] bdev_open+0x2c7/0xe20 [ 943.627001][T19758] blkdev_open+0x272/0x3f0 [ 943.631939][T19758] do_dentry_open+0x735/0x1c40 [ 943.637232][T19758] vfs_open+0x82/0x3f0 [ 943.641827][T19758] path_openat+0x1e88/0x2d80 [ 943.646950][T19758] do_filp_open+0x20c/0x470 [ 943.651980][T19758] do_sys_openat2+0x17a/0x1e0 [ 943.657180][T19758] __x64_sys_openat+0x175/0x210 [ 943.662556][T19758] do_syscall_64+0xcd/0x250 [ 943.667589][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.674021][T19758] [ 943.674021][T19758] -> #0 (set->srcu){.+.+}-{0:0}: [ 943.681174][T19758] __lock_acquire+0x249e/0x3c40 [ 943.686562][T19758] lock_sync+0xf5/0x190 [ 943.691245][T19758] __synchronize_srcu+0xa9/0x2a0 [ 943.696715][T19758] blk_mq_update_nr_requests+0x288/0x670 [ 943.702882][T19758] queue_requests_store+0x161/0x210 [ 943.708610][T19758] queue_attr_store+0x370/0x510 [ 943.713988][T19758] sysfs_kf_write+0x117/0x170 [ 943.719190][T19758] kernfs_fop_write_iter+0x33d/0x500 [ 943.724997][T19758] vfs_write+0x5ae/0x1150 [ 943.729855][T19758] ksys_write+0x12b/0x250 [ 943.734708][T19758] do_syscall_64+0xcd/0x250 [ 943.739738][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.746166][T19758] [ 943.746166][T19758] other info that might help us debug this: [ 943.746166][T19758] [ 943.756394][T19758] Chain exists of: [ 943.756394][T19758] set->srcu --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#51 [ 943.756394][T19758] [ 943.770762][T19758] Possible unsafe locking scenario: [ 943.770762][T19758] [ 943.778207][T19758] CPU0 CPU1 [ 943.783565][T19758] ---- ---- [ 943.788921][T19758] lock(&q->q_usage_counter(io)#51); [ 943.794301][T19758] lock(mapping.invalidate_lock#2); [ 943.802115][T19758] lock(&q->q_usage_counter(io)#51); [ 943.810019][T19758] sync(set->srcu); [ 943.813917][T19758] [ 943.813917][T19758] *** DEADLOCK *** [ 943.813917][T19758] [ 943.822054][T19758] 7 locks held by syz.8.3214/19758: [ 943.827247][T19758] #0: ffff88803253d978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 943.836327][T19758] #1: ffff88803578c420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 943.845316][T19758] #2: ffff88807c549c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 943.855078][T19758] #3: ffff888143bb75a8 (kn->active#291){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 943.865197][T19758] #4: ffff888143bee1b8 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0x2c1/0x510 [ 943.874891][T19758] #5: ffff888143bedc88 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 943.887284][T19758] #6: ffff888143bedcc0 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 943.899232][T19758] [ 943.899232][T19758] stack backtrace: [ 943.905114][T19758] CPU: 1 UID: 0 PID: 19758 Comm: syz.8.3214 Not tainted 6.14.0-rc3-syzkaller #0 [ 943.905137][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 943.905149][T19758] Call Trace: [ 943.905157][T19758] [ 943.905166][T19758] dump_stack_lvl+0x116/0x1f0 [ 943.905195][T19758] print_circular_bug+0x490/0x760 [ 943.905223][T19758] check_noncircular+0x31a/0x400 [ 943.905247][T19758] ? stack_trace_save+0x95/0xd0 [ 943.905270][T19758] ? __pfx_check_noncircular+0x10/0x10 [ 943.905299][T19758] ? add_lock_to_list+0x17d/0x390 [ 943.905325][T19758] __lock_acquire+0x249e/0x3c40 [ 943.905355][T19758] ? __pfx___lock_acquire+0x10/0x10 [ 943.905381][T19758] ? hlock_class+0x4e/0x130 [ 943.905400][T19758] ? mark_lock+0xb5/0xc60 [ 943.905424][T19758] ? __pfx___lock_acquire+0x10/0x10 [ 943.905449][T19758] ? hlock_class+0x4e/0x130 [ 943.905469][T19758] ? __synchronize_srcu+0x99/0x2a0 [ 943.905498][T19758] lock_sync+0xf5/0x190 [ 943.905523][T19758] ? __synchronize_srcu+0x99/0x2a0 [ 943.905552][T19758] __synchronize_srcu+0xa9/0x2a0 [ 943.905580][T19758] ? __pfx___synchronize_srcu+0x10/0x10 [ 943.905608][T19758] ? synchronize_srcu+0xa2/0x270 [ 943.905640][T19758] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 943.905664][T19758] blk_mq_update_nr_requests+0x288/0x670 [ 943.905690][T19758] ? __pfx__kstrtoull+0x10/0x10 [ 943.905715][T19758] ? __pfx_blk_mq_update_nr_requests+0x10/0x10 [ 943.905740][T19758] ? lockdep_hardirqs_on+0x7c/0x110 [ 943.905761][T19758] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 943.905787][T19758] queue_requests_store+0x161/0x210 [ 943.905814][T19758] ? blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 943.905835][T19758] ? __pfx_queue_requests_store+0x10/0x10 [ 943.905866][T19758] queue_attr_store+0x370/0x510 [ 943.905892][T19758] ? __pfx_queue_attr_store+0x10/0x10 [ 943.905916][T19758] ? trace_contention_end+0xee/0x140 [ 943.905948][T19758] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 943.905974][T19758] ? rcu_is_watching+0x12/0xc0 [ 943.905997][T19758] ? __pfx_queue_attr_store+0x10/0x10 [ 943.906022][T19758] sysfs_kf_write+0x117/0x170 [ 943.906044][T19758] kernfs_fop_write_iter+0x33d/0x500 [ 943.906064][T19758] ? __pfx_sysfs_kf_write+0x10/0x10 [ 943.906086][T19758] vfs_write+0x5ae/0x1150 [ 943.906112][T19758] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 943.906133][T19758] ? __pfx___mutex_lock+0x10/0x10 [ 943.906155][T19758] ? __pfx_vfs_write+0x10/0x10 [ 943.906190][T19758] ksys_write+0x12b/0x250 [ 943.906216][T19758] ? __pfx_ksys_write+0x10/0x10 [ 943.906244][T19758] do_syscall_64+0xcd/0x250 [ 943.906268][T19758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.906297][T19758] RIP: 0033:0x7fe50eb8cde9 [ 943.906313][T19758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.906332][T19758] RSP: 002b:00007fe50fa33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 943.906350][T19758] RAX: ffffffffffffffda RBX: 00007fe50eda5fa0 RCX: 00007fe50eb8cde9 [ 943.906364][T19758] RDX: 0000000000000008 RSI: 0000400000000000 RDI: 0000000000000006 [ 943.906377][T19758] RBP: 00007fe50ec0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 943.906389][T19758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.906401][T19758] R13: 0000000000000000 R14: 00007fe50eda5fa0 R15: 00007ffe95b27a78 [ 943.906420][T19758] [ 944.312632][T19753] PM: hibernation: Basic memory bitmaps created [ 944.319042][T19761] Bluetooth: hci3: command 0x0406 tx timeout [ 944.524329][T19752] PM: hibernation: Basic memory bitmaps freed