last executing test programs: 2m35.899127717s ago: executing program 0 (id=2070): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x17, 0x0, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mlockall$auto(0x800000000000005) r0 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xffffffffffffffff, 0xee00, 0x40, 0xc6, 0xfff, 0xf}, &(0x7f00000000c0)=0x8c, &(0x7f0000000100)=0x4a, 0x7, 0x80, 0xc, 0x5, 0x3, 0x7, 0x0, 0x2, @raw=0x4, @inferred=0x0}) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f00000002c0)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0xfffffff7, 0x7}, 0x3d8, 0xa, 0x8, 0x7f11, @raw=0x1, @inferred, 0x4, 0x0, &(0x7f00000003c0)="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", &(0x7f0000000140)="99263440333d1cd0f1c20d8310dc89a57fd20977188897e5eeecefc9ce97d81e1b4cd6"}) lstat$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000013c0)={0xf, 0x60, 0x10000, 0x100, r4, r6, 0x0, 0xfa, 0x7, 0x8, 0x10000, 0x6d, 0x4, 0x6, 0x1, 0x5, 0x11fa64dc}) move_pages$auto(r5, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f00000001c0)=0x400ffff, 0x87) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe4643, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r7, &(0x7f0000000500)={0x0, 0xe4ff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 2m34.515763942s ago: executing program 0 (id=2076): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000ff0000030004020000060007040080000300000000", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000300000008000200", @ANYRES32=0x0, @ANYBLOB="0800030001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x4, 0x7, 0x0, 0x1, 0xd7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) ioctl$auto(r2, 0x400c4d00, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x2000000004, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msync$auto(0x7f, 0x6, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 2m34.004813983s ago: executing program 1 (id=2079): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x1ff}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r0, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25110000004000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300480a", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="10b84000010623000000000000000800f2805faa3fd5185698515505201f4564bb22e2c18d7ad223213b6b2f4e201e102b2b8d7d36878ee863516d2e9276b3a9", @ANYRES32=0x0, @ANYBLOB="0800030004000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="14000200687372300000000000000000000000005400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e310000000000000000000800030009000000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006272696467653000000000000000000014000180080003007200000008000300090000001c000180080003000000000008000100", @ANYBLOB="08000100", @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2504e40180000008000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000080003003c0000001400020076657468305f746f5f62726964676500080003000900000014000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000004000180a000018014000200726f7365300000000000000000000000140002007767320000000000000000000000000008000300090000001400020070696d367265673000000000000000001400020076657468305f746f5f68737200000000080003000500000014000200776c616e30000000000000000000000014000200687372300000000000000000000000001400020069703665727370616e300000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000040001807c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000140002006261746164763000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000080ffff1400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="200001880800010084e0dbfb01f8c1414684152eaa8e9a91bfaeb1978023056835e51c8d1fd963711438811882ce0f01e7248f5e", @ANYRES32=0x0, @ANYBLOB="140002007465616d3000"/20], 0x1e4}}, 0x40000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r3], 0x1ac}}, 0x280408b4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x54) 2m33.157254774s ago: executing program 0 (id=2081): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010326"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m32.91012397s ago: executing program 0 (id=2082): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) mmap$auto(0x200, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) setfsgid$auto(0xee00) io_uring_setup$auto(0x40000ff, 0x0) r6 = open(0x0, 0xcd1e23e41b02d660, 0x154) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) execveat$auto(r6, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) mmap$auto(0x0, 0x9, 0x3, 0x4000000000eb1, 0xfffffffffffffffa, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="00000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2m32.215771329s ago: executing program 1 (id=2085): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime$auto(0x0, 0xb746, &(0x7f0000000000)={{0x4d4, 0x2}, {0xfe, 0x4}}, 0x0) r0 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0xfffffffffffffff9, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe800080fe00"}, 0x1f) 2m31.716735212s ago: executing program 0 (id=2089): ioperm$auto(0x7, 0x6, 0x2) socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$auto(0xffffffffffffffff, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setreuid$auto(0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) 2m31.572557404s ago: executing program 1 (id=2090): mmap$auto(0x8, 0x20009, 0xdf, 0x1a, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) open(0x0, 0x261c2, 0x84) open(0x0, 0x0, 0x130) 2m31.504462862s ago: executing program 0 (id=2092): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 2m31.352349319s ago: executing program 1 (id=2093): mmap$auto(0x0, 0x20009, 0x809, 0xeb1, 0x401, 0x80000000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x82082, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210029bd7000fddbdf251c000000080050800400400008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x890) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r5, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) 2m30.934444087s ago: executing program 1 (id=2095): r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xffffffff, 0x0, 0x0, 0x2, 0x4e) mmap$auto(0x2, 0x2000c, 0x10df, 0x20ebd, r0, 0x1) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x296601, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0xda4, 0x3d7}) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x0, 0xc9, {0x3, 0x9c4, 0x80000001, 0x1, 0x1, 0x1545, 0x8, 0x18, 0x401}}) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 2m16.343276699s ago: executing program 32 (id=2092): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 2m15.641907117s ago: executing program 33 (id=2095): r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xffffffff, 0x0, 0x0, 0x2, 0x4e) mmap$auto(0x2, 0x2000c, 0x10df, 0x20ebd, r0, 0x1) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x296601, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0xda4, 0x3d7}) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000000)={0x0, 0xc9, {0x3, 0x9c4, 0x80000001, 0x1, 0x1, 0x1545, 0x8, 0x18, 0x401}}) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 1m24.064733023s ago: executing program 4 (id=2330): r0 = socket(0x15, 0x800, 0x10d2bed0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/usb/usbmon/3u\x00', 0x1e00, 0x0) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/usb/usbmon/3u\x00', 0x1e00, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x20008, 0xe6, 0x200012, r1, 0x800000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) r5 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x136b, "8f6ca3689b737d4629d7867bca48"}, 0x7d) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0x9) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x40000000008040) (async) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x40000000008040) r6 = geteuid() keyctl$auto(0x1e, r6, r6, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a80)={&(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRESHEX, @ANYRES8=r4, @ANYRES8=r3, @ANYRES32=r0, @ANYBLOB="d44aeadda1033790b7bbb4e1463edf0cf63d427d20ca120ff3042461115c6539702c18a3088cf75662cbd08c16bfba3d9b1f37304c85b036af2879d1647d2387637996a9711ee0343cebb625f11e97803751e9f29bee6df612c1868290a6ff91d5a4568444c6a0edc5ce68e09c7af84a6fd31b35810e094abf0400a352a97b85afee0afca8d76fa1e900448b738ffe3d0f5f47affe9653f357950bd1c032", @ANYRES32=0x0, @ANYBLOB="040074800400bd80003a0001805ffc97063175e686bcddb0e61fee6cfbedb67f3fa3829199f32444e5a471e8ef0d248620169ccb6fae6a549b2466a3f64c53232aacae000004000180230001809c60ae270973d9bfaeddc883c9e1368f912d03b532d21831d5bc", @ANYRES32=r6, @ANYRES8=r1], 0x12c0}, 0x1, 0x0, 0x0, 0x8004}, 0x240040d5) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x100000011, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pci/drivers/8250_mid/remove_id\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="04010000", @ANYRES16=r9, @ANYRESHEX], 0x104}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="04010000", @ANYRES16=r9, @ANYRESHEX], 0x104}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYRESOCT, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x51) read$auto(r8, 0x0, 0xb4d3) (async) read$auto(r8, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffdc) unshare$auto(0x20000) 1m23.67464224s ago: executing program 4 (id=2331): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime$auto(0x0, 0xb746, &(0x7f0000000000)={{0x4d4, 0x2}, {0xfe, 0x4}}, 0x0) r0 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0xfffffffffffffff9, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe80000000006000"}, 0x1f) 1m23.106358974s ago: executing program 4 (id=2334): r0 = socket(0x10, 0x3, 0x84) (async) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0xb84) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x7fffffff, 0x0, 0x4) r5 = socket(0x1d, 0x2, 0x7) (async) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) sendto$auto(r5, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r8}, 0x36) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x47ffe) 1m22.039370677s ago: executing program 4 (id=2338): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500c862a41184f600000a00010000000000000000000a00010070b28a70c5dc0000080004000300000006000700ff0000000800040006fdfa"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13a072d478b59ddd5442ccff59d0d5d2672fba508b21ecb380e90f892280a6bf2b81c11843dce6ad31f7e7cc369bfff817a564140000000049cb911b8e8a4e8d5939394bee06be5acc51016baf6effa33e9882c6c8a0cbd4feb2980466a4274da5d496c47d5a113309e5"], 0x1ac}}, 0x4004) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10000) 1m21.79825569s ago: executing program 4 (id=2340): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x400c) r0 = socket(0xa, 0x2, 0x73) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0xfffffffffffffffd, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x100082) get_robust_list$auto(0x0, 0x0, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, 0x0, 0x9) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv2_unsolicited_report_interval\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400727f8dd2e6a15e59c27213340a990000", @ANYRES16=0x0, @ANYBLOB="000428bd7000005000006b0000000d00180061680c6789a6fb56dd000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x2404c084) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) pwrite64$auto(r2, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x05s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x10000003) r3 = gettid() timer_create$auto(0x0, &(0x7f0000000040)={@sival_ptr=0x0, @raw=0x4, 0x6, @_tid=r3}, 0x0) capget$auto(&(0x7f0000000200)={0xdc, r3}, &(0x7f0000000240)={0x4, 0xfffffffc, 0xfff}) write$auto(0xffffffffffffffff, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv2_unsolicited_report_interval\x00', 0x3) sendmmsg$auto(r0, &(0x7f00000005c0)={{&(0x7f0000000380)="4e03c7ff89712afb06da612d101bfda890e625a3121e271b70d277fabd317878363e216b5ec6d0ee73387af04393f5cf81f72a2e61", 0x7f, &(0x7f0000000480)={&(0x7f0000000400)="975df2b5ddfc7d64ad302f501851fa0efcd4de7f0f73315aabfaa3e87499209d0140dd21f4937ccbc4dea6672afe3bec4378ff1f92e972a70d3291929f79366634fa10ab9f0b7354ba254a6c2f19afe76ad5841fef0578d872bac51bd818c94234bc71602d4820f0859a59b2a168cfdfa7f966", 0x7f}, 0x5, &(0x7f00000004c0)="f0c4270b0810dcdfbb5a6ffdbde706a5c11ea5e3b6c714efe676db9341824da532ae86ab67b077c20627cdb6ccafd783e3e4846ee7abdd98f3af6049d8876f84419ec5cfd19cffc9a0ef868b9272e7a810fc9e01fa601bb86ad6ef413f5ea48a13a4b50c80a5044f0c707ab5a184bb5a8795a1d77bce5ac2faaee3d6f946b63d94af567b338138261a590fb072061ce676bb2629386f4bcb3a9901fc443146cadb7e5793336f42699cabe1d0e2802e6374a23acba79af59fc59f0347439f9bf8a214", 0x40, 0x5}, 0x4}, 0xffffffc2, 0xffff) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1m21.430535218s ago: executing program 4 (id=2341): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001000200"], 0x30}}, 0x4000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x81, 0xeb1, r0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$auto(0x3, 0x0, 0xfdef) r7 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x3, 0xb, 0x5, 0x4fff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf2579000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x804) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) socket(0x2, 0x1, 0x106) fcntl$auto(0x8000000000000001, 0x7, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x8, 0x8) 1m6.019000151s ago: executing program 34 (id=2341): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001000200"], 0x30}}, 0x4000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x81, 0xeb1, r0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$auto(0x3, 0x0, 0xfdef) r7 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x3, 0xb, 0x5, 0x4fff, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf2579000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x804) r8 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) socket(0x2, 0x1, 0x106) fcntl$auto(0x8000000000000001, 0x7, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x8, 0x8) 53.014525326s ago: executing program 5 (id=2410): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x1ff}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r0, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000300480a000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="10b84000010623000000000000000800f2805faa3fd5185698515505201f4564bb22e2c18d7ad223213b6b2f4e201e102b2b8d7d36878ee863516d2e9276b3a9", @ANYRES32=0x0, @ANYBLOB="0800030004000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="14000200687372300000000000000000000000005400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e310000000000000000000800030009000000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006272696467653000000000000000000014000180080003007200000008000300090000001c000180080003000000000008000100", @ANYBLOB="08000100", @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2504e40180000008000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000080003003c0000001400020076657468305f746f5f62726964676500080003000900000014000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000004000180a000018014000200726f7365300000000000000000000000140002007767320000000000000000000000000008000300090000001400020070696d367265673000000000000000001400020076657468305f746f5f68737200000000080003000500000014000200776c616e30000000000000000000000014000200687372300000000000000000000000001400020069703665727370616e300000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000040001807c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000140002006261746164763000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000080ffff1400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="200001880800010084e0dbfb01f8c1414684152eaa8e9a91bfaeb1978023056835e51c8d1fd963711438811882ce0f01e7248f5e", @ANYRES32=0x0, @ANYBLOB="140002007465616d3000"/20], 0x1e4}}, 0x40000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r3], 0x1ac}}, 0x280408b4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x54) 51.679194667s ago: executing program 5 (id=2416): openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xb00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) lseek$auto(0x3, 0x0, 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 51.137534364s ago: executing program 5 (id=2420): mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) accept$auto(r1, 0x0, &(0x7f00000001c0)=0x100009) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 5) 50.080723757s ago: executing program 5 (id=2424): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x1ff}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r0, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf2511", @ANYRES32=0x0, @ANYBLOB="08000300480a000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="10b84000010623000000000000000800f2805faa3fd5185698515505201f4564bb22e2c18d7ad223213b6b2f4e201e102b2b8d7d36878ee863516d2e9276b3a9", @ANYRES32=0x0, @ANYBLOB="0800030004000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="14000200687372300000000000000000000000005400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e310000000000000000000800030009000000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006272696467653000000000000000000014000180080003007200000008000300090000001c000180080003000000000008000100", @ANYBLOB="08000100", @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2504e40180000008000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000080003003c0000001400020076657468305f746f5f62726964676500080003000900000014000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767320000000000000000000000000004000180a000018014000200726f7365300000000000000000000000140002007767320000000000000000000000000008000300090000001400020070696d367265673000000000000000001400020076657468305f746f5f68737200000000080003000500000014000200776c616e30000000000000000000000014000200687372300000000000000000000000001400020069703665727370616e300000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030009000000040001807c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3000000000140002006261746164763000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000080ffff1400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="200001880800010084e0dbfb01f8c1414684152eaa8e9a91bfaeb1978023056835e51c8d1fd963711438811882ce0f01e7248f5e", @ANYRES32=0x0, @ANYBLOB="140002007465616d3000"/20], 0x1e4}}, 0x40000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r3], 0x1ac}}, 0x280408b4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x54) 49.041781819s ago: executing program 5 (id=2429): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x3a) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x110) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00', 0xc721, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000280)="00f7ffffffffffffffd911d67fe69a566500211000") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000004440)={0x2968, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_MASK={0x294b, 0x7, 0x0, 0x1, [@generic="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", @generic, @typed={0x27, 0x5b, 0x0, 0x0, @str='/proc/thread-self/net/afs/rootcell\x00'}, @nested={0x4, 0xec}, @generic="3448ce7eb84d92225f48e12f42cff9a15f94895b7abc67bea6358f6bb31a5ee85e053c9ffc4947ddc830015a9bd1d722933dd74d7ade7f6a28750d3d4359580418ad6e731fcd4bdf32fdaf9ef013be6ae984f9edfe691c89924c18919992c94da5ae3ad831d678edd5c2891fb79d5cc2fe51ef7db6c634889a5247a861e3b8", @nested={0x189b, 0x131, 0x0, 0x1, [@nested={0x4, 0xa0}, @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @generic="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", @nested={0x4, 0x34}, @generic, @generic="cfca6ca426e7cd55e2c79d5b1a2b8579770b25410497116437081f33f3fb35bf0c11126f433b0ed59f0feafc61d238706e23f8f20e5769c83922719d22fd159fdfb0f82af71677b942f826b2b04daf28fa37def850f2cdba02bd773fbc25fbf574fe08b7b18ddbfd2ffc835bc262af112875f542f20f7e026e2b08", @nested={0x4, 0x12}, @nested={0x4, 0x18}, @nested={0x4, 0xa8}, @generic="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"]}]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x40}]}, 0x2968}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) 47.719146512s ago: executing program 5 (id=2435): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 32.674488796s ago: executing program 35 (id=2435): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 13.54112465s ago: executing program 7 (id=2578): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) listmount$auto(0x0, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) bpf$auto(0x5, 0x0, 0x1000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5}, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7005fedbdf25030000000800040007000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100dee581ad956e00000a000500ffffffffffff0000060006000f00000006000700070000000800040073090000"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x4040090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x6, 0x0) socket(0x28, 0x805, 0x0) socket(0x2, 0x3, 0x6) setresuid$auto(0x8, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fchown$auto(0x5, 0x8, 0x3) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 13.076781686s ago: executing program 7 (id=2583): mmap$auto(0xa, 0x20009, 0x8, 0xebe, 0x7f, 0x4) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r0, @new_prog_fd, 0x6}, 0x800003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000000c0)) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x1, 0x0, 0x1e) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0xb, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto(r3, 0x5523, r3) r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) writev$auto(r4, &(0x7f0000000140)={0x0, 0xe4}, 0x4) 11.796460756s ago: executing program 7 (id=2592): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = fcntl$auto(0xffffffffffffffff, 0x3, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) r3 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x7) r4 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000140)={"910101f0d8fe91a7d757d2c5fa156e8dc20442db263347bc2a1c09a4f34e480a", 0x6, 0xfffeffff, 0x7f, 0x0, 0x3, 0xffffffffffffffff}) r6 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r6, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000f80)={0x878, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_FILS_NONCES={0x103, 0xf3, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e22}, @NL80211_ATTR_MESH_CONFIG={0x3dd, 0x23, 0x0, 0x1, [@typed={0x8, 0x124, 0x0, 0x0, @fd=r3}, @typed={0xfb, 0xa6, 0x0, 0x0, @binary="51c1dc1ccfd21962df96ef61bb8d0d1a11276f079cc49bb59af421001e84c4df1e282dd237aab3a57ecc70eaa4a06c875c9dd5a3e870884bd15cb1363d1d724f850008fc4f9d01c3fe2d9f28cc5fdf57679afdba847cb7ab728bc8dcb09bc4ef0419a9030ecfe1833937bd8dc7e465dde45e0b63c06ed05055d6e9eb5bfab366cce2a02675388cfa21beb78b40979e32fc79652fd21d89f9646f38f7540b84b3c710961f4a2fe3da8aaa1db73954fc9dace19616352c10a81171a2ab85de419e0419df191080a70ec30e58eef0d6793d90be8ecefa797bf875622bd691b7a3e130f7d64b8f9d35ee9464022b75830a54854caac7f8c828"}, @typed={0x8, 0x12d, 0x0, 0x0, @fd=r1}, @generic="686b7e3642c54179c3f46a86ff0ee4b452fcf8d4d80de128b29f2929db37b176eeda1dbfe856c7a328c7d60a5d7a8a042e8577a4047687601d094add00418e37e24d41ff6b3746986de1a5aa4281a68d79400b556d087544b67b62fd9f735e3b7018a4047085ca50ede3de8d0d8d6a060b6dc37ae57e01e33d7c111f76fa2a165912d4133d7cc98475ff911f56c872c85ef151102ada2501f58991d0518fbc7e59c1351338c86fb5bf3d4c1f525b859d4844f70fb184e1f51808ef44431eeedd5d394c83f6", @nested={0x15a, 0x11b, 0x0, 0x1, [@typed={0x14, 0x39, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x149, 0x0, 0x0, @fd=r4}, @generic="95718684dcfb78ddd752b698908090e75273460316b4abe3d270bf4c6cf8b8291adf768c2f62ce5c82cb274803c44b00865d043b1b48757a9fdfc815bcc00e3bc6904a3423945580d7eab7a69170f8289583b99638502d1462673ffb078ad8700849064d266694777ce07b17179793945f59f5dc842298b29c879796830bdafe55ab", @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="3e84c5d31200541e83679b94bed0a877c4d7e08672413d42dd58982ff4862517517273c48f1fd058891813652daad4f40f8f45b586d8409a1a08da3958ecb24fd99a4b24eac075cdb505f0fd7fd78ea30f91c1991e74d64dd3b47234c5f889343b213fe40c98c16460cea4bea2846e1b26197683a13073c1a74c2e1a50c722e11457f6e7d25ea7538ee8d6424abf40a6723ab2ccea3b44e1", @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x32}]}, @typed={0x8, 0x12b, 0x0, 0x0, @pid=r5}, @nested={0xa2, 0xef, 0x0, 0x1, [@generic="5cf94313e885ad9cb5cc51551201e3946261582548d571c582f104932a836227c69c25d700484632d70417a484e2631796a33fbdb33e896c3990713ef58fca8851640c693f4fce68887492fd3b55881ca3791b6202395c6f770e46e5344135cd2954a8fbfec7148e4845cec51e6f413e30a280481c46cd5be729c679d22869e80973", @typed={0x14, 0xed, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0xdb}, @nested={0x4, 0x39}]}]}, @NL80211_ATTR_STA_FLAGS={0x360, 0x11, 0x0, 0x1, [@nested={0x103, 0xbe, 0x0, 0x1, [@typed={0x8, 0xdb, 0x0, 0x0, @uid=r6}, @generic="1222b2f707c541a998f98b6831a3bda28102ba8ff082c417b5709c01857334fd6445938aa6468243d1b858b3808e998abd02541a2298b651e6f4ead84d09faa8494fe62e9565fef9d35a117f1f7375cf6e646c0938811ac0d88ff4baa774b7296b3e3a3b6d7c2b78663592d419cc94048c154914e6a8827a4afa24437866e91e897d9745be17be942f01d1e82018973e340354fed2989a37ddf1ad9aa5928d7cca49970333925b9820c493176d3e5635ca970fc0ec710951396280c509efbd591590381ecc56c5469910f69d95b7a909d19dc24ff9c18f5286f2ae", @typed={0x6, 0x3, 0x0, 0x0, @str=')\x00'}, @nested={0x4, 0x59}, @typed={0x4, 0x93}, @nested={0x4, 0xf9}, @typed={0x8, 0xd0, 0x0, 0x0, @fd=r0}]}, @nested={0x193, 0x135, 0x0, 0x1, [@generic="03597f8ded22de9b395005975ea8ee46bffa76cb6d7e493bf5c59b9cff01168d875e8a98dfe7975e768544ff49d7e529c58303d83d9c5bdc72fb3e09bcdfd79072cf1321f0702e6a", @generic="da1b0666ca513e6cf4e80830ec6a8ca4ac79793830b2b92d286fecb2f751fa32d8d471a97d5335b2b4079af7528c1d93d634c0832a3f2931979aed163575effa821db95f43b01bb7bc9ca2eb6fd43117d58757c65236ef301aa8dda3afbadddd3d4fb450d4401543620f0045898c17a4eaff17a59f1ee750ae7b6f8d888ee8db5ca3fae55d1a540001a4066f7512c0449d7f01ca882abdbe1be81380fb247cd6272a28aa26ba066de078afc3d15eb7d978826fe05dd42d44e0ac164096514d1a5b7eb5d0bc613e29db006b348635f9cbcbbaf4cbd56d44d2e8fc71e6fd1927e8e6a6279cbb6999803d90e7add8080f7fd0677b7aa2cc4786", @generic="1e1ff4286bda0b41530c8ed614a7ac97b6b1ad6915508d9b9400540e40c00e0ba0e63d51818f84c68332d9fc08", @nested={0x4, 0xa7}, @generic="4dc29a1ebd401c111365ad8891db353a54aa686cd2076942addc258c5737"]}, @typed={0xc2, 0x10d, 0x0, 0x0, @binary="af71bf6cc85f66f46244eadfaf2570cde71274199860e198e0c169085185a4aa321ce830e7b2af02e821aead6f7411383b92e4ec0fc2907779c64c23c46289f187e1404df739b56a4641bd8dccc5c0df53308ca4303072705324e4a988ded2be60250e16b633df1c0cce35d5b23ea273b545549c4915354827a17ed1d1987b0af94b435f1f4a885425a29fd1c87586154841204bb52e39db7ba80d91e73c804e3629209c816ea10042436280f8a46a8a56650e6401ca8b32f001b30073f8"}]}]}, 0x878}, 0x1, 0x0, 0x0, 0xc000004}, 0x4048080) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0x400053, 0x9) 10.438843367s ago: executing program 7 (id=2598): mmap$auto(0x20000000, 0xfffe, 0x7, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/udp_slot_table_entries\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x2001) r1 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80000, 0x0) epoll_pwait2$auto(r1, &(0x7f0000000240)={0x854, 0x4}, 0x6, &(0x7f0000000080)={0xfffffffffffffffd, 0x3ff}, &(0x7f00000000c0)={0x7fff}, 0x8) socketpair$auto(0x1, 0x1, 0x20001, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x2) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(0x8000000000000003, 0xa728, 0xf, 0x200000004) r3 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0) r4 = wait4$auto(0xffffffffffffffff, &(0x7f0000000280)=0x1000, 0x2, &(0x7f0000000100)={{0x3ff, 0xfffffffffffffff8}, {0x7, 0x9642}, 0x5, 0xfdba, 0xfffffffffffff934, 0x2, 0x8, 0x807, 0x3, 0x4, 0x7862, 0x6, 0x4, 0x4a, 0x6, 0x9}) r5 = prctl$auto(0x3e, 0x0, r4, 0x1, 0x0) r6 = getegid() setregid$auto(r6, r6) shmctl$auto_IPC_INFO(0x400f, 0x3, &(0x7f0000000380)={{0x10000, 0xee00, r6, 0x8, 0x2, 0x10000009}, 0x9, 0xc7, 0x8, 0x9, @inferred, @inferred=r4, 0x7e, 0x0, &(0x7f0000000280), &(0x7f0000000300)="28e4e546f35a261e4bd78932a8febd24676a5ea538493ec95638da2eb6a6de8314d54db7daa4da930011a946979c337ed896ce240ae8a0d212bbb04df93e8422e05e6c3c9813a6e0"}) fsconfig$auto_FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='\\\\/\x00', &(0x7f0000000180)="12832fd94ba597f025275fe371a0a395cf90e64e2601a664d8070db8fb98355e3424cc4837368e035017ed6741c2f470c211ad0ffa0226f6396760c03997e70754172758d704911ecd9e16cb9a645c002e9f7fba1926095eac91c1d256799cc28a6ae2f155f3d28f162ac85c3a2674eb6cf39df7cd2a62476bf3009ac13e4537706acd85c25d73dcb0da151833507cc7e9fd2ebc0077", r6) pipe$auto(0x0) splice$auto(r2, 0x0, 0x2, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) dup3$auto(r0, r5, 0x6) 9.270926411s ago: executing program 7 (id=2604): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010326"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) keyctl$auto_KEYCTL_SETPERM(0x5, 0x2, 0x1, 0x401, 0xf07c) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6ef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffff7fff, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$auto_rtc_dev_fops_dev(r2, &(0x7f0000000040)=""/21, 0x15) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r1) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44020, 0x0) close_range$auto(0x2, 0x8000, 0x0) 9.133156336s ago: executing program 3 (id=2605): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a', @ANYBLOB="e4ac932c75e718d778ad070b613877c914"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 8.809069868s ago: executing program 7 (id=2606): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39cecffdd8") bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x4ac85df20613159c, 0x8, 0x3f) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) (async) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) (async) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39cecffdd8") (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) (async) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) socket(0x4ac85df20613159c, 0x8, 0x3f) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async) socket(0x10, 0x2, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) (async) 8.776914915s ago: executing program 3 (id=2607): ioperm$auto(0x7, 0x6, 0x2) socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$auto(0xffffffffffffffff, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setreuid$auto(0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x10000000, 0x9}, 0x7}, 0x2, 0x0) 8.470646489s ago: executing program 3 (id=2610): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00l', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 8.214956697s ago: executing program 3 (id=2612): getpid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) mq_unlink$auto(&(0x7f0000000040)='/dev/rtc0\x00') pread64$auto(r3, 0x0, 0x8, 0x75e8) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x40082, 0x0) msgctl$auto(0x4, 0x62c6, &(0x7f0000000240)={{0xffff, 0xffffffffffffffff, 0xee00, 0x40, 0xc6, 0xfff, 0xf}, &(0x7f00000000c0)=0x8c, &(0x7f0000000100)=0x4a, 0x7, 0x80, 0xc, 0x5, 0x3, 0x7, 0x0, 0x2, @raw=0x4, @inferred=0x0}) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f00000002c0)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, 0xfffffff7, 0x7}, 0x3d8, 0xa, 0x8, 0x7f11, @raw=0x1, @inferred, 0x4, 0x0, &(0x7f00000003c0)="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", &(0x7f0000000140)="99263440333d1cd0f1c20d8310dc89a57fd20977188897e5eeecefc9ce97d81e1b4cd6"}) lstat$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000013c0)={0xf, 0x60, 0x10000, 0x100, r4, r6, 0x0, 0xfa, 0x7, 0x8, 0x10000, 0x6d, 0x4, 0x6, 0x1, 0x5, 0x11fa64dc}) move_pages$auto(r5, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f00000001c0)=0x400ffff, 0x87) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe4643, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0xe4ffffff, 0x0, 0x40080}, 0x20040000) 7.711527132s ago: executing program 3 (id=2614): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000480), 0xa2200, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000004c0)={0x5, 0x2e9, [{0xffffffffffffffff, 0x0, 0x5, 0xd}, {0xffffffffffffffff, 0x0, 0xffff, 0x4}, {0xffffffffffffffff, 0x0, 0xc43, 0x3}, {0xffffffffffffffff, 0x0, 0x6}]}) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r1, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x4000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf2515000000051100ec0000000c0006002e920000000000000800010000100000"], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 6.624454066s ago: executing program 3 (id=2621): ioperm$auto(0x7, 0x6, 0x2) socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) bind$auto(0xffffffffffffffff, 0x0, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setreuid$auto(0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x3f000000, 0x9}, 0x7}, 0x2, 0x0) 5.135147031s ago: executing program 6 (id=2627): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x281, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002c40)=""/25, 0x19) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) 4.834373444s ago: executing program 6 (id=2629): unshare$auto(0x40000080) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000ff00fffe, 0x400000004) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x4004) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r3, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 3.997681316s ago: executing program 6 (id=2631): openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xb00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) lseek$auto(0x3, 0x0, 0x1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a9e00ff1500000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 3.595241325s ago: executing program 6 (id=2633): mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) accept$auto(r1, 0x0, &(0x7f00000001c0)=0x100009) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x6000000, 0x9}, 0x7}, 0x3, 0x0) 3.491755099s ago: executing program 2 (id=2634): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000097", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e667364000000000800030085000000080001"], 0x30}}, 0x4000) 3.29056958s ago: executing program 6 (id=2635): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x803c, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r0, &(0x7f0000000000)='system.posix_acl_access\x00') socket(0x2, 0x801, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) unshare$auto(0x5732) socketpair$auto(0x1, 0x2, 0x5053, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3, 0x1, 0x0, 0x1, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000280)=']\xe4\xbebI\xe7\xf6bV\xdd[qTdV\xf0GTh\xff[\xcd\xdb\aI\xcd2\x06\xf7i\x8e\xa6\xdd;1\xeaO\x8adK\x9e\xbc\xf5\xfc\x1b\xf0J\xc3\xba\x1d\xb5\rK\xa5U\x90Q\xce\x85b\xc1\x8dT\xd5\f\x9f>\xf0\xbc!3\x87\xbe\nJ\xa7~\xd7\xe0\xa1\x06~\x0f\x992\vUh$\xf8#\t\x00s\xe8\xfc\xff\x1b&:\x12V\x94\xd8\xe5\x02V\xb4\x82\\\xc6@9\x89PQR@\x1b\x12\x80\x8b\xb6A\xc9\xc9\xfc\xd4\b\xd9v\xad\xc5\x7f\x8f\x9a\n\xc9]@\x7f\xbfevk\x19\xdf{\xbb\'/D\xb0\x8d&\xd1L\x01\x99.G\x1e\xa0\n\xbec\xafj\x80\x9b\x19i\xe0T\x86b5\xa6\xe7-!\xfa\x9flg\"\x02\xbe\x00V4ewI\xa7b\x9d\x86+\x8f\xab\x9d\xa7\xfe\xbeRo\x14\xc1O\xdb\x1c\x9d+#\xa8/\xbf\r\xfa\xa2\xa8R\xef\xcdk&?p\x83zT\xa9\xd5X\xf0v\x84\xb0\x0eW\xda\x0f\xcc\xf1\xcb)\xc8\x06\x03\xb3\xb4\x8f\x82z\x83\xce\\\xaa\x83|\xc3xR\x7f\xcc>\xc4\xc4p\xe7\xca\x85\x10\xaa]\xf5I\r?|n\xee\x13\xd0I\xf4\xd1\x9bA\v\xc1\xec\x90\x96\xe9|q4\xa9`\x9b\x88\x1a\xc0\x01La\r>>\f\x05X\xfe\xa94\xc6{_mD(8K^P+\xcf\x0e\x16\xb7iq\xa2\x93D\xea\xc2\xc3\x9c\x18\x9d)\x00\x00\x00\x00\x00\x00*\x9b\x94\x8c\x8c\"s\xd9w\x10mp\xd9x\x9d!\"x\xab\f)\x97\xa9\xc7\x8b\x1bw\t\x1a\xb7}\xdf\xcb\b', 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xebf, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="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", 0x6ab) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240)=""/7, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40100, 0x0) 3.226689324s ago: executing program 2 (id=2636): mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r0) lstat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x6, 0x6d, 0x1, 0xf, 0xee01, 0x0, 0x0, 0x81, 0x9, 0x1, 0x800, 0x6, 0x3, 0x1, 0x401, 0x10, 0xfc5}) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0040010}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4020000", @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf2507000000d002028024003880040094088004001b800400928008002100", @ANYRES32=r2, @ANYBLOB="040000800500b600000000000c0060006e6c383032313100b481397841e68b0137f5eef4a358fccabb41696a5d46c761bebe98e71df677c36961de0252086d78d76098a81b77a4f880a707d2699fdb1027d0451386e6cea45101c3c3d5b1e9ce0ce2480cfe635aba019e80bd003400aad43ef60f71d7897901a51e6851d70f8a84b20b0bbaabc895eaa89086b02ce682ab404beb02b1c4ab426a2d9c33f5733d94b0a7a0a43186e0dc64ca60d85df4498d996fd17d1f6950d5c7b434009baa2ce32017377fb6382db105e94e2b45c038be05a46154b5b8a8b6ddba20b357da02393a9811952e1f6996dd05e0d1f88984b5a0ae223922951d428619c6387846944c39a000b33d83db4ce4b40a7afcf23c2b73c1d4526e94e068def455290b6296b12f4e57a0cab5fc000000cb0a03d8e3e513a401ee564f3eb72e258c0df436f8b951b390b20c86b5530d6cd6dc239296793708b6ff8b6215c8bb204ac3087bae31aaaf3dfb26f4a3495b382e28aeda8364cfc138962cc35947bd3b61edccf642030d05894e165d0f2d1ad8493d4237841dd70a93c3f217829f46d97ef2aba4e8af89775948ff12422da4d62002d9746788f7f07b36f03ccf80a72cccf753c4f48adc674b2d6f6f29936715fd13c4f500a3fa9bfc5d1a7d0a3acf942a2dafd5b564ab9c8f50ca7902a3c6091f5fe1dd4ba12909ec69a0a18440879daad9099c307bb2d6ffe3f62a5a70177d44e2bb7ecdfb8347768c55f3cc43f3f475d19e4d15a300000500a30000000000d2ebf0aec89a5414d485123a901504f7e9e6336b83aa6422b2d93edd97d20b20f9217432204c1cfb6034506ef4d766c7898843dd1870a1843c4a613a32e2a52bf0c94d9f13177a97920c214ac58e80d07d49bad10a269d3fef1effb07be46621f731d4b3269a805110abd6602efedbd8d679fd504498da42b58056d17d955aa15508000600010000800800060001000000"], 0x2f4}, 0x1, 0x0, 0x0, 0xc8e1}, 0x4000004) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r3 = socket(0x2, 0x3, 0x100) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) lseek$auto(r4, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) accept$auto(r3, 0x0, &(0x7f00000001c0)=0x100009) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.805238904s ago: executing program 2 (id=2637): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r1, &(0x7f00000004c0)="c9432739b5580773", 0x8) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0x800000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) inotify_init1$auto(0x3000000000000) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x12, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) statx$auto(r3, 0x0, 0x1003, 0x4004, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x2020009, 0x401, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/fail-nth\x00', 0x82000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x8, 0x3, 0x0, 0x7, 0x101, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) read$auto(r2, 0x0, 0x2) 1.747516987s ago: executing program 2 (id=2638): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x41, 0x0, 0xfffffffffffffffd, 0x1000) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="9ab50f4ecf847be05f351e6488b61b974daa95047bb74b315eed6dca52dbdae0242fcfb571a66c97616937dd93b97753a5af8eadde84d075a946b81cdc6c72bd40aad677442d78a9994343e93dbf7822b41297f10050e625de61812235419b61ca6e1cf512102bf572750799aa3964739a05ea21d618836df2cf96ebcc6d292f0545e1eb5e66f83ca5b02974f6e1cd2acedee5d3b4ffdafe41befaaf1e517f633ea0e3d67782d4189bdf2c6a65f72859659a9ab103b7813b1630bb6f2fb4863586abb50472130ea12c4b4aba1e6bc7bac83382aa3bba6fc507788cd0b19beec49ae5b89b5a91aa0048f0d058daad9b1f0a396c35595d66e0ca73bd85830896d61370d97956eed87e06c4199bb2afa4338793b007e67835158c000971ca880dc7ee66113cf14495b0f4339cef5ac32c775d7db142f0a63d7fe953177f2ef74fbe6791a0dbbeddb2060899962e8a45a9fa8f07c39e260873330d84b00875d18b79e1c773918de40b9d457e92aa8cb305e4d88c10e8e27e7452362269216617b6688155473a8ce9850ba6627d1dc13f6b12679cb1a2c292ec5f4179b5f3b3375ad86b07e9d0ce7b00aa9ed5ca064645dc63be31d980f23257e30f76da5b7c7b9288b1f9201526113dc5a1bb6868da8c4097911a19863753cab06714d88848a93cfb183d2fc04ef62292aca7030578e9deb86077d38502dffc31e5eba12846f302793061d70cd92f6e8dcea38a4d51e9d96e20e49b70fab676aa1e69ce4ad9350001eaa3dd7f9af5aedf664876fe6fdac17799b2046f62fe5052ed5f3408fe2f1c716e9e9a1f5ba039a39db432c6dab2ec3a720a0415baca171e6e611c14bb511444af9e559223a1e9d2692ce839be9168d82477cbef48d915698ab249e58667942914a841828f4e15d5bb6d00fddbdd6b5b170f0326be5d5e2f515e7e5a8933fcacbd3d14f5d03a3b85a28462f3b22c5a0fea03f8ea21b5a0de0b1ff8ff47e2a6a7d2da26ec901d27ca5816108494e1ee2d8e9c1af62daa7e2f9437a735d504bb46dd720578ed308f70609188ce6a15d30bd9fe10e4c028f46450a7572256f84d1d59444e4a08d6f79811115506206e4d6714cb12dac45a6a85be8913ba01d71e5f19d6e90d830958a3f56923edb5a0efc8346d4d193a0abbb658f219279a5d9f5c5d524e5f000cfe9943beb70eb5994e26aadbd3f47dc18003165b39b5cf718900ab4b845a0493481ee388fccfc460859bd85fa63c0b58b775d3729db3c1cc58573e36b3bd33dd890a9d26a2a3a8b2def1a7c6eb3129cdceff29d3ec2ff52b9bd2ecb7ebc103706366c9e88c089f332d8bb380dc3afe436e490a538cd8c43ea63bd65e9486ce2c52e55d9eca84b24cc77f33e2c3096a04705dedc238779c4a497082d6d6a7dfb3b5259112546874411622e28e15c70ad98fd1e916843b06c4ee3f13c3cfdf5fc0d393391bad9d68335c0b4e32c4407c60ba070eeb6dd282b2f7ff6134e039eb011f0b4026f2ed46426fb07a335c21614dbabfb7cef26b96f29b0805642e9b0f5d9c675d5cf89111791600d330d8503efd3ee384e5e7fe02b8137f8881e8ac23eb4f4fa6a1a88a9fa8dfa9e446bb7f117a3d6687b2d2d505c461703eb5df4032b9371ebe49710c8e8244f10943a516bb84307769d12ea0d2c5244d8f41e646d162706cb35b9ac6e2e1650eddf1cca58c1a8fd2c8e6fc485ab478dd2a0913ffdce715d775f38c4b692d16cab3a24edc5fe496dc98a68451eb4776db277465525780d92bcaeebf145408a6607f86fc94043ee30683106cde9c71edd460f783e602465f32554c09376860d3d9420badf095ff9fdfb3311af5800eda2ee5741e555ea42b121d1f7001b471df869b7b2b0de36a31b443e75bc8f101884c227fab4951f0bd1b503f9d5c816afe75061648eec404c1ed0eb57e4f8a5e966f45227be127369550f5daec076d5020274a9a5bac078e700dd9b95ba961be08f97fcd543f88691e32d0aa9f8776f58c96de8cce194aee6f9010d7710b692ddfa24457a3a623b91d743521dfe43a21ecce2863356308526687c7ed1169386be11059614cd138d439725ac4b5c0a9e04f503dd1461e57935de94a12a64d18c1845500665f81bae9ef33033a4a2d04ca381da212a68e1f267f03ffb71db53ff0da93176b47ff0568a5acee10190c12c9fda1543c318229708f6985e224ce750e9ca937d6927c1de7e5fd7e7db6cd42478e0d11a97e8959ce0118d556960d4cfde1625c72220ac1988fc3c69850d00a08246bda3846b623e0c1a731d47ba3216fa91139d5f5a8af9897fb08bc53e682e669e4a20962f841e13da43b62ad6eba654f815c2ad347ae279ab134cca6a1ebd06e822cdceeb58d4329d501c216357a12fd92fa0c27de77e756cdec09698284802eb2d21ca7e1a3619da2591c1fe29d4da0744f1110594f57a20c286f78b1111814c55715e05e4c753bc0242c9abb850b508e061c1179d88fb11b33bb1f34d05cb38e99a57d1a06ea61590431db1cf22817c85f885978f08f92335e997eff96a5feb784e410d41a953a6d92eb5973c08aa728ab673c0e693f47055c112d8efc8bd84f4c85b2f160b4c47da302cfa214b822b68276fbd50933facc06956aea16f35e61e859072749a49f13d33376ec41f7dc85625e1e48fc821317f43b0be304f448eb1de7c68ba84e774a2d22b1d3f55c144f59c15fc19c6df45ac3ac6461df9aebebfc8738b7b2e0dbdd99909498a3741d9101d82540a64b5e7a149e1f98a0788704a843faece338d465826b58f3e11aef73d44efdce1739b1927c45248d32be74ea0fabbe17e7c0657cc68419d96f19119493ab5569c86aa80b6bc4b410b011a12e1ad5365c674720c2f2a4c78962affef7e63c4ca0d4235f977ae416153edef6402b95ec61cb561759217002b66a78b65819d1b649a85308943148ac025410dbe4f9f18694a1c7289118035f454f81e1d9b6ab076ddb50e8c7b8ed2fd36d4dd6c5c928041afc8936fa83244aa9dbf08676cc30580d8fee518e24ed4089b63f9930c194e048b88cec98f9190a81f1a09e80c2af63e4738d4bf6c8e4eff41a846a25f8d74ab88f9d85c9b059bab15fc1fc485e1f92fa4f41a3a275e9609ea0c7dff7c9488f482067f38f4e8f424007498ac1da9eeba9857b34dc21d552dada4aff917d37463fb054ddedf52ab3def2813fd115e3f36c3f82719a486d2605aadd9c3e708261e2acf13fa9cd81fa2f23aea49b3a42b3ad43bd140ccb5c274c099062d1148d1def0171c5b8b49ac6b462de5246523cee3bb96d6340c8992114ce7f3d0d6ef92f02bfe3142dc1cc03310ea49fe1000b6a5e2353e25b4d373830a2030f7a7f33c60d583ca9ecf9930a22fb8415364d22a1f5aa8ebd95930123e04edaa80b5bdd0473a2c95be3797d6100145d674498fea24a87009149aa27a7060ccaf0ea0675a0c498370beff8978604ac3d3aec9cf3ad53ec8a698c5e1a44d0a4be22e5a16547db9eef5577d6ecd5a2967c4d4255e8908ccb347fe7cb5a7246345035a7a8a12993f8fdc661ffd3a84736ee9a5852dcf8e3aca4afa19a598c9379dd6d3c594e9aa54c1b5f0a2add05c979c76f9d1796c2072e0a6b5348ec199aa7abb34cde352f97e61823977723500867f803371f115c3528b30442fdd828f872d7c962f21053d6fb1fea2ac4e273902edf14d1b9c362f76c67ee7ff175ddb443afd3bab63767d2a64416d50015c09ae0a0faf5b6cbd39a31b7d324d110a84800f2c541cb39836c4cc2e7de0596b78e580533c1dc1126acc7aa5e8d2c2680b511ef4160351e924411b092a94c0a6df787eea3a6960ee27c1480ffc3dd286af35183020315a00ea9dc2384edb0a9c420c12a35ef16fa73d6caf07d796416768be12fad0fd636304918b7cc7901d5db64e6d3d1f7560b859c2044f38e46eec7c2cca01492309c948880326e60fb540bec547626cb5ceb48eae7f0bdd5f38b7ca69159bf39e5a6dee36f2199bae38a2d21e3316c8debcadfb4121af4446cc9fe2a536689816f66510d8906a1f96db1b71a7ab1a9de45e67d93586db93397eae71e6eca1e84531ba50ee9ab11bc01eba40063e74b0efd6ae4ab90bb50e2312861c92b43720e83d3bad50bf66f87be98c40b275339177dba753ddab002b07827ab860e9613a1bb0c13e690dbd71f5a30578e5ab1d1426ca07cb698f30cdfe1853a10fa976822da5c1b3ab8bd6df956e74a667867b94f26b696b9379ab818eed48a13fa6a3590cc1b6e159f25d3f7f7c5178ae84974460d7880b84aa90077a0a8dce82fd6bed76df7cf1dd42b33ec26cdf374ff068db186ddf08112eabfcd7b3f25afaa765bc831a3c7e7d93d6794c2c92d1223de9b15217632aa17ee09651556d0617219d9142f155dd8b1d87cf31715113519edbfdc5d6849feb239a73b53f94430f8e7ee022cdf8cc9aeb877e4109db461e6dd68351a1522d41854ff59a91b854cab163329442c01cbc3b352c8068131c8c22f7b9220e009e3890f396d5fe69137e2f0b52b27d190705cc4dac692ebb7d9662268cc641d03804d7f5bc99437e49a3e2e6b8879d37322faaec90df4a1201bb1f58d1eedadf74df18be13e0aff304b583da98589aa22e27b1f78beaea663e3182d2b12a2f3c835c0feb3001d787b297a2aaaaa649fbd9269dc534c810ea064d6d27d54e54f73e39ed4ef101491c144f7010aa2519587cda497d770763f60e6d9df6672c3a47991d757b7ccaa38550f42d0ed724b52c04a61e3670a3af1bab73543112f20b4b17e1ca567c2e2dfd8ded52e80ef79f2f0ca312099a2905ee699a61eb34aee75c974ba6c8e6b6f8d4346baa5164edbf9f892f5b20fe2e4d63d697e17a41ff323e114e5b8f8bf9204ac842e4cb0eaf872ed92e92a09a61e17010be88bcffa11a464e9dd15f772b17a0a26a384a6bbe80a2bed2c5f3c5db439384781893c68f35e7f04dd4b90fb35566b4b5e230410f2a88302436113a0d7ce0a589e9155273ffee7fc927dd0f1e5592c727a2bcfe61eb5d95811981d0d307406d5da4c6c164be156558675bc34d2bb1e9bfb3ff557b101892ba10bce45f85ff739acb1513058e74ebf675dafc64501525b510f70338d31ba19b7ab4eae92c2c33d59b616fbeacb0b0af4615a08b316d9ea8ef31b7e27f0d286aa4f918d8fd553d8e463df06cd6a7303b5f0ee14e2b60e910f02e7e4eeb55ca3b1210050359d9f662556ba38c50ea31080fe172438b438af83572cd33451fb92ec62ab10d4a439c571ee290d524270a0cc90665c9f6347f9f3d78efcda9e6e13a255f9080f66dbf0030cb9c1d10ade44412bb9e5783a86e35eb5b28095f52942b83013967d661e2e7bd9b525f1fb8b0d127dce73876805ed4954bd7cf9cf6f43c06c4463dc9d339394e2f83304223627d76d61b245140f440446d4e6eabe0450034f82b1d6f2d6d090895de305a84e7bb7824ad84429aa50775536dbda7bcacadfe01b5d6ca8e46b897c21122655677a176bab6b260deb3d6803607b9aa85d74e748aedc17537bb0bd0b4800cd9ad3705b9960a61f501a4bdaee05309c5537189a8d616554429de7717674aa88674733fb68eeab898aade23712c8058a855904f4e7085115f36b6df394864d88e6cf183753248eefad820ff3f1dda2ff430da2c16633f7bb86fced18a6217c71a412287f31c1699553ad9695195a95baca9cd3f6510d9dbcb5a404fb02d4a6a476090ffab0efa6") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r2, 0x0, 0xe) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="002000fbd3930ad34e55cb7dc371f8ec5addd4f0495568b600fa78b2d5891a9334d02c2195aa740c815e2290ae3a", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xff6d, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x703, 0x70bd27, 0x25dfdbff}, 0xfffffffffffffdfd}, 0x1, 0x0, 0x0, 0x985}, 0x4) write$auto_tty_fops_tty_io(r3, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r8, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000600)='/Eev7audio1\x00VI\xa3\xaa\x01\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\x8eZ|\xffGP\x97)\xcf\a\xfb\\nD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb\xd9\xce\xb3\xfa\xcd(\xa6\x9c\xc7I\xb65T\xa4Y8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x06k\xa2\xc2\xa7n\xf8>\"\xfd@\xee\xf9\xa4\xf4\xb4\x90\x95\f\xc2\xb6\x15\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xda\xe4\x15\xcbx\x01w\xeb\xf4R\x9663\x840\tL\xd2r\xf7\f#\xccR\xfc\xc0e~b\x99`S_\xba\a%Ta\xdf\xbc\x85\x99\xfe\xf8\x05n\xfa\xb9-ph\xf2\x87\x92\x9d\x10!\x83\xecV\x19\xd2\x96W\x9d\x8b\xd6bt\xea\xe4\x9c\xbf\x01t@\x85/D\xba\x14.w\xf57\xbe\x804\f\xeep\x9f\xa7\xc25\\\xe9m0\xcf\xbe;\x83E\x17C\xda||A\xe6R;\x00\x00', 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) 665.304176ms ago: executing program 2 (id=2639): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00ffff", @ANYBLOB='^\x00\'a', @ANYBLOB="e4ac932c75e718d778ad070b613877c914"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 431.516242ms ago: executing program 2 (id=2640): socket(0x10, 0x2, 0xc) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000100), r0) r1 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5 [ 500.335754][T17653] dump_stack_lvl+0x16c/0x1f0 [ 500.335785][T17653] should_fail_ex+0x512/0x640 [ 500.335816][T17653] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 500.335844][T17653] should_failslab+0xc2/0x120 [ 500.335874][T17653] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 500.335899][T17653] ? __proc_create+0xc3/0x8e0 [ 500.335929][T17653] ? __proc_create+0x2ce/0x8e0 [ 500.335964][T17653] __proc_create+0x2ce/0x8e0 [ 500.335996][T17653] ? __pfx___proc_create+0x10/0x10 [ 500.336034][T17653] ? mark_held_locks+0x49/0x80 [ 500.336066][T17653] _proc_mkdir+0xb9/0x210 [ 500.336097][T17653] ? __pfx__proc_mkdir+0x10/0x10 [ 500.336136][T17653] sctp_proc_init+0x59/0x270 [ 500.336160][T17653] ? __pfx_sctp_defaults_init+0x10/0x10 [ 500.336199][T17653] sctp_defaults_init+0x74a/0xd80 [ 500.336245][T17653] ? __pfx_sctp_defaults_init+0x10/0x10 [ 500.336270][T17653] ops_init+0x1e2/0x5f0 [ 500.336310][T17653] setup_net+0x10f/0x380 [ 500.336339][T17653] ? lockdep_init_map_type+0x5c/0x280 [ 500.336371][T17653] ? __pfx_setup_net+0x10/0x10 [ 500.336402][T17653] ? debug_mutex_init+0x37/0x70 [ 500.336427][T17653] copy_net_ns+0x2a6/0x5f0 [ 500.336465][T17653] create_new_namespaces+0x3ea/0xa90 [ 500.336502][T17653] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 500.336531][T17653] ksys_unshare+0x45b/0xa40 [ 500.336563][T17653] ? __pfx_ksys_unshare+0x10/0x10 [ 500.336596][T17653] ? xfd_validate_state+0x61/0x180 [ 500.336638][T17653] __x64_sys_unshare+0x31/0x40 [ 500.336669][T17653] do_syscall_64+0xcd/0x490 [ 500.336701][T17653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.336723][T17653] RIP: 0033:0x7f89e7d8ebe9 [ 500.336740][T17653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.336763][T17653] RSP: 002b:00007f89e8ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 500.336784][T17653] RAX: ffffffffffffffda RBX: 00007f89e7fb5fa0 RCX: 00007f89e7d8ebe9 [ 500.336798][T17653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 500.336811][T17653] RBP: 00007f89e7e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 500.336825][T17653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.336837][T17653] R13: 00007f89e7fb6038 R14: 00007f89e7fb5fa0 R15: 00007ffdd4bbd488 [ 500.336865][T17653] [ 500.988122][T17677] ubi0: attaching mtd0 [ 501.033667][T17677] ubi0: scanning is finished [ 501.058213][T17675] ptrace attach of "./syz-executor exec"[17678] was attempted by "./syz-executor exec"[17675] [ 501.073404][T17677] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 501.125553][T17668] can: request_module (can-proto-4) failed. [ 501.275478][T17677] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 501.985586][T17691] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1735'. [ 502.390011][T17690] ICMPv6: process `syz.0.1735' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 502.509228][T17691] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 502.621026][T17698] netlink: 'syz.1.1737': attribute type 1 has an invalid length. [ 502.669247][T17692] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 502.966854][T17691] CIFS mount error: No usable UNC path provided in device string! [ 502.966854][T17691] [ 503.226081][T17691] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 504.110368][T17759] warning: `syz.1.1742' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 504.362274][T17756] FAULT_INJECTION: forcing a failure. [ 504.362274][T17756] name failslab, interval 1, probability 0, space 0, times 0 [ 504.541842][T17756] CPU: 0 UID: 0 PID: 17756 Comm: syz.0.1741 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 504.541879][T17756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.541892][T17756] Call Trace: [ 504.541899][T17756] [ 504.541907][T17756] dump_stack_lvl+0x16c/0x1f0 [ 504.541937][T17756] should_fail_ex+0x512/0x640 [ 504.541965][T17756] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 504.541989][T17756] should_failslab+0xc2/0x120 [ 504.542017][T17756] __kmalloc_cache_noprof+0x6a/0x3e0 [ 504.542039][T17756] ? fsnotify_alloc_group+0x92/0x330 [ 504.542065][T17756] fsnotify_alloc_group+0x92/0x330 [ 504.542088][T17756] do_inotify_init+0x49/0x5f0 [ 504.542114][T17756] ? rcu_is_watching+0x12/0xc0 [ 504.542136][T17756] __x64_sys_inotify_init1+0x30/0x40 [ 504.542164][T17756] do_syscall_64+0xcd/0x490 [ 504.542191][T17756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.542211][T17756] RIP: 0033:0x7fcc4e78ebe9 [ 504.542226][T17756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.542247][T17756] RSP: 002b:00007fcc4f670038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 504.542266][T17756] RAX: ffffffffffffffda RBX: 00007fcc4e9b5fa0 RCX: 00007fcc4e78ebe9 [ 504.542279][T17756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 504.542291][T17756] RBP: 00007fcc4e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 504.542302][T17756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.542313][T17756] R13: 00007fcc4e9b6038 R14: 00007fcc4e9b5fa0 R15: 00007fff342abc08 [ 504.542337][T17756] [ 504.708751][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.554933][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.561325][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.895341][T17796] ptrace attach of ""[17797] was attempted by "./syz-executor exec"[17796] [ 507.033456][T17815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.349744][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.356305][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.367025][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.374863][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.386166][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.393872][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.405066][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.412699][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.879153][T17840] ptrace attach of "./syz-executor exec"[17844] was attempted by "./syz-executor exec"[17840] [ 508.486528][T17865] FAULT_INJECTION: forcing a failure. [ 508.486528][T17865] name failslab, interval 1, probability 0, space 0, times 0 [ 508.559923][T17865] CPU: 0 UID: 0 PID: 17865 Comm: syz.2.1754 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 508.559952][T17865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.559964][T17865] Call Trace: [ 508.559971][T17865] [ 508.559978][T17865] dump_stack_lvl+0x16c/0x1f0 [ 508.560008][T17865] should_fail_ex+0x512/0x640 [ 508.560037][T17865] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 508.560064][T17865] should_failslab+0xc2/0x120 [ 508.560091][T17865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 508.560116][T17865] ? alloc_empty_file+0x55/0x1e0 [ 508.560150][T17865] alloc_empty_file+0x55/0x1e0 [ 508.560180][T17865] path_openat+0xda/0x2cb0 [ 508.560202][T17865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.560232][T17865] ? __pfx_path_openat+0x10/0x10 [ 508.560261][T17865] do_filp_open+0x20b/0x470 [ 508.560285][T17865] ? __pfx_do_filp_open+0x10/0x10 [ 508.560326][T17865] ? alloc_fd+0x471/0x7d0 [ 508.560353][T17865] do_sys_openat2+0x11b/0x1d0 [ 508.560384][T17865] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.560425][T17865] __x64_sys_openat+0x174/0x210 [ 508.560457][T17865] ? __pfx___x64_sys_openat+0x10/0x10 [ 508.560505][T17865] do_syscall_64+0xcd/0x490 [ 508.560534][T17865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.560554][T17865] RIP: 0033:0x7fe76a78ebe9 [ 508.560569][T17865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.560590][T17865] RSP: 002b:00007fe76b568038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 508.560609][T17865] RAX: ffffffffffffffda RBX: 00007fe76a9b5fa0 RCX: 00007fe76a78ebe9 [ 508.560622][T17865] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 508.560634][T17865] RBP: 00007fe76a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 508.560646][T17865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.560657][T17865] R13: 00007fe76a9b6038 R14: 00007fe76a9b5fa0 R15: 00007ffce230bb88 [ 508.560681][T17865] [ 508.761585][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.106639][T17871] nbd: must specify at least one socket [ 509.115860][T17873] ptp: physical clock is free running [ 509.254071][T17865] can: request_module (can-proto-4) failed. [ 509.518238][T17882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1759'. [ 509.632084][T17881] ptrace attach of "./syz-executor exec"[17889] was attempted by "./syz-executor exec"[17881] [ 513.053696][T17963] svc: failed to register nfsdv3 RPC service (errno 111). [ 513.103727][T17963] svc: failed to register nfsaclv3 RPC service (errno 111). [ 514.248972][T18001] nbd: nbd7 already in use [ 514.419729][T17993] nbd: must specify a size in bytes for the device [ 515.526077][T18041] ptp: physical clock is free running [ 515.830353][T18021] nbd: nbd7 already in use [ 517.297954][T18093] can: request_module (can-proto-0) failed. [ 517.587332][T18074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 517.633786][T18074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 517.742313][T18074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.835804][T18074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 518.484039][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 518.908898][T18153] nbd: must specify at least one socket [ 519.479480][ T5181] Bluetooth: hci0: command 0x0406 tx timeout [ 519.636798][ T5181] Bluetooth: hci1: command 0x0406 tx timeout [ 519.796416][ T5181] Bluetooth: hci3: command 0x0406 tx timeout [ 519.876834][ T5181] Bluetooth: hci2: command 0x0406 tx timeout [ 520.270398][T18200] ptrace attach of "./syz-executor exec"[18209] was attempted by "./syz-executor exec"[18200] [ 520.759368][T18172] random: crng reseeded on system resumption [ 521.355382][T18203] delete_channel: no stack [ 521.503449][T18215] svc: failed to register nfsdv3 RPC service (errno 512). [ 521.546273][T18227] nbd: must specify a size in bytes for the device [ 521.617867][T18215] svc: failed to register nfsaclv3 RPC service (errno 512). [ 523.674249][T18277] svc: failed to register nfsdv3 RPC service (errno 111). [ 523.720270][T18277] svc: failed to register nfsaclv3 RPC service (errno 111). [ 524.139436][T18288] nbd: must specify a size in bytes for the device [ 526.744869][T18359] random: crng reseeded on system resumption [ 527.260779][T18383] ICMPv6: process `syz.3.1825' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 529.291124][T18462] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1836'. [ 529.371337][T18462] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 529.479771][T17084] syz.3.1660 (17084) used greatest stack depth: 19384 bytes left [ 529.489937][T18474] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1836'. [ 531.091367][T18549] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 531.415453][T18565] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1848'. [ 531.447548][T18555] net_ratelimit: 676 callbacks suppressed [ 531.447564][T18555] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 532.165582][T18587] ptrace attach of "./syz-executor exec"[18589] was attempted by "./syz-executor exec"[18587] [ 533.118455][T18601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'. [ 533.186430][T18601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.193831][T18601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.288596][T18601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.328036][T18601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.562579][ T5181] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 533.575642][T18617] ima: policy update failed [ 533.607738][T18605] ptrace attach of ""[18612] was attempted by "./syz-executor exec"[18605] [ 533.617609][ T30] audit: type=1802 audit(6050063890.315:15): pid=18617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1854" res=0 errno=0 [ 533.689003][T18620] nbd: nbd7 already in use [ 534.208166][T18605] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1855'. [ 534.488352][T18628] svc: failed to register nfsdv3 RPC service (errno 111). [ 534.518008][T18628] svc: failed to register nfsaclv3 RPC service (errno 111). [ 535.271766][T18653] FAULT_INJECTION: forcing a failure. [ 535.271766][T18653] name failslab, interval 1, probability 0, space 0, times 0 [ 535.306041][T18653] CPU: 0 UID: 0 PID: 18653 Comm: syz.3.1866 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 535.306070][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.306082][T18653] Call Trace: [ 535.306088][T18653] [ 535.306096][T18653] dump_stack_lvl+0x16c/0x1f0 [ 535.306127][T18653] should_fail_ex+0x512/0x640 [ 535.306155][T18653] ? __kmalloc_noprof+0xbf/0x510 [ 535.306181][T18653] ? sk_prot_alloc+0x1a8/0x2a0 [ 535.306210][T18653] should_failslab+0xc2/0x120 [ 535.306236][T18653] __kmalloc_noprof+0xd2/0x510 [ 535.306265][T18653] sk_prot_alloc+0x1a8/0x2a0 [ 535.306296][T18653] sk_alloc+0x36/0xc20 [ 535.306320][T18653] caif_create+0x10b/0x430 [ 535.306343][T18653] __sock_create+0x335/0x8d0 [ 535.306382][T18653] __sys_socket+0x14d/0x260 [ 535.306401][T18653] ? __pfx___sys_socket+0x10/0x10 [ 535.306419][T18653] ? xfd_validate_state+0x61/0x180 [ 535.306448][T18653] ? __pfx_ksys_write+0x10/0x10 [ 535.306476][T18653] __x64_sys_socket+0x72/0xb0 [ 535.306494][T18653] ? lockdep_hardirqs_on+0x7c/0x110 [ 535.306518][T18653] do_syscall_64+0xcd/0x490 [ 535.306546][T18653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.306566][T18653] RIP: 0033:0x7f89e7d8ebe9 [ 535.306580][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.306600][T18653] RSP: 002b:00007f89e8ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 535.306619][T18653] RAX: ffffffffffffffda RBX: 00007f89e7fb5fa0 RCX: 00007f89e7d8ebe9 [ 535.306632][T18653] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000025 [ 535.306644][T18653] RBP: 00007f89e7e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 535.306657][T18653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.306668][T18653] R13: 00007f89e7fb6038 R14: 00007f89e7fb5fa0 R15: 00007ffdd4bbd488 [ 535.306693][T18653] [ 536.341453][T18667] vivid-015: ================= START STATUS ================= [ 536.341482][T18667] vivid-015: RDS Tx I/O Mode: Controls [ 536.341512][T18667] vivid-015: RDS Program ID: 32904 [ 536.341533][T18667] vivid-015: RDS Program Type: 3 [ 536.341554][T18667] vivid-015: RDS PS Name: VIVID-TX [ 536.341574][T18667] vivid-015: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 536.341598][T18667] vivid-015: RDS Stereo: true [ 536.341617][T18667] vivid-015: RDS Artificial Head: false [ 536.341637][T18667] vivid-015: RDS Compressed: false [ 536.341657][T18667] vivid-015: RDS Dynamic PTY: false [ 536.341677][T18667] vivid-015: RDS Traffic Announcement: false [ 536.341697][T18667] vivid-015: RDS Traffic Program: true [ 536.341717][T18667] vivid-015: RDS Music: true [ 536.341744][T18667] vivid-015: ================== END STATUS ================== [ 537.658406][T18692] FAULT_INJECTION: forcing a failure. [ 537.658406][T18692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 537.721238][T18692] CPU: 0 UID: 0 PID: 18692 Comm: syz.3.1875 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 537.721268][T18692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.721280][T18692] Call Trace: [ 537.721287][T18692] [ 537.721295][T18692] dump_stack_lvl+0x16c/0x1f0 [ 537.721324][T18692] should_fail_ex+0x512/0x640 [ 537.721361][T18692] should_fail_alloc_page+0xe7/0x130 [ 537.721390][T18692] prepare_alloc_pages+0x3c2/0x610 [ 537.721421][T18692] ? rcu_is_watching+0x12/0xc0 [ 537.721444][T18692] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 537.721472][T18692] ? stack_trace_save+0x8e/0xc0 [ 537.721495][T18692] ? __pfx_stack_trace_save+0x10/0x10 [ 537.721516][T18692] ? is_bpf_text_address+0x94/0x1a0 [ 537.721542][T18692] ? stack_depot_save_flags+0x29/0x9c0 [ 537.721571][T18692] ? __kernel_text_address+0xd/0x40 [ 537.721597][T18692] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 537.721630][T18692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.721658][T18692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.721691][T18692] ? policy_nodemask+0xea/0x4e0 [ 537.721719][T18692] alloc_pages_mpol+0x1fb/0x550 [ 537.721748][T18692] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 537.721782][T18692] alloc_pages_noprof+0x131/0x390 [ 537.721810][T18692] alloc_pages_exact_noprof+0x37/0xe0 [ 537.721828][T18692] ? __asan_memset+0x23/0x50 [ 537.721848][T18692] snd_pcm_attach_substream+0x4bb/0xd60 [ 537.721879][T18692] snd_pcm_open_substream+0x8d/0x17f0 [ 537.721903][T18692] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 537.721934][T18692] snd_pcm_oss_open+0x735/0x1400 [ 537.721976][T18692] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 537.722008][T18692] ? __lock_acquire+0xb97/0x1ce0 [ 537.722035][T18692] ? __pfx_default_wake_function+0x10/0x10 [ 537.722057][T18692] ? __lock_acquire+0xb97/0x1ce0 [ 537.722089][T18692] ? do_raw_spin_lock+0x12c/0x2b0 [ 537.722122][T18692] ? soundcore_open+0x35a/0x580 [ 537.722150][T18692] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 537.722183][T18692] soundcore_open+0x409/0x580 [ 537.722212][T18692] ? __pfx_soundcore_open+0x10/0x10 [ 537.722239][T18692] chrdev_open+0x231/0x6a0 [ 537.722266][T18692] ? __pfx_apparmor_file_open+0x10/0x10 [ 537.722288][T18692] ? __pfx_chrdev_open+0x10/0x10 [ 537.722315][T18692] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 537.722343][T18692] do_dentry_open+0x97f/0x1530 [ 537.722368][T18692] ? __pfx_chrdev_open+0x10/0x10 [ 537.722398][T18692] vfs_open+0x82/0x3f0 [ 537.722431][T18692] path_openat+0x1de4/0x2cb0 [ 537.722463][T18692] ? __pfx_path_openat+0x10/0x10 [ 537.722494][T18692] do_filp_open+0x20b/0x470 [ 537.722518][T18692] ? __pfx_do_filp_open+0x10/0x10 [ 537.722560][T18692] ? alloc_fd+0x471/0x7d0 [ 537.722592][T18692] do_sys_openat2+0x11b/0x1d0 [ 537.722625][T18692] ? __pfx_do_sys_openat2+0x10/0x10 [ 537.722657][T18692] ? find_held_lock+0x2b/0x80 [ 537.722683][T18692] __x64_sys_openat+0x174/0x210 [ 537.722715][T18692] ? __pfx___x64_sys_openat+0x10/0x10 [ 537.722758][T18692] do_syscall_64+0xcd/0x490 [ 537.722786][T18692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.722807][T18692] RIP: 0033:0x7f89e7d8ebe9 [ 537.722822][T18692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.722843][T18692] RSP: 002b:00007f89e8ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 537.722863][T18692] RAX: ffffffffffffffda RBX: 00007f89e7fb5fa0 RCX: 00007f89e7d8ebe9 [ 537.722876][T18692] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 537.722889][T18692] RBP: 00007f89e7e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 537.722901][T18692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.722913][T18692] R13: 00007f89e7fb6038 R14: 00007f89e7fb5fa0 R15: 00007ffdd4bbd488 [ 537.722939][T18692] [ 538.561414][T18699] netlink: 'syz.2.1877': attribute type 16 has an invalid length. [ 538.581292][T18699] netlink: 'syz.2.1877': attribute type 27 has an invalid length. [ 538.595622][T18699] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1877'. [ 538.861278][T18706] ptrace attach of "./syz-executor exec"[18708] was attempted by "./syz-executor exec"[18706] [ 540.166998][T18773] WARNING! power/level is deprecated; use power/control instead [ 541.379312][T18822] ptrace attach of "./syz-executor exec"[18831] was attempted by "./syz-executor exec"[18822] [ 541.958875][T18854] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1895'. [ 543.365336][T18943] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input23 [ 543.769913][T18945] can: request_module (can-proto-0) failed. [ 545.083027][T18991] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1908'. [ 545.172835][T18987] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1908'. [ 545.562114][T18998] nbd: nbd7 already in use [ 545.686360][T19002] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1912'. [ 545.904649][T19006] FAULT_INJECTION: forcing a failure. [ 545.904649][T19006] name failslab, interval 1, probability 0, space 0, times 0 [ 546.043562][T19006] CPU: 0 UID: 0 PID: 19006 Comm: syz.0.1913 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 546.043592][T19006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.043604][T19006] Call Trace: [ 546.043610][T19006] [ 546.043618][T19006] dump_stack_lvl+0x16c/0x1f0 [ 546.043647][T19006] should_fail_ex+0x512/0x640 [ 546.043678][T19006] should_failslab+0xc2/0x120 [ 546.043704][T19006] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 546.043728][T19006] ? skb_clone+0x190/0x3f0 [ 546.043761][T19006] skb_clone+0x190/0x3f0 [ 546.043786][T19006] netlink_deliver_tap+0xabd/0xd30 [ 546.043817][T19006] netlink_unicast+0x64c/0x870 [ 546.043846][T19006] ? __pfx_netlink_unicast+0x10/0x10 [ 546.043872][T19006] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 546.043896][T19006] ? __lock_acquire+0xb97/0x1ce0 [ 546.043930][T19006] netlink_sendmsg+0x8d1/0xdd0 [ 546.043959][T19006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.043988][T19006] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 546.044014][T19006] ____sys_sendmsg+0xa95/0xc70 [ 546.044046][T19006] ? copy_msghdr_from_user+0x10a/0x160 [ 546.044071][T19006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.044114][T19006] ___sys_sendmsg+0x134/0x1d0 [ 546.044140][T19006] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.044187][T19006] ? __mutex_unlock_slowpath+0x140/0x800 [ 546.044220][T19006] __sys_sendmsg+0x16d/0x220 [ 546.044245][T19006] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.044288][T19006] do_syscall_64+0xcd/0x490 [ 546.044315][T19006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.044335][T19006] RIP: 0033:0x7fcc4e78ebe9 [ 546.044350][T19006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.044368][T19006] RSP: 002b:00007fcc4f670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.044387][T19006] RAX: ffffffffffffffda RBX: 00007fcc4e9b5fa0 RCX: 00007fcc4e78ebe9 [ 546.044400][T19006] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003 [ 546.044412][T19006] RBP: 00007fcc4f670090 R08: 0000000000000000 R09: 0000000000000000 [ 546.044424][T19006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.044435][T19006] R13: 00007fcc4e9b6038 R14: 00007fcc4e9b5fa0 R15: 00007fff342abc08 [ 546.044460][T19006] [ 546.273567][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.024932][T19016] futex_wake_op: syz.1.1917 tries to shift op by -2048; fix this program [ 547.055550][T19016] futex_wake_op: syz.1.1917 tries to shift op by -2048; fix this program [ 548.655769][T19050] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1922: bg 4: bad block bitmap checksum [ 548.781788][T19050] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 548.855832][T19050] EXT4-fs (sda1): This should not happen!! Data will be lost [ 548.855832][T19050] [ 550.501714][T19140] FAULT_INJECTION: forcing a failure. [ 550.501714][T19140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.580357][T19140] CPU: 0 UID: 0 PID: 19140 Comm: syz.1.1929 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 550.580386][T19140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 550.580398][T19140] Call Trace: [ 550.580405][T19140] [ 550.580412][T19140] dump_stack_lvl+0x16c/0x1f0 [ 550.580440][T19140] should_fail_ex+0x512/0x640 [ 550.580472][T19140] _copy_from_user+0x2e/0xd0 [ 550.580504][T19140] kstrtouint_from_user+0xd6/0x1d0 [ 550.580528][T19140] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 550.580551][T19140] ? __lock_acquire+0xb97/0x1ce0 [ 550.580588][T19140] proc_fail_nth_write+0x83/0x220 [ 550.580611][T19140] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 550.580638][T19140] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 550.580658][T19140] vfs_write+0x29d/0x11d0 [ 550.580685][T19140] ? __pfx___mutex_lock+0x10/0x10 [ 550.580710][T19140] ? __pfx_vfs_write+0x10/0x10 [ 550.580740][T19140] ? __fget_files+0x20e/0x3c0 [ 550.580768][T19140] ksys_write+0x12a/0x250 [ 550.580790][T19140] ? __pfx_ksys_write+0x10/0x10 [ 550.580820][T19140] do_syscall_64+0xcd/0x490 [ 550.580848][T19140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.580868][T19140] RIP: 0033:0x7ff2d858d69f [ 550.580883][T19140] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 550.580903][T19140] RSP: 002b:00007ff2d93c2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 550.580921][T19140] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2d858d69f [ 550.580934][T19140] RDX: 0000000000000001 RSI: 00007ff2d93c20a0 RDI: 0000000000000004 [ 550.580946][T19140] RBP: 00007ff2d93c2090 R08: 0000000000000000 R09: 0000000000000000 [ 550.580958][T19140] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 550.580970][T19140] R13: 00007ff2d87b6038 R14: 00007ff2d87b5fa0 R15: 00007ffe4f23b4b8 [ 550.580994][T19140] [ 551.117855][T19147] cougar: G6 mapped to space [ 551.655395][T19171] binder: 19165:19171 ioctl ae41 e returned -22 [ 551.987294][T19186] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 552.137629][T19186] EXT4-fs (sda1): This should not happen!! Data will be lost [ 552.137629][T19186] [ 552.188708][T19192] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1936'. [ 552.899067][T19224] writes to the poll attribute are ignored. [ 552.922251][T19224] please use driver specific parameters instead. [ 553.313446][T19236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1940'. [ 553.374011][T19236] hsr_slave_0: left promiscuous mode [ 553.423258][T19236] hsr_slave_1: left promiscuous mode [ 553.475582][T19217] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 553.552297][T19217] EXT4-fs (sda1): This should not happen!! Data will be lost [ 553.552297][T19217] [ 554.941726][T19247] svc: failed to register nfsdv3 RPC service (errno 512). [ 554.979844][T19247] svc: failed to register nfsaclv3 RPC service (errno 512). [ 555.095832][T19273] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.3.1948: Error -117 reading block bitmap for 4 [ 555.137087][T19278] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 556.609328][T19344] Format for deleting device is "id" (uint). [ 557.307073][T19364] FAULT_INJECTION: forcing a failure. [ 557.307073][T19364] name failslab, interval 1, probability 0, space 0, times 0 [ 557.475992][T19373] could not allocate digest TFM handle [ 557.492579][T19364] CPU: 0 UID: 0 PID: 19364 Comm: syz.1.1960 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 557.492611][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.492624][T19364] Call Trace: [ 557.492638][T19364] [ 557.492646][T19364] dump_stack_lvl+0x16c/0x1f0 [ 557.492678][T19364] should_fail_ex+0x512/0x640 [ 557.492718][T19364] should_failslab+0xc2/0x120 [ 557.492749][T19364] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 557.492777][T19364] ? skb_clone+0x190/0x3f0 [ 557.492810][T19364] skb_clone+0x190/0x3f0 [ 557.492840][T19364] netlink_deliver_tap+0xabd/0xd30 [ 557.492874][T19364] netlink_unicast+0x64c/0x870 [ 557.492908][T19364] ? __pfx_netlink_unicast+0x10/0x10 [ 557.492938][T19364] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 557.492966][T19364] ? __lock_acquire+0xb97/0x1ce0 [ 557.493003][T19364] netlink_sendmsg+0x8d1/0xdd0 [ 557.493037][T19364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.493070][T19364] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 557.493099][T19364] ____sys_sendmsg+0xa95/0xc70 [ 557.493135][T19364] ? copy_msghdr_from_user+0x10a/0x160 [ 557.493163][T19364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.493212][T19364] ___sys_sendmsg+0x134/0x1d0 [ 557.493242][T19364] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.493295][T19364] ? __mutex_unlock_slowpath+0x140/0x800 [ 557.493333][T19364] __sys_sendmsg+0x16d/0x220 [ 557.493362][T19364] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.493419][T19364] do_syscall_64+0xcd/0x490 [ 557.493448][T19364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.493469][T19364] RIP: 0033:0x7ff2d858ebe9 [ 557.493485][T19364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.493506][T19364] RSP: 002b:00007ff2d93c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.493525][T19364] RAX: ffffffffffffffda RBX: 00007ff2d87b5fa0 RCX: 00007ff2d858ebe9 [ 557.493538][T19364] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000008 [ 557.493551][T19364] RBP: 00007ff2d93c2090 R08: 0000000000000000 R09: 0000000000000000 [ 557.493564][T19364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.493576][T19364] R13: 00007ff2d87b6038 R14: 00007ff2d87b5fa0 R15: 00007ffe4f23b4b8 [ 557.493602][T19364] [ 558.331325][T19398] svc: failed to register nfsdv3 RPC service (errno 111). [ 558.377277][T19398] svc: failed to register nfsaclv3 RPC service (errno 111). [ 561.291247][T19472] ptp: physical clock is free running [ 563.096413][T19533] __vm_enough_memory: pid: 19533, comm: syz.0.1983, bytes: 4398046511104 not enough memory for the allocation [ 563.626437][T19542] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.1985: bg 5: bad block bitmap checksum [ 563.720250][T19530] zero sized request [ 563.803347][T19542] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 563.897286][T19542] EXT4-fs (sda1): This should not happen!! Data will be lost [ 563.897286][T19542] [ 564.693746][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 566.154443][T19608] __vm_enough_memory: pid: 19608, comm: syz.3.1995, bytes: 4398046511104 not enough memory for the allocation [ 566.674310][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.686621][T15216] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 566.708609][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.800299][T15216] EXT4-fs (sda1): This should not happen!! Data will be lost [ 566.800299][T15216] [ 567.137384][T19608] zero sized request [ 569.204793][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 569.382204][ T30] audit: type=1800 audit(6050065974.268:16): pid=19739 uid=9 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2015" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 569.431698][T19732] vhci_hcd: not connected 4 [ 569.676969][T19761] FAULT_INJECTION: forcing a failure. [ 569.676969][T19761] name failslab, interval 1, probability 0, space 0, times 0 [ 569.745974][T19761] CPU: 0 UID: 0 PID: 19761 Comm: syz.3.2018 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 569.746004][T19761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.746016][T19761] Call Trace: [ 569.746023][T19761] [ 569.746031][T19761] dump_stack_lvl+0x16c/0x1f0 [ 569.746060][T19761] should_fail_ex+0x512/0x640 [ 569.746088][T19761] ? __kmalloc_noprof+0xbf/0x510 [ 569.746114][T19761] ? constrain_params_by_rules+0x175/0xca0 [ 569.746146][T19761] should_failslab+0xc2/0x120 [ 569.746174][T19761] __kmalloc_noprof+0xd2/0x510 [ 569.746203][T19761] constrain_params_by_rules+0x175/0xca0 [ 569.746240][T19761] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 569.746263][T19761] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.746290][T19761] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 569.746329][T19761] ? __kasan_kmalloc+0xaa/0xb0 [ 569.746350][T19761] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 569.746384][T19761] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 569.746425][T19761] ? snd_pcm_oss_get_formats+0x7e/0x340 [ 569.746464][T19761] ? rcu_is_watching+0x12/0xc0 [ 569.746485][T19761] ? snd_interval_refine+0x2fa/0x580 [ 569.746513][T19761] snd_pcm_hw_refine+0x7de/0xad0 [ 569.746550][T19761] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 569.746591][T19761] ? __asan_memset+0x23/0x50 [ 569.746610][T19761] ? _snd_pcm_hw_param_min+0x259/0x630 [ 569.746646][T19761] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 569.746685][T19761] ? kasan_quarantine_put+0x10a/0x240 [ 569.746707][T19761] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.746733][T19761] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 569.746769][T19761] ? __pfx___mutex_lock+0x10/0x10 [ 569.746794][T19761] ? tomoyo_path_number_perm+0x295/0x580 [ 569.746835][T19761] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 569.746872][T19761] snd_pcm_oss_get_formats+0x7e/0x340 [ 569.746903][T19761] ? find_held_lock+0x2b/0x80 [ 569.746923][T19761] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 569.746955][T19761] ? __might_fault+0x13b/0x190 [ 569.746984][T19761] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 569.747004][T19761] ? find_held_lock+0x2b/0x80 [ 569.747027][T19761] ? hook_file_ioctl_common+0x145/0x410 [ 569.747054][T19761] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 569.747076][T19761] ? __fget_files+0x20e/0x3c0 [ 569.747102][T19761] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 569.747123][T19761] __x64_sys_ioctl+0x18e/0x210 [ 569.747157][T19761] do_syscall_64+0xcd/0x490 [ 569.747185][T19761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.747206][T19761] RIP: 0033:0x7f89e7d8ebe9 [ 569.747222][T19761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.747241][T19761] RSP: 002b:00007f89e8ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.747261][T19761] RAX: ffffffffffffffda RBX: 00007f89e7fb5fa0 RCX: 00007f89e7d8ebe9 [ 569.747273][T19761] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000004 [ 569.747286][T19761] RBP: 00007f89e7e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 569.747298][T19761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.747310][T19761] R13: 00007f89e7fb6038 R14: 00007f89e7fb5fa0 R15: 00007ffdd4bbd488 [ 569.747335][T19761] [ 571.245066][T19842] FAULT_INJECTION: forcing a failure. [ 571.245066][T19842] name failslab, interval 1, probability 0, space 0, times 0 [ 571.298899][T19842] CPU: 0 UID: 0 PID: 19842 Comm: syz.0.2022 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 571.298933][T19842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.298947][T19842] Call Trace: [ 571.298954][T19842] [ 571.298963][T19842] dump_stack_lvl+0x16c/0x1f0 [ 571.298998][T19842] should_fail_ex+0x512/0x640 [ 571.299032][T19842] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 571.299063][T19842] should_failslab+0xc2/0x120 [ 571.299095][T19842] __kmalloc_cache_node_noprof+0x6d/0x420 [ 571.299122][T19842] ? sbitmap_init_node+0x2ca/0x770 [ 571.299146][T19842] ? sbitmap_queue_init_node+0x291/0x4a0 [ 571.299176][T19842] sbitmap_queue_init_node+0x291/0x4a0 [ 571.299205][T19842] blk_mq_init_tags+0x162/0x2b0 [ 571.299241][T19842] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 571.299284][T19842] ? rcu_is_watching+0x12/0xc0 [ 571.299314][T19842] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 571.299349][T19842] blk_mq_alloc_tag_set+0x778/0x1260 [ 571.299390][T19842] nbd_dev_add+0x340/0xbb0 [ 571.299421][T19842] ? find_held_lock+0x2b/0x80 [ 571.299445][T19842] ? __pfx_nbd_dev_add+0x10/0x10 [ 571.299476][T19842] ? nbd_genl_connect+0x98e/0x1c60 [ 571.299527][T19842] ? bpf_lsm_capable+0x9/0x10 [ 571.299551][T19842] ? __radix_tree_lookup+0x21f/0x2c0 [ 571.299583][T19842] nbd_genl_connect+0x8b0/0x1c60 [ 571.299624][T19842] ? __pfx_nbd_genl_connect+0x10/0x10 [ 571.299660][T19842] ? __nla_parse+0x40/0x60 [ 571.299686][T19842] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 571.299725][T19842] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 571.299768][T19842] genl_family_rcv_msg_doit+0x209/0x2f0 [ 571.299807][T19842] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 571.299845][T19842] ? genl_get_cmd+0x194/0x580 [ 571.299887][T19842] ? __radix_tree_lookup+0x21f/0x2c0 [ 571.299918][T19842] genl_rcv_msg+0x55c/0x800 [ 571.299962][T19842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.299999][T19842] ? __pfx_nbd_genl_connect+0x10/0x10 [ 571.300045][T19842] netlink_rcv_skb+0x158/0x420 [ 571.300077][T19842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.300115][T19842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.300159][T19842] ? netlink_deliver_tap+0x1ae/0xd30 [ 571.300193][T19842] genl_rcv+0x28/0x40 [ 571.300224][T19842] netlink_unicast+0x5a7/0x870 [ 571.300265][T19842] ? __pfx_netlink_unicast+0x10/0x10 [ 571.300298][T19842] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 571.300327][T19842] ? __lock_acquire+0xb97/0x1ce0 [ 571.300367][T19842] netlink_sendmsg+0x8d1/0xdd0 [ 571.300404][T19842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.300439][T19842] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 571.300469][T19842] ____sys_sendmsg+0xa95/0xc70 [ 571.300509][T19842] ? copy_msghdr_from_user+0x10a/0x160 [ 571.300539][T19842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.300583][T19842] ? __pfx_futex_wake_mark+0x10/0x10 [ 571.300623][T19842] ___sys_sendmsg+0x134/0x1d0 [ 571.300655][T19842] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.300722][T19842] __sys_sendmsg+0x16d/0x220 [ 571.300753][T19842] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.300783][T19842] ? __x64_sys_futex+0x1e0/0x4c0 [ 571.300832][T19842] do_syscall_64+0xcd/0x490 [ 571.300865][T19842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.300890][T19842] RIP: 0033:0x7fcc4e78ebe9 [ 571.300908][T19842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.300932][T19842] RSP: 002b:00007fcc4f670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.300954][T19842] RAX: ffffffffffffffda RBX: 00007fcc4e9b5fa0 RCX: 00007fcc4e78ebe9 [ 571.300970][T19842] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000009 [ 571.300984][T19842] RBP: 00007fcc4e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 571.300999][T19842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.301013][T19842] R13: 00007fcc4e9b6038 R14: 00007fcc4e9b5fa0 R15: 00007fff342abc08 [ 571.301043][T19842] [ 572.088048][T19842] blk-mq: reduced tag depth (128 -> 64) [ 572.097747][T19842] workqueue: Failed to create a rescuer kthread for wq "nbd20512-recv": -EINTR [ 572.097820][T19842] block (null): Could not allocate knbd recv work queue. [ 572.136345][T19842] nbd: failed to add new device [ 572.346597][T19848] binder: 19845:19848 ioctl 40046210 0 returned -14 [ 572.370119][T19848] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 574.037708][T19944] __vm_enough_memory: pid: 19944, comm: syz.1.2032, bytes: 4398046511104 not enough memory for the allocation [ 574.144498][T19948] ptp: physical clock is free running [ 574.407551][T19952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2034'. [ 574.435383][T19957] kfence: disabled [ 574.798666][T19956] Invalid ELF header magic: != ELF [ 575.224056][T19939] zero sized request [ 575.474781][T19973] netlink: ct family unspecified [ 578.305361][T20079] __vm_enough_memory: pid: 20079, comm: syz.3.2053, bytes: 4398046511104 not enough memory for the allocation [ 579.301674][T20075] zero sized request [ 580.725637][T20147] sg_write: data in/out 2359516/191 bytes for SCSI command 0x0-- guessing data in; [ 580.725637][T20147] program syz.1.2061 not setting count and/or reply_len properly [ 582.092186][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 582.205974][T20192] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2065'. [ 584.768060][T20227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 585.609319][T20266] __vm_enough_memory: pid: 20266, comm: syz.0.2076, bytes: 4398046511104 not enough memory for the allocation [ 585.964709][T20259] zero sized request [ 586.283536][T20279] ptrace attach of "./syz-executor exec"[20281] was attempted by "./syz-executor exec"[20279] [ 586.393887][T20284] nbd: nbd7 already in use [ 587.270944][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 588.723701][T20322] nbd: nbd7 already in use [ 590.948477][T18619] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 591.896570][T20459] __vm_enough_memory: pid: 20459, comm: syz.3.2108, bytes: 4398046511104 not enough memory for the allocation [ 592.451912][T20489] zero sized request [ 595.180928][T20543] __vm_enough_memory: pid: 20543, comm: syz.2.2118, bytes: 4398046511104 not enough memory for the allocation [ 595.447832][T20548] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 595.537959][T20548] EXT4-fs (sda1): This should not happen!! Data will be lost [ 595.537959][T20548] [ 595.714683][T20549] zero sized request [ 596.501105][T20562] __vm_enough_memory: pid: 20562, comm: syz.3.2121, bytes: 4398046511104 not enough memory for the allocation [ 596.937608][T20572] nbd: nbd7 already in use [ 597.013294][T20573] zero sized request [ 597.460345][T15222] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 597.508658][T15222] EXT4-fs (sda1): This should not happen!! Data will be lost [ 597.508658][T15222] [ 597.872292][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 597.932943][T20581] ptp: physical clock is free running [ 598.138804][T20599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2127'. [ 598.211864][T20599] veth0_macvtap: left promiscuous mode [ 598.654037][T20617] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 600.849960][T20660] nbd: nbd7 already in use [ 601.565600][T20668] ptp: physical clock is free running [ 601.714758][T20670] vhci_hcd: invalid port number 16 [ 601.728217][T20670] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 602.939179][T20722] zswap: compressor not available [ 603.645153][T20744] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 603.684936][T20744] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 603.705529][T20744] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 604.013637][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 604.164167][T18619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 604.176260][T18619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 604.184065][T18619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 604.195986][T18619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 604.204562][T18619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 605.083982][T20753] chnl_net:caif_netlink_parms(): no params data found [ 605.156382][T20865] ptrace attach of "./syz-executor exec"[20868] was attempted by "./syz-executor exec"[20865] [ 605.272201][T20890] __vm_enough_memory: pid: 20890, comm: syz.3.2158, bytes: 4398046511104 not enough memory for the allocation [ 605.389062][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 605.401170][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 605.410100][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 605.421358][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 605.429260][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 605.617972][T20753] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.661542][T20753] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.691196][T20753] bridge_slave_0: entered allmulticast mode [ 605.722248][T20753] bridge_slave_0: entered promiscuous mode [ 605.799889][T20753] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.831723][T20753] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.858510][T20753] bridge_slave_1: entered allmulticast mode [ 605.887036][T20753] bridge_slave_1: entered promiscuous mode [ 606.041122][T20871] zero sized request [ 606.185500][T20957] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 606.245201][T20957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 606.245201][T20957] [ 606.283322][ T5861] Bluetooth: hci4: command tx timeout [ 606.396846][T20753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.447819][T20753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.635610][T20753] team0: Port device team_slave_0 added [ 606.669372][T20753] team0: Port device team_slave_1 added [ 607.117553][T20753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.150243][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.242640][T20753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.475922][T20753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.486091][ T5861] Bluetooth: hci5: command tx timeout [ 607.522803][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.584548][T21113] Invalid ELF header magic: != ELF [ 607.638798][T20753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.076297][T20896] chnl_net:caif_netlink_parms(): no params data found [ 608.158125][T20753] hsr_slave_0: entered promiscuous mode [ 608.175155][T20753] hsr_slave_1: entered promiscuous mode [ 608.194900][T20753] debugfs: 'hsr0' already exists in 'hsr' [ 608.200647][T20753] Cannot create hsr debugfs directory [ 608.351469][ T5861] Bluetooth: hci4: command tx timeout [ 608.588211][T20896] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.603395][T20896] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.630027][T20896] bridge_slave_0: entered allmulticast mode [ 608.661953][T20896] bridge_slave_0: entered promiscuous mode [ 608.801597][T20896] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.819993][T20896] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.827201][T20896] bridge_slave_1: entered allmulticast mode [ 608.874396][T20896] bridge_slave_1: entered promiscuous mode [ 609.119753][T20896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.172120][T20896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.320306][T21357] nbd: nbd7 already in use [ 609.327719][T20896] team0: Port device team_slave_0 added [ 609.352827][T20896] team0: Port device team_slave_1 added [ 609.539994][T20896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.547618][ T5861] Bluetooth: hci5: command tx timeout [ 609.568710][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.649792][T20896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.726004][T20896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.751860][T20896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.867383][T20896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.961758][T20753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 610.104565][T20753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 610.163068][T20753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 610.220664][T20896] hsr_slave_0: entered promiscuous mode [ 610.249597][T20896] hsr_slave_1: entered promiscuous mode [ 610.269139][T20896] debugfs: 'hsr0' already exists in 'hsr' [ 610.304904][T20896] Cannot create hsr debugfs directory [ 610.375200][T20753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 610.419525][ T5861] Bluetooth: hci4: command tx timeout [ 611.112022][T20753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.172062][T15222] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 611.283315][T20753] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.317006][T15222] EXT4-fs (sda1): This should not happen!! Data will be lost [ 611.317006][T15222] [ 611.448118][T15216] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.455285][T15216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.563090][T15216] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.570225][T15216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.615518][ T5861] Bluetooth: hci5: command tx timeout [ 611.647867][T20896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 611.984777][ T5861] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 612.226982][T20896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.413314][T20896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.460446][T20896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 612.491578][ T5861] Bluetooth: hci4: command tx timeout [ 612.960712][T20896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.051645][T20896] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.179304][T18082] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.186515][T18082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.264413][T18082] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.271716][T18082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.389955][T20896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.439990][T20896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.516562][T20753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.670442][T21589] nbd: nbd7 already in use [ 613.681276][ T5861] Bluetooth: hci5: command tx timeout [ 613.715268][T21594] __vm_enough_memory: pid: 21594, comm: syz.2.2177, bytes: 4398046511104 not enough memory for the allocation [ 614.334257][T20896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.538258][T21598] zero sized request [ 614.613996][T20753] veth0_vlan: entered promiscuous mode [ 614.664775][T20753] veth1_vlan: entered promiscuous mode [ 614.751356][T20753] veth0_macvtap: entered promiscuous mode [ 614.802928][T20753] veth1_macvtap: entered promiscuous mode [ 614.965968][T20753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.038167][T20753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.132394][T18082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.155094][T18082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.234641][T18082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.285641][T18082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.700067][T20896] veth0_vlan: entered promiscuous mode [ 615.818313][T20896] veth1_vlan: entered promiscuous mode [ 615.884770][T18082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.924834][T18082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.048758][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.058722][T20896] veth0_macvtap: entered promiscuous mode [ 616.083978][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.112404][T20896] veth1_macvtap: entered promiscuous mode [ 616.195723][T20896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.249902][T20896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.320797][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.349529][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.399428][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.461955][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.794278][T15216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.802108][T15216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.962611][T21678] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 617.014251][T15216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.064884][T15216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.175678][T21678] EXT4-fs (sda1): This should not happen!! Data will be lost [ 617.175678][T21678] [ 617.788494][T21699] FAULT_INJECTION: forcing a failure. [ 617.788494][T21699] name failslab, interval 1, probability 0, space 0, times 0 [ 617.873109][T21699] CPU: 0 UID: 0 PID: 21699 Comm: syz.2.2185 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 617.873140][T21699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 617.873153][T21699] Call Trace: [ 617.873160][T21699] [ 617.873167][T21699] dump_stack_lvl+0x16c/0x1f0 [ 617.873197][T21699] should_fail_ex+0x512/0x640 [ 617.873225][T21699] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 617.873253][T21699] should_failslab+0xc2/0x120 [ 617.873281][T21699] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 617.873305][T21699] ? lockdep_init_map_type+0x5c/0x280 [ 617.873333][T21699] ? __d_alloc+0x32/0xae0 [ 617.873360][T21699] __d_alloc+0x32/0xae0 [ 617.873387][T21699] d_alloc_pseudo+0x1c/0xc0 [ 617.873417][T21699] alloc_file_pseudo+0xcf/0x230 [ 617.873449][T21699] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 617.873480][T21699] ? alloc_fd+0x471/0x7d0 [ 617.873505][T21699] sock_alloc_file+0x50/0x210 [ 617.873534][T21699] __sys_socket+0x1c0/0x260 [ 617.873551][T21699] ? fdget_pos+0x2b8/0x370 [ 617.873573][T21699] ? __pfx___sys_socket+0x10/0x10 [ 617.873592][T21699] ? xfd_validate_state+0x61/0x180 [ 617.873621][T21699] ? __pfx_ksys_write+0x10/0x10 [ 617.873657][T21699] __x64_sys_socket+0x72/0xb0 [ 617.873676][T21699] ? lockdep_hardirqs_on+0x7c/0x110 [ 617.873700][T21699] do_syscall_64+0xcd/0x490 [ 617.873728][T21699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.873750][T21699] RIP: 0033:0x7fe76a78ebe9 [ 617.873765][T21699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.873785][T21699] RSP: 002b:00007fe76b547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 617.873804][T21699] RAX: ffffffffffffffda RBX: 00007fe76a9b6090 RCX: 00007fe76a78ebe9 [ 617.873818][T21699] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 617.873830][T21699] RBP: 00007fe76a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 617.873842][T21699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.873854][T21699] R13: 00007fe76a9b6128 R14: 00007fe76a9b6090 R15: 00007ffce230bb88 [ 617.873878][T21699] [ 618.790846][T21719] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2191'. [ 618.815340][T21718] netlink: del zone limit has 8 unknown bytes [ 619.882106][T21774] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 619.981884][T21774] openvswitch: netlink: Message has 324 unknown bytes. [ 620.023595][T21770] nbd: nbd7 already in use [ 620.434384][T21792] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 621.433345][T21820] ptrace attach of "./syz-executor exec"[21829] was attempted by "./syz-executor exec"[21820] [ 621.881354][T21850] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 622.222129][T21859] Invalid ELF header magic: != ELF [ 625.014653][T21944] __vm_enough_memory: pid: 21944, comm: syz.3.2224, bytes: 4398046511104 not enough memory for the allocation [ 625.969768][T22000] FAULT_INJECTION: forcing a failure. [ 625.969768][T22000] name failslab, interval 1, probability 0, space 0, times 0 [ 626.103895][T22000] CPU: 0 UID: 0 PID: 22000 Comm: syz.5.2227 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 626.103928][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.103941][T22000] Call Trace: [ 626.103948][T22000] [ 626.103956][T22000] dump_stack_lvl+0x16c/0x1f0 [ 626.103987][T22000] should_fail_ex+0x512/0x640 [ 626.104016][T22000] ? fs_reclaim_acquire+0xae/0x150 [ 626.104049][T22000] ? tomoyo_encode2+0x100/0x3e0 [ 626.104076][T22000] should_failslab+0xc2/0x120 [ 626.104104][T22000] __kmalloc_noprof+0xd2/0x510 [ 626.104127][T22000] ? d_absolute_path+0x136/0x1a0 [ 626.104162][T22000] tomoyo_encode2+0x100/0x3e0 [ 626.104194][T22000] tomoyo_encode+0x29/0x50 [ 626.104222][T22000] tomoyo_realpath_from_path+0x18f/0x6e0 [ 626.104259][T22000] tomoyo_check_open_permission+0x2ab/0x3c0 [ 626.104284][T22000] ? init_file+0x93/0x4c0 [ 626.104313][T22000] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 626.104338][T22000] ? do_sys_openat2+0x11b/0x1d0 [ 626.104369][T22000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.104414][T22000] ? do_raw_spin_lock+0x12c/0x2b0 [ 626.104454][T22000] tomoyo_file_open+0x6b/0x90 [ 626.104474][T22000] security_file_open+0x84/0x1e0 [ 626.104503][T22000] do_dentry_open+0x596/0x1530 [ 626.104536][T22000] vfs_open+0x82/0x3f0 [ 626.104570][T22000] path_openat+0x1de4/0x2cb0 [ 626.104603][T22000] ? __pfx_path_openat+0x10/0x10 [ 626.104629][T22000] ? __lock_acquire+0xb97/0x1ce0 [ 626.104659][T22000] do_filp_open+0x20b/0x470 [ 626.104684][T22000] ? __pfx_do_filp_open+0x10/0x10 [ 626.104727][T22000] ? _raw_spin_unlock+0x28/0x50 [ 626.104748][T22000] ? alloc_fd+0x471/0x7d0 [ 626.104776][T22000] do_sys_openat2+0x11b/0x1d0 [ 626.104813][T22000] ? __pfx_do_sys_openat2+0x10/0x10 [ 626.104848][T22000] ? __fget_files+0x20e/0x3c0 [ 626.104876][T22000] __x64_sys_open+0x153/0x1e0 [ 626.104908][T22000] ? __pfx___x64_sys_open+0x10/0x10 [ 626.104946][T22000] ? rcu_is_watching+0x12/0xc0 [ 626.104970][T22000] do_syscall_64+0xcd/0x490 [ 626.105000][T22000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.105020][T22000] RIP: 0033:0x7fdc2158ebe9 [ 626.105036][T22000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.105057][T22000] RSP: 002b:00007fdc2249b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 626.105077][T22000] RAX: ffffffffffffffda RBX: 00007fdc217b5fa0 RCX: 00007fdc2158ebe9 [ 626.105091][T22000] RDX: 0000000000000130 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.105104][T22000] RBP: 00007fdc2249b090 R08: 0000000000000000 R09: 0000000000000000 [ 626.105116][T22000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.105129][T22000] R13: 00007fdc217b6038 R14: 00007fdc217b5fa0 R15: 00007fff80348bc8 [ 626.105156][T22000] [ 626.105174][T22000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 626.545250][T22003] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 626.676508][T22008] zero sized request [ 627.779295][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.787195][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.514428][T22085] FAULT_INJECTION: forcing a failure. [ 629.514428][T22085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.584582][T22085] CPU: 0 UID: 0 PID: 22085 Comm: syz.5.2240 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 629.584615][T22085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.584629][T22085] Call Trace: [ 629.584636][T22085] [ 629.584644][T22085] dump_stack_lvl+0x16c/0x1f0 [ 629.584677][T22085] should_fail_ex+0x512/0x640 [ 629.584713][T22085] _copy_to_user+0x32/0xd0 [ 629.584754][T22085] simple_read_from_buffer+0xcb/0x170 [ 629.584806][T22085] proc_fail_nth_read+0x197/0x240 [ 629.584830][T22085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.584854][T22085] ? rw_verify_area+0xcf/0x6c0 [ 629.584874][T22085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.584896][T22085] vfs_read+0x1e4/0xcf0 [ 629.584923][T22085] ? __pfx___mutex_lock+0x10/0x10 [ 629.584951][T22085] ? __pfx_vfs_read+0x10/0x10 [ 629.584981][T22085] ? __fget_files+0x20e/0x3c0 [ 629.585011][T22085] ksys_read+0x12a/0x250 [ 629.585033][T22085] ? __pfx_ksys_read+0x10/0x10 [ 629.585064][T22085] do_syscall_64+0xcd/0x490 [ 629.585093][T22085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.585115][T22085] RIP: 0033:0x7fdc2158d5fc [ 629.585131][T22085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 629.585152][T22085] RSP: 002b:00007fdc2249b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.585171][T22085] RAX: ffffffffffffffda RBX: 00007fdc217b5fa0 RCX: 00007fdc2158d5fc [ 629.585185][T22085] RDX: 000000000000000f RSI: 00007fdc2249b0a0 RDI: 0000000000000004 [ 629.585198][T22085] RBP: 00007fdc2249b090 R08: 0000000000000000 R09: 0000000000000000 [ 629.585210][T22085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.585222][T22085] R13: 00007fdc217b6038 R14: 00007fdc217b5fa0 R15: 00007fff80348bc8 [ 629.585249][T22085] [ 629.771957][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.557489][T22102] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 630.634211][T22102] EXT4-fs (sda1): This should not happen!! Data will be lost [ 630.634211][T22102] [ 630.738976][T22112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 631.783847][T18619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 631.807586][T18619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 631.815651][T18619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 631.825117][T18619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 631.832778][T18619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.433538][ T3506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.458079][T22187] ptrace attach of "./syz-executor exec"[22192] was attempted by "./syz-executor exec"[22187] [ 632.705697][ T3506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.993931][ T3506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.133911][ T3506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.872708][T22338] FAULT_INJECTION: forcing a failure. [ 633.872708][T22338] name failslab, interval 1, probability 0, space 0, times 0 [ 633.887884][T18619] Bluetooth: hci0: command tx timeout [ 633.944597][T22338] CPU: 0 UID: 0 PID: 22338 Comm: syz.5.2257 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 633.944626][T22338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.944639][T22338] Call Trace: [ 633.944646][T22338] [ 633.944653][T22338] dump_stack_lvl+0x16c/0x1f0 [ 633.944683][T22338] should_fail_ex+0x512/0x640 [ 633.944712][T22338] ? fs_reclaim_acquire+0xae/0x150 [ 633.944745][T22338] should_failslab+0xc2/0x120 [ 633.944772][T22338] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 633.944796][T22338] ? security_inode_alloc+0x3b/0x2b0 [ 633.944823][T22338] security_inode_alloc+0x3b/0x2b0 [ 633.944847][T22338] inode_init_always_gfp+0xce4/0x1030 [ 633.944873][T22338] alloc_inode+0x86/0x240 [ 633.944902][T22338] new_inode+0x22/0x1c0 [ 633.944929][T22338] ? trace_cap_capable+0x18d/0x200 [ 633.944951][T22338] shmem_get_inode+0x19a/0xfb0 [ 633.944983][T22338] ? __vm_enough_memory+0x184/0x3f0 [ 633.945015][T22338] __shmem_file_setup+0x279/0x330 [ 633.945047][T22338] shmem_zero_setup+0x93/0x1a0 [ 633.945074][T22338] __mmap_region+0x2081/0x27b0 [ 633.945099][T22338] ? finish_task_switch.isra.0+0x21c/0xc10 [ 633.945121][T22338] ? __pfx___mmap_region+0x10/0x10 [ 633.945147][T22338] ? rcu_is_watching+0x12/0xc0 [ 633.945173][T22338] ? rcu_is_watching+0x12/0xc0 [ 633.945192][T22338] ? trace_sched_exit_tp+0xd1/0x120 [ 633.945224][T22338] ? __schedule+0x11a3/0x5de0 [ 633.945245][T22338] ? __lock_acquire+0x62e/0x1ce0 [ 633.945285][T22338] ? __pfx___schedule+0x10/0x10 [ 633.945335][T22338] ? trace_cap_capable+0x18d/0x200 [ 633.945364][T22338] mmap_region+0x1ab/0x3f0 [ 633.945387][T22338] ? __get_unmapped_area+0x267/0x440 [ 633.945419][T22338] do_mmap+0xa3e/0x1210 [ 633.945452][T22338] ? __pfx_do_mmap+0x10/0x10 [ 633.945482][T22338] ? __pfx_down_write_killable+0x10/0x10 [ 633.945515][T22338] vm_mmap_pgoff+0x29e/0x470 [ 633.945549][T22338] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 633.945583][T22338] ? __x64_sys_futex+0x1e0/0x4c0 [ 633.945608][T22338] ? __x64_sys_futex+0x1e9/0x4c0 [ 633.945637][T22338] ksys_mmap_pgoff+0x7d/0x5c0 [ 633.945665][T22338] ? xfd_validate_state+0x61/0x180 [ 633.945698][T22338] __x64_sys_mmap+0x125/0x190 [ 633.945732][T22338] do_syscall_64+0xcd/0x490 [ 633.945760][T22338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.945785][T22338] RIP: 0033:0x7fdc2158ebe9 [ 633.945801][T22338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.945821][T22338] RSP: 002b:00007fdc2247a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 633.945839][T22338] RAX: ffffffffffffffda RBX: 00007fdc217b6090 RCX: 00007fdc2158ebe9 [ 633.945852][T22338] RDX: 00000000000000df RSI: 0000000000000009 RDI: 0000000000000000 [ 633.945864][T22338] RBP: 00007fdc21611e19 R08: 0000000000000401 R09: 0000000000008000 [ 633.945876][T22338] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 633.945888][T22338] R13: 00007fdc217b6128 R14: 00007fdc217b6090 R15: 00007fff80348bc8 [ 633.945913][T22338] [ 634.241057][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.286082][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.312813][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.343211][ T3506] bond0 (unregistering): Released all slaves [ 635.443761][T22377] ptrace attach of "./syz-executor exec"[22378] was attempted by "./syz-executor exec"[22377] [ 635.949733][T22164] chnl_net:caif_netlink_parms(): no params data found [ 635.957696][T18619] Bluetooth: hci0: command tx timeout [ 636.764539][ T3506] hsr_slave_1: left promiscuous mode [ 636.850632][ T3506] veth1_macvtap: left allmulticast mode [ 636.893566][ T3506] veth1_macvtap: left promiscuous mode [ 636.921669][ T3506] veth1_vlan: left promiscuous mode [ 636.955622][ T3506] veth0_vlan: left promiscuous mode [ 638.022078][T18619] Bluetooth: hci0: command tx timeout [ 638.120990][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 638.166028][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 638.793273][T22164] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.845614][T22164] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.878717][T22164] bridge_slave_0: entered allmulticast mode [ 638.905793][T22164] bridge_slave_0: entered promiscuous mode [ 638.913031][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 638.962289][T22164] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.988541][T22582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2272'. [ 639.026850][T22164] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.033995][T22164] bridge_slave_1: entered allmulticast mode [ 639.099158][T22164] bridge_slave_1: entered promiscuous mode [ 639.136107][T22582] veth0_macvtap: entered allmulticast mode [ 639.380057][T22164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.499132][T22617] ptrace attach of "./syz-executor exec"[22634] was attempted by "./syz-executor exec"[22617] [ 639.725359][T22164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.006768][T22164] team0: Port device team_slave_0 added [ 640.062390][T22164] team0: Port device team_slave_1 added [ 640.094151][T18619] Bluetooth: hci0: command tx timeout [ 640.504694][T22164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.597898][T22164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.623791][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.850707][T22164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.914972][T22724] FAULT_INJECTION: forcing a failure. [ 640.914972][T22724] name failslab, interval 1, probability 0, space 0, times 0 [ 640.943278][T22164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.985384][T22164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.029670][T22724] CPU: 0 UID: 0 PID: 22724 Comm: syz.5.2279 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 641.029714][T22724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.029729][T22724] Call Trace: [ 641.029737][T22724] [ 641.029746][T22724] dump_stack_lvl+0x16c/0x1f0 [ 641.029780][T22724] should_fail_ex+0x512/0x640 [ 641.029828][T22724] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 641.029863][T22724] should_failslab+0xc2/0x120 [ 641.029902][T22724] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 641.029928][T22724] ? lockdep_hardirqs_on+0x7c/0x110 [ 641.029953][T22724] ? ip6_route_net_init+0x219/0x8b0 [ 641.029985][T22724] kmemdup_noprof+0x29/0x60 [ 641.030011][T22724] ip6_route_net_init+0x219/0x8b0 [ 641.030041][T22724] ? __pfx_ip6_route_net_init+0x10/0x10 [ 641.030070][T22724] ops_init+0x1e2/0x5f0 [ 641.030100][T22724] setup_net+0x10f/0x380 [ 641.030125][T22724] ? lockdep_init_map_type+0x5c/0x280 [ 641.030153][T22724] ? __pfx_setup_net+0x10/0x10 [ 641.030181][T22724] ? debug_mutex_init+0x37/0x70 [ 641.030202][T22724] copy_net_ns+0x2a6/0x5f0 [ 641.030238][T22724] create_new_namespaces+0x3ea/0xa90 [ 641.030267][T22724] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 641.030292][T22724] ksys_unshare+0x45b/0xa40 [ 641.030325][T22724] ? __pfx_ksys_unshare+0x10/0x10 [ 641.030353][T22724] ? xfd_validate_state+0x61/0x180 [ 641.030391][T22724] __x64_sys_unshare+0x31/0x40 [ 641.030418][T22724] do_syscall_64+0xcd/0x490 [ 641.030447][T22724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.030467][T22724] RIP: 0033:0x7fdc2158ebe9 [ 641.030483][T22724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.030502][T22724] RSP: 002b:00007fdc2249b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 641.030521][T22724] RAX: ffffffffffffffda RBX: 00007fdc217b5fa0 RCX: 00007fdc2158ebe9 [ 641.030535][T22724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 641.030546][T22724] RBP: 00007fdc21611e19 R08: 0000000000000000 R09: 0000000000000000 [ 641.030558][T22724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.030570][T22724] R13: 00007fdc217b6038 R14: 00007fdc217b5fa0 R15: 00007fff80348bc8 [ 641.030595][T22724] [ 641.258502][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.303734][T22164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.378046][T22164] hsr_slave_0: entered promiscuous mode [ 641.384434][T22164] hsr_slave_1: entered promiscuous mode [ 641.390416][T22164] debugfs: 'hsr0' already exists in 'hsr' [ 641.396176][T22164] Cannot create hsr debugfs directory [ 641.768133][T18082] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 641.852095][T18082] EXT4-fs (sda1): This should not happen!! Data will be lost [ 641.852095][T18082] [ 643.503349][T22164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 643.676251][T22164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 643.762199][T22164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 643.849001][T22164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 644.092504][T22939] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 644.204623][T22939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 644.204623][T22939] [ 644.710899][T22164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.897199][ T30] audit: type=1800 audit(6050066050.208:17): pid=22958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2292" name="features" dev="configfs" ino=58242 res=0 errno=0 [ 644.925398][T22164] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.013440][T18082] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.021077][T18082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.147681][T18082] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.154842][T18082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.273840][T23022] netlink: 226 bytes leftover after parsing attributes in process `syz.2.2297'. [ 646.338327][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'. [ 646.358358][T23022] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 646.639825][T22164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.952514][T22164] veth0_vlan: entered promiscuous mode [ 647.284483][T22164] veth1_vlan: entered promiscuous mode [ 647.505281][T23074] ptrace attach of "./syz-executor exec"[23078] was attempted by "./syz-executor exec"[23074] [ 647.574208][T22164] veth0_macvtap: entered promiscuous mode [ 647.625488][T22956] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 647.659786][T22164] veth1_macvtap: entered promiscuous mode [ 647.741254][T22164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.831267][T22164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.153680][T18090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.223900][T18090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.232631][T18090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.423211][T18090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.279372][T23144] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2306'. [ 649.379090][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.421566][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.583531][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.618811][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.783647][T23178] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 649.876200][T23178] EXT4-fs (sda1): This should not happen!! Data will be lost [ 649.876200][T23178] [ 650.893818][T23225] kAFS: Invalid Command on /proc/fs/afs/cells file [ 651.764270][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 651.777158][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 651.784923][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 651.792950][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 651.803729][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 652.178057][T23225] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.4.2312: Error -117 reading block bitmap for 5 [ 652.302055][T23230] netlink: 226 bytes leftover after parsing attributes in process `syz.3.2313'. [ 652.428446][T23230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 652.462160][T23230] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 653.398336][T18082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.852662][T18619] Bluetooth: hci6: command tx timeout [ 654.168757][T23358] usb usb36: usbfs: process 23358 (syz.4.2321) did not claim interface 0 before use [ 654.196967][T23313] ALSA: mixer_oss: invalid OSS volume '0' [ 654.231599][T18090] Bluetooth: hci1: Frame reassembly failed (-84) [ 654.301514][T23313] ALSA: mixer_oss: invalid OSS volume '' [ 654.324308][T18082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.667819][T18082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.797439][T23241] chnl_net:caif_netlink_parms(): no params data found [ 654.951994][T18082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.419775][T23241] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.470798][T23241] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.505584][T23241] bridge_slave_0: entered allmulticast mode [ 655.541518][T23241] bridge_slave_0: entered promiscuous mode [ 655.585980][T23241] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.629074][T23241] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.654818][T23241] bridge_slave_1: entered allmulticast mode [ 655.685971][T23241] bridge_slave_1: entered promiscuous mode [ 655.920206][T18619] Bluetooth: hci6: command tx timeout [ 656.084510][T23241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.177237][T23241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.242777][T18619] Bluetooth: hci1: command 0xfc11 tx timeout [ 656.253625][ T5861] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 656.493185][T18082] bridge_slave_1: left allmulticast mode [ 656.522562][T18082] bridge_slave_1: left promiscuous mode [ 656.581963][T18082] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.761925][T18082] bridge_slave_0: left allmulticast mode [ 656.824976][T18082] bridge_slave_0: left promiscuous mode [ 656.846953][T18082] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.730089][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066768c00: rx timeout, send abort [ 657.740180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066769c00: rx timeout, send abort [ 657.748763][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888066768c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 657.763448][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888066769c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 657.988718][ T5861] Bluetooth: hci6: command tx timeout [ 658.295406][T23591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2339'. [ 658.659925][T18082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.682870][T23599] netlink: 'syz.4.2341': attribute type 13 has an invalid length. [ 658.693700][T18082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.712880][T23599] netlink: 'syz.4.2341': attribute type 13 has an invalid length. [ 658.734063][T18082] bond0 (unregistering): Released all slaves [ 658.831396][T23591] bridge_slave_1: left allmulticast mode [ 658.840572][T23591] bridge_slave_1: left promiscuous mode [ 658.856292][T23591] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.888908][T23591] bridge_slave_0: left allmulticast mode [ 658.896914][T23591] bridge_slave_0: left promiscuous mode [ 658.912034][T23591] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.065457][T18082] .SR: left promiscuous mode [ 659.136115][T23241] team0: Port device team_slave_0 added [ 659.172365][T23241] team0: Port device team_slave_1 added [ 659.195206][T18082] HfR: left promiscuous mode [ 659.449220][T18082] ovs_ÿþ: left promiscuous mode [ 659.534634][T23241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.572844][T23241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.687950][T23241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.817938][T23241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.848657][T23241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.936022][T23241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.057350][ T5861] Bluetooth: hci6: command tx timeout [ 660.566949][T23241] hsr_slave_0: entered promiscuous mode [ 660.606048][T23241] hsr_slave_1: entered promiscuous mode [ 660.638554][T23241] debugfs: 'hsr0' already exists in 'hsr' [ 660.672656][T23241] Cannot create hsr debugfs directory [ 661.425609][T18082] hsr_slave_0: left promiscuous mode [ 661.443754][T18082] hsr_slave_1: left promiscuous mode [ 661.451125][T18082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.470091][T18082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.496713][T18082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.516666][T18082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.558824][T18082] veth1_macvtap: left promiscuous mode [ 661.575538][T18082] veth0_macvtap: left promiscuous mode [ 661.591273][T18082] veth1_vlan: left promiscuous mode [ 661.605592][T18082] veth0_vlan: left promiscuous mode [ 662.264883][T23788] ptrace attach of "./syz-executor exec"[23790] was attempted by "./syz-executor exec"[23788] [ 662.705607][T18082] team0 (unregistering): Port device team_slave_0 removed [ 665.258130][T23241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 665.414938][T23241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 665.581992][T23241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 665.692254][T23241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 666.289423][T23241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.413365][T23241] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.470947][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.478144][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.605434][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.612576][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.806144][T23241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 668.215996][T23241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.985704][T23241] veth0_vlan: entered promiscuous mode [ 669.213693][T23241] veth1_vlan: entered promiscuous mode [ 669.784782][T23241] veth0_macvtap: entered promiscuous mode [ 669.850190][T23241] veth1_macvtap: entered promiscuous mode [ 669.963093][T23241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.039885][T23241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.164173][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.200824][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.292359][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.332189][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.762127][T18090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.821935][T18090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.965484][T18090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.973312][T18090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.573206][T24201] nbd: nbd7 already in use [ 675.177558][T24239] HfR: entered promiscuous mode [ 675.260273][T18619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 675.276568][T18619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 675.284232][T18619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 675.292295][T18619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 675.300311][T18619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 675.320565][T24239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2369'. [ 675.863474][T24283] serio: Serial port pty6 [ 676.099193][T24244] chnl_net:caif_netlink_parms(): no params data found [ 676.191745][T24362] FAULT_INJECTION: forcing a failure. [ 676.191745][T24362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.261300][T24362] CPU: 0 UID: 0 PID: 24362 Comm: syz.2.2373 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 676.261328][T24362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 676.261341][T24362] Call Trace: [ 676.261348][T24362] [ 676.261356][T24362] dump_stack_lvl+0x16c/0x1f0 [ 676.261384][T24362] should_fail_ex+0x512/0x640 [ 676.261422][T24362] _copy_from_user+0x2e/0xd0 [ 676.261455][T24362] copy_msghdr_from_user+0x98/0x160 [ 676.261482][T24362] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 676.261513][T24362] ? __pfx__kstrtoull+0x10/0x10 [ 676.261541][T24362] ___sys_sendmsg+0xfe/0x1d0 [ 676.261567][T24362] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.261604][T24362] ? find_held_lock+0x2b/0x80 [ 676.261640][T24362] __sys_sendmmsg+0x200/0x420 [ 676.261668][T24362] ? __pfx___sys_sendmmsg+0x10/0x10 [ 676.261701][T24362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 676.261738][T24362] ? fput+0x9b/0xd0 [ 676.261766][T24362] ? ksys_write+0x1ac/0x250 [ 676.261788][T24362] ? __pfx_ksys_write+0x10/0x10 [ 676.261816][T24362] __x64_sys_sendmmsg+0x9c/0x100 [ 676.261847][T24362] ? lockdep_hardirqs_on+0x7c/0x110 [ 676.261871][T24362] do_syscall_64+0xcd/0x490 [ 676.261899][T24362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.261919][T24362] RIP: 0033:0x7f5267b8ebe9 [ 676.261935][T24362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.261954][T24362] RSP: 002b:00007f5268a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 676.261974][T24362] RAX: ffffffffffffffda RBX: 00007f5267db5fa0 RCX: 00007f5267b8ebe9 [ 676.261987][T24362] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 676.262000][T24362] RBP: 00007f5268a36090 R08: 0000000000000000 R09: 0000000000000000 [ 676.262012][T24362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.262023][T24362] R13: 00007f5267db6038 R14: 00007f5267db5fa0 R15: 00007ffcbde3b6e8 [ 676.262048][T24362] [ 676.804505][T24357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 676.810550][T24357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.864253][T24357] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 676.870297][T24357] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 676.996327][T24357] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 677.094223][T24357] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 677.134627][T24357] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 677.172695][T24244] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.209877][T24244] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.236777][T24357] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 677.248848][T24244] bridge_slave_0: entered allmulticast mode [ 677.274414][T24244] bridge_slave_0: entered promiscuous mode [ 677.346654][T24244] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.361559][T24357] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 677.384316][T24357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 677.393130][T24244] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.403986][T18619] Bluetooth: hci1: command tx timeout [ 677.457391][T24244] bridge_slave_1: entered allmulticast mode [ 677.464464][T24244] bridge_slave_1: entered promiscuous mode [ 677.495330][T24357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 677.532695][T24357] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 677.576697][T24357] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 677.647426][T24357] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 677.672682][T24357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.728798][T24357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 677.791070][T24357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 677.882990][T24244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.905364][T24467] nbd: nbd7 already in use [ 677.996454][T24244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.357084][T24244] team0: Port device team_slave_0 added [ 678.388826][T24244] team0: Port device team_slave_1 added [ 678.650918][T24244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.657879][T24244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.828555][T24244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.849276][T18619] Bluetooth: hci2: command 0x0406 tx timeout [ 678.855308][T18619] Bluetooth: hci3: command 0x0406 tx timeout [ 678.910436][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 678.938475][T24244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.979635][T24244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.148456][ T5861] Bluetooth: hci5: command 0x0c1a tx timeout [ 679.160584][T24563] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 679.178809][T24244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.198952][T24560] FAULT_INJECTION: forcing a failure. [ 679.198952][T24560] name failslab, interval 1, probability 0, space 0, times 0 [ 679.346446][T24560] CPU: 0 UID: 0 PID: 24560 Comm: syz.3.2382 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 679.346476][T24560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.346488][T24560] Call Trace: [ 679.346496][T24560] [ 679.346503][T24560] dump_stack_lvl+0x16c/0x1f0 [ 679.346532][T24560] should_fail_ex+0x512/0x640 [ 679.346561][T24560] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 679.346588][T24560] should_failslab+0xc2/0x120 [ 679.346619][T24560] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 679.346644][T24560] ? __alloc_skb+0x2b2/0x380 [ 679.346671][T24560] __alloc_skb+0x2b2/0x380 [ 679.346694][T24560] ? __pfx___alloc_skb+0x10/0x10 [ 679.346720][T24560] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 679.346746][T24560] ? __lock_acquire+0xb97/0x1ce0 [ 679.346776][T24560] netlink_alloc_large_skb+0x69/0x130 [ 679.346804][T24560] netlink_sendmsg+0x6a1/0xdd0 [ 679.346834][T24560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.346863][T24560] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 679.346889][T24560] ____sys_sendmsg+0xa95/0xc70 [ 679.346921][T24560] ? copy_msghdr_from_user+0x10a/0x160 [ 679.346947][T24560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.346981][T24560] ? __pfx__kstrtoull+0x10/0x10 [ 679.347010][T24560] ___sys_sendmsg+0x134/0x1d0 [ 679.347036][T24560] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.347073][T24560] ? find_held_lock+0x2b/0x80 [ 679.347107][T24560] __sys_sendmmsg+0x200/0x420 [ 679.347135][T24560] ? __pfx___sys_sendmmsg+0x10/0x10 [ 679.347169][T24560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 679.347205][T24560] ? fput+0x9b/0xd0 [ 679.347233][T24560] ? ksys_write+0x1ac/0x250 [ 679.347255][T24560] ? __pfx_ksys_write+0x10/0x10 [ 679.347282][T24560] __x64_sys_sendmmsg+0x9c/0x100 [ 679.347308][T24560] ? lockdep_hardirqs_on+0x7c/0x110 [ 679.347332][T24560] do_syscall_64+0xcd/0x490 [ 679.347359][T24560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.347380][T24560] RIP: 0033:0x7fb06398ebe9 [ 679.347396][T24560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.347416][T24560] RSP: 002b:00007fb0647bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 679.347435][T24560] RAX: ffffffffffffffda RBX: 00007fb063bb5fa0 RCX: 00007fb06398ebe9 [ 679.347449][T24560] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 679.347462][T24560] RBP: 00007fb0647bb090 R08: 0000000000000000 R09: 0000000000000000 [ 679.347474][T24560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.347491][T24560] R13: 00007fb063bb6038 R14: 00007fb063bb5fa0 R15: 00007ffedb6d84b8 [ 679.347516][T24560] [ 679.965721][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 679.971751][ T5861] Bluetooth: hci6: command 0x0c1a tx timeout [ 679.977787][ T5861] Bluetooth: hci1: command 0x040f tx timeout [ 680.140849][T24591] ptrace attach of "./syz-executor exec"[24592] was attempted by "./syz-executor exec"[24591] [ 680.292964][T24597] __vm_enough_memory: pid: 24597, comm: syz.2.2387, bytes: 4398046511104 not enough memory for the allocation [ 680.672046][T24244] hsr_slave_0: entered promiscuous mode [ 680.860969][T24244] hsr_slave_1: entered promiscuous mode [ 680.978865][T18619] Bluetooth: hci4: command 0x0c1a tx timeout [ 681.049448][T24630] zero sized request [ 681.218373][T18619] Bluetooth: hci5: command 0x0c1a tx timeout [ 681.632387][T24637] nbd: nbd7 already in use [ 682.011996][T18619] Bluetooth: hci1: command 0x040f tx timeout [ 682.018025][T18619] Bluetooth: hci6: command 0x0c1a tx timeout [ 682.024107][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 683.011230][T24244] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 683.046506][T24665] Bluetooth: hci4: command 0x0c1a tx timeout [ 683.086764][T24244] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 683.174121][T24244] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 683.266711][T24244] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.284005][T24665] Bluetooth: hci5: command 0x0c1a tx timeout [ 683.703708][T24244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.834979][T24244] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.907465][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.914618][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.047768][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.054906][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.089431][T24665] Bluetooth: hci6: command 0x0c1a tx timeout [ 684.095453][T24665] Bluetooth: hci0: command 0x0c1a tx timeout [ 684.101877][ T5181] Bluetooth: hci1: command 0x040f tx timeout [ 684.445079][T24769] nbd: nbd7 already in use [ 685.033377][T24777] FAULT_INJECTION: forcing a failure. [ 685.033377][T24777] name fail_futex, interval 1, probability 0, space 0, times 0 [ 685.099532][T24244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.107573][T24777] CPU: 0 UID: 0 PID: 24777 Comm: syz.2.2401 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 685.107601][T24777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.107614][T24777] Call Trace: [ 685.107622][T24777] [ 685.107630][T24777] dump_stack_lvl+0x16c/0x1f0 [ 685.107660][T24777] should_fail_ex+0x512/0x640 [ 685.107693][T24777] get_futex_key+0x1d0/0x1560 [ 685.107721][T24777] ? __pfx_get_futex_key+0x10/0x10 [ 685.107745][T24777] ? futex_private_hash_put+0x176/0x300 [ 685.107777][T24777] futex_wake+0xea/0x530 [ 685.107804][T24777] ? futex_wait+0x120/0x380 [ 685.107834][T24777] ? __pfx_futex_wait+0x10/0x10 [ 685.107865][T24777] ? __pfx_futex_wake+0x10/0x10 [ 685.107901][T24777] ? do_raw_spin_lock+0x12c/0x2b0 [ 685.107936][T24777] do_futex+0x1e3/0x350 [ 685.107962][T24777] ? __pfx_do_futex+0x10/0x10 [ 685.107988][T24777] ? _raw_spin_unlock+0x28/0x50 [ 685.108009][T24777] ? do_set_mempolicy+0x220/0x480 [ 685.108039][T24777] __x64_sys_futex+0x1e0/0x4c0 [ 685.108067][T24777] ? __do_sys_close_range+0x278/0x730 [ 685.108092][T24777] ? __pfx___x64_sys_futex+0x10/0x10 [ 685.108131][T24777] ? __pfx___do_sys_close_range+0x10/0x10 [ 685.108164][T24777] do_syscall_64+0xcd/0x490 [ 685.108192][T24777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.108221][T24777] RIP: 0033:0x7f5267b8ebe9 [ 685.108237][T24777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.108258][T24777] RSP: 002b:00007f5268a360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 685.108277][T24777] RAX: ffffffffffffffda RBX: 00007f5267db5fa8 RCX: 00007f5267b8ebe9 [ 685.108291][T24777] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5267db5fac [ 685.108304][T24777] RBP: 00007f5267db5fa0 R08: 00007f5268a37000 R09: 0000000000000000 [ 685.108316][T24777] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 685.108329][T24777] R13: 00007f5267db6038 R14: 00007ffcbde3b600 R15: 00007ffcbde3b6e8 [ 685.108353][T24777] [ 685.315015][ C0] vkms_vblank_simulate: vblank timer overrun [ 685.627521][T24790] FAULT_INJECTION: forcing a failure. [ 685.627521][T24790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.698618][T24790] CPU: 0 UID: 0 PID: 24790 Comm: syz.2.2404 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 685.698648][T24790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.698679][T24790] Call Trace: [ 685.698687][T24790] [ 685.698696][T24790] dump_stack_lvl+0x16c/0x1f0 [ 685.698730][T24790] should_fail_ex+0x512/0x640 [ 685.698766][T24790] _copy_from_iter+0x29f/0x16f0 [ 685.698807][T24790] ? __alloc_skb+0x200/0x380 [ 685.698835][T24790] ? __pfx__copy_from_iter+0x10/0x10 [ 685.698874][T24790] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 685.698910][T24790] ? __lock_acquire+0xb97/0x1ce0 [ 685.698949][T24790] netlink_sendmsg+0x829/0xdd0 [ 685.698985][T24790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.699020][T24790] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 685.699049][T24790] ____sys_sendmsg+0xa95/0xc70 [ 685.699087][T24790] ? copy_msghdr_from_user+0x10a/0x160 [ 685.699117][T24790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.699158][T24790] ? __pfx__kstrtoull+0x10/0x10 [ 685.699192][T24790] ___sys_sendmsg+0x134/0x1d0 [ 685.699223][T24790] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.699266][T24790] ? find_held_lock+0x2b/0x80 [ 685.699307][T24790] __sys_sendmmsg+0x200/0x420 [ 685.699340][T24790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 685.699379][T24790] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 685.699422][T24790] ? fput+0x9b/0xd0 [ 685.699455][T24790] ? ksys_write+0x1ac/0x250 [ 685.699481][T24790] ? __pfx_ksys_write+0x10/0x10 [ 685.699513][T24790] __x64_sys_sendmmsg+0x9c/0x100 [ 685.699542][T24790] ? lockdep_hardirqs_on+0x7c/0x110 [ 685.699570][T24790] do_syscall_64+0xcd/0x490 [ 685.699602][T24790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.699627][T24790] RIP: 0033:0x7f5267b8ebe9 [ 685.699645][T24790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.699673][T24790] RSP: 002b:00007f5268a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 685.699695][T24790] RAX: ffffffffffffffda RBX: 00007f5267db5fa0 RCX: 00007f5267b8ebe9 [ 685.699711][T24790] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 685.699726][T24790] RBP: 00007f5268a36090 R08: 0000000000000000 R09: 0000000000000000 [ 685.699740][T24790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.699767][T24790] R13: 00007f5267db6038 R14: 00007f5267db5fa0 R15: 00007ffcbde3b6e8 [ 685.699796][T24790] [ 685.938704][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.293637][T24665] Bluetooth: hci1: command 0x040f tx timeout [ 687.364350][T24875] nbd: nbd7 already in use [ 687.905260][T24896] netlink: 'syz.2.2414': attribute type 16 has an invalid length. [ 687.982649][T24896] netlink: 226 bytes leftover after parsing attributes in process `syz.2.2414'. [ 688.032542][T24244] veth0_vlan: entered promiscuous mode [ 688.070031][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2414'. [ 688.173298][T24244] veth1_vlan: entered promiscuous mode [ 688.295690][T24665] Bluetooth: hci1: command 0x040f tx timeout [ 688.379308][T24244] veth0_macvtap: entered promiscuous mode [ 688.476784][T24244] veth1_macvtap: entered promiscuous mode [ 688.580212][T24244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.662092][T24244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.862753][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.869113][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.924638][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.982063][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.031683][T24927] FAULT_INJECTION: forcing a failure. [ 689.031683][T24927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 689.086777][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.132463][T24927] CPU: 0 UID: 0 PID: 24927 Comm: syz.5.2420 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 689.132491][T24927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.132503][T24927] Call Trace: [ 689.132510][T24927] [ 689.132518][T24927] dump_stack_lvl+0x16c/0x1f0 [ 689.132547][T24927] should_fail_ex+0x512/0x640 [ 689.132586][T24927] should_fail_alloc_page+0xe7/0x130 [ 689.132615][T24927] prepare_alloc_pages+0x3c2/0x610 [ 689.132650][T24927] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 689.132678][T24927] ? __lock_acquire+0x62e/0x1ce0 [ 689.132713][T24927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 689.132754][T24927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 689.132786][T24927] ? policy_nodemask+0xea/0x4e0 [ 689.132815][T24927] alloc_pages_mpol+0x1fb/0x550 [ 689.132842][T24927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 689.132876][T24927] alloc_pages_noprof+0x131/0x390 [ 689.132903][T24927] __pmd_alloc+0x3b/0x930 [ 689.132936][T24927] __handle_mm_fault+0xa06/0x2a50 [ 689.132959][T24927] ? mt_find+0x3ef/0xa30 [ 689.132988][T24927] ? __pfx___handle_mm_fault+0x10/0x10 [ 689.133007][T24927] ? __pfx_mt_find+0x10/0x10 [ 689.133047][T24927] ? find_vma+0xbf/0x140 [ 689.133072][T24927] ? __pfx_find_vma+0x10/0x10 [ 689.133101][T24927] handle_mm_fault+0x589/0xd10 [ 689.133122][T24927] ? __bpf_trace_exceptions+0x1/0x40 [ 689.133155][T24927] do_user_addr_fault+0x7a6/0x1370 [ 689.133188][T24927] ? rcu_is_watching+0x12/0xc0 [ 689.133212][T24927] exc_page_fault+0x5c/0xb0 [ 689.133236][T24927] asm_exc_page_fault+0x26/0x30 [ 689.133255][T24927] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 689.133275][T24927] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 689.133294][T24927] RSP: 0018:ffffc900149277d0 EFLAGS: 00050206 [ 689.133310][T24927] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 689.133322][T24927] RDX: ffffed100b418429 RSI: 0000000000000000 RDI: ffff88805a0c2080 [ 689.133335][T24927] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100b418428 [ 689.133347][T24927] R10: ffff88805a0c2143 R11: 0000000000000000 R12: ffffc90014927d60 [ 689.133359][T24927] R13: 00000000000000c4 R14: ffff88805a0c2080 R15: 00007ffffffff000 [ 689.133384][T24927] _copy_from_iter+0x383/0x16f0 [ 689.133419][T24927] ? __alloc_skb+0x200/0x380 [ 689.133444][T24927] ? __pfx__copy_from_iter+0x10/0x10 [ 689.133477][T24927] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 689.133507][T24927] ? __lock_acquire+0xb97/0x1ce0 [ 689.133539][T24927] netlink_sendmsg+0x829/0xdd0 [ 689.133574][T24927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.133603][T24927] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 689.133629][T24927] ____sys_sendmsg+0xa95/0xc70 [ 689.133660][T24927] ? copy_msghdr_from_user+0x10a/0x160 [ 689.133685][T24927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.133721][T24927] ? __pfx__kstrtoull+0x10/0x10 [ 689.133749][T24927] ___sys_sendmsg+0x134/0x1d0 [ 689.133776][T24927] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.133813][T24927] ? find_held_lock+0x2b/0x80 [ 689.133848][T24927] __sys_sendmmsg+0x200/0x420 [ 689.133877][T24927] ? __pfx___sys_sendmmsg+0x10/0x10 [ 689.133911][T24927] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 689.133947][T24927] ? fput+0x9b/0xd0 [ 689.133975][T24927] ? ksys_write+0x1ac/0x250 [ 689.133998][T24927] ? __pfx_ksys_write+0x10/0x10 [ 689.134025][T24927] __x64_sys_sendmmsg+0x9c/0x100 [ 689.134050][T24927] ? lockdep_hardirqs_on+0x7c/0x110 [ 689.134074][T24927] do_syscall_64+0xcd/0x490 [ 689.134119][T24927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.134140][T24927] RIP: 0033:0x7fdc2158ebe9 [ 689.134156][T24927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.134177][T24927] RSP: 002b:00007fdc2249b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 689.134196][T24927] RAX: ffffffffffffffda RBX: 00007fdc217b5fa0 RCX: 00007fdc2158ebe9 [ 689.134210][T24927] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 689.134223][T24927] RBP: 00007fdc2249b090 R08: 0000000000000000 R09: 0000000000000000 [ 689.134236][T24927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.134249][T24927] R13: 00007fdc217b6038 R14: 00007fdc217b5fa0 R15: 00007fff80348bc8 [ 689.134276][T24927] [ 689.584759][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.936360][T18090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.944214][T18090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.951754][T18090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.959630][T18090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.185840][T24959] nbd: nbd7 already in use [ 690.658525][T25001] netlink: 'syz.3.2427': attribute type 16 has an invalid length. [ 690.675736][T25001] netlink: 226 bytes leftover after parsing attributes in process `syz.3.2427'. [ 690.696184][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2427'. [ 691.123605][T25008] ptrace attach of "./syz-executor exec"[25013] was attempted by "./syz-executor exec"[25008] [ 691.455862][T25018] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 692.201617][T25016] ima: policy update failed [ 692.285347][T25035] usb usb36: usbfs: process 25035 (syz.6.2434) did not claim interface 0 before use [ 692.302997][ T30] audit: type=1802 audit(6050066097.888:18): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2432" res=0 errno=0 [ 692.397621][T25041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 692.873994][T25055] nbd: nbd7 already in use [ 695.384803][T25147] nbd: nbd7 already in use [ 696.684190][T25183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2457'. [ 697.383955][T25184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 697.403273][T25184] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 697.440629][T25184] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 697.479068][T25184] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 697.524125][T25184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 697.550515][T25184] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 697.591363][T25184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 697.641146][T25237] ICMPv6: process `syz.6.2462' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 698.111920][T25248] nbd: nbd7 already in use [ 698.717021][T24665] Bluetooth: hci3: command 0x0406 tx timeout [ 699.436408][T24665] Bluetooth: hci4: command 0x0c1a tx timeout [ 699.447977][T18619] Bluetooth: hci2: command 0x0406 tx timeout [ 699.511937][T24665] Bluetooth: hci5: command 0x0c1a tx timeout [ 699.594127][T18619] Bluetooth: hci6: command 0x0c1a tx timeout [ 699.600164][ T5181] Bluetooth: hci0: command 0x0c1a tx timeout [ 699.608156][T24665] Bluetooth: hci1: command 0x040f tx timeout [ 700.338530][T25304] netlink: 'syz.6.2473': attribute type 16 has an invalid length. [ 700.374501][T25304] netlink: 226 bytes leftover after parsing attributes in process `syz.6.2473'. [ 700.411766][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2473'. [ 700.461855][T25292] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2471'. [ 702.197184][T25377] __vm_enough_memory: pid: 25377, comm: syz.3.2484, bytes: 4398046511104 not enough memory for the allocation [ 702.562762][T24665] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 703.100662][T25493] FAULT_INJECTION: forcing a failure. [ 703.100662][T25493] name failslab, interval 1, probability 0, space 0, times 0 [ 703.154433][T25493] CPU: 0 UID: 0 PID: 25493 Comm: syz.3.2488 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 703.154463][T25493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.154475][T25493] Call Trace: [ 703.154482][T25493] [ 703.154490][T25493] dump_stack_lvl+0x16c/0x1f0 [ 703.154520][T25493] should_fail_ex+0x512/0x640 [ 703.154547][T25493] ? __kmalloc_noprof+0xbf/0x510 [ 703.154573][T25493] ? kernfs_fop_write_iter+0x237/0x510 [ 703.154592][T25493] should_failslab+0xc2/0x120 [ 703.154619][T25493] __kmalloc_noprof+0xd2/0x510 [ 703.154647][T25493] kernfs_fop_write_iter+0x237/0x510 [ 703.154670][T25493] vfs_write+0x7d0/0x11d0 [ 703.154694][T25493] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 703.154715][T25493] ? __pfx___mutex_lock+0x10/0x10 [ 703.154742][T25493] ? __pfx_vfs_write+0x10/0x10 [ 703.154789][T25493] ksys_write+0x12a/0x250 [ 703.154812][T25493] ? __pfx_ksys_write+0x10/0x10 [ 703.154842][T25493] do_syscall_64+0xcd/0x490 [ 703.154870][T25493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.154890][T25493] RIP: 0033:0x7fb06398ebe9 [ 703.154906][T25493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.154925][T25493] RSP: 002b:00007fb0647bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 703.154945][T25493] RAX: ffffffffffffffda RBX: 00007fb063bb5fa0 RCX: 00007fb06398ebe9 [ 703.154958][T25493] RDX: 0000000048da548d RSI: 0000200000000080 RDI: 0000000000000003 [ 703.154971][T25493] RBP: 00007fb0647bb090 R08: 0000000000000000 R09: 0000000000000000 [ 703.154983][T25493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.154995][T25493] R13: 00007fb063bb6038 R14: 00007fb063bb5fa0 R15: 00007ffedb6d84b8 [ 703.155020][T25493] [ 703.880716][T25538] vivid-009: ================= START STATUS ================= [ 703.980483][T25538] vivid-009: Enable Output Cropping: true grabbed [ 704.109242][T25538] vivid-009: Enable Output Composing: true grabbed [ 704.156757][T25548] block nbd7: not configured, cannot reconfigure [ 704.295651][T25538] vivid-009: Enable Output Scaler: true grabbed [ 704.301941][T25538] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 704.391022][T25538] vivid-009: Transmit Mode: HDMI grabbed [ 704.443219][T25538] vivid-009: Hotplug Present: 0x00000000 [ 704.518844][T25538] vivid-009: RxSense Present: 0x00000000 [ 704.624464][T25538] vivid-009: EDID Present: 0x00000000 [ 704.731019][T25538] vivid-009: ================== END STATUS ================== [ 707.616732][T25677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2505'. [ 708.309615][T25702] FAULT_INJECTION: forcing a failure. [ 708.309615][T25702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.378401][T25702] CPU: 0 UID: 0 PID: 25702 Comm: syz.2.2508 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 708.378437][T25702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 708.378451][T25702] Call Trace: [ 708.378460][T25702] [ 708.378469][T25702] dump_stack_lvl+0x16c/0x1f0 [ 708.378503][T25702] should_fail_ex+0x512/0x640 [ 708.378541][T25702] _copy_to_user+0x32/0xd0 [ 708.378585][T25702] simple_read_from_buffer+0xcb/0x170 [ 708.378628][T25702] proc_fail_nth_read+0x197/0x240 [ 708.378660][T25702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.378688][T25702] ? rw_verify_area+0xcf/0x6c0 [ 708.378712][T25702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.378737][T25702] vfs_read+0x1e4/0xcf0 [ 708.378768][T25702] ? __pfx___mutex_lock+0x10/0x10 [ 708.378799][T25702] ? __pfx_vfs_read+0x10/0x10 [ 708.378833][T25702] ? __fget_files+0x20e/0x3c0 [ 708.378868][T25702] ksys_read+0x12a/0x250 [ 708.378893][T25702] ? __pfx_ksys_read+0x10/0x10 [ 708.378929][T25702] do_syscall_64+0xcd/0x490 [ 708.378962][T25702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.378986][T25702] RIP: 0033:0x7f5267b8d5fc [ 708.379004][T25702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 708.379028][T25702] RSP: 002b:00007f5268a36030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.379052][T25702] RAX: ffffffffffffffda RBX: 00007f5267db5fa0 RCX: 00007f5267b8d5fc [ 708.379068][T25702] RDX: 000000000000000f RSI: 00007f5268a360a0 RDI: 0000000000000004 [ 708.379082][T25702] RBP: 00007f5268a36090 R08: 0000000000000000 R09: 0000000000000000 [ 708.379096][T25702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.379110][T25702] R13: 00007f5267db6038 R14: 00007f5267db5fa0 R15: 00007ffcbde3b6e8 [ 708.379140][T25702] [ 708.562383][ C0] vkms_vblank_simulate: vblank timer overrun [ 708.980073][T25711] nbd: nbd7 already in use [ 708.997049][T25714] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 709.036461][T25714] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2509'. [ 709.192093][T25708] can: request_module (can-proto-4) failed. [ 709.612806][ T5181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 709.623256][ T5181] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 709.631207][ T5181] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 709.641368][ T5181] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 709.649331][ T5181] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 711.502825][T25905] nbd: nbd7 already in use [ 711.682847][ T5181] Bluetooth: hci7: command tx timeout [ 711.746433][T25718] chnl_net:caif_netlink_parms(): no params data found [ 712.388159][T25718] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.395271][T25718] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.476287][T25718] bridge_slave_0: entered allmulticast mode [ 712.508642][T25718] bridge_slave_0: entered promiscuous mode [ 712.526010][T25981] ptrace attach of "./syz-executor exec"[25982] was attempted by "./syz-executor exec"[25981] [ 712.568943][T25718] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.576042][T25718] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.624469][T25718] bridge_slave_1: entered allmulticast mode [ 712.686215][T25718] bridge_slave_1: entered promiscuous mode [ 712.979367][T25718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.069239][T25718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.610050][T25718] team0: Port device team_slave_0 added [ 713.645969][T25718] team0: Port device team_slave_1 added [ 713.750401][ T5181] Bluetooth: hci7: command tx timeout [ 713.897377][T25718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.947446][T25718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.101123][T25718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.162007][T25718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.193263][T25718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.291577][T25718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.552077][T25718] hsr_slave_0: entered promiscuous mode [ 714.574828][T25718] hsr_slave_1: entered promiscuous mode [ 714.608731][T25718] debugfs: 'hsr0' already exists in 'hsr' [ 714.648997][T25718] Cannot create hsr debugfs directory [ 715.818941][ T5181] Bluetooth: hci7: command tx timeout [ 716.198856][T25718] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 716.336677][T25718] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 716.398803][T25718] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 716.427475][T26241] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2539'. [ 716.485865][T25718] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 716.572860][T26242] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2539'. [ 716.622784][T26242] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2539'. [ 716.904238][T25718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.019514][T25718] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.052093][T26257] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 717.082620][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.089836][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.162627][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.169781][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.887070][ T5181] Bluetooth: hci7: command tx timeout [ 718.177455][T25718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.334370][T25718] veth0_vlan: entered promiscuous mode [ 719.386960][T25718] veth1_vlan: entered promiscuous mode [ 719.408438][T26287] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 719.508510][T25718] veth0_macvtap: entered promiscuous mode [ 719.517279][T25718] veth1_macvtap: entered promiscuous mode [ 719.701964][T25718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.768232][T25718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.830272][T18090] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.896526][T18090] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.950361][T18090] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.013295][T18090] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.323232][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.331149][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.480973][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.552318][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.967139][T26322] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2503'. [ 721.862718][ T5181] Bluetooth: hci1: unexpected event 0x3d length: 3 < 14 [ 722.848778][T26420] [U]  [ 722.852090][T26420] [U] [ 722.854794][T26420] [U] [ 722.857491][T26420] [U] [ 723.044067][T26417] [U] [ 723.082284][T26423] random: crng reseeded on system resumption [ 723.602830][T26441] netlink: 'syz.2.2559': attribute type 16 has an invalid length. [ 723.680918][T26441] netlink: 226 bytes leftover after parsing attributes in process `syz.2.2559'. [ 723.752348][T26441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2559'. [ 724.937762][T26477] program syz.7.2566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.295964][T26484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2567'. [ 726.049664][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 726.152587][T26510] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2575'. [ 726.513615][T26520] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2578'. [ 726.608636][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2577'. [ 726.951488][T26535] program syz.7.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 727.520729][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.527472][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.535984][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.554549][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.572639][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.578945][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.587178][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.596275][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.392992][T26652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2597'. [ 731.726854][T26735] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 733.245704][T26785] ptrace attach of "./syz-executor exec"[26790] was attempted by "./syz-executor exec"[26785] [ 735.003431][T26817] netlink: 828 bytes leftover after parsing attributes in process `syz.2.2628'. [ 736.810085][T26871] netlink: 'syz.2.2636': attribute type 16 has an invalid length. [ 736.879042][T26871] netlink: 226 bytes leftover after parsing attributes in process `syz.2.2636'. [ 736.956461][T26871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'. [ 740.399424][ T31] INFO: task syz.1.2095:20337 blocked for more than 142 seconds. [ 740.407185][ T31] Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 [ 740.458192][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 740.478132][ T31] task:syz.1.2095 state:D stack:27688 pid:20337 tgid:20336 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 740.524403][ T31] Call Trace: [ 740.546420][ T31] [ 740.554972][ T31] __schedule+0x1190/0x5de0 [ 740.576035][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 740.652395][ T31] ? stack_trace_save+0x8e/0xc0 [ 740.664044][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 740.683376][ T31] ? __pfx___schedule+0x10/0x10 [ 740.703897][ T31] ? find_held_lock+0x2b/0x80 [ 740.731301][ T31] ? schedule+0x2d7/0x3a0 [ 740.759342][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 740.791788][ T31] schedule+0xe7/0x3a0 [ 740.815858][ T31] schedule_preempt_disabled+0x13/0x30 [ 740.863981][ T31] __mutex_lock+0x82a/0x10b0 [ 740.883845][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 740.902285][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 740.926906][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 740.953862][ T31] ? net_generic+0xea/0x2a0 [ 740.996617][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 741.007893][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 741.028180][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 741.051459][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.069825][ T31] ? rcu_is_watching+0x12/0xc0 [ 741.099846][ T31] ? bpf_lsm_capable+0x9/0x10 [ 741.118765][ T31] ? security_capable+0x7e/0x260 [ 741.139632][ T31] genl_rcv_msg+0x55c/0x800 [ 741.164549][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.183722][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 741.212177][ T31] netlink_rcv_skb+0x158/0x420 [ 741.263523][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.273921][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.288103][ T31] genl_rcv+0x28/0x40 [ 741.298954][ T31] netlink_unicast+0x5a7/0x870 [ 741.315171][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 741.329334][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 741.345381][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 741.365224][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 741.377030][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.391162][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 741.409171][ T31] ____sys_sendmsg+0xa95/0xc70 [ 741.426797][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 741.439945][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.458654][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 741.472323][ T31] ___sys_sendmsg+0x134/0x1d0 [ 741.488267][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.501308][ T31] __sys_sendmsg+0x16d/0x220 [ 741.515034][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 741.534752][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 741.548523][ T31] do_syscall_64+0xcd/0x490 [ 741.566773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.579364][ T31] RIP: 0033:0x7ff2d858ebe9 [ 741.591714][ T31] RSP: 002b:00007ff2d93c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.615270][ T31] RAX: ffffffffffffffda RBX: 00007ff2d87b5fa0 RCX: 00007ff2d858ebe9 [ 741.638220][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000002 [ 741.665067][ T31] RBP: 00007ff2d8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 741.693358][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.709034][ T31] R13: 00007ff2d87b6038 R14: 00007ff2d87b5fa0 R15: 00007ffe4f23b4b8 [ 741.734327][ T31] [ 741.773680][ T31] [ 741.773680][ T31] Showing all locks held in the system: [ 741.806964][ T31] 1 lock held by khungtaskd/31: [ 741.828230][ T31] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 741.875822][ T31] 5 locks held by kworker/u8:2/36: [ 741.891091][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 741.915546][ T31] #1: ffffc90000ac7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 741.943095][ T31] #2: ffffffff9036f3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 741.978419][ T31] #3: ffffffff90385608 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 742.006497][ T31] #4: ffffffff8e5cc5f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 742.031938][ T31] 2 locks held by kworker/u8:35/18082: [ 742.048333][ T31] #0: ffff888021322948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.088483][ T31] #1: ffffc9000e87fd10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.116330][ T31] 2 locks held by syz.0.2092/20323: [ 742.131669][ T31] #0: ffffffff90428ad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 742.155123][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 742.186013][ T31] 2 locks held by syz.1.2095/20337: [ 742.204166][ T31] #0: ffffffff90428ad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 742.225699][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 742.252544][ T31] 2 locks held by getty/20646: [ 742.271155][ T31] #0: ffff88814caee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 742.296365][ T31] #1: ffffc900030802f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 742.331012][ T31] 2 locks held by syz-executor/22164: [ 742.342240][ T31] #0: ffff88802a8920e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 742.375865][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 742.401055][ T31] 2 locks held by syz.4.2341/23596: [ 742.416258][ T31] #0: ffffffff90428ad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 742.439496][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 742.464847][ T31] 2 locks held by syz.5.2435/25040: [ 742.504232][ T31] #0: ffffffff90428ad0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 742.525050][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 742.561526][ T31] 2 locks held by syz-executor/25718: [ 742.584082][ T31] #0: ffff88807ad0c0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 742.611823][ T31] #1: ffffffff8e9d9508 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 742.641011][ T31] 1 lock held by syz.2.2622/26798: [ 742.659751][ T31] [ 742.664626][ T31] ============================================= [ 742.664626][ T31] [ 742.733172][ T31] NMI backtrace for cpu 0 [ 742.733191][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 742.733221][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.733233][ T31] Call Trace: [ 742.733241][ T31] [ 742.733248][ T31] dump_stack_lvl+0x116/0x1f0 [ 742.733279][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 742.733310][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 742.733335][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 742.733366][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 742.733401][ T31] watchdog+0xf0e/0x1260 [ 742.733435][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.733462][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 742.733489][ T31] ? __kthread_parkme+0x19e/0x250 [ 742.733515][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.733544][ T31] kthread+0x3c5/0x780 [ 742.733573][ T31] ? __pfx_kthread+0x10/0x10 [ 742.733603][ T31] ? rcu_is_watching+0x12/0xc0 [ 742.733624][ T31] ? __pfx_kthread+0x10/0x10 [ 742.733655][ T31] ret_from_fork+0x5d4/0x6f0 [ 742.733685][ T31] ? __pfx_kthread+0x10/0x10 [ 742.733714][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.733749][ T31] [ 742.733763][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 742.858745][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 742.870556][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.880608][ T31] Call Trace: [ 742.883883][ T31] [ 742.886809][ T31] dump_stack_lvl+0x3d/0x1f0 [ 742.891405][ T31] vpanic+0x6e8/0x7a0 [ 742.895396][ T31] ? __pfx_vpanic+0x10/0x10 [ 742.899913][ T31] panic+0xca/0xd0 [ 742.903642][ T31] ? __pfx_panic+0x10/0x10 [ 742.908063][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 742.913780][ T31] ? irq_work_queue+0xce/0x100 [ 742.918554][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 742.924551][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 742.929928][ T31] ? watchdog+0xd78/0x1260 [ 742.934350][ T31] ? watchdog+0xd6b/0x1260 [ 742.938795][ T31] watchdog+0xd89/0x1260 [ 742.943057][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.947739][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 742.952939][ T31] ? __kthread_parkme+0x19e/0x250 [ 742.957965][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.962646][ T31] kthread+0x3c5/0x780 [ 742.966723][ T31] ? __pfx_kthread+0x10/0x10 [ 742.971325][ T31] ? rcu_is_watching+0x12/0xc0 [ 742.976090][ T31] ? __pfx_kthread+0x10/0x10 [ 742.980697][ T31] ret_from_fork+0x5d4/0x6f0 [ 742.985297][ T31] ? __pfx_kthread+0x10/0x10 [ 742.989897][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.994674][ T31] [ 742.997752][ T31] Kernel Offset: disabled [ 743.002075][ T31] Rebooting in 86400 seconds..