last executing test programs: 2m42.08764848s ago: executing program 2 (id=1232): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(0x0, 0x4, 0x0, 0x0, 0x8) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000b00c7", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x13f0}, 0x1, 0x9eff, 0x0, 0x400c014}, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x8, 0x1, 0x9, 0x1, 0xff]}, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x24048084) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m40.653821166s ago: executing program 2 (id=1235): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r0, 0x90006442, r0) 2m40.512003835s ago: executing program 2 (id=1236): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x40000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) ftruncate$auto(r0, 0xa0) read$auto(0x3, 0x0, 0x0) r1 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/saved_cmdlines\x00', 0x88000, 0x0) pread64$auto(r1, 0x0, 0xa, 0x80000000000) 2m40.260677369s ago: executing program 2 (id=1238): mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0xc018aec0, r0) mmap$auto(0x0, 0x8, 0xdf, 0x9e, 0xffffffffffffffff, 0x8000) r2 = prctl$auto(0x3a, 0x5, 0x0, 0x3, 0x7ffffffffffffffb) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) epoll_ctl$auto(0x5, 0x1, r2, 0x0) sched_get_priority_min$auto(0x40) r4 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) socket(0x6, 0x2, 0x80000000) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040c00}, 0xc08c5) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20048000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0xc}, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) fstatfs$auto(0x3, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x141001, 0x0) mmap$auto(0x0, 0x7, 0x2, 0x40eb3, r3, 0x300000000080) socket(0xa, 0x4, 0x84) close_range$auto(0x0, 0x5, 0x0) 2m40.041135857s ago: executing program 1 (id=1242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000017c0)={0x1394, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xc0, 0xe8, "30fdbfefd54a95d584c8b7d70b6eb595e753e1dafce4017f3b37ca71009dae3760767db5c45701101606e13a967687dca7586eb955484f085bca85537c60304a4426c7dbe35c5ae1e35aef60af19eff03abfab33b39f4847a17a0e877b961188ba161e79f2db2ee86fcc63b0823cfbf036365909c09f9a30950d06ce35b38340c20b8aa8a7d29544d72f14343b523f9e3357abc451b076d4250b565213e1049f9d217571f4e35e10f505267bfd951fe5ecb65c989942d864b06ae4ae"}, @NL80211_ATTR_MBSSID_ELEMS={0x12bd, 0x133, 0x0, 0x1, [@nested={0x282, 0x46, 0x0, 0x1, [@nested={0x4, 0x1}, @generic="df8764e76129759123fb930eeed155da7aa7de78415d1faabee9dcc46ce054b94d7eda5b0a0e059e3bcab11991c3323c27421271f9c211c927413aee799eb4de238ec6fa6ec3c46c17d776993d1229f5c52278edea39410963b0e0a689aab3498cfdc40585eec2eab3b6de02017ebf2cc23d7d592802665be9ebfdc0c2fbc435de1f506734fa463311fc5428ecd9d960aab7f8f1419c7d3720f9c51628600cd05bcc990bde8126611e2e4b04b632226ce41fe72d47b07af2171558145fe2bd8c9ee6eb096915ec76e79d6c2bcd2b941785", @typed={0x4, 0x151}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0xfffffffffffffff0}, @generic="1ddf4c862413eb6bb0939c0cfc6e19b75753fd33ed87ccd544f1c8f0ffe670f31cd9497750ccd5251137fce7430beda7c17f450e365b0f02d7508f70ef739104e5ab855fa7a136c63aa50ca4d469a7ada7d2bb2fbe31cff78bc839ad1a12489354c7f90ee790a1f8821c523d3460e1a74df892318eeeb514ea16346d67be9658a8dbd20a57d049fd96f65bd6e9902e87f3d6510ced5814987428f98ff0d3ddae9daf8a", @nested={0x4, 0xb6}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x9}, @generic="f13b71b9c4a0e68e469a225806263592d120ca1672369194a89e8116533757bd11ff3bff177fe531fe47d29944269c1742fd7ef0e436804067bbf4455c601899b9fe1827f85a2fe84e99c469d9b6ce4fe231fcfdf938f6c102a77e119c0c3b2cc848e191fd7dd2fbc0ee5d10e4d2274fb5738b50b57d4009bf631b702e2ab15c67b1b0612c9002dfb59fe190ed8ccd0a1525f5b67981bd2a2207361a668da341b6c18c8499ab77d5040a97cdc4d131701834d962a1de1fd2dd276143d29bab5967895664cb15f8275c0ff77f31e6d892975471bf36f4d8c490651f9b56a8"]}, @generic="e31e3710621332d1f9378e8e4438342274fd209b418d1e44501084988fea1e0c33fdbbb5c39b65f4d3e3a9169fb33635efa2bf36f6", @generic="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"]}]}, 0x1394}}, 0x2000c000) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001380), r0) sendfile$auto(r0, r0, &(0x7f0000000280)=0x7fc, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001780), r0) r2 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r2, 0x6b, 0x3, 0xfffffffffffffffe, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x188, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@SMC_NLA_EID_TABLE_ENTRY={0x6, 0x1, '[,'}, @SMC_NLA_EID_TABLE_UNSPEC={0x73, 0x0, "f34e44b620122232a6d9e62ed4c399265c543e2b5e4f4af81256d72f71c7ae3e00654c6275845683ed880a21d58ecf7e8425e946c792a52299e36331c6ea1b2dd3171df218b74d9dc2d06f19f7b44a5ef3baa68c2d9316cffead2d375ec720f71efbe3fa0b28630c117ee5cee11600"}, @SMC_NLA_EID_TABLE_ENTRY={0x12, 0x1, 'veth0_to_team\x00'}, @SMC_NLA_EID_TABLE_UNSPEC={0x4}, @SMC_NLA_EID_TABLE_UNSPEC={0xc6, 0x0, "bf559e99d719d23b9cfa4222e8951fc849f4f253ae6825ae0d12d087d5073295fc2ce8889784775bf4c270af1b8195abbd8859f2c236c9879c1f0b7b0d6c846ba4882cde23ecbf2660b2f71074846e086fbd048b930ce76d8dad37578f8c078f93d0803777f66b20da82fbf13506cdcde793cfdde4a8cc7e4b812d7cc125318cd85b6686eceefd1711594c573eeb7ce9afb5f82180af33896cfe04bcc60be4ec2c9abe56136f6990f8f83a5aa6d74fae2cdc75777662ba32a9357ee5cef009eb9e01"}, @SMC_NLA_EID_TABLE_ENTRY={0xc, 0x1, 'ethtool\x00'}, @SMC_NLA_EID_TABLE_ENTRY={0x9, 0x1, 'IPVS\x00'}]}, 0x188}, 0x1, 0x0, 0x0, 0x1080}, 0x8004810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x30}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r7, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf2502000000100002800c000100030000000000000008000100", @ANYRES32=r6, @ANYBLOB="3fd13af30771f03a009de74cb087e498971eb897d63ebc227fce8f33e8ed201403cea92ea517e652099af01c2b2667b4da43eeb4957b4f3c884c988ccf8f28c0995245e246a90be61309b544d4eb1b1f0eb7a200172b09112b"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2m39.916646271s ago: executing program 1 (id=1243): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="480040000300000005000300020b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff80, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x0, 0x7, 0x80000005}) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x9, 0xffffffffffffffff, 0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, 0x0, 0x4008050) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x7fffffff, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) setregid$auto(0x0, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 2m39.804925748s ago: executing program 2 (id=1244): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x4) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') select$auto(0x5, &(0x7f0000000100)={[0x1, 0x9, 0x3, 0x4, 0x4, 0x625, 0xe1c, 0x6, 0x8a, 0x23, 0x2, 0x8, 0x8, 0x40, 0x2]}, &(0x7f0000000180)={[0xa, 0xe98, 0x6, 0x8, 0x8000000000000000, 0x6, 0xac, 0x2, 0x9, 0x42f9, 0x2, 0x9, 0x9, 0xfffffffffffffffc, 0x5, 0x800]}, &(0x7f0000000200)={[0x0, 0x1000, 0x9, 0x3ff, 0x1, 0x3ef, 0x80, 0x1, 0x200, 0xffffffffffffffff, 0x6e, 0x9, 0x353, 0x8, 0x139, 0x101]}, &(0x7f0000000280)={0x4e38, 0xff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000001c0)) mmap$auto(0x0, 0x4, 0xffd, 0x12, 0x3, 0x0) read$auto(r1, 0x0, 0x8c8d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) r3 = socket(0x1e, 0x1, 0xffffff6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r4) sendmsg$auto_NETDEV_CMD_DEV_GET(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x28044004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x101}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x5}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xffffffc0}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r6}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x40}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(0x4, 0x6, 0x17, 0xfffffffffffffffc, 0x0) 2m39.56225852s ago: executing program 2 (id=1245): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) rt_sigprocmask$auto(0x8, 0xffffffffffffffff, 0x0, 0x8) bpf$auto_BPF_OBJ_PIN(0x6, 0x0, 0xbbdd) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_options\x00', 0x100, 0x0) r2 = socket(0x2, 0x5, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x92000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x64004090}, 0x24000005) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0) read$auto(r4, 0x0, 0x4000000081) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m39.414261065s ago: executing program 1 (id=1246): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_buffer_percent_fops_trace(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto(r0, 0x4b65, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xc, 0x37, 0x2, 0x5, 0x7, 0x1, 0x6, 0x584e}, 0x9) r1 = inotify_init1$auto(0x3000000000000) ioctl$auto_dma_heap_fops_dma_heap(r1, 0x10000, &(0x7f0000000040)="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") r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b72, r3) openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x20100, 0x0) 2m39.289847284s ago: executing program 1 (id=1247): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cpu/1/msr\x00', 0x444d83, 0x0) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x80000020009, 0x2, 0x100004eb1, r1, 0x83) (async) mmap$auto(0x0, 0x80000020009, 0x2, 0x100004eb1, r1, 0x83) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r3, r3, 0x0, 0x4f64a1d2) (async) sendfile$auto(r3, r3, 0x0, 0x4f64a1d2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r0, 0xc0b45545, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffff, 0x9, 0x400000072, 0x8b7f, 0x1000000002, 0x8000) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x8) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video21\x00', 0x8a240, 0x0) (async) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video21\x00', 0x8a240, 0x0) ioctl$auto(r4, 0x5646, r4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r5, &(0x7f0000002180)=""/211, 0xd3) (async) read$auto_proc_sys_file_operations_proc_sysctl(r5, &(0x7f0000002180)=""/211, 0xd3) r6 = socket(0x2c, 0x5, 0x6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) 2m38.21181382s ago: executing program 1 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000008000) r1 = memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) (async) fallocate$auto(0x3, 0x3, 0x45, 0x8ec8) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, &(0x7f00000003c0)=0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x6, 0x2, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x800) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) (async) close_range$auto(r1, 0x8, 0xfffffffc) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x20000080) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) r4 = getpgid(0x0) kcmp$auto(r4, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) setresuid$auto(0x2, 0x7, 0x0) (async) madvise$auto(0x0, 0x20200, 0x15) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x26c, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x46, 0x148, "dc266fcebd92e437b03d6f7bf9019872a79c693a679ed22accb537c0e7b86a6641f38fba40c4623d6f5d31e08fa592572d8f8631d0b241452f8273acea88c518c6d7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x586}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa6, 0xac, "d5fb21b57f2aaef65f36010e3597d5a0d707fcc310c0f13f1ed322f33ea9b602785d17a91c243cad82c39a98c0b2c14d849b4d627d5b63d863515931d690f629ad36f02ec82d5b866f3516187c3c764608ab53564ab8391b5b6ef78588cd1757d4795d34a59aa5569eb281557d56c9bee8d12c5ca2e163ae057bf565ac20223d3123715a0c847638ac41ab7833bd8ce06fef549ad461d64f2d0f718e631b0159eca0"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x139, 0x6e, 0x0, 0x1, [@nested={0x24, 0x13, 0x0, 0x1, [@typed={0x4, 0x6a}, @nested={0x4, 0x6b}, @typed={0x4, 0x144}, @typed={0x8, 0x18, 0x0, 0x0, @uid}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x8, 0x82, 0x0, 0x1, [@typed={0x4, 0xba}]}, @generic="9aeff15bd97ad10b675f115c389f269d73ea383779290eed16c0d0e4adabbf0d8a5c237d7b90f143da7c57fd4d820a2a2ac1b328f732b8720abf68c2152b32d4384f8cc73cf23f74821464731bacf183259a248816ad74466e710e308f99927c8b7ad985e067bb58836ef46bde9da5bed060c838e1ff06b26283ecd6855bf474206311b7d587d870eddb9b0d8a89e2e3cfa8c8e1a89fcafe658c8bcdb21f9cb121d6420eb90be02b72", @generic="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4e2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x25}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000010) (async) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r0) 2m37.984596115s ago: executing program 1 (id=1252): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) getsockopt$auto_SO_MAX_PACING_RATE(r2, 0x10, 0x2f, &(0x7f0000000000)='^!\x00', &(0x7f0000000040)=0x9) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r2, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffffbd70dbdf2502000000100002800c01010003000000182124ed080001000000ffc6168883d555be5e4cce53566ff9e2e0842ebad72d8563bdf6d872a29aa8d5d645e162b3bbe2b72035c2bd5c85e21e61f8c34e7ba873d9a1", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 2m29.762995823s ago: executing program 32 (id=1220): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) io_uring_setup$auto(0x1d49, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x801, 0x100) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x234840, 0x141}, 0x18) mount_setattr$auto(r1, &(0x7f0000000180)='./file0\x00', 0x45, &(0x7f00000001c0)={0x4, 0x9, 0x7f, @raw=0x3}, 0xfffffffffffffffb) connect$auto(0x3, &(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0x55) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000000)="b4e3c3258e7d94cd0abfe3198f9469673f66cad9736befca0092773cff273d86be0bda8ba10f9d5347ab7779dbca2b98481114792e279fe9d2696355d25b2a68a7cce26475c0f1d89fd8e7fcae4af2a920f23f652beb6ad97cf9ddf65bb71c954989d650e39cf4e821411c4ec2eceec9d1a6eab1df4cb8861046254bee9409e70cfd5be5718415506d820777d3", 0x6) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) getrandom$auto(0x0, 0x6000000, 0x3) 2m24.392846883s ago: executing program 33 (id=1245): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) rt_sigprocmask$auto(0x8, 0xffffffffffffffff, 0x0, 0x8) bpf$auto_BPF_OBJ_PIN(0x6, 0x0, 0xbbdd) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_options\x00', 0x100, 0x0) r2 = socket(0x2, 0x5, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x92000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x64004090}, 0x24000005) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r4 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x103700, 0x0) read$auto(r4, 0x0, 0x4000000081) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m22.75896612s ago: executing program 34 (id=1252): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) getsockopt$auto_SO_MAX_PACING_RATE(r2, 0x10, 0x2f, &(0x7f0000000000)='^!\x00', &(0x7f0000000040)=0x9) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r2, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffffbd70dbdf2502000000100002800c01010003000000182124ed080001000000ffc6168883d555be5e4cce53566ff9e2e0842ebad72d8563bdf6d872a29aa8d5d645e162b3bbe2b72035c2bd5c85e21e61f8c34e7ba873d9a1", @ANYRES32=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 1m45.982166458s ago: executing program 6 (id=1418): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x7f, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x8000000000000018, 0xfffffffffffffffe, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x0, 0x100000027, 0xd, 0x7ff, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0xf, 0x80000001, 0x3, 0x1, 0x9, 0x4, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x7, 0xd, 0x0, 0x9487, 0x3, 0x2, 0x8, 0x6, 0x1ed2dcbc, 0x8000001f, 0x7, 0x6d40, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_vcs_fops_vc_screen(r2, &(0x7f0000000080)=""/238, 0xffffffe9) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x4b70, r4) read$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000080)=""/209, 0xd1) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) 1m44.904607614s ago: executing program 6 (id=1419): io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x1, 0x0, 0x1e) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb3, 0x0, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5522, 0xf15) ioctl$auto(0xffffffffffffffff, 0x100, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r4) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001080000000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$auto_SNDCTL_DSP_MAPOUTBUF(r0, 0x80105014, &(0x7f0000000340)="6f1d11a24f40b3498ef4ac29f9d0641adae364e1154a32f530ae0d15c45b8563cba9eee13e40e684bb13b9c198e5a62214a8e9c1bdc96bca6ff0f488d8bf166559265ed3fa639d8653ef9afe53c6d354ace0af01ff7fa35d85cdba012475ad2cc37529d7e0b5d70da637621ef7bd123eeb76bfee15c3714614ff7a345e4b0d661715415bb3d71192e80b41d57f9ccd07ada36009f114dde00a2388fa2ce7391ebf760e8e433455706c2b8fdefc5beb74189563f704337e645c8c339d1b99464b0081683cbdc8fa8b9f273a4fa78098023a0332607b5c6e35efb392367f4ec21f") writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket(0xa, 0x5, 0x94) io_uring_setup$auto(0x6, 0x0) 1m41.924450749s ago: executing program 6 (id=1426): mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) (async) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) (async) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r3 = socketpair$auto(0x1c, 0x5, 0x0, 0x0) ioctl$auto(r2, 0x5609, r3) (async) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, &(0x7f0000000080)={0x7fff, 0x13, 0xe1, @lost_msgs={0x1}}) 1m41.42647051s ago: executing program 6 (id=1428): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) msgctl$auto_IPC_INFO(0x401, 0x3, 0x0) shmctl$auto_IPC_STAT(0x1, 0x2, 0x0) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x1, 0x0) ioctl$auto_USBDEVFS_BULK32(r2, 0xc0105502, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r3 = setfsuid$auto(0xee01) setreuid$auto(r3, 0x0) 1m40.954517087s ago: executing program 6 (id=1430): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') select$auto(0x1, &(0x7f0000000000)={[0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x3, 0xfd70, 0xfb4d, 0x3, 0x7, 0x234a, 0x3, 0x400, 0x8000, 0x3, 0x88, 0x3]}, &(0x7f0000000180)={[0xffffffffffffff16, 0xc80, 0x3, 0x2, 0x4, 0x500000, 0x7f, 0xb5f6, 0xffffffffffffff63, 0x4, 0x7, 0x3, 0xa, 0x3, 0x5, 0x7]}, &(0x7f0000000200)={[0x7, 0x4, 0x4, 0x7703, 0x3, 0x8f4, 0x40, 0x1, 0x6, 0x2, 0x1, 0x9, 0x2, 0x8, 0x2, 0x400]}, &(0x7f0000000080)={0x5, 0x7}) unlink$auto(&(0x7f0000000380)='}[,&*}\x00') 1m39.844020271s ago: executing program 6 (id=1436): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0x5, 0x22, 0x8672, 0x80}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd81dcdbd3b2683e95b822f66eb624ad63110d61771552c03de65800"}) (async) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) (async) io_uring_setup$auto(0x401, 0x0) (async) read$auto(0x3, 0x0, 0x1a) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0xfffffffffffffffe, 0x2, {0x8, 0x10000}, 0x2dd, 0x6, 0xfffffffffffffffd, 0x203, 0x0, 0x80000001, 0x83, 0xffffffffffff628e, 0x8, 0x0, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) (async) clock_adjtime$auto(0xb, &(0x7f00000000c0)={0xfffffff9, 0x0, 0x0, 0xc, 0x8001, 0x1, 0x5, 0x0, 0xef08, 0x3, 0x9, {0x0, 0xe6}, 0x9406, 0x3, 0x6, 0x4, 0x0, 0x1ff, 0x1, 0x2, 0x40, 0xa5dd, 0xfffffffd}) (async) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0xffffffffffffff86) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) bind$auto(0x3, 0x0, 0x6a) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x3, 0x0, 0x6, 0xb}, 0x400}, 0x5, 0x30000000) (async) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) (async) ioctl$auto(0x3, 0x894b, 0x38) (async) semget$auto(0x0, 0x13c, 0x1ff) (async) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) (async) r2 = socket(0x2, 0xa, 0x4) (async) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) (async) recvmmsg$auto(r2, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) 1m38.035230352s ago: executing program 0 (id=1444): unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2022009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffffffffffffffe) (async) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) (async) unshare$auto(0x40000080) r1 = socket(0x1e, 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)=ANY=[], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) (async) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, r1, 0x8000) (async) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1800, 0x0) (async) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x8, 0x1, 0x63, 0x10, 0x3, 0x3}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb5, 0x1, 0x8000) (async) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8841}, 0x40000) (async) read$auto(r7, 0x0, 0x10001) (async) mkdir$auto(0x0, 0x8) 1m37.39019033s ago: executing program 0 (id=1447): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x8, 0x1, 0x9, 0x1, 0xff]}, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x24048084) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m36.462484885s ago: executing program 0 (id=1450): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2020008, 0x6, 0xbd, 0xffffffffffffffff, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (fail_nth: 33) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1a1a, 0x2, 0x3, 0x95f4da0a, 0x7f, 0x20000003, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) 1m35.475566208s ago: executing program 0 (id=1452): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x7, 0x4000a, 0x0, 0x9b72, 0x7, 0x28000) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x65, 0x4, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_MM_START_DATA(0x80000001, 0x3, 0xffffffffffffffff, 0xa3, 0x1000) socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x4, 0x2, 0x9, 0x5, 0x6, 0x8, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x9]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40810}, 0x8044) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) write$auto(r4, 0x0, 0xfffffdef) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/cpuid/cpu0/uevent\x00', 0x20400, 0x0) 1m35.07214042s ago: executing program 0 (id=1455): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="480040000300000005000300020b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff80, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x0, 0x7, 0x80000005}) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x9, 0xffffffffffffffff, 0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf25050000000800010001800000d593f1ce94be8441a7a8c5adbabb4b3082c5341154218c160bb40ee24de74a5ba816c2871d44cef0cc466655d15fa63c9ce8a87c8e09315342460c3dc5320a5906cf62717595bd89f2c1"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x7fffffff, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) setregid$auto(0x0, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 1m34.156231112s ago: executing program 0 (id=1458): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = getpid() r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/nfc/nfc1/rfkill1/persistent\x00', 0x80000, 0x0) pread64$auto(r1, 0x0, 0x4000000800e, 0x3) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000500)="a860e2d73518c39c19ba87d1c9271a799e4afd4bd2a8112bc3459cee7e84b8271c16e8907cba67fdf1b94233927e1ac54df42e7cdfd0020661a6", 0xffffffff}, 0x6, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000080)={0xffffffffffffffff, 0x9}) close_range$auto(r2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(r3, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e17c1", 0x7115}, 0x8) umount2$auto(&(0x7f0000000180)='.\x00', 0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) umount2$auto(&(0x7f0000000040)='}(+@\x00', 0xe6000000) r4 = open(&(0x7f0000000000)='}[,&*}/../file0\x00', 0x22040, 0x150) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000400)=""/4096, 0x1000) 1m31.199381822s ago: executing program 5 (id=1466): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, &(0x7f0000000040)={0x6, [{[0x2, 0xf5e, 0x1ff, 0xd, 0x7f, 0x8, 0x4, 0x663d349e]}, {[0x2, 0xa6, 0x5c915993, 0xfffffffd, 0x6, 0xe, 0x80000001, 0x3]}, {[0x2, 0xe, 0x2, 0x579c8feb, 0x9, 0x6, 0x7, 0xa53]}], [{[0x75d, 0x9, 0x6, 0x17f29ee4, 0x400, 0x7, 0xc, 0x44]}, {[0x1, 0xeade, 0x1, 0x3, 0xf0, 0x5, 0x104, 0x1]}, {[0x7e61, 0x6, 0x7, 0x0, 0x5, 0x5, 0x100, 0x9]}, {[0x4, 0x5, 0x1, 0xfffffff7, 0x5, 0x0, 0xfffffffb, 0x1]}, {[0x80000000, 0x1000, 0x8, 0x8, 0x2, 0xe8c, 0xf, 0xd403]}], [{0xfffffffa, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7f, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x61, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xedb0, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x7fd, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffffd, 0x1, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}], [{0xbe, 0xd5, 0x0, 0x1, 0x0, 0x1}, {0xc2, 0x7fffffff, 0x1, 0x1, 0x1}, {0xbc, 0xbb5e, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x100, 0x12e800, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xf, 0x0, 0x1, 0x1}, {0xffff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x0, 0x1}], 0x100, 0x2, 0x4, 0x9, 0x5, 0x1, 0x8, "938f570ba48ab1df6ea169301a0f4b75", "16fef137d6f6aa1d93e7fd319170d04be4063eb16bddc7a41e5782dfff02104539c9b5e571a002e14933724526d0c013"}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/card2\x00', 0x200100, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/44, 0x2c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) io_uring_register$auto_IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000300)="41d4a0da4d8a60d73e664bc3471b42b9505bd2e318683d562c54e096e4e074270c0ee5af7121023c490544af73a94dd546c6d29f4985e90bed8731472b", 0x3) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x80000, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r3, 0xffffffffffff8000, 0x100000000, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) read$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)='nbd\x00', &(0x7f00000001c0)={0x0, 0xa50}, 0x1000) 1m30.081897208s ago: executing program 5 (id=1468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x2000c080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1m29.735889857s ago: executing program 5 (id=1471): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2020008, 0x6, 0xbd, 0xffffffffffffffff, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (fail_nth: 35) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1a1a, 0x2, 0x3, 0x95f4da0a, 0x7f, 0x20000003, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) 1m28.746500595s ago: executing program 5 (id=1473): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x20002, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000012c0)="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", 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e0088"], 0x24}}, 0x4000000) (async) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x128, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x5e, 0x1a, "b855e9e770121743398c390156082ddd2e0083e76ed64839845a14b91d40836e2353e6961ad5c4e2536749b14a4d3ae588e3d0a9c7eef2c00b272c8e04ce6aa459e85f76293fb836c6ac4253401a4ecc106c8b21c1d6d45c65c7"}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_PREV_BSSID={0xa5, 0x4f, "c831e428a5c1e2720a6136dc4e25969bfd1db754898cff895f7f30e372cc477956e431445eb2a3b2bb344e57b7555f6e163c03052e1e1750e874e83d58c82f4cadc4fc3a42a6ce1db1821e7fc0ad0675a03903c52cfd263af4fa5d0f35fbb78f2f9d87ad3136650891b2b5d36d1f83c781d206f558e1a81354e8a4a87fb2f282c8abe61bfa1c338350a5604edb3843479bc46c89d50a9721402d85a5577612ac4f"}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) 1m28.310311132s ago: executing program 5 (id=1475): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m27.832498641s ago: executing program 5 (id=1476): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(0x0, 0x4, 0x0, 0x0, 0x8) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000b00c7", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x13f0}, 0x1, 0x9eff, 0x0, 0x400c014}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x8, 0x1, 0x9, 0x1, 0xff]}, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m24.279096361s ago: executing program 35 (id=1436): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0x5, 0x22, 0x8672, 0x80}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd81dcdbd3b2683e95b822f66eb624ad63110d61771552c03de65800"}) (async) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) (async) io_uring_setup$auto(0x401, 0x0) (async) read$auto(0x3, 0x0, 0x1a) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0xfffffffffffffffe, 0x2, {0x8, 0x10000}, 0x2dd, 0x6, 0xfffffffffffffffd, 0x203, 0x0, 0x80000001, 0x83, 0xffffffffffff628e, 0x8, 0x0, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) (async) clock_adjtime$auto(0xb, &(0x7f00000000c0)={0xfffffff9, 0x0, 0x0, 0xc, 0x8001, 0x1, 0x5, 0x0, 0xef08, 0x3, 0x9, {0x0, 0xe6}, 0x9406, 0x3, 0x6, 0x4, 0x0, 0x1ff, 0x1, 0x2, 0x40, 0xa5dd, 0xfffffffd}) (async) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0xffffffffffffff86) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) bind$auto(0x3, 0x0, 0x6a) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x3, 0x0, 0x6, 0xb}, 0x400}, 0x5, 0x30000000) (async) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) (async) ioctl$auto(0x3, 0x894b, 0x38) (async) semget$auto(0x0, 0x13c, 0x1ff) (async) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) (async) r2 = socket(0x2, 0xa, 0x4) (async) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r3, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) (async) recvmmsg$auto(r2, &(0x7f0000001180)={{0x0, 0x3, &(0x7f0000000140)={0x0, 0x100}, 0x3, 0x0, 0x9, 0xc201}, 0x100}, 0x3, 0xb9, &(0x7f00000011c0)={0x0, 0x7}) 1m18.846921974s ago: executing program 36 (id=1458): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = getpid() r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/nfc/nfc1/rfkill1/persistent\x00', 0x80000, 0x0) pread64$auto(r1, 0x0, 0x4000000800e, 0x3) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000500)="a860e2d73518c39c19ba87d1c9271a799e4afd4bd2a8112bc3459cee7e84b8271c16e8907cba67fdf1b94233927e1ac54df42e7cdfd0020661a6", 0xffffffff}, 0x6, 0x0) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000080)={0xffffffffffffffff, 0x9}) close_range$auto(r2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(r3, &(0x7f0000000100)={&(0x7f0000000280)="8e8873b5f9dd39182ab801a9e417130ff346eab3d41f954d458b276ffab4f6d5b23e17c1", 0x7115}, 0x8) umount2$auto(&(0x7f0000000180)='.\x00', 0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) umount2$auto(&(0x7f0000000040)='}(+@\x00', 0xe6000000) r4 = open(&(0x7f0000000000)='}[,&*}/../file0\x00', 0x22040, 0x150) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000400)=""/4096, 0x1000) 1m16.298583273s ago: executing program 4 (id=1503): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/ptp/ptp0/pps_available\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r1 = prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x80000, 0x2020009, 0x3, 0x78, r1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf25030000000800040008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000300faffffff08000400b7000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x60781, 0x0) 1m15.153941578s ago: executing program 4 (id=1505): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0x3, 0x15) close_range$auto(0x2, 0x8, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r2) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000240)={{0x80000000, 0xee00, 0xee01, 0x9, 0x9, 0x7, 0x6}, &(0x7f00000001c0)=0x65, &(0x7f0000000200)=0xd5, 0x7, 0x3, 0x400, 0x800000000000, 0x1000, 0x598, 0xf, 0x3, @raw=0x800, @raw=0xd31a}) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\n\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="4f00de085ed5146f720110b677a9cf7631e17aaf607cb887ab41b3885e2a46e1d0aa0823c6bb94ac86085eb5a9afdc06a4fd7a7049e04bd507c19d7812896614378bed3b6888ff90a0eeab47cb2fddcc6e6379276ef2cc305ff1d0c03383018eb734fb638b6316c14de360da9d368108", @ANYRES32=0x0, @ANYBLOB="04000e8004003200080045800400a480007a00000065d5e3f84b2c377fba48fd4ec8d6be71c247bf49127b0677d00ccdb16acd03de307d4c8b28ddaeb4693142c759598b21c91128d71aa755f293056d2c2b4193f621281c5715c6b892a28e606b416562fc9c8e0bbf16f0507634d034fc8645f9822cf4fd96c1840915f70aa21df3afa24c59f0a047"], 0xa34}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x42c883, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4000c, 0xdf, 0x9b72, r0, 0x0) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r6, &(0x7f0000000040)='nbd\x00', 0x4) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) 1m13.983191512s ago: executing program 4 (id=1508): socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) fcntl$auto(r0, 0x409, 0x40003f) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/192, 0xc0) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) unshare$auto(0x40) r2 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000003e80), 0x8002, 0x0) read$auto_ptdump_curknl_fops_(r2, &(0x7f0000003ec0)=""/88, 0x58) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto_ftrace_system_enable_fops_trace_events(r1, &(0x7f00000001c0)=""/10, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 1m11.854429028s ago: executing program 37 (id=1476): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(0x0, 0x4, 0x0, 0x0, 0x8) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000b00c7", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="c4edbcb58aa90bda7af108275eeb6e46ea3b405df5fe9842863560a62a005ceb9ace2f4d2e58ef9974a789f3d495a39b58196353b743f689a853f11b063cf24e6ab071f5726ba9d060fc5f7a8ed8fc636f52d6ff79e068457a1f99a9d7aa1e10a8b62bf429b9fff5f61a429aaf0122a66bb1145b29c0530c9709cc90cc94d479093df73fe703178208bbf34d6d9ac8ce161a7ba9a64da0b8b97bc3d4651d7e15698702465ae3be52897d6a975b437ff4b084f7bec5ff04230e4da645a8f12286def8ca0fdecd1718ce5ab358ea77ddeb0e209146a984f0788879c059a044ef456275626b508f5874cc7f965788062baf71e93ca15c970216a7473d2a4a3f2caf8670aae9165e43519e8435029bb91afe1f72be488abfadb6f4775ae61ac2ab8ddcb98c133bdccf5148bb8ad1d42a9d3404b9914efa932df37801c0dd23001d95a6bb07b1f555f53960c6e66a8db5a797d18d5fc9a072e532ee4431477dd369ea649b472961c30560f05e74436a78a414f2d5717381dac00c985a257cb0fe0b618d4b5a11e75f44011b415e07dab32189325401e33f3bb7ab63d8eff2f626f62a0daabea67c364ed9555a862a68ac9c8293ca5dff18369ac311598d1c8958dbf50d73c0ddc2cdcff447d29899152d5c6867beee6256ff2d0b845ed8c1f4ca144c41b25fc7fb833908284e3d400f73794aec8326f41e247ed139b081a827c41b01fb64369cc7a735b167a0e560062255e4e9f1c3243c16053c1dd18867c521f2da1b9a1f292b263835a1e3eda87d7390b63b27c4daebd32163c8e22e435a8b95022d25e00e02b4a3216bd1b3abb2c5489dc6efc937d760a59ddb0d8d0696682fded5feae051a0276211f3f51318731c25d7f1f0041e88cef6ad96be2df50150b881fc4ee"], 0x13f0}, 0x1, 0x9eff, 0x0, 0x400c014}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x8, 0x1, 0x9, 0x1, 0xff]}, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m7.735944971s ago: executing program 4 (id=1517): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="480040000300000005000300020b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff80, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x0, 0x7, 0x80000005}) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x9, 0xffffffffffffffff, 0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf25050000000800010001800000d593f1ce94be8441a7a8c5adbabb4b3082c5341154218c160bb40ee24de74a5ba816c2871d44cef0cc466655d15fa63c9ce8a87c8e09315342460c3dc5320a5906cf62717595bd89f2c1a4a25521cf4fcfd967f96c121ebc4b99cc6ce517c25337ca76fbdf37b2675cc4d805fddc3e03d3399f2901ccb0286bb7f366777aff8ee9e8e1abe75d8ce5d58ada4d6e5cc17e73af"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x7fffffff, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) setregid$auto(0x0, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 1m6.296722058s ago: executing program 4 (id=1520): r0 = mq_open$auto(&(0x7f0000001680)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x88\xec\aSpiTv\x06\x8bdVx\xb3\x89\x98\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mq_timedreceive$auto(r0, 0x0, 0x4dcd, 0x0, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000000)={0x330715e4, 0x8, 0x1, [0x1ff]}) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2511000000db61b376de7a9d522ad54914c17530a82efe3f399139ff4380399576b587bc7f"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='\x16\x00', 0x2fb) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prlimit64$auto(0x0, 0x3, 0x0, 0x0) r2 = fanotify_init$auto(0x602, 0x1) fanotify_mark$auto(0x400000000000, 0x305, 0xf2b, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c661d2a7a215270a0afa7ca022699f6b10087128fcc94b28d8c40400e2a4b80117a6e4caba4adf86adb6849cc15a8ae894a0b0c0e2", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf2505000000e60003800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c5000300000000000000180040801400130000000000000000000000ffffffffffff0000"], 0xfc}}, 0x20044000) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x0) r6 = io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb7, 0x8a, 0x4, r5, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x3, 0x5, 0xfffffff9, 0x6}, {0x4000, 0xffffffff, 0x0, 0xbffff000, 0x8, 0x20b85, 0x5, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_fops_x16_ro_(r2, &(0x7f0000000440)=""/81, 0x51) sendto$auto(r2, &(0x7f0000000380)="e50b81c9ff42c55cf143c434a64cc217867d588d6ad267b0b2c154289638eedc6f133b9d49b9071b11486283bc73d17c562d622cc4898837b8eb122602346d3a7e", 0x9, 0x1149, &(0x7f00000001c0)=@generic={0x2b, "b8858f37b6783d05b0f844c5c2e7"}, 0x4fa) pread64$auto(r6, &(0x7f0000000400)='\x00', 0x3, 0x800) settimeofday$auto(&(0x7f0000000080)={0x3, 0x10000}, &(0x7f00000000c0)={0x6e7, 0x3}) 1m5.934675572s ago: executing program 4 (id=1522): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="480040000300000005000300020b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff80, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x0, 0x7, 0x80000005}) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x9, 0xffffffffffffffff, 0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf25050000000800010001800000d593f1ce94be8441a7a8c5adbabb4b3082c5341154218c160bb40ee24de74a5ba816c2871d44cef0cc466655d15fa63c9ce8a87c8e09315342460c3dc5320a5906cf62717595bd89f2c1a4a25521cf4fcfd967f96c121ebc4b99cc6ce517c25337ca76fbdf37b2675cc4d805fddc3e03d3399f2901ccb0286bb7f366777aff8ee9e8e1abe75d8ce5d58ada4d6e5cc17e73af"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x7fffffff, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) setregid$auto(0x0, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 50.785488653s ago: executing program 38 (id=1522): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="480040000300000005000300020b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff80, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x0, 0x7, 0x80000005}) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x9, 0xffffffffffffffff, 0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf25050000000800010001800000d593f1ce94be8441a7a8c5adbabb4b3082c5341154218c160bb40ee24de74a5ba816c2871d44cef0cc466655d15fa63c9ce8a87c8e09315342460c3dc5320a5906cf62717595bd89f2c1a4a25521cf4fcfd967f96c121ebc4b99cc6ce517c25337ca76fbdf37b2675cc4d805fddc3e03d3399f2901ccb0286bb7f366777aff8ee9e8e1abe75d8ce5d58ada4d6e5cc17e73af"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x7fffffff, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) setregid$auto(0x0, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 10.39858004s ago: executing program 8 (id=1697): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101a40, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r3, 0x90006442, r3) 9.709718222s ago: executing program 8 (id=1699): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x101120, 0x0) ioctl$auto_TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) poll$auto(&(0x7f00000001c0)={r0, 0xfffd, 0x1000}, 0x7, 0x4) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) clone$auto(0x1, 0x3, 0x0, 0x0, 0x3) sysfs$auto(0x2, 0x0, 0x0) epoll_wait$auto(0xffffffffffffffff, 0x0, 0xe007, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2b, 0x1, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250a00000008000100000000006f099037a7a05ef2f25f82ced97317142647d88cb5d12e26961efaa8"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x100000000, 0x2, 0x5, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000}, 0x1fe, 0x81) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x2205, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000002bc0)) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) 6.593920248s ago: executing program 8 (id=1709): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(0x0, 0x4, 0x0, 0x0, 0x8) socket(0xa, 0x1, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x8, 0x1, 0x9, 0x1, 0xff]}, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x24048084) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.551934696s ago: executing program 3 (id=1710): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x129001, 0x0) mmap$auto(0x100000000, 0x4020009, 0x874, 0x10, r0, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0xffffffffffffffff) migrate_pages$auto(0x0, 0x3, 0x0, &(0x7f0000000140)=0x2) 6.233202178s ago: executing program 9 (id=1711): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/ip6gre0/base_reachable_time_ms\x00', 0x82082, 0x0) socket(0xa, 0x2, 0x0) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto(r1, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r2, 0x5, 0x6) r3 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x47, 0x17, 0x0, 0x0, 0x6) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(r3, 0x0, 0x6, 0x0, 0x17) ioperm$auto(0x3, 0xe, 0x2000000000000149) request_key$auto(0x0, 0x0, 0xfffffffffffffffd, 0x5) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="210026bd7000fedbdf2501000000140002a807ff0163f3a300777b4060361f73de63673100ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20004084}, 0x8004004) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r4 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001c00), 0x60000, 0x0) read$auto_tomoyo_self_operations_securityfs_if(r4, 0x0, 0x0) sendfile$auto(r0, r0, 0x0, 0x20000007fffe000) 5.245993437s ago: executing program 9 (id=1712): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(r0, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x1, 0x81, 0x1, 0x1, 0x1}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, 0x0) wait4$auto(r0, 0x0, 0xe, 0x0) 4.7602466s ago: executing program 8 (id=1714): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r0, &(0x7f000000b040)='\x00', 0x7, 0x6) close_range$auto(0x2, 0x8, 0xeab8) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00', 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x28044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x11, 0x80003, 0x300) sendto$auto(0x3, 0x0, 0x5, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x203}}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = gettid() lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r5) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8c2d}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x48001) socket(0xa, 0x5, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0xdb35, 0xe4, 0xeb1, 0x405, 0x8000) tkill$auto(r7, 0x7) writev$auto(r6, &(0x7f0000000100)={&(0x7f0000000000)="816a29fa87a9c697a7ea5e120deb011cf90394bcf4611da9cac380e888cbcf334497280c148c6c946638c87c41421e650d491be8a79a272dfd5525a8bb9371f644e7c10bf83b4599c2df1ff9eb11e11e7d2deb526b529c8865406c49ea022d3ea1d222248d21cd2e45997dae8e47902110a960f7b9b24050e3c2bf176835db40498000c7873e2776694fab023daa13c64993fd4855ee48351d01dd135f70acd1abe08e934368300b3a4152f494dab7ea85b338fd4fee2591ad1d9e34838be1b0f9dc5dee66d1b6a934dfe0276fc77ed5e091347127f713e4c896", 0x7fffffffffffffff}, 0x7fffffffffffffff) 4.376730496s ago: executing program 9 (id=1716): r0 = socket(0x2, 0x801, 0x100) ioctl$auto_BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000040)={0x1ff, 0x420}) listen$auto(0x3, 0x81) mmap$auto(0x9, 0x8000000000200007, 0x2, 0x40eb3, r0, 0x401) getrandom$auto(0x0, 0x600000e, 0x3) clock_settime$auto(0xfffffffb, 0x0) poll$auto(&(0x7f0000000180)={r0, 0x6, 0x6}, 0x6, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(&(0x7f00000002c0)='&#{!-\x00', 0x10, 0xffff) sendmsg$auto_SMC_PNETID_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0xd3bed26fbb0d8463, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x300}, [@SMC_PNETID_ETHNAME={0xc, 0x2, 'syz_tun\x00'}, @SMC_PNETID_NAME={0xc, 0x1, 'ethtool\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008843) listen$auto(r1, 0x1004) 4.170043222s ago: executing program 9 (id=1717): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x80000000008004) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f0000000100)="632d1bfe595046ab5c40bd6173307acb6d16baef6176e669a216aae1806674fdd80500ffffffffffdfff1a0e010000000000000000000000a3", 0x39) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/zram0/size\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xb2c7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r7 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r7, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.990314583s ago: executing program 8 (id=1718): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="480040000300000005000300020b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) r3 = socket(0x11, 0x80003, 0x300) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000003, 0xfffbffffffffff80, 0x80000001, 0xff, 0x6, 0x7, 0xfbfffffe, 0x5, 0x0, 0x7, 0x80000005}) setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x9, 0xffffffffffffffff, 0x7f) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf25050000000800010001800000d593f1ce94be8441a7a8c5adbabb4b3082c5341154218c160bb40ee24de74a5ba816c2871d44cef0cc466655d15fa63c9ce8a87c8e09315342460c3dc5320a5906cf62717595bd89f2c1a4a25521cf4fcfd967f96c121ebc4b99cc6ce517c25337ca76fbdf37b2675cc4d805fddc3e03d3399f2901ccb0286bb7f366777aff8ee9e8e1abe75d8ce5d58ada4d6e5cc17e73af86d4d09e4513897853504b09dbba0b9b69a6478ec037f8"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x7fffffff, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) setregid$auto(0x0, 0x3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) 3.547414011s ago: executing program 7 (id=1719): mmap$auto(0x2, 0x20009, 0x809, 0xeb1, 0x401, 0x80000000008000) close_range$auto(0x2, 0x8000, 0x0) socket(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000032c0)='\xc4!\x00', &(0x7f0000003300)=0x1ff) mmap$auto(0x9, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xac21}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044810}, 0x5784785c53dc710e) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x8080aea1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x65, 0x1, 0xffffffffffffffff, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x12000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0xecc6, 0x8000000000000000, 0x7352, 0x2d, 0x200000000045f, 0x6, 0x7, 0x4000000000004, 0x2, 0xc7a0, 0x36e, 0x6, 0x2, 0x3000, 0x9, 0x8, 0x10003, 0x400008, 0x1, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x3ba0, 0x0, 0xe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0xffffffffffffffff]}, 0x9, 0x11) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0) 3.113343703s ago: executing program 3 (id=1720): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x200000000007) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') 3.110724518s ago: executing program 7 (id=1721): r0 = socket(0x2, 0xa, 0x7fffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0x2, 0x8e0, 0x300, 0x50b301a, 0xe4, 0x2c, 0x4, 0x5}) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x20100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x2, 0x7, 0x3) r6 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) poll$auto(&(0x7f0000000180)={r2, 0xfff7, 0x9816}, 0x7f, 0x1) ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r2, 0x4004af07, &(0x7f00000003c0)=0xffffffffffffffff) r9 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0xf00, 0xb205, 0x3, 0x0, 0x0}) mmap$auto(0x1000000008000000, 0x4000000003, 0xdf, 0x15, r8, 0x8000) sendmsg$auto_TIPC_NL_LINK_GET(r7, &(0x7f0000000700)={&(0x7f0000000100), 0xc, &(0x7f00000006c0)={&(0x7f0000002340)=ANY=[@ANYBLOB="0000f7f4c22a3c86c668c79c0000d64eeb511360824adef952b32e0a1ea3c2c4d60b297caa1453d482ecae491e6a364899817402ae7c9fbcdd240b810d1077f8af3c6d4c05df2509d3173ccd46c56b0ad93c0560fcc2bff0bfbc94f2b15f0a2ac2b5b296682d8aa6e20fe993204dcac8ee04ad9b18e07566cc3f17f89330ea6033ef9ec6118eeb9f11a681d9ad001a067a343393be5c0c66b2d277", @ANYRES32=r8, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="04003b8014007100fe88000000000000000000000000000104008b808474e8d89b2d1edfc127f008e339406312f817f6007efef550e9a1f12e0e7a8b56ff03ab1a547a69fc5510fba9011f98192fe626d22b01556e8b24f7acf9df01916b8287167def046c04aa1eca6db8f22ef5b49acfa72bb7a7966e0a946b6b1356c1797ee6b29d133427f961806864a4046dac44d8b748e2b96ceae7a817ff04868ad11e3174e0bfc2ec673d2932567f3084a33acf4f167cb1cdb820e4fab45be3ce0a0bfc8799a4971ae309baee0b47664a3b70af1b9d8bba935b69bdc2030b245d66cdc61c7df9211f08009800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64, @ANYRESOCT=r3, @ANYRESOCT=r6, @ANYBLOB="3bea2ac8db484bc351aa2be01f06e9a61d1119467c39459a734666477fd518dadc7f1127d29d17a9699037b9b308f1a515f53685d67cf2aded9021315e5146eaad847231faa10ba3039afe308bba702a73c17d05b19a799159b5d5c9fbdec3b241f15cd9c9761cf36d923b5a9ea697e8be7bdd488ff6d2dde8a5cbdc93df8623f47b1906b74ab336df8efbe6e6ef52f7bd43489300bbafdaeccb4d0c28fde99a8c460a0a80fb96d768fb1a4dc2144d54e6bf4e1d9625f889720c9ae1c1febc2e1ffc09652916af4ed65cf41d8a2ef3b678fa49cefb014227938708860ce181602286831fa1954600aaae3feaeedbebbfe73d3c21ed3d62c765d5b32f29815f97a5280854f5549570e2e53d204df425b723b12162e08de9b29a061b51c21d25ac8aa7a415868933bbab63a434db5ec875639f2f5b1ee6f01316614bf213ca0c3885a34b5d9132f58fa315c79603732ad94e83144d866ae50e5034e577336a41125a25f2334820e44bf359c7898ff939ec7127f6942605ea24e64ada0fbfb3292365542d53546c6a432231fc2f63e7872fe1001fedc22bac4d3c9b20e0d5c5246957df0320d27003c34eb2cb4e258577e1b8816345ca60c1cd7f295f7b0525eb16496c1a1c7cd43bc95dee039da8e53503dc62ef01970da5fd25961985b9159e2c1eaa8a0e7e703789ba5d0a4fd14e386d08000c00e0000002e80018800800fe00ac1414bbfbb5cc5d75c79912ad6473037114ae379054226f91be524d482f6411066e40b3f1ef9556cf1ff90937f234b370a9450b0fa4605a71201c22ff6fb4ed67a5e4966db8d2ed9df3b596cfd89f3196c62d561e8c944484888e936b8da78f872bcbc971a1660f0b61be0f3f9ffdb73ca3d8ef3c7f25b5eaaff9e247da41e58e9ca17477e7dce859b92a830cc2f15c29dcd9f60b4b5497432a1af25995798845ccbe2d767e9016e150aa2e9d56b35c9b1b6b26c0473a810233a6403ff805229f175c3c75279223fe3cbb261526e126098ce415e81043fc5e312dd95a64fb491000ea80040067800800c1007d2f5b0008000400e000000200e400078008003c00ffffffffd6004080040032800400138008005f00", @ANYRES64=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400d100fe8000000000000000000000000000aa7000a18068000800339eeb41863d60be8c25848dbbed587a4d895f7d136293cd9c63d3a0f7dc2600af5f0578691c3042d22b5370489993151629067beb9eaa92282b58523ff3181a31f32a941540a8cb0aef520f16bae9573ff10d4fbaf4deff0faefd84cb67eaf62c236eec0400e88008006a002100000014006b0000000000000000000000000000000000a33e3a7f7b2bf81585af2e62f5913bf74a6d3085596ffcd930710693456cad97f0e65f54f2fdd036de04008b00000000"], 0x1190}}, 0x44000000) mmap$auto(0xfffffffffffffffe, 0x8000000000400004, 0x400dc, 0x77, 0x2, 0x4) prctl$auto(0x10000000017, 0x28, 0x4, 0x8000000156, 0x0) open(0x0, 0xe441, 0x0) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) 2.420898684s ago: executing program 7 (id=1722): r0 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) (async) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async, rerun: 64) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/trigger_fs_error\x00', 0xa801, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\b\x86\xc6\xd7L\xc6\xd1\xf4h\xf2\xc4\x9aZ\x14\x83\f\x17\xf6\xb1u!\xbc\xbc8H\x94,3\xba\x8a\'\xef\b\x942W\xb5:\xb4\xe3[\x9d\xc1s\x13\xf9\xd5X\xe0\xfd\x7f\x95\xf8\xc9\x85\xe7\xd9u3\xc3\xcd\x1dJX\xcd\xab\xf5\xdf\xf1\xad\xa4\xf1\x9b\xc4\xf9\xac\xa2\x8f@W\x9d\xf4 \xd3di\x84\xff\xe2`\x9c7\xbc\xe7\xe1\x94\xcb\bt\xa0\x93]\xba\t\x92\xca\x1f\xc3\x00\x00\x00\x00\xf8\xeb\xc65\xd3\xd1\xc5\xbb\x96{\xa3\xe7\\y\xa9Em\xd5\x19\xef\xf8\xac!\xff@K\x1d\xeaE\xce=\x90\xe6O\x82X\xc1\xbfI:5\xac\xb0\x98\xbf\xf1\xba\xa4\x10s\xfb\xc1j;!\xa4+{\xe6\x02\xb8\x88\xea66$!v\xef\xce\x19eM\xae\xe3\xd9jc\x10\xa7\xf1\xce&\xd7\xb6\x06\xf3\xeb\xe8\x87[f\xe7\xdf\x8c\x0f\x80\xed\x04Z!\x89R\x8b-\xbcI\t:\xcf\x9b\xd5a\v\xf0^d$\xb6\x06\xbb\xdf\xa5\x88\x96\xd2V{\xb7n\x1b5N\xb9\xdc\x97\x16\x9e\aag\x1b\xf0K\xebtw\xe3\xf0\x03\xf8\xf2\xe3\xb7\x85\x8c\xe2\xca\xfdB\xa5\x82nlV\xac\xe6bK\xec\xa3.\xe7qeOd\x19\xeaX\x94N\x84\xa51\xec7:\xef\xd1\x8f\xd4JP\x81\xc3\xa3/Mz\x91f\xcf\xdaO\xe1l\xcc\x8b\xb0\xe5\xc9n\x95\x9a\xa6\xf3Tk\xdf\xf5m\x7fbC\x8a\x97\xdcM\x06\x8a\xd3g\xe5\'\xf2\x8c\x1a\xd00Z\x06\xf2\xacL\xe0\xab\x1d\x1e\x94?', 0x81) (async, rerun: 32) r2 = socket(0x10, 0x2, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) socket(0x2b, 0x1, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) (async) r5 = socket(0xa, 0x3, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r5, 0xd}, 0x92) sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x149c, 0x0, 0x512, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x140b, 0x3, 0x0, 0x1, [@generic="961fbdc9bd95b23a1bab2c504ca41bd37e351476457085ea8616851f8c80ed41afe8046b0355d551cb90d4d3ba9e16b1f97449cd77ef99d249895ad39420cfaa23fa89aa077536cf2dffd7e28ac77aab52d72d86f55fecd76b6e33535430618f523ad1a40bba1f02e3ef48e70c50f87658d380eb093a3ea2971faf5df5af821c264fbb3bf8a65ceda7a4e6909dce15d58030c910193ae713fb", @typed={0x32, 0x79, 0x0, 0x0, @str='/proc/sys/net/ipv4/conf/hsr_slave_1/medium_id\x00'}, @nested={0x11b9, 0x104, 0x0, 0x1, [@generic="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", @generic="e60963cba2ffe324945f735efd8dd7a7df2421fd93", @typed={0xff, 0x138, 0x0, 0x0, @binary="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"}, @nested={0x4, 0xc5}, @nested={0x4, 0x4d}, @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@multicast2}, @generic="a9764386e6cc5f7fddc2a0f019e9dfe81be666841de4cc7788600a6726b14768b474ccaaa585a4e4d11e4a582e6ed87d3601a7d874342b8b073648e70c17e00248d20d834957f5566b6f6639b072e918f290a3ee550e1f2377da40ae8bde2f2ba6259b095c51b31591ac351676272a2ffd436d89be924f75f8501755326a48c1ff6d44a51eeb58bfe13fed79", @nested={0x4, 0x9}]}, @nested={0x8, 0x93, 0x0, 0x1, [@nested={0x4, 0x15}]}, @nested={0xc, 0xe9, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @uid}]}, @generic="a084376b6b29fd1d528c00285378fd266f54061cba70f618b15be5752bb296e91734b635a7f4e8df3f1a80fcc5b949f31eb609a657e53309b13a850fbc4d123e773b5c77c3ea236c5ab3b17dad800ca19ed2cbe936c6551ca6b432bc07a8167dfe7c43b47b48c4f1fd680136e069b38b3af04cf4b8b801017e69279f7c81331843306cbe6cd133c62dc75456f4d3", @nested={0xd5, 0x30, 0x0, 0x1, [@nested={0x4, 0x136}, @generic="5df0f750312071fb744f103c540d2fa54c6daecbebf2b0cba3d95fcfa7601da19a73cbbf4b0a11b147eba2e892a325a9f9e940ec0980e4e45d46ba3a7beffe82bfc1343c7d0dfeccd632073a3078777667a25fdc7bf7ba63fcb22cf412aaf0c7d6125baf59ff3b4b6f4663260c589b4d767ed4bd91b78d9a5c829b5da268ca33e00ffa8dfbedbac81c732027fa4a8b89d0f11289b3a650c2268e1a2bb43f9db6238c610b911ce6eec8fe7a4715bc1c1a4371d4c76a", @nested={0x4, 0xa5}, @nested={0x4, 0xb0}, @typed={0x8, 0xf4, 0x0, 0x0, @pid}, @typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x4, 0x128}]}, @TIPC_NLA_BEARER={0x79, 0x1, 0x0, 0x1, [@generic="3da8a998a2ac118eeb9a25acd35e074375592c218bd8c95b0adfd006e17e2aa97c3a33c636aafb38de6e621edd35fe65579a7d806e802387e168b25baf089f875563816e71156f62ff6b23003e1b686ae360ab43dabe77da1fe3aeb8df48fe7c4bbc5727da6b66f5e6af47685549296c1461cc4c63"]}]}, 0x149c}, 0x1, 0x0, 0x0, 0x40884}, 0x24004040) (async, rerun: 64) rt_tgsigqueueinfo$auto(0x0, 0x0, 0xfffffffe, &(0x7f0000000440)={@siginfo_0_0={0x10001, 0x6, 0x3}}) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000140)=@can={0x1d, r4}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) (async) getsockopt$auto(r0, 0x84, 0x80, 0x0, 0x0) (async) r6 = userfaultfd$auto(0x1) statx$auto(r6, 0x0, 0x1000, 0x8, 0x0) write$auto_tap_fops_tap(r6, &(0x7f0000000040)="a84f4676598f7a8ebbf3c1db", 0xc) 2.382580762s ago: executing program 9 (id=1723): setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xa00c0, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = eventfd$auto(0x20007) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x90d5, 0xc, 0x2) flock$auto(0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000200)={0x11020080, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0xa4}, &(0x7f0000000480)=""/115, 0x73, &(0x7f0000000180)=""/20, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) prctl$auto(0x38, 0x80000000a, r1, 0xfffffffffffffffe, 0xfffffffffffffffd) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x2}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) r2 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r2, 0x0, 0x881) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) 2.065019436s ago: executing program 8 (id=1724): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) mmap$auto(0x0, 0xe97f, 0xdf, 0x17, 0x401, 0x8000) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.3/usb4/bNumConfigurations\x00', 0xc0440, 0x0) remap_file_pages$auto(0x6a27, 0x4, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r2, 0x4008af25, &(0x7f0000000080)=0x2) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) socket(0xf, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x39, 0x0, 0x110) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r5, 0x504, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) eventfd$auto(0x4) 1.97658637s ago: executing program 9 (id=1725): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) mmap$auto(0x0, 0xe97f, 0xdf, 0x17, 0x401, 0x8000) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.3/usb4/bNumConfigurations\x00', 0xc0440, 0x0) remap_file_pages$auto(0x6a27, 0x4, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r2, 0x4008af25, &(0x7f0000000080)=0x2) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) socket(0xf, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x39, 0x0, 0x110) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r5, 0x504, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) 1.66626788s ago: executing program 7 (id=1726): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x7fffffffffffffff, 0x4, 0x0, 0x5, 0xe) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x8502, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) read$auto_clk_dump_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKRRPART(r1, 0x125f, 0x0) getpeername$auto(r0, &(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff}, &(0x7f00000000c0)=0x4) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev0\x00', 0x200000, 0x0) madvise$auto(0x0, 0xf663, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000200)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="000026bd7000fedbdf251b000000140004006d6163736563300000000000000000000800ef00ffff00001d0034c40098b433b85a41902c749efc0d0e00ea1257a51846f642d16f40c7369239559117a92c8d0b6dae730000001f0007002ea057c78387d69160bbcf007aa5f82a056bb1bd71eda05d1abb560012000a00aa569b171b222e0de916770d9f0a000006001a014000000008000100faffffff"], 0x94}}, 0x40080) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0xf) pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0x7) ioctl$auto_FIFREEZE(r3, 0xc0045878, 0xfff) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x5, 0x0, 0x1f, 0x9}, 0x800009}, 0x3, 0x20000000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) 1.594690546s ago: executing program 3 (id=1727): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) (async) socket(0x2, 0x1, 0x0) (async) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x0) (async) mmap$auto(0xffffffffffffffff, 0x3, 0xdf, 0x10, 0x401, 0x8000) (async) recvmmsg$auto(r2, 0x0, 0x10000, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket(0xa, 0x5, 0x0) open(0x0, 0x261c2, 0x84) (async) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1e60000000000000}, 0x9) connect$auto(0x3, 0x0, 0x55) (async) mmap$auto(0x8000000c, 0x20009, 0x6, 0xeb1, 0x405, 0xffffffff) (async) mmap$auto(0x4200000, 0x404005, 0x0, 0x209b72, r1, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.1180438s ago: executing program 3 (id=1728): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat6\x00', 0x51deea3bce889ca9, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x2c2c) sysfs$auto(0x2, 0x1e, 0x0) r1 = fsopen$auto(0x0, 0x0) fsconfig$auto(r1, 0x9, 0x0, 0x0, 0x0) write$auto(r0, 0x0, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0x10013, 0xfffffffffffffffa, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(r0, 0x8, 0xfffffffe) pipe$auto(0x0) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9959b69960d42cf829093e8eed941bec7f6dda6942478c5814a3213db7da501f38d356a3bc9bda97f17f102827ece60ec245f661e2a846758ccd6a4bcb49285406bc190c1b3c4f6ca9329d73eae7acf6153495ed3f00337088892d4f14622ca79dfa06cf71b8948a5f89c1522e511ae5d54331cb3a08a2cec2419030749d96a99f40dde60b9dd6545c3f298e6996ed09fb51dc425e3f7e270bb458dd8f08314e925d1e2135892994c1cb46e1cbf04ab487c5e4e477c3316d4d8089", @ANYRES16=r2, @ANYBLOB="00022dbd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4008004) write$auto(0x3, 0x0, 0x200ffd8) close_range$auto(0x2, 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r3 = signalfd4$auto(r1, 0x0, 0x2008, 0x0) read$auto_l2cap_debugfs_fops_(r3, &(0x7f0000000240)=""/177, 0xb1) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmmsg$auto(r5, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x0, 0x2) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) 812.497041ms ago: executing program 3 (id=1729): mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setrlimit$auto(0x7, 0x0) socket(0x18, 0x80000, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$auto(0x3, 0x4008af03, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r5 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f0000000180)={@siginfo_0_0={0x9, 0x7, 0xbf3, @_kill={r4, 0xee01}}}, 0x7, &(0x7f00000002c0)={{0x0, 0x3}, {0x9c, 0x4}, 0x8, 0xe, 0x3, 0x1, 0x2, 0x5, 0x7fff, 0x6, 0x1, 0x9, 0x200, 0x98d, 0x6, 0x1}) process_vm_readv$auto(r5, &(0x7f0000000040)={&(0x7f0000000380)="e37190db219e681cf50ac122c25b6ef1a3294ccd08087828bbb1fa82a284153e7faea56cd423bb82d368b35fe7d9cbb90ae40428cb34b0b7d12d983a8446be93bd2fcdfb00e47e4b1ec8c4d3758fc6e2038ba710b855be39a5ffc339cb4309563f1a16317da764d2301a9934726d072cbc9e8f55e6010f7d3b4d8682586b40892f7bdbb42a6d834522d3f9abc298ae15d58987fe4a31127aaaae2665428694a1216ceafcaa64f59bd427706fdaa7b07080282ad84200c07cc05baef1dfe5b015d4c1231bf922718a99bc61105094a4f0f9670c6f5ac347b27b61eac6290de12e6517e74a28bd", 0x4}, 0x5, &(0x7f0000000100)={&(0x7f0000000480)="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", 0x64f800000}, 0x83, 0x5) prctl$auto_PR_SET_MM_ARG_END(0xffff8000, 0x9, r5, 0x1fe, 0x200) write$auto(r2, 0x0, 0xe) 619.635238ms ago: executing program 7 (id=1730): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x200000000007) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') 416.643818ms ago: executing program 7 (id=1731): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/ip6gre0/base_reachable_time_ms\x00', 0x82082, 0x0) socket(0xa, 0x2, 0x0) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto(r1, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0xb) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r2, 0x5, 0x6) r3 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x47, 0x17, 0x0, 0x0, 0x6) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(r3, 0x0, 0x6, 0x0, 0x17) ioperm$auto(0x3, 0xe, 0x2000000000000149) request_key$auto(0x0, 0x0, 0xfffffffffffffffd, 0x5) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="210026bd7000fedbdf2501000000140002a807ff0163f3a300777b4060361f73de63673100ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20004084}, 0x8004004) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r4 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001c00), 0x60000, 0x0) read$auto_tomoyo_self_operations_securityfs_if(r4, 0x0, 0x0) sendfile$auto(r0, r0, 0x0, 0x20000007fffe000) 0s ago: executing program 3 (id=1732): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = fcntl$auto(0x8000000000000001, 0x5, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x594d0417, 0x0, 0x1000004, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_enter$auto(0xffffffffffffffff, 0xd, 0x2, 0x2, &(0x7f0000000580), 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1dc03387096854c362e6fb00ad3b8c3de1777d593bdf011a437da1080df252d019f632ff7049cb63a1a3812d62598bf1b3561c59", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf25060000000c001100657468746f6f6c000800060002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYRES64=r3, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x40, 0x1000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) kernel console output (not intermixed with test programs): RBX: 00007ffbf01b6320 RCX: 00007ffbeff8e929 [ 459.054576][T11511] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 459.054587][T11511] RBP: 00007ffbedd72090 R08: 0000000000000000 R09: 8000000000000000 [ 459.054598][T11511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.054608][T11511] R13: 0000000000000000 R14: 00007ffbf01b6320 R15: 00007ffefb4b5388 [ 459.054630][T11511] [ 459.783205][T11527] netlink: 'syz.1.1212': attribute type 4 has an invalid length. [ 459.791012][T11527] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1212'. [ 460.645311][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1215'. [ 460.658522][T11546] vlan1: entered allmulticast mode [ 460.670516][T11546] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 460.825470][T11550] random: crng reseeded on system resumption [ 460.965703][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 461.785245][T11561] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 461.791636][T11561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.797813][T11561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.831625][T11561] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.259182][T11592] Invalid ELF header magic: != ELF [ 463.393111][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 463.408269][T11594] FAULT_INJECTION: forcing a failure. [ 463.408269][T11594] name failslab, interval 1, probability 0, space 0, times 0 [ 463.425935][T11594] CPU: 0 UID: 0 PID: 11594 Comm: syz.2.1228 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 463.425986][T11594] Tainted: [U]=USER [ 463.425997][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.426015][T11594] Call Trace: [ 463.426025][T11594] [ 463.426037][T11594] dump_stack_lvl+0x16c/0x1f0 [ 463.426088][T11594] should_fail_ex+0x512/0x640 [ 463.426129][T11594] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 463.426179][T11594] should_failslab+0xc2/0x120 [ 463.426210][T11594] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 463.426253][T11594] ? __alloc_skb+0x2b2/0x380 [ 463.426295][T11594] ? bpf_lsm_capable+0x9/0x10 [ 463.426337][T11594] __alloc_skb+0x2b2/0x380 [ 463.426379][T11594] ? __pfx___alloc_skb+0x10/0x10 [ 463.426421][T11594] ? genl_rcv_msg+0x4e0/0x800 [ 463.426455][T11594] ? genl_rcv_msg+0x4bb/0x800 [ 463.426501][T11594] netlink_ack+0x15d/0xb80 [ 463.426546][T11594] netlink_rcv_skb+0x332/0x420 [ 463.426578][T11594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.426617][T11594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.426668][T11594] ? netlink_deliver_tap+0x1ae/0xd30 [ 463.426706][T11594] genl_rcv+0x28/0x40 [ 463.426752][T11594] netlink_unicast+0x53a/0x7f0 [ 463.426791][T11594] ? __pfx_netlink_unicast+0x10/0x10 [ 463.426838][T11594] netlink_sendmsg+0x8d1/0xdd0 [ 463.426888][T11594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.426940][T11594] ____sys_sendmsg+0xa98/0xc70 [ 463.426978][T11594] ? copy_msghdr_from_user+0x10a/0x160 [ 463.427022][T11594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.427081][T11594] ___sys_sendmsg+0x134/0x1d0 [ 463.427129][T11594] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.427178][T11594] ? __lock_acquire+0x622/0x1c90 [ 463.427281][T11594] __sys_sendmsg+0x16d/0x220 [ 463.427327][T11594] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.427406][T11594] do_syscall_64+0xcd/0x490 [ 463.427455][T11594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.427485][T11594] RIP: 0033:0x7ffbeff8e929 [ 463.427511][T11594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.427541][T11594] RSP: 002b:00007ffbeddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.427570][T11594] RAX: ffffffffffffffda RBX: 00007ffbf01b5fa0 RCX: 00007ffbeff8e929 [ 463.427590][T11594] RDX: 0000000020040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 463.427610][T11594] RBP: 00007ffbeddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 463.427628][T11594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.427647][T11594] R13: 0000000000000000 R14: 00007ffbf01b5fa0 R15: 00007ffefb4b5388 [ 463.427689][T11594] [ 463.708137][ T9175] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.854944][ T8710] Bluetooth: hci2: command 0x0c1a tx timeout [ 463.861177][ T8710] Bluetooth: hci1: command 0x0c1a tx timeout [ 463.868145][ T9175] Bluetooth: hci3: command 0x0c1a tx timeout [ 464.053108][T11607] Invalid ELF header magic: != ELF [ 465.004150][T11621] FAULT_INJECTION: forcing a failure. [ 465.004150][T11621] name failslab, interval 1, probability 0, space 0, times 0 [ 465.152819][T11624] FAULT_INJECTION: forcing a failure. [ 465.152819][T11624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.191678][T11621] CPU: 0 UID: 0 PID: 11621 Comm: syz.1.1234 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 465.191733][T11621] Tainted: [U]=USER [ 465.191743][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.191760][T11621] Call Trace: [ 465.191771][T11621] [ 465.191782][T11621] dump_stack_lvl+0x16c/0x1f0 [ 465.191842][T11621] should_fail_ex+0x512/0x640 [ 465.191884][T11621] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 465.191930][T11621] should_failslab+0xc2/0x120 [ 465.191960][T11621] __kmalloc_cache_noprof+0x6a/0x3e0 [ 465.192003][T11621] ? getname_flags.part.0+0x292/0x550 [ 465.192047][T11621] getname_flags.part.0+0x292/0x550 [ 465.192087][T11621] getname_flags+0x93/0xf0 [ 465.192128][T11621] do_sys_openat2+0xb8/0x1d0 [ 465.192162][T11621] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.192217][T11621] __x64_sys_open+0x153/0x1e0 [ 465.192251][T11621] ? __pfx___x64_sys_open+0x10/0x10 [ 465.192296][T11621] ? rcu_is_watching+0x12/0xc0 [ 465.192332][T11621] do_syscall_64+0xcd/0x490 [ 465.192381][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.192413][T11621] RIP: 0033:0x7f913bb8e929 [ 465.192436][T11621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.192484][T11621] RSP: 002b:00007f91399d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 465.192514][T11621] RAX: ffffffffffffffda RBX: 00007f913bdb6080 RCX: 00007f913bb8e929 [ 465.192535][T11621] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 465.192554][T11621] RBP: 00007f913bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 465.192572][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.192591][T11621] R13: 0000000000000000 R14: 00007f913bdb6080 R15: 00007fff10a25178 [ 465.192636][T11621] [ 465.285362][T11624] CPU: 1 UID: 0 PID: 11624 Comm: syz.0.1233 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 465.285405][T11624] Tainted: [U]=USER [ 465.285415][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.285430][T11624] Call Trace: [ 465.285439][T11624] [ 465.285448][T11624] dump_stack_lvl+0x16c/0x1f0 [ 465.285492][T11624] should_fail_ex+0x512/0x640 [ 465.285533][T11624] _copy_from_user+0x2e/0xd0 [ 465.285582][T11624] do_pages_stat+0x239/0x820 [ 465.285621][T11624] ? __pfx_do_pages_stat+0x10/0x10 [ 465.285652][T11624] ? __lock_acquire+0xb8a/0x1c90 [ 465.285712][T11624] ? do_raw_spin_unlock+0x172/0x230 [ 465.285756][T11624] kernel_move_pages+0xfd4/0x13b0 [ 465.285797][T11624] ? __pfx_kernel_move_pages+0x10/0x10 [ 465.285825][T11624] ? rcu_is_watching+0x12/0xc0 [ 465.285849][T11624] ? irqentry_exit+0x3b/0x90 [ 465.285885][T11624] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.285942][T11624] __x64_sys_move_pages+0xe0/0x1c0 [ 465.285970][T11624] ? do_syscall_64+0x91/0x490 [ 465.286007][T11624] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.286044][T11624] do_syscall_64+0xcd/0x490 [ 465.286085][T11624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.286111][T11624] RIP: 0033:0x7f0a8a58e929 [ 465.286132][T11624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.286157][T11624] RSP: 002b:00007f0a883f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 465.286182][T11624] RAX: ffffffffffffffda RBX: 00007f0a8a7b6320 RCX: 00007f0a8a58e929 [ 465.286200][T11624] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 465.286216][T11624] RBP: 00007f0a883f6090 R08: 0000000000000000 R09: 8000000000000000 [ 465.286233][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.286249][T11624] R13: 0000000000000000 R14: 00007f0a8a7b6320 R15: 00007ffe9cd09108 [ 465.286283][T11624] [ 465.943799][T11630] ima: policy update failed [ 465.950048][ T30] audit: type=1802 audit(6045777352.510:6): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1237" res=0 errno=0 [ 465.970637][T11630] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1237'. [ 466.102152][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 466.524634][T11649] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 467.127448][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 467.205539][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 467.217311][T11662] FAULT_INJECTION: forcing a failure. [ 467.217311][T11662] name failslab, interval 1, probability 0, space 0, times 0 [ 467.231334][T11662] CPU: 1 UID: 0 PID: 11662 Comm: syz.0.1249 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 467.231380][T11662] Tainted: [U]=USER [ 467.231391][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.231407][T11662] Call Trace: [ 467.231417][T11662] [ 467.231428][T11662] dump_stack_lvl+0x16c/0x1f0 [ 467.231475][T11662] should_fail_ex+0x512/0x640 [ 467.231530][T11662] should_failslab+0xc2/0x120 [ 467.231558][T11662] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 467.231600][T11662] ? skb_clone+0x190/0x3f0 [ 467.231648][T11662] skb_clone+0x190/0x3f0 [ 467.231691][T11662] netlink_deliver_tap+0xabd/0xd30 [ 467.231729][T11662] netlink_unicast+0x6b2/0x7f0 [ 467.231765][T11662] ? __pfx_netlink_unicast+0x10/0x10 [ 467.231793][T11662] ? genl_rcv_msg+0x4bb/0x800 [ 467.231838][T11662] netlink_ack+0x696/0xb80 [ 467.231881][T11662] netlink_rcv_skb+0x332/0x420 [ 467.231911][T11662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.231951][T11662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.232000][T11662] ? netlink_deliver_tap+0x1ae/0xd30 [ 467.232033][T11662] genl_rcv+0x28/0x40 [ 467.232063][T11662] netlink_unicast+0x53a/0x7f0 [ 467.232097][T11662] ? __pfx_netlink_unicast+0x10/0x10 [ 467.232140][T11662] netlink_sendmsg+0x8d1/0xdd0 [ 467.232177][T11662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.232225][T11662] ____sys_sendmsg+0xa98/0xc70 [ 467.232258][T11662] ? copy_msghdr_from_user+0x10a/0x160 [ 467.232300][T11662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.232353][T11662] ___sys_sendmsg+0x134/0x1d0 [ 467.232398][T11662] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.232455][T11662] ? __lock_acquire+0x622/0x1c90 [ 467.232580][T11662] __sys_sendmsg+0x16d/0x220 [ 467.232625][T11662] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.232683][T11662] ? fput+0x70/0xf0 [ 467.232723][T11662] do_syscall_64+0xcd/0x490 [ 467.232770][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.232799][T11662] RIP: 0033:0x7f0a8a58e929 [ 467.232822][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.232849][T11662] RSP: 002b:00007f0a8b385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.232878][T11662] RAX: ffffffffffffffda RBX: 00007f0a8a7b5fa0 RCX: 00007f0a8a58e929 [ 467.232897][T11662] RDX: 0000000020040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 467.232914][T11662] RBP: 00007f0a8b385090 R08: 0000000000000000 R09: 0000000000000000 [ 467.232931][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.232949][T11662] R13: 0000000000000000 R14: 00007f0a8a7b5fa0 R15: 00007ffe9cd09108 [ 467.232988][T11662] [ 467.499681][ C1] vkms_vblank_simulate: vblank timer overrun [ 467.615031][T11663] vivid-003: ================= START STATUS ================= [ 467.622951][T11663] vivid-003: Generate PTS: true [ 467.627969][T11663] vivid-003: Generate SCR: true [ 467.637776][T11663] tpg source WxH: 320x240 (Y'CbCr) [ 467.660178][T11663] tpg field: 1 [ 467.665191][T11663] tpg crop: (0,0)/320x240 [ 467.669956][T11663] tpg compose: (0,0)/320x240 [ 467.674585][T11663] tpg colorspace: 8 [ 467.678799][T11663] tpg transfer function: 0/0 [ 467.684522][T11663] tpg Y'CbCr encoding: 0/0 [ 467.689292][T11663] tpg quantization: 0/0 [ 467.693492][T11663] tpg RGB range: 0/2 [ 467.698064][T11663] vivid-003: ================== END STATUS ================== [ 467.802207][T11674] FAULT_INJECTION: forcing a failure. [ 467.802207][T11674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.831618][T11674] CPU: 1 UID: 0 PID: 11674 Comm: syz.0.1250 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 467.831669][T11674] Tainted: [U]=USER [ 467.831679][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.831696][T11674] Call Trace: [ 467.831705][T11674] [ 467.831717][T11674] dump_stack_lvl+0x16c/0x1f0 [ 467.831766][T11674] should_fail_ex+0x512/0x640 [ 467.831808][T11674] _copy_to_user+0x32/0xd0 [ 467.831838][T11674] do_pages_stat+0x619/0x820 [ 467.831865][T11674] ? __pfx_do_pages_stat+0x10/0x10 [ 467.831886][T11674] ? __lock_acquire+0xb8a/0x1c90 [ 467.831927][T11674] ? do_raw_spin_unlock+0x172/0x230 [ 467.831959][T11674] kernel_move_pages+0xfd4/0x13b0 [ 467.831988][T11674] ? __pfx_kernel_move_pages+0x10/0x10 [ 467.832009][T11674] ? __fget_files+0x20e/0x3c0 [ 467.832039][T11674] ? fput+0x70/0xf0 [ 467.832056][T11674] ? ksys_write+0x1ac/0x250 [ 467.832082][T11674] ? __pfx_ksys_write+0x10/0x10 [ 467.832116][T11674] __x64_sys_move_pages+0xe0/0x1c0 [ 467.832148][T11674] ? do_syscall_64+0x91/0x490 [ 467.832190][T11674] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.832223][T11674] do_syscall_64+0xcd/0x490 [ 467.832252][T11674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.832272][T11674] RIP: 0033:0x7f0a8a58e929 [ 467.832286][T11674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.832304][T11674] RSP: 002b:00007f0a8b322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 467.832322][T11674] RAX: ffffffffffffffda RBX: 00007f0a8a7b6240 RCX: 00007f0a8a58e929 [ 467.832334][T11674] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 467.832345][T11674] RBP: 00007f0a8b322090 R08: 0000000000000000 R09: 8000000000000000 [ 467.832356][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.832366][T11674] R13: 0000000000000000 R14: 00007f0a8a7b6240 R15: 00007ffe9cd09108 [ 467.832389][T11674] [ 468.035569][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.503192][T11696] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 469.926171][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 470.182609][T11721] FAULT_INJECTION: forcing a failure. [ 470.182609][T11721] name failslab, interval 1, probability 0, space 0, times 0 [ 470.197139][T11721] CPU: 0 UID: 0 PID: 11721 Comm: syz.0.1261 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 470.197188][T11721] Tainted: [U]=USER [ 470.197197][T11721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.197214][T11721] Call Trace: [ 470.197224][T11721] [ 470.197235][T11721] dump_stack_lvl+0x16c/0x1f0 [ 470.197285][T11721] should_fail_ex+0x512/0x640 [ 470.197325][T11721] ? fs_reclaim_acquire+0xae/0x150 [ 470.197364][T11721] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 470.197402][T11721] should_failslab+0xc2/0x120 [ 470.197430][T11721] __kmalloc_noprof+0xd2/0x510 [ 470.197485][T11721] tomoyo_realpath_from_path+0xc2/0x6e0 [ 470.197540][T11721] tomoyo_check_open_permission+0x2ab/0x3c0 [ 470.197578][T11721] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 470.197665][T11721] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.197731][T11721] tomoyo_file_open+0x6b/0x90 [ 470.197778][T11721] security_file_open+0x84/0x1e0 [ 470.197817][T11721] do_dentry_open+0x596/0x1c10 [ 470.197871][T11721] vfs_open+0x82/0x3f0 [ 470.197909][T11721] path_openat+0x1de4/0x2cb0 [ 470.197964][T11721] ? __pfx_path_openat+0x10/0x10 [ 470.198007][T11721] ? __lock_acquire+0xb8a/0x1c90 [ 470.198050][T11721] do_filp_open+0x20b/0x470 [ 470.198091][T11721] ? __pfx_do_filp_open+0x10/0x10 [ 470.198160][T11721] ? alloc_fd+0x471/0x7d0 [ 470.198211][T11721] do_sys_openat2+0x11b/0x1d0 [ 470.198241][T11721] ? __pfx_do_sys_openat2+0x10/0x10 [ 470.198288][T11721] __x64_sys_openat+0x174/0x210 [ 470.198321][T11721] ? __pfx___x64_sys_openat+0x10/0x10 [ 470.198371][T11721] do_syscall_64+0xcd/0x490 [ 470.198418][T11721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.198446][T11721] RIP: 0033:0x7f0a8a58e929 [ 470.198464][T11721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.198483][T11721] RSP: 002b:00007f0a8b343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.198501][T11721] RAX: ffffffffffffffda RBX: 00007f0a8a7b6160 RCX: 00007f0a8a58e929 [ 470.198513][T11721] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 470.198524][T11721] RBP: 00007f0a8a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 470.198535][T11721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.198545][T11721] R13: 0000000000000000 R14: 00007f0a8a7b6160 R15: 00007ffe9cd09108 [ 470.198568][T11721] [ 470.200035][T11721] ERROR: Out of memory at tomoyo_realpath_from_path. [ 470.477237][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.503204][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.550804][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.574880][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.602562][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.633707][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.653487][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.675991][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.697670][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 470.722657][T11721] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 472.280633][T11739] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 475.070396][T11768] futex_wake_op: syz.0.1270 tries to shift op by -9; fix this program [ 477.063766][ T8729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.072267][ T8729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.084734][ T8729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.094335][ T8729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.103851][ T8729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.486387][T11797] FAULT_INJECTION: forcing a failure. [ 477.486387][T11797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.527625][T11797] CPU: 1 UID: 0 PID: 11797 Comm: syz.0.1275 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 477.527683][T11797] Tainted: [U]=USER [ 477.527694][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.527711][T11797] Call Trace: [ 477.527721][T11797] [ 477.527732][T11797] dump_stack_lvl+0x16c/0x1f0 [ 477.527781][T11797] should_fail_ex+0x512/0x640 [ 477.527828][T11797] _copy_to_user+0x32/0xd0 [ 477.527875][T11797] do_pages_stat+0x619/0x820 [ 477.527920][T11797] ? __pfx_do_pages_stat+0x10/0x10 [ 477.527956][T11797] ? __lock_acquire+0xb8a/0x1c90 [ 477.528024][T11797] ? do_raw_spin_unlock+0x172/0x230 [ 477.528074][T11797] kernel_move_pages+0xfd4/0x13b0 [ 477.528124][T11797] ? __pfx_kernel_move_pages+0x10/0x10 [ 477.528158][T11797] ? __fget_files+0x20e/0x3c0 [ 477.528206][T11797] ? fput+0x70/0xf0 [ 477.528235][T11797] ? ksys_write+0x1ac/0x250 [ 477.528276][T11797] ? __pfx_ksys_write+0x10/0x10 [ 477.528322][T11797] __x64_sys_move_pages+0xe0/0x1c0 [ 477.528356][T11797] ? do_syscall_64+0x91/0x490 [ 477.528399][T11797] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.528441][T11797] do_syscall_64+0xcd/0x490 [ 477.528488][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.528518][T11797] RIP: 0033:0x7f0a8a58e929 [ 477.528542][T11797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.528569][T11797] RSP: 002b:00007f0a883f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 477.528598][T11797] RAX: ffffffffffffffda RBX: 00007f0a8a7b6320 RCX: 00007f0a8a58e929 [ 477.528619][T11797] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 477.528637][T11797] RBP: 00007f0a883f6090 R08: 0000000000000000 R09: 8000000000000000 [ 477.528656][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 477.528673][T11797] R13: 0000000000000000 R14: 00007f0a8a7b6320 R15: 00007ffe9cd09108 [ 477.528724][T11797] [ 477.735133][T11786] chnl_net:caif_netlink_parms(): no params data found [ 477.868582][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.876838][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.884699][T11786] bridge_slave_0: entered allmulticast mode [ 477.892143][T11786] bridge_slave_0: entered promiscuous mode [ 477.902731][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.910114][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.917538][T11786] bridge_slave_1: entered allmulticast mode [ 477.924956][T11786] bridge_slave_1: entered promiscuous mode [ 477.979011][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.991273][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.040153][T11786] team0: Port device team_slave_0 added [ 478.049781][T11786] team0: Port device team_slave_1 added [ 478.173742][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.180761][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.210752][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.235698][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.242749][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.279555][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.359825][T11786] hsr_slave_0: entered promiscuous mode [ 478.366818][T11786] hsr_slave_1: entered promiscuous mode [ 478.374346][T11786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.383173][T11786] Cannot create hsr debugfs directory [ 478.514394][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 478.762328][T11786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.786941][T11786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.808002][T11786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.827166][T11786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.981398][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.029385][T11786] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.050320][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.057593][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.096934][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.104195][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.129894][ T8729] Bluetooth: hci4: command tx timeout [ 479.587657][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.683547][T11826] program syz.0.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.698625][T11826] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 480.199944][T11786] veth0_vlan: entered promiscuous mode [ 480.227812][T11786] veth1_vlan: entered promiscuous mode [ 480.300980][T11786] veth0_macvtap: entered promiscuous mode [ 480.317775][T11786] veth1_macvtap: entered promiscuous mode [ 480.364467][T11786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.381074][T11786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.417316][T11786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.434296][T11786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.453455][T11786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.467087][T11786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.507491][T11837] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 480.637928][ T9065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.658404][ T9065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.721262][ T9909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.737159][ T9909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.059283][T11841] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 481.202569][ T8729] Bluetooth: hci4: command tx timeout [ 481.632171][T11851] FAULT_INJECTION: forcing a failure. [ 481.632171][T11851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.645547][T11851] CPU: 0 UID: 0 PID: 11851 Comm: syz.4.1283 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 481.645593][T11851] Tainted: [U]=USER [ 481.645718][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.645734][T11851] Call Trace: [ 481.645744][T11851] [ 481.645755][T11851] dump_stack_lvl+0x16c/0x1f0 [ 481.645801][T11851] should_fail_ex+0x512/0x640 [ 481.645848][T11851] _copy_from_user+0x2e/0xd0 [ 481.645893][T11851] do_pages_stat+0x239/0x820 [ 481.645938][T11851] ? __pfx_do_pages_stat+0x10/0x10 [ 481.645973][T11851] ? __lock_acquire+0xb8a/0x1c90 [ 481.646042][T11851] ? do_raw_spin_unlock+0x172/0x230 [ 481.646092][T11851] kernel_move_pages+0xfd4/0x13b0 [ 481.646141][T11851] ? __pfx_kernel_move_pages+0x10/0x10 [ 481.646176][T11851] ? __fget_files+0x20e/0x3c0 [ 481.646220][T11851] ? fput+0x70/0xf0 [ 481.646248][T11851] ? ksys_write+0x1ac/0x250 [ 481.646287][T11851] ? __pfx_ksys_write+0x10/0x10 [ 481.646334][T11851] __x64_sys_move_pages+0xe0/0x1c0 [ 481.646364][T11851] ? do_syscall_64+0x91/0x490 [ 481.646401][T11851] ? lockdep_hardirqs_on+0x7c/0x110 [ 481.646437][T11851] do_syscall_64+0xcd/0x490 [ 481.646480][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.646510][T11851] RIP: 0033:0x7fac4af8e929 [ 481.646534][T11851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.646561][T11851] RSP: 002b:00007fac4be16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 481.646589][T11851] RAX: ffffffffffffffda RBX: 00007fac4b1b6320 RCX: 00007fac4af8e929 [ 481.646609][T11851] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 481.646626][T11851] RBP: 00007fac4be16090 R08: 0000000000000000 R09: 8000000000000000 [ 481.646667][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 481.646685][T11851] R13: 0000000000000000 R14: 00007fac4b1b6320 R15: 00007ffe3b2bdfc8 [ 481.646728][T11851] [ 483.011476][ T9175] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.027406][ T9175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.035802][ T9175] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.054365][ T9175] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.065526][ T9175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.280663][ T8729] Bluetooth: hci4: command tx timeout [ 483.744289][T11865] chnl_net:caif_netlink_parms(): no params data found [ 484.207173][T11883] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[11883] [ 484.427141][ T9175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 484.437087][ T9175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 484.455453][ T9175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 484.464802][ T9175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 484.474437][ T9175] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 484.704385][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.711939][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.719137][T11865] bridge_slave_0: entered allmulticast mode [ 484.728013][T11865] bridge_slave_0: entered promiscuous mode [ 484.765046][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.773445][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.782888][T11865] bridge_slave_1: entered allmulticast mode [ 484.790927][T11865] bridge_slave_1: entered promiscuous mode [ 484.928401][T11865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.951795][T11865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.039065][T11865] team0: Port device team_slave_0 added [ 485.051829][T11865] team0: Port device team_slave_1 added [ 485.120615][ T9175] Bluetooth: hci5: command tx timeout [ 485.138386][T11865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.145923][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.174229][T11865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.196132][T11865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.213526][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.270958][T11865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.351632][T11893] ubi: mtd0 is already attached to ubi0 [ 485.365747][ T9175] Bluetooth: hci4: command tx timeout [ 485.390527][T11865] hsr_slave_0: entered promiscuous mode [ 485.397421][T11865] hsr_slave_1: entered promiscuous mode [ 485.404724][T11865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.412726][T11865] Cannot create hsr debugfs directory [ 486.120513][T11888] chnl_net:caif_netlink_parms(): no params data found [ 486.475662][T11912] FAULT_INJECTION: forcing a failure. [ 486.475662][T11912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.503906][T11912] CPU: 1 UID: 0 PID: 11912 Comm: syz.0.1294 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 486.503949][T11912] Tainted: [U]=USER [ 486.503955][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.503965][T11912] Call Trace: [ 486.503972][T11912] [ 486.503978][T11912] dump_stack_lvl+0x16c/0x1f0 [ 486.504010][T11912] should_fail_ex+0x512/0x640 [ 486.504041][T11912] _copy_to_user+0x32/0xd0 [ 486.504070][T11912] do_pages_stat+0x619/0x820 [ 486.504097][T11912] ? __pfx_do_pages_stat+0x10/0x10 [ 486.504117][T11912] ? __lock_acquire+0xb8a/0x1c90 [ 486.504157][T11912] ? do_raw_spin_unlock+0x172/0x230 [ 486.504189][T11912] kernel_move_pages+0xfd4/0x13b0 [ 486.504217][T11912] ? __pfx_kernel_move_pages+0x10/0x10 [ 486.504238][T11912] ? __fget_files+0x20e/0x3c0 [ 486.504267][T11912] ? fput+0x70/0xf0 [ 486.504284][T11912] ? ksys_write+0x1ac/0x250 [ 486.504309][T11912] ? __pfx_ksys_write+0x10/0x10 [ 486.504344][T11912] __x64_sys_move_pages+0xe0/0x1c0 [ 486.504365][T11912] ? do_syscall_64+0x91/0x490 [ 486.504392][T11912] ? lockdep_hardirqs_on+0x7c/0x110 [ 486.504419][T11912] do_syscall_64+0xcd/0x490 [ 486.504448][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.504467][T11912] RIP: 0033:0x7f0a8a58e929 [ 486.504482][T11912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.504500][T11912] RSP: 002b:00007f0a883f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 486.504518][T11912] RAX: ffffffffffffffda RBX: 00007f0a8a7b6320 RCX: 00007f0a8a58e929 [ 486.504530][T11912] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 486.504540][T11912] RBP: 00007f0a883f6090 R08: 0000000000000000 R09: 8000000000000000 [ 486.504551][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.504562][T11912] R13: 0000000000000000 R14: 00007f0a8a7b6320 R15: 00007ffe9cd09108 [ 486.504583][T11912] [ 486.735002][ T9175] Bluetooth: hci6: command tx timeout [ 486.746035][T11888] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.753718][T11888] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.765155][T11888] bridge_slave_0: entered allmulticast mode [ 486.773744][T11888] bridge_slave_0: entered promiscuous mode [ 486.783246][T11888] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.791469][T11888] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.799093][T11888] bridge_slave_1: entered allmulticast mode [ 486.809543][T11888] bridge_slave_1: entered promiscuous mode [ 487.008995][T11888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.044201][T11888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.162587][T11888] team0: Port device team_slave_0 added [ 487.176957][T11888] team0: Port device team_slave_1 added [ 487.199953][ T9175] Bluetooth: hci5: command tx timeout [ 487.512101][T11865] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 487.676347][T11865] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 487.694907][T11865] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 487.749644][T11865] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 487.781292][T11888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.800006][T11888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.847562][T11888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.867984][T11888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.875160][T11888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.905182][T11888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.242501][T11888] hsr_slave_0: entered promiscuous mode [ 488.276843][T11888] hsr_slave_1: entered promiscuous mode [ 488.285933][T11888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.318640][T11888] Cannot create hsr debugfs directory [ 488.799026][ T9175] Bluetooth: hci6: command tx timeout [ 489.278748][ T9175] Bluetooth: hci5: command tx timeout [ 489.322684][T11944] FAULT_INJECTION: forcing a failure. [ 489.322684][T11944] name failslab, interval 1, probability 0, space 0, times 0 [ 489.344328][T11944] CPU: 0 UID: 0 PID: 11944 Comm: syz.4.1299 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 489.344381][T11944] Tainted: [U]=USER [ 489.344391][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.344407][T11944] Call Trace: [ 489.344417][T11944] [ 489.344429][T11944] dump_stack_lvl+0x16c/0x1f0 [ 489.344479][T11944] should_fail_ex+0x512/0x640 [ 489.344518][T11944] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 489.344562][T11944] should_failslab+0xc2/0x120 [ 489.344594][T11944] __kmalloc_cache_noprof+0x6a/0x3e0 [ 489.344632][T11944] ? lockdep_init_map_type+0x5c/0x280 [ 489.344675][T11944] ? smc_stats_init+0x4e/0x160 [ 489.344723][T11944] ? __pfx_smc_net_stat_init+0x10/0x10 [ 489.344760][T11944] smc_stats_init+0x4e/0x160 [ 489.344802][T11944] ? smc_net_init+0x39/0x50 [ 489.344834][T11944] ops_init+0x1df/0x5f0 [ 489.344886][T11944] setup_net+0x1ff/0x510 [ 489.344913][T11944] ? lockdep_init_map_type+0x5c/0x280 [ 489.344954][T11944] ? __pfx_setup_net+0x10/0x10 [ 489.344987][T11944] ? debug_mutex_init+0x37/0x70 [ 489.345021][T11944] copy_net_ns+0x2a6/0x5f0 [ 489.345058][T11944] create_new_namespaces+0x3ea/0xa90 [ 489.345100][T11944] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 489.345135][T11944] ksys_unshare+0x45b/0xa40 [ 489.345174][T11944] ? __pfx_ksys_unshare+0x10/0x10 [ 489.345212][T11944] ? xfd_validate_state+0x61/0x180 [ 489.345261][T11944] __x64_sys_unshare+0x31/0x40 [ 489.345306][T11944] do_syscall_64+0xcd/0x490 [ 489.345354][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.345383][T11944] RIP: 0033:0x7fac4af8e929 [ 489.345408][T11944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.345437][T11944] RSP: 002b:00007fac4be9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 489.345467][T11944] RAX: ffffffffffffffda RBX: 00007fac4b1b5fa0 RCX: 00007fac4af8e929 [ 489.345487][T11944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 489.345506][T11944] RBP: 00007fac4b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 489.345524][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.345542][T11944] R13: 0000000000000000 R14: 00007fac4b1b5fa0 R15: 00007ffe3b2bdfc8 [ 489.345580][T11944] [ 489.660203][T11888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 489.689512][T11888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 489.727644][T11865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.751726][T11865] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.810021][T11865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.820582][T11865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.853911][T11888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 489.884664][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.891955][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.909550][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.916773][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.992354][T11888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 490.381725][T11888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.420696][ T30] audit: type=1800 audit(6045777377.002:7): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1302" name="dmabuf" dev="dmabuf" ino=6 res=0 errno=0 [ 490.460447][T11888] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.493466][ T9904] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.500753][ T9904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.546033][ T9904] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.553209][ T9904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.662356][T11865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.878714][ T9175] Bluetooth: hci6: command tx timeout [ 491.357066][ T9175] Bluetooth: hci5: command tx timeout [ 492.317143][T11983] FAULT_INJECTION: forcing a failure. [ 492.317143][T11983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.334509][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.0.1304 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 492.334572][T11983] Tainted: [U]=USER [ 492.334583][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.334601][T11983] Call Trace: [ 492.334611][T11983] [ 492.334623][T11983] dump_stack_lvl+0x16c/0x1f0 [ 492.334675][T11983] should_fail_ex+0x512/0x640 [ 492.334725][T11983] __fpu_restore_sig+0xfe/0x13a0 [ 492.334767][T11983] ? __pfx___fpu_restore_sig+0x10/0x10 [ 492.334820][T11983] ? __might_fault+0xe3/0x190 [ 492.334862][T11983] ? __might_fault+0x13b/0x190 [ 492.334913][T11983] fpu__restore_sig+0x151/0x190 [ 492.334955][T11983] restore_sigcontext+0x4c9/0x6a0 [ 492.334991][T11983] ? __pfx_restore_sigcontext+0x10/0x10 [ 492.335056][T11983] ? __pfx_restore_altstack+0x10/0x10 [ 492.335100][T11983] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.335141][T11983] ? lockdep_hardirqs_on+0x7c/0x110 [ 492.335192][T11983] __do_sys_rt_sigreturn+0x1bb/0x230 [ 492.335226][T11983] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 492.335273][T11983] do_syscall_64+0xcd/0x490 [ 492.335319][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.335351][T11983] RIP: 0033:0x7f0a8a58e927 [ 492.335376][T11983] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 492.335407][T11983] RSP: 002b:00007f0a8b385038 EFLAGS: 00000246 [ 492.335431][T11983] RAX: 0000000000000000 RBX: 00007f0a8a7b5fa0 RCX: 00007f0a8a58e929 [ 492.335450][T11983] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 0000000000000003 [ 492.335468][T11983] RBP: 00007f0a8a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 492.335487][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.335505][T11983] R13: 0000000000000000 R14: 00007f0a8a7b5fa0 R15: 00007ffe9cd09108 [ 492.335543][T11983] [ 492.686786][T11888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.770886][T11865] veth0_vlan: entered promiscuous mode [ 492.956775][ T9175] Bluetooth: hci6: command tx timeout [ 493.057517][T11865] veth1_vlan: entered promiscuous mode [ 493.196251][T11865] veth0_macvtap: entered promiscuous mode [ 493.229709][T11865] veth1_macvtap: entered promiscuous mode [ 493.282159][T11865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.382941][T11865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.443861][T11865] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.495686][T11865] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.535750][T11865] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.544621][T11865] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.880403][ T9062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.907692][T12007] loop6: detected capacity change from 0 to 8192 [ 493.962694][ T9062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.100974][ T9062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.129137][T11888] veth0_vlan: entered promiscuous mode [ 494.140035][ T9062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.323030][T11888] veth1_vlan: entered promiscuous mode [ 494.353480][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 494.426728][T11888] veth0_macvtap: entered promiscuous mode [ 494.438021][T11888] veth1_macvtap: entered promiscuous mode [ 494.580361][T11888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.662960][T11888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.701408][T11888] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.734500][T11888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.751414][T11888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.760841][T11888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.849134][T12018] sysfs_service_op_show: Client not running :-5: [ 494.953347][T12019] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1284'. [ 495.042796][T12019] ›: renamed from hsr0 (while UP) [ 495.428430][ T8744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.451014][ T8744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.564968][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 495.575167][ T8744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.582996][ T8744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.408355][T12041] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 498.416486][T12059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 498.423937][T12059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.430224][T12059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.455173][T12059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 498.461432][T12059] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 498.485110][T12059] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 498.502584][T12059] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 498.527505][T12059] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 498.550135][T12059] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 498.585140][T12059] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 498.600017][T12059] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 498.607885][T12059] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 498.626342][T12059] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 498.993927][T12095] random: crng reseeded on system resumption [ 499.244591][T12104] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 499.928090][ T8729] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.473822][ T9175] Bluetooth: hci3: command 0x0c1a tx timeout [ 500.483076][ T9175] Bluetooth: hci2: command 0x0c1a tx timeout [ 500.493716][ T8729] Bluetooth: hci4: command 0x0c1a tx timeout [ 500.499859][ T8729] Bluetooth: hci1: command 0x0c1a tx timeout [ 500.557795][ T8729] Bluetooth: hci5: command 0x0c1a tx timeout [ 500.633990][ T8729] Bluetooth: hci6: command 0x0c1a tx timeout [ 501.059031][T12134] snd_aloop snd_aloop.0: control 16781581:65533:6:é'x?F¢é/èìzFË·fCªáª:0 is already present [ 501.934758][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 501.943397][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.009208][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.077690][T12164] FAULT_INJECTION: forcing a failure. [ 502.077690][T12164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.114558][T12164] CPU: 1 UID: 0 PID: 12164 Comm: syz.5.1337 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 502.114607][T12164] Tainted: [U]=USER [ 502.114617][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.114634][T12164] Call Trace: [ 502.114643][T12164] [ 502.114654][T12164] dump_stack_lvl+0x16c/0x1f0 [ 502.114703][T12164] should_fail_ex+0x512/0x640 [ 502.114751][T12164] _copy_to_user+0x32/0xd0 [ 502.114800][T12164] do_pages_stat+0x619/0x820 [ 502.114850][T12164] ? __pfx_do_pages_stat+0x10/0x10 [ 502.114887][T12164] ? __lock_acquire+0xb8a/0x1c90 [ 502.114963][T12164] ? do_raw_spin_unlock+0x172/0x230 [ 502.115015][T12164] kernel_move_pages+0xfd4/0x13b0 [ 502.115066][T12164] ? __pfx_kernel_move_pages+0x10/0x10 [ 502.115100][T12164] ? __fget_files+0x20e/0x3c0 [ 502.115149][T12164] ? fput+0x70/0xf0 [ 502.115178][T12164] ? ksys_write+0x1ac/0x250 [ 502.115227][T12164] ? __pfx_ksys_write+0x10/0x10 [ 502.115274][T12164] __x64_sys_move_pages+0xe0/0x1c0 [ 502.115307][T12164] ? do_syscall_64+0x91/0x490 [ 502.115349][T12164] ? lockdep_hardirqs_on+0x7c/0x110 [ 502.115388][T12164] do_syscall_64+0xcd/0x490 [ 502.115436][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.115465][T12164] RIP: 0033:0x7f1d5e98e929 [ 502.115488][T12164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.115516][T12164] RSP: 002b:00007f1d5f7f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 502.115544][T12164] RAX: ffffffffffffffda RBX: 00007f1d5ebb6320 RCX: 00007f1d5e98e929 [ 502.115563][T12164] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 502.115581][T12164] RBP: 00007f1d5f7f2090 R08: 0000000000000000 R09: 8000000000000000 [ 502.115599][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.115617][T12164] R13: 0000000000000000 R14: 00007f1d5ebb6320 R15: 00007ffdd1a7bb38 [ 502.115655][T12164] [ 502.325346][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.334714][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.343313][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.352191][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.360520][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.395473][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.404049][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.448841][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.463873][T12157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 502.562252][ T8729] Bluetooth: hci4: command 0x0c1a tx timeout [ 502.635653][ T8729] Bluetooth: hci5: command 0x0c1a tx timeout [ 502.724738][ T8729] Bluetooth: hci6: command 0x0c1a tx timeout [ 503.370749][ T30] audit: type=1804 audit(6045777389.954:8): pid=12189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1346" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=27 res=1 errno=0 [ 503.834981][T12195] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 504.637768][ T8729] Bluetooth: hci4: command 0x0c1a tx timeout [ 504.716025][ T8729] Bluetooth: hci5: command 0x0c1a tx timeout [ 504.797327][ T8729] Bluetooth: hci6: command 0x0c1a tx timeout [ 505.837364][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1355'. [ 505.857305][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1354'. [ 505.917493][T12226] netlink: 354 bytes leftover after parsing attributes in process `syz.6.1355'. [ 506.807742][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.814166][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.044843][T12254] snd_aloop snd_aloop.0: control 16781581:65533:4:é'x?F¢ :0 is already present [ 509.613928][T12285] netlink: 'syz.4.1370': attribute type 27 has an invalid length. [ 509.622058][T12285] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1370'. [ 510.118725][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 510.823983][T12308] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 513.914565][T12350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1385'. [ 513.956908][T12362] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 518.943904][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1409'. [ 521.996507][T12546] FAULT_INJECTION: forcing a failure. [ 521.996507][T12546] name failslab, interval 1, probability 0, space 0, times 0 [ 522.022719][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.0.1421 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 522.022771][T12546] Tainted: [U]=USER [ 522.022782][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.022799][T12546] Call Trace: [ 522.022810][T12546] [ 522.022822][T12546] dump_stack_lvl+0x16c/0x1f0 [ 522.022873][T12546] should_fail_ex+0x512/0x640 [ 522.022915][T12546] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 522.022966][T12546] should_failslab+0xc2/0x120 [ 522.022994][T12546] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 522.023040][T12546] ? __d_alloc+0x31/0xaa0 [ 522.023091][T12546] __d_alloc+0x31/0xaa0 [ 522.023140][T12546] d_alloc_pseudo+0x1c/0xc0 [ 522.023174][T12546] alloc_file_pseudo+0xcf/0x230 [ 522.023210][T12546] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 522.023256][T12546] __shmem_file_setup+0x1a3/0x330 [ 522.023299][T12546] shmem_zero_setup+0x93/0x1a0 [ 522.023346][T12546] __mmap_region+0x1ece/0x25e0 [ 522.023403][T12546] ? lock_acquire+0x179/0x350 [ 522.023441][T12546] ? __pfx___mmap_region+0x10/0x10 [ 522.023501][T12546] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 522.023535][T12546] ? rcu_is_watching+0x12/0xc0 [ 522.023567][T12546] ? trace_sched_exit_tp+0xde/0x130 [ 522.023603][T12546] ? __schedule+0x1181/0x5de0 [ 522.023642][T12546] ? psi_task_switch+0x201/0x8e0 [ 522.023745][T12546] ? trace_cap_capable+0x18d/0x200 [ 522.023790][T12546] mmap_region+0x1ab/0x3f0 [ 522.023835][T12546] ? __get_unmapped_area+0x267/0x440 [ 522.023874][T12546] do_mmap+0xa3e/0x1210 [ 522.023916][T12546] ? __pfx_do_mmap+0x10/0x10 [ 522.023950][T12546] ? __pfx_down_write_killable+0x10/0x10 [ 522.023988][T12546] vm_mmap_pgoff+0x281/0x450 [ 522.024026][T12546] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 522.024066][T12546] ? __x64_sys_futex+0x1e0/0x4c0 [ 522.024101][T12546] ? __x64_sys_futex+0x1e9/0x4c0 [ 522.024141][T12546] ksys_mmap_pgoff+0x7d/0x5c0 [ 522.024172][T12546] ? xfd_validate_state+0x61/0x180 [ 522.024210][T12546] ? __pfx_ksys_write+0x10/0x10 [ 522.024257][T12546] __x64_sys_mmap+0x125/0x190 [ 522.024303][T12546] do_syscall_64+0xcd/0x490 [ 522.024352][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.024390][T12546] RIP: 0033:0x7f0a8a58e929 [ 522.024415][T12546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.024446][T12546] RSP: 002b:00007f0a8b385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 522.024476][T12546] RAX: ffffffffffffffda RBX: 00007f0a8a7b5fa0 RCX: 00007f0a8a58e929 [ 522.024497][T12546] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 522.024514][T12546] RBP: 00007f0a8a610b39 R08: fffffffffffffffa R09: 0000000000008000 [ 522.024534][T12546] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 522.024552][T12546] R13: 0000000000000000 R14: 00007f0a8a7b5fa0 R15: 00007ffe9cd09108 [ 522.024592][T12546] [ 522.545249][T12546] FAULT_INJECTION: forcing a failure. [ 522.545249][T12546] name failslab, interval 1, probability 0, space 0, times 0 [ 522.557972][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.0.1421 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 522.558003][T12546] Tainted: [U]=USER [ 522.558009][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 522.558019][T12546] Call Trace: [ 522.558026][T12546] [ 522.558039][T12546] dump_stack_lvl+0x16c/0x1f0 [ 522.558069][T12546] should_fail_ex+0x512/0x640 [ 522.558096][T12546] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 522.558123][T12546] should_failslab+0xc2/0x120 [ 522.558141][T12546] __kmalloc_cache_noprof+0x6a/0x3e0 [ 522.558165][T12546] ? alloc_fs_context+0x57/0x9c0 [ 522.558194][T12546] alloc_fs_context+0x57/0x9c0 [ 522.558224][T12546] mq_init_ns+0x172/0x620 [ 522.558245][T12546] copy_ipcs+0x383/0x610 [ 522.558262][T12546] ? copy_utsname+0xab/0x470 [ 522.558288][T12546] create_new_namespaces+0x20a/0xa90 [ 522.558307][T12546] ? security_capable+0x7e/0x260 [ 522.558339][T12546] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 522.558360][T12546] ksys_unshare+0x45b/0xa40 [ 522.558383][T12546] ? __pfx_ksys_unshare+0x10/0x10 [ 522.558407][T12546] ? xfd_validate_state+0x61/0x180 [ 522.558436][T12546] __x64_sys_unshare+0x31/0x40 [ 522.558459][T12546] do_syscall_64+0xcd/0x490 [ 522.558488][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.558506][T12546] RIP: 0033:0x7f0a8a58e929 [ 522.558521][T12546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.558538][T12546] RSP: 002b:00007f0a8b385038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 522.558556][T12546] RAX: ffffffffffffffda RBX: 00007f0a8a7b5fa0 RCX: 00007f0a8a58e929 [ 522.558567][T12546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 522.558577][T12546] RBP: 00007f0a8a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 522.558588][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.558598][T12546] R13: 0000000000000000 R14: 00007f0a8a7b5fa0 R15: 00007ffe9cd09108 [ 522.558619][T12546] [ 523.547992][T12572] FAULT_INJECTION: forcing a failure. [ 523.547992][T12572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.732907][T12572] CPU: 1 UID: 0 PID: 12572 Comm: syz.0.1423 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 523.732956][T12572] Tainted: [U]=USER [ 523.732967][T12572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.732983][T12572] Call Trace: [ 523.732993][T12572] [ 523.733004][T12572] dump_stack_lvl+0x16c/0x1f0 [ 523.733052][T12572] should_fail_ex+0x512/0x640 [ 523.733099][T12572] _copy_from_user+0x2e/0xd0 [ 523.733145][T12572] do_pages_stat+0x239/0x820 [ 523.733190][T12572] ? __pfx_do_pages_stat+0x10/0x10 [ 523.733224][T12572] ? __lock_acquire+0xb8a/0x1c90 [ 523.733306][T12572] ? do_raw_spin_unlock+0x172/0x230 [ 523.733359][T12572] kernel_move_pages+0xfd4/0x13b0 [ 523.733411][T12572] ? __pfx_kernel_move_pages+0x10/0x10 [ 523.733446][T12572] ? __fget_files+0x20e/0x3c0 [ 523.733494][T12572] ? fput+0x70/0xf0 [ 523.733523][T12572] ? ksys_write+0x1ac/0x250 [ 523.733563][T12572] ? __pfx_ksys_write+0x10/0x10 [ 523.733611][T12572] __x64_sys_move_pages+0xe0/0x1c0 [ 523.733643][T12572] ? do_syscall_64+0x91/0x490 [ 523.733685][T12572] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.733726][T12572] do_syscall_64+0xcd/0x490 [ 523.733773][T12572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.733803][T12572] RIP: 0033:0x7f0a8a58e929 [ 523.733827][T12572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.733855][T12572] RSP: 002b:00007f0a883f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 523.733901][T12572] RAX: ffffffffffffffda RBX: 00007f0a8a7b6320 RCX: 00007f0a8a58e929 [ 523.733921][T12572] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 523.733938][T12572] RBP: 00007f0a883f6090 R08: 0000000000000000 R09: 8000000000000000 [ 523.733957][T12572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.733975][T12572] R13: 0000000000000000 R14: 00007f0a8a7b6320 R15: 00007ffe9cd09108 [ 523.734013][T12572] [ 524.437607][T12584] program syz.6.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.243332][ T30] audit: type=1800 audit(6045777411.819:9): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1429" name="lu_gp_id" dev="configfs" ino=39053 res=0 errno=0 [ 526.977990][T12647] FAULT_INJECTION: forcing a failure. [ 526.977990][T12647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.047857][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.0.1437 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 527.047907][T12647] Tainted: [U]=USER [ 527.047917][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.047934][T12647] Call Trace: [ 527.047944][T12647] [ 527.047955][T12647] dump_stack_lvl+0x16c/0x1f0 [ 527.048005][T12647] should_fail_ex+0x512/0x640 [ 527.048051][T12647] _copy_to_user+0x32/0xd0 [ 527.048106][T12647] do_pages_stat+0x619/0x820 [ 527.048154][T12647] ? __pfx_do_pages_stat+0x10/0x10 [ 527.048189][T12647] ? __lock_acquire+0xb8a/0x1c90 [ 527.048257][T12647] ? do_raw_spin_unlock+0x172/0x230 [ 527.048307][T12647] kernel_move_pages+0xfd4/0x13b0 [ 527.048354][T12647] ? __pfx_kernel_move_pages+0x10/0x10 [ 527.048387][T12647] ? __fget_files+0x20e/0x3c0 [ 527.048432][T12647] ? fput+0x70/0xf0 [ 527.048460][T12647] ? ksys_write+0x1ac/0x250 [ 527.048498][T12647] ? __pfx_ksys_write+0x10/0x10 [ 527.048543][T12647] __x64_sys_move_pages+0xe0/0x1c0 [ 527.048575][T12647] ? do_syscall_64+0x91/0x490 [ 527.048616][T12647] ? lockdep_hardirqs_on+0x7c/0x110 [ 527.048656][T12647] do_syscall_64+0xcd/0x490 [ 527.048699][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.048730][T12647] RIP: 0033:0x7f0a8a58e929 [ 527.048751][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.048779][T12647] RSP: 002b:00007f0a883f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 527.048806][T12647] RAX: ffffffffffffffda RBX: 00007f0a8a7b6320 RCX: 00007f0a8a58e929 [ 527.048825][T12647] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 527.048843][T12647] RBP: 00007f0a883f6090 R08: 0000000000000000 R09: 8000000000000000 [ 527.048860][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.048877][T12647] R13: 0000000000000000 R14: 00007f0a8a7b6320 R15: 00007ffe9cd09108 [ 527.048914][T12647] [ 527.564146][T12657] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 527.798978][ T30] audit: type=1800 audit(6045777414.369:10): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1441" name="trace_pipe" dev="tracefs" ino=1060 res=0 errno=0 [ 529.905095][T12698] netlink: 'syz.5.1449': attribute type 16 has an invalid length. [ 529.919232][T12698] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1449'. [ 529.956096][T12698] veth1_macvtap: left promiscuous mode [ 530.001811][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 530.175059][T12706] FAULT_INJECTION: forcing a failure. [ 530.175059][T12706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.256678][T12706] CPU: 0 UID: 0 PID: 12706 Comm: syz.0.1450 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 530.256727][T12706] Tainted: [U]=USER [ 530.256736][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.256752][T12706] Call Trace: [ 530.256762][T12706] [ 530.256773][T12706] dump_stack_lvl+0x16c/0x1f0 [ 530.256820][T12706] should_fail_ex+0x512/0x640 [ 530.256868][T12706] _copy_from_user+0x2e/0xd0 [ 530.256912][T12706] do_pages_stat+0x239/0x820 [ 530.256957][T12706] ? __pfx_do_pages_stat+0x10/0x10 [ 530.256991][T12706] ? __lock_acquire+0xb8a/0x1c90 [ 530.257059][T12706] ? do_raw_spin_unlock+0x172/0x230 [ 530.257108][T12706] kernel_move_pages+0xfd4/0x13b0 [ 530.257155][T12706] ? __pfx_kernel_move_pages+0x10/0x10 [ 530.257189][T12706] ? __fget_files+0x20e/0x3c0 [ 530.257235][T12706] ? fput+0x70/0xf0 [ 530.257275][T12706] ? ksys_write+0x1ac/0x250 [ 530.257315][T12706] ? __pfx_ksys_write+0x10/0x10 [ 530.257361][T12706] __x64_sys_move_pages+0xe0/0x1c0 [ 530.257394][T12706] ? do_syscall_64+0x91/0x490 [ 530.257435][T12706] ? lockdep_hardirqs_on+0x7c/0x110 [ 530.257476][T12706] do_syscall_64+0xcd/0x490 [ 530.257522][T12706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.257551][T12706] RIP: 0033:0x7f0a8a58e929 [ 530.257575][T12706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.257604][T12706] RSP: 002b:00007f0a883f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 530.257634][T12706] RAX: ffffffffffffffda RBX: 00007f0a8a7b6320 RCX: 00007f0a8a58e929 [ 530.257655][T12706] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 530.257672][T12706] RBP: 00007f0a883f6090 R08: 0000000000000000 R09: 8000000000000000 [ 530.257692][T12706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.257709][T12706] R13: 0000000000000000 R14: 00007f0a8a7b6320 R15: 00007ffe9cd09108 [ 530.257748][T12706] [ 530.995495][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'. [ 531.508021][T12732] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 531.757021][T12735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.148592][T12761] FAULT_INJECTION: forcing a failure. [ 533.148592][T12761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.170131][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.4.1460 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 533.170181][T12761] Tainted: [U]=USER [ 533.170191][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.170209][T12761] Call Trace: [ 533.170218][T12761] [ 533.170241][T12761] dump_stack_lvl+0x16c/0x1f0 [ 533.170290][T12761] should_fail_ex+0x512/0x640 [ 533.170338][T12761] _copy_to_user+0x32/0xd0 [ 533.170387][T12761] do_pages_stat+0x619/0x820 [ 533.170436][T12761] ? __pfx_do_pages_stat+0x10/0x10 [ 533.170474][T12761] ? __lock_acquire+0xb8a/0x1c90 [ 533.170550][T12761] ? do_raw_spin_unlock+0x172/0x230 [ 533.170603][T12761] kernel_move_pages+0xfd4/0x13b0 [ 533.170655][T12761] ? __pfx_kernel_move_pages+0x10/0x10 [ 533.170690][T12761] ? __fget_files+0x20e/0x3c0 [ 533.170740][T12761] ? fput+0x70/0xf0 [ 533.170768][T12761] ? ksys_write+0x1ac/0x250 [ 533.170809][T12761] ? __pfx_ksys_write+0x10/0x10 [ 533.170856][T12761] __x64_sys_move_pages+0xe0/0x1c0 [ 533.170889][T12761] ? do_syscall_64+0x91/0x490 [ 533.170931][T12761] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.170973][T12761] do_syscall_64+0xcd/0x490 [ 533.171019][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.171049][T12761] RIP: 0033:0x7fac4af8e929 [ 533.171073][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.171100][T12761] RSP: 002b:00007fac4be16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 533.171123][T12761] RAX: ffffffffffffffda RBX: 00007fac4b1b6320 RCX: 00007fac4af8e929 [ 533.171142][T12761] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 533.171160][T12761] RBP: 00007fac4be16090 R08: 0000000000000000 R09: 8000000000000000 [ 533.171178][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.171196][T12761] R13: 0000000000000000 R14: 00007fac4b1b6320 R15: 00007ffe3b2bdfc8 [ 533.171241][T12761] [ 534.153114][T12781] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 534.351313][T12780] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 534.548338][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1463'. [ 535.363518][T12805] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 536.826955][T12832] FAULT_INJECTION: forcing a failure. [ 536.826955][T12832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.906055][T12832] CPU: 0 UID: 0 PID: 12832 Comm: syz.5.1471 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 536.906104][T12832] Tainted: [U]=USER [ 536.906113][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.906130][T12832] Call Trace: [ 536.906139][T12832] [ 536.906150][T12832] dump_stack_lvl+0x16c/0x1f0 [ 536.906197][T12832] should_fail_ex+0x512/0x640 [ 536.906244][T12832] _copy_from_user+0x2e/0xd0 [ 536.906288][T12832] do_pages_stat+0x239/0x820 [ 536.906336][T12832] ? __pfx_do_pages_stat+0x10/0x10 [ 536.906372][T12832] ? __lock_acquire+0xb8a/0x1c90 [ 536.906446][T12832] ? do_raw_spin_unlock+0x172/0x230 [ 536.906498][T12832] kernel_move_pages+0xfd4/0x13b0 [ 536.906549][T12832] ? __pfx_kernel_move_pages+0x10/0x10 [ 536.906584][T12832] ? __fget_files+0x20e/0x3c0 [ 536.906632][T12832] ? fput+0x70/0xf0 [ 536.906660][T12832] ? ksys_write+0x1ac/0x250 [ 536.906699][T12832] ? __pfx_ksys_write+0x10/0x10 [ 536.906746][T12832] __x64_sys_move_pages+0xe0/0x1c0 [ 536.906779][T12832] ? do_syscall_64+0x91/0x490 [ 536.906822][T12832] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.906863][T12832] do_syscall_64+0xcd/0x490 [ 536.906908][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.906928][T12832] RIP: 0033:0x7f1d5e98e929 [ 536.906943][T12832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.906962][T12832] RSP: 002b:00007f1d5f7f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 536.906980][T12832] RAX: ffffffffffffffda RBX: 00007f1d5ebb6320 RCX: 00007f1d5e98e929 [ 536.906992][T12832] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 536.907012][T12832] RBP: 00007f1d5f7f2090 R08: 0000000000000000 R09: 8000000000000000 [ 536.907023][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.907034][T12832] R13: 0000000000000000 R14: 00007f1d5ebb6320 R15: 00007ffdd1a7bb38 [ 536.907056][T12832] [ 540.385863][T12869] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 541.275643][T12882] FAULT_INJECTION: forcing a failure. [ 541.275643][T12882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.312983][T12882] CPU: 1 UID: 0 PID: 12882 Comm: syz.4.1481 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 541.313017][T12882] Tainted: [U]=USER [ 541.313023][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.313033][T12882] Call Trace: [ 541.313040][T12882] [ 541.313047][T12882] dump_stack_lvl+0x16c/0x1f0 [ 541.313080][T12882] should_fail_ex+0x512/0x640 [ 541.313110][T12882] _copy_to_user+0x32/0xd0 [ 541.313156][T12882] do_pages_stat+0x619/0x820 [ 541.313183][T12882] ? __pfx_do_pages_stat+0x10/0x10 [ 541.313203][T12882] ? __lock_acquire+0xb8a/0x1c90 [ 541.313249][T12882] ? do_raw_spin_unlock+0x172/0x230 [ 541.313280][T12882] kernel_move_pages+0xfd4/0x13b0 [ 541.313309][T12882] ? __pfx_kernel_move_pages+0x10/0x10 [ 541.313330][T12882] ? __fget_files+0x20e/0x3c0 [ 541.313361][T12882] ? fput+0x70/0xf0 [ 541.313378][T12882] ? ksys_write+0x1ac/0x250 [ 541.313404][T12882] ? __pfx_ksys_write+0x10/0x10 [ 541.313432][T12882] __x64_sys_move_pages+0xe0/0x1c0 [ 541.313453][T12882] ? do_syscall_64+0x91/0x490 [ 541.313480][T12882] ? lockdep_hardirqs_on+0x7c/0x110 [ 541.313506][T12882] do_syscall_64+0xcd/0x490 [ 541.313535][T12882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.313554][T12882] RIP: 0033:0x7fac4af8e929 [ 541.313568][T12882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.313587][T12882] RSP: 002b:00007fac4be37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 541.313605][T12882] RAX: ffffffffffffffda RBX: 00007fac4b1b6240 RCX: 00007fac4af8e929 [ 541.313617][T12882] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 541.313627][T12882] RBP: 00007fac4be37090 R08: 0000000000000000 R09: 8000000000000000 [ 541.313638][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.313649][T12882] R13: 0000000000000000 R14: 00007fac4b1b6240 R15: 00007ffe3b2bdfc8 [ 541.313671][T12882] [ 542.110157][T12886] block2mtd: illegal erase size [ 542.529757][T12122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 542.547730][T12122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 542.556399][T12122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 542.572298][T12122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 542.581709][T12122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 542.988618][T12890] chnl_net:caif_netlink_parms(): no params data found [ 543.188479][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.196018][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.203845][T12890] bridge_slave_0: entered allmulticast mode [ 543.213054][T12890] bridge_slave_0: entered promiscuous mode [ 543.221995][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.230241][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.237482][T12890] bridge_slave_1: entered allmulticast mode [ 543.245352][T12890] bridge_slave_1: entered promiscuous mode [ 543.284376][T12890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.298787][T12890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.342993][T12890] team0: Port device team_slave_0 added [ 543.353024][T12890] team0: Port device team_slave_1 added [ 543.388193][T12890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.395338][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.422950][T12890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.437602][T12890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.444832][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.471120][T12890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.526916][T12890] hsr_slave_0: entered promiscuous mode [ 543.535632][T12890] hsr_slave_1: entered promiscuous mode [ 543.542919][T12890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.551456][T12890] Cannot create hsr debugfs directory [ 543.948794][T12890] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 543.966834][T12890] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 543.984696][T12890] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.018534][T12890] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.162153][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.184981][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.237951][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.245127][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.289737][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.296938][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.640821][ T8729] Bluetooth: hci7: command tx timeout [ 544.948329][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.296542][T12890] veth0_vlan: entered promiscuous mode [ 545.312625][T12890] veth1_vlan: entered promiscuous mode [ 545.347716][T12890] veth0_macvtap: entered promiscuous mode [ 545.359629][T12890] veth1_macvtap: entered promiscuous mode [ 545.391275][T12890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.419726][T12890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.447791][T12890] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.458672][T12890] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.467659][T12890] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.476815][T12890] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.663248][T12936] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 545.696190][ T9081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.705389][ T9081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.835469][ T9907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.866308][ T9907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.195356][T12948] FAULT_INJECTION: forcing a failure. [ 546.195356][T12948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.209290][T12948] CPU: 1 UID: 0 PID: 12948 Comm: syz.4.1491 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 546.209335][T12948] Tainted: [U]=USER [ 546.209343][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.209360][T12948] Call Trace: [ 546.209370][T12948] [ 546.209381][T12948] dump_stack_lvl+0x16c/0x1f0 [ 546.209430][T12948] should_fail_ex+0x512/0x640 [ 546.209474][T12948] _copy_from_user+0x2e/0xd0 [ 546.209516][T12948] do_pages_stat+0x239/0x820 [ 546.209562][T12948] ? __pfx_do_pages_stat+0x10/0x10 [ 546.209598][T12948] ? __lock_acquire+0xb8a/0x1c90 [ 546.209672][T12948] ? do_raw_spin_unlock+0x172/0x230 [ 546.209726][T12948] kernel_move_pages+0xfd4/0x13b0 [ 546.209778][T12948] ? __pfx_kernel_move_pages+0x10/0x10 [ 546.209813][T12948] ? __fget_files+0x20e/0x3c0 [ 546.209860][T12948] ? fput+0x70/0xf0 [ 546.209888][T12948] ? ksys_write+0x1ac/0x250 [ 546.209927][T12948] ? __pfx_ksys_write+0x10/0x10 [ 546.209978][T12948] __x64_sys_move_pages+0xe0/0x1c0 [ 546.210011][T12948] ? do_syscall_64+0x91/0x490 [ 546.210053][T12948] ? lockdep_hardirqs_on+0x7c/0x110 [ 546.210093][T12948] do_syscall_64+0xcd/0x490 [ 546.210150][T12948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.210180][T12948] RIP: 0033:0x7fac4af8e929 [ 546.210204][T12948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.210231][T12948] RSP: 002b:00007fac4be16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 546.210259][T12948] RAX: ffffffffffffffda RBX: 00007fac4b1b6320 RCX: 00007fac4af8e929 [ 546.210278][T12948] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 546.210296][T12948] RBP: 00007fac4be16090 R08: 0000000000000000 R09: 8000000000000000 [ 546.210314][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.210332][T12948] R13: 0000000000000000 R14: 00007fac4b1b6320 R15: 00007ffe3b2bdfc8 [ 546.210375][T12948] [ 546.713139][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1492'. [ 546.728430][ T8729] Bluetooth: hci7: command tx timeout [ 546.824091][T12956] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 P[ 548.334813][T12974] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 548.656819][T12122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 548.684474][T12122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 548.693336][T12122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 548.703785][T12122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 548.739279][T12122] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 548.800241][T12122] Bluetooth: hci7: command tx timeout [ 549.617223][T12983] chnl_net:caif_netlink_parms(): no params data found [ 549.945016][T12983] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.960222][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.967542][T12983] bridge_slave_0: entered allmulticast mode [ 550.021256][T12983] bridge_slave_0: entered promiscuous mode [ 550.042093][T12983] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.060482][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.085723][T12983] bridge_slave_1: entered allmulticast mode [ 550.100170][T12983] bridge_slave_1: entered promiscuous mode [ 550.239450][T12983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.273489][T12983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.356769][T13002] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1503'. [ 550.415971][T12983] team0: Port device team_slave_0 added [ 550.588910][T12983] team0: Port device team_slave_1 added [ 550.758395][T12983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.782632][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.811500][T12983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.822275][T12122] Bluetooth: hci8: command tx timeout [ 550.824535][T12983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.858891][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.885411][T12122] Bluetooth: hci7: command tx timeout [ 550.948485][T12983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.058249][T12983] hsr_slave_0: entered promiscuous mode [ 551.081393][T12983] hsr_slave_1: entered promiscuous mode [ 551.114572][T12983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.145606][T12983] Cannot create hsr debugfs directory syzkaller syzkaller login: [ 552.032257][T12983] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 552.053154][T12983] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 552.147324][T12983] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 552.204847][T12983] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 552.393383][T13029] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 552.639299][T13026] can: request_module (can-proto-0) failed. [ 552.795691][T12983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.857519][T12983] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.893128][T12122] Bluetooth: hci8: command tx timeout [ 552.964005][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.971411][ T9911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.021549][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.028752][ T9911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.958705][T12983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.960458][T12122] Bluetooth: hci8: command tx timeout [ 555.231665][T12983] veth0_vlan: entered promiscuous mode [ 555.276784][ T8729] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 555.294625][ T8729] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 555.302904][ T8729] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 555.324624][ T8729] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 555.343159][ T8729] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 555.343353][T12983] veth1_vlan: entered promiscuous mode [ 555.703563][T12983] veth0_macvtap: entered promiscuous mode [ 555.814530][T12983] veth1_macvtap: entered promiscuous mode [ 555.941805][T12983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.994916][T12983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.044389][T12983] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.061062][T12983] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.069897][T12983] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.100655][T12983] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.242078][T13071] FAULT_INJECTION: forcing a failure. [ 556.242078][T13071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.255429][T13071] CPU: 0 UID: 0 PID: 13071 Comm: syz.7.1514 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 556.255477][T13071] Tainted: [U]=USER [ 556.255486][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.255503][T13071] Call Trace: [ 556.255514][T13071] [ 556.255525][T13071] dump_stack_lvl+0x16c/0x1f0 [ 556.255575][T13071] should_fail_ex+0x512/0x640 [ 556.255623][T13071] _copy_from_user+0x2e/0xd0 [ 556.255668][T13071] do_pages_stat+0x239/0x820 [ 556.255714][T13071] ? __pfx_do_pages_stat+0x10/0x10 [ 556.255750][T13071] ? __lock_acquire+0xb8a/0x1c90 [ 556.255818][T13071] ? do_raw_spin_unlock+0x172/0x230 [ 556.255869][T13071] kernel_move_pages+0xfd4/0x13b0 [ 556.255917][T13071] ? __pfx_kernel_move_pages+0x10/0x10 [ 556.255950][T13071] ? __fget_files+0x20e/0x3c0 [ 556.255997][T13071] ? fput+0x70/0xf0 [ 556.256026][T13071] ? ksys_write+0x1ac/0x250 [ 556.256074][T13071] ? __pfx_ksys_write+0x10/0x10 [ 556.256121][T13071] __x64_sys_move_pages+0xe0/0x1c0 [ 556.256153][T13071] ? do_syscall_64+0x91/0x490 [ 556.256195][T13071] ? lockdep_hardirqs_on+0x7c/0x110 [ 556.256236][T13071] do_syscall_64+0xcd/0x490 [ 556.256282][T13071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.256311][T13071] RIP: 0033:0x7f17c2b8e929 [ 556.256335][T13071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.256362][T13071] RSP: 002b:00007f17c09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 556.256390][T13071] RAX: ffffffffffffffda RBX: 00007f17c2db6320 RCX: 00007f17c2b8e929 [ 556.256409][T13071] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 556.256427][T13071] RBP: 00007f17c09f6090 R08: 0000000000000000 R09: 8000000000000000 [ 556.256445][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.256462][T13071] R13: 0000000000000000 R14: 00007f17c2db6320 R15: 00007ffc38f8a668 [ 556.256500][T13071] [ 557.041224][T12122] Bluetooth: hci8: command tx timeout [ 557.097200][T13057] chnl_net:caif_netlink_parms(): no params data found [ 557.125918][ T9065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.146363][ T9065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.426396][ T8744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.440187][T12122] Bluetooth: hci9: command tx timeout [ 557.449303][ T8744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.522812][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.560497][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.569333][T13057] bridge_slave_0: entered allmulticast mode [ 557.588319][T13057] bridge_slave_0: entered promiscuous mode [ 557.712763][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.719920][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.734662][T13057] bridge_slave_1: entered allmulticast mode [ 557.742746][T13057] bridge_slave_1: entered promiscuous mode [ 557.908911][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.975933][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.352184][T13057] team0: Port device team_slave_0 added [ 558.368486][T13057] team0: Port device team_slave_1 added [ 558.652279][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.664374][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.693134][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.713708][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.738167][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.769115][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.782062][T13095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 559.106955][T13057] hsr_slave_0: entered promiscuous mode [ 559.133470][T13057] hsr_slave_1: entered promiscuous mode [ 559.156624][T13057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.180732][T13057] Cannot create hsr debugfs directory [ 559.522366][T12122] Bluetooth: hci9: command tx timeout [ 560.598698][T13057] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 560.620866][T13057] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 560.652541][T13057] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 560.684813][T13057] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 561.137660][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.227209][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.300534][T13132] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 561.318804][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.326106][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.417838][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.425044][ T8744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.601544][T12122] Bluetooth: hci9: command tx timeout [ 563.133529][T13057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.680552][T12122] Bluetooth: hci9: command tx timeout [ 563.961851][T13178] FAULT_INJECTION: forcing a failure. [ 563.961851][T13178] name failslab, interval 1, probability 0, space 0, times 0 [ 564.040497][T13178] CPU: 1 UID: 0 PID: 13178 Comm: syz.7.1528 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 564.040548][T13178] Tainted: [U]=USER [ 564.040557][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.040574][T13178] Call Trace: [ 564.040583][T13178] [ 564.040595][T13178] dump_stack_lvl+0x16c/0x1f0 [ 564.040642][T13178] should_fail_ex+0x512/0x640 [ 564.040682][T13178] ? __kmalloc_noprof+0xbf/0x510 [ 564.040724][T13178] ? lsm_blob_alloc+0x68/0x90 [ 564.040764][T13178] should_failslab+0xc2/0x120 [ 564.040792][T13178] __kmalloc_noprof+0xd2/0x510 [ 564.040842][T13178] lsm_blob_alloc+0x68/0x90 [ 564.040885][T13178] security_sk_alloc+0x30/0x270 [ 564.040918][T13178] sk_prot_alloc+0x1c7/0x2a0 [ 564.040954][T13178] sk_alloc+0x36/0xc20 [ 564.041005][T13178] __netlink_create+0x5e/0x2c0 [ 564.041045][T13178] ? __wake_up+0x3f/0x60 [ 564.041080][T13178] netlink_create+0x39e/0x620 [ 564.041123][T13178] ? __pfx_genl_bind+0x10/0x10 [ 564.041153][T13178] ? __pfx_genl_unbind+0x10/0x10 [ 564.041183][T13178] ? __pfx_genl_release+0x10/0x10 [ 564.041222][T13178] __sock_create+0x338/0x8d0 [ 564.041265][T13178] __sys_socket+0x14d/0x260 [ 564.041299][T13178] ? __pfx___sys_socket+0x10/0x10 [ 564.041336][T13178] ? do_user_addr_fault+0x843/0x1370 [ 564.041384][T13178] __x64_sys_socket+0x72/0xb0 [ 564.041417][T13178] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.041458][T13178] do_syscall_64+0xcd/0x490 [ 564.041503][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.041532][T13178] RIP: 0033:0x7f17c2b90847 [ 564.041554][T13178] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.041581][T13178] RSP: 002b:00007f17c3984fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 564.041610][T13178] RAX: ffffffffffffffda RBX: 00007f17c2db5fa0 RCX: 00007f17c2b90847 [ 564.041629][T13178] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 564.041647][T13178] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 564.041665][T13178] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 564.041683][T13178] R13: 0000000000000000 R14: 00007f17c2db5fa0 R15: 00007ffc38f8a668 [ 564.041723][T13178] [ 564.273552][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.803233][T13057] veth0_vlan: entered promiscuous mode [ 564.838023][T13057] veth1_vlan: entered promiscuous mode [ 564.943243][T13057] veth0_macvtap: entered promiscuous mode [ 564.965077][T13197] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 565.008478][T13057] veth1_macvtap: entered promiscuous mode [ 565.293196][T13057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.335722][T13057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.371340][T13057] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.423016][T13057] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.440616][T13057] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.455762][T13057] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.133383][ T8744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.155610][ T8744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.187116][T13208] FAULT_INJECTION: forcing a failure. [ 566.187116][T13208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.246052][T13208] CPU: 1 UID: 0 PID: 13208 Comm: syz.8.1533 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 566.246101][T13208] Tainted: [U]=USER [ 566.246112][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.246127][T13208] Call Trace: [ 566.246137][T13208] [ 566.246148][T13208] dump_stack_lvl+0x16c/0x1f0 [ 566.246196][T13208] should_fail_ex+0x512/0x640 [ 566.246242][T13208] _copy_from_user+0x2e/0xd0 [ 566.246288][T13208] do_pages_stat+0x239/0x820 [ 566.246332][T13208] ? __pfx_do_pages_stat+0x10/0x10 [ 566.246366][T13208] ? __lock_acquire+0xb8a/0x1c90 [ 566.246434][T13208] ? do_raw_spin_unlock+0x172/0x230 [ 566.246484][T13208] kernel_move_pages+0xfd4/0x13b0 [ 566.246531][T13208] ? __pfx_kernel_move_pages+0x10/0x10 [ 566.246565][T13208] ? __fget_files+0x20e/0x3c0 [ 566.246609][T13208] ? fput+0x70/0xf0 [ 566.246637][T13208] ? ksys_write+0x1ac/0x250 [ 566.246676][T13208] ? __pfx_ksys_write+0x10/0x10 [ 566.246733][T13208] __x64_sys_move_pages+0xe0/0x1c0 [ 566.246766][T13208] ? do_syscall_64+0x91/0x490 [ 566.246808][T13208] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.246849][T13208] do_syscall_64+0xcd/0x490 [ 566.246896][T13208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.246926][T13208] RIP: 0033:0x7f9e1998e929 [ 566.246948][T13208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.246976][T13208] RSP: 002b:00007f9e17772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 566.247004][T13208] RAX: ffffffffffffffda RBX: 00007f9e19bb6320 RCX: 00007f9e1998e929 [ 566.247024][T13208] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 566.247051][T13208] RBP: 00007f9e17772090 R08: 0000000000000000 R09: 8000000000000000 [ 566.247070][T13208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.247087][T13208] R13: 0000000000000000 R14: 00007f9e19bb6320 R15: 00007ffe3e518368 [ 566.247126][T13208] [ 566.559742][ T8744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.568166][ T8744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.845487][T13214] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 568.248572][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.255137][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.257401][T13253] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 570.151767][T13270] FAULT_INJECTION: forcing a failure. [ 570.151767][T13270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.169641][T13270] CPU: 0 UID: 0 PID: 13270 Comm: syz.9.1543 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 570.169687][T13270] Tainted: [U]=USER [ 570.169697][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.169713][T13270] Call Trace: [ 570.169723][T13270] [ 570.169734][T13270] dump_stack_lvl+0x16c/0x1f0 [ 570.169782][T13270] should_fail_ex+0x512/0x640 [ 570.169831][T13270] _copy_to_user+0x32/0xd0 [ 570.169879][T13270] do_pages_stat+0x619/0x820 [ 570.169929][T13270] ? __pfx_do_pages_stat+0x10/0x10 [ 570.169970][T13270] ? __lock_acquire+0xb8a/0x1c90 [ 570.170052][T13270] ? do_raw_spin_unlock+0x172/0x230 [ 570.170105][T13270] kernel_move_pages+0xfd4/0x13b0 [ 570.170157][T13270] ? __pfx_kernel_move_pages+0x10/0x10 [ 570.170191][T13270] ? __fget_files+0x20e/0x3c0 [ 570.170240][T13270] ? fput+0x70/0xf0 [ 570.170269][T13270] ? ksys_write+0x1ac/0x250 [ 570.170309][T13270] ? __pfx_ksys_write+0x10/0x10 [ 570.170356][T13270] __x64_sys_move_pages+0xe0/0x1c0 [ 570.170389][T13270] ? do_syscall_64+0x91/0x490 [ 570.170431][T13270] ? lockdep_hardirqs_on+0x7c/0x110 [ 570.170473][T13270] do_syscall_64+0xcd/0x490 [ 570.170519][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.170550][T13270] RIP: 0033:0x7f4ba5d8e929 [ 570.170575][T13270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.170604][T13270] RSP: 002b:00007f4ba6b40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 570.170632][T13270] RAX: ffffffffffffffda RBX: 00007f4ba5fb6320 RCX: 00007f4ba5d8e929 [ 570.170652][T13270] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 570.170670][T13270] RBP: 00007f4ba6b40090 R08: 0000000000000000 R09: 8000000000000000 [ 570.170688][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.170705][T13270] R13: 0000000000000000 R14: 00007f4ba5fb6320 R15: 00007ffd2eb92b18 [ 570.170743][T13270] [ 571.987638][T13296] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 573.728518][T13320] netlink: 334 bytes leftover after parsing attributes in process `syz.9.1554'. [ 574.770796][T13337] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 574.962437][T13340] FAULT_INJECTION: forcing a failure. [ 574.962437][T13340] name failslab, interval 1, probability 0, space 0, times 0 [ 575.020250][T13340] CPU: 1 UID: 0 PID: 13340 Comm: syz.7.1557 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 575.020305][T13340] Tainted: [U]=USER [ 575.020315][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.020332][T13340] Call Trace: [ 575.020342][T13340] [ 575.020355][T13340] dump_stack_lvl+0x16c/0x1f0 [ 575.020406][T13340] should_fail_ex+0x512/0x640 [ 575.020446][T13340] ? __kvmalloc_node_noprof+0x124/0x620 [ 575.020491][T13340] should_failslab+0xc2/0x120 [ 575.020519][T13340] __kvmalloc_node_noprof+0x137/0x620 [ 575.020562][T13340] ? io_alloc_cache_init+0x33/0x170 [ 575.020610][T13340] ? io_alloc_cache_init+0x33/0x170 [ 575.020648][T13340] io_alloc_cache_init+0x33/0x170 [ 575.020685][T13340] io_uring_setup+0x63b/0x2080 [ 575.020722][T13340] ? __pfx_io_uring_setup+0x10/0x10 [ 575.020756][T13340] ? do_futex+0x122/0x350 [ 575.020792][T13340] ? __pfx_do_futex+0x10/0x10 [ 575.020825][T13340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.020891][T13340] ? xfd_validate_state+0x61/0x180 [ 575.020938][T13340] ? __pfx_do_writev+0x10/0x10 [ 575.020987][T13340] __x64_sys_io_uring_setup+0xc2/0x170 [ 575.021028][T13340] do_syscall_64+0xcd/0x490 [ 575.021077][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.021106][T13340] RIP: 0033:0x7f17c2b8e929 [ 575.021131][T13340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.021160][T13340] RSP: 002b:00007f17c3986038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 575.021191][T13340] RAX: ffffffffffffffda RBX: 00007f17c2db5fa0 RCX: 00007f17c2b8e929 [ 575.021210][T13340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 575.021227][T13340] RBP: 00007f17c2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 575.021246][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.021263][T13340] R13: 0000000000000000 R14: 00007f17c2db5fa0 R15: 00007ffc38f8a668 [ 575.021303][T13340] [ 576.320971][ T8729] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 576.359343][ T8729] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 576.370464][ T8729] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 576.379920][ T8729] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 576.396016][ T8729] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 577.953541][T13350] chnl_net:caif_netlink_parms(): no params data found [ 578.307684][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1560'. [ 578.488055][ T8729] Bluetooth: hci10: command tx timeout [ 578.830916][T13350] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.858827][T13350] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.868813][T13350] bridge_slave_0: entered allmulticast mode [ 578.878154][ T6037] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 578.892621][T13350] bridge_slave_0: entered promiscuous mode [ 578.990530][T13350] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.997931][T13350] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.006179][T13350] bridge_slave_1: entered allmulticast mode [ 579.024266][T13350] bridge_slave_1: entered promiscuous mode [ 579.204699][T13350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.231380][T13350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.526928][T13350] team0: Port device team_slave_0 added [ 579.570169][T13350] team0: Port device team_slave_1 added [ 579.720483][T13350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.740410][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.836462][T13350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.104446][T13350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.159581][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.216808][T13350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.521035][T13350] hsr_slave_0: entered promiscuous mode [ 580.522449][T13350] hsr_slave_1: entered promiscuous mode [ 580.523331][T13350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.523397][T13350] Cannot create hsr debugfs directory [ 580.560196][ T8729] Bluetooth: hci10: command tx timeout [ 580.571553][T13393] Console: switching to colour frame buffer device 128x48 [ 581.154490][T13409] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 581.755364][T13350] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.916633][T13350] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.182490][T13350] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.295940][T13350] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.640534][ T8729] Bluetooth: hci10: command tx timeout [ 582.776222][T13426] vhci_hcd: invalid port number 16 [ 582.805294][T13426] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 582.807800][T13350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 583.316726][T13350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 583.359186][T13350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 583.552509][T13350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 583.936931][T13440] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 584.389610][T13350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.444429][T13350] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.563840][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.563962][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.604361][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.604471][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.720615][ T8729] Bluetooth: hci10: command tx timeout [ 584.787850][T13350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.529102][T13350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.857175][T13350] veth0_vlan: entered promiscuous mode [ 585.903109][T13350] veth1_vlan: entered promiscuous mode [ 586.078146][T13350] veth0_macvtap: entered promiscuous mode [ 586.200922][T13460] Console: switching to colour VGA+ 80x6 [ 586.268343][T13350] veth1_macvtap: entered promiscuous mode [ 586.328089][T13350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.405364][T13350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.418759][T13350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.428127][T13350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.437183][T13350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.490252][T13350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.819289][T13478] FAULT_INJECTION: forcing a failure. [ 586.819289][T13478] name failslab, interval 1, probability 0, space 0, times 0 [ 586.864092][T13478] CPU: 1 UID: 0 PID: 13478 Comm: syz.9.1585 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 586.864147][T13478] Tainted: [U]=USER [ 586.864158][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 586.864174][T13478] Call Trace: [ 586.864184][T13478] [ 586.864196][T13478] dump_stack_lvl+0x16c/0x1f0 [ 586.864247][T13478] should_fail_ex+0x512/0x640 [ 586.864290][T13478] ? fs_reclaim_acquire+0xae/0x150 [ 586.864329][T13478] should_failslab+0xc2/0x120 [ 586.864360][T13478] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 586.864409][T13478] ? security_inode_alloc+0x3b/0x2b0 [ 586.864451][T13478] security_inode_alloc+0x3b/0x2b0 [ 586.864485][T13478] inode_init_always_gfp+0xce4/0x1030 [ 586.864536][T13478] alloc_inode+0x86/0x240 [ 586.864568][T13478] new_inode+0x22/0x1c0 [ 586.864597][T13478] ? proc_lookup_de+0x217/0x320 [ 586.864658][T13478] proc_get_inode+0x1d/0x780 [ 586.864706][T13478] proc_lookup_de+0x253/0x320 [ 586.864760][T13478] proc_lookup+0xcf/0x110 [ 586.864808][T13478] __lookup_slow+0x251/0x460 [ 586.864846][T13478] ? __pfx___lookup_slow+0x10/0x10 [ 586.864907][T13478] ? lookup_fast+0x156/0x610 [ 586.864952][T13478] walk_component+0x353/0x5b0 [ 586.864995][T13478] link_path_walk+0x627/0xe20 [ 586.865051][T13478] path_openat+0x1b0/0x2cb0 [ 586.865091][T13478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.865139][T13478] ? __pfx_path_openat+0x10/0x10 [ 586.865185][T13478] ? __lock_acquire+0xb8a/0x1c90 [ 586.865230][T13478] do_filp_open+0x20b/0x470 [ 586.865275][T13478] ? __pfx_do_filp_open+0x10/0x10 [ 586.865351][T13478] ? alloc_fd+0x471/0x7d0 [ 586.865404][T13478] do_sys_openat2+0x11b/0x1d0 [ 586.865438][T13478] ? __pfx_do_sys_openat2+0x10/0x10 [ 586.865488][T13478] __x64_sys_openat+0x174/0x210 [ 586.865523][T13478] ? __pfx___x64_sys_openat+0x10/0x10 [ 586.865575][T13478] do_syscall_64+0xcd/0x490 [ 586.865633][T13478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.865664][T13478] RIP: 0033:0x7f4ba5d8e929 [ 586.865689][T13478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.865718][T13478] RSP: 002b:00007f4ba6bc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 586.865748][T13478] RAX: ffffffffffffffda RBX: 00007f4ba5fb5fa0 RCX: 00007f4ba5d8e929 [ 586.865768][T13478] RDX: 0000000000004400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 586.865788][T13478] RBP: 00007f4ba5e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 586.865806][T13478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.865825][T13478] R13: 0000000000000000 R14: 00007f4ba5fb5fa0 R15: 00007ffd2eb92b18 [ 586.865865][T13478] [ 587.391399][ T9907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.419268][ T9907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.628433][ T9911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.646284][ T9911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.146616][T13496] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 588.365060][T13499] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.941557][T13518] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 591.283510][T13531] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 591.541006][T13536] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 592.189386][T13550] futex_wake_op: syz.3.1597 tries to shift op by -9; fix this program [ 592.906088][T13556] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 593.265944][T13563] netlink: zone id is out of range [ 593.321228][T13563] netlink: zone id is out of range [ 593.471356][T13563] netlink: zone id is out of range [ 593.495429][T13563] netlink: zone id is out of range [ 593.532331][T13563] netlink: zone id is out of range [ 593.553064][T13563] netlink: zone id is out of range [ 593.558789][T13563] netlink: zone id is out of range [ 593.566749][T13563] netlink: zone id is out of range [ 593.588464][T13563] netlink: zone id is out of range [ 593.595295][T13563] netlink: zone id is out of range [ 595.622064][T13592] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 596.234941][T13604] ubi: mtd0 is already attached to ubi0 [ 597.816961][T13645] FAULT_INJECTION: forcing a failure. [ 597.816961][T13645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.889783][T13645] CPU: 1 UID: 0 PID: 13645 Comm: syz.7.1620 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 597.889831][T13645] Tainted: [U]=USER [ 597.889841][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.889856][T13645] Call Trace: [ 597.889866][T13645] [ 597.889878][T13645] dump_stack_lvl+0x16c/0x1f0 [ 597.889930][T13645] should_fail_ex+0x512/0x640 [ 597.889976][T13645] _copy_to_user+0x32/0xd0 [ 597.890022][T13645] do_pages_stat+0x619/0x820 [ 597.890070][T13645] ? __pfx_do_pages_stat+0x10/0x10 [ 597.890103][T13645] ? __lock_acquire+0xb8a/0x1c90 [ 597.890171][T13645] ? do_raw_spin_unlock+0x172/0x230 [ 597.890220][T13645] kernel_move_pages+0xfd4/0x13b0 [ 597.890267][T13645] ? __pfx_kernel_move_pages+0x10/0x10 [ 597.890300][T13645] ? __fget_files+0x20e/0x3c0 [ 597.890346][T13645] ? fput+0x70/0xf0 [ 597.890374][T13645] ? ksys_write+0x1ac/0x250 [ 597.890414][T13645] ? __pfx_ksys_write+0x10/0x10 [ 597.890458][T13645] __x64_sys_move_pages+0xe0/0x1c0 [ 597.890500][T13645] ? do_syscall_64+0x91/0x490 [ 597.890541][T13645] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.890581][T13645] do_syscall_64+0xcd/0x490 [ 597.890626][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.890655][T13645] RIP: 0033:0x7f17c2b8e929 [ 597.890678][T13645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.890704][T13645] RSP: 002b:00007f17c09f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 597.890731][T13645] RAX: ffffffffffffffda RBX: 00007f17c2db6320 RCX: 00007f17c2b8e929 [ 597.890750][T13645] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 597.890766][T13645] RBP: 00007f17c09f6090 R08: 0000000000000000 R09: 8000000000000000 [ 597.890784][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.890800][T13645] R13: 0000000000000000 R14: 00007f17c2db6320 R15: 00007ffc38f8a668 [ 597.890835][T13645] [ 599.480952][T13663] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 601.625252][T13691] FAULT_INJECTION: forcing a failure. [ 601.625252][T13691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.662721][T13703] block2mtd: illegal erase size [ 601.669105][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.7.1636 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 601.669136][T13691] Tainted: [U]=USER [ 601.669143][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.669159][T13691] Call Trace: [ 601.669166][T13691] [ 601.669173][T13691] dump_stack_lvl+0x16c/0x1f0 [ 601.669215][T13691] should_fail_ex+0x512/0x640 [ 601.669245][T13691] __fpu_restore_sig+0xfe/0x13a0 [ 601.669271][T13691] ? __pfx___fpu_restore_sig+0x10/0x10 [ 601.669305][T13691] ? __might_fault+0xe3/0x190 [ 601.669330][T13691] ? __might_fault+0x13b/0x190 [ 601.669360][T13691] fpu__restore_sig+0x151/0x190 [ 601.669384][T13691] restore_sigcontext+0x4c9/0x6a0 [ 601.669405][T13691] ? __pfx_restore_sigcontext+0x10/0x10 [ 601.669441][T13691] ? __pfx_restore_altstack+0x10/0x10 [ 601.669467][T13691] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.669497][T13691] ? lockdep_hardirqs_on+0x7c/0x110 [ 601.669527][T13691] __do_sys_rt_sigreturn+0x1bb/0x230 [ 601.669548][T13691] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 601.669575][T13691] do_syscall_64+0xcd/0x490 [ 601.669604][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.669622][T13691] RIP: 0033:0x7f17c2b8e927 [ 601.669638][T13691] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 601.669655][T13691] RSP: 002b:00007f17c3986038 EFLAGS: 00000246 [ 601.669671][T13691] RAX: 0000000000000000 RBX: 00007f17c2db5fa0 RCX: 00007f17c2b8e929 [ 601.669682][T13691] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 0000000000000003 [ 601.669693][T13691] RBP: 00007f17c2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 601.669704][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.669714][T13691] R13: 0000000000000000 R14: 00007f17c2db5fa0 R15: 00007ffc38f8a668 [ 601.669736][T13691] [ 602.099588][T13707] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 603.147677][T13729] vmstat_refresh: nr_hugetlb -15360 [ 604.303215][T13744] block2mtd: illegal erase size [ 605.264340][T13753] ubi: mtd0 is already attached to ubi0 [ 606.205833][T13774] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1659'. [ 606.483790][T13783] block2mtd: illegal erase size [ 606.946308][T13788] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 607.896070][T13808] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 608.296298][T13815] block2mtd: illegal erase size [ 609.441468][T13819] FAULT_INJECTION: forcing a failure. [ 609.441468][T13819] name failslab, interval 1, probability 0, space 0, times 0 [ 609.509767][T13819] CPU: 0 UID: 0 PID: 13819 Comm: syz.9.1673 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 609.509822][T13819] Tainted: [U]=USER [ 609.509833][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.509851][T13819] Call Trace: [ 609.509861][T13819] [ 609.509873][T13819] dump_stack_lvl+0x16c/0x1f0 [ 609.509926][T13819] should_fail_ex+0x512/0x640 [ 609.509968][T13819] ? __kmalloc_noprof+0xbf/0x510 [ 609.510014][T13819] ? __register_sysctl_table+0xb3/0x1900 [ 609.510060][T13819] should_failslab+0xc2/0x120 [ 609.510085][T13819] __kmalloc_noprof+0xd2/0x510 [ 609.510134][T13819] __register_sysctl_table+0xb3/0x1900 [ 609.510180][T13819] ? is_module_address+0x5f/0xf0 [ 609.510224][T13819] ? __pfx___register_sysctl_table+0x10/0x10 [ 609.510268][T13819] ? is_module_address+0x69/0xf0 [ 609.510308][T13819] ? register_net_sysctl_sz+0x228/0x3e0 [ 609.510342][T13819] ? nr_free_zone_pages+0xcf/0x210 [ 609.510386][T13819] ip_vs_control_net_init+0x1506/0x1d20 [ 609.510439][T13819] __ip_vs_init+0x217/0x520 [ 609.510483][T13819] ? __pfx___ip_vs_init+0x10/0x10 [ 609.510521][T13819] ops_init+0x1df/0x5f0 [ 609.510572][T13819] setup_net+0x1ff/0x510 [ 609.510599][T13819] ? lockdep_init_map_type+0x5c/0x280 [ 609.510639][T13819] ? __pfx_setup_net+0x10/0x10 [ 609.510669][T13819] ? debug_mutex_init+0x37/0x70 [ 609.510703][T13819] copy_net_ns+0x2a6/0x5f0 [ 609.510739][T13819] create_new_namespaces+0x3ea/0xa90 [ 609.510781][T13819] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 609.510815][T13819] ksys_unshare+0x45b/0xa40 [ 609.510854][T13819] ? __pfx_ksys_unshare+0x10/0x10 [ 609.510893][T13819] ? xfd_validate_state+0x61/0x180 [ 609.510941][T13819] __x64_sys_unshare+0x31/0x40 [ 609.510978][T13819] do_syscall_64+0xcd/0x490 [ 609.511025][T13819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.511054][T13819] RIP: 0033:0x7f4ba5d8e929 [ 609.511079][T13819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.511108][T13819] RSP: 002b:00007f4ba6bc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 609.511139][T13819] RAX: ffffffffffffffda RBX: 00007f4ba5fb5fa0 RCX: 00007f4ba5d8e929 [ 609.511159][T13819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 609.511176][T13819] RBP: 00007f4ba5e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 609.511193][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.511209][T13819] R13: 0000000000000000 R14: 00007f4ba5fb5fa0 R15: 00007ffd2eb92b18 [ 609.511249][T13819] [ 610.570626][T13841] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 611.536274][T13853] netlink: 338 bytes leftover after parsing attributes in process `syz.9.1681'. [ 612.003413][T13854] FAULT_INJECTION: forcing a failure. [ 612.003413][T13854] name fail_futex, interval 1, probability 0, space 0, times 0 [ 612.030771][T13854] CPU: 1 UID: 0 PID: 13854 Comm: syz.8.1680 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 612.030820][T13854] Tainted: [U]=USER [ 612.030830][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.030846][T13854] Call Trace: [ 612.030856][T13854] [ 612.030867][T13854] dump_stack_lvl+0x16c/0x1f0 [ 612.030914][T13854] should_fail_ex+0x512/0x640 [ 612.030959][T13854] get_futex_key+0x293/0x1540 [ 612.030996][T13854] ? find_held_lock+0x2b/0x80 [ 612.031024][T13854] ? __pfx_get_futex_key+0x10/0x10 [ 612.031059][T13854] ? __mutex_trylock_common+0xe9/0x250 [ 612.031106][T13854] futex_wake+0xea/0x530 [ 612.031150][T13854] ? __pfx_futex_wake+0x10/0x10 [ 612.031186][T13854] ? __lock_acquire+0xb8a/0x1c90 [ 612.031242][T13854] do_futex+0x1e3/0x350 [ 612.031277][T13854] ? __pfx_do_futex+0x10/0x10 [ 612.031310][T13854] ? __might_fault+0xe3/0x190 [ 612.031385][T13854] mm_release+0x24e/0x300 [ 612.031419][T13854] do_exit+0x68b/0x2bd0 [ 612.031467][T13854] ? __pfx_do_exit+0x10/0x10 [ 612.031504][T13854] ? do_raw_spin_lock+0x12c/0x2b0 [ 612.031545][T13854] ? find_held_lock+0x2b/0x80 [ 612.031583][T13854] do_group_exit+0xd3/0x2a0 [ 612.031633][T13854] get_signal+0x2673/0x26d0 [ 612.031671][T13854] ? __pfx___up_read+0x10/0x10 [ 612.031722][T13854] ? __pfx_get_signal+0x10/0x10 [ 612.031754][T13854] ? do_futex+0x122/0x350 [ 612.031789][T13854] ? __pfx_do_futex+0x10/0x10 [ 612.031829][T13854] arch_do_signal_or_restart+0x8f/0x790 [ 612.031864][T13854] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 612.031910][T13854] ? xfd_validate_state+0x61/0x180 [ 612.031945][T13854] ? __pfx_do_writev+0x10/0x10 [ 612.031990][T13854] exit_to_user_mode_loop+0x84/0x110 [ 612.032036][T13854] do_syscall_64+0x3f6/0x490 [ 612.032082][T13854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.032111][T13854] RIP: 0033:0x7f9e1998e929 [ 612.032135][T13854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.032163][T13854] RSP: 002b:00007f9e177f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 612.032192][T13854] RAX: fffffffffffffe00 RBX: 00007f9e19bb5fa8 RCX: 00007f9e1998e929 [ 612.032211][T13854] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e19bb5fa8 [ 612.032228][T13854] RBP: 00007f9e19bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 612.032246][T13854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e19bb5fac [ 612.032263][T13854] R13: 0000000000000000 R14: 00007ffe3e518280 R15: 00007ffe3e518368 [ 612.032302][T13854] [ 612.613797][T13871] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 613.328735][T13881] net_ratelimit: 77 callbacks suppressed [ 613.328758][T13881] netlink: zone id is out of range [ 613.407534][T13881] netlink: zone id is out of range [ 613.428626][T13881] netlink: zone id is out of range [ 613.437315][T13881] netlink: zone id is out of range [ 613.476073][T13881] netlink: zone id is out of range [ 613.517029][T13881] netlink: zone id is out of range [ 613.541838][T13881] netlink: zone id is out of range [ 613.547065][T13881] netlink: zone id is out of range [ 613.552400][T13881] netlink: zone id is out of range [ 613.557602][T13881] netlink: zone id is out of range [ 614.256391][T13890] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 615.576801][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1693'. [ 615.827558][T13909] block2mtd: illegal erase size [ 616.355482][T13923] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 617.140368][T13933] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 617.337374][T13938] vmstat_refresh: nr_hugetlb -14848 [ 618.115207][T13936] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1699'. [ 618.211205][T13936] vcan0: entered promiscuous mode [ 618.484669][T13949] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.989281][T13953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 619.001718][ T5817] udevd[5817]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 622.745368][T14005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 624.125273][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1723'. [ 624.152715][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722: 7 [ 624.183816][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722: 7 [ 624.210371][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722: 7 [ 624.250512][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722: 7 [ 624.269535][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722: 7 [ 624.319151][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722:  [ 624.390172][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722:  [ 624.410297][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722:  [ 624.418952][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722:  [ 624.480275][T14019] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.7.1722:  [ 626.484189][ T31] INFO: task syz-executor:5831 blocked for more than 143 seconds. [ 626.512230][ T31] Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 626.542389][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.570011][ T31] task:syz-executor state:D stack:23544 pid:5831 tgid:5831 ppid:1 task_flags:0x400140 flags:0x00004004 [ 626.608890][ T31] Call Trace: [ 626.621109][ T31] [ 626.624165][ T31] __schedule+0x116a/0x5de0 [ 626.639336][ T31] ? __lock_acquire+0x622/0x1c90 [ 626.659203][ T31] ? __pfx___schedule+0x10/0x10 [ 626.688965][ T31] ? find_held_lock+0x2b/0x80 [ 626.700027][ T31] ? schedule+0x2d7/0x3a0 [ 626.715013][ T31] schedule+0xe7/0x3a0 [ 626.719186][ T31] schedule_preempt_disabled+0x13/0x30 [ 626.750012][ T31] __mutex_lock+0x6c7/0xb90 [ 626.754641][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 626.778502][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 626.810182][ T31] ? net_generic+0xea/0x2a0 [ 626.814823][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 626.844843][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 626.885667][ T31] nfsd_umount+0x48/0xe0 [ 626.940042][ T31] deactivate_locked_super+0xc1/0x1a0 [ 626.945536][ T31] deactivate_super+0xde/0x100 [ 627.013226][ T31] cleanup_mnt+0x225/0x450 [ 627.030535][ T31] task_work_run+0x14d/0x240 [ 627.035234][ T31] ? __pfx_task_work_run+0x10/0x10 [ 627.054129][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 627.059700][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 627.075555][ T31] do_syscall_64+0x3f6/0x490 [ 627.084753][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.125157][ T31] RIP: 0033:0x7ffbeff8fc57 [ 627.129676][ T31] RSP: 002b:00007ffefb4b4618 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 627.150034][ T31] RAX: 0000000000000000 RBX: 00007ffbf0010925 RCX: 00007ffbeff8fc57 [ 627.158094][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefb4b46d0 [ 627.166679][ T31] RBP: 00007ffefb4b46d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.178322][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefb4b5760 [ 627.192289][ T31] R13: 00007ffbf0010925 R14: 0000000000071ee2 R15: 00007ffefb4b57a0 [ 627.213402][ T31] [ 627.220761][ T31] INFO: task syz.1.1252:11684 blocked for more than 144 seconds. [ 627.238996][ T31] Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 627.268356][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 627.302391][ T31] task:syz.1.1252 state:D stack:27464 pid:11684 tgid:11683 ppid:5833 task_flags:0x400140 flags:0x00004004 [ 627.350022][ T31] Call Trace: [ 627.353467][ T31] [ 627.367613][ T31] __schedule+0x116a/0x5de0 [ 627.377009][ T31] ? __lock_acquire+0x622/0x1c90 [ 627.387811][ T31] ? __pfx___schedule+0x10/0x10 [ 627.397711][ T31] ? find_held_lock+0x2b/0x80 [ 627.405803][ T31] ? schedule+0x2d7/0x3a0 [ 627.413586][ T31] schedule+0xe7/0x3a0 [ 627.425016][ T31] schedule_preempt_disabled+0x13/0x30 [ 627.439969][ T31] __mutex_lock+0x6c7/0xb90 [ 627.456114][ T31] ? nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 627.468908][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 627.479694][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 627.498223][ T31] ? nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 627.516867][ T31] nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 627.533919][ T31] ? rcu_is_watching+0x12/0xc0 [ 627.546822][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 627.586870][ T31] ? __nla_parse+0x40/0x60 [ 627.599296][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 627.608155][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 627.616034][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 627.622862][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 627.629130][ T31] ? rcu_is_watching+0x12/0xc0 [ 627.634550][ T31] ? bpf_lsm_capable+0x9/0x10 [ 627.639392][ T31] ? security_capable+0x7e/0x260 [ 627.644931][ T31] genl_rcv_msg+0x55c/0x800 [ 627.649579][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.655168][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 627.661618][ T31] netlink_rcv_skb+0x158/0x420 [ 627.666497][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.676597][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.682308][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 627.690262][ T31] genl_rcv+0x28/0x40 [ 627.694271][ T31] netlink_unicast+0x53a/0x7f0 [ 627.736443][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 627.748704][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 627.761160][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.787854][ T31] ____sys_sendmsg+0xa98/0xc70 [ 627.794590][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 627.815761][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.880103][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 627.914732][ T31] ? try_to_wake_up+0xa2f/0x1680 [ 627.924413][ T31] ___sys_sendmsg+0x134/0x1d0 [ 627.932722][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.942486][ T31] ? __lock_acquire+0x622/0x1c90 [ 627.950204][ T31] __sys_sendmsg+0x16d/0x220 [ 627.960327][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 627.965717][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 628.001388][ T31] do_syscall_64+0xcd/0x490 [ 628.011401][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.021593][ T31] RIP: 0033:0x7f913bb8e929 [ 628.029691][ T31] RSP: 002b:00007f91399f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.048559][ T31] RAX: ffffffffffffffda RBX: 00007f913bdb5fa0 RCX: 00007f913bb8e929 [ 628.056920][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000005 [ 628.090044][ T31] RBP: 00007f913bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 628.103109][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.117254][ T31] R13: 0000000000000000 R14: 00007f913bdb5fa0 R15: 00007fff10a25178 [ 628.130236][ T31] [ 628.140303][ T31] [ 628.140303][ T31] Showing all locks held in the system: [ 628.150574][ T31] 1 lock held by khungtaskd/31: [ 628.156802][ T31] #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 628.214684][ T31] 2 locks held by syz-executor/5831: [ 628.224940][ T31] #0: ffff8880257ca0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 628.242103][ T31] #1: ffffffff8e9ddd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 628.251952][ T31] 2 locks held by kworker/u10:13/9066: [ 628.257461][ T31] 5 locks held by kworker/u10:34/9904: [ 628.263343][ T31] 2 locks held by syz.3.1220/11557: [ 628.268588][ T31] #0: ffffffff903f2ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.277121][ T31] #1: ffffffff8e9ddd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 628.287493][ T31] 2 locks held by syz.1.1252/11684: [ 628.296067][ T31] #0: ffffffff903f2ab0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 628.308610][ T31] #1: ffffffff8e9ddd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 628.329132][ T31] 2 locks held by syz-executor/11786: [ 628.345000][ T31] #0: ffff88803f1200e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 628.436960][ T31] #1: ffffffff8e9ddd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 628.480220][ T31] 2 locks held by syz-executor/11865: [ 628.485668][ T31] #0: ffff8880323fe0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 628.501137][ T31] #1: ffffffff8e9ddd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 628.520184][ T31] 2 locks held by syz-executor/11888: [ 628.527013][ T31] #0: ffff88806fd5c0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 628.537961][ T31] #1: ffffffff8e9ddd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 628.560010][ T31] 2 locks held by syz.0.1458/12744: [ 628.565476][ T31] #0: ffff88807c1260e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 628.578565][ T31] #1: ffffffff8e9ddd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 628.600015][ T31] 2 locks held by getty/13010: [ 628.604847][ T31] #0: ffff888035b1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 628.629964][ T31] #1: ffffc90002ed62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 628.640598][ T31] 3 locks held by syz.8.1699/13959: [ 628.645848][ T31] 1 lock held by syz.8.1724/14043: [ 628.660139][ T31] [ 628.662547][ T31] ============================================= [ 628.662547][ T31] [ 628.680034][ T31] NMI backtrace for cpu 1 [ 628.680061][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 628.680104][ T31] Tainted: [U]=USER [ 628.680113][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.680130][ T31] Call Trace: [ 628.680139][ T31] [ 628.680150][ T31] dump_stack_lvl+0x116/0x1f0 [ 628.680200][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 628.680232][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 628.680273][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 628.680317][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 628.680355][ T31] watchdog+0xf70/0x12c0 [ 628.680404][ T31] ? __pfx_watchdog+0x10/0x10 [ 628.680442][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 628.680485][ T31] ? __kthread_parkme+0x19e/0x250 [ 628.680520][ T31] ? __pfx_watchdog+0x10/0x10 [ 628.680570][ T31] kthread+0x3c5/0x780 [ 628.680622][ T31] ? __pfx_kthread+0x10/0x10 [ 628.680665][ T31] ? rcu_is_watching+0x12/0xc0 [ 628.680694][ T31] ? __pfx_kthread+0x10/0x10 [ 628.680735][ T31] ret_from_fork+0x5d4/0x6f0 [ 628.680772][ T31] ? __pfx_kthread+0x10/0x10 [ 628.680811][ T31] ret_from_fork_asm+0x1a/0x30 [ 628.680858][ T31] [ 628.680870][ T31] Sending NMI from CPU 1 to CPUs 0: [ 628.813771][ C0] NMI backtrace for cpu 0 [ 628.813794][ C0] CPU: 0 UID: 0 PID: 13959 Comm: syz.8.1699 Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 628.813828][ C0] Tainted: [U]=USER [ 628.813835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.813847][ C0] RIP: 0010:stack_trace_consume_entry+0x0/0x170 [ 628.813878][ C0] Code: e8 65 81 14 00 e9 36 ff ff ff 49 c7 c4 ea ff ff ff eb c7 e8 a2 91 d5 09 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 c7 [ 628.813898][ C0] RSP: 0018:ffffc9002a9de5c0 EFLAGS: 00000286 [ 628.813917][ C0] RAX: ffffffff81a70c4e RBX: ffffc9002a9de5c8 RCX: ffffc9002a9de660 [ 628.813931][ C0] RDX: 1ffff9200553bcc2 RSI: ffffffff81a70c4e RDI: ffffc9002a9de688 [ 628.813945][ C0] RBP: ffffc9002a9de658 R08: 0000000000000001 R09: 0000000000000000 [ 628.813959][ C0] R10: 0000000000000000 R11: 00000000000061a9 R12: ffffffff81a708c0 [ 628.813973][ C0] R13: ffffc9002a9de688 R14: 0000000000000000 R15: ffff88801e375a00 [ 628.813986][ C0] FS: 00007f9e177d56c0(0000) GS:ffff888124760000(0000) knlGS:0000000000000000 [ 628.814009][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.814025][ C0] CR2: 00002000008ab000 CR3: 000000004156c000 CR4: 00000000003526f0 [ 628.814040][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 628.814052][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 628.814066][ C0] Call Trace: [ 628.814073][ C0] [ 628.814080][ C0] arch_stack_walk+0x88/0x100 [ 628.814117][ C0] ? stack_trace_save+0x8e/0xc0 [ 628.814142][ C0] stack_trace_save+0x8e/0xc0 [ 628.814164][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 628.814190][ C0] ? __lock_acquire+0x622/0x1c90 [ 628.814218][ C0] save_stack+0x160/0x1f0 [ 628.814247][ C0] ? __pfx_save_stack+0x10/0x10 [ 628.814294][ C0] __set_page_owner+0x91/0x550 [ 628.814326][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 628.814362][ C0] post_alloc_hook+0x1c0/0x230 [ 628.814392][ C0] get_page_from_freelist+0x1321/0x3890 [ 628.814428][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 628.814452][ C0] ? rcu_is_watching+0x12/0xc0 [ 628.814475][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 628.814507][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 628.814539][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 628.814570][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 628.814600][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 628.814629][ C0] ? find_held_lock+0x2b/0x80 [ 628.814653][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 628.814678][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.814708][ C0] ? policy_nodemask+0xea/0x4e0 [ 628.814729][ C0] alloc_pages_mpol+0x1fb/0x550 [ 628.814750][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 628.814775][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 628.814805][ C0] shmem_alloc_folio+0x135/0x160 [ 628.814831][ C0] shmem_alloc_and_add_folio+0x499/0xc20 [ 628.814865][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 628.814896][ C0] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 628.814929][ C0] shmem_get_folio_gfp+0x67f/0x1600 [ 628.814963][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 628.814993][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 628.815019][ C0] shmem_write_begin+0x160/0x300 [ 628.815049][ C0] ? find_held_lock+0x2b/0x80 [ 628.815068][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 628.815098][ C0] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 628.815123][ C0] ? __pfx_timestamp_truncate+0x10/0x10 [ 628.815156][ C0] generic_perform_write+0x3d0/0x930 [ 628.815191][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 628.815220][ C0] ? inode_needs_update_time.part.0+0x191/0x270 [ 628.815257][ C0] shmem_file_write_iter+0x10e/0x140 [ 628.815290][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 628.815310][ C0] __kernel_write_iter+0x317/0xa90 [ 628.815342][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 628.815370][ C0] ? __up_read+0x1f8/0x750 [ 628.815402][ C0] ? dump_user_range+0x745/0xb60 [ 628.815430][ C0] dump_user_range+0x41f/0xb60 [ 628.815458][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 628.815483][ C0] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 628.815516][ C0] ? __pfx_writenote+0x10/0x10 [ 628.815548][ C0] elf_core_dump+0x288a/0x3a90 [ 628.815584][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 628.815609][ C0] ? kasan_save_stack+0x42/0x60 [ 628.815638][ C0] ? kasan_save_stack+0x33/0x60 [ 628.815665][ C0] ? kasan_save_track+0x14/0x30 [ 628.815693][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 628.815720][ C0] ? do_coredump+0x1c9a/0x4f10 [ 628.815741][ C0] ? get_signal+0x22e3/0x26d0 [ 628.815763][ C0] ? arch_do_signal_or_restart+0x8f/0x790 [ 628.815792][ C0] ? 0xffffffffff600000 [ 628.815845][ C0] ? do_coredump+0x399f/0x4f10 [ 628.815866][ C0] do_coredump+0x399f/0x4f10 [ 628.815896][ C0] ? __pfx_do_coredump+0x10/0x10 [ 628.815919][ C0] ? find_held_lock+0x2b/0x80 [ 628.815940][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 628.815971][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 628.815994][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 628.816021][ C0] ? kernel_text_address+0x8d/0x100 [ 628.816052][ C0] ? __kernel_text_address+0xd/0x40 [ 628.816081][ C0] ? unwind_get_return_address+0x59/0xa0 [ 628.816125][ C0] ? stack_depot_save_flags+0x28/0xa40 [ 628.816157][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 628.816185][ C0] ? kasan_save_stack+0x42/0x60 [ 628.816211][ C0] ? kasan_save_stack+0x33/0x60 [ 628.816238][ C0] ? kasan_save_track+0x14/0x30 [ 628.816265][ C0] ? kasan_save_free_info+0x3b/0x60 [ 628.816295][ C0] ? __kasan_slab_free+0x51/0x70 [ 628.816324][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 628.816350][ C0] ? __sigqueue_free+0xba/0x2a0 [ 628.816376][ C0] ? get_signal+0xcba/0x26d0 [ 628.816396][ C0] ? arch_do_signal_or_restart+0x8f/0x790 [ 628.816448][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 628.816473][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 628.816503][ C0] ? rcu_is_watching+0x12/0xc0 [ 628.816526][ C0] get_signal+0x22e3/0x26d0 [ 628.816557][ C0] ? __pfx_get_signal+0x10/0x10 [ 628.816580][ C0] ? rcu_is_watching+0x12/0xc0 [ 628.816600][ C0] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 628.816634][ C0] arch_do_signal_or_restart+0x8f/0x790 [ 628.816657][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 628.816694][ C0] irqentry_exit_to_user_mode+0x12a/0x270 [ 628.816727][ C0] asm_exc_page_fault+0x26/0x30 [ 628.816749][ C0] RIP: 0033:0x402000 [ 628.816764][ C0] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 628.816784][ C0] RSP: 002b:0000000000000089 EFLAGS: 00010246 [ 628.816801][ C0] RAX: 0000000000000000 RBX: 00007f9e19bb6080 RCX: 00007f9e1998e929 [ 628.816815][ C0] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000002 [ 628.816828][ C0] RBP: 00007f9e19a10b39 R08: 0000000000000003 R09: 0000000000000000 [ 628.816841][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.816854][ C0] R13: 0000000000000000 R14: 00007f9e19bb6080 R15: 00007ffe3e518368 [ 628.816876][ C0] [ 629.529573][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 629.536495][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 629.549931][ T31] Tainted: [U]=USER [ 629.553776][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.563875][ T31] Call Trace: [ 629.567188][ T31] [ 629.570157][ T31] dump_stack_lvl+0x3d/0x1f0 [ 629.574826][ T31] panic+0x71c/0x800 [ 629.578791][ T31] ? __pfx_panic+0x10/0x10 [ 629.583267][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 629.588702][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 629.594737][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 629.600157][ T31] ? watchdog+0xdda/0x12c0 [ 629.604609][ T31] ? watchdog+0xdcd/0x12c0 [ 629.609061][ T31] watchdog+0xdeb/0x12c0 [ 629.613344][ T31] ? __pfx_watchdog+0x10/0x10 [ 629.618055][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 629.623291][ T31] ? __kthread_parkme+0x19e/0x250 [ 629.628358][ T31] ? __pfx_watchdog+0x10/0x10 [ 629.633079][ T31] kthread+0x3c5/0x780 [ 629.637188][ T31] ? __pfx_kthread+0x10/0x10 [ 629.641904][ T31] ? rcu_is_watching+0x12/0xc0 [ 629.646713][ T31] ? __pfx_kthread+0x10/0x10 [ 629.651349][ T31] ret_from_fork+0x5d4/0x6f0 [ 629.655974][ T31] ? __pfx_kthread+0x10/0x10 [ 629.660616][ T31] ret_from_fork_asm+0x1a/0x30 [ 629.665437][ T31] [ 629.668619][ T31] Kernel Offset: disabled [ 629.673036][ T31] Rebooting in 86400 seconds..