last executing test programs: 5m54.758059422s ago: executing program 1 (id=3858): mmap$auto(0xfffffffffffffff8, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x90) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m53.780341018s ago: executing program 1 (id=3861): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x4, 0xfffffffc, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/nvme-wq/nice\x00', 0x2062, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x1, 0x2020009, 0x3, 0x1c, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x5, 0xffffffffffffffff, 0x5, 0x9b72, 0xffffffffffffffff, 0x5) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 5m53.282926325s ago: executing program 1 (id=3863): mmap$auto(0x0, 0x3ff, 0x1df, 0x11, 0x2, 0xfc9) prctl$auto(0x3e, 0x1, 0x0, 0x10001, 0x4) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card1/pcm0c/sub3/status\x00', 0x0, 0x0) sync_file_range$auto(r0, 0x1d, 0xfffffffffffffff8, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x200010c0bf55, 0x0, 0xdf, 0x9b72, 0x2, 0x3) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/sw\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001600)=""/4098, 0x1002) ioperm$auto(0xdb, 0x9, 0x10000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffc, &(0x7f00000002c0)={0x0, 0xfd2}, 0xee87, 0x0, 0x4000000000406, 0x4ef8}, 0x800}, 0x3, 0x4018) r2 = socket(0x29, 0x2, 0x0) r3 = socket(0x3, 0x2, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000d8a9", @ANYRES64=0x0, @ANYRES16=r2], 0x1ac}}, 0x0) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x89f1, 0x24) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1\xcb\b\xd7lW\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C\x15\xc4D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x91\xc1\xef(,\b\x83\xf1I\'Z:\x8d\xa0o\xf3\xe0\xb4R\x18\xec\x05\x89[\xfd\xa8\xef[\xe6\xe4*f\xfa\xe9\b\xec t\x95\xf8A\xc1\xa9YVA\x80\xd4I)G\xd9\xffz\x1e/\xd4\xfd\x1e\xdf\xf6\xe6\x95\"q\x80\x8a\xab\xb2\x99\xff\x96c+\x8b\xb6\x11\x95\x02\xf1K\x12\xcb\xaa\\Q\xb1\xd7\xe4\xaaP\b\xc6a\xbf\xed\xfa b\x1d\xde\x13)E\xf8\xa0\xc0I\xba&\xac\x17\x0f\xd3k\x1a\xfc?\x7f\x8f\xa7\xd7\xfc\x11\xc6\xb8\xe1l\x8b\xfbN\x02\x16u\xdb\xee\xbdYN$\x9c&\xa0^K\v\xfd\xdd\xc1\xfe\xcd\xb1\f\x8f^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x86\xdf\x98\xaf\x8a\x19%\xce\x8e*qIOR\x04\"\xb0\xfaV\xde/5H\xeb\x1aW*\x82J\xa2\x0f_+;_\xfb\x02\xab\xe2A\xe2z\xeab\xc7\xc4\xed(\xeaQM\xeb\x83(Nx\xa9\xed[c\xf2\xb9\r\x8b=o\xb5\x15\xb8\x1b\x8aO\xe1\xa9\xedk\xac\t\xae\x8c\x95K\xe1\xbf\xfb\xecqc\x16\x0f\x0f\xf9\xe3uZ\xc8\xf3\x94\x1d\t\x00\x00\x00\x00\x00\x00\x00\xbc\xc5\xac\xfc_\x18a\xcd\xc3z%\xf5?\xab\xe1\xd0WD:\x12\xba\xcd\xf8\xd5\xa1j\xba\v b\x92m\x8c\xae\x9c^\xcd\x127,u\xf5U\xd6\xd7.X\x9e\x9e\xfb\xa8\x1f\xf2\xf8\x04\xc0\xa7w\xf4\x02\xe3\xc7K\xa6\xc9\xea\x88\x94\xb6\xcb&\xddx\xf6!D\xcc\xe2\xe9\xea\x043\x16C\xd9\x7f:\x81\xd8\x83\xb3;T\xeaH\x92\xbf\x10j\b\xf2\xe7\xc5}\x0e\xb0?\x89\xc5Bu\xf0\x03\xa1,\xb6\xef\x04\x04\x85\x13m\xb6\a\xce\xfb\xf1\x00\xc2\x038h\xf3\xe8\xfcp\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe01K\x81\xc5\x89u\xaf\x03\xd1\xd9\x97G \x8f\xb5\x9f\xea=K\xdb3\xad\\\xbb\x80\xf0\xe4\x17 \xf6\xc9\xfe>\xcf\xe9T\x1a\x82\x1fi\xfe\xcf\xdd\xd8O\x85E\xe1H\xc2\x96\x1e\xc6?t\xec\x9c\x1a\':\xd5\x89\x9f\xc9rSk\x96`\x19\x96\xd8xO\xa7+\xefB\x10\xab\xe0\xdf\x8e\':\xca\xe4v.3\xf6\'G\xff\xee\xfdT\xd9>4\xc3\x8c\x1aNZM\x87\x9c$\x8b \xe5\xbf\f\xa1\x7f0\xccLQ\xc38\xe4\x8c+\xa6\x19@\x9f\x136', 0x100000a3d5) madvise$auto(0xa7, 0xffffffffffff0001, 0x15) r4 = socket(0x1e, 0x1, 0x0) connect$auto(r4, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x2}, 0x10) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_CQM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[], 0x1260}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media4\x00', 0x236280, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="50170000", @ANYRES64=r2, @ANYRES8, @ANYRES64, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYBLOB="00022cbd7000fbdbdf2520000000"], 0x1750}, 0x1, 0x0, 0x0, 0x1}, 0x404c0d1) sendmmsg$auto(r5, 0x0, 0x2, 0x8001) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) 5m52.294949569s ago: executing program 1 (id=3867): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) prctl$auto(0x3e, 0x5, 0x0, 0x218, 0x0) prctl$auto(0x3e, 0x0, 0x0, 0x0, 0x80000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0xfffffffffffffffe, 0xe980, 0xdf, 0xeb1, 0x401, 0x8004) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x801, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r4 = epoll_create$auto(0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) epoll_ctl$auto(0x5, 0x3, r5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0xffffffffffffff66) brk$auto(0x8000000000000000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$auto_evm_xattr_ops_evm_secfs(r4, &(0x7f0000000140)="eb1cc27ef2fbbbd69a80b4d4a37b899c7fc3a374f09c87827f50117b7ff5c3f6047fe6c805ba9f1b6dea10c85f89a8ed8c", 0x31) 5m51.358588471s ago: executing program 1 (id=3872): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x7fff) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80202, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fchown$auto(0xffffffffffffffff, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setresgid$auto(0x81, 0x800000a0, 0x8) mmap$auto(0x400, 0x400008, 0xdf, 0x9b72, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)="191db3e65bd6cbae7dc9040000000012c80901000092c6cc246b9fa7d9c150a639b4a37a9d48a5ced9a820259025dd904b4ab2e9dd0800e0075964d2a51473afa7df809652607200638cbed759f01895b1288315f20d8a260f887cd098806bdac95b54fd198e9896e79794899e2e0ca2a36bc12a7d031655f37f80d4e060b4291cbe768df599000cb0bc0dee90de89a7445dc42e957618b2d2a2b86975aab387ae295b5a9d552cc6f945712d9fc0996dace4ee61867070da97800e9306a8b9d81d246f4fa5f8d92427a92339e1") fsconfig$auto(r1, 0x4c885f29, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x7) ioctl$auto(0x3, 0x4602, 0xfffffffffffff4e0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) r2 = ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x5dd) mmap$auto(0xfffffffffffffffc, 0x3, 0xfe, 0x1b, r2, 0x7ffffffd) r3 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0) 5m50.070141741s ago: executing program 1 (id=3878): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000010) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x105182, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x519c41, 0x0) ioctl$auto(r1, 0x4b6a, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd14\x00', 0x8001, 0x0) personality$auto(0xfffffffc) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r2 = socket(0x2b, 0x1, 0x0) rt_sigqueueinfo$auto(0x0, 0x1, 0x0) prctl$auto(0xf, 0x49, 0x0, 0x4, 0x3) mmap$auto(0x8, 0xe983, 0xdf, 0x100000000000016, 0xffffffffffffffff, 0x7ffd) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0xfffffff8, 0x1, 0x4, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) ioctl$auto(r3, 0xc0045627, r2) socket(0x10, 0x2, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 5m35.014049892s ago: executing program 32 (id=3878): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x1, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000010) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x105182, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x519c41, 0x0) ioctl$auto(r1, 0x4b6a, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd14\x00', 0x8001, 0x0) personality$auto(0xfffffffc) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r2 = socket(0x2b, 0x1, 0x0) rt_sigqueueinfo$auto(0x0, 0x1, 0x0) prctl$auto(0xf, 0x49, 0x0, 0x4, 0x3) mmap$auto(0x8, 0xe983, 0xdf, 0x100000000000016, 0xffffffffffffffff, 0x7ffd) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0xfffffff8, 0x1, 0x4, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) ioctl$auto(r3, 0xc0045627, r2) socket(0x10, 0x2, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 46.573025999s ago: executing program 3 (id=4766): mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x55, 0x8, 0x30a, 0x9b73, 0x2, 0x2) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r0, 0x0, 0xfffffde9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x1ff, 0x5, 0x10000003, 0x9b72, r0, 0x9) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) socket(0x1f, 0x800, 0xffffff01) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) writev$auto(r1, &(0x7f00000000c0)={&(0x7f0000000080), 0x8}, 0x94) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0xe983, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000000), 0x5af, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106004003000000005f6bba4418", 0x48}, 0x5, 0x0, 0x5}, 0x10020}, 0x48, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/026/001\x00', 0x3c9000, 0x0) shutdown$auto(0xffffffffffffffff, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) 46.251874998s ago: executing program 3 (id=4768): mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) (fail_nth: 3) 45.803451385s ago: executing program 3 (id=4770): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) write$auto(r4, 0x0, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r6, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r2, 0x3) setsockopt$auto(r1, 0x6, 0x1021, 0x0, 0xc0000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) 43.818985543s ago: executing program 3 (id=4772): r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r6, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) madvise$auto(0x0, 0x8, 0x6) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r4, &(0x7f0000001400)="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", 0xfffff596, &(0x7f0000000180)="72e22ea0fea4bee7dbe47b44d2673fc4c6511ba51e9b764ac761664f7ee224475585f2f9879d325d6839c67f4225c622d6a013ae90333c24b8290ea986762d351218d8190e6517b85be42ce75c967897392c3ac20c0be0c557b1bf5d629829950fcb88945b758cdc5b8ea2fc6b082b709bd04846ff375c0f3e6b77fc373dd306009522", 0x5, &(0x7f0000000240)="e98d4fdb7ddab4e567ef3519ef0a3819d29b44a27fdaf919278950455925e516a151d3d40301ba963cd5cb744a39f2f9029d5ad58d1736a6344ec5ba7bd8c2bafa4d1baeb19336ed4994be3649d8df129bbdfd74a14bba07cfdcd92ac00916b1b5d240000946cd793aba9ea2ce11bc53a7e4dbb10de9d4ca0b8879d480dfc68f9ec73eb55f2368b108a9a4ad4d29", &(0x7f00000000c0)=0x3}) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000800)={0x50c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4f4, 0x1, 0x0, 0x1, [@nested={0x4ef, 0x2f, 0x0, 0x1, [@typed={0x7d, 0x122, 0x0, 0x0, @binary="3ee6e53c4c07ea5d20478f32b73dab93bda17a38691d14cc7389d7c01028c43754a4fb5f8a12d6b77f0cde3683abeb97f5bc35d14655c93dec83474ae0e23bc53f9ad75829e2b91ff11ac72fef15a647d6cccb3152fc263d3ebc8588a7c6dfef87cbec3a9363e1a83299887f7475c25579dcaa6f4489de4978"}, @generic="2b4d02edce816134154a0f50376a72eb39", @nested={0x4, 0xf7}, @generic="2bb6aff7fd45", @nested={0x450, 0x126, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @fd=r7}, @nested={0x186, 0x13, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xf3, 0x35, 0x0, 0x1, [@generic="251833cbb52fb6e9a8a6c734d4b32e43485e1a777ff5d38ae7d38b165bdd0ada0d5fc84472c2824af615a5b9c9d4aef4847e6cd61f302c4c84d37c389d4aee42df3fde39d2471c974947269cd1e3e1fffd060286f1ef42c152732bc0e76652410a1b3faef2f661b3a01f96e963498e7e1680995aee71840cb8d56a573fccee540455ff19054a0bdc0e49fdb498bd369ace53d516de6b953bc1400b740fdbfd09863a8396786acc83b46f8af0a99ceedc581d0507f2ddfbfc3128e82296efda855e3c5c83606a8f8988ff87fc7d7366e2a4fa16d2fe496f8132cc740e20bd90d5de040e0989894a3b4ef44c9f4eb834"]}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xe6}, @typed={0x8, 0x20, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xc}, @generic="0f9d32d5079945ea8a0cbbfc8e5b5525d7e700d590fa4fb163be94295eb78970aa03c852df55ae144d3878d262da8fe7b20303dd048578017a985e4b453fd5238d53f95e41baf72169f537cb8afadd1818d300546a8674b85db33b6cb8e32f0d1a914f4b19ae0331beba", @nested={0x4, 0x2e}]}, @generic="34ffd86410324c53d21c1e5e71647d80bcc4a7d8049c8b174ab4269dcbd30585966befea69c7694d5c07d4029f4ede2ad39ce9cbb64e4f5fc72c5be01b4bf8c64da0bc6ff9f6f22b2cd76c796348536cef4e98d87d9d79b8bf4c56fa711ed70705bfe691e6b5e21c6962732f", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @nested={0x222, 0x8e, 0x0, 0x1, [@nested={0x4, 0x147}, @nested={0x4, 0x28}, @generic="bd6fb101464d18c26d462f7cc40384c8faefc4c11fd20df3bdecba20b6e0f9dff72c2e1c07912a62bdb2fc5add76ba15b437119b304ea69c543fba932fdaa8fd33929d2101975ad38b510edf06007ca73a", @typed={0x8, 0x25, 0x0, 0x0, @fd=r4}, @nested={0xda, 0xd4, 0x0, 0x1, [@generic="c8d2353bf77920fc118752a1fef9214dc92f6f940c108198f1e666bcfbd0412f068ec7c442ef00c9037cbdf37f63fb685e3e2d28478ade0a3944ca88463779088714543cf9a9129f3cfd79e098b4c24900c95d98b615ac51ae4ad59acb164b53cc9ca395de973c174d53a79924400a17664f7f68d784e8e32ee51896956791ddea5bf0ea036fd48e0e62bdee7d8b71876fdc399b27d93cf9ea324de304cf7c698166784f4a47376ca307e6561e7af75045d5502cdd5d4f15d92145b0657aac87ab7006ec4a6c8266a3628e880890bdce739d85ef12be"]}, @generic="f87b9416806f64201a21270c0a3ff7b336f58a7b0b9018d9560bfbec945affd5dac9331511c6a463d7751882550b5a973531d670d3b1fabd9be47f231020225ee5c38bbc151f79175b29ad35f552640060228b90ef7e72a5eb3b7cfe4e604e302772050613d65a1983c85d091fbfd199cd7ac46da186efa6a0664282478ee3a362fc98609d7df18cfd5580a36e94eaaff631d7edc5e37b304de9cc2fa44fa1e7c01884a61f368712fb1ccebda65ea228e863f2ce24305412cee7907118a7134d26f019072232c5778fa5ae86c2ffefe2d0fa0cc82a3e32a2fbdd8841b26f3a0f2c"]}, @typed={0xc, 0xec, 0x0, 0x0, @u64}, @nested={0x9, 0x56, 0x0, 0x1, [@generic="382fc93a8d"]}]}]}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r8 = socket(0x15, 0x5, 0x0) read$auto(0x3, 0x0, 0xfffffffffffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto_PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)=0xffffffff) ustat$auto(0x801, 0x0) sendmsg$auto(r8, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/config.gz\x00', 0xc0880, 0x0) read$auto(r9, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x5, 0x5, 0xff, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x1000000000800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x23c, 0x0, 0x2, 0x0, 0x2000000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x82) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r10, 0x0, 0x3, 0x5) 40.517408688s ago: executing program 3 (id=4776): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x8, 0x4, 0xde, 0xeb2, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000501fdb1c6b18e55a4d2890ad70c03f79f49d1e7be452ea6619f9453f6ba2a27ad3d02e667430c059c07c31eadb5ddffaa2708378feb090a0c7407658fd88cadfd5fdc3311cafb03870f7d73d84b6e6d71b0751cdb22752c596e54fa6c9b0cd4d1630f56bf1a1165960a3473322cc3d218d350875e5c16f13842a900917ca0b9ce2ba1f234031b593", @ANYRESOCT=r1, @ANYBLOB="20132cbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYBLOB="c067d908bef4538065b6314c72c816b795963c4f6380533ae57c4f14d7da0ed10c985d298bec836c40f6139608968ec95ab1ba9a37142b11e701dc0cea9ec78c48ccf56e1e663be98c86fedc95d4bd97dc14a24ef00d62621f6e92333734f95b8a9a2f6a3331716627354010f37089ec30c80e0023fce21de62b0d44c10da42f167d04340be53c2d0032c655091a692434", @ANYRESOCT=0x0, @ANYBLOB="3b60981c258aef0470855595c9a07487", @ANYRESHEX, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x7ffffffd, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x40dc) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x61cac0, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae41, r5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$auto(0x3, 0xae41, r3) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, 0x0, 0xf72, 0x0) prctl$auto(0x1000000003b, 0x2007, 0x4, 0x5, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) 38.611535726s ago: executing program 3 (id=4779): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) write$auto(r4, 0x0, 0x5) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r7, 0x8000) open_by_handle_at$auto(r5, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r1, 0x6, 0x1021, 0x0, 0xc0000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r8, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) 28.201897615s ago: executing program 4 (id=4795): r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r6, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) madvise$auto(0x0, 0x8, 0x6) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r4, &(0x7f0000001400)="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", 0xfffff596, &(0x7f0000000180)="72e22ea0fea4bee7dbe47b44d2673fc4c6511ba51e9b764ac761664f7ee224475585f2f9879d325d6839c67f4225c622d6a013ae90333c24b8290ea986762d351218d8190e6517b85be42ce75c967897392c3ac20c0be0c557b1bf5d629829950fcb88945b758cdc5b8ea2fc6b082b709bd04846ff375c0f3e6b77fc373dd306009522", 0x5, &(0x7f0000000240)="e98d4fdb7ddab4e567ef3519ef0a3819d29b44a27fdaf919278950455925e516a151d3d40301ba963cd5cb744a39f2f9029d5ad58d1736a6344ec5ba7bd8c2bafa4d1baeb19336ed4994be3649d8df129bbdfd74a14bba07cfdcd92ac00916b1b5d240000946cd793aba9ea2ce11bc53a7e4dbb10de9d4ca0b8879d480dfc68f9ec73eb55f2368b108a9a4ad4d29", &(0x7f00000000c0)=0x3}) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000800)={0x50c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4f4, 0x1, 0x0, 0x1, [@nested={0x4ef, 0x2f, 0x0, 0x1, [@typed={0x80, 0x122, 0x0, 0x0, @binary="3ee6e53c4c07ea5d20478f32b73dab93bda17a38691d14cc7389d7c01028c43754a4fb5f8a12d6b77f0cde3683abeb97f5bc35d14655c93dec83474ae0e23bc53f9ad75829e2b91ff11ac72fef15a647d6cccb3152fc263d3ebc8588a7c6dfef87cbec3a9363e1a83299887f7475c25579dcaa6f4489de497816a6b3"}, @generic="2b4d02edce816134154a0f50376a72eb39", @nested={0x4, 0xf7}, @generic="2bb6aff7fd45", @nested={0x450, 0x126, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @fd=r7}, @nested={0x186, 0x13, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xf3, 0x35, 0x0, 0x1, [@generic="251833cbb52fb6e9a8a6c734d4b32e43485e1a777ff5d38ae7d38b165bdd0ada0d5fc84472c2824af615a5b9c9d4aef4847e6cd61f302c4c84d37c389d4aee42df3fde39d2471c974947269cd1e3e1fffd060286f1ef42c152732bc0e76652410a1b3faef2f661b3a01f96e963498e7e1680995aee71840cb8d56a573fccee540455ff19054a0bdc0e49fdb498bd369ace53d516de6b953bc1400b740fdbfd09863a8396786acc83b46f8af0a99ceedc581d0507f2ddfbfc3128e82296efda855e3c5c83606a8f8988ff87fc7d7366e2a4fa16d2fe496f8132cc740e20bd90d5de040e0989894a3b4ef44c9f4eb834"]}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xe6}, @typed={0x8, 0x20, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xc}, @generic="0f9d32d5079945ea8a0cbbfc8e5b5525d7e700d590fa4fb163be94295eb78970aa03c852df55ae144d3878d262da8fe7b20303dd048578017a985e4b453fd5238d53f95e41baf72169f537cb8afadd1818d300546a8674b85db33b6cb8e32f0d1a914f4b19ae0331beba", @nested={0x4, 0x2e}]}, @generic="34ffd86410324c53d21c1e5e71647d80bcc4a7d8049c8b174ab4269dcbd30585966befea69c7694d5c07d4029f4ede2ad39ce9cbb64e4f5fc72c5be01b4bf8c64da0bc6ff9f6f22b2cd76c796348536cef4e98d87d9d79b8bf4c56fa711ed70705bfe691e6b5e21c6962732f", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @nested={0x222, 0x8e, 0x0, 0x1, [@nested={0x4, 0x147}, @nested={0x4, 0x28}, @generic="bd6fb101464d18c26d462f7cc40384c8faefc4c11fd20df3bdecba20b6e0f9dff72c2e1c07912a62bdb2fc5add76ba15b437119b304ea69c543fba932fdaa8fd33929d2101975ad38b510edf06007ca73a", @typed={0x8, 0x25, 0x0, 0x0, @fd=r4}, @nested={0xda, 0xd4, 0x0, 0x1, [@generic="c8d2353bf77920fc118752a1fef9214dc92f6f940c108198f1e666bcfbd0412f068ec7c442ef00c9037cbdf37f63fb685e3e2d28478ade0a3944ca88463779088714543cf9a9129f3cfd79e098b4c24900c95d98b615ac51ae4ad59acb164b53cc9ca395de973c174d53a79924400a17664f7f68d784e8e32ee51896956791ddea5bf0ea036fd48e0e62bdee7d8b71876fdc399b27d93cf9ea324de304cf7c698166784f4a47376ca307e6561e7af75045d5502cdd5d4f15d92145b0657aac87ab7006ec4a6c8266a3628e880890bdce739d85ef12be"]}, @generic="f87b9416806f64201a21270c0a3ff7b336f58a7b0b9018d9560bfbec945affd5dac9331511c6a463d7751882550b5a973531d670d3b1fabd9be47f231020225ee5c38bbc151f79175b29ad35f552640060228b90ef7e72a5eb3b7cfe4e604e302772050613d65a1983c85d091fbfd199cd7ac46da186efa6a0664282478ee3a362fc98609d7df18cfd5580a36e94eaaff631d7edc5e37b304de9cc2fa44fa1e7c01884a61f368712fb1ccebda65ea228e863f2ce24305412cee7907118a7134d26f019072232c5778fa5ae86c2ffefe2d0fa0cc82a3e32a2fbdd8841b26f3a0f2c"]}, @typed={0xc, 0xec, 0x0, 0x0, @u64}, @nested={0x9, 0x56, 0x0, 0x1, [@generic="382fc93a8d"]}]}]}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r8 = socket(0x15, 0x5, 0x0) read$auto(0x3, 0x0, 0xfffffffffffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto_PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)=0xffffffff) ustat$auto(0x801, 0x0) sendmsg$auto(r8, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/config.gz\x00', 0xc0880, 0x0) read$auto(r9, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x5, 0x5, 0xff, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x1000000000800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x23c, 0x0, 0x2, 0x0, 0x2000000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x82) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r10, 0x0, 0x3, 0x5) 26.038087807s ago: executing program 4 (id=4805): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) write$auto(r3, 0x0, 0x5) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r1, 0x3) open_by_handle_at$auto(r4, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r0, 0x6, 0x1021, 0x0, 0xc0000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) 23.855373315s ago: executing program 4 (id=4800): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) write$auto(r4, 0x0, 0x5) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r2, 0x3) open_by_handle_at$auto(r5, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r1, 0x6, 0x1021, 0x0, 0xc0000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) 22.208162608s ago: executing program 4 (id=4802): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon8\x00', 0x881, 0x0) ioctl$auto_MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0, 0x4}) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000001c0)=@bpf_attr_4={0x4, r0, 0x80000001, r0}, 0x4) mmap$auto(0x0, 0xc1, 0xb, 0x2000000eb1, r1, 0x7fff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/swradio11/dev\x00', 0x200, 0x0) read$auto(r2, 0x0, 0x1) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2503000000040008"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x800) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/latency-format\x00', 0x121282, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) 21.962595102s ago: executing program 4 (id=4803): select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x0, 0x9, 0x7, 0xffffffff}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) read$auto(0x3, 0x0, 0x7) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 21.176539787s ago: executing program 4 (id=4807): select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x0, 0x9, 0x7, 0xffffffff}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) read$auto(0x3, 0x0, 0x7) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 19.966503095s ago: executing program 0 (id=4809): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000300)={{0xa, 0x80000001, 0x1, 0x1, 0x3, [0x4, 0x400, 0x6ea, 0x4, 0x2]}, [{0x9, 0x5, 0xe, 0x3}, {0x1, 0x4, 0xfb, 0x80}]}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40090}, 0x40090) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10018, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) read$auto_dvb_dvr_fops_dmxdev(r2, &(0x7f0000000240)=""/138, 0x8a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 18.876412804s ago: executing program 0 (id=4811): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) arch_prctl$auto(0x1025, 0x12) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) 17.892130588s ago: executing program 0 (id=4819): r0 = getpgid(0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) write$auto(r1, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xd3\x11\x8b^', 0x100000a3db) mmap$auto(0x0, 0x10008, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r2, 0x4018bc13, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r0, 0x9, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) capset$auto(&(0x7f0000000040)={0x533, 0x0}, &(0x7f0000000080)={0xb, 0x29e7, 0xef9b}) ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x5, 0xffffffffffffffff}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) ioctl$auto_BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000480)=0x302) r6 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$auto_KCMP_FILE(r0, r3, 0x0, r4, r6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10018, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}}, 0x50) 17.72999026s ago: executing program 0 (id=4821): r0 = getpgid(0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) write$auto(r1, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xd3\x11\x8b^', 0x100000a3db) mmap$auto(0x0, 0x10008, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r2, 0x4018bc13, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r0, 0x9, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) capset$auto(&(0x7f0000000040)={0x533, 0x0}, &(0x7f0000000080)={0xb, 0x29e7, 0xef9b}) ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x5, 0xffffffffffffffff}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) ioctl$auto_BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000480)=0x302) r6 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$auto_KCMP_FILE(r0, r3, 0x0, r4, r6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x10018, 0xdf, 0xeb1, 0x40000000000a5, 0x808000) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}}, 0x50) 17.547450234s ago: executing program 0 (id=4814): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000400)={0x50c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SAE_PASSWORD={0x20, 0x115, "f53de6e2c407ed0fea0d1402f33266b2796153a497d802b30a638288"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x100}, @NL80211_ATTR_MBSSID_CONFIG={0x14, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xf}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_TID_CONFIG={0x2c0, 0x11d, 0x0, 0x1, [{0x2a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a4, 0xd, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0xc4, 0x5, "854a309adca4992cf44232a45df7b4ba9c8bc15b5c64e91abd9eb2a5fb2168924cc3cf0545751251af65c627eb70fa347d29169355a72f55b4d40897470683e6e5013ead698c7133c185d181e39c7b728cf71041f08bd85c4df2cc360149acac93e68a6b1882a0bbabd49739f920109bb6cf16c9824de8fee29128bf87d0f7b5c3645ad766ea5787ed0bf6ee45cc7944ce97febbabcdb842c37d2d133456457154c7d13f586106f8d21d94bfd2dd0804614a6f43e3058e7b665b30bd9b491067"}, @NL80211_TXRATE_VHT={0xb1, 0x3, "5fbc3099c39541c522157069b7042eac8fe7d4841fddcda14e1c2a6cf46b1658d1c9a1630d0cd840551da7d0b6d2f0ba2eb6e93940d8cf7242f18f29e7a4192543c00958fbbfdfc492ed9738ca48265c1414519988e9c13b30d82e3c638157c98f8acc12be147579428908bcdcc85921ce67f05b36a993c50bb8e10bd3602b8cc383a212a805f6ded9d30ace1798c8ef55c1ad0839894afd33fd7972cc58267490af97d5626d99fc88c63ae4cf"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1e}, @NL80211_TXRATE_LEGACY={0x5, 0x1, "bb"}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x8}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_HE={0x101, 0x5, "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"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x9}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x114, 0x75, 0x0, 0x1, [@generic="78bfc9e71822b7d1ad12c4c8e37c940445166cc3ff09aa33eaf6cc9fd7ef4898f320724b47c83062b939f782690d94180693cf70150fa7eb4c9be82e3b24acebc492dccff7e5751c674c11d1226924faffeab6a1801d196ddacc742e7f80d73ef39b0adf5c7e756edfce6e2986b0bf59ed924bd1b2eeeab80f588faf8f91830f264dd48529cb69de2ba85b8cf54ac90166a66d5c1e13a084ad9ee4908812ccd60f3ab2f2ddf7c824b6613726c8a8403d4b973797e8838f5052766ee38cc86fd2b1d6e60cecbd26f24c9a5c600c5ef0d7d18a969166d24336b603ab92f7324fdb222457cd71ac51f71c6ecc28cda54b62feabe6ad79db3f2f", @typed={0xe, 0x0, 0x0, 0x0, @str='/dev/ram7\x00'}, @typed={0x8, 0x62, 0x0, 0x0, @uid}]}, @NL80211_ATTR_MNTR_FLAGS={0xcf, 0x17, "7248dd91c95d1507a1594c0b5a98254508b1a8a95e2fdd5f1a1b1970b567b3621f1809b23d1af9604cde77e8c5d2670aae652e974d56bac5e3697febad38b525189fddfa227cd0010be3b51db7d20073990a082588539437de70635f26d0c4d936996170d8a99b0deb44a12836bfae75bbcedec6efa3c6d30fd53674fc6a60180193092fb0586e030d409a0d603865acf539bf06ae6c27a3bae99bd6ba11dcf10b57a7d170ab0164b561506385440f3dad13599c2c75b21d0bc7ec51503411c75142ac070277e41ccdd620"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x7}]}, 0x50c}, 0x1, 0x0, 0x0, 0x40050}, 0x4008000) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x303001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0x4b66, 0x1) 17.308254655s ago: executing program 0 (id=4815): select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x0, 0x9, 0x7, 0xffffffff}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) read$auto(0x3, 0x0, 0x7) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 5.644914907s ago: executing program 33 (id=4807): select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x0, 0x9, 0x7, 0xffffffff}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) read$auto(0x3, 0x0, 0x7) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 4.547851246s ago: executing program 2 (id=4825): r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r6, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) madvise$auto(0x0, 0x8, 0x6) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r4, &(0x7f0000001400)="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", 0xfffff596, &(0x7f0000000180)="72e22ea0fea4bee7dbe47b44d2673fc4c6511ba51e9b764ac761664f7ee224475585f2f9879d325d6839c67f4225c622d6a013ae90333c24b8290ea986762d351218d8190e6517b85be42ce75c967897392c3ac20c0be0c557b1bf5d629829950fcb88945b758cdc5b8ea2fc6b082b709bd04846ff375c0f3e6b77fc373dd306009522", 0x5, &(0x7f0000000240)="e98d4fdb7ddab4e567ef3519ef0a3819d29b44a27fdaf919278950455925e516a151d3d40301ba963cd5cb744a39f2f9029d5ad58d1736a6344ec5ba7bd8c2bafa4d1baeb19336ed4994be3649d8df129bbdfd74a14bba07cfdcd92ac00916b1b5d240000946cd793aba9ea2ce11bc53a7e4dbb10de9d4ca0b8879d480dfc68f9ec73eb55f2368b108a9a4ad4d29", &(0x7f00000000c0)=0x3}) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r4, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000800)={0x50c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4f4, 0x1, 0x0, 0x1, [@nested={0x4ef, 0x2f, 0x0, 0x1, [@typed={0x80, 0x122, 0x0, 0x0, @binary="3ee6e53c4c07ea5d20478f32b73dab93bda17a38691d14cc7389d7c01028c43754a4fb5f8a12d6b77f0cde3683abeb97f5bc35d14655c93dec83474ae0e23bc53f9ad75829e2b91ff11ac72fef15a647d6cccb3152fc263d3ebc8588a7c6dfef87cbec3a9363e1a83299887f7475c25579dcaa6f4489de497816a6b3"}, @generic="2b4d02edce816134154a0f50376a72eb39", @nested={0x4, 0xf7}, @generic="2bb6aff7fd45", @nested={0x450, 0x126, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @fd=r7}, @nested={0x186, 0x13, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xf3, 0x35, 0x0, 0x1, [@generic="251833cbb52fb6e9a8a6c734d4b32e43485e1a777ff5d38ae7d38b165bdd0ada0d5fc84472c2824af615a5b9c9d4aef4847e6cd61f302c4c84d37c389d4aee42df3fde39d2471c974947269cd1e3e1fffd060286f1ef42c152732bc0e76652410a1b3faef2f661b3a01f96e963498e7e1680995aee71840cb8d56a573fccee540455ff19054a0bdc0e49fdb498bd369ace53d516de6b953bc1400b740fdbfd09863a8396786acc83b46f8af0a99ceedc581d0507f2ddfbfc3128e82296efda855e3c5c83606a8f8988ff87fc7d7366e2a4fa16d2fe496f8132cc740e20bd90d5de040e0989894a3b4ef44c9f4eb834"]}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xe6}, @typed={0x8, 0x20, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xc}, @generic="0f9d32d5079945ea8a0cbbfc8e5b5525d7e700d590fa4fb163be94295eb78970aa03c852df55ae144d3878d262da8fe7b20303dd048578017a985e4b453fd5238d53f95e41baf72169f537cb8afadd1818d300546a8674b85db33b6cb8e32f0d1a914f4b19ae0331beba", @nested={0x4, 0x2e}]}, @generic="34ffd86410324c53d21c1e5e71647d80bcc4a7d8049c8b174ab4269dcbd30585966befea69c7694d5c07d4029f4ede2ad39ce9cbb64e4f5fc72c5be01b4bf8c64da0bc6ff9f6f22b2cd76c796348536cef4e98d87d9d79b8bf4c56fa711ed70705bfe691e6b5e21c6962732f", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @nested={0x222, 0x8e, 0x0, 0x1, [@nested={0x4, 0x147}, @nested={0x4, 0x28}, @generic="bd6fb101464d18c26d462f7cc40384c8faefc4c11fd20df3bdecba20b6e0f9dff72c2e1c07912a62bdb2fc5add76ba15b437119b304ea69c543fba932fdaa8fd33929d2101975ad38b510edf06007ca73a", @typed={0x8, 0x25, 0x0, 0x0, @fd=r4}, @nested={0xda, 0xd4, 0x0, 0x1, [@generic="c8d2353bf77920fc118752a1fef9214dc92f6f940c108198f1e666bcfbd0412f068ec7c442ef00c9037cbdf37f63fb685e3e2d28478ade0a3944ca88463779088714543cf9a9129f3cfd79e098b4c24900c95d98b615ac51ae4ad59acb164b53cc9ca395de973c174d53a79924400a17664f7f68d784e8e32ee51896956791ddea5bf0ea036fd48e0e62bdee7d8b71876fdc399b27d93cf9ea324de304cf7c698166784f4a47376ca307e6561e7af75045d5502cdd5d4f15d92145b0657aac87ab7006ec4a6c8266a3628e880890bdce739d85ef12be"]}, @generic="f87b9416806f64201a21270c0a3ff7b336f58a7b0b9018d9560bfbec945affd5dac9331511c6a463d7751882550b5a973531d670d3b1fabd9be47f231020225ee5c38bbc151f79175b29ad35f552640060228b90ef7e72a5eb3b7cfe4e604e302772050613d65a1983c85d091fbfd199cd7ac46da186efa6a0664282478ee3a362fc98609d7df18cfd5580a36e94eaaff631d7edc5e37b304de9cc2fa44fa1e7c01884a61f368712fb1ccebda65ea228e863f2ce24305412cee7907118a7134d26f019072232c5778fa5ae86c2ffefe2d0fa0cc82a3e32a2fbdd8841b26f3a0f2c"]}, @typed={0xc, 0xec, 0x0, 0x0, @u64}, @nested={0x9, 0x56, 0x0, 0x1, [@generic="382fc93a8d"]}]}]}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r8 = socket(0x15, 0x5, 0x0) read$auto(0x3, 0x0, 0xfffffffffffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto_PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r8, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/config.gz\x00', 0xc0880, 0x0) read$auto(r9, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x5, 0x5, 0xff, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x1000000000800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x23c, 0x0, 0x2, 0x0, 0x2000000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x82) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r10, 0x0, 0x3, 0x5) 4.062974365s ago: executing program 2 (id=4826): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) write$auto(0xffffffffffffffff, 0x0, 0x5) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r6, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r2, 0x3) open_by_handle_at$auto(r4, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r1, 0x6, 0x1021, 0x0, 0xc0000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) 1.656472095s ago: executing program 34 (id=4815): select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x3, 0xd, 0x250, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x10002, 0x2, 0x4, 0x0, 0xfffffffdfffffffa, 0x1, 0x0, 0x9, 0x7, 0xffffffff}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) read$auto(0x3, 0x0, 0x7) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 1.651938671s ago: executing program 2 (id=4828): openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mremap$auto(0x0, 0x7fff, 0x8, 0x4, 0x7effffffb000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x5, 0x3, 0x64, 0xcc, 0x6c35, 0x3}) r1 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xb5d1af1605322d93) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, &(0x7f00000000c0)="2d673448eebf8d3d1777d123f00f711d96dd71c6f00a64df64bb943ad7fab05d99797435a8cca8aeaa9db93ae4da2a23efbfafc611aa95542c726bbb93e5c784e0d08708056ed9d21dcf277040016090dea1ef5b3c1396ed1e3dc72479e31ca4194776eaf62ad979ac0f457872b781cc2bb6668b7049e1a6a60d383e959384143acf526ebc9e1e13f523d88ad3227845a56b592440cbcfd0e39246c62e775f9351932127460d32b97059299c162dc9a96172b631095e") mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) 1.235422833s ago: executing program 2 (id=4829): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon8\x00', 0x881, 0x0) ioctl$auto_MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0, 0x4}) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000001c0)=@bpf_attr_4={0x4, r0, 0x80000001, r0}, 0x4) mmap$auto(0x0, 0xc1, 0xb, 0x2000000eb1, r1, 0x7fff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vivid.0/video4linux/swradio11/dev\x00', 0x200, 0x0) read$auto(r2, 0x0, 0x1) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2503000000040008"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x800) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) 1.015645894s ago: executing program 2 (id=4830): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x4, 0x8}, 0x8}, 0x7, 0x20020000) mmap$auto(0x0, 0x9, 0xf000000000800000, 0x15, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x10}, 0x8}, 0x7, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_NLBL_MGMT_C_VERSION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="020429bd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x24048005}, 0x4001) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 0s ago: executing program 2 (id=4831): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bd7000fcdbdf1e74abff0008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/environ\x00', 0x0, 0x0) fsmount$auto(r3, 0x1, 0x2) io_uring_setup$auto(0x8, 0x0) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           [ 1668.129562][T29349] net_ratelimit: 269 callbacks suppressed [ 1668.129582][T29349] netlink: zone id is out of range [ 1668.215452][T29349] netlink: zone id is out of range [ 1668.289523][T29349] netlink: zone id is out of range [ 1668.361007][T29349] netlink: zone id is out of range [ 1668.419047][T29349] netlink: zone id is out of range [ 1668.464598][T29349] netlink: zone id is out of range [ 1668.510781][T29349] netlink: zone id is out of range [ 1668.592011][T29349] netlink: zone id is out of range [ 1668.672744][T29349] netlink: zone id is out of range [ 1668.687733][T29349] netlink: zone id is out of range [ 1668.746929][T29357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4599'. [ 1668.792521][T29356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4599'. [ 1669.026623][T29357] bond0: (slave bond_slave_1): Releasing backup interface [ 1669.461856][T25721] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 1670.524407][T29388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 1671.341719][T29401] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1671.341719][T29401] The task syz.2.4608 (29401) triggered the difference, watch for misbehavior. [ 1674.163885][T29455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1674.477372][T29455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.735409][T29455] bridge_slave_1 (unregistering): left allmulticast mode [ 1674.786876][T29455] bridge_slave_1 (unregistering): left promiscuous mode [ 1674.820145][T29455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.058081][T25161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.365665][T25161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.516392][T25161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.596766][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.603464][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.699008][T25161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.807857][T29476] FAULT_INJECTION: forcing a failure. [ 1675.807857][T29476] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.926978][T29476] CPU: 0 UID: 0 PID: 29476 Comm: syz.2.4625 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1675.927019][T29476] Tainted: [U]=USER [ 1675.927027][T29476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1675.927043][T29476] Call Trace: [ 1675.927051][T29476] [ 1675.927060][T29476] dump_stack_lvl+0x16c/0x1f0 [ 1675.927089][T29476] should_fail_ex+0x512/0x640 [ 1675.927114][T29476] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1675.927155][T29476] should_failslab+0xc2/0x120 [ 1675.927184][T29476] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1675.927222][T29476] ? cuse_channel_open+0x1de/0x7f0 [ 1675.927266][T29476] cuse_channel_open+0x1de/0x7f0 [ 1675.927305][T29476] ? __pfx_cuse_channel_open+0x10/0x10 [ 1675.927345][T29476] misc_open+0x35a/0x420 [ 1675.927382][T29476] ? __pfx_misc_open+0x10/0x10 [ 1675.927417][T29476] chrdev_open+0x231/0x6a0 [ 1675.927443][T29476] ? __pfx_apparmor_file_open+0x10/0x10 [ 1675.927480][T29476] ? __pfx_chrdev_open+0x10/0x10 [ 1675.927509][T29476] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1675.927556][T29476] do_dentry_open+0x744/0x1c10 [ 1675.927599][T29476] ? __pfx_chrdev_open+0x10/0x10 [ 1675.927633][T29476] vfs_open+0x82/0x3f0 [ 1675.927669][T29476] path_openat+0x1de4/0x2cb0 [ 1675.927708][T29476] ? __pfx_path_openat+0x10/0x10 [ 1675.927734][T29476] ? __lock_acquire+0xb8a/0x1c90 [ 1675.927774][T29476] do_filp_open+0x20b/0x470 [ 1675.927798][T29476] ? __pfx_do_filp_open+0x10/0x10 [ 1675.927844][T29476] ? alloc_fd+0x471/0x7d0 [ 1675.927892][T29476] do_sys_openat2+0x11b/0x1d0 [ 1675.927925][T29476] ? __pfx_do_sys_openat2+0x10/0x10 [ 1675.927970][T29476] __x64_sys_openat+0x174/0x210 [ 1675.928005][T29476] ? __pfx___x64_sys_openat+0x10/0x10 [ 1675.928052][T29476] do_syscall_64+0xcd/0x490 [ 1675.928080][T29476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.928106][T29476] RIP: 0033:0x7fb33658e9a9 [ 1675.928125][T29476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1675.928151][T29476] RSP: 002b:00007fb3343f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1675.928174][T29476] RAX: ffffffffffffffda RBX: 00007fb3367b5fa0 RCX: 00007fb33658e9a9 [ 1675.928191][T29476] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1675.928208][T29476] RBP: 00007fb336610d69 R08: 0000000000000000 R09: 0000000000000000 [ 1675.928224][T29476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1675.928240][T29476] R13: 0000000000000000 R14: 00007fb3367b5fa0 R15: 00007ffcff2e7e48 [ 1675.928271][T29476] [ 1676.586715][T25032] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1676.630954][T25032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1676.666223][T25032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1676.717802][T25032] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1676.736978][T25032] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1677.559688][T25161] bridge_slave_1: left allmulticast mode [ 1677.609783][T25161] bridge_slave_1: left promiscuous mode [ 1677.640492][T25161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.719695][T25161] bridge_slave_0: left allmulticast mode [ 1677.752624][T25161] bridge_slave_0: left promiscuous mode [ 1677.799493][T25161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.738506][T25161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.758221][T25161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.779023][T25032] Bluetooth: hci1: command tx timeout [ 1678.793252][T25161] bond0 (unregistering): Released all slaves [ 1679.503181][T25161] hsr_slave_0: left promiscuous mode [ 1679.548288][T25161] hsr_slave_1: left promiscuous mode [ 1679.582220][T25161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1679.622668][T29526] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1679.633334][T25161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.666534][T25161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.680917][T29526] netlink: 350 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1679.710505][T25161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.752596][T29529] synth uevent: /bus/mei: unknown uevent action string [ 1679.832189][T25161] veth1_macvtap: left promiscuous mode [ 1679.869835][T25161] veth0_macvtap: left promiscuous mode [ 1679.911941][T25161] veth1_vlan: left promiscuous mode [ 1679.917281][T25161] veth0_vlan: left promiscuous mode [ 1680.015163][T29535] FAULT_INJECTION: forcing a failure. [ 1680.015163][T29535] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1680.142574][T29535] CPU: 0 UID: 0 PID: 29535 Comm: syz.3.4635 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1680.142614][T29535] Tainted: [U]=USER [ 1680.142622][T29535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1680.142638][T29535] Call Trace: [ 1680.142646][T29535] [ 1680.142655][T29535] dump_stack_lvl+0x16c/0x1f0 [ 1680.142683][T29535] should_fail_ex+0x512/0x640 [ 1680.142712][T29535] get_futex_key+0x1d0/0x1540 [ 1680.142745][T29535] ? __pfx_get_futex_key+0x10/0x10 [ 1680.142783][T29535] futex_wake+0xe7/0x4e0 [ 1680.142819][T29535] ? __pfx_futex_wake+0x10/0x10 [ 1680.142857][T29535] ? kmem_cache_free+0x2d1/0x4d0 [ 1680.142879][T29535] ? fd_install+0x225/0x750 [ 1680.142916][T29535] ? putname+0x154/0x1a0 [ 1680.142948][T29535] do_futex+0x1e3/0x350 [ 1680.142977][T29535] ? __pfx_do_futex+0x10/0x10 [ 1680.143014][T29535] __x64_sys_futex+0x1e0/0x4c0 [ 1680.143046][T29535] ? __x64_sys_openat+0x174/0x210 [ 1680.143079][T29535] ? __pfx___x64_sys_futex+0x10/0x10 [ 1680.143109][T29535] ? xfd_validate_state+0x61/0x180 [ 1680.143152][T29535] do_syscall_64+0xcd/0x490 [ 1680.143178][T29535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.143202][T29535] RIP: 0033:0x7f2e8238e9a9 [ 1680.143221][T29535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1680.143245][T29535] RSP: 002b:00007f2e8313b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1680.143268][T29535] RAX: ffffffffffffffda RBX: 00007f2e825b6088 RCX: 00007f2e8238e9a9 [ 1680.143284][T29535] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2e825b608c [ 1680.143307][T29535] RBP: 00007f2e825b6080 R08: 00007f2e8315d000 R09: 0000000000000000 [ 1680.143323][T29535] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f2e825b608c [ 1680.143338][T29535] R13: 0000000000000000 R14: 00007ffcda472d00 R15: 00007ffcda472de8 [ 1680.143368][T29535] [ 1680.881029][T25032] Bluetooth: hci1: command tx timeout [ 1681.122606][T29554] scsi_dev_info_list_add_str: bad dev info string ')–õÒzD éú÷5fk+*X€©#åR8¾ð4*œýVs÷nîdv»ø¼qSQWˆ}ûÄ~YrÈ€-8VGDƘ¹‹åLáBÍ%v—†õv‘}–Ypq|ƒí?ñºO¼ö[ŒÐ,!ä Ù7xWDr¾Ÿµ% [Û}†Eµ$3?ñGË™Î9–Ff=ŠÃlør«GH;2L<õ»=ÒÚ|èž¿®ô8ƒ -c¡„ FÕ¸šë"™ž£É[v9¯qôÂ4‚ MmËvq®ékñ¹¹ò[ÕãËú(i¨ýˆNDСÄMîËX PS­êq•èqX4‰X`VððŸ!;r¶Ö ±È)y]×W¨šzfIðH0êáÓ,àëí¬é¢vß{q8ÊìÛשU·Ü¹ä‘‰mØ›ŽH•ŽT´¸wí™C€Ïzø-óŠÊnR%§2]ÌÎx0Òéª5oùÐëâòÕ•|3>ÕlñS*LŒõÝ/«CdgÓ‘àŠ[C=Cw‹e•Äm)«ÿòÕl#È' '‹ï'“Sž‰¡.ÍsHgi-à»ÛTY%ܹF§…*8úÒnFTÿH‡—ýæ¿?“ÿ–Þi{' '' [ 1681.931331][T25161] team0 (unregistering): Port device team_slave_1 removed [ 1682.014974][T25161] team0 (unregistering): Port device team_slave_0 removed [ 1682.474215][T29485] chnl_net:caif_netlink_parms(): no params data found [ 1682.914232][T25032] Bluetooth: hci1: command tx timeout [ 1683.088820][T29485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.124569][T29485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.131798][T29485] bridge_slave_0: entered allmulticast mode [ 1683.168446][T29485] bridge_slave_0: entered promiscuous mode [ 1683.209812][T29485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.229006][T29485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.252490][T29485] bridge_slave_1: entered allmulticast mode [ 1683.274528][T29485] bridge_slave_1: entered promiscuous mode [ 1683.660797][T25161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.782004][T29485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.836825][T29485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1684.049962][T25161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.235523][T25032] Bluetooth: hci4: Malformed Event: 0x02 [ 1684.332466][T25721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1684.341534][T25721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1684.353601][T29589] net_ratelimit: 83 callbacks suppressed [ 1684.353618][T29589] netlink: zone id is out of range [ 1684.364826][T25721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1684.374955][T25721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1684.383383][T25721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1684.430980][T29589] netlink: zone id is out of range [ 1684.458158][T29589] netlink: zone id is out of range [ 1684.471648][T25161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.517526][T29589] netlink: zone id is out of range [ 1684.522682][T29589] netlink: zone id is out of range [ 1684.561621][T29485] team0: Port device team_slave_0 added [ 1684.591202][T29589] netlink: zone id is out of range [ 1684.597708][T29485] team0: Port device team_slave_1 added [ 1684.627452][T29589] netlink: zone id is out of range [ 1684.668245][T29589] netlink: zone id is out of range [ 1684.707762][T29589] netlink: zone id is out of range [ 1684.714527][T25161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.737663][T29589] netlink: zone id is out of range [ 1684.841930][T29485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.861032][T29485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.916935][T29485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.942734][T29592] FAULT_INJECTION: forcing a failure. [ 1684.942734][T29592] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.981663][T29485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.990136][T25721] Bluetooth: hci1: command tx timeout [ 1685.002420][T29592] CPU: 0 UID: 0 PID: 29592 Comm: syz.0.4646 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1685.002457][T29592] Tainted: [U]=USER [ 1685.002465][T29592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1685.002479][T29592] Call Trace: [ 1685.002488][T29592] [ 1685.002497][T29592] dump_stack_lvl+0x16c/0x1f0 [ 1685.002523][T29592] should_fail_ex+0x512/0x640 [ 1685.002546][T29592] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1685.002573][T29592] should_failslab+0xc2/0x120 [ 1685.002600][T29592] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1685.002623][T29592] ? __proc_create+0xc3/0x8c0 [ 1685.002647][T29592] ? __proc_create+0x2ce/0x8c0 [ 1685.002675][T29592] __proc_create+0x2ce/0x8c0 [ 1685.002701][T29592] ? __pfx___proc_create+0x10/0x10 [ 1685.002737][T29592] proc_mkdir+0x81/0x170 [ 1685.002766][T29592] ? __pfx_proc_mkdir+0x10/0x10 [ 1685.002794][T29592] ? __pfx_sunrpc_init_net+0x10/0x10 [ 1685.002833][T29592] ? __pfx_sunrpc_init_net+0x10/0x10 [ 1685.002868][T29592] rpc_proc_init+0x7e/0xe0 [ 1685.002890][T29592] sunrpc_init_net+0x29/0x190 [ 1685.002910][T29592] ops_init+0x1df/0x5f0 [ 1685.002939][T29592] setup_net+0x1ff/0x510 [ 1685.002969][T29592] ? lockdep_init_map_type+0x5c/0x280 [ 1685.003004][T29592] ? __pfx_setup_net+0x10/0x10 [ 1685.003031][T29592] ? debug_mutex_init+0x37/0x70 [ 1685.003057][T29592] copy_net_ns+0x2a6/0x5f0 [ 1685.003088][T29592] create_new_namespaces+0x3ea/0xa90 [ 1685.003120][T29592] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1685.003149][T29592] ksys_unshare+0x45b/0xa40 [ 1685.003181][T29592] ? __pfx_ksys_unshare+0x10/0x10 [ 1685.003213][T29592] ? xfd_validate_state+0x61/0x180 [ 1685.003251][T29592] __x64_sys_unshare+0x31/0x40 [ 1685.003281][T29592] do_syscall_64+0xcd/0x490 [ 1685.003307][T29592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.003330][T29592] RIP: 0033:0x7f735838e9a9 [ 1685.003347][T29592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1685.003369][T29592] RSP: 002b:00007f7359229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1685.003390][T29592] RAX: ffffffffffffffda RBX: 00007f73585b5fa0 RCX: 00007f735838e9a9 [ 1685.003405][T29592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1685.003419][T29592] RBP: 00007f7358410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1685.003433][T29592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.003447][T29592] R13: 0000000000000000 R14: 00007f73585b5fa0 R15: 00007ffeea04c1c8 [ 1685.003475][T29592] [ 1685.252995][T29485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1685.279541][T29485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.442716][T25161] bridge_slave_1: left allmulticast mode [ 1685.448411][T25161] bridge_slave_1: left promiscuous mode [ 1685.454213][T25161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.464075][T25161] bridge_slave_0: left allmulticast mode [ 1685.469745][T25161] bridge_slave_0: left promiscuous mode [ 1685.475546][T25161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.416216][T25721] Bluetooth: hci0: command tx timeout [ 1686.537827][T25161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1686.572855][T25161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1686.596218][T25161] bond0 (unregistering): Released all slaves [ 1686.721589][T29485] hsr_slave_0: entered promiscuous mode [ 1686.737749][T29485] hsr_slave_1: entered promiscuous mode [ 1687.542870][T25161] hsr_slave_1: left promiscuous mode [ 1687.578882][T25161] veth1_macvtap: left promiscuous mode [ 1687.593490][T25161] veth0_macvtap: left promiscuous mode [ 1687.605854][T25161] veth1_vlan: left promiscuous mode [ 1687.629604][T25161] veth0_vlan: left promiscuous mode [ 1687.670657][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 1688.484921][T25721] Bluetooth: hci0: command tx timeout [ 1688.959005][T25161] team0 (unregistering): Port device team_slave_1 removed [ 1689.052950][T25161] team0 (unregistering): Port device team_slave_0 removed [ 1690.000471][T29646] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1690.026451][T29646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1690.086641][T29646] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1690.279673][T29651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4652'. [ 1690.313876][T29651] netlink: 'syz.0.4652': attribute type 1 has an invalid length. [ 1690.348604][T29651] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4652'. [ 1690.390294][T29654] FAULT_INJECTION: forcing a failure. [ 1690.390294][T29654] name failslab, interval 1, probability 0, space 0, times 0 [ 1690.464669][T29654] CPU: 0 UID: 0 PID: 29654 Comm: syz.0.4652 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1690.464709][T29654] Tainted: [U]=USER [ 1690.464718][T29654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1690.464733][T29654] Call Trace: [ 1690.464741][T29654] [ 1690.464751][T29654] dump_stack_lvl+0x16c/0x1f0 [ 1690.464786][T29654] should_fail_ex+0x512/0x640 [ 1690.464811][T29654] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1690.464840][T29654] should_failslab+0xc2/0x120 [ 1690.464868][T29654] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1690.464893][T29654] ? alloc_empty_file+0x55/0x1e0 [ 1690.464929][T29654] alloc_empty_file+0x55/0x1e0 [ 1690.464961][T29654] dentry_open+0x46/0xd0 [ 1690.464991][T29654] open_namespace+0xff/0x190 [ 1690.465029][T29654] ? __pfx_open_namespace+0x10/0x10 [ 1690.465070][T29654] ? bpf_lsm_capable+0x9/0x10 [ 1690.465110][T29654] open_related_ns+0x41/0x70 [ 1690.465147][T29654] __tun_chr_ioctl+0x244c/0x47a0 [ 1690.465183][T29654] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1690.465214][T29654] ? hook_file_ioctl_common+0x145/0x410 [ 1690.465253][T29654] ? __fget_files+0x20e/0x3c0 [ 1690.465296][T29654] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1690.465326][T29654] __x64_sys_ioctl+0x18e/0x210 [ 1690.465362][T29654] do_syscall_64+0xcd/0x490 [ 1690.465389][T29654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.465413][T29654] RIP: 0033:0x7f735838e9a9 [ 1690.465432][T29654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.465455][T29654] RSP: 002b:00007f7359208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1690.465478][T29654] RAX: ffffffffffffffda RBX: 00007f73585b6080 RCX: 00007f735838e9a9 [ 1690.465509][T29654] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 1690.465524][T29654] RBP: 00007f7358410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1690.465557][T29654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.465571][T29654] R13: 0000000000000000 R14: 00007f73585b6080 R15: 00007ffeea04c1c8 [ 1690.465602][T29654] [ 1690.860915][T25721] Bluetooth: hci0: command tx timeout [ 1691.919830][T29587] chnl_net:caif_netlink_parms(): no params data found [ 1692.526250][T29587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.533393][T29587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.553729][T29587] bridge_slave_0: entered allmulticast mode [ 1692.575295][T29587] bridge_slave_0: entered promiscuous mode [ 1692.616931][T29587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.629267][T29587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.637851][T29687] blktrace: Concurrent blktraces are not allowed on ram7 [ 1692.645882][T29587] bridge_slave_1: entered allmulticast mode [ 1692.663563][T29587] bridge_slave_1: entered promiscuous mode [ 1692.737772][T29485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1692.758718][T29587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.794985][T29485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1692.816064][T29485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1692.850016][T29587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1692.862168][T25721] Bluetooth: hci0: command tx timeout [ 1692.898382][T29485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1692.964922][T29587] team0: Port device team_slave_0 added [ 1692.996937][T29587] team0: Port device team_slave_1 added [ 1693.064881][T29587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.081182][T29587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.118846][T29587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.164059][T29587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.174451][T29587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.203517][T29587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.240562][T29698] net_ratelimit: 89 callbacks suppressed [ 1693.240580][T29698] netlink: zone id is out of range [ 1693.277940][T29698] netlink: zone id is out of range [ 1693.307255][T29698] netlink: zone id is out of range [ 1693.351045][T29698] netlink: zone id is out of range [ 1693.389693][T29698] netlink: zone id is out of range [ 1693.427038][T29587] hsr_slave_0: entered promiscuous mode [ 1693.434359][T29698] netlink: zone id is out of range [ 1693.449749][T29587] hsr_slave_1: entered promiscuous mode [ 1693.469834][T29587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1693.484102][T29698] netlink: zone id is out of range [ 1693.494171][T29587] Cannot create hsr debugfs directory [ 1693.526672][T29698] netlink: zone id is out of range [ 1693.542999][T29698] netlink: zone id is out of range [ 1693.548151][T29698] netlink: zone id is out of range [ 1693.719352][T29485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.069627][T29485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.146667][T29714] FAULT_INJECTION: forcing a failure. [ 1694.146667][T29714] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.220182][T29714] CPU: 0 UID: 0 PID: 29714 Comm: syz.3.4659 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1694.220220][T29714] Tainted: [U]=USER [ 1694.220227][T29714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1694.220241][T29714] Call Trace: [ 1694.220249][T29714] [ 1694.220258][T29714] dump_stack_lvl+0x16c/0x1f0 [ 1694.220292][T29714] should_fail_ex+0x512/0x640 [ 1694.220315][T29714] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1694.220342][T29714] should_failslab+0xc2/0x120 [ 1694.220368][T29714] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1694.220392][T29714] ? kcm_create+0x11e/0x690 [ 1694.220431][T29714] kcm_create+0x11e/0x690 [ 1694.220468][T29714] __sock_create+0x335/0x8d0 [ 1694.220505][T29714] __sys_socket+0x14d/0x260 [ 1694.220534][T29714] ? fput+0x70/0xf0 [ 1694.220560][T29714] ? __pfx___sys_socket+0x10/0x10 [ 1694.220593][T29714] ? syscall_user_dispatch+0x78/0x140 [ 1694.220636][T29714] __x64_sys_socket+0x72/0xb0 [ 1694.220668][T29714] do_syscall_64+0xcd/0x490 [ 1694.220693][T29714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.220716][T29714] RIP: 0033:0x7f2e8238e9a9 [ 1694.220734][T29714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1694.220756][T29714] RSP: 002b:00007f2e8315c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1694.220777][T29714] RAX: ffffffffffffffda RBX: 00007f2e825b5fa0 RCX: 00007f2e8238e9a9 [ 1694.220792][T29714] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 1694.220806][T29714] RBP: 00007f2e82410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1694.220820][T29714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1694.220834][T29714] R13: 0000000000000000 R14: 00007f2e825b5fa0 R15: 00007ffcda472de8 [ 1694.220861][T29714] [ 1694.511873][T25131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.519079][T25131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.528236][T25131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.535409][T25131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.735349][T29485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1694.761186][T29485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1695.188967][T29587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1695.225427][T29587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1695.247253][T29587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1695.337124][T29587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1695.504879][T29485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.720184][T29587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.824001][T29587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.883193][T25131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.890384][T25131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1695.970512][T25131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.977774][T25131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1695.993856][T29748] FAULT_INJECTION: forcing a failure. [ 1695.993856][T29748] name failslab, interval 1, probability 0, space 0, times 0 [ 1696.051370][T29748] CPU: 0 UID: 0 PID: 29748 Comm: syz.3.4661 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1696.051424][T29748] Tainted: [U]=USER [ 1696.051432][T29748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1696.051446][T29748] Call Trace: [ 1696.051454][T29748] [ 1696.051463][T29748] dump_stack_lvl+0x16c/0x1f0 [ 1696.051492][T29748] should_fail_ex+0x512/0x640 [ 1696.051516][T29748] ? __kmalloc_noprof+0xbf/0x510 [ 1696.051542][T29748] ? __register_sysctl_table+0xea2/0x1900 [ 1696.051597][T29748] should_failslab+0xc2/0x120 [ 1696.051641][T29748] __kmalloc_noprof+0xd2/0x510 [ 1696.051662][T29748] ? __register_sysctl_table+0xe8e/0x1900 [ 1696.051694][T29748] __register_sysctl_table+0xea2/0x1900 [ 1696.051726][T29748] ? __pfx___register_sysctl_table+0x10/0x10 [ 1696.051752][T29748] ? is_module_address+0x69/0xf0 [ 1696.051788][T29748] ? register_net_sysctl_sz+0x228/0x3e0 [ 1696.051825][T29748] ? __asan_memcpy+0x3c/0x60 [ 1696.051863][T29748] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 1696.051893][T29748] nf_lwtunnel_net_init+0x60/0xf0 [ 1696.051923][T29748] ops_init+0x1df/0x5f0 [ 1696.051953][T29748] setup_net+0x1ff/0x510 [ 1696.051981][T29748] ? lockdep_init_map_type+0x5c/0x280 [ 1696.052016][T29748] ? __pfx_setup_net+0x10/0x10 [ 1696.052044][T29748] ? debug_mutex_init+0x37/0x70 [ 1696.052085][T29748] copy_net_ns+0x2a6/0x5f0 [ 1696.052118][T29748] create_new_namespaces+0x3ea/0xa90 [ 1696.052153][T29748] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1696.052184][T29748] ksys_unshare+0x45b/0xa40 [ 1696.052218][T29748] ? __pfx_ksys_unshare+0x10/0x10 [ 1696.052253][T29748] ? xfd_validate_state+0x61/0x180 [ 1696.052294][T29748] __x64_sys_unshare+0x31/0x40 [ 1696.052327][T29748] do_syscall_64+0xcd/0x490 [ 1696.052354][T29748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.052379][T29748] RIP: 0033:0x7f2e8238e9a9 [ 1696.052397][T29748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.052421][T29748] RSP: 002b:00007f2e8315c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1696.052443][T29748] RAX: ffffffffffffffda RBX: 00007f2e825b5fa0 RCX: 00007f2e8238e9a9 [ 1696.052459][T29748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1696.052474][T29748] RBP: 00007f2e82410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1696.052489][T29748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.052504][T29748] R13: 0000000000000000 R14: 00007f2e825b5fa0 R15: 00007ffcda472de8 [ 1696.052533][T29748] [ 1696.052543][T29748] sysctl could not get directory: /net/netfilter -12 [ 1696.536141][T29587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1696.589823][T29587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1697.034438][T29485] veth0_vlan: entered promiscuous mode [ 1697.101198][T29485] veth1_vlan: entered promiscuous mode [ 1697.230430][T29485] veth0_macvtap: entered promiscuous mode [ 1697.291358][T29485] veth1_macvtap: entered promiscuous mode [ 1697.393288][T29587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.453903][T29485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.551416][T29485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.634352][T29485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.667557][T29485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.714359][T29485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.756626][T29485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.812324][T29587] veth0_vlan: entered promiscuous mode [ 1697.904815][T29587] veth1_vlan: entered promiscuous mode [ 1698.079457][T29587] veth0_macvtap: entered promiscuous mode [ 1698.138939][T29587] veth1_macvtap: entered promiscuous mode [ 1698.183159][T26569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.249775][T26569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.292235][T29587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.415249][T26569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.436780][T29587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1698.452214][T26569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.504709][T29587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.553205][T29587] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.595797][T29587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.636842][T29587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.778714][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4663'. [ 1698.842415][T29789] netlink: 'syz.3.4663': attribute type 1 has an invalid length. [ 1698.850206][T29789] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4663'. [ 1698.971584][T29793] FAULT_INJECTION: forcing a failure. [ 1698.971584][T29793] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.040561][T29793] CPU: 0 UID: 0 PID: 29793 Comm: syz.3.4663 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1699.040599][T29793] Tainted: [U]=USER [ 1699.040607][T29793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1699.040621][T29793] Call Trace: [ 1699.040629][T29793] [ 1699.040638][T29793] dump_stack_lvl+0x16c/0x1f0 [ 1699.040664][T29793] should_fail_ex+0x512/0x640 [ 1699.040686][T29793] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1699.040713][T29793] should_failslab+0xc2/0x120 [ 1699.040740][T29793] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1699.040764][T29793] ? __d_alloc+0x31/0xaa0 [ 1699.040796][T29793] __d_alloc+0x31/0xaa0 [ 1699.040822][T29793] path_from_stashed+0x500/0xb00 [ 1699.040896][T29793] ? __pfx_path_from_stashed+0x10/0x10 [ 1699.040920][T29793] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1699.040954][T29793] open_namespace+0x8d/0x190 [ 1699.040990][T29793] ? __pfx_open_namespace+0x10/0x10 [ 1699.041028][T29793] ? bpf_lsm_capable+0x9/0x10 [ 1699.041065][T29793] open_related_ns+0x41/0x70 [ 1699.041100][T29793] __tun_chr_ioctl+0x244c/0x47a0 [ 1699.041132][T29793] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1699.041162][T29793] ? hook_file_ioctl_common+0x145/0x410 [ 1699.041198][T29793] ? __fget_files+0x20e/0x3c0 [ 1699.041238][T29793] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1699.041265][T29793] __x64_sys_ioctl+0x18e/0x210 [ 1699.041299][T29793] do_syscall_64+0xcd/0x490 [ 1699.041325][T29793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.041348][T29793] RIP: 0033:0x7f2e8238e9a9 [ 1699.041365][T29793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1699.041388][T29793] RSP: 002b:00007f2e8313b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.041409][T29793] RAX: ffffffffffffffda RBX: 00007f2e825b6080 RCX: 00007f2e8238e9a9 [ 1699.041424][T29793] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 1699.041438][T29793] RBP: 00007f2e82410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1699.041453][T29793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.041467][T29793] R13: 0000000000000000 R14: 00007f2e825b6080 R15: 00007ffcda472de8 [ 1699.041494][T29793] [ 1700.144197][T26569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.194686][T26569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.376072][T26568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.410767][T26568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.111555][T29828] blktrace: Concurrent blktraces are not allowed on ram7 [ 1701.438057][T29826] aoe: can't write to that file. [ 1705.165868][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4674'. [ 1705.210667][T29891] netlink: 'syz.2.4674': attribute type 1 has an invalid length. [ 1705.249751][T29891] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4674'. [ 1705.298109][T29894] FAULT_INJECTION: forcing a failure. [ 1705.298109][T29894] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.357667][T29894] CPU: 0 UID: 0 PID: 29894 Comm: syz.2.4674 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1705.357709][T29894] Tainted: [U]=USER [ 1705.357717][T29894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1705.357733][T29894] Call Trace: [ 1705.357741][T29894] [ 1705.357751][T29894] dump_stack_lvl+0x16c/0x1f0 [ 1705.357781][T29894] should_fail_ex+0x512/0x640 [ 1705.357807][T29894] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1705.357837][T29894] should_failslab+0xc2/0x120 [ 1705.357867][T29894] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1705.357894][T29894] ? __d_alloc+0x31/0xaa0 [ 1705.357924][T29894] __d_alloc+0x31/0xaa0 [ 1705.357958][T29894] path_from_stashed+0x500/0xb00 [ 1705.357987][T29894] ? __pfx_path_from_stashed+0x10/0x10 [ 1705.358014][T29894] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1705.358052][T29894] open_namespace+0x8d/0x190 [ 1705.358092][T29894] ? __pfx_open_namespace+0x10/0x10 [ 1705.358134][T29894] ? bpf_lsm_capable+0x9/0x10 [ 1705.358175][T29894] open_related_ns+0x41/0x70 [ 1705.358213][T29894] __tun_chr_ioctl+0x244c/0x47a0 [ 1705.358250][T29894] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1705.358282][T29894] ? hook_file_ioctl_common+0x145/0x410 [ 1705.358322][T29894] ? __fget_files+0x20e/0x3c0 [ 1705.358373][T29894] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1705.358404][T29894] __x64_sys_ioctl+0x18e/0x210 [ 1705.358442][T29894] do_syscall_64+0xcd/0x490 [ 1705.358470][T29894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.358495][T29894] RIP: 0033:0x7f4c0398e9a9 [ 1705.358515][T29894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1705.358539][T29894] RSP: 002b:00007f4c04786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1705.358562][T29894] RAX: ffffffffffffffda RBX: 00007f4c03bb6080 RCX: 00007f4c0398e9a9 [ 1705.358579][T29894] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 1705.358594][T29894] RBP: 00007f4c03a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1705.358610][T29894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1705.358625][T29894] R13: 0000000000000000 R14: 00007f4c03bb6080 R15: 00007ffc85b1c8a8 [ 1705.358656][T29894] [ 1706.734306][T29920] net_ratelimit: 89 callbacks suppressed [ 1706.734341][T29920] netlink: zone id is out of range [ 1706.819664][T29920] netlink: zone id is out of range [ 1706.898017][T29920] netlink: zone id is out of range [ 1707.013063][T29920] netlink: zone id is out of range [ 1707.078176][T29920] netlink: zone id is out of range [ 1707.268966][T29920] netlink: zone id is out of range [ 1707.274132][T29920] netlink: zone id is out of range [ 1707.324617][T29920] netlink: zone id is out of range [ 1707.399547][T29920] netlink: zone id is out of range [ 1707.467939][T29920] netlink: zone id is out of range [ 1709.908469][T29963] syz.4.4692 (29963): attempted to duplicate a private mapping with mremap. This is not supported. [ 1711.163746][T29978] delete_channel: no stack [ 1712.546521][T30015] aoe: can't write to that file. [ 1713.340204][T30034] net_ratelimit: 91 callbacks suppressed [ 1713.340222][T30034] netlink: zone id is out of range [ 1713.513301][T30034] netlink: zone id is out of range [ 1713.610519][T30034] netlink: zone id is out of range [ 1713.793951][T30034] netlink: zone id is out of range [ 1713.829084][T30034] netlink: zone id is out of range [ 1713.901186][T30034] netlink: zone id is out of range [ 1713.974489][T30034] netlink: zone id is out of range [ 1714.015333][T30034] netlink: zone id is out of range [ 1714.064756][T30034] netlink: zone id is out of range [ 1714.102648][T30034] netlink: zone id is out of range [ 1721.942986][T30142] net_ratelimit: 93 callbacks suppressed [ 1721.943012][T30142] netlink: zone id is out of range [ 1722.045619][T30142] netlink: zone id is out of range [ 1722.121128][T30142] netlink: zone id is out of range [ 1722.213395][T30142] netlink: zone id is out of range [ 1722.218563][T30142] netlink: zone id is out of range [ 1722.354909][T30142] netlink: zone id is out of range [ 1722.410758][T30142] netlink: zone id is out of range [ 1722.415918][T30142] netlink: zone id is out of range [ 1722.510868][T30142] netlink: zone id is out of range [ 1722.570084][T30142] netlink: zone id is out of range [ 1725.144507][T30180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1728.750280][T30225] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4739'. [ 1731.564339][T30263] FAULT_INJECTION: forcing a failure. [ 1731.564339][T30263] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.640139][T30263] CPU: 0 UID: 0 PID: 30263 Comm: syz.3.4748 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1731.640199][T30263] Tainted: [U]=USER [ 1731.640207][T30263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1731.640227][T30263] Call Trace: [ 1731.640235][T30263] [ 1731.640248][T30263] dump_stack_lvl+0x16c/0x1f0 [ 1731.640279][T30263] should_fail_ex+0x512/0x640 [ 1731.640304][T30263] ? fs_reclaim_acquire+0xae/0x150 [ 1731.640343][T30263] ? security_inode_init_security+0x13f/0x390 [ 1731.640371][T30263] should_failslab+0xc2/0x120 [ 1731.640399][T30263] __kmalloc_noprof+0xd2/0x510 [ 1731.640431][T30263] security_inode_init_security+0x13f/0x390 [ 1731.640460][T30263] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1731.640497][T30263] ? __pfx_security_inode_init_security+0x10/0x10 [ 1731.640545][T30263] shmem_mknod+0x22e/0x450 [ 1731.640583][T30263] ? __pfx_shmem_create+0x10/0x10 [ 1731.640616][T30263] lookup_open.isra.0+0x11d0/0x1580 [ 1731.640661][T30263] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1731.640713][T30263] ? __pfx_down_write+0x10/0x10 [ 1731.640740][T30263] ? mnt_get_write_access+0x20c/0x300 [ 1731.640777][T30263] path_openat+0x893/0x2cb0 [ 1731.640811][T30263] ? __pfx_path_openat+0x10/0x10 [ 1731.640836][T30263] ? __lock_acquire+0xb8a/0x1c90 [ 1731.640875][T30263] do_filp_open+0x20b/0x470 [ 1731.640899][T30263] ? __pfx_do_filp_open+0x10/0x10 [ 1731.640947][T30263] ? alloc_fd+0x471/0x7d0 [ 1731.640993][T30263] do_sys_openat2+0x11b/0x1d0 [ 1731.641025][T30263] ? __pfx_do_sys_openat2+0x10/0x10 [ 1731.641069][T30263] __x64_sys_openat+0x174/0x210 [ 1731.641103][T30263] ? __pfx___x64_sys_openat+0x10/0x10 [ 1731.641148][T30263] do_syscall_64+0xcd/0x490 [ 1731.641175][T30263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.641200][T30263] RIP: 0033:0x7f2e8238e9a9 [ 1731.641220][T30263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1731.641245][T30263] RSP: 002b:00007f2e8315c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1731.641268][T30263] RAX: ffffffffffffffda RBX: 00007f2e825b5fa0 RCX: 00007f2e8238e9a9 [ 1731.641285][T30263] RDX: 00000000001c1041 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1731.641301][T30263] RBP: 00007f2e82410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1731.641317][T30263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1731.641332][T30263] R13: 0000000000000000 R14: 00007f2e825b5fa0 R15: 00007ffcda472de8 [ 1731.641363][T30263] [ 1733.705649][T25032] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1733.718383][T25032] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1733.726604][T25032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1733.735281][T25032] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1733.743500][T25032] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1733.982013][T26569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.027165][T30293] FAULT_INJECTION: forcing a failure. [ 1734.027165][T30293] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.082356][T30293] CPU: 0 UID: 0 PID: 30293 Comm: syz.3.4756 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1734.082393][T30293] Tainted: [U]=USER [ 1734.082401][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1734.082416][T30293] Call Trace: [ 1734.082423][T30293] [ 1734.082433][T30293] dump_stack_lvl+0x16c/0x1f0 [ 1734.082461][T30293] should_fail_ex+0x512/0x640 [ 1734.082485][T30293] ? fs_reclaim_acquire+0xae/0x150 [ 1734.082520][T30293] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1734.082543][T30293] should_failslab+0xc2/0x120 [ 1734.082571][T30293] __kmalloc_noprof+0xd2/0x510 [ 1734.082601][T30293] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1734.082626][T30293] ? tomoyo_profile+0x47/0x60 [ 1734.082655][T30293] tomoyo_path_number_perm+0x245/0x580 [ 1734.082689][T30293] ? tomoyo_path_number_perm+0x237/0x580 [ 1734.082725][T30293] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1734.082761][T30293] ? find_held_lock+0x2b/0x80 [ 1734.082810][T30293] ? find_held_lock+0x2b/0x80 [ 1734.082833][T30293] ? hook_file_ioctl_common+0x145/0x410 [ 1734.082871][T30293] ? __fget_files+0x20e/0x3c0 [ 1734.082914][T30293] security_file_ioctl+0x9b/0x240 [ 1734.082951][T30293] __x64_sys_ioctl+0xb7/0x210 [ 1734.082986][T30293] do_syscall_64+0xcd/0x490 [ 1734.083013][T30293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.083036][T30293] RIP: 0033:0x7f2e8238e9a9 [ 1734.083055][T30293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.083078][T30293] RSP: 002b:00007f2e8313b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.083105][T30293] RAX: ffffffffffffffda RBX: 00007f2e825b6080 RCX: 00007f2e8238e9a9 [ 1734.083122][T30293] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 1734.083136][T30293] RBP: 00007f2e8313b090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.083151][T30293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.083166][T30293] R13: 0000000000000001 R14: 00007f2e825b6080 R15: 00007ffcda472de8 [ 1734.083195][T30293] [ 1734.083205][T30293] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1734.514140][T30292] net_ratelimit: 93 callbacks suppressed [ 1734.514160][T30292] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 1734.537157][T26569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.601969][T30292] .^: entered promiscuous mode [ 1734.666497][T26569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.404742][T26569] team0: left allmulticast mode [ 1735.410040][T26569] team_slave_0: left allmulticast mode [ 1735.439373][T26569] team_slave_1: left allmulticast mode [ 1735.471947][T26569] team0: left promiscuous mode [ 1735.476768][T26569] team_slave_0: left promiscuous mode [ 1735.517762][T26569] team_slave_1: left promiscuous mode [ 1735.548379][T26569] bridge0: port 3(team0) entered disabled state [ 1735.703600][T26569] bridge_slave_0: left allmulticast mode [ 1735.739409][T26569] bridge_slave_0: left promiscuous mode [ 1735.759055][T25721] Bluetooth: hci2: command tx timeout [ 1735.765710][T26569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.727716][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.734746][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.477634][T26569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.504737][T26569] bond0 (unregistering): Released all slaves [ 1737.588753][T30286] chnl_net:caif_netlink_parms(): no params data found [ 1737.840364][T25721] Bluetooth: hci2: command tx timeout [ 1738.514649][T30286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.559521][T30286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.603819][T30286] bridge_slave_0: entered allmulticast mode [ 1738.638393][T30286] bridge_slave_0: entered promiscuous mode [ 1738.836194][T26569] hsr_slave_0: left promiscuous mode [ 1738.887866][T26569] hsr_slave_1: left promiscuous mode [ 1738.923129][T26569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1738.961011][T26569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1739.006693][T26569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1739.040582][T26569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1739.148900][T26569] veth1_macvtap: left promiscuous mode [ 1739.218876][T26569] veth0_macvtap: left promiscuous mode [ 1739.253203][T26569] veth1_vlan: left promiscuous mode [ 1739.258571][T26569] veth0_vlan: left promiscuous mode [ 1739.898343][T25721] Bluetooth: hci2: command tx timeout [ 1740.648238][T30388] netlink: zone id is out of range [ 1740.673446][T30388] netlink: zone id is out of range [ 1740.686011][T30388] netlink: zone id is out of range [ 1740.691163][T30388] netlink: zone id is out of range [ 1740.765336][T30388] netlink: zone id is out of range [ 1740.838797][T30388] netlink: zone id is out of range [ 1740.850102][T30388] netlink: zone id is out of range [ 1740.912351][T30388] netlink: zone id is out of range [ 1740.942532][T30388] netlink: zone id is out of range [ 1740.992134][T30388] netlink: zone id is out of range [ 1741.560492][T26569] team0 (unregistering): Port device team_slave_1 removed [ 1741.724743][T26569] team0 (unregistering): Port device team_slave_0 removed [ 1741.845846][T30399] FAULT_INJECTION: forcing a failure. [ 1741.845846][T30399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.902447][T30399] CPU: 0 UID: 0 PID: 30399 Comm: syz.3.4768 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1741.902485][T30399] Tainted: [U]=USER [ 1741.902493][T30399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1741.902514][T30399] Call Trace: [ 1741.902523][T30399] [ 1741.902533][T30399] dump_stack_lvl+0x16c/0x1f0 [ 1741.902562][T30399] should_fail_ex+0x512/0x640 [ 1741.902591][T30399] _copy_to_user+0x32/0xd0 [ 1741.902634][T30399] simple_read_from_buffer+0xcb/0x170 [ 1741.902673][T30399] proc_fail_nth_read+0x197/0x270 [ 1741.902707][T30399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1741.902743][T30399] ? rw_verify_area+0xcf/0x680 [ 1741.902778][T30399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1741.902829][T30399] vfs_read+0x1e4/0xc60 [ 1741.902854][T30399] ? __pfx___mutex_lock+0x10/0x10 [ 1741.902878][T30399] ? __pfx_vfs_read+0x10/0x10 [ 1741.902907][T30399] ? __fget_files+0x20e/0x3c0 [ 1741.902952][T30399] ksys_read+0x12a/0x250 [ 1741.902972][T30399] ? __pfx_ksys_read+0x10/0x10 [ 1741.903014][T30399] do_syscall_64+0xcd/0x490 [ 1741.903040][T30399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.903064][T30399] RIP: 0033:0x7f2e8238d3bc [ 1741.903082][T30399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1741.903106][T30399] RSP: 002b:00007f2e8315c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1741.903128][T30399] RAX: ffffffffffffffda RBX: 00007f2e825b5fa0 RCX: 00007f2e8238d3bc [ 1741.903144][T30399] RDX: 000000000000000f RSI: 00007f2e8315c0a0 RDI: 0000000000000003 [ 1741.903158][T30399] RBP: 00007f2e8315c090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.903173][T30399] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1741.903187][T30399] R13: 0000000000000001 R14: 00007f2e825b5fa0 R15: 00007ffcda472de8 [ 1741.903219][T30399] [ 1742.181668][T25721] Bluetooth: hci2: command tx timeout [ 1743.016561][T30286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.030218][T30286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.057674][T30286] bridge_slave_1: entered allmulticast mode [ 1743.082148][T30286] bridge_slave_1: entered promiscuous mode [ 1743.147979][T30402] lo: entered allmulticast mode [ 1743.153673][T30402] lo: left allmulticast mode [ 1743.284763][T30286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1743.333134][T30286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1743.660537][T30286] team0: Port device team_slave_0 added [ 1743.809689][T30286] team0: Port device team_slave_1 added [ 1743.948063][T30286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.956535][T30286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.026639][T30286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.069415][T30286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.105789][T30286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.208052][T30286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.527205][T30286] hsr_slave_0: entered promiscuous mode [ 1744.563748][T30286] hsr_slave_1: entered promiscuous mode [ 1744.594235][T30286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1744.601925][T30286] Cannot create hsr debugfs directory [ 1746.723354][T30286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1746.756756][T30286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1746.825920][T30286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1746.868213][T30286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1747.347717][T30286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1747.437773][T30286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1747.621505][T26568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.628696][T26568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.706336][T26568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.713538][T26568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.382542][T30470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1748.404049][T30470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1748.448377][T30470] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1748.497340][T30470] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1748.534673][T30470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1748.569729][T30470] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1748.604573][T30470] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1748.652684][T30470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1748.658681][T30470] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1748.743683][T30470] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1748.825270][T30286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.013665][T30489] ubi0: attaching mtd0 [ 1749.019148][T30489] ubi0: scanning is finished [ 1749.029041][T30286] veth0_vlan: entered promiscuous mode [ 1749.072793][T30489] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1749.094512][T30286] veth1_vlan: entered promiscuous mode [ 1749.197280][T30489] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1749.310103][T30286] veth0_macvtap: entered promiscuous mode [ 1749.349844][T30286] veth1_macvtap: entered promiscuous mode [ 1749.501120][T30286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.565246][T30286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1749.889866][T30286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.945433][T30286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.954194][T30286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.017905][T30286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.244659][T25721] Bluetooth: hci3: command 0x0406 tx timeout [ 1750.363943][T25131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.371884][T25131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.403193][T25721] Bluetooth: hci1: command 0x0c1a tx timeout [ 1750.527698][T26569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.562531][T25721] Bluetooth: hci0: command 0x0c1a tx timeout [ 1750.583398][T26569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.721889][T25721] Bluetooth: hci2: command 0x0c1a tx timeout [ 1752.482293][T25721] Bluetooth: hci1: command 0x0c1a tx timeout [ 1752.631907][T25721] Bluetooth: hci0: command 0x0c1a tx timeout [ 1752.797790][T25721] Bluetooth: hci2: command 0x0c1a tx timeout [ 1752.834872][T30543] lo: entered allmulticast mode [ 1752.916741][T30548] lo: left allmulticast mode [ 1754.543116][T25721] Bluetooth: hci1: command 0x0c1a tx timeout [ 1754.701015][T25721] Bluetooth: hci0: command 0x0c1a tx timeout [ 1754.838293][T25032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1754.851686][T25032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1754.860456][T25032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1754.867707][T25032] Bluetooth: hci2: command 0x0c1a tx timeout [ 1754.882507][T30581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1754.897586][T30581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1755.898715][T26569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.292684][T26569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.622985][T26569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.868358][T30607] svc: failed to register nfsdv3 RPC service (errno 111). [ 1756.897684][T30607] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1756.929080][T30581] Bluetooth: hci3: command tx timeout [ 1756.984523][T26569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.483002][T30577] chnl_net:caif_netlink_parms(): no params data found [ 1757.993087][T26569] bridge_slave_1: left allmulticast mode [ 1758.013291][T26569] bridge_slave_1: left promiscuous mode [ 1758.055670][T26569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.174737][T26569] bridge_slave_0: left allmulticast mode [ 1758.242213][T26569] bridge_slave_0: left promiscuous mode [ 1758.274966][T26569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.570957][T30640] net_ratelimit: 198 callbacks suppressed [ 1758.570976][T30640] netlink: zone id is out of range [ 1758.643204][T30640] netlink: zone id is out of range [ 1758.648363][T30640] netlink: zone id is out of range [ 1758.773056][T30640] netlink: zone id is out of range [ 1758.778219][T30640] netlink: zone id is out of range [ 1758.899544][T30640] netlink: zone id is out of range [ 1758.904706][T30640] netlink: zone id is out of range [ 1759.000955][T30581] Bluetooth: hci3: command tx timeout [ 1759.017011][T30640] netlink: zone id is out of range [ 1759.089882][T30640] netlink: zone id is out of range [ 1759.095123][T30640] netlink: zone id is out of range [ 1759.545051][T30654] ubi0: attaching mtd0 [ 1759.559685][T30654] ubi0: scanning is finished [ 1759.580529][T30654] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1759.693627][T30654] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1759.936610][T26569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1759.959891][T26569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1759.984963][T26569] bond0 (unregistering): Released all slaves [ 1760.115242][T26569] .^: left promiscuous mode [ 1760.223270][T26569] HfR: left promiscuous mode [ 1760.339201][T30577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.359233][T30577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.367070][T30577] bridge_slave_0: entered allmulticast mode [ 1760.374855][T30577] bridge_slave_0: entered promiscuous mode [ 1760.464047][T30577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.487294][T30577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.515106][T30577] bridge_slave_1: entered allmulticast mode [ 1760.548146][T30577] bridge_slave_1: entered promiscuous mode [ 1760.841019][T30577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.933450][T30577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.067409][T30581] Bluetooth: hci3: command tx timeout [ 1761.324885][T30577] team0: Port device team_slave_0 added [ 1761.388924][T30577] team0: Port device team_slave_1 added [ 1761.730368][T30577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1761.803597][T30577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1761.928332][T30577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1762.010899][T30577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1762.056039][T30577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.176528][T30577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1762.452204][T26569] hsr_slave_1: left promiscuous mode [ 1762.534021][T26569] veth1_macvtap: left promiscuous mode [ 1762.565920][T26569] veth0_macvtap: left promiscuous mode [ 1762.591309][T26569] veth1_vlan: left promiscuous mode [ 1762.611023][T26569] veth0_vlan: left promiscuous mode [ 1763.136636][T30581] Bluetooth: hci3: command tx timeout [ 1764.223896][T26569] team0 (unregistering): Port device team_slave_1 removed [ 1764.372320][T26569] team0 (unregistering): Port device team_slave_0 removed [ 1765.911382][T30718] netlink: 'syz.4.4802': attribute type 8 has an invalid length. [ 1765.931004][T30718] netlink: 'syz.4.4802': attribute type 8 has an invalid length. [ 1766.257031][T30577] hsr_slave_0: entered promiscuous mode [ 1766.301485][T30577] hsr_slave_1: entered promiscuous mode [ 1766.329980][T30577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1766.369759][T30577] Cannot create hsr debugfs directory [ 1766.521877][T30729] net_ratelimit: 198 callbacks suppressed [ 1766.521895][T30729] netlink: zone id is out of range [ 1766.609399][T30729] netlink: zone id is out of range [ 1766.628378][T30729] netlink: zone id is out of range [ 1766.697519][T30729] netlink: zone id is out of range [ 1766.767784][T30729] netlink: zone id is out of range [ 1766.772971][T30729] netlink: zone id is out of range [ 1766.887197][T30729] netlink: zone id is out of range [ 1766.892359][T30729] netlink: zone id is out of range [ 1767.056227][T30729] netlink: zone id is out of range [ 1767.061386][T30729] netlink: zone id is out of range [ 1768.175150][T30755] FAULT_INJECTION: forcing a failure. [ 1768.175150][T30755] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.254241][T30755] CPU: 0 UID: 0 PID: 30755 Comm: syz.2.4808 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1768.254282][T30755] Tainted: [U]=USER [ 1768.254291][T30755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1768.254307][T30755] Call Trace: [ 1768.254315][T30755] [ 1768.254325][T30755] dump_stack_lvl+0x16c/0x1f0 [ 1768.254355][T30755] should_fail_ex+0x512/0x640 [ 1768.254380][T30755] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1768.254409][T30755] should_failslab+0xc2/0x120 [ 1768.254445][T30755] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1768.254472][T30755] ? alloc_empty_file+0x55/0x1e0 [ 1768.254508][T30755] alloc_empty_file+0x55/0x1e0 [ 1768.254541][T30755] path_openat+0xda/0x2cb0 [ 1768.254563][T30755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.254599][T30755] ? __pfx_path_openat+0x10/0x10 [ 1768.254625][T30755] ? __lock_acquire+0xb8a/0x1c90 [ 1768.254663][T30755] do_filp_open+0x20b/0x470 [ 1768.254687][T30755] ? __pfx_do_filp_open+0x10/0x10 [ 1768.254733][T30755] ? alloc_fd+0x471/0x7d0 [ 1768.254781][T30755] do_sys_openat2+0x11b/0x1d0 [ 1768.254814][T30755] ? __pfx_do_sys_openat2+0x10/0x10 [ 1768.254859][T30755] __x64_sys_openat+0x174/0x210 [ 1768.254893][T30755] ? __pfx___x64_sys_openat+0x10/0x10 [ 1768.254939][T30755] do_syscall_64+0xcd/0x490 [ 1768.254967][T30755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.254992][T30755] RIP: 0033:0x7f4c0398e9a9 [ 1768.255011][T30755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1768.255036][T30755] RSP: 002b:00007f4c04786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1768.255059][T30755] RAX: ffffffffffffffda RBX: 00007f4c03bb6080 RCX: 00007f4c0398e9a9 [ 1768.255076][T30755] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1768.255093][T30755] RBP: 00007f4c03a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1768.255108][T30755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1768.255124][T30755] R13: 0000000000000000 R14: 00007f4c03bb6080 R15: 00007ffc85b1c8a8 [ 1768.255154][T30755] [ 1769.283349][T30774] FAULT_INJECTION: forcing a failure. [ 1769.283349][T30774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1769.314936][T30774] CPU: 0 UID: 0 PID: 30774 Comm: syz.0.4811 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1769.314974][T30774] Tainted: [U]=USER [ 1769.314981][T30774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1769.314995][T30774] Call Trace: [ 1769.315002][T30774] [ 1769.315011][T30774] dump_stack_lvl+0x16c/0x1f0 [ 1769.315039][T30774] should_fail_ex+0x512/0x640 [ 1769.315067][T30774] should_fail_alloc_page+0xe7/0x130 [ 1769.315096][T30774] prepare_alloc_pages+0x3c2/0x610 [ 1769.315128][T30774] ? stack_trace_save+0x8e/0xc0 [ 1769.315157][T30774] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1769.315186][T30774] ? kasan_save_stack+0x42/0x60 [ 1769.315207][T30774] ? kasan_save_stack+0x33/0x60 [ 1769.315228][T30774] ? kasan_save_track+0x14/0x30 [ 1769.315248][T30774] ? __kasan_kmalloc+0xaa/0xb0 [ 1769.315268][T30774] ? fuse_dev_alloc+0x8e/0x280 [ 1769.315289][T30774] ? fuse_dev_alloc_install+0x13/0x40 [ 1769.315311][T30774] ? cuse_channel_open+0x100/0x7f0 [ 1769.315355][T30774] ? misc_open+0x35a/0x420 [ 1769.315388][T30774] ? chrdev_open+0x231/0x6a0 [ 1769.315411][T30774] ? do_dentry_open+0x744/0x1c10 [ 1769.315432][T30774] ? vfs_open+0x82/0x3f0 [ 1769.315458][T30774] ? path_openat+0x1de4/0x2cb0 [ 1769.315477][T30774] ? do_filp_open+0x20b/0x470 [ 1769.315498][T30774] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1769.315523][T30774] ? register_lock_class+0x41/0x4c0 [ 1769.315562][T30774] ? __lock_acquire+0xb8a/0x1c90 [ 1769.315599][T30774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1769.315636][T30774] ? policy_nodemask+0xea/0x4e0 [ 1769.315664][T30774] alloc_pages_mpol+0x1fb/0x550 [ 1769.315693][T30774] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1769.315720][T30774] ? fuse_dev_alloc_install+0x2b/0x40 [ 1769.315749][T30774] folio_alloc_noprof+0x20/0x2d0 [ 1769.315780][T30774] cuse_channel_open+0x198/0x7f0 [ 1769.315817][T30774] ? __pfx_cuse_channel_open+0x10/0x10 [ 1769.315855][T30774] misc_open+0x35a/0x420 [ 1769.315893][T30774] ? __pfx_misc_open+0x10/0x10 [ 1769.315928][T30774] chrdev_open+0x231/0x6a0 [ 1769.315953][T30774] ? __pfx_apparmor_file_open+0x10/0x10 [ 1769.315989][T30774] ? __pfx_chrdev_open+0x10/0x10 [ 1769.316015][T30774] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1769.316057][T30774] do_dentry_open+0x744/0x1c10 [ 1769.316080][T30774] ? __pfx_chrdev_open+0x10/0x10 [ 1769.316110][T30774] vfs_open+0x82/0x3f0 [ 1769.316142][T30774] path_openat+0x1de4/0x2cb0 [ 1769.316172][T30774] ? __pfx_path_openat+0x10/0x10 [ 1769.316196][T30774] ? __lock_acquire+0xb8a/0x1c90 [ 1769.316230][T30774] do_filp_open+0x20b/0x470 [ 1769.316252][T30774] ? __pfx_do_filp_open+0x10/0x10 [ 1769.316294][T30774] ? alloc_fd+0x471/0x7d0 [ 1769.316343][T30774] do_sys_openat2+0x11b/0x1d0 [ 1769.316374][T30774] ? __pfx_do_sys_openat2+0x10/0x10 [ 1769.316416][T30774] __x64_sys_openat+0x174/0x210 [ 1769.316446][T30774] ? __pfx___x64_sys_openat+0x10/0x10 [ 1769.316489][T30774] do_syscall_64+0xcd/0x490 [ 1769.316515][T30774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.316538][T30774] RIP: 0033:0x7f8add38e9a9 [ 1769.316557][T30774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.316580][T30774] RSP: 002b:00007f8ade130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1769.316602][T30774] RAX: ffffffffffffffda RBX: 00007f8add5b5fa0 RCX: 00007f8add38e9a9 [ 1769.316618][T30774] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1769.316633][T30774] RBP: 00007f8add410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1769.316647][T30774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1769.316661][T30774] R13: 0000000000000000 R14: 00007f8add5b5fa0 R15: 00007ffce96ac248 [ 1769.316689][T30774] [ 1769.895710][T30779] FAULT_INJECTION: forcing a failure. [ 1769.895710][T30779] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.908562][T30779] CPU: 0 UID: 0 PID: 30779 Comm: syz.2.4812 Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1769.908602][T30779] Tainted: [U]=USER [ 1769.908610][T30779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1769.908626][T30779] Call Trace: [ 1769.908634][T30779] [ 1769.908643][T30779] dump_stack_lvl+0x16c/0x1f0 [ 1769.908672][T30779] should_fail_ex+0x512/0x640 [ 1769.908697][T30779] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1769.908740][T30779] should_failslab+0xc2/0x120 [ 1769.908769][T30779] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1769.908809][T30779] ? kstrdup_quotable_cmdline+0x52/0x210 [ 1769.908858][T30779] kstrdup_quotable_cmdline+0x52/0x210 [ 1769.908893][T30779] __report_access+0x4b/0x3c0 [ 1769.908925][T30779] ? _raw_spin_unlock_irq+0x23/0x50 [ 1769.908963][T30779] task_work_run+0x150/0x240 [ 1769.909000][T30779] ? __pfx_task_work_run+0x10/0x10 [ 1769.909043][T30779] exit_to_user_mode_loop+0xeb/0x110 [ 1769.909082][T30779] do_syscall_64+0x3f6/0x490 [ 1769.909107][T30779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.909130][T30779] RIP: 0033:0x7f4c0398e9a9 [ 1769.909147][T30779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.909170][T30779] RSP: 002b:00007f4c04786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1769.909191][T30779] RAX: ffffffffffffffff RBX: 00007f4c03bb6080 RCX: 00007f4c0398e9a9 [ 1769.909206][T30779] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 1769.909219][T30779] RBP: 00007f4c03a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1769.909233][T30779] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 1769.909247][T30779] R13: 0000000000000000 R14: 00007f4c03bb6080 R15: 00007ffc85b1c8a8 [ 1769.909290][T30779] [ 1769.909348][T30779] ptrace attach of "(null)"[29587] was attempted by "./syz-executor exec"[30779] [ 1773.192352][T30828] random: crng reseeded on system resumption [ 1773.217252][T30828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4820'. [ 1773.231391][T30828] HfR: entered promiscuous mode [ 1773.243821][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4820'. [ 1782.483434][T30834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4823'. [ 1782.644291][T25721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1782.654358][T25721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1782.663555][T25721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1782.671841][T25721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1782.680221][T25721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1782.915688][T30835] chnl_net:caif_netlink_parms(): no params data found [ 1782.995674][T30835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.002951][T30835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.010832][T30835] bridge_slave_0: entered allmulticast mode [ 1783.024380][T30835] bridge_slave_0: entered promiscuous mode [ 1783.032420][T30835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.039972][T30835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.047433][T30835] bridge_slave_1: entered allmulticast mode [ 1783.055153][T30835] bridge_slave_1: entered promiscuous mode [ 1783.090356][T30835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.103517][T30835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.150951][T30835] team0: Port device team_slave_0 added [ 1783.160860][T30835] team0: Port device team_slave_1 added [ 1783.195579][T30835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.203211][T30835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.242065][T30835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.263804][T30835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.270774][T30835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.353487][T30835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.456539][T30835] hsr_slave_0: entered promiscuous mode [ 1783.471691][T30835] hsr_slave_1: entered promiscuous mode [ 1783.487565][T30835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1783.502081][T30835] Cannot create hsr debugfs directory [ 1783.589683][T30850] net_ratelimit: 94 callbacks suppressed [ 1783.589702][T30850] netlink: zone id is out of range [ 1783.616644][T30850] netlink: zone id is out of range [ 1783.625268][T30850] netlink: zone id is out of range [ 1783.639346][T30850] netlink: zone id is out of range [ 1783.649358][T30850] netlink: zone id is out of range [ 1783.665522][T30850] netlink: zone id is out of range [ 1783.695795][T30850] netlink: zone id is out of range [ 1783.719945][T30850] netlink: zone id is out of range [ 1783.754466][T30850] netlink: zone id is out of range [ 1783.769365][T30850] netlink: zone id is out of range [ 1784.704584][T30581] Bluetooth: hci4: command tx timeout [ 1786.770925][T25721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1786.779771][T25051] Bluetooth: hci4: command tx timeout [ 1786.790178][T25721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1786.798624][T25721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1786.807882][T25721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1786.815469][T25721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1786.908107][T30866] netlink: 'syz.2.4829': attribute type 8 has an invalid length. [ 1786.923737][T30866] netlink: 'syz.2.4829': attribute type 8 has an invalid length. [ 1787.145897][T30863] chnl_net:caif_netlink_parms(): no params data found [ 1787.257682][T30863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.265041][T30863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.273198][T30863] bridge_slave_0: entered allmulticast mode [ 1787.281876][T30863] bridge_slave_0: entered promiscuous mode [ 1787.290010][T30863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.303100][T30863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.310407][T30863] bridge_slave_1: entered allmulticast mode [ 1787.318303][T30863] bridge_slave_1: entered promiscuous mode [ 1787.359886][T30863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.372690][T30863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.442310][T30863] team0: Port device team_slave_0 added [ 1787.467444][T30863] team0: Port device team_slave_1 added [ 1787.562011][T30863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.579880][T30863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.650983][T30863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.682655][T30863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.701299][T30863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.770334][T30863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.898280][T30863] hsr_slave_0: entered promiscuous mode [ 1787.916881][T30863] hsr_slave_1: entered promiscuous mode [ 1787.928191][T30863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1787.946111][T30863] Cannot create hsr debugfs directory [ 1788.075037][T30882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4831'. [ 1788.843141][T25721] Bluetooth: hci5: command tx timeout [ 1788.849773][T25721] Bluetooth: hci4: command tx timeout [ 1790.913750][T30581] Bluetooth: hci5: command tx timeout [ 1790.919883][T25721] Bluetooth: hci4: command tx timeout [ 1792.981617][T25721] Bluetooth: hci5: command tx timeout [ 1795.050623][T25721] Bluetooth: hci5: command tx timeout [ 1797.845525][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.851930][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1813.638312][T30581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1813.648089][T30581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1813.656358][T30581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1813.664845][T30581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1813.674124][T30581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1813.874281][T30892] chnl_net:caif_netlink_parms(): no params data found [ 1813.955357][T30892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.962780][T30892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.970165][T30892] bridge_slave_0: entered allmulticast mode [ 1813.978108][T30892] bridge_slave_0: entered promiscuous mode [ 1813.989251][T30892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.997418][T30892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.004834][T30892] bridge_slave_1: entered allmulticast mode [ 1814.015384][T30892] bridge_slave_1: entered promiscuous mode [ 1814.049863][T30892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.063297][T30892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.103729][T30892] team0: Port device team_slave_0 added [ 1814.112730][T30892] team0: Port device team_slave_1 added [ 1814.145858][T30892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.153142][T30892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.179992][T30892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.194506][T30892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.201735][T30892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.228828][T30892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.278840][T30892] hsr_slave_0: entered promiscuous mode [ 1814.285458][T30892] hsr_slave_1: entered promiscuous mode [ 1814.295014][T30892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1814.302929][T30892] Cannot create hsr debugfs directory [ 1815.743069][T30581] Bluetooth: hci6: command tx timeout [ 1817.812350][T30581] Bluetooth: hci6: command tx timeout [ 1819.881587][T30581] Bluetooth: hci6: command tx timeout [ 1821.950733][T30581] Bluetooth: hci6: command tx timeout [ 1842.639780][T25721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1842.648829][T25721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1842.657646][T25721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1842.675408][T25721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1842.683133][T25721] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1842.889823][T30905] chnl_net:caif_netlink_parms(): no params data found [ 1842.975489][T30905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.982802][T30905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.990194][T30905] bridge_slave_0: entered allmulticast mode [ 1842.998990][T30905] bridge_slave_0: entered promiscuous mode [ 1843.008423][T30905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.017743][T30905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.027577][T30905] bridge_slave_1: entered allmulticast mode [ 1843.035451][T30905] bridge_slave_1: entered promiscuous mode [ 1843.070062][T30905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.082607][T30905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1843.124842][T30905] team0: Port device team_slave_0 added [ 1843.140997][T30905] team0: Port device team_slave_1 added [ 1843.171302][T30905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.178294][T30905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.205055][T30905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.219913][T30905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1843.228303][T30905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.256974][T30905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1843.303672][T30905] hsr_slave_0: entered promiscuous mode [ 1843.310827][T30905] hsr_slave_1: entered promiscuous mode [ 1843.316988][T30905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1843.327337][T30905] Cannot create hsr debugfs directory [ 1844.712426][T25721] Bluetooth: hci7: command tx timeout [ 1846.662710][T30581] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1846.673548][T30581] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1846.683023][T30581] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1846.690821][T30581] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1846.700081][T30581] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1846.781560][T30581] Bluetooth: hci7: command tx timeout [ 1846.914400][T30916] chnl_net:caif_netlink_parms(): no params data found [ 1846.996058][T30916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.003418][T30916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.011538][T30916] bridge_slave_0: entered allmulticast mode [ 1847.018947][T30916] bridge_slave_0: entered promiscuous mode [ 1847.027177][T30916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.034615][T30916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.042112][T30916] bridge_slave_1: entered allmulticast mode [ 1847.049523][T30916] bridge_slave_1: entered promiscuous mode [ 1847.087675][T30916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1847.102489][T30916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.140395][T30916] team0: Port device team_slave_0 added [ 1847.148932][T30916] team0: Port device team_slave_1 added [ 1847.180852][T30916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.187833][T30916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.219134][T30916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1847.231833][T30916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1847.238796][T30916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.265394][T30916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.316232][T30916] hsr_slave_0: entered promiscuous mode [ 1847.325334][T30916] hsr_slave_1: entered promiscuous mode [ 1847.332165][T30916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1847.339978][T30916] Cannot create hsr debugfs directory [ 1848.771695][T30581] Bluetooth: hci8: command tx timeout [ 1848.850990][T30581] Bluetooth: hci7: command tx timeout [ 1850.840865][T30581] Bluetooth: hci8: command tx timeout [ 1850.920201][T30581] Bluetooth: hci7: command tx timeout [ 1852.909913][T30581] Bluetooth: hci8: command tx timeout [ 1854.979300][T30581] Bluetooth: hci8: command tx timeout [ 1858.962656][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.969481][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1874.187391][T25721] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1874.199114][T25721] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1874.209332][T25721] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1874.219722][T25721] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1874.227597][T25721] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1874.446700][T30935] chnl_net:caif_netlink_parms(): no params data found [ 1874.533479][T30935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.540911][T30935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.549025][T30935] bridge_slave_0: entered allmulticast mode [ 1874.556434][T30935] bridge_slave_0: entered promiscuous mode [ 1874.565033][T30935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.572461][T30935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.582183][T30935] bridge_slave_1: entered allmulticast mode [ 1874.590212][T30935] bridge_slave_1: entered promiscuous mode [ 1874.629958][T30935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1874.643341][T30935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1874.681699][T30935] team0: Port device team_slave_0 added [ 1874.693870][T30935] team0: Port device team_slave_1 added [ 1874.727110][T30935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.734180][T30935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.762075][T30935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.775409][T30935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.782804][T30935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.813530][T30935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1874.861729][T30935] hsr_slave_0: entered promiscuous mode [ 1874.870542][T30935] hsr_slave_1: entered promiscuous mode [ 1874.878740][T30935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1874.886958][T30935] Cannot create hsr debugfs directory [ 1876.308150][T25721] Bluetooth: hci9: command tx timeout [ 1878.378420][T25721] Bluetooth: hci9: command tx timeout [ 1880.446626][T30581] Bluetooth: hci9: command tx timeout [ 1881.402046][T30581] Bluetooth: hci3: command 0x0406 tx timeout [ 1882.515835][T25721] Bluetooth: hci9: command tx timeout [ 1903.235599][T25721] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1903.245636][T25721] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1903.253708][T25721] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1903.264950][T25721] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1903.273891][T25721] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1903.490036][T30948] chnl_net:caif_netlink_parms(): no params data found [ 1903.572135][T30948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.579420][T30948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.590116][T30948] bridge_slave_0: entered allmulticast mode [ 1903.598147][T30948] bridge_slave_0: entered promiscuous mode [ 1903.606894][T30948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.614066][T30948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.621722][T30948] bridge_slave_1: entered allmulticast mode [ 1903.631811][T30948] bridge_slave_1: entered promiscuous mode [ 1903.667850][T30948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1903.681065][T30948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1903.733610][T30948] team0: Port device team_slave_0 added [ 1903.744311][T30948] team0: Port device team_slave_1 added [ 1903.777552][T30948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1903.784709][T30948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1903.814569][T30948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1903.827503][T30948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1903.836633][T30948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1903.863433][T30948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1903.917657][T30948] hsr_slave_0: entered promiscuous mode [ 1903.924134][T30948] hsr_slave_1: entered promiscuous mode [ 1903.931358][T30948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1903.941123][T30948] Cannot create hsr debugfs directory [ 1905.277449][T25721] Bluetooth: hci10: command tx timeout [ 1906.875002][T30581] Bluetooth: hci4: command 0x0406 tx timeout [ 1907.221647][T30581] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1907.233032][T30581] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1907.241432][T30581] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1907.249417][T30581] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1907.257507][T30581] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1907.346643][T30581] Bluetooth: hci10: command tx timeout [ 1907.474718][T30961] chnl_net:caif_netlink_parms(): no params data found [ 1907.562862][T30961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.570254][T30961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.578403][T30961] bridge_slave_0: entered allmulticast mode [ 1907.586086][T30961] bridge_slave_0: entered promiscuous mode [ 1907.593968][T30961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.603258][T30961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.611769][T30961] bridge_slave_1: entered allmulticast mode [ 1907.619626][T30961] bridge_slave_1: entered promiscuous mode [ 1907.658058][T30961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1907.671178][T30961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.712304][T30961] team0: Port device team_slave_0 added [ 1907.722529][T30961] team0: Port device team_slave_1 added [ 1907.753878][T30961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1907.761007][T30961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1907.790451][T30961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.805675][T30961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.812636][T30961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1907.840212][T30961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1907.886494][T30961] hsr_slave_0: entered promiscuous mode [ 1907.893172][T30961] hsr_slave_1: entered promiscuous mode [ 1907.902157][T30961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1907.912334][T30961] Cannot create hsr debugfs directory [ 1909.336290][T30581] Bluetooth: hci11: command tx timeout [ 1909.415936][T30581] Bluetooth: hci10: command tx timeout [ 1911.405731][T30581] Bluetooth: hci11: command tx timeout [ 1911.485173][T30581] Bluetooth: hci10: command tx timeout [ 1911.962740][T30581] Bluetooth: hci5: command 0x0406 tx timeout [ 1913.474773][T25721] Bluetooth: hci11: command tx timeout [ 1915.544072][T25721] Bluetooth: hci11: command tx timeout [ 1916.261836][ T31] INFO: task syz-executor:30577 blocked for more than 143 seconds. [ 1916.269795][ T31] Tainted: G U 6.16.0-rc7-syzkaller #0 [ 1916.279369][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1916.288329][ T31] task:syz-executor state:D stack:24824 pid:30577 tgid:30577 ppid:1 task_flags:0x480140 flags:0x00004006 [ 1916.300602][ T31] Call Trace: [ 1916.303901][ T31] [ 1916.306856][ T31] __schedule+0x116a/0x5dd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1916.311865][ T31] ? __lock_acquire+0x622/0x1c90 [ 1916.319924][ T31] ? __pfx___schedule+0x10/0x10 [ 1916.324841][ T31] ? find_held_lock+0x2b/0x80 [ 1916.329548][ T31] ? schedule+0x2d7/0x3a0 [ 1916.349759][ T31] schedule+0xe7/0x3a0 [ 1916.353928][ T31] schedule_timeout+0x257/0x290 [ 1916.358812][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1916.389590][ T31] ? mark_held_locks+0x49/0x80 [ 1916.394436][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1916.409481][ T31] __wait_for_common+0x2ff/0x4e0 [ 1916.414477][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1916.429589][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1916.435189][ T31] remove_one+0x312/0x420 [ 1916.444971][ T31] ? find_next_child+0x18f/0x280 [ 1916.460264][ T31] ? __pfx_remove_one+0x10/0x10 [ 1916.479968][ T31] simple_recursive_removal+0x21b/0x690 [ 1916.485574][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1916.498953][ T31] ? __pfx_remove_one+0x10/0x10 [ 1916.503868][ T31] debugfs_remove+0x5d/0x80 [ 1916.508397][ T31] nsim_drv_remove+0xd2/0x1d0 [ 1916.528817][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1916.534177][ T31] device_remove+0xcb/0x170 [ 1916.548992][ T31] device_release_driver_internal+0x44b/0x620 [ 1916.555121][ T31] bus_remove_device+0x22f/0x420 [ 1916.578774][ T31] device_del+0x396/0x9f0 [ 1916.583179][ T31] ? __pfx_device_del+0x10/0x10 [ 1916.588084][ T31] device_unregister+0x1d/0xc0 [ 1916.599518][ T31] del_device_store+0x355/0x4a0 [ 1916.604428][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1916.680659][ T31] ? find_held_lock+0x2b/0x80 [ 1916.685573][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1916.747646][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1916.753120][ T31] bus_attr_store+0x74/0xb0 [ 1916.769441][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1916.774707][ T31] sysfs_kf_write+0xf2/0x150 [ 1916.790178][ T31] kernfs_fop_write_iter+0x354/0x510 [ 1916.795549][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1916.822193][ T31] vfs_write+0x6c4/0x1150 [ 1916.826577][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1916.837704][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1916.842540][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1916.866997][ T31] ? find_held_lock+0x2b/0x80 [ 1916.873530][ T31] ksys_write+0x12a/0x250 [ 1916.886885][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1916.891789][ T31] do_syscall_64+0xcd/0x490 [ 1916.896325][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.916847][ T31] RIP: 0033:0x7efd56d8d45f [ 1916.921320][ T31] RSP: 002b:00007ffe6c5343b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1916.946832][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efd56d8d45f [ 1916.954934][ T31] RDX: 0000000000000001 RSI: 00007ffe6c534400 RDI: 0000000000000005 [ 1916.996382][ T31] RBP: 00007efd56e11fbd R08: 0000000000000000 R09: 00007ffe6c534207 [ 1917.004409][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1917.036147][ T31] R13: 00007ffe6c534400 R14: 00007efd57ae4620 R15: 0000000000000003 [ 1917.044217][ T31] [ 1917.054331][T29572] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz-executor: Error -117 reading block bitmap for 2 [ 1917.068310][ T31] INFO: task syz.4.4807:30737 blocked for more than 144 seconds. [ 1917.084657][ T31] Tainted: G U 6.16.0-rc7-syzkaller #0 [ 1917.115510][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1917.137858][ T31] task:syz.4.4807 state:D stack:26888 pid:30737 tgid:30736 ppid:29485 task_flags:0x400140 flags:0x00004004 [ 1917.165530][ T31] Call Trace: [ 1917.168862][ T31] [ 1917.171809][ T31] __schedule+0x116a/0x5dd0 [ 1917.195347][ T31] ? __lock_acquire+0x622/0x1c90 [ 1917.200356][ T31] ? __pfx___schedule+0x10/0x10 [ 1917.216069][ T31] ? find_held_lock+0x2b/0x80 [ 1917.220829][ T31] ? schedule+0x2d7/0x3a0 [ 1917.237788][ T31] schedule+0xe7/0x3a0 [ 1917.242005][ T31] schedule_preempt_disabled+0x13/0x30 [ 1917.254982][ T31] __mutex_lock+0x6c7/0xb90 [ 1917.259545][ T31] ? __pfx__kstrtoull+0x10/0x10 [ 1917.264420][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1917.276374][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1917.283619][ T31] ? __pfx_kstrtouint+0x10/0x10 [ 1917.288934][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1917.295740][ T31] nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1917.301502][ T31] ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10 [ 1917.308208][ T31] ? __debugfs_file_get+0x1fe/0x840 [ 1917.313459][ T31] full_proxy_write+0x13f/0x200 [ 1917.318664][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1917.324068][ T31] vfs_write+0x29d/0x1150 [ 1917.328775][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1917.333876][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1917.339832][ T31] ? __fget_files+0x20e/0x3c0 [ 1917.346469][ T31] ksys_write+0x12a/0x250 [ 1917.350838][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1917.356045][ T31] do_syscall_64+0xcd/0x490 [ 1917.360624][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.366987][ T31] RIP: 0033:0x7fee8e38e9a9 [ 1917.371466][ T31] RSP: 002b:00007fee8f2c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1917.383261][ T31] RAX: ffffffffffffffda RBX: 00007fee8e5b5fa0 RCX: 00007fee8e38e9a9 [ 1917.391582][ T31] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 1917.399765][ T31] RBP: 00007fee8e410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1917.408420][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1917.416646][ T31] R13: 0000000000000000 R14: 00007fee8e5b5fa0 R15: 00007ffc87482158 [ 1917.424898][ T31] [ 1917.469434][ T31] INFO: task syz.0.4815:30800 blocked for more than 144 seconds. [ 1917.477704][ T31] Tainted: G U 6.16.0-rc7-syzkaller #0 [ 1917.488308][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1917.497385][ T31] task:syz.0.4815 state:D stack:26888 pid:30800 tgid:30799 ppid:30286 task_flags:0x400140 flags:0x00004004 [ 1917.509780][ T31] Call Trace: [ 1917.513073][ T31] [ 1917.516725][ T31] __schedule+0x116a/0x5dd0 [ 1917.521302][ T31] ? __lock_acquire+0x622/0x1c90 [ 1917.526572][ T31] ? __pfx___schedule+0x10/0x10 [ 1917.531458][ T31] ? find_held_lock+0x2b/0x80 [ 1917.536684][ T31] ? schedule+0x2d7/0x3a0 [ 1917.541054][ T31] schedule+0xe7/0x3a0 [ 1917.545473][ T31] schedule_preempt_disabled+0x13/0x30 [ 1917.550973][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 1917.556988][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1917.563087][ T31] ? __pfx___might_resched+0x10/0x10 [ 1917.570772][ T31] ? find_held_lock+0x2b/0x80 [ 1917.575693][ T31] down_read+0xef/0x480 [ 1917.579883][ T31] ? mnt_get_write_access+0x54/0x300 [ 1917.587183][ T31] ? __pfx_down_read+0x10/0x10 [ 1917.591975][ T31] ? mnt_get_write_access+0x20c/0x300 [ 1917.598465][ T31] path_openat+0x818/0x2cb0 [ 1917.603009][ T31] ? __pfx_path_openat+0x10/0x10 [ 1917.608301][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1917.613484][ T31] do_filp_open+0x20b/0x470 [ 1917.618007][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1917.623786][ T31] ? alloc_fd+0x471/0x7d0 [ 1917.628167][ T31] do_sys_openat2+0x11b/0x1d0 [ 1917.632869][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1917.638512][ T31] __x64_sys_openat+0x174/0x210 [ 1917.643593][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1917.649013][ T31] do_syscall_64+0xcd/0x490 [ 1917.653829][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.659751][ T31] RIP: 0033:0x7f8add38e9a9 [ 1917.664479][ T31] RSP: 002b:00007f8ade130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1917.675504][ T31] RAX: ffffffffffffffda RBX: 00007f8add5b5fa0 RCX: 00007f8add38e9a9 [ 1917.683743][ T31] RDX: 0000000000048002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1917.694042][ T31] RBP: 00007f8add410d69 R08: 0000000000000000 R09: 0000000000000000 [ 1917.702216][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1917.713366][ T31] R13: 0000000000000000 R14: 00007f8add5b5fa0 R15: 00007ffce96ac248 [ 1917.721383][ T31] [ 1917.729557][ T31] [ 1917.729557][ T31] Showing all locks held in the system: [ 1917.738190][ T31] 1 lock held by khungtaskd/31: [ 1917.747221][ T31] #0: ffffffff8e5c4c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1917.757435][ T31] 6 locks held by kworker/u11:15/26568: [ 1917.763222][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1917.774052][ T31] #1: ffffc9001092fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1917.788493][ T31] #2: ffffffff90349e50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1917.798099][ T31] #3: ffffffff9035fea8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 1917.807772][ T31] #4: ffff88805f2954e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xdd/0x230 [ 1917.818482][ T31] #5: ffffffff8e5d0278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1917.829575][ T31] 2 locks held by getty/29320: [ 1917.834555][ T31] #0: ffff88814ca860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1917.845007][ T31] #1: ffffc90002ec62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1917.859228][ T31] 7 locks held by syz-executor/30577: [ 1917.864844][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1917.874177][ T31] #1: ffff8880329d6c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1917.884284][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1917.898631][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1917.909401][ T31] #4: ffff88803054f0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 1917.920201][ T31] #5: ffff888030549250 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 1917.930503][ T31] #6: ffff888059498148 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_recursive_removal+0x2c5/0x690 [ 1917.942882][ T31] 3 locks held by syz.4.4807/30737: [ 1917.948093][ T31] #0: ffff888029987978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1917.957719][ T31] #1: ffff88801faec428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1917.967234][ T31] #2: ffff888030549250 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1917.978560][ T31] 2 locks held by syz.0.4815/30800: [ 1917.984052][ T31] #0: ffff88801faec428 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x1ec8/0x2cb0 [ 1917.995252][ T31] #1: ffff888059498148 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: path_openat+0x818/0x2cb0 [ 1918.009060][ T31] 4 locks held by syz-executor/30835: [ 1918.014824][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.024057][ T31] #1: ffff88802921cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.034064][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.044397][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.055648][ T31] 4 locks held by syz-executor/30863: [ 1918.061308][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.070320][ T31] #1: ffff888033907888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.080674][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.093312][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.103975][ T31] 4 locks held by syz-executor/30892: [ 1918.109362][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.120985][ T31] #1: ffff88805bc57888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.131068][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.141399][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.151907][ T31] 4 locks held by syz-executor/30905: [ 1918.157292][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.168232][ T31] #1: ffff888033525488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.179454][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.190213][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.202551][ T31] 4 locks held by syz-executor/30916: [ 1918.207946][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.217284][ T31] #1: ffff88805c94cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.228954][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.240142][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.250826][ T31] 4 locks held by syz-executor/30935: [ 1918.256212][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.265554][ T31] #1: ffff88805be21c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.276314][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.286675][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.299218][ T31] 4 locks held by syz-executor/30948: [ 1918.305285][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.314534][ T31] #1: ffff88805b547888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.324612][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.337399][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.348069][ T31] 4 locks held by syz-executor/30961: [ 1918.354313][ T31] #0: ffff88807ecd0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1918.363581][ T31] #1: ffff88805c94c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1918.373595][ T31] #2: ffff8880286470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1918.384779][ T31] #3: ffffffff8f8e7ce8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1918.407574][ T31] [ 1918.414737][ T31] ============================================= [ 1918.414737][ T31] [ 1918.434935][ T31] NMI backtrace for cpu 0 [ 1918.434957][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1918.434989][ T31] Tainted: [U]=USER [ 1918.434996][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1918.435010][ T31] Call Trace: [ 1918.435017][ T31] [ 1918.435026][ T31] dump_stack_lvl+0x116/0x1f0 [ 1918.435052][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1918.435100][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1918.435140][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1918.435173][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1918.435209][ T31] watchdog+0xf70/0x12c0 [ 1918.435250][ T31] ? __pfx_watchdog+0x10/0x10 [ 1918.435284][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1918.435308][ T31] ? __kthread_parkme+0x19e/0x250 [ 1918.435339][ T31] ? __pfx_watchdog+0x10/0x10 [ 1918.435374][ T31] kthread+0x3c2/0x780 [ 1918.435409][ T31] ? __pfx_kthread+0x10/0x10 [ 1918.435445][ T31] ? rcu_is_watching+0x12/0xc0 [ 1918.435470][ T31] ? __pfx_kthread+0x10/0x10 [ 1918.435506][ T31] ret_from_fork+0x5d7/0x6f0 [ 1918.435538][ T31] ? __pfx_kthread+0x10/0x10 [ 1918.435573][ T31] ret_from_fork_asm+0x1a/0x30 [ 1918.435613][ T31] [ 1918.435628][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1918.564477][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 1918.576127][ T31] Tainted: [U]=USER [ 1918.579933][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1918.589993][ T31] Call Trace: [ 1918.593283][ T31] [ 1918.596221][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1918.600824][ T31] panic+0x71c/0x800 [ 1918.604739][ T31] ? __pfx_panic+0x10/0x10 [ 1918.609178][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1918.614137][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1918.619887][ T31] ? irq_work_queue+0xce/0x100 [ 1918.624693][ T31] ? watchdog+0xdda/0x12c0 [ 1918.629130][ T31] ? watchdog+0xdcd/0x12c0 [ 1918.633578][ T31] watchdog+0xdeb/0x12c0 [ 1918.637857][ T31] ? __pfx_watchdog+0x10/0x10 [ 1918.642563][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1918.647778][ T31] ? __kthread_parkme+0x19e/0x250 [ 1918.652826][ T31] ? __pfx_watchdog+0x10/0x10 [ 1918.657534][ T31] kthread+0x3c2/0x780 [ 1918.661632][ T31] ? __pfx_kthread+0x10/0x10 [ 1918.666274][ T31] ? rcu_is_watching+0x12/0xc0 [ 1918.671053][ T31] ? __pfx_kthread+0x10/0x10 [ 1918.675668][ T31] ret_from_fork+0x5d7/0x6f0 [ 1918.680283][ T31] ? __pfx_kthread+0x10/0x10 [ 1918.684912][ T31] ret_from_fork_asm+0x1a/0x30 [ 1918.689708][ T31] [ 1918.692853][ T31] Kernel Offset: disabled [ 1918.697198][ T31] Rebooting in 86400 seconds..