last executing test programs: 9m16.794361179s ago: executing program 32 (id=145): r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mem\x00', 0x90000, 0x0) read$auto_proc_mem_operations_base(r0, &(0x7f0000000040)=""/148, 0x94) r1 = pidfd_open$auto(0xffffffffffffffff, 0x6) read$auto_ftrace_event_format_fops_trace_events(r1, &(0x7f0000000100)=""/60, 0x3c) ioctl$auto_SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)="e6617d2acb0bc15ba7e9c340ba8403c6c27bbc820002dffd199a7729c8695acff88b35d19bd5c03938b293fd7aeaa05e80257e8511b27ad7e3b7d9a1e2c133fcfaf81d139524a25abce6e41aa92a8300e0f57298589fb23e8bfb5bc8420f32b499c47ea43adda2a41901808454a81fcd63abf8ca54dd7f19bd7d13c06c593140f8252110c4266aef1d978036f1af14cf48b4963918bc01145289fec7829d196d59e9362e6e1d5a0f8702e5bb40b99246f33c7184dbbc1bd9a661790172fe439a86df28296c34b6b5a6d9b9d3399c511a0cfce42ebbaabc509075d5083c6516ba") r2 = semctl$auto_SETALL(0x18fad064, 0x2, 0x11, 0x0) r3 = prctl$auto_PR_MPX_DISABLE_MANAGEMENT(0x2c, 0xfffffffffffffff9, r2, 0xa000, 0x7) r4 = getsockopt$auto_SO_PEERGROUPS(r0, 0x6, 0x3b, &(0x7f0000000240)=']&#&\x00', &(0x7f0000000280)=0x5) close_range$auto(r3, r4, 0xe4) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x234, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x8}, @NL80211_ATTR_FRAME={0x216, 0x33, "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"}]}, 0x234}, 0x1, 0x0, 0x0, 0x48040}, 0x40000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000600), r3) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xe}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xa}]}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x5}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7fff}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x840) r6 = syz_clone3(&(0x7f0000000a40)={0x60004400, &(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0, {0x33}, &(0x7f0000000840)=""/187, 0xbb, &(0x7f0000000900)=""/210, &(0x7f0000000a00)=[r2], 0x1, {r3}}, 0x58) r9 = fcntl$auto_F_ADD_SEALS(r0, 0x409, r7) ioctl$auto_TUNSETVNETLE2(r9, 0x400454dc, &(0x7f0000000ac0)=0x2) ioctl$auto_BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000b00)={"b527659f3f08697e3afe4a1d59a603f6de8dd394fccd9f663701e063898dff04", 0x1, 0x2, 0x7, 0x8, 0xa, r6}) getpgid$auto(r10) r11 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/cec/cec0/status\x00', 0x80080, 0x0) bpf$auto(0x7ff, &(0x7f0000000bc0)=@iter_create={r11, 0x5f40}, 0x9) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000cc0), 0xffffffffffffffff) shmctl$auto_SHM_INFO(0x401, 0xe, &(0x7f0000000e40)={{0x1, 0xee00, 0xee00, 0x4, 0x5, 0xffffffff, 0x4}, 0x99a, 0x100000001, 0x3, 0x9, @raw=0x8, @inferred=r8, 0xe69b, 0x0, &(0x7f0000000d00)="452334638cffc5e7ecd3d032ad23167cc29a4dd201efb61b2fc3607f6e437620cfd84a70b1fb9e85d393779ec1ff6ff31b289e47fd2a39dbe06f61711d96d6ce0c31eafc425f23a31ae92aa0773d230533a901b3ecd9d025900e4888b4be85271683096bd400cf9cb7761df7f4ae5ea5e63579b301777cc3990fd7f24c2fe7afd38e9231cca770a212ac72eaf09ab5454e3d2822815bed732e2cd3b2dba869dcd6354b87552b0dede58b4a47", &(0x7f0000000dc0)="1c917b33f48e4990e5d960e8f84c174db2af6dc45857ee6f83bc8048a9c448ca19a107604e4a2e508c9e0abb916693e4c95b86663978b1857dcb3efd8ba28aea96477c3b4134593c3d7b13d3"}) sendmsg$auto_NL802154_CMD_ASSOCIATE(r4, &(0x7f0000001380)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000000ec0)={0x44c, r13, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_SEC_DEVICE={0x3fb, 0x2e, 0x0, 0x1, [@generic="5140f9e87604c0a4771598df5d219b3ab2eb5d58204c23cc93c116095928a097f8a235", @typed={0x8, 0x6, 0x0, 0x0, @uid=r14}, @generic="a98baf353204818e0cd8c99d5196baac6d7e22b949244e4c6ca3841b01d1905fb853217a94396c4394639f87d7c1b11f1af6a416b5f17c13a727736c6065a7f5fb8c27d5fc2e121c2f567d67986a6ddf53825079e3c56742bccf442ce759770917a7bf1706b2559377e0e9eec083c7a98b007c1814fbdff0e0d14d8a", @nested={0x129, 0xc9, 0x0, 0x1, [@typed={0x84, 0x118, 0x0, 0x0, @binary="d6e7b750fdb1dcb8cd5cb327d49e26aa2063ddc9997dbfd1c45b3431858a6f756cdb1ed446888e055838ec203233569a672ff96c0c50a413047003ef66adce5baf14fad2182807e6e404cc8c64b86e96521d1f5f20c5eb8f337bc1febc41b4911d251b18cf052df23b9f12ac1fcfddbc5c6003afaca9ad59682f5733636eca74"}, @generic="d53cab7c6b1478d51a682887d16866a2d13e28722b1d309897cf5e050c031234a644e57bcbf4fe", @generic="d6e8f328e4ca86e2822fe93ae99948aed11c29424b6a5bd74b45b09114b60f4f3fcbb13b13ef7d6743631c1157eaa9afcd22e118f3f64e2c65e152a0f3fbb177b69ace72677f934cf9c536b73576536ba8d73da76120b04a1652f408f2c8433da47a01a07a9d2819dcd2905d29888a007a45f4ec1221317d56eb"]}, @nested={0x44, 0xa6, 0x0, 0x1, [@generic="63fe1f2299e535ce172bc80943fe9cd4fbb4449282977976cc5226a6440218a19b295309b48639ca84c64b4c33d3a094f81051f6494496df9f0a0ba6", @nested={0x4, 0xa4}]}, @generic="a8f9c0fa0b179d1b8bba5d39f79390c792cc6fa0564c84cc63c2036bf4c6928dfacc35b50784f99256a84a1c4d2a430a8eb4bf90db2cf8073633e1deb851fbc7a19d8b7efb98ac92c699cf7ab353ab351a1508ad6d06f21d0f367058748d181edf980a7e39d3c3d46578653de93965767b937e26ee16006c969712676933ad759adaebf3b1a1ba32435c4c4f9abbf46dfddf8849b58331488a424227030bbdbe70beca107353dba705e89f90b2cfd96bccfb0ff2001d94fdb8b708746b24f873673ec74e57f2954f77da54312b4f2c789bf73e1fbcd1bc11936018505d83a2245820bbe5fe4e5127a7db31", @generic="8fe4c9f2a464f02c41d681b9ba03bbbdde512ff11c2eb2fbed4d79f748809d9ba2cd3c4c0dc56b0f0703c85a150d4ef165a9ef9ab253a422d8e884d15956881426b252e65b6931c982b6d30a3967416842120fbca7fa30eed817d614ef3d3ebb00", @nested={0x94, 0x34, 0x0, 0x1, [@generic="0da68a333bb35cef52b32ad91b6af32a9e99e046f67ec0b0d733f165f0f36dfc48c442f53d78ab22d863a1ba0bfff53812e84f5d5c923f20bc6d229bdba3cb8b0b1d6cc3fd40d859b6d38e651445fe9a9281f3b447d1aded260d7390653392ae986db294e7cc621a2874d353be88f86a2fbf0e3a975ff3fa8ac1148da9cbc6ca46fd0968f68e984c425472b0d9afd9d7"]}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x800}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) read$auto_clear_warn_once_fops_(r12, &(0x7f00000013c0)=""/204, 0xcc) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/sequencer\x00', 0x181040, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r15, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x108090}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x4001010) r16 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001640), r1) r17 = setfsuid$auto(r14) sendmsg$auto_TIPC_NL_LINK_SET(r15, &(0x7f0000001b00)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001680)={0x430, r16, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0xb, 0x43, 0x0, 0x0, @str='\x04/$$]{\x00'}]}, @TIPC_NLA_NODE={0x13f, 0x6, 0x0, 0x1, [@nested={0x1c, 0x5f, 0x0, 0x1, [@typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x5d}]}, @typed={0x8, 0xf9, 0x0, 0x0, @uid=r14}, @nested={0x8, 0xae, 0x0, 0x1, [@nested={0x4, 0x133}]}, @typed={0x8, 0x108, 0x0, 0x0, @u32=0xffff0001}, @generic="990e88d464e3a269b19855221455873af3974d26bf4c0bd0de2e314a4190f2accc5608a89330fdf6eb764e1b08d44d04", @generic="40eb5ec5d12ad2c7f4bc2e76e490b6863843e2d096d4b58c33f220f64f4eef52f74b10d83e718b78332f87a4b63eae4d23f4235debe9f8ff849df2561058cc82029a043e50c7c95ffabd75236245f034c58ac1c4d76c5708618f63cfbc64b5b599180f131b8ee75fa885ea5aa565778c205f6a8eb3e59b0d89715c8d881f5b7006ffa5c84848d006434cb8ed8c4ebe26bd26a7cd66352122b0b579f4e9212deac5c641bbce3ccb5d366d1b86d0fc99bb17b77166b49de97981c1cb8d8e4a71f1a47f9e2df86606e8ec6369f108e0ab1952f9d81b68069d"]}, @TIPC_NLA_NAME_TABLE={0x2c2, 0x8, 0x0, 0x1, [@typed={0x8, 0x13e, 0x0, 0x0, @uid=r14}, @nested={0x8, 0x97, 0x0, 0x1, [@nested={0x4, 0xae}]}, @generic="4721f5d4893e1fa34abd17c58ae089aab475b0bd2039edd47c92d8078ca3fe2c6b1c4d7ebbf0af51df05e0af267ef2a09f9dce948e5348cfa4e10f6667f28bacfd2937c284ef637b3ba31b73c14b7b658e2ec6a5d075dc1596842c8c62d9fa831f7fee9e94a2d67b", @nested={0x151, 0xf8, 0x0, 0x1, [@typed={0xc, 0xc0, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x137}, @nested={0x4, 0x35}, @typed={0x8, 0x14b, 0x0, 0x0, @uid=r17}, @nested={0x4, 0x67}, @generic="267e16d9dede1b6d4dcccea701b7a115aa332dd670bd7a9275a98c53a4e043e3454b6d0908a63be1c7855384f7f9e09e2212d944c14d3bdee5b1d887fa14461a70d7e37d43cd1d6b76cdc59ebb0257ee6d47cc7ae8d5c7ddec89699aa93b88db4d843892851d8f3d2d2a2e2aa1f885675fb39aa47a3dba22be3412f9670ee54c6bf4d63c218445c590585e8170c7d9b087bd0f03704d284c6675e3677d7af24a1fe44cde1457acac6a3ab9bf54faf1d26d6f4095dfb3aeba4f5f80e929002df427dee6f68d457622f87f175c54", @typed={0x5d, 0xcf, 0x0, 0x0, @binary="a6dd3ff52a766cdab05ed5f217f8850cc981db1697e26d59ca9df55e5493c3c247d82982c159dd9dfb031e82448cc3f7120f683dafec81ee1cd983a764b61dd212f4b9a42e636859eafc188be0c896cc3d091ed52d04733532"}]}, @generic="1280b19bbccef0fc32b4f07ccf2a5a48c5a1d464e2c887fde2fa15d17cb5b10124f45fce18601e74c0f02fe489c0a4483be294b11178f71cb24c671fa4b206de294db44af57c31cd45d4344965c20e49e2bad2c7b7176e8db462e93aa8c54330d90efaa65c464d221497e6642cffc3f1282e68fbdd0486cce8d43f8472c75cbe81660d1feb2a31443193b49afe85ffdcc9a0cbc3bc6c393e5cea57325ee70ae700fcac82fefc8e61fe4297577289a52243cd23f11c3d508d746c774385e7e6c404fb95858001fca018d3325c4abd3cd01612b35a2c75bf143a2c0a5d647a043e494ce8cce86af0d2c4bca65e623d9ce4bcea", @generic]}]}, 0x430}, 0x1, 0x0, 0x0, 0x20000850}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) 7m45.205790751s ago: executing program 33 (id=521): socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) read$auto(0x3, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "89803500"}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @pid}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000300)="e53a7c8597dacda41aa04701f0593069a048dae8a3ab7c1f0aa1682997821fcc383a6ab656f6d921cd8ccfb082564295b77ccf5d6796495d13525b2eb9a125032ac50bc986a6253575aecf8ce2d3636de3146f09e83c5a09cacd543b78075961732bd7daa9cef93822f1ee83feb4c38a74ee2a104c4fe51a3bebf9abb5639d078e67889f9a", 0x85) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x2}, @ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0x6}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004084}, 0x82) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x0, 0x0) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f0000000040)=""/136, 0x88) read$auto(r3, 0x0, 0x2184689f) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x402802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop14/hctx0/state\x00', 0x2000, 0x0) read$auto(r6, &(0x7f0000000000)='+\x00', 0x5) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x0) ioctl$auto(0x3, 0x541b, 0x38) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 7m26.562873793s ago: executing program 34 (id=535): ioperm$auto(0x3, 0xe, 0x2000000000000149) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x4, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x1d, 0x3, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/interface_authorized_default\x00', 0xc2481, 0x0) write$auto(r0, &(0x7f0000000040)='\xdb\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) capset$auto(&(0x7f0000000000)={0x4, 0xffffffffffffffff}, 0x0) sched_setattr$auto(r1, &(0x7f0000000080)={0x3ccfe37e, 0x401, 0x8, 0xd, 0x8, 0x7, 0x3, 0x9, 0x7ff, 0x8000}, 0x8) 6m24.593571189s ago: executing program 6 (id=834): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x6db, 0x1, 0x0, 0x0, 0x7) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@_si_pad}) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xaa24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) sysfs$auto(0x9, 0xa5, 0x8000) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) migrate_pages$auto(0x0, 0x5, 0x0, &(0x7f0000000180)=0x19f) prctl$auto_PR_SET_MM_START_STACK(0x6, 0x5, 0x0, 0x5, 0x80) 6m17.209528761s ago: executing program 6 (id=851): r0 = prctl$auto_PR_GET_MDWE(0x42, 0x6, 0x0, 0x401, 0x3) mmap$auto(0x2432ea3d, 0x400008, 0xe2, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="e36ac6129fad5e6b3dfbdaf3cf20de3d928d66133bc7d168e1fd5957f918b06a02473ebcbd81de294ee350ef518a1002547d7e665a6ebc2daa461e443ecb6dd5cd45f6eb08c006e7360ba51191962513010f8d6ab804d9db020aaffb5cdfa80a5f8be91771e8cd27d968a755e09e6c7ae9ef76f81aca99f15de1888ac9231d218ab4b1efb5336ed8aeddd1fd28a5d3acf876167e263ed4e7a9260a1ed009c0da352efa0875bea88b977af2d5ab5f4e6dea9c72d7a9ae6d683116eb3a415f31f6b5ecd97aceb849", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000200000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040) mmap$auto(0x8, 0xf, 0xfffffffffffffff9, 0x17, r0, 0x401) r3 = gettid() kexec_load$auto(0x5, 0x2, 0x0, 0x3) kill$auto(r3, 0x11) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x7, 0x4}}, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) rt_sigaction$auto(0xe, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) r4 = socket(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250a00000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) 6m9.492332332s ago: executing program 5 (id=880): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x10000686, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) userfaultfd$auto(0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x84, 0x0, 0x0) arch_prctl$auto_ARCH_SHSTK_STATUS(0x5005, 0xfffffffffffff001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto_SO_ATTACH_BPF(r0, 0x3, 0x32, &(0x7f0000000040)='/dev/hwrng\x00', 0x1) unshare$auto(0x8000400) dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4008810}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0xa, 0x4, 0x100) 6m8.052727497s ago: executing program 5 (id=884): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0xffffffffffffffff, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r0 = socket(0x1f, 0x6, 0x70324c20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x65, 0x0, 0x8) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x4800, 0x0) ioctl$auto_BLKRASET(r2, 0x1262, 0x0) 6m7.821586876s ago: executing program 5 (id=886): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101900, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') fstat$auto(r1, 0x0) readv$auto(0x3, 0x0, 0x1) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x180000000) (async, rerun: 32) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0xc8200, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) (async) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, 0x0, 0x7, 0x4008) (async) semctl$auto_SEM_STAT(0x0, 0x9, 0x12, 0x6) (async, rerun: 64) msgctl$auto_IPC_INFO(0x100, 0x3, 0x0) (async, rerun: 64) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) (async, rerun: 32) bind$auto(0x3, 0x0, 0x6a) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0xd0) (async, rerun: 32) setsockopt$auto(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0xb) (async, rerun: 32) r5 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r5, 0x7ffffffe, r2) 6m6.85755326s ago: executing program 5 (id=889): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fe8000"}, 0x55) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="200d27bd7000ff9bdf25090000000c00048008000600e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop5\x00', 0x0, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2000c0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x102, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x13, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x28082, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) setsockopt$auto(0xffffffffffffffff, 0x80127, 0x9, 0x0, 0x6) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) write$auto_sg_fops_sg(r5, &(0x7f0000000040)="0100000000000000624c492f4aa7d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0deefa78dc1e77a5d", 0x30) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x2, 0x3, 0x62, 0x8000001e, 0x7, 0x6d43, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) bind$auto(0x3, 0x0, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) 6m5.731360709s ago: executing program 5 (id=892): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x10, 0x2, 0x14) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x80080, 0x0) (async) socket(0x11, 0x80003, 0x300) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) socket(0x2, 0x1, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket(0xa, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) (async) tkill$auto(0x80000000000001, 0x7) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x400200, 0x0) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty63\x00', 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x20a800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 6m5.393592492s ago: executing program 5 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x800) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_LOCK(0x5, 0xb, &(0x7f0000000140)={{0xa, 0x0, 0x0, 0x400, 0x27180d2a, 0x200, 0x100}, 0x7, 0x0, 0x1, 0x100000000, @raw=0x5, @inferred, 0xfffd, 0x0, &(0x7f0000000040)="5f792f5accc0fd92dbb3195b8148", &(0x7f0000000100)="b8a2aa239621f21b8467a2675ca7cb87739bb8d5daf94a0daa67faf01ea3b66a16275c345602383540df311a28a50ef04bb67028849fbccd"}) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0a768a2bb6305df5", @ANYRES16=0x0, @ANYBLOB="010729bd7000fbdbdf252b0000000c0002006e6c383032313100050024003d000000050013000700000005001f000800000084011880b001ac4f269b01172cfa998daae17e7f2f738d5d534cf6e4d5ab8ac57c6b327bd15e9e8577371ece8e4fb3151bc22514a9efdf1816e33023ad82dbe4905228c40a0d5d77cc4b7687a97158795275710c0870f19093d9b2e37237a178ff3a6edcb246c02ea4d854b151db1478c4561b6595347adcd5c51208a774b72af44f1347f1e5e0f4d4bd63b90a5f7ac33dc20c48b07e6f9e0616c762", @ANYRES32=r3, @ANYBLOB="08004b00ffffffff080022800400138005000800ff0000008f001980b2ecef482f9fb2b2c1330fefcebfe0e1fc785e9bb9fb3b1aafe23a43c40a079aa3d22e4d4d2475ebd836ab3c6a80252dbdd1d3636b789d1c2f2cccae319a26ec903446c395228a9eee41cabc96647c31c5d9ac54ae68877514a549c677fe3e996680041972a88fb7ef81f4bd79c73df2b0cce9e1d22ff4533c26237fd76ffde173799df97a8de8f554c38e00"], 0x254}, 0x1, 0x0, 0x0, 0x10000}, 0x20040004) sysfs$auto(0x2, 0x22, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2303a5bd7000fbdbdf2567000000"], 0x14}}, 0x40088d4) r4 = socket(0x2b, 0x1, 0x5) setsockopt$auto(r4, 0x29, 0x21, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x5, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0xa2201, 0x0) ioctl$auto_EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000140)=[0xdc57, 0x1]) mmap$auto(0x0, 0x40009, 0xdf, 0x10009b72, 0x7, 0x28000) r6 = socket(0x6, 0x2, 0x40024) getsockopt$auto(r6, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0x40047438, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) 6m5.110348584s ago: executing program 35 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x800) socket(0x15, 0x5, 0x0) getsockopt$auto(0x2, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_LOCK(0x5, 0xb, &(0x7f0000000140)={{0xa, 0x0, 0x0, 0x400, 0x27180d2a, 0x200, 0x100}, 0x7, 0x0, 0x1, 0x100000000, @raw=0x5, @inferred, 0xfffd, 0x0, &(0x7f0000000040)="5f792f5accc0fd92dbb3195b8148", &(0x7f0000000100)="b8a2aa239621f21b8467a2675ca7cb87739bb8d5daf94a0daa67faf01ea3b66a16275c345602383540df311a28a50ef04bb67028849fbccd"}) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0a768a2bb6305df5", @ANYRES16=0x0, @ANYBLOB="010729bd7000fbdbdf252b0000000c0002006e6c383032313100050024003d000000050013000700000005001f000800000084011880b001ac4f269b01172cfa998daae17e7f2f738d5d534cf6e4d5ab8ac57c6b327bd15e9e8577371ece8e4fb3151bc22514a9efdf1816e33023ad82dbe4905228c40a0d5d77cc4b7687a97158795275710c0870f19093d9b2e37237a178ff3a6edcb246c02ea4d854b151db1478c4561b6595347adcd5c51208a774b72af44f1347f1e5e0f4d4bd63b90a5f7ac33dc20c48b07e6f9e0616c762", @ANYRES32=r3, @ANYBLOB="08004b00ffffffff080022800400138005000800ff0000008f001980b2ecef482f9fb2b2c1330fefcebfe0e1fc785e9bb9fb3b1aafe23a43c40a079aa3d22e4d4d2475ebd836ab3c6a80252dbdd1d3636b789d1c2f2cccae319a26ec903446c395228a9eee41cabc96647c31c5d9ac54ae68877514a549c677fe3e996680041972a88fb7ef81f4bd79c73df2b0cce9e1d22ff4533c26237fd76ffde173799df97a8de8f554c38e00"], 0x254}, 0x1, 0x0, 0x0, 0x10000}, 0x20040004) sysfs$auto(0x2, 0x22, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2303a5bd7000fbdbdf2567000000"], 0x14}}, 0x40088d4) r4 = socket(0x2b, 0x1, 0x5) setsockopt$auto(r4, 0x29, 0x21, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x5, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0xa2201, 0x0) ioctl$auto_EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000140)=[0xdc57, 0x1]) mmap$auto(0x0, 0x40009, 0xdf, 0x10009b72, 0x7, 0x28000) r6 = socket(0x6, 0x2, 0x40024) getsockopt$auto(r6, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0x40047438, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) 6m3.687375529s ago: executing program 6 (id=897): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3c, 0x4909b6fb, 0x1ffe0, 0x7, 0x6, 0x7fffffffffffffff, 0x0, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x82, 0x7, 0x0, 0x7, 0x8, 0x200, 0x0, 0x84, [0x0, 0x7, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x401, 0x6, 0x70624ce7, 0x0, 0x4, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000005b8, 0x100000000c, 0x0, 0x800, 0x0, 0x7, 0x2, 0x5, 0x8000000000008, 0x4, 0x9, 0xa38, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x3fffffffff, 0x0, 0x4, 0xffff]}, 0x202, 0xd) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) utime$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x7, 0x2}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="f320f820c75c20d9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x1e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x167) execve$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000380)=""/17, 0x11) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) get_mempolicy$auto(&(0x7f00000003c0)=0x9, &(0x7f0000000400)=0xffffffffffff7fff, 0xac0, 0x1, 0x79) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open$auto(&(0x7f00000000c0)='./file0\x00', 0x6, 0xad3a) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40383d03, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5m50.081685301s ago: executing program 6 (id=926): r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)={0x3, 0x8, 0x9}, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socket(0xa, 0x1, 0x1) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0x8000, 0x0) read$auto(r0, &(0x7f00000000c0)='\\@\x00', 0x198) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x200, 0x0) 5m49.234328673s ago: executing program 6 (id=932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) r2 = wait4$auto(0xffffffffffffffff, &(0x7f0000000000)=0x7fff, 0xf, &(0x7f00000000c0)={{0x9, 0x5}, {0x8, 0x607080000000000}, 0xe, 0x6, 0x8, 0x3279956a, 0x99, 0x3, 0x0, 0x2, 0x48b6, 0x4, 0x8, 0xaf, 0xc4, 0x4}) r3 = wait4$auto(0x0, &(0x7f0000000040), 0xfffffffe, &(0x7f0000000180)={{0x6, 0x895b}, {0x5, 0x3}, 0x1ff, 0x1, 0x8, 0x69, 0x8e, 0x1, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8000000000000000, 0x81, 0xa}) setpgid$auto(r2, r3) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="76f0d6ca"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) (async) wait4$auto(0xffffffffffffffff, &(0x7f0000000000)=0x7fff, 0xf, &(0x7f00000000c0)={{0x9, 0x5}, {0x8, 0x607080000000000}, 0xe, 0x6, 0x8, 0x3279956a, 0x99, 0x3, 0x0, 0x2, 0x48b6, 0x4, 0x8, 0xaf, 0xc4, 0x4}) (async) wait4$auto(0x0, &(0x7f0000000040), 0xfffffffe, &(0x7f0000000180)={{0x6, 0x895b}, {0x5, 0x3}, 0x1ff, 0x1, 0x8, 0x69, 0x8e, 0x1, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8000000000000000, 0x81, 0xa}) (async) setpgid$auto(r2, r3) (async) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="76f0d6ca"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) (async) 5m39.867341372s ago: executing program 6 (id=961): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r2, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_RTC_AIE_ON(r0, 0x7001, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = fanotify_init$auto(0xb9a9, 0xcf99) close_range$auto(r1, r3, 0x4) 5m35.582520336s ago: executing program 4 (id=970): openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 5m34.949602771s ago: executing program 4 (id=973): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x602000, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x12c) fsmount$auto(r0, 0x15b, 0x4) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = socket(0x2, 0x1, 0x106) futex$auto(0x0, 0x7, 0x4, 0x0, 0x0, 0xffffe459) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x200}, 0x55) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @default, 0x3}, 0x6a) write$auto(0x3, 0x0, 0xfdf3) shutdown$auto(0x200000003, 0x2) acct$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xf, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@rc={0x1f, @none, 0x8}, 0x455) 5m34.017211303s ago: executing program 4 (id=974): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x4a040, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfd, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = setfsuid$auto(0xee01) setresuid$auto(0x0, r2, 0x0) r3 = semctl$auto_IPC_RMID(0xc33, 0x2, 0x0, 0x8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="dc0407002d90f9ade26571d274191d028ff2f6bd2a53f60323d35bdb4352b063ad1e52e7a43b52b28bb88fbaaee10db6db31cb20ee34b2da9aaaaa", @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf257e0000000500ee000200000008000a01919c000004004a01fc03b98010000a8004000c800400ee80040015001702908008000e00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="00ce01b38004006d800400a180f083830ce1986e65f261b320720eaafd7f4f05ae82ca7f94350393ce525139a26511c2d28e3b541ded2d174d54316f7dcb49318066118362e3ef3279dbc580a9dc13834b347f5ab23583fcd428946654c0f75587b4d1e8921349a761fb4fbf530afcd46aa9255778a6ffd77d5639667db1e3be50b4f0254b246c2174e584c0438666f17e5185fcd8186e97d7b991ceea1e399c043485f9b69bf88a6c23daf01e61887fdee5ef0e63bce4d2b28175c5055a208d760236eddd0d62b1a65a2bbae428273eb79776dcf2f19d39a0f6184a39cd076bdfaf8426306f45524a91c04e04002c800800b000", @ANYRES32=r3, @ANYBLOB="340f00b1002f6465762f747479533300005307864fbf8ad2ccc16cbc56055d8e3867d62fab8b5f0c4b91adc04e7aa06d8c28ca3f214a1b8dd3101ef67516a112ccc8ee2e57813c4cc8031235dfed068322bde61e57a1e3750ab9b33bd3c103ca339239909114dd05a16d438ed6a7ec39a0c5cfae7faed7c3076ac39b5950efbfb2ed218e781dd37321ac9b4dfe684314829b4697a89ac2d78aee56723f98bac72f3a0eefd95e293e25038727e16c8d8b6e7fec113193b71111a071c0523a886c4b19ca0c583376c7a9eacdeeee9f5a281f94b4c9907f8500000c00cd00e82934a298b0a22d0500d3000b000000a300d700d7ed0ca993b6df40761dde0c819bb1baeb019edc8642c4427f74f086f6ca9bcfd65818adafefd98bc20749790584b71bd754dda6107f56d5602fb5bebd531a47c1d009e2d1475bcaccc57953b6013b9f10e0f2b765db0902c5ec3afdd955008b527685dcb573220916f00f3758f907f437dc47ef8ff1ae30e180e66b000ee0263722d35411398adc6c1aa0952f288aeb47529f42f60b8573bb8715b6f4cdde00"], 0x4dc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0b, 0x6, 0x3, 0x300000000000000, 0x80000001, 0x5, 0x6d3c, 0x200000000000005, 0x2]}, 0x0) ioctl$auto(r1, 0x5407, r1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/min_bytes\x00', 0xc0002, 0x0) read$auto(0x3, 0x0, 0x80) r4 = socket(0x10, 0x2, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x771101, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x121000, 0x0) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000040)=""/19, 0x13) 5m32.986823631s ago: executing program 4 (id=975): rt_sigaction$auto(0x36, &(0x7f0000000000)={0x0, 0x4, 0x0}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0x9, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bpf$auto(0x5, &(0x7f0000001080)=@test={0xffffffffffffffff, 0x4, 0x7, 0x3, 0x7fe, 0x8, 0x1929e0fa, 0x6, 0x9, 0x80000000, 0xb918, 0x8, 0xffffffff, 0x2, 0x6}, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1b, 0x80000, 0xffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x10, 0x5) rt_sigaction$auto(0x7, &(0x7f00000005c0)={&(0x7f00000003c0)=&(0x7f0000000380), 0x9, &(0x7f0000000580)=0x0, {0x1}}, &(0x7f0000000700)={0x0, 0x6, &(0x7f0000000180)=&(0x7f0000000680)=0x9, {0x9}}, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 5m27.805348612s ago: executing program 4 (id=986): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram3/queue/iostats_passthrough\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) (async) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) (async) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_BULK32(r3, 0xc0105502, &(0x7f00000002c0)={0x6, 0x7fff, 0x4, 0x8000}) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) sendfile$auto(r0, r4, 0x0, 0x1000200) 5m27.309587984s ago: executing program 4 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r0) (async) r1 = open(&(0x7f0000000800)='./file0\x00', 0x325140, 0x154) (async) eventfd$auto(0x34b) mmap$auto(0x0, 0x20009, 0x400, 0x100000eb1, r1, 0x8000) socket(0xf5efe753f98108fe, 0x800, 0xb) r2 = open(&(0x7f0000000140)='./file0\x00', 0x261c2, 0x84) (async) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x0, 0x4e395741, 0x7, 0x40eb2, 0x402, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x8a002, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) (async) splice$auto(r2, 0x0, 0x2, 0x0, 0x90004021, 0xa) (async) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) read$auto(r3, 0x0, 0x82) (async) socket(0x22, 0x2, 0x2) 5m24.534297165s ago: executing program 36 (id=961): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r2 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r2, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_RTC_AIE_ON(r0, 0x7001, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = fanotify_init$auto(0xb9a9, 0xcf99) close_range$auto(r1, r3, 0x4) 5m12.233094617s ago: executing program 37 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r0) (async) r1 = open(&(0x7f0000000800)='./file0\x00', 0x325140, 0x154) (async) eventfd$auto(0x34b) mmap$auto(0x0, 0x20009, 0x400, 0x100000eb1, r1, 0x8000) socket(0xf5efe753f98108fe, 0x800, 0xb) r2 = open(&(0x7f0000000140)='./file0\x00', 0x261c2, 0x84) (async) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x0, 0x4e395741, 0x7, 0x40eb2, 0x402, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x8a002, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) (async) splice$auto(r2, 0x0, 0x2, 0x0, 0x90004021, 0xa) (async) write$auto(0x6, 0x0, 0x100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) read$auto(r3, 0x0, 0x82) (async) socket(0x22, 0x2, 0x2) 3m53.212525395s ago: executing program 8 (id=1307): setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() pidfd_open$auto(r2, 0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x11e8, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x11d4, 0x4, 0x0, 0x1, [@typed={0x4, 0xd7}, @typed={0x8, 0xb0, 0x0, 0x0, @u32=0xe}, @nested={0x1c1, 0x12a, 0x0, 0x1, [@typed={0xc, 0x116, 0x0, 0x0, @u64=0x7ff}, @nested={0x4, 0x146}, @nested={0x4, 0xeb}, @generic="82aed7c8c7a30542b508bbddfcc3ea4c44c7ff1f5b38710e9b2e6cfc472704e76b44b2128063bd3dde5e702c6d208f5fb64fd1325859037921ac5558a83408583f0ea30b5eee753db75d28d52c024ab7de853841bb2e2bd922e59ff7d1cb72be7ef94a9f4e577fbd041156914bfc0b4c8b01cbe1fe874a67752efbbec52251bea0d60b90379f3bdb31107b063c434281011a177347dc50d57fc54b8ff1e1ec120e910450cfe0bc4d1c1ba5c0b7e172032ee0b71c5f0494f59e0b0d1f5a", @typed={0x8, 0x120, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x77, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x5}, @nested={0x4, 0x2e}, @generic="a41229fbee9ba8033953711dd3b2cad342df6370332efab157d69c464a80b36e7cff2881249c0e57af28d751b3dd08bcaaf4cb93291af69378ef44218f10eb3bd30ad8ebc691e64eb80550075fe4bd8f6804b511c22a317e16c02f32483a09a8f0a68255e4c5939309e7e5773477b302d1f4563f5a11d2a85b0a521c2dae2acc134b776fde5fafe7b1bdd68d3be6a38a0b3e6af49ea70cd3ac9f0fc08efa70db5a474a73f8c358df9d6a3bfb243b6f678317ac0b2e6504ef3f7801964518df409cf0d409b2054a1852163d109579d234529ff820"]}, @generic="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"]}]}, 0x11e8}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x101000, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x104, 0x7, 0x7, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x80, 0x0) 3m52.522264366s ago: executing program 8 (id=1309): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x1, 0x80400000}, 0x8000005}, 0x3b8b, 0xa) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x3a, 0xcb, 0x0, 0x4) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x1, 0x11, 0xfffffffffffffffe, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x0, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) getpid() ioctl$auto(0x3, 0xc0305602, 0x38) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x34bf02, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x11c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x10001, 0x3d7}, 0x7}, 0x804, 0x2) r4 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) connect$auto(r1, &(0x7f00000001c0)=@phonet={0x23, 0x51, 0x81, 0x7}, 0x401) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=&(0x7f0000000280)='team_slave_1\x00', 0x0) execve$auto(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000040)='team_slave_1\x00', 0x0) 3m52.131895169s ago: executing program 8 (id=1310): io_setup$auto(0x9d, &(0x7f0000000000)) fcntl$auto(0x0, 0x1, 0xffffffff7ffffffd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x163340, 0x6a) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r0, 0x0, 0x80000000006) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x120000000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xa) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x2400c894) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/rxrpc/bundles\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/tables/APIC\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/247, 0xf7) 3m51.804797089s ago: executing program 8 (id=1312): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/7-0:1.0/ep_81/direction\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, 0x0) io_uring_setup$auto(0x6, 0x0) (async) r4 = io_uring_setup$auto(0x6, 0x0) pselect6$auto(0x629a, &(0x7f0000000180)={[0x4, 0x1, 0x9, 0x0, 0x7fff, 0x7, 0xe, 0x1, 0xffffffffffffffff, 0x84, 0xe, 0x8, 0xffffffffffffffff, 0x3, 0xffffffffffffff35, 0xffff]}, &(0x7f0000000200)={[0x6, 0x6, 0x1, 0x9d2d, 0x7, 0x0, 0x8000, 0xe00e, 0xa, 0x4, 0x8, 0x8001, 0xffffffff, 0xfffffffffffffeff, 0x6, 0xffff]}, &(0x7f0000000280)={[0xd169, 0x6, 0x5, 0x6, 0x9, 0x200, 0x7ff, 0xbd24, 0x1, 0x80000001, 0xd4, 0x100000001, 0x4, 0xe, 0x40, 0x3]}, &(0x7f00000003c0)={0x3, 0x6}, &(0x7f0000000400)="333bfb25a8f8c5c30600b037db784fad0d7a653b32ec6111433da2141acc9da5e62c0ff596d7ef0b6ec0fdc6fd66a88fa84b1a9309c63beb8f98de25ce8f743e1cfe8487d77e8eefee27276039a99341fdf6c93cd7bb2728e3c45e1958594b743d320dd539a04b6235df9042a66969672d52a81c34dff0023a649ce95410d9f9e0648ead12bd27f93d8c39d926d398a9ddb5ca00dc193bd10a47b51da0310d296ef202345c0e00a25f500485d2766d7def5f2837e54ac62fedf70a144358fc1238f02e23d012") (async) pselect6$auto(0x629a, &(0x7f0000000180)={[0x4, 0x1, 0x9, 0x0, 0x7fff, 0x7, 0xe, 0x1, 0xffffffffffffffff, 0x84, 0xe, 0x8, 0xffffffffffffffff, 0x3, 0xffffffffffffff35, 0xffff]}, &(0x7f0000000200)={[0x6, 0x6, 0x1, 0x9d2d, 0x7, 0x0, 0x8000, 0xe00e, 0xa, 0x4, 0x8, 0x8001, 0xffffffff, 0xfffffffffffffeff, 0x6, 0xffff]}, &(0x7f0000000280)={[0xd169, 0x6, 0x5, 0x6, 0x9, 0x200, 0x7ff, 0xbd24, 0x1, 0x80000001, 0xd4, 0x100000001, 0x4, 0xe, 0x40, 0x3]}, &(0x7f00000003c0)={0x3, 0x6}, &(0x7f0000000400)="333bfb25a8f8c5c30600b037db784fad0d7a653b32ec6111433da2141acc9da5e62c0ff596d7ef0b6ec0fdc6fd66a88fa84b1a9309c63beb8f98de25ce8f743e1cfe8487d77e8eefee27276039a99341fdf6c93cd7bb2728e3c45e1958594b743d320dd539a04b6235df9042a66969672d52a81c34dff0023a649ce95410d9f9e0648ead12bd27f93d8c39d926d398a9ddb5ca00dc193bd10a47b51da0310d296ef202345c0e00a25f500485d2766d7def5f2837e54ac62fedf70a144358fc1238f02e23d012") prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x7fff, 0x0, 0x5, 0x7) (async) r5 = prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x7fff, 0x0, 0x5, 0x7) ioctl$auto(r4, 0x40106f52, r5) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r5, &(0x7f0000000080)="b7dea022c3fc4aff9b78cb41eccc2028ee048f3ca9e7d40103a77da60b9c90076eae074accfc033af447892ddcbc1c271d3a7fabe093f2b4d572f68c7da205373286a837c32a976afda6df7a30e169b2cbbca2741ceb8a493d13d9783144c050ff287e476a3b9cc9b61695c4a06e57e42b766561fb8e4b8bc88b1d99c2fa37e650dfa1d926ba038537e43ea28ef71b08dd13cbc7172241d77c49927b445dedb9e0b31af5453495eee5c46ad3", 0xac) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={0x0, 0x3c, &(0x7f0000000300)={&(0x7f0000000140)={0x20, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) (async) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000380)={0x0, 0x3c, &(0x7f0000000300)={&(0x7f0000000140)={0x20, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) 3m51.633514259s ago: executing program 8 (id=1313): openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x3c002, 0x0) (async) r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x3c002, 0x0) mmap$auto(0x0, 0x400008, 0x1, 0x13, r0, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$auto_SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)="db954ba89dd4bd7f424d236736cd78c619115794d3867fe99c9eed13dc427e4f1fd54dc42175be36dc85d160046d7428456c1f9d72624bd29532") execveat$auto(r1, 0x0, 0x0, 0x0, 0x1000) (async) execveat$auto(r1, 0x0, 0x0, 0x0, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f00000002c0)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_NAME={0xb, 0x1, '.\x02:\xb6-$\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1e21470, 0x0, 0x0, 0x0, 0xe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x6) statx$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x45dd, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) fsopen$auto(0x0, 0x1) (async) r4 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0xd) (async) mprotect$auto(0x0, 0x8000000000000001, 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) (async) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) 3m51.149542624s ago: executing program 8 (id=1317): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) mmap$auto(0x8, 0xb, 0x6, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x0) mmap$auto(0x0, 0xfa, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0xa, 0x4, 0x0) setsockopt$auto(r1, 0x0, 0xd, 0x0, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) madvise$auto(0xe0, 0xffffffffffff0003, 0x19) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) (async) mmap$auto(0x8, 0xb, 0x6, 0xeb1, r0, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) (async) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x0) (async) mmap$auto(0x0, 0xfa, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) socket(0xa, 0x4, 0x0) (async) setsockopt$auto(r1, 0x0, 0xd, 0x0, 0x100) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) madvise$auto(0xe0, 0xffffffffffff0003, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) 3m50.806465526s ago: executing program 38 (id=1317): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) mmap$auto(0x8, 0xb, 0x6, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x0) mmap$auto(0x0, 0xfa, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0xa, 0x4, 0x0) setsockopt$auto(r1, 0x0, 0xd, 0x0, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) madvise$auto(0xe0, 0xffffffffffff0003, 0x19) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) (async) mmap$auto(0x8, 0xb, 0x6, 0xeb1, r0, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) (async) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x0) (async) mmap$auto(0x0, 0xfa, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) socket(0xa, 0x4, 0x0) (async) setsockopt$auto(r1, 0x0, 0xd, 0x0, 0x100) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) madvise$auto(0xe0, 0xffffffffffff0003, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) 2m23.815420299s ago: executing program 2 (id=1603): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x940, 0x1ffde, 0x3, 0x6, 0x3, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x7, 0x2, 0x1, 0x5, 0x7}, 0x1fe, 0x81) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624cea, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x10000000000003, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x8001, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x6]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000036c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029d67000fddbeb252b0000000400508008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r8 = socket(0x2a, 0x2, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r9, 0x4, 0x1, r8, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket(0xa, 0x2, 0x88) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r15, r14, 0x4, 0x401, r13, @relative_id=0x13, 0xe600}, 0xf) r16 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r17, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)={0x1d8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb9a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4c6e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40002}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x31}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4dc9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m23.382302366s ago: executing program 2 (id=1606): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0xf768) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000080)='\vX\xb5\"\xa5p\xe6\x1eRN8\x90\x86\xd9e\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xd7\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xc0\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6c\xc6\xb2Jg\x01JZ\xbb\xff\xff\xff\xff0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1e;8\xed\xf6L\x05\xe8X\xaf\xe2\xe3\xd3\xc5:\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]\xff\xff\v\xff\xff\xff\xff\xff\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1', 0x7, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0xc0401, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r1 = creat$auto(0x0, 0x6058) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000940)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/errors\x00', 0x80404, 0x0) read$auto(r2, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) sysfs$auto(0x2, 0x8, 0x0) ioctl$auto_BTRFS_IOC_DEFRAG(r1, 0x50009402, &(0x7f00000009c0)={@inferred=r0, "00544474575174a0b861b19ea411de4adce6a23205d65e1d835e3b592d23bb37acc24e5e1b9fb5e2861e2885d287e79c16262897e514ed21b77759666446615d2b6015cf2131c53fcf20bdd48bfd5b126fd6bb808e7000055d40bcb76a0b574bcd7930009be4be29f9f6cf4d6ffd36715b3dcb5dbbab18965f15477413e9cac556e7df49e111eeac03bd59310f673c9f8c2d4963c8baa6144a06c1f91d3d8a69e1a00e613ae56f31e1f130c7e601f9b0f8aa4240220c67ad34063196992cfe3094c484da4802a3461df1ca80c598993cfed0880e4a1e59d26af4e381897860953c882f644d26f6d65d50b1e50bbe314c877fabbca32f1be97159f34d9e8dd3211dcee455d2a51ebe6fef53de4aaa067fdb3fa04959d6ca8088b26cd70d2335cf7965ef55ec32d75ad1b6f3fb459fdb6b6809acda61f4975e887e9f2a7cdab553da45ac756561439a7722dc320716eb7e525421e4bd3e3920ee326533f7781a59611b1ecdda3bd863eafa46bf86f2c087928f2aecbe227c63e28837b9e7d12caad7c213bc323558e55d08d7074c8a7b553b9cf1c5b94a75d6011787d0ea052c9f40fa5134bae2559eb3180afef67b1fca7d58ac679f89a9bfa851504a08ccb5ab25516acc02dae2587075d477d118956c4cf6ff479f082855d1c982d80229f1d664bc42e70c9ab604a503298400a1f98409703c035931ec16a37334b231893480d64f65b5fa2093d8442fb458f486c7aa789b38cf6a2c4ad79f53cb8706ba13329a0187f1db321ab3e585e90590d95ca165976e851ee1b106197224813117081ae6f581deaac6133538b164d923820132b982930e826fd74658e709c3c8fc60ecd296c8793532def2819fd00944d5c2f63f034e23a438585bc1255474e3412a6d49e1ee458c730503820a0e0a41cf6e42d0005af8d11f56105db76e3b4daee8a6b6516c12f77f8944f7bfeb12ce46189c75fb7be0a4bbe8b2df70d075094ec7ec43ae59474b5eb2a2b5789fbf483e3e10e8f0ae25771b70426db8eae8609cdeeb532b3fe1598db52b132afa92403fc87d03ad1f0ba2b3af000a66fd47c18a0bdb2417d277e9c862ce07d33a1ab32b392d2b199088c261cdc8de76c54d85f3b65c6ffc7681d10e7367c969d3911f9ff71103230fd20f350585a8c806737ef06f992995fcbcab15b70f56cb582f3f6263909a92b1250dc6af848e2cfe0366f7a41e019dd866b3a12d4736abc5546dcf7b3c2b72e02250ffb266a5ee76de2c7aa53b5b2f583a567c932912b4219914beac9276f5bb4f3a23d28d8221348be4f62249887d76c05a15bacd333ae97652392c3afbd7352a51309f77765cf3e38be8a079b893c9551b7d1ed3ad252f5667c9d55a7c6e9b176ac8c2952bed32869174e816d3fbade05ad001ce4a45bf3773dbf11a8845f0f82bce64b6439bfbe5976dde087855e2daeef75162181564f3c2e0558934d07f720092870b1f571e43e769d65f7e96e59363a4b93e3db3ed97651a5f02526e441589fa6444304b42d6ba11755bcd450a1c6cc539aa88d14c06157775780a659855ed982b5b828a7d89b974e339e00047ab45a19ef3b44284f3892ea11cb9396c4393fd79cc9a0133cb0f8001153db363bc546ab398ec8ff407b7891b0bd3cab4771c0782ac9c363552b01dd99387f8d366164d580a3ee7fa580de529dbcc1c8bf92f325b13b53dfdb272b225ffd1c3516b5d30232117476637b94edfe07d06b76d8e73d9dff9019a139791361e3b6ab4278a6fcc449f39f7735600b7b9172df47f00b1e15f86b9810ce55b82a86cf558e878b5135c762faec92caf095304f3358695d7aa31d2e88a6e428acc99378d17cbd1b3353d84bf1766812579bf4f2cbb5daed4e627f6279c4e334405b32e914f9ea23f26776f2bde8215828e7909ed51add01cc6441085180d9120539990dcdc811e5067322ebda531b4f3a10f5270880a0c13697d6a7a8f0ae6408a11182fbb3e51066442366e92536a069204384d8673f159f05b61f20272f7272344a0cf87608cd417d978f46675b514ad7325391de12cc6d2e6373dea6050b2032a78a5833e9a5c7992bf7a916b82edef5171b2e6a16b0f96c80f8e2592b25f893b0fd5410dea219deb941a9baed24324ad14f7baee4a5cfc4e65d4c4db6979493f368ded4e94ba7f14996f2fd34612967d80a21fa919172d8ab9691239b2cc28c1e7cd495004b4aa5856023ff13817e44807d2a482939348602ab646a9db6a3b4cbafd0d162eb0a2316cb65e0f29255e8ef91f8a7a6d07f569126a1075f0f48b07cfebc73fa4217edf597579dbeee7a9876a104fdd14a65b878a4c008c9a8b5220a53803ebafc651a7315712f5244643dd7f5d454539b54b958e79444d64e0625f4a436af3382b04782dadf918ea6c9f2daa392574f9b82f9964f57e1fe9994d8d736de46383cbba8628bc30748ff2cebd63e5e8163c13291393f246a1ec83032d05d56e3b0c1ea783570395dd1ccd6a5d05c44d5e156dce3921ca6d4cccabd6aba5e85dd03ba2673b355f2dd2c09254165cc2871c80f0ce35519722a2866b126841d10d7cd93c3844d11fa0cc8791aca5c89e3bd8c4dd94a359f115d6836e3620b2bcfa2ff160d7e89a22299ca99323527aaf7c0dc80f0f28ebedc2446baccdca835107022f80636b99c0343c24f9488ffb04725d164f5251c8e4e4bb66ba80e11582db219049e3df46a2b382b1134aa24c6196b2bf95ed48cfcda546392afa716fcffbe8845f2dbac06cfc5acff35a6c4c9cf03a0fff7014fe46bb8b383d06300a87ba43c461ea5e56092633128ba9a0fdfc77f176ed482401b8c616b41a03e7ed1f243a1da0565f822645b1a77e883c7a8b485f95fc7a09755a758d043f120a2d8c25da322c46462e883f2360791ffce5c2c98a960e899e7820c07d84c4bccdbbdf012279f9828dafe202a49075bd841a2773788c700548d2f6b2532b11ccbc7b09ac25f961c828bef5a0e81aa71b4a176caa448beeae3dbd5ffd9215f3d25ae067fe11c84723a9981bc1095701294d6ca3fb201a5c0a1cd5abfae6094dbb2f5c44557712c1a7a95407d51cd34a0388b4ba046fb4d9aa0e958c4b8eeced60059f5a77c46262c75afe2edccf6b98b9f390fa4968ef7ac94025d1e1ec4e5afa295814dc955c8edeca8a7722aa72e2c570415964cee920e875aa5795c1bf65ab4ed901e726b7c894797b13aeea5df7f7834432645def6836e4d9c673aa910addd380e57f818a9975a7b66f725ffaa46cbd4352011f9262c6ab3cada828bdad079369ca264d555095b25aa8945070538220b3a3f53d35a30d157ff584ee2893a2c25988627f9734f35d4b68d4ce20956ed280c967c192c89beaf22c416c93f153c132753de6e7f32ae49ceb32be256a092f1d68847e01967c7440babd4775696a6a1f7a20d45c53a1db3b75788177b5f383ce981c1954a665019b6add588b096bb544aee9f6cf8cc14430bf29f4211040dab51c683fd3718ab247c172477b39633c4498fc79e953e66300590d06e597e9f52dca72f2e5afe0a6ae6f328864f2c4dbf21c7af518cdff2e175dd947d50907f8af6fb3a7bca51064462059e71557696652401be9bd1c23f650d521429dec762a6f701f8e81faae73ee72faab9d00d57744fe96c6807dc01db463e0bab4664e058fe1bb9d3a9e75966a20bf486a733a6f40d8dd13de8b038f3cc5a62b6cb1d01d4ea2e7f77c113d69b8c1f5d80e33a09b5fa6a39aeed90eca733250a1e6b2ed3884fcffd4f47091a2045d68b783e238c40e1e8afe7884242c57425f4dbc32ed849292f2ac45619b74d2eec8a39244716f8c7abe167b1dcf24f63b52f7ffa7538222eff375e57ec97ea42d513ee7f46b2142b32e3187f71b23ce08caca49a487d0df3fb817d6f370bb0ffb3f1753a0c7463a834284b48c5934ad838b05d3677b7895f78b2fcec2db95bb62ecc534350fa7522734150984ff0f9223f0c580ce4afa609ca80a63875c48c732c1709d9715ce3f4b067c1d5fc439ea101c6c8e637116d1a9cd80e668f26a744a249f1f5fb4270677087365cf17f0aa180b1c4061f67fa2a436cd7c1470dc56af7038364a845002cd247290f1b9f4d92a21ef7c7af0e4ee60c536fcb4844a771b5a0d4fed465602aa4955258a23eb4b99add90a0502ec68045bc0a1859aa422db3187e15ff5470cf4128ae139bfe7dca7bce9390117f238f43c51de1608c25037a7e5e9526886f860d6da680f62666ad6ec77a9f1238889c73130c8046c5bde8b503f34b30fa64a0014156a77cfac31877cb7cc462395df579c962a198ef49e8bdc160f3e1dc0277eed5abc90060b54e4570ed67410c4c4ba660787943747d0046a6bffe30b8e925d16915e4aea5da1d538a707878d4399b13eeb2bfd0672a81d98815f523e64324c9fe54de59709c84d91f9a927576497b91ec41976335e1104002073aac749bfbe8ef4ea9f0ac1b177f20d24ac75f4c1225ca56d3f64a767d3d6bff052f235e3852646b3bdd139ad57d60e739df3d638be4784f39a218d0c0ae2174d457542c44617394ca414d66ac9079e38b17c43eaf4ec8f9b1ea377a8d27fca1dd99d7699dc8e2a2bece17bf4a0d98e98d68bec83f734cb4bf9b167c3d28d6f59e1b532a613c5aab4ec30c39e3dd90d722137a1393dac5a7705eca29afa2a0ffc3eb5b0109d6d17b4fa3d8430f183dcbd63c140af1af4d2d9850fab39a6223f0341965377f2ebeeffa2b705509bcfb41086b3eace4b74ec85ce05f958e1ec8b47cecec7c6db35f3788531b3f633236ce9dacbd45bbe7b6da7297a526cb513c62fb8ceaa8bcbcf28491885c58102ca81eebda428e568c8f17b47e8d2f372e88fa53a7bb440c79e790531784fb8834065226168c3dfb0050caea5284583d1f7f66e28c5f94d4032ad530b8bcba61726237943c418e7fa14944dbc806b85da023de8bd027f110f677d8155137ca2cac1fc450dbe8bd75e128adeaf3758974fae287bdf2d8d97cc4c5a556ee5fc0071ac97755cce1e3602d3672f4e90539fcfc5ba6c676944954cc78d9436edc84957e364101331eea44cef4c2ebcbc8ebcd7d76c2f26e9b9a185f55ce13bec7981261dcc3027ca1f1aa922b3f26bfe9690a0da03671f2dfeebe360df64547a3681d598b9d26b64ad1e6272600c0679d03fd34a32aa069af253491938feae34cf36c3c4ea3a407d9264f2d357bc806055caec6dc964f94c3786fbf9273b66a58aa72b19ef16327d14657fb2ca760ba4206c5105a0b761c59a0f7e9653f246aff09315cba01dc58c5cb36c054b2387699cd0a7379acd418d84d675eefe34587d32e378e726ea5db2c3a16db5d4bce6fd7a50788ab24e3843a110fda4c548b0e9e5b06d5e21c66eb5654cdf5140f476fcf107e389f9ddea9f92644e3b200c4425fa1ca76dfe6ce8aa543982db62ac37ad969ac922013eae89caca32761a390f38b02f95667043ba136cb0d650405693a3b04c0f9677aee5597033e053d7a0232f9cd369ad4c259fc0663b973dd7e550f71430ace494f8881c744b8c7a265a4a8aa9c2c2af08956b474a0c471bf2bd0d596e755902c72bd093f48550e0d2f97485b0f199a17e4f18e41b82fae87ff54160fe6c94b761bee5fa43f09b722a4fa8bf9b548fbdee7a833621598bec3e7c6d981ca6a7dbfb59ec70182883954e64a94ceb9e9a282658726973ec9f676a461c2a70a4cb078d606512f28a3fe6ba063435b5fe91ddad13b6fb2252160a536b70f56d"}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) socket(0x2c, 0x80003, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose4/netdev_group\x00', 0x20000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd14\x00', 0x101002, 0x0) mmap$auto(0x0, 0x2, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40001, 0x0) 2m23.098475291s ago: executing program 2 (id=1607): r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x3, 0x7) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008010, 0x3, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000180)='BA') ioctl$auto_SNDCTL_TMR_START(r2, 0x5402, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f00000001c0)="1ab7") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r3) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r4, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x140}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, 0x0, 0x40000) fstat$auto(r0, &(0x7f0000000500)={0x0, 0x200, 0x9, 0x6, 0x0, 0x0, 0x0, 0x3, 0xea, 0x2, 0x1, 0xa85a, 0xfffffffffffffffb, 0x200, 0x5, 0x7}) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r6 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r6, 0xcd8, 0x100) madvise$auto(0x1, 0x791, 0x9) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) socket(0x8, 0x80000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$auto_SO_PEERGROUPS(r1, 0x3240, 0x3b, &(0x7f0000000100)='wg0\x00', &(0x7f0000000140)=0x7f) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820) 2m20.952666376s ago: executing program 2 (id=1612): r0 = prctl$auto_PR_PPC_SET_DEXCR(0x49, 0xe3c, 0x0, 0x5, 0x2) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r0) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x22044000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x23, 0x80805, 0x0) capset$auto(0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mincore$auto(0x0, 0x10000, 0x0) poll$auto(&(0x7f0000000140)={r2, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r4, 0x113, 0x1, 0x0, 0x81) 2m20.563475378s ago: executing program 2 (id=1614): r0 = socket(0x29, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0xa0c, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IE_RIC={0x864, 0xb2, "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"}, @NL80211_ATTR_TID_CONFIG={0x184, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x120, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, "78e8328545df8a86761d3912c99aa725795248cfe8692071d74ec4f589e6f278d8998e8277ed7fc140"}, @NL80211_TXRATE_HE={0x28, 0x5, "7e2456f03164a3e8d8653e4125ce9ee252fbb468e4cf0a8d8bd2fbf2011c595518615c41"}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x24, 0x2, "e621bf6af39f19064d3fe7f80542135d85be89f4ca2ba3f22b87cefb6dbaa4f9"}, @NL80211_TXRATE_LEGACY={0x7, 0x1, "73b5ff"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2b}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x4}, @NL80211_TXRATE_HT={0x39, 0x2, "89c85853aa04a6d20aada5fefe9c36794197ae3ad132c4a5f445adb23a20b7f014b66a3b5aafbadb141b6b4d26b959ecbd81710d9c"}, @NL80211_TXRATE_HE={0x42, 0x5, "4f912fb659d050c930d02b69bdc64ce0ac2e2296bab752832af5696004ffa84a11b2f61f8c417a632daf52b0a3581c55c0836aced7ea2493d6f320600a83"}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x80}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x5}]}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "6b9f10dc43dae51b"}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) write$auto(0x3, 0x0, 0xfffffdf1) (async) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) close_range$auto(0x2, 0x8000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mseal$auto(0x2, 0x2, 0xb) 2m19.409647809s ago: executing program 2 (id=1619): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) r2 = socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xfffffffffffffffc, r0, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x894) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x10000000, r0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20000, 0x0) setsockopt$auto_SO_MAX_PACING_RATE(r4, 0x9, 0x2f, &(0x7f00000000c0)='/dev/net/ten\x00', 0x9) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r6) sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000000200)={0x0, 0xf3e0fff77c47799f, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r7, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m4.258885661s ago: executing program 39 (id=1619): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) r2 = socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) listen$auto(0x3, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xfffffffffffffffc, r0, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x894) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x10000000, r0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20000, 0x0) setsockopt$auto_SO_MAX_PACING_RATE(r4, 0x9, 0x2f, &(0x7f00000000c0)='/dev/net/ten\x00', 0x9) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r6) sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000000200)={0x0, 0xf3e0fff77c47799f, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r7, 0xa01, 0x70bd25, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m20.961531613s ago: executing program 0 (id=1818): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000700)=""/4096, 0x1000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000126584", 0x7) socket(0x2, 0x1, 0x0) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x6000c2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0x3, 0x7fff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) mmap$auto(0x100000001, 0xffffffff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) futex$auto(&(0x7f0000000080)=0x3, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r2, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00', 0x1) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3) capset$auto(&(0x7f00000000c0)={0x6, 0x0}, &(0x7f0000000100)={0x5, 0x0, 0x6}) prctl$auto(0x400, 0xfffffffffffffffe, r4, 0x8000000000000000, 0x7000000000) renameat2$auto(r3, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)='./file1\x00', 0x2) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/devices\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000001100)=""/4096, 0x1000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) madvise$auto(0x209, 0x1, 0x9) 1m20.139321426s ago: executing program 0 (id=1822): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000003c0)="80e08ca631b90e5e9a4997a0a2f075172c2529fea5d2b4b06119e7cc493e3c68f5e114fe74f6ec1d4e94daec10b05cb281b0922bcba475cea32ccf0eda11471e9c15d15fbcc3bebe4bc005053b7459c5ecbae956634304a2b3c20d024a0df7b468626e493968743cc5ed35ab320b6ffd85d87720f947e83e96c03fca21e0c585095bf40d010cd4fba6c371232889fd43cb084df47b56ff93efb0f707d371175d4dcd1c13802f7a4550e4ef765842dadd3e2bc2df160655b78b5a9438f2f8be466e2b3782469b16c9310ff6307403770f5c225820d582ab93c7ca472e799fe10d61abbfc87ea3846f44cb04eef9ed7c16b2483588") setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) setsockopt$auto_SO_MAX_PACING_RATE(r0, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x1, 0x0) socket(0x2, 0x3, 0x6) socket(0x92643b19a88b4428, 0x80000, 0x4) getsockopt$auto(0x4, 0x1, 0x4, 0xfffffffffffffffc, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r3, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r3, 0xffffffffffffffff, 0x401, 0x40005, 0x2000000000003}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') ptrace$auto(0x4206, r2, 0x0, 0x5) capget$auto(0x0, &(0x7f0000000040)={0xd, 0xb3d3, 0x1}) mmap$auto(0x0, 0x2020009, 0x3, 0x19, r4, 0x8000) move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000) symlink$auto(0x0, &(0x7f0000000000)='\'--[[\x14+\\\x00') socket(0x10, 0x3, 0x6) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x82, 0x0) pwrite64$auto(r5, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?!\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0xc) 1m19.398353173s ago: executing program 0 (id=1825): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/veth1_macvtap/locktime\x00', 0x103142, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r1, r0, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 1m19.082323269s ago: executing program 0 (id=1826): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7f, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7f, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) (async) read$auto(r0, 0x0, 0x39b8) capget$auto(0x0, &(0x7f0000000180)={0x2000ea6a, 0xf, 0x6}) (async) capget$auto(0x0, &(0x7f0000000180)={0x2000ea6a, 0xf, 0x6}) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}]}, 0x1c}}, 0x4044820) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x20a00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x20040811) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x20040811) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x20fff, 0x9d, 0x0, 0xd, 0xc5, 0x8, 0x2, 0x5, 0x100000001, 0x10001, 0x0, 0x5, 0x2, @iso={0x3ff, 0x7f}, 0x5, 0xffffff81, 0x0, 0x16a}, 0x0, 0x4c9a}) (async) ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x20fff, 0x9d, 0x0, 0xd, 0xc5, 0x8, 0x2, 0x5, 0x100000001, 0x10001, 0x0, 0x5, 0x2, @iso={0x3ff, 0x7f}, 0x5, 0xffffff81, 0x0, 0x16a}, 0x0, 0x4c9a}) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop5\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0) 1m18.629756569s ago: executing program 0 (id=1827): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port1/power/runtime_suspended_time\x00', 0x44a40, 0x0) write$auto(r0, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r1, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="108c474af6f582ab3a5d151f24e10bc02c56a9de8a4f93079d15338a31c51962d69d7c6efbbb5be30c9975c46488e5ab17ec01c6eb2053bc70d0f8dcd8a75ec43b98a43a6648e3a9", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4e, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x200000, 0x3, 0x3fd6, 0x3, 0x20000000) 1m18.369601577s ago: executing program 0 (id=1829): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(r0, 0x7, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x80000000, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x101, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = socket(0x1, 0x1, 0x0) bind$auto(r2, 0x0, 0x6b) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x80000000, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) 1m3.18578472s ago: executing program 40 (id=1829): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(r0, 0x7, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x80000000, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x101, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = socket(0x1, 0x1, 0x0) bind$auto(r2, 0x0, 0x6b) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x80000000, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) 35.91785049s ago: executing program 9 (id=1940): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000009, 0x7, 0x8, 0x5, 0xd, 0x7e, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0x40305839, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="48fca9fce87c944c01b8294348d59fc327dd2324b3227bb0f3ab8cfc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93134ee5ffd950b25b6d6313d0df88c656a49c19a4ccf7cfe7734be012fb567ec156663bfc910854064afb220850b0c319971b90d70332350730381dd5aeb760a1602", 0x76) 33.934922484s ago: executing program 9 (id=1945): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, r2, 0x4, 0x401, r1, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 33.51745109s ago: executing program 9 (id=1947): write$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffffff, 0x0, 0x3f00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x111, 0x2, 0x3ff) mmap$auto(0x8000, 0x1, 0x7f7fffff, 0x4000000044eb1, 0x3, 0x200000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00', 0x18b940, 0x0) finit_module$auto(r1, 0x0, 0x1) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xea9, 0x2000000000000df, 0xeb1, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x141002, 0x0) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(r2, 0x0, 0xc3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 31.097972751s ago: executing program 9 (id=1954): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rt6_stats\x00', 0x20000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r1) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8000) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x7, 0x0, 0x0) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/psaux\x00', 0x40000, 0x0) poll$auto(&(0x7f0000000000)={r4, 0x3, 0x4}, 0xb, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01032bbc700002dcdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x8086}, 0x4090) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) 29.681954913s ago: executing program 9 (id=1960): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4) r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1800, 0x0) unshare$auto(0x40000080) openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/enable_ifindex\x00', 0x0, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x1, 0x0) socket(0x1a, 0x2, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000240), 0x18d82, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) pipe$auto(0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x38281, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042da96600ffdbc5250000000006000600ad215ba7138f7ad4fbbf687a3a233975259446464e2200000800050001000100140002006d6163"], 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000800) unshare$auto(0x5) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x5cf000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f00000002c0)=""/182, 0xb6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bond0/queues/rx-7/rps_cpus\x00', 0x143680, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xcas\x1cJ\x99\x00:\x00!\r>\xa7\x1a\xd3\xd3\x1d\xf8\xbeb]>\xa7\xde\xf1\x0fZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd\xa6\xa4vM\xbe\xa2', 0x10, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x3, 0x0, 0x252, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x885b) mmap$auto(0x7, 0x80000000041f7, 0x80000ffff, 0xbe, r1, 0x1ff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0xff, 0xffffffff, 0x4}, 0x8000, 0x0, 0x6) mlock2$auto(0x1, 0x8001, 0x0) 26.758044882s ago: executing program 9 (id=1968): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0x2, 0x801, 0x84) socket(0x28, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) getsockopt$auto(0x6, 0x40000000029, 0x8, 0xfffffffffffffffe, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x68481, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0xf) ioctl$auto(0x3, 0xae41, r1) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x3, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x488d1}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x6, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0) 15.113892622s ago: executing program 1 (id=1994): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pipe2$auto(&(0x7f0000000040)=0xffffffffffffffff, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r1, 0x540a, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x540a, r0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xffe, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec28\x00', 0x222002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/002/001\x00', 0xa801, 0x0) fsmount$auto(r3, 0x1, 0x3e) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x80045518, r4) 13.530558928s ago: executing program 1 (id=2000): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0x14f642, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000088011, 0x3, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x6, 0x40400008, 0x3, 0x15, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x9, 0x100000eb1, 0x40000000000a1, 0x8000000000000001) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000100)) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0xa0200, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0xfffffffd, &(0x7f00000003c0)=@bpf_attr_0={0x8, 0xffffff52, 0xb45, 0x7fffffff, 0x80, r5, 0x10001, "d56f0f8a6a33acb8a91b0cde8e24cb7e", 0x0, r0, 0x5, 0x18000000, 0xadb, 0x8000, r4, r4}, 0x5) write$auto(0x3, 0x0, 0xfffffdef) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) write$auto_def_blk_fops_fs(r0, &(0x7f0000000040)="d51247408a6a8f565eb945890072317279f0abfed8c47ca6776144d1eb6ddad2cd2d4ab85b4ca0fbcfa77f1b411e95f4bb01ffacfe35d29aa78c26ce0b22b734d9408bded807cdb3219b564f071ada2221bfa70618f4732181ee8eafd6d2fe741800fe34885767a7015b010e0e3d1a4d7c7652016d0dae1787962533190ea0bd3b69b45910676b1fa372cd", 0x8b) mmap$auto(0x10001, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="010026bd7000ffdbdf250400000014001a80100004800c0001202cdce292a1bb2933e0299112ddf209ace0cf90556a73618870dbf154e2e95bdb5635e78108d3c329f0bbd51003c6b95b712068"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) 11.782704977s ago: executing program 1 (id=2005): ppoll$auto(0x0, 0x6, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x3, 0x4) mmap$auto(0x9, 0x7ffc, 0x4, 0xf56, r0, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x6) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = socket(0x10, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x200000d0) mmap$auto(0x3, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/226, 0xe2) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x409, &(0x7f0000000000)={0x4, 0xf1, 0x2, @raw=0x10000}}) readv$auto(r3, &(0x7f0000000380)={0x0, 0x2}, 0x5f6) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) 11.637066122s ago: executing program 41 (id=1968): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0x2, 0x801, 0x84) socket(0x28, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) getsockopt$auto(0x6, 0x40000000029, 0x8, 0xfffffffffffffffe, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x68481, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, 0xf) ioctl$auto(0x3, 0xae41, r1) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x3, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x488d1}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x6, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0) 6.612905034s ago: executing program 7 (id=2014): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rxrpc/stats\x00', 0xc0000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/50, 0x32) mmap$auto(0x0, 0x402000b, 0xdf, 0x10000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r1, 0x8, 0x400000000000006, 0x0) pipe$auto(0x0) socketcall$auto_SYS_GETSOCKNAME(0x6, &(0x7f0000000000)=0x4) 6.389858723s ago: executing program 7 (id=2015): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xe, r1, 0x2, 0x53) fcntl$auto_F_SETSIG(r0, 0xa, r1) prctl$auto(0x1000000003b, 0x200001, r1, 0x5, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x7}, 0x3, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x18000) mbind$auto(0x0, 0x100000005, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) personality$auto(0xfffffffc) memfd_secret$auto(0x0) 5.001717182s ago: executing program 7 (id=2018): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa) (async) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0xf3b, 0x0, 0x0, 0x440a48ce) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) semctl$auto_SEM_STAT(0x5, 0xad7, 0x12, 0x9) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r3, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0xe07a1df4e2c6814}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x8001) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r4, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) unshare$auto(0x40000080) 4.361385835s ago: executing program 3 (id=2021): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x20000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 4.155477026s ago: executing program 3 (id=2022): mmap$auto(0x5, 0x2020009, 0x7f, 0xeb1, 0xfffffffffffffffa, 0x1000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_clone3(&(0x7f0000000200)={0x1a2005180, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x11) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) preadv$auto(r1, &(0x7f0000000180)={&(0x7f0000000100)="1059cb24f14bed47c4baa5ae1091dcaac28665d7ad5a10f129857886833e7776a4ddd808e1ec3f4d89f4599d049b2998b68a74347545e3e7d3d32906784f7844fc988bf47304a3baae29605351a434b996b98468253fc41f25ae87a51b", 0x80}, 0x7, 0x2, 0x8) io_getevents$auto(0xfffffffffffffe00, 0x1241, 0x6, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) semctl$auto_GETVAL(0x2, 0x3800000, 0xc, 0x6) read$auto(r2, 0x0, 0x2) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x404800, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) 3.825516725s ago: executing program 3 (id=2023): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) write$auto(0xca, &(0x7f00000000c0)='\x04>2\x04!\xe2\x00\x94\xf2\xa2\x00\x00', 0x7e) getresuid$auto(&(0x7f0000000080)=0x7, 0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r0, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0xffffffff, &(0x7f00000001c0)=@task_fd_query={0x0, r0, 0x2, 0x7, 0x9f01, 0x8, r0, 0x5ce, 0x80000000}, 0x1000003) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = fcntl$auto_F_SETLK(r0, 0x6, 0xffffffffffffffff) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f0000000140)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x40000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x104, 0x0, 0x6, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) madvise$auto(0x0, 0x20499d, 0x9) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 1.914447524s ago: executing program 3 (id=2024): ioperm$auto(0x7, 0x6, 0x2) setreuid$auto(0x1, 0x3) setgid$auto(0xee00) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 1.773396258s ago: executing program 3 (id=2025): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) io_uring_setup$auto(0x1, 0x0) r1 = socket(0x29, 0x800, 0x5) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x83e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r4, @ANYRESHEX=r2, @ANYRES8, @ANYBLOB="9c006f809700f5801f35a3d212d09287c23c5493a9e43ba7117e5aba66841b715fbc0b420e023296371a4fb3b4f3043fe86463367e6a727843efadb3d458b35043a831c361a79f04006080500098801400448008005c00", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=r3, @ANYBLOB="35005180e7f0400f078c3c7770d7f8c59b1c64813003601a5a0800d500", @ANYBLOB="4a433a7996c43486f194d418a5b897e918cd479cb182ced901488dd85f656ceb70afb340a63610e2113879b88dc4e1e5eb7ce62a8588601e", @ANYRES8=r0], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x44) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) write$auto(r3, &(0x7f00000000c0)='ovs_ct_limit\x00', 0xd3) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x400c4c4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x5) socket(0x2c, 0x1, 0x84) r5 = getpgid(0x0) process_vm_readv$auto(r5, &(0x7f0000000140)={0x0, 0x20000001003}, 0xa, &(0x7f0000000100)={&(0x7f0000000080)='~', 0x200000000}, 0x3, 0x0) syz_open_procfs$namespace(r5, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb701, 0x0) getsockname$auto(0x3, &(0x7f0000000000), &(0x7f0000001040)=0x4) madvise$auto(0x4, 0xffffffffffff0001, 0x17) close_range$auto(0x2, 0x8, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x80000000) socket(0x1a, 0x5, 0x3) socket(0xa, 0x801, 0x84) 1.261312484s ago: executing program 1 (id=2026): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x101000, 0x0) getsockopt$auto_SO_COOKIE(r0, 0x9, 0x39, &(0x7f00000000c0)='/dev/i2c-0\x00', &(0x7f0000000140)) mmap$auto(0x0, 0x402000c, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0x28, 0x5, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000009, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x800, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) 596.553832ms ago: executing program 7 (id=2027): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) close_range$auto(r0, r0, 0x400000) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x9) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4188aea7, 0x0) 591.906288ms ago: executing program 1 (id=2028): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_ipvs(0x0, r0) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0xa, 0x7) socket(0xa, 0x1, 0x84) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x408000, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f00000001c0)="65507307ff65878425ca87720ef9769f205934", 0x13) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0x6, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0xffffffffffffffff, 0x10000009}, 0x7}, 0x6, 0x8) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="939f26bd7000", @ANYRES32, @ANYBLOB="04002880"], 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) mincore$auto(0x7, 0x8000001, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x290880, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40045431, 0x0) bind$auto(0x3, 0x0, 0x6b) recvfrom$auto(r3, 0x0, 0x101, 0x100, 0x0, 0xfffffffffffffffd) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x2a, 0xca, 0x0, 0x561) 588.559996ms ago: executing program 3 (id=2029): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x1af600, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd8/io-timeout-fail\x00', 0x88382, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card1\x00', 0x129800, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0c/sub0/xrun_injection\x00', 0x2c8a00, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r1, 0x0, 0x1001) acct$auto(&(0x7f00000000c0)='/proc/net/ipv4/c\x00nf\x96\xd3\x15\x1eR\x8e\xfb\x01\x05\xef\x16\x06\xd91\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16l\x91\x9a\xa0\x03\x7f\xfa\x8br\xdd\xa5\xa8\xf8\x9e\xfc*\x18 \x9bZq\x8b\xc9X\x9d\x061\x96\xd0){\x1b\x99U>\\l\x13\aI\xa3\x8a\xcb\xe1t\xecU\x9e\xd4\x96\xa5<\x14\xc0(4\x95\x94!$\xf8H\xee\xc3\xd3\x97\xb5oHT\xae\x03\x15\xda\xa5\x88?\xb9V]') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd4\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r4 = prctl$auto(0x41, 0xffffffffffffffff, 0x0, 0x0, 0x0) lstat$auto(0x0, 0x0) poll$auto(0x0, 0x5, 0x400) ioctl$auto(0x3, 0x5404, 0x38) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000380), r4) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000025c0)={0x11b4, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @WGDEVICE_A_PUBLIC_KEY={0xb7, 0x4, "b2e15e09d5ba5ed0608e131c5942aa0f2070b3ec89de3b2490f674d8b0844aac4c95b9a906f7fa5c55f6618bf2435b9042d7e1dd75ed634b603fc273bca6519179818eb66a02573b0c8e4e06c2a780458584a512e7f29b11db796e8cca93f76fe536696c28bb95a503906e8f4034f2da337e963b806d9edfe5683fd380416404aa5099a4c6f26394f006eef17771dd46e8ab4333ac4dff8e0b915ed63cc3da63b6ed63e32da868b94472860653b45f7b5a3833"}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'geneve1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x8a, 0x3, "2410bba1b3fa678d2e8e81d39b6303caf83b22903be43aac524ac384bd458b3399a2a70b57ffd07c3c4e0357912ee8f9f2c1da4255cc6a1804b6e1431b73919d0319ea82e8082ed38c0b7fcaf71cf08bd8ba7c61b51e111cbca6e754c781973ab3e925a3f8c5e3ecb6fe7a7876f532c63b45bcde93b7e1f3ce05996e344f9ca34d90502103e3"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xe6e}, @WGDEVICE_A_PRIVATE_KEY={0x1004, 0x3, "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"}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'veth0\x00'}]}, 0x11b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x80805, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x28641, 0x0) r8 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r8, @ANYRES8=r3, @ANYRES32], 0x18}}, 0x80) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, &(0x7f00000001c0)="da766015694a79abb33066392bea01c297acad2c4e84fd3ced0f0e519486b108c594498483255f67d6d4b68c994a7f6d267be03e1bdcbdb197e75b5d983a31c410a9e9eb52") 399.651895ms ago: executing program 1 (id=2030): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/lapb4/addr_len\x00', 0x200800, 0x0) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r0, 0x40095505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x4a040, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x3, 0x5, 0xeb1, 0xfd, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x210942, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0xfffffffffffffffc}) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'pimreg1\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) msync$auto(0x0, 0xe0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) dup2$auto(0x5, 0x4) read$auto_trace_options_core_fops_trace(r2, 0x0, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) 336.047724ms ago: executing program 7 (id=2031): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = io_uring_setup$auto(0x85, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2c082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) madvise$auto(0x110c2340f4, 0x1, 0x9) bind$auto(r0, &(0x7f0000000040)=@ethernet={0x6, @broadcast}, 0x6a) socket(0xa, 0x6, 0x21) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x101600, 0x0) read$auto(r1, &(0x7f0000000040)='\x04\x00\x86\xd2\x0f\x84\xe7\x05}\x88\x04\xc2&\x14^\v\x802\x89Y\xf2;\xe8\xf4a\xab\x01\xf5\x1f\xd5\xf5\x89lg\x0f+S\xbf\xa7\xc3\xd0\x1e\x18\xc2\xe8\x87\xa9\x9a4I;\xf6wP\'go\xf2\xf13\x91I\x819nz65-\x84\x11\x7f^\xed^\xbc\x17\x17\x82r\xa4\xf6\x86m\x81YI\xa7\xe7\x97%\x9d\bs\xc92\x1b\t\xf9q\a*\xf1\r\xc1\x18\xa7\x05m\xb1\xda\apU\xb8)b\x7f\xe9rQ\xc5N~,,\xad\xf0\x011\x8b`\xb8\x06\x01$\'\xb4\x03g\xe6\xf8\x18liR-\x97\xadX\x7f\v\xa4\xb5\xfa\xe0k\xa1\xc3\x89\x01\xb1J\xdcy!\x99\xf65\x9e\xcd\xe2[\xd78\x0e\xde-!u\x9bh\a\xbbHC\x91\xde\xd2\x9a}S\xf0\x85\x7f\x86/\xd7||\xf4\xca\xc9A\xac\xfb\x1f\xcb\xed\xbaF\xe5\xb2\xdc/Z\x1b\xc9\xb8\xc9\x83O2F\x91\a\x8c\xcd\xe57\xaa\x12\x03\xe4=\x85\xb3\xa7L', 0xc) unshare$auto(0x200) keyctl$auto(0x5, 0xffffffffffffffff, 0x9, 0x5, 0x8) keyctl$auto(0xf, 0xdfffffffffffffff, 0x69c9, 0x2, 0xbcc) prctl$auto(0x1000000001a, 0x1, 0x9, 0x7, 0x32) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) msgget$auto(0x0, 0x5) bind$auto(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x27, "ffffff0b000000000000000700"}, 0x7ff) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) epoll_create$auto(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) msgsnd$auto(0x0, &(0x7f0000000600)={0x7fc, 0x7}, 0x400, 0x2) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000200)="4509780f5117ff6be2032209823f6a61559412a837f5525573cb9b93c37c1809d2f15f73172bc0bd7f54e5743df57302f8c0fb346612abc5d4642f8d63e1803be012819fe17818e8cb13a145889df944c4f9ae3f55693612cebfbe8961b131c31ba9194a12b41487bc228a04d83af5a1b65f5e3fc621bcfb06877181e56251d78f2bfcfd2848861bf7d6040f13be0e5d2196dd09fd88de670b64c97c13bd8d4cde7ccabb9100603dd3a8bb8fba3ca06594fac02da5ff9c") msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 0s ago: executing program 7 (id=2032): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) unshare$auto(0x40000080) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc051}, 0x4005) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="11000000126584", 0x7) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) kernel console output (not intermixed with test programs): ] name failslab, interval 1, probability 0, space 0, times 0 [ 414.255348][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 414.263284][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.8.1249 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 414.263323][T13183] Tainted: [U]=USER [ 414.263331][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.263345][T13183] Call Trace: [ 414.263352][T13183] [ 414.263361][T13183] dump_stack_lvl+0x16c/0x1f0 [ 414.263396][T13183] should_fail_ex+0x50a/0x650 [ 414.263432][T13183] ? fs_reclaim_acquire+0xae/0x150 [ 414.263467][T13183] ? __pfx_filemap_map_pages+0x10/0x10 [ 414.263494][T13183] should_failslab+0xc2/0x120 [ 414.263518][T13183] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 414.263552][T13183] ? ptlock_alloc+0x1f/0x70 [ 414.263587][T13183] ? __pfx_filemap_map_pages+0x10/0x10 [ 414.263615][T13183] ptlock_alloc+0x1f/0x70 [ 414.263646][T13183] pte_alloc_one+0x74/0x390 [ 414.263680][T13183] __do_fault+0x320/0x490 [ 414.263705][T13183] ? __pfx_filemap_map_pages+0x10/0x10 [ 414.263727][T13183] do_pte_missing+0x1a8/0x3e10 [ 414.263761][T13183] ? do_raw_spin_unlock+0x172/0x230 [ 414.263786][T13183] ? __pmd_alloc+0x3c2/0x870 [ 414.263819][T13183] __handle_mm_fault+0x1166/0x2c60 [ 414.263861][T13183] ? __pfx___handle_mm_fault+0x10/0x10 [ 414.263892][T13183] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 414.263942][T13183] ? find_vma+0xc0/0x140 [ 414.263981][T13183] ? __pfx_find_vma+0x10/0x10 [ 414.264014][T13183] handle_mm_fault+0x3fa/0xaa0 [ 414.264056][T13183] do_user_addr_fault+0x7a3/0x13f0 [ 414.264097][T13183] exc_page_fault+0x5c/0xc0 [ 414.264125][T13183] asm_exc_page_fault+0x26/0x30 [ 414.264155][T13183] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 414.264192][T13183] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 414.264214][T13183] RSP: 0018:ffffc9000bd07ce0 EFLAGS: 00050202 [ 414.264233][T13183] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 414.264249][T13183] RDX: fffff520017a0fb0 RSI: ffffc9000bd07d58 RDI: 0000000000000004 [ 414.264264][T13183] RBP: 0000000000000004 R08: 0000000000000000 R09: fffff520017a0faf [ 414.264278][T13183] R10: ffffc9000bd07d7f R11: 0000000000000000 R12: ffffc9000bd07d58 [ 414.264292][T13183] R13: 000000000000002c R14: 00007ffffffff000 R15: 0000000000000000 [ 414.264319][T13183] _copy_to_user+0xbb/0xd0 [ 414.264345][T13183] semctl_info.constprop.0+0x33a/0x460 [ 414.264368][T13183] ? __pfx_semctl_info.constprop.0+0x10/0x10 [ 414.264397][T13183] ? do_futex+0x123/0x350 [ 414.264423][T13183] ? __pfx_do_futex+0x10/0x10 [ 414.264452][T13183] ksys_semctl.constprop.0+0x148/0x2e0 [ 414.264479][T13183] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 414.264505][T13183] ? __x64_sys_futex+0x1e1/0x4c0 [ 414.264554][T13183] do_syscall_64+0xcd/0x250 [ 414.264584][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.264614][T13183] RIP: 0033:0x7f126578d169 [ 414.264632][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.264653][T13183] RSP: 002b:00007f12665a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 414.264673][T13183] RAX: ffffffffffffffda RBX: 00007f12659a5fa0 RCX: 00007f126578d169 [ 414.264688][T13183] RDX: 0000000000000013 RSI: 0000000000000804 RDI: 00000000080001ff [ 414.264702][T13183] RBP: 00007f126580e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.264716][T13183] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 414.264730][T13183] R13: 0000000000000000 R14: 00007f12659a5fa0 R15: 00007fff2675cef8 [ 414.264761][T13183] [ 414.717735][T13180] HfR: entered promiscuous mode [ 414.754664][T13181] HfR: left promiscuous mode [ 417.219762][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 420.081072][T13285] FAULT_INJECTION: forcing a failure. [ 420.081072][T13285] name failslab, interval 1, probability 0, space 0, times 0 [ 420.093955][T13285] CPU: 1 UID: 0 PID: 13285 Comm: syz.7.1273 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 420.093994][T13285] Tainted: [U]=USER [ 420.094003][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.094018][T13285] Call Trace: [ 420.094026][T13285] [ 420.094035][T13285] dump_stack_lvl+0x16c/0x1f0 [ 420.094071][T13285] should_fail_ex+0x50a/0x650 [ 420.094107][T13285] ? fs_reclaim_acquire+0xae/0x150 [ 420.094139][T13285] ? file_f_owner_allocate+0x8a/0x140 [ 420.094163][T13285] should_failslab+0xc2/0x120 [ 420.094185][T13285] __kmalloc_cache_noprof+0x68/0x410 [ 420.094225][T13285] file_f_owner_allocate+0x8a/0x140 [ 420.094250][T13285] generic_setlease+0x5c3/0x1310 [ 420.094279][T13285] ? __pfx_lock_release+0x10/0x10 [ 420.094317][T13285] ? __pfx_generic_setlease+0x10/0x10 [ 420.094353][T13285] kernel_setlease+0x106/0x140 [ 420.094383][T13285] vfs_setlease+0x258/0x2d0 [ 420.094413][T13285] fcntl_setlease+0x3ee/0x5a0 [ 420.094440][T13285] ? __pfx_fcntl_setlease+0x10/0x10 [ 420.094477][T13285] ? __fget_files+0x1fc/0x3a0 [ 420.094513][T13285] do_fcntl+0x768/0x15b0 [ 420.094537][T13285] ? __pfx_do_fcntl+0x10/0x10 [ 420.094570][T13285] ? tomoyo_file_fcntl+0x6c/0xc0 [ 420.094609][T13285] __x64_sys_fcntl+0x170/0x200 [ 420.094637][T13285] do_syscall_64+0xcd/0x250 [ 420.094669][T13285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.094702][T13285] RIP: 0033:0x7facfe98d169 [ 420.094721][T13285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.094745][T13285] RSP: 002b:00007facff7ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 420.094769][T13285] RAX: ffffffffffffffda RBX: 00007facfeba5fa0 RCX: 00007facfe98d169 [ 420.094784][T13285] RDX: 9ec0000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 420.094797][T13285] RBP: 00007facfea0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 420.094809][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.094822][T13285] R13: 0000000000000000 R14: 00007facfeba5fa0 R15: 00007ffc5e5f77e8 [ 420.094850][T13285] [ 420.733988][T13294] program syz.1.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.926183][T13294] cougar: G6 mapped to space [ 422.035224][T13309] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 422.598184][T13314] HfR: entered promiscuous mode [ 422.699796][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1278'. [ 422.751682][T13314] HfR: left promiscuous mode [ 423.490113][T13330] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 423.916629][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1284'. [ 425.097304][T13377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1292'. [ 425.668045][T13375] kexec: Could not allocate control_code_buffer [ 426.181845][T13393] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1296'. [ 426.809259][T13405] syz.8.1300: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 426.846068][T13405] CPU: 1 UID: 0 PID: 13405 Comm: syz.8.1300 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 426.846115][T13405] Tainted: [U]=USER [ 426.846122][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 426.846135][T13405] Call Trace: [ 426.846142][T13405] [ 426.846152][T13405] dump_stack_lvl+0x16c/0x1f0 [ 426.846187][T13405] warn_alloc+0x24d/0x3a0 [ 426.846221][T13405] ? __pfx_warn_alloc+0x10/0x10 [ 426.846260][T13405] ? lock_acquire.part.0+0x11b/0x380 [ 426.846305][T13405] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 426.846340][T13405] ? rcu_is_watching+0x12/0xc0 [ 426.846365][T13405] ? trace_contention_end+0xee/0x140 [ 426.846399][T13405] ? __mutex_lock+0x1cc/0xb10 [ 426.846425][T13405] ? tomoyo_path_number_perm+0x46d/0x590 [ 426.846453][T13405] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 426.846483][T13405] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 426.846514][T13405] ? __pfx___mutex_lock+0x10/0x10 [ 426.846544][T13405] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 426.846576][T13405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 426.846609][T13405] ? do_vfs_ioctl+0x513/0x1990 [ 426.846638][T13405] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 426.846669][T13405] vmalloc_noprof+0x6b/0x90 [ 426.846699][T13405] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 426.846724][T13405] dvb_dvr_do_ioctl+0x15d/0x290 [ 426.846752][T13405] dvb_usercopy+0x165/0x320 [ 426.846776][T13405] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 426.846805][T13405] ? __pfx_dvb_usercopy+0x10/0x10 [ 426.846831][T13405] ? __pfx_lock_release+0x10/0x10 [ 426.846874][T13405] ? __fget_files+0x206/0x3a0 [ 426.846913][T13405] dvb_dvr_ioctl+0x29/0x40 [ 426.846939][T13405] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 426.846967][T13405] __x64_sys_ioctl+0x190/0x200 [ 426.846996][T13405] do_syscall_64+0xcd/0x250 [ 426.847028][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.847059][T13405] RIP: 0033:0x7f126578d169 [ 426.847090][T13405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.847114][T13405] RSP: 002b:00007f12665a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.847138][T13405] RAX: ffffffffffffffda RBX: 00007f12659a5fa0 RCX: 00007f126578d169 [ 426.847155][T13405] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000009 [ 426.847170][T13405] RBP: 00007f126580e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 426.847185][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.847199][T13405] R13: 0000000000000000 R14: 00007f12659a5fa0 R15: 00007fff2675cef8 [ 426.847231][T13405] [ 426.847240][T13405] Mem-Info: [ 427.176689][T13405] active_anon:48590 inactive_anon:69848 isolated_anon:0 [ 427.176689][T13405] active_file:3308 inactive_file:53733 isolated_file:0 [ 427.176689][T13405] unevictable:768 dirty:782 writeback:2 [ 427.176689][T13405] slab_reclaimable:11791 slab_unreclaimable:100673 [ 427.176689][T13405] mapped:42645 shmem:99827 pagetables:1542 [ 427.176689][T13405] sec_pagetables:0 bounce:0 [ 427.176689][T13405] kernel_misc_reclaimable:0 [ 427.176689][T13405] free:1209829 free_pcp:2983 free_cma:0 [ 427.311267][T13405] Node 0 active_anon:195636kB inactive_anon:278864kB active_file:13232kB inactive_file:214924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:174672kB dirty:3128kB writeback:0kB shmem:397548kB shmem_thp:20480kB shmem_pmdmapped:16384kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12648kB pagetables:6264kB sec_pagetables:0kB all_unreclaimable? no [ 427.413093][T13405] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 427.519373][T13405] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.689789][T13405] lowmem_reserve[]: 0 2487 2487 0 0 [ 427.695131][T13405] Node 0 DMA32 free:915376kB boost:0kB min:34392kB low:42988kB high:51584kB reserved_highatomic:0KB active_anon:198144kB inactive_anon:277648kB active_file:13232kB inactive_file:214832kB unevictable:1536kB writepending:3160kB present:3129332kB managed:2547540kB mlocked:0kB bounce:0kB free_pcp:5248kB local_pcp:4828kB free_cma:0kB [ 427.861389][T13363] Process accounting paused [ 427.910011][T13405] lowmem_reserve[]: 0 0 0 0 0 [ 427.914825][T13405] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 428.069572][T13405] lowmem_reserve[]: 0 0 0 0 0 [ 428.101813][T13405] Node 1 Normal free:3900248kB boost:0kB min:55504kB low:69380kB high:83256kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9276kB local_pcp:5200kB free_cma:0kB [ 428.172171][T13405] lowmem_reserve[]: 0 0 0 0 0 [ 428.182311][T13405] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 428.209464][T13405] Node 0 DMA32: 11*4kB (UME) 1024*8kB (UME) 599*16kB (UE) 37*32kB (UME) 303*64kB (UME) 815*128kB (UME) 352*256kB (UME) 144*512kB (UME) 47*1024kB (UM) 4*2048kB (UE) 131*4096kB (UM) = 899452kB [ 428.245477][T13405] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.297800][T13405] Node 1 Normal: 76*4kB (UME) 57*8kB (UME) 30*16kB (UME) 192*32kB (UME) 86*64kB (UME) 34*128kB (UME) 18*256kB (UME) 11*512kB (UME) 6*1024kB (UE) 6*2048kB (UE) 941*4096kB (M) = 3900248kB [ 428.326147][T13405] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.340279][T13405] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.386064][T13405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.395695][T13405] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.482278][T13405] 165376 total pagecache pages [ 428.490598][T13405] 7 pages in swap cache [ 428.496302][T13405] Free swap = 103664kB [ 428.500539][T13405] Total swap = 124996kB [ 428.504798][T13405] 2097051 pages RAM [ 428.546060][T13405] 0 pages HighMem/MovableOnly [ 428.566211][T13405] 428508 pages reserved [ 428.570866][T13405] 0 pages cma reserved [ 429.050239][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1305'. [ 429.664560][T13441] FAULT_INJECTION: forcing a failure. [ 429.664560][T13441] name failslab, interval 1, probability 0, space 0, times 0 [ 429.746078][T13441] CPU: 1 UID: 0 PID: 13441 Comm: syz.8.1307 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 429.746120][T13441] Tainted: [U]=USER [ 429.746128][T13441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.746143][T13441] Call Trace: [ 429.746151][T13441] [ 429.746161][T13441] dump_stack_lvl+0x16c/0x1f0 [ 429.746198][T13441] should_fail_ex+0x50a/0x650 [ 429.746235][T13441] ? fs_reclaim_acquire+0xae/0x150 [ 429.746268][T13441] ? snd_seq_oss_readq_new+0x99/0x2c0 [ 429.746299][T13441] should_failslab+0xc2/0x120 [ 429.746323][T13441] __kmalloc_noprof+0xcb/0x510 [ 429.746366][T13441] snd_seq_oss_readq_new+0x99/0x2c0 [ 429.746400][T13441] snd_seq_oss_open+0x54b/0xa20 [ 429.746431][T13441] odev_open+0x6f/0x90 [ 429.746450][T13441] ? __pfx_odev_open+0x10/0x10 [ 429.746471][T13441] soundcore_open+0x409/0x580 [ 429.746511][T13441] ? __pfx_soundcore_open+0x10/0x10 [ 429.746546][T13441] chrdev_open+0x237/0x6a0 [ 429.746580][T13441] ? __pfx_apparmor_file_open+0x10/0x10 [ 429.746610][T13441] ? __pfx_chrdev_open+0x10/0x10 [ 429.746648][T13441] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 429.746687][T13441] do_dentry_open+0x735/0x1c40 [ 429.746720][T13441] ? __pfx_chrdev_open+0x10/0x10 [ 429.746755][T13441] ? inode_permission+0xdd/0x5f0 [ 429.746785][T13441] vfs_open+0x82/0x3f0 [ 429.746808][T13441] ? may_open+0x1f2/0x400 [ 429.746838][T13441] path_openat+0x1e88/0x2d80 [ 429.746885][T13441] ? __pfx_path_openat+0x10/0x10 [ 429.746918][T13441] ? __pfx___lock_acquire+0x10/0x10 [ 429.746949][T13441] ? lock_acquire.part.0+0x11b/0x380 [ 429.746992][T13441] ? find_held_lock+0x2d/0x110 [ 429.747024][T13441] do_filp_open+0x20c/0x470 [ 429.747060][T13441] ? __pfx_do_filp_open+0x10/0x10 [ 429.747093][T13441] ? find_held_lock+0x2d/0x110 [ 429.747143][T13441] ? alloc_fd+0x41f/0x760 [ 429.747185][T13441] do_sys_openat2+0x17a/0x1e0 [ 429.747211][T13441] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.747238][T13441] ? do_raw_spin_unlock+0x172/0x230 [ 429.747271][T13441] __x64_sys_openat+0x175/0x210 [ 429.747297][T13441] ? __pfx___x64_sys_openat+0x10/0x10 [ 429.747338][T13441] do_syscall_64+0xcd/0x250 [ 429.747370][T13441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.747403][T13441] RIP: 0033:0x7f126578d169 [ 429.747423][T13441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.747445][T13441] RSP: 002b:00007f12665a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.747467][T13441] RAX: ffffffffffffffda RBX: 00007f12659a5fa0 RCX: 00007f126578d169 [ 429.747484][T13441] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 429.747501][T13441] RBP: 00007f126580e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 429.747516][T13441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.747531][T13441] R13: 0000000000000000 R14: 00007f12659a5fa0 R15: 00007fff2675cef8 [ 429.747565][T13441] [ 431.132063][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1313'. [ 431.686400][ T3009] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.843831][ T3009] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.017868][ T3009] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.092529][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1319'. [ 432.393406][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.409001][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.414649][ T3009] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.420516][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.442606][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.451056][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 432.458566][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 433.191765][T13483] chnl_net:caif_netlink_parms(): no params data found [ 434.093732][ T3009] bridge_slave_1: left allmulticast mode [ 434.101658][ T3009] bridge_slave_1: left promiscuous mode [ 434.116382][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.287459][ T3009] bridge_slave_0: left allmulticast mode [ 434.293177][ T3009] bridge_slave_0: left promiscuous mode [ 434.315583][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.556054][ T5837] Bluetooth: hci1: command tx timeout [ 434.969309][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1329'. [ 435.281394][T13554] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1332'. [ 435.474556][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.501453][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.528949][ T3009] bond0 (unregistering): Released all slaves [ 435.712111][T13554] net veth1_virt_wifi : renamed from virt_wifi0 [ 436.137390][T13483] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.152021][T13483] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.165181][T13483] bridge_slave_0: entered allmulticast mode [ 436.189521][T13483] bridge_slave_0: entered promiscuous mode [ 436.306136][T13483] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.313257][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.359004][T13483] bridge_slave_1: entered allmulticast mode [ 436.367900][T13483] bridge_slave_1: entered promiscuous mode [ 436.451592][T13578] usbip-vudc usbip-vudc.0: gadget not bound [ 436.632837][ T5837] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 436.632874][ T5837] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 436.648501][ T5839] Bluetooth: hci1: command tx timeout [ 436.648955][ T5837] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 436.654230][ T5837] Bluetooth: hci0: adv larger than maximum supported [ 436.662020][ T5837] Bluetooth: hci0: Malformed LE Event: 0x0d [ 436.886676][T13483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.917633][T13483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.111859][ T3009] hsr_slave_0: left promiscuous mode [ 437.126483][ T3009] hsr_slave_1: left promiscuous mode [ 437.146560][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.154020][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.165517][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.183624][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.230998][ T3009] veth1_macvtap: left promiscuous mode [ 437.246686][ T3009] veth0_macvtap: left promiscuous mode [ 437.252423][ T3009] veth1_vlan: left promiscuous mode [ 437.262558][ T3009] veth0_vlan: left promiscuous mode [ 437.843954][ T3009] team0 (unregistering): Port device team_slave_1 removed [ 437.888790][ T3009] team0 (unregistering): Port device team_slave_0 removed [ 438.372722][T13483] team0: Port device team_slave_0 added [ 438.401886][T13483] team0: Port device team_slave_1 added [ 438.494112][T13483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.501365][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.528437][T13483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.542367][T13483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.549436][T13483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.576805][T13483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.689034][T13483] hsr_slave_0: entered promiscuous mode [ 438.695503][T13483] hsr_slave_1: entered promiscuous mode [ 438.705271][T13483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.713286][T13483] Cannot create hsr debugfs directory [ 438.718776][ T5837] Bluetooth: hci1: command tx timeout [ 440.110765][T13644] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1342'. [ 440.388274][T13483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.418874][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1342'. [ 440.433265][T13483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.480906][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.494377][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.503846][T13483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.550993][T13483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.705664][T13667] svc: failed to register nfsdv3 RPC service (errno 111). [ 440.757300][T13667] svc: failed to register nfsaclv3 RPC service (errno 111). [ 440.766493][T13677] misc userio: The device must be registered before sending interrupts [ 440.802793][ T5837] Bluetooth: hci1: command tx timeout [ 440.827738][T13483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.850829][T13483] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.871033][T10867] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.878338][T10867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.940940][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.948255][ T6656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.558022][T13483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.650325][T13483] veth0_vlan: entered promiscuous mode [ 441.671059][T13483] veth1_vlan: entered promiscuous mode [ 441.741334][T13483] veth0_macvtap: entered promiscuous mode [ 441.775387][T13483] veth1_macvtap: entered promiscuous mode [ 441.811336][T13691] FAULT_INJECTION: forcing a failure. [ 441.811336][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 441.842542][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.871851][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.882316][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.1.1349 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 441.882355][T13691] Tainted: [U]=USER [ 441.882364][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 441.882378][T13691] Call Trace: [ 441.882385][T13691] [ 441.882395][T13691] dump_stack_lvl+0x16c/0x1f0 [ 441.882433][T13691] should_fail_ex+0x50a/0x650 [ 441.882471][T13691] ? fs_reclaim_acquire+0xae/0x150 [ 441.882505][T13691] ? acpi_ds_create_walk_state+0x78/0x250 [ 441.882537][T13691] should_failslab+0xc2/0x120 [ 441.882561][T13691] __kmalloc_cache_noprof+0x68/0x410 [ 441.882601][T13691] acpi_ds_create_walk_state+0x78/0x250 [ 441.882633][T13691] acpi_ps_execute_method+0x253/0xb30 [ 441.882666][T13691] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 441.882705][T13691] acpi_ns_evaluate+0x76c/0xca0 [ 441.882739][T13691] ? kasan_save_track+0x14/0x30 [ 441.882777][T13691] acpi_evaluate_object+0x1fb/0xa90 [ 441.882808][T13691] ? __lock_acquire+0xcc5/0x3c40 [ 441.882842][T13691] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 441.882881][T13691] acpi_evaluate_integer+0xde/0x200 [ 441.882918][T13691] ? __pfx___lock_acquire+0x10/0x10 [ 441.882952][T13691] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 441.882990][T13691] ? rcu_is_watching+0x12/0xc0 [ 441.883016][T13691] ? trace_contention_end+0xee/0x140 [ 441.883063][T13691] ? __pfx_status_show+0x10/0x10 [ 441.883091][T13691] status_show+0xa1/0x120 [ 441.883120][T13691] ? __pfx_status_show+0x10/0x10 [ 441.883158][T13691] dev_attr_show+0x53/0xe0 [ 441.883191][T13691] ? __pfx_dev_attr_show+0x10/0x10 [ 441.883229][T13691] sysfs_kf_seq_show+0x23e/0x410 [ 441.883267][T13691] seq_read_iter+0x4f4/0x12b0 [ 441.883315][T13691] kernfs_fop_read_iter+0x414/0x580 [ 441.883341][T13691] ? rw_verify_area+0xcf/0x680 [ 441.883374][T13691] vfs_read+0x886/0xbf0 [ 441.883412][T13691] ? __pfx_vfs_read+0x10/0x10 [ 441.883467][T13691] ksys_read+0x12b/0x250 [ 441.883498][T13691] ? __pfx_ksys_read+0x10/0x10 [ 441.883541][T13691] do_syscall_64+0xcd/0x250 [ 441.883574][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.883607][T13691] RIP: 0033:0x7f998118d169 [ 441.883628][T13691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.883651][T13691] RSP: 002b:00007f9981f9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.883674][T13691] RAX: ffffffffffffffda RBX: 00007f99813a5fa0 RCX: 00007f998118d169 [ 441.883691][T13691] RDX: 0000000000000070 RSI: 0000400000000000 RDI: 000000000000000a [ 441.883706][T13691] RBP: 00007f998120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 441.883722][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.883736][T13691] R13: 0000000000000000 R14: 00007f99813a5fa0 R15: 00007ffd3b6f9bc8 [ 441.883770][T13691] [ 442.164162][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.176637][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.189034][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.199663][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.210763][T13483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.250250][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.260756][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.270709][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.281212][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.292936][T13483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.303458][T13483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.314400][T13483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.328830][T13483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.339431][T13483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.349357][T13483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.358585][T13483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.609258][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.622847][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.670773][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.682670][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.271427][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1318'. [ 445.919324][T13793] sp0: Synchronizing with TNC [ 446.993905][T13828] [ 449.466401][T13912] svc: failed to register nfsdv3 RPC service (errno 111). [ 449.518532][T13925] cgroup: fork rejected by pids controller in /syz9 [ 449.526310][T13912] svc: failed to register nfsaclv3 RPC service (errno 111). [ 449.687710][T13950] FAULT_INJECTION: forcing a failure. [ 449.687710][T13950] name failslab, interval 1, probability 0, space 0, times 0 [ 449.723146][T13950] CPU: 0 UID: 0 PID: 13950 Comm: syz.1.1375 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 449.723187][T13950] Tainted: [U]=USER [ 449.723195][T13950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 449.723209][T13950] Call Trace: [ 449.723216][T13950] [ 449.723227][T13950] dump_stack_lvl+0x16c/0x1f0 [ 449.723265][T13950] should_fail_ex+0x50a/0x650 [ 449.723300][T13950] ? fs_reclaim_acquire+0xae/0x150 [ 449.723333][T13950] should_failslab+0xc2/0x120 [ 449.723356][T13950] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 449.723388][T13950] ? __xlate_proc_name+0x173/0x210 [ 449.723423][T13950] ? __proc_create+0x2c0/0x8b0 [ 449.723471][T13950] __proc_create+0x2c0/0x8b0 [ 449.723510][T13950] ? __pfx___proc_create+0x10/0x10 [ 449.723560][T13950] proc_create_reg+0x7d/0x180 [ 449.723587][T13950] proc_create_net_data+0x8f/0x1b0 [ 449.723624][T13950] ? __pfx_proc_create_net_data+0x10/0x10 [ 449.723662][T13950] ? find_held_lock+0x2d/0x110 [ 449.723695][T13950] xt_proto_init+0x243/0xbf0 [ 449.723732][T13950] ? __pfx_xt_proto_init+0x10/0x10 [ 449.723769][T13950] ? net_generic+0xf4/0x2a0 [ 449.723805][T13950] ? __pfx_ip6_tables_net_init+0x10/0x10 [ 449.723835][T13950] ops_init+0x1df/0x5f0 [ 449.723873][T13950] setup_net+0x21f/0x860 [ 449.723910][T13950] ? __pfx_setup_net+0x10/0x10 [ 449.723941][T13950] ? down_read_killable+0xcc/0x380 [ 449.723973][T13950] ? __pfx_down_read_killable+0x10/0x10 [ 449.724004][T13950] ? __raw_spin_lock_init+0x3a/0x110 [ 449.724043][T13950] ? debug_mutex_init+0x37/0x70 [ 449.724072][T13950] copy_net_ns+0x2a6/0x5f0 [ 449.724099][T13950] create_new_namespaces+0x3ea/0xad0 [ 449.724148][T13950] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 449.724189][T13950] ksys_unshare+0x45d/0xa40 [ 449.724215][T13950] ? __pfx_ksys_unshare+0x10/0x10 [ 449.724238][T13950] ? xfd_validate_state+0x5d/0x180 [ 449.724272][T13950] ? syscall_user_dispatch+0x7a/0x130 [ 449.724314][T13950] __x64_sys_unshare+0x31/0x40 [ 449.724339][T13950] do_syscall_64+0xcd/0x250 [ 449.724371][T13950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.724404][T13950] RIP: 0033:0x7f998118d169 [ 449.724424][T13950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.724455][T13950] RSP: 002b:00007f9981f9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 449.724480][T13950] RAX: ffffffffffffffda RBX: 00007f99813a5fa0 RCX: 00007f998118d169 [ 449.724497][T13950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 449.724512][T13950] RBP: 00007f998120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 449.724527][T13950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.724542][T13950] R13: 0000000000000000 R14: 00007f99813a5fa0 R15: 00007ffd3b6f9bc8 [ 449.724574][T13950] [ 450.556794][T13975] futex_wake_op: syz.2.1379 tries to shift op by 64; fix this program [ 450.864081][T13980] block mtdblock0: the capability attribute has been deprecated. [ 451.588729][T14008] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1383'. [ 451.914217][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1386'. [ 452.510410][T14025] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400007f00010006 [ 452.577148][T14033] sd 0:0:1:0: PR command failed: 1026 [ 452.582821][T14033] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 452.716185][T14033] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 454.633313][T14071] kexec: Could not allocate control_code_buffer [ 454.833629][T14108] FAULT_INJECTION: forcing a failure. [ 454.833629][T14108] name failslab, interval 1, probability 0, space 0, times 0 [ 454.911376][T14108] CPU: 0 UID: 0 PID: 14108 Comm: syz.9.1398 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 454.911418][T14108] Tainted: [U]=USER [ 454.911426][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 454.911439][T14108] Call Trace: [ 454.911446][T14108] [ 454.911455][T14108] dump_stack_lvl+0x16c/0x1f0 [ 454.911494][T14108] should_fail_ex+0x50a/0x650 [ 454.911531][T14108] ? fs_reclaim_acquire+0xae/0x150 [ 454.911566][T14108] should_failslab+0xc2/0x120 [ 454.911591][T14108] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 454.911627][T14108] ? __kernfs_new_node+0xd3/0x890 [ 454.911665][T14108] __kernfs_new_node+0xd3/0x890 [ 454.911700][T14108] ? __pfx___kernfs_new_node+0x10/0x10 [ 454.911729][T14108] ? __pfx_lock_release+0x10/0x10 [ 454.911772][T14108] ? kernfs_add_one+0x39d/0x520 [ 454.911819][T14108] ? up_write+0x1b2/0x520 [ 454.911860][T14108] kernfs_new_node+0x186/0x240 [ 454.911901][T14108] __kernfs_create_file+0x53/0x350 [ 454.911931][T14108] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 454.911968][T14108] internal_create_group+0x56c/0xf10 [ 454.912009][T14108] ? __pfx_internal_create_group+0x10/0x10 [ 454.912047][T14108] ? kernfs_create_link+0x1bd/0x240 [ 454.912077][T14108] internal_create_groups+0x9d/0x150 [ 454.912110][T14108] device_add+0xf33/0x1a70 [ 454.912146][T14108] ? __pfx_device_add+0x10/0x10 [ 454.912181][T14108] ? __init_waitqueue_head+0xca/0x150 [ 454.912214][T14108] netdev_register_kobject+0x183/0x3a0 [ 454.912253][T14108] register_netdevice+0x147b/0x1eb0 [ 454.912295][T14108] ? __pfx_register_netdevice+0x10/0x10 [ 454.912332][T14108] ? alloc_netdev_mqs+0xed5/0x15d0 [ 454.912367][T14108] register_netdev+0x34/0x50 [ 454.912400][T14108] gprs_attach+0x1cf/0x640 [ 454.912431][T14108] pep_setsockopt+0x419/0x510 [ 454.912459][T14108] ? __pfx_pep_setsockopt+0x10/0x10 [ 454.912491][T14108] ? sock_common_setsockopt+0x2e/0xf0 [ 454.912525][T14108] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 454.912552][T14108] do_sock_setsockopt+0x222/0x480 [ 454.912578][T14108] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 454.912605][T14108] ? lock_acquire+0x2f/0xb0 [ 454.912654][T14108] __sys_setsockopt+0x1a0/0x230 [ 454.912692][T14108] __x64_sys_setsockopt+0xbd/0x160 [ 454.912722][T14108] ? do_syscall_64+0x91/0x250 [ 454.912757][T14108] ? lockdep_hardirqs_on+0x7c/0x110 [ 454.912786][T14108] do_syscall_64+0xcd/0x250 [ 454.912819][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.912852][T14108] RIP: 0033:0x7fd01c78d169 [ 454.912872][T14108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.912895][T14108] RSP: 002b:00007fd01d58e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.912918][T14108] RAX: ffffffffffffffda RBX: 00007fd01c9a5fa0 RCX: 00007fd01c78d169 [ 454.912935][T14108] RDX: 0000000000000001 RSI: 0000000000000113 RDI: 0000000000000005 [ 454.912950][T14108] RBP: 00007fd01c80e2a0 R08: 000000000000007f R09: 0000000000000000 [ 454.912965][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.912979][T14108] R13: 0000000000000000 R14: 00007fd01c9a5fa0 R15: 00007fffc84d54f8 [ 454.913012][T14108] [ 456.167594][T14140] FAULT_INJECTION: forcing a failure. [ 456.167594][T14140] name failslab, interval 1, probability 0, space 0, times 0 [ 456.203285][T14140] CPU: 1 UID: 0 PID: 14140 Comm: syz.2.1403 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 456.203326][T14140] Tainted: [U]=USER [ 456.203333][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.203347][T14140] Call Trace: [ 456.203354][T14140] [ 456.203363][T14140] dump_stack_lvl+0x16c/0x1f0 [ 456.203401][T14140] should_fail_ex+0x50a/0x650 [ 456.203446][T14140] ? fs_reclaim_acquire+0xae/0x150 [ 456.203477][T14140] ? sg_kmalloc+0x35/0x70 [ 456.203509][T14140] should_failslab+0xc2/0x120 [ 456.203532][T14140] __kmalloc_noprof+0xcb/0x510 [ 456.203564][T14140] ? policy_nodemask+0xea/0x4e0 [ 456.203607][T14140] sg_kmalloc+0x35/0x70 [ 456.203638][T14140] __sg_alloc_table+0x25d/0x390 [ 456.203674][T14140] sg_alloc_table+0x37/0x1c0 [ 456.203704][T14140] ? __pfx_sg_kmalloc+0x10/0x10 [ 456.203740][T14140] system_heap_allocate+0x744/0xf80 [ 456.203782][T14140] ? __pfx_system_heap_allocate+0x10/0x10 [ 456.203824][T14140] ? rep_movs_alternative+0x4a/0x70 [ 456.203864][T14140] dma_heap_ioctl+0x33b/0x6a0 [ 456.203899][T14140] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 456.203947][T14140] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 456.203981][T14140] __x64_sys_ioctl+0x190/0x200 [ 456.204011][T14140] do_syscall_64+0xcd/0x250 [ 456.204042][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.204075][T14140] RIP: 0033:0x7f049338d169 [ 456.204094][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.204117][T14140] RSP: 002b:00007f0494104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.204140][T14140] RAX: ffffffffffffffda RBX: 00007f04935a5fa0 RCX: 00007f049338d169 [ 456.204156][T14140] RDX: 0000400000000140 RSI: ffffffffffdffe00 RDI: 0000000000000006 [ 456.204172][T14140] RBP: 00007f049340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 456.204187][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.204202][T14140] R13: 0000000000000000 R14: 00007f04935a5fa0 R15: 00007ffe58bf3178 [ 456.204233][T14140] [ 458.553408][T14127] Process accounting resumed [ 459.350567][T14200] FAULT_INJECTION: forcing a failure. [ 459.350567][T14200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.455448][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.9.1410 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 459.455489][T14200] Tainted: [U]=USER [ 459.455497][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.455511][T14200] Call Trace: [ 459.455518][T14200] [ 459.455527][T14200] dump_stack_lvl+0x16c/0x1f0 [ 459.455563][T14200] should_fail_ex+0x50a/0x650 [ 459.455597][T14200] ? __pfx___might_resched+0x10/0x10 [ 459.455638][T14200] should_fail_alloc_page+0xe7/0x130 [ 459.455664][T14200] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 459.455697][T14200] ? register_lock_class+0xb1/0x1240 [ 459.455734][T14200] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 459.455788][T14200] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 459.455828][T14200] ? hlock_class+0x4e/0x130 [ 459.455853][T14200] ? __lock_acquire+0x15a9/0x3c40 [ 459.455896][T14200] ? hlock_class+0x4e/0x130 [ 459.455933][T14200] ? mark_lock+0xb5/0xc60 [ 459.455964][T14200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.456004][T14200] ? policy_nodemask+0xea/0x4e0 [ 459.456047][T14200] alloc_pages_mpol+0x1fc/0x540 [ 459.456073][T14200] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 459.456100][T14200] ? find_held_lock+0x2d/0x110 [ 459.456131][T14200] alloc_pages_noprof+0x131/0x390 [ 459.456156][T14200] pte_alloc_one+0x20/0x390 [ 459.456189][T14200] __pte_alloc+0x6e/0x3d0 [ 459.456216][T14200] ? __pfx___pte_alloc+0x10/0x10 [ 459.456243][T14200] ? __pfx___might_resched+0x10/0x10 [ 459.456284][T14200] copy_page_range+0x3737/0x5690 [ 459.456351][T14200] ? __pfx_copy_page_range+0x10/0x10 [ 459.456381][T14200] ? find_held_lock+0x2d/0x110 [ 459.456413][T14200] ? __pfx_lock_release+0x10/0x10 [ 459.456444][T14200] ? lock_acquire+0x2f/0xb0 [ 459.456469][T14200] ? copy_process+0x7c12/0x8c50 [ 459.456496][T14200] ? down_write+0x14e/0x200 [ 459.456528][T14200] ? up_write+0x1b2/0x520 [ 459.456565][T14200] copy_process+0x7ccb/0x8c50 [ 459.456610][T14200] ? __pfx_copy_process+0x10/0x10 [ 459.456634][T14200] ? try_to_wake_up+0x953/0x1490 [ 459.456670][T14200] ? plist_check_head+0xa3/0x150 [ 459.456697][T14200] ? wake_up_q+0xb0/0x160 [ 459.456721][T14200] ? do_raw_spin_unlock+0x172/0x230 [ 459.456748][T14200] kernel_clone+0xfd/0x960 [ 459.456770][T14200] ? __pfx_futex_wake+0x10/0x10 [ 459.456799][T14200] ? __pfx_kernel_clone+0x10/0x10 [ 459.456816][T14200] ? trace_lock_acquire+0x14e/0x1f0 [ 459.456860][T14200] __do_sys_clone+0xcf/0x120 [ 459.456882][T14200] ? __pfx___do_sys_clone+0x10/0x10 [ 459.456905][T14200] ? __sys_sendmsg+0x19a/0x220 [ 459.456961][T14200] ? rcu_is_watching+0x12/0xc0 [ 459.456999][T14200] do_syscall_64+0xcd/0x250 [ 459.457029][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.457057][T14200] RIP: 0033:0x7fd01c78d169 [ 459.457076][T14200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.457097][T14200] RSP: 002b:00007fd01d58dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 459.457120][T14200] RAX: ffffffffffffffda RBX: 00007fd01c9a5fa0 RCX: 00007fd01c78d169 [ 459.457135][T14200] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000000000000 [ 459.457149][T14200] RBP: 00007fd01c80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.457164][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.457176][T14200] R13: 0000000000000000 R14: 00007fd01c9a5fa0 R15: 00007fffc84d54f8 [ 459.457205][T14200] [ 462.107327][T14227] zswap: compressor not available [ 464.384607][T14335] random: crng reseeded on system resumption [ 464.543470][T14328] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1426'. [ 464.607090][T14338] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1426'. [ 465.385210][T14354] netlink: 334 bytes leftover after parsing attributes in process `syz.9.1432'. [ 466.237436][ T5889] smpboot: CPU 1 is now offline [ 466.960116][T14400] delete_channel: no stack [ 468.802146][T14445] FAULT_INJECTION: forcing a failure. [ 468.802146][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 468.905403][T14432] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1449'. [ 468.953485][T14432] team_slave_0: entered allmulticast mode [ 469.044572][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.2.1443 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 469.044598][T14445] Tainted: [U]=USER [ 469.044602][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.044610][T14445] Call Trace: [ 469.044615][T14445] [ 469.044621][T14445] dump_stack_lvl+0x16c/0x1f0 [ 469.044641][T14445] should_fail_ex+0x50a/0x650 [ 469.044662][T14445] ? fs_reclaim_acquire+0xae/0x150 [ 469.044681][T14445] ? ccid_get_builtin_ccids+0x79/0x200 [ 469.044696][T14445] should_failslab+0xc2/0x120 [ 469.044708][T14445] __kmalloc_cache_noprof+0x68/0x410 [ 469.044726][T14445] ? __pfx___feat_register_sp+0x10/0x10 [ 469.044753][T14445] ccid_get_builtin_ccids+0x79/0x200 [ 469.044771][T14445] dccp_feat_init+0x363/0x800 [ 469.044791][T14445] ? __pfx_dccp_feat_init+0x10/0x10 [ 469.044809][T14445] ? lockdep_init_map_type+0xb0/0x7d0 [ 469.044830][T14445] ? do_init_timer+0xc9/0x110 [ 469.044845][T14445] ? __pfx_dccp_keepalive_timer+0x10/0x10 [ 469.044858][T14445] ? __pfx_dccp_delack_timer+0x10/0x10 [ 469.044872][T14445] dccp_init_sock+0x327/0x420 [ 469.044885][T14445] dccp_v4_init_sock+0x1f/0xa0 [ 469.044902][T14445] ? __pfx_dccp_v4_init_sock+0x10/0x10 [ 469.044920][T14445] inet_create+0x94a/0x10a0 [ 469.044940][T14445] ? inet_create+0x90/0x10a0 [ 469.044960][T14445] __sock_create+0x335/0x8d0 [ 469.044978][T14445] inet_ctl_sock_create+0x96/0x230 [ 469.044996][T14445] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 469.045017][T14445] ? __pfx_dccp_v4_init_net+0x10/0x10 [ 469.045035][T14445] dccp_v4_init_net+0x63/0x90 [ 469.045053][T14445] ops_init+0x1df/0x5f0 [ 469.045074][T14445] setup_net+0x21f/0x860 [ 469.045093][T14445] ? __pfx_setup_net+0x10/0x10 [ 469.045110][T14445] ? down_read_killable+0xcc/0x380 [ 469.045128][T14445] ? __pfx_down_read_killable+0x10/0x10 [ 469.045147][T14445] ? __raw_spin_lock_init+0x3a/0x110 [ 469.045167][T14445] ? debug_mutex_init+0x37/0x70 [ 469.045183][T14445] copy_net_ns+0x2a6/0x5f0 [ 469.045197][T14445] create_new_namespaces+0x3ea/0xad0 [ 469.045222][T14445] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 469.045243][T14445] ksys_unshare+0x45d/0xa40 [ 469.045257][T14445] ? __pfx_ksys_unshare+0x10/0x10 [ 469.045269][T14445] ? xfd_validate_state+0x5d/0x180 [ 469.045292][T14445] __x64_sys_unshare+0x31/0x40 [ 469.045305][T14445] do_syscall_64+0xcd/0x250 [ 469.045322][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.045340][T14445] RIP: 0033:0x7f049338d169 [ 469.045352][T14445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.045364][T14445] RSP: 002b:00007f04911f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 469.045377][T14445] RAX: ffffffffffffffda RBX: 00007f04935a6080 RCX: 00007f049338d169 [ 469.045386][T14445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 469.045394][T14445] RBP: 00007f049340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 469.045402][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.045410][T14445] R13: 0000000000000000 R14: 00007f04935a6080 R15: 00007ffe58bf3178 [ 469.045428][T14445] [ 469.350993][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.016907][T14465] netlink: 326 bytes leftover after parsing attributes in process `syz.7.1446'. [ 470.044023][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.051416][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.082323][T14524] netlink: 222 bytes leftover after parsing attributes in process `syz.9.1457'. [ 472.184941][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.481356][T14558] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 473.859555][T14558] sp0: Synchronizing with TNC [ 478.399600][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 484.553907][T14813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 484.961402][T14813] veth1_macvtap: left promiscuous mode [ 485.021931][T14813] macsec0: entered allmulticast mode [ 487.731995][T14859] FAULT_INJECTION: forcing a failure. [ 487.731995][T14859] name failslab, interval 1, probability 0, space 0, times 0 [ 487.790266][T14859] CPU: 0 UID: 0 PID: 14859 Comm: syz.2.1502 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 487.790290][T14859] Tainted: [U]=USER [ 487.790295][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.790303][T14859] Call Trace: [ 487.790308][T14859] [ 487.790314][T14859] dump_stack_lvl+0x16c/0x1f0 [ 487.790337][T14859] should_fail_ex+0x50a/0x650 [ 487.790357][T14859] ? fs_reclaim_acquire+0xae/0x150 [ 487.790376][T14859] ? kvm_dev_ioctl+0x1396/0x1a90 [ 487.790418][T14859] should_failslab+0xc2/0x120 [ 487.790432][T14859] __kmalloc_cache_noprof+0x68/0x410 [ 487.790455][T14859] kvm_dev_ioctl+0x1396/0x1a90 [ 487.790481][T14859] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 487.790502][T14859] ? __fget_files+0x206/0x3a0 [ 487.790522][T14859] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 487.790541][T14859] __x64_sys_ioctl+0x190/0x200 [ 487.790558][T14859] do_syscall_64+0xcd/0x250 [ 487.790575][T14859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.790596][T14859] RIP: 0033:0x7f049338d169 [ 487.790607][T14859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.790620][T14859] RSP: 002b:00007f0494104038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.790633][T14859] RAX: ffffffffffffffda RBX: 00007f04935a5fa0 RCX: 00007f049338d169 [ 487.790641][T14859] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 487.790649][T14859] RBP: 00007f049340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 487.790656][T14859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.790663][T14859] R13: 0000000000000000 R14: 00007f04935a5fa0 R15: 00007ffe58bf3178 [ 487.790679][T14859] [ 488.171962][T14850] syz.7.1500: vmalloc error: size 136314880, failed to allocated page array size 266240, mode:0xc22(GFP_ATOMIC|__GFP_HIGHMEM|__GFP_DIRECT_RECLAIM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 488.406069][T14850] CPU: 0 UID: 0 PID: 14850 Comm: syz.7.1500 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 488.406094][T14850] Tainted: [U]=USER [ 488.406099][T14850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.406106][T14850] Call Trace: [ 488.406111][T14850] [ 488.406116][T14850] dump_stack_lvl+0x16c/0x1f0 [ 488.406137][T14850] warn_alloc+0x24d/0x3a0 [ 488.406158][T14850] ? __pfx_warn_alloc+0x10/0x10 [ 488.406181][T14850] ? __get_vm_area_node+0x1b0/0x2f0 [ 488.406197][T14850] ? __get_vm_area_node+0x1dc/0x2f0 [ 488.406216][T14850] __vmalloc_node_range_noprof+0x1102/0x1530 [ 488.406239][T14850] ? ctl_ioctl+0x955/0xd40 [ 488.406259][T14850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 488.406284][T14850] ? rcu_is_watching+0x12/0xc0 [ 488.406299][T14850] ? trace_kmalloc+0x2d/0xd0 [ 488.406312][T14850] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 488.406327][T14850] ? ctl_ioctl+0x955/0xd40 [ 488.406343][T14850] __kvmalloc_node_noprof+0x14f/0x1a0 [ 488.406361][T14850] ? ctl_ioctl+0x955/0xd40 [ 488.406378][T14850] ctl_ioctl+0x955/0xd40 [ 488.406399][T14850] ? __pfx_get_target_version+0x10/0x10 [ 488.406415][T14850] ? __pfx_ctl_ioctl+0x10/0x10 [ 488.406448][T14850] ? __fget_files+0x206/0x3a0 [ 488.406469][T14850] dm_ctl_ioctl+0x22/0x30 [ 488.406484][T14850] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 488.406500][T14850] __x64_sys_ioctl+0x190/0x200 [ 488.406517][T14850] do_syscall_64+0xcd/0x250 [ 488.406535][T14850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.406552][T14850] RIP: 0033:0x7facfe98d169 [ 488.406564][T14850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.406576][T14850] RSP: 002b:00007facff7ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.406590][T14850] RAX: ffffffffffffffda RBX: 00007facfeba5fa0 RCX: 00007facfe98d169 [ 488.406599][T14850] RDX: 00004000000001c0 RSI: fffffff7fffffd11 RDI: 0000000000000006 [ 488.406607][T14850] RBP: 00007facfea0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 488.406614][T14850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.406622][T14850] R13: 0000000000000000 R14: 00007facfeba5fa0 R15: 00007ffc5e5f77e8 [ 488.406637][T14850] [ 488.406643][T14850] Mem-Info: [ 490.469578][T14850] active_anon:70243 inactive_anon:1 isolated_anon:0 [ 490.469578][T14850] active_file:2851 inactive_file:54225 isolated_file:0 [ 490.469578][T14850] unevictable:768 dirty:568 writeback:0 [ 490.469578][T14850] slab_reclaimable:11852 slab_unreclaimable:101383 [ 490.469578][T14850] mapped:48233 shmem:52315 pagetables:1535 [ 490.469578][T14850] sec_pagetables:0 bounce:0 [ 490.469578][T14850] kernel_misc_reclaimable:0 [ 490.469578][T14850] free:1246354 free_pcp:10697 free_cma:0 [ 491.036159][T14850] Node 0 active_anon:272248kB inactive_anon:4kB active_file:11404kB inactive_file:216764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129692kB dirty:2320kB writeback:0kB shmem:199960kB shmem_thp:61440kB shmem_pmdmapped:18432kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13008kB pagetables:6140kB sec_pagetables:0kB all_unreclaimable? no [ 491.371917][T14734] delete_channel: no stack [ 491.582574][T14850] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 491.899562][T14850] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.085016][T14846] Process accounting paused [ 492.194046][T14850] lowmem_reserve[]: 0 2487 2487 0 0 [ 492.236190][T14850] Node 0 DMA32 free:1234232kB boost:0kB min:34392kB low:42988kB high:51584kB reserved_highatomic:0KB active_anon:156668kB inactive_anon:16kB active_file:11404kB inactive_file:216412kB unevictable:1536kB writepending:2336kB present:3129332kB managed:2547540kB mlocked:0kB bounce:0kB free_pcp:388kB local_pcp:388kB free_cma:0kB [ 492.266714][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.414314][T14850] lowmem_reserve[]: 0 0 0 0 0 [ 492.456098][T14850] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 492.482667][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.607583][T14850] lowmem_reserve[]: 0 0 0 0 0 [ 492.629759][T14850] Node 1 Normal free:3876424kB boost:0kB min:55504kB low:69380kB high:83256kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32936kB local_pcp:32936kB free_cma:0kB [ 492.720045][T14850] lowmem_reserve[]: 0 0 0 0 0 [ 492.732249][T14850] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 492.763774][T14850] Node 0 DMA32: 3280*4kB (UME) 3048*8kB (UME) 2795*16kB (UME) 2082*32kB (UME) 1321*64kB (UME) 694*128kB (UME) 570*256kB (UME) 256*512kB (UME) 91*1024kB (UM) 20*2048kB (UME) 127*4096kB (UME) = 1253552kB [ 492.874636][T14850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 492.950185][T14850] Node 1 Normal: 201*4kB (UME) 58*8kB (UME) 28*16kB (UME) 190*32kB (UME) 86*64kB (UME) 35*128kB (UME) 19*256kB (UME) 15*512kB (UME) 8*1024kB (UME) 8*2048kB (UME) 933*4096kB (M) = 3876468kB [ 493.059714][T14850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.104678][T14850] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.168417][T14850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.217232][T14850] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.270853][T14850] 68737 total pagecache pages [ 493.319101][T14850] 7 pages in swap cache [ 493.333981][T14850] Free swap = 121380kB [ 493.360316][T14850] Total swap = 124996kB [ 493.384507][T14850] 2097051 pages RAM [ 493.408842][T14850] 0 pages HighMem/MovableOnly [ 493.434133][T14850] 428508 pages reserved [ 493.464133][T14850] 0 pages cma reserved [ 494.230133][T14947] nfs: Bad value for 'source' [ 495.588394][T14999] tipc: Started in network mode [ 495.622909][T14999] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 495.662835][T14999] tipc: Node number set to 2387504917 [ 496.130028][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1532'. [ 497.519526][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 497.591492][T15047] ptrace attach of "./syz-executor exec"[13483] was attempted by "./syz-executor exec"[15047] [ 499.204255][ T29] audit: type=1807 audit(1039.260:19): UNKNOWN=q yϽMޒٞ#5Kn[{Qpp res=0 [ 499.235577][ T29] audit: type=1802 audit(1039.290:20): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.1541" res=0 errno=0 [ 499.267470][T15099] ima: policy update failed [ 499.372306][ T29] audit: type=1802 audit(1039.330:21): pid=15099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.1541" res=0 errno=0 [ 500.381596][T15097] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1540'. [ 500.638671][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.645098][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.805211][T15161] mkiss: ax0: crc mode is auto. [ 503.787413][T15207] FAULT_INJECTION: forcing a failure. [ 503.787413][T15207] name failslab, interval 1, probability 0, space 0, times 0 [ 503.853886][T15207] CPU: 0 UID: 0 PID: 15207 Comm: syz.9.1553 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 503.853919][T15207] Tainted: [U]=USER [ 503.853924][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 503.853932][T15207] Call Trace: [ 503.853937][T15207] [ 503.853942][T15207] dump_stack_lvl+0x16c/0x1f0 [ 503.853965][T15207] should_fail_ex+0x50a/0x650 [ 503.853987][T15207] ? fs_reclaim_acquire+0xae/0x150 [ 503.854006][T15207] should_failslab+0xc2/0x120 [ 503.854019][T15207] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 503.854039][T15207] ? __d_alloc+0x31/0xaa0 [ 503.854054][T15207] __d_alloc+0x31/0xaa0 [ 503.854068][T15207] path_from_stashed+0x7a2/0xec0 [ 503.854089][T15207] ? __pfx_path_from_stashed+0x10/0x10 [ 503.854106][T15207] ? netns_get+0x21/0x150 [ 503.854126][T15207] ? do_raw_spin_unlock+0x172/0x230 [ 503.854141][T15207] ns_get_path+0x5f/0x80 [ 503.854158][T15207] proc_ns_get_link+0x122/0x260 [ 503.854176][T15207] ? __pfx_proc_ns_get_link+0x10/0x10 [ 503.854193][T15207] ? __pfx___might_resched+0x10/0x10 [ 503.854214][T15207] ? __pfx_proc_ns_get_link+0x10/0x10 [ 503.854230][T15207] step_into+0x1aba/0x2220 [ 503.854250][T15207] ? __pfx_step_into+0x10/0x10 [ 503.854265][T15207] ? __pfx___up_read+0x10/0x10 [ 503.854288][T15207] path_openat+0x74c/0x2d80 [ 503.854312][T15207] ? __pfx_path_openat+0x10/0x10 [ 503.854336][T15207] ? __pfx___lock_acquire+0x10/0x10 [ 503.854354][T15207] ? lock_acquire.part.0+0x11b/0x380 [ 503.854371][T15207] ? find_held_lock+0x2d/0x110 [ 503.854388][T15207] do_filp_open+0x20c/0x470 [ 503.854407][T15207] ? __pfx_do_filp_open+0x10/0x10 [ 503.854424][T15207] ? find_held_lock+0x2d/0x110 [ 503.854449][T15207] ? alloc_fd+0x41f/0x760 [ 503.854471][T15207] do_sys_openat2+0x17a/0x1e0 [ 503.854485][T15207] ? __pfx_do_sys_openat2+0x10/0x10 [ 503.854504][T15207] __x64_sys_openat+0x175/0x210 [ 503.854518][T15207] ? __pfx___x64_sys_openat+0x10/0x10 [ 503.854538][T15207] do_syscall_64+0xcd/0x250 [ 503.854556][T15207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.854574][T15207] RIP: 0033:0x7fd01c78bad0 [ 503.854586][T15207] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 503.854598][T15207] RSP: 002b:00007fd01d58df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 503.854611][T15207] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd01c78bad0 [ 503.854619][T15207] RDX: 0000000000000002 RSI: 00007fd01d58dfa0 RDI: 00000000ffffff9c [ 503.854627][T15207] RBP: 00007fd01d58dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 503.854634][T15207] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 503.854642][T15207] R13: 0000000000000000 R14: 00007fd01c9a5fa0 R15: 00007fffc84d54f8 [ 503.854658][T15207] [ 505.473710][T15229] bond0: option all_slaves_active: invalid value () [ 507.117354][T15249] FAULT_INJECTION: forcing a failure. [ 507.117354][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 507.240541][T15249] CPU: 0 UID: 0 PID: 15249 Comm: syz.1.1564 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 507.240568][T15249] Tainted: [U]=USER [ 507.240573][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 507.240581][T15249] Call Trace: [ 507.240589][T15249] [ 507.240595][T15249] dump_stack_lvl+0x16c/0x1f0 [ 507.240618][T15249] should_fail_ex+0x50a/0x650 [ 507.240639][T15249] ? fs_reclaim_acquire+0xae/0x150 [ 507.240658][T15249] ? rfkill_alloc+0xac/0x330 [ 507.240674][T15249] should_failslab+0xc2/0x120 [ 507.240687][T15249] __kmalloc_noprof+0xcb/0x510 [ 507.240712][T15249] rfkill_alloc+0xac/0x330 [ 507.240730][T15249] wiphy_new_nm+0x1217/0x2160 [ 507.240748][T15249] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 507.240766][T15249] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 507.240782][T15249] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 507.240798][T15249] ? __local_bh_enable_ip+0xa4/0x120 [ 507.240819][T15249] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 507.240846][T15249] ? __asan_memset+0x23/0x50 [ 507.240864][T15249] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 507.240886][T15249] hwsim_new_radio_nl+0xb42/0x12b0 [ 507.240911][T15249] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 507.240935][T15249] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 507.240956][T15249] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 507.240979][T15249] genl_family_rcv_msg_doit+0x202/0x2f0 [ 507.240999][T15249] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 507.241017][T15249] ? trace_cap_capable+0x1a2/0x210 [ 507.241035][T15249] ? bpf_lsm_capable+0x9/0x10 [ 507.241049][T15249] ? security_capable+0x7e/0x260 [ 507.241069][T15249] ? ns_capable+0xd7/0x110 [ 507.241088][T15249] genl_rcv_msg+0x565/0x800 [ 507.241108][T15249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.241127][T15249] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 507.241150][T15249] netlink_rcv_skb+0x16b/0x440 [ 507.241167][T15249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.241186][T15249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.241210][T15249] ? down_read+0xc9/0x330 [ 507.241227][T15249] ? __pfx_down_read+0x10/0x10 [ 507.241244][T15249] ? netlink_deliver_tap+0x1ae/0xd30 [ 507.241262][T15249] genl_rcv+0x28/0x40 [ 507.241279][T15249] netlink_unicast+0x53c/0x7f0 [ 507.241297][T15249] ? __pfx_netlink_unicast+0x10/0x10 [ 507.241314][T15249] ? __phys_addr_symbol+0x30/0x80 [ 507.241327][T15249] ? __check_object_size+0x488/0x710 [ 507.241342][T15249] netlink_sendmsg+0x8b8/0xd70 [ 507.241362][T15249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.241385][T15249] ____sys_sendmsg+0xaaf/0xc90 [ 507.241400][T15249] ? copy_msghdr_from_user+0x10b/0x160 [ 507.241417][T15249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.241439][T15249] ___sys_sendmsg+0x135/0x1e0 [ 507.241458][T15249] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.241483][T15249] ? __pfx_lock_release+0x10/0x10 [ 507.241500][T15249] ? trace_lock_acquire+0x14e/0x1f0 [ 507.241520][T15249] ? __fget_files+0x206/0x3a0 [ 507.241543][T15249] __sys_sendmsg+0x16e/0x220 [ 507.241561][T15249] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.241582][T15249] ? __x64_sys_futex+0x1e1/0x4c0 [ 507.241610][T15249] do_syscall_64+0xcd/0x250 [ 507.241628][T15249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.241647][T15249] RIP: 0033:0x7f998118d169 [ 507.241659][T15249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.241672][T15249] RSP: 002b:00007f9981f9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.241685][T15249] RAX: ffffffffffffffda RBX: 00007f99813a5fa0 RCX: 00007f998118d169 [ 507.241694][T15249] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000008 [ 507.241703][T15249] RBP: 00007f998120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 507.241711][T15249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.241719][T15249] R13: 0000000000000000 R14: 00007f99813a5fa0 R15: 00007ffd3b6f9bc8 [ 507.241737][T15249] [ 511.453590][T15294] FAULT_INJECTION: forcing a failure. [ 511.453590][T15294] name failslab, interval 1, probability 0, space 0, times 0 [ 511.638601][T15294] CPU: 0 UID: 0 PID: 15294 Comm: syz.7.1569 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 511.638632][T15294] Tainted: [U]=USER [ 511.638636][T15294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 511.638645][T15294] Call Trace: [ 511.638649][T15294] [ 511.638655][T15294] dump_stack_lvl+0x16c/0x1f0 [ 511.638677][T15294] should_fail_ex+0x50a/0x650 [ 511.638697][T15294] ? fs_reclaim_acquire+0xae/0x150 [ 511.638715][T15294] ? sk_prot_alloc+0x1a8/0x2a0 [ 511.638728][T15294] should_failslab+0xc2/0x120 [ 511.638741][T15294] __kmalloc_noprof+0xcb/0x510 [ 511.638759][T15294] ? __wake_up+0x3f/0x60 [ 511.638778][T15294] sk_prot_alloc+0x1a8/0x2a0 [ 511.638792][T15294] sk_alloc+0x36/0xb90 [ 511.638808][T15294] ? __pfx_genl_release+0x10/0x10 [ 511.638826][T15294] __netlink_create+0x5e/0x2c0 [ 511.638838][T15294] ? __wake_up+0x3f/0x60 [ 511.638854][T15294] netlink_create+0x3a4/0x630 [ 511.638869][T15294] ? __pfx_genl_bind+0x10/0x10 [ 511.638885][T15294] ? __pfx_genl_unbind+0x10/0x10 [ 511.638903][T15294] __sock_create+0x335/0x8d0 [ 511.638919][T15294] __sys_socket+0x14f/0x260 [ 511.638934][T15294] ? __pfx___sys_socket+0x10/0x10 [ 511.638949][T15294] ? do_user_addr_fault+0x83d/0x13f0 [ 511.638968][T15294] __x64_sys_socket+0x72/0xb0 [ 511.638982][T15294] ? lockdep_hardirqs_on+0x7c/0x110 [ 511.638997][T15294] do_syscall_64+0xcd/0x250 [ 511.639013][T15294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.639031][T15294] RIP: 0033:0x7facfe98f087 [ 511.639042][T15294] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.639055][T15294] RSP: 002b:00007facff7abfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 511.639068][T15294] RAX: ffffffffffffffda RBX: 00007facfeba6160 RCX: 00007facfe98f087 [ 511.639076][T15294] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 511.639084][T15294] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 511.639091][T15294] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 511.639098][T15294] R13: 0000000000000000 R14: 00007facfeba6160 R15: 00007ffc5e5f77e8 [ 511.639114][T15294] [ 514.576688][T15333] HfR: entered promiscuous mode [ 516.745823][T15395] FAULT_INJECTION: forcing a failure. [ 516.745823][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 516.965381][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.9.1595 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 516.965404][T15395] Tainted: [U]=USER [ 516.965409][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 516.965418][T15395] Call Trace: [ 516.965422][T15395] [ 516.965428][T15395] dump_stack_lvl+0x16c/0x1f0 [ 516.965449][T15395] should_fail_ex+0x50a/0x650 [ 516.965469][T15395] ? fs_reclaim_acquire+0xae/0x150 [ 516.965487][T15395] ? io_uring_setup+0x176/0x2200 [ 516.965500][T15395] should_failslab+0xc2/0x120 [ 516.965513][T15395] __kmalloc_cache_noprof+0x68/0x410 [ 516.965531][T15395] ? rep_movs_alternative+0x4a/0x70 [ 516.965551][T15395] ? io_uring_fill_params+0x59f/0x900 [ 516.965565][T15395] io_uring_setup+0x176/0x2200 [ 516.965580][T15395] ? __pfx_io_uring_setup+0x10/0x10 [ 516.965593][T15395] ? do_futex+0x123/0x350 [ 516.965609][T15395] ? __pfx_do_futex+0x10/0x10 [ 516.965626][T15395] ? __pfx___might_resched+0x10/0x10 [ 516.965662][T15395] ? rcu_is_watching+0x12/0xc0 [ 516.965680][T15395] __x64_sys_io_uring_setup+0x98/0x140 [ 516.965695][T15395] do_syscall_64+0xcd/0x250 [ 516.965713][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.965731][T15395] RIP: 0033:0x7fd01c78d169 [ 516.965742][T15395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.965754][T15395] RSP: 002b:00007fd01d58e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 516.965768][T15395] RAX: ffffffffffffffda RBX: 00007fd01c9a5fa0 RCX: 00007fd01c78d169 [ 516.965777][T15395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 516.965785][T15395] RBP: 00007fd01c80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 516.965794][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.965801][T15395] R13: 0000000000000000 R14: 00007fd01c9a5fa0 R15: 00007fffc84d54f8 [ 516.965817][T15395] [ 518.946329][T15421] netlink: 85 bytes leftover after parsing attributes in process `syz.7.1598'. [ 519.025437][T15428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1603'. [ 519.066621][ T5837] Bluetooth: hci0: unexpected subevent 0x01 length: 125 > 18 [ 519.074183][ T5837] Bluetooth: hci0: Invalid handle: 0x1e1a > 0x0eff [ 522.177392][ T5843] Bluetooth: hci2: unexpected subevent 0x01 length: 125 > 18 [ 522.184866][ T5843] Bluetooth: hci2: Invalid handle: 0x1e1a > 0x0eff [ 523.731689][T15449] Process accounting resumed [ 523.960500][T15501] EXT4-fs error: 2 callbacks suppressed [ 524.361574][T15493] ima: policy update failed [ 524.420264][ T29] audit: type=1802 audit(1064.470:22): pid=15493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1621" res=0 errno=0 [ 525.032372][T15543] vivid-010: ================= START STATUS ================= [ 525.132651][T15543] vivid-010: Generate PTS: true [ 525.223765][T15543] vivid-010: Generate SCR: true [ 525.272248][T15543] tpg source WxH: 640x360 (Y'CbCr) [ 525.377934][T15543] tpg field: 1 [ 525.456199][T15543] tpg crop: 640x360@0x0 [ 525.512653][T15543] tpg compose: 640x360@0x0 [ 525.568469][T15543] tpg colorspace: 8 [ 525.652125][T15543] tpg transfer function: 0/0 [ 525.703685][T15543] tpg Y'CbCr encoding: 0/0 [ 525.966052][T15543] tpg quantization: 0/0 [ 525.970250][T15543] tpg RGB range: 0/2 [ 526.109476][T15543] vivid-010: ================== END STATUS ================== [ 526.665904][T15604] udevd[15604]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 528.006910][T15627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1633'. [ 529.036335][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 529.146721][T15642] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 529.539012][T15654] EXT4-fs error: 73 callbacks suppressed [ 529.857748][T15662] netlink: 'syz.9.1640': attribute type 16 has an invalid length. [ 529.889378][T15662] netlink: 322 bytes leftover after parsing attributes in process `syz.9.1640'. [ 529.933444][ T29] audit: type=1326 audit(1069.990:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15661 comm="syz.9.1640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd01c78d169 code=0x0 [ 529.989205][T15663] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1640'. [ 530.020829][T15663] mac80211_hwsim hwsim32 : renamed from wlan0 (while UP) [ 531.338175][T15674] [U]  [ 531.340995][T15674] [U] [ 531.343667][T15674] [U] [ 531.346342][T15674] [U] [ 531.371692][T15674] [U] [ 531.374417][T15674] [U] [ 531.377095][T15674] [U] [ 531.379766][T15674] [U] [ 531.411420][T15674] [U] [ 531.414177][T15674] [U] [ 531.416857][T15674] [U] [ 531.419534][T15674] [U] [ 531.459140][T15674] [U] [ 531.461867][T15674] [U] [ 531.464541][T15674] [U] [ 531.467215][T15674] [U] [ 531.499229][T15674] [U] [ 531.501951][T15674] [U] [ 531.504624][T15674] [U] [ 531.507322][T15674] [U] [ 531.550579][T15674] [U] [ 531.553397][T15674] [U] [ 531.556087][T15674] [U] [ 531.558759][T15674] [U] [ 531.569334][T15679] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 531.600575][T15674] [U] [ 535.226665][T15737] FAULT_INJECTION: forcing a failure. [ 535.226665][T15737] name failslab, interval 1, probability 0, space 0, times 0 [ 535.297619][T15737] CPU: 0 UID: 0 PID: 15737 Comm: syz.1.1657 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 535.297644][T15737] Tainted: [U]=USER [ 535.297649][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 535.297657][T15737] Call Trace: [ 535.297661][T15737] [ 535.297668][T15737] dump_stack_lvl+0x16c/0x1f0 [ 535.297689][T15737] should_fail_ex+0x50a/0x650 [ 535.297709][T15737] ? fs_reclaim_acquire+0xae/0x150 [ 535.297728][T15737] ? vhost_net_open+0xb4/0x8a0 [ 535.297747][T15737] should_failslab+0xc2/0x120 [ 535.297760][T15737] __kmalloc_cache_noprof+0x68/0x410 [ 535.297779][T15737] ? kasan_save_track+0x14/0x30 [ 535.297800][T15737] vhost_net_open+0xb4/0x8a0 [ 535.297818][T15737] ? __pfx_vhost_net_open+0x10/0x10 [ 535.297837][T15737] misc_open+0x35a/0x420 [ 535.297851][T15737] ? __pfx_misc_open+0x10/0x10 [ 535.297863][T15737] chrdev_open+0x237/0x6a0 [ 535.297881][T15737] ? __pfx_apparmor_file_open+0x10/0x10 [ 535.297898][T15737] ? __pfx_chrdev_open+0x10/0x10 [ 535.297919][T15737] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 535.297939][T15737] do_dentry_open+0x735/0x1c40 [ 535.297958][T15737] ? __pfx_chrdev_open+0x10/0x10 [ 535.297978][T15737] ? inode_permission+0xdd/0x5f0 [ 535.297993][T15737] vfs_open+0x82/0x3f0 [ 535.298005][T15737] ? may_open+0x1f2/0x400 [ 535.298021][T15737] path_openat+0x1e88/0x2d80 [ 535.298045][T15737] ? __pfx_path_openat+0x10/0x10 [ 535.298062][T15737] ? __pfx___lock_acquire+0x10/0x10 [ 535.298079][T15737] ? lock_acquire.part.0+0x11b/0x380 [ 535.298096][T15737] ? find_held_lock+0x2d/0x110 [ 535.298112][T15737] do_filp_open+0x20c/0x470 [ 535.298129][T15737] ? __pfx_do_filp_open+0x10/0x10 [ 535.298146][T15737] ? find_held_lock+0x2d/0x110 [ 535.298171][T15737] ? alloc_fd+0x41f/0x760 [ 535.298193][T15737] do_sys_openat2+0x17a/0x1e0 [ 535.298206][T15737] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.298226][T15737] __x64_sys_openat+0x175/0x210 [ 535.298241][T15737] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.298262][T15737] do_syscall_64+0xcd/0x250 [ 535.298279][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.298297][T15737] RIP: 0033:0x7f998118d169 [ 535.298309][T15737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.298336][T15737] RSP: 002b:00007f9981f9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.298350][T15737] RAX: ffffffffffffffda RBX: 00007f99813a5fa0 RCX: 00007f998118d169 [ 535.298360][T15737] RDX: 0000000000000000 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 535.298369][T15737] RBP: 00007f998120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 535.298377][T15737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.298385][T15737] R13: 0000000000000000 R14: 00007f99813a5fa0 R15: 00007ffd3b6f9bc8 [ 535.298403][T15737] [ 535.582257][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.056232][T15741] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1656'. [ 536.065432][T15741] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1656'. [ 536.126220][T15744] netlink: 93 bytes leftover after parsing attributes in process `syz.1.1658'. [ 537.075036][T15757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 537.173798][T15758] FAULT_INJECTION: forcing a failure. [ 537.173798][T15758] name failslab, interval 1, probability 0, space 0, times 0 [ 537.238278][T15758] CPU: 0 UID: 0 PID: 15758 Comm: syz.9.1660 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 537.238304][T15758] Tainted: [U]=USER [ 537.238308][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 537.238316][T15758] Call Trace: [ 537.238321][T15758] [ 537.238327][T15758] dump_stack_lvl+0x16c/0x1f0 [ 537.238349][T15758] should_fail_ex+0x50a/0x650 [ 537.238369][T15758] ? fs_reclaim_acquire+0xae/0x150 [ 537.238389][T15758] should_failslab+0xc2/0x120 [ 537.238404][T15758] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 537.238423][T15758] ? vma_merge_new_range+0x40a/0xbb0 [ 537.238441][T15758] ? vm_area_alloc+0x1f/0x230 [ 537.238463][T15758] vm_area_alloc+0x1f/0x230 [ 537.238480][T15758] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 537.238494][T15758] __mmap_region+0x108d/0x2760 [ 537.238508][T15758] ? __pfx___mmap_region+0x10/0x10 [ 537.238519][T15758] ? finish_task_switch.isra.0+0x217/0xcc0 [ 537.238537][T15758] ? __switch_to+0x749/0x1190 [ 537.238554][T15758] ? hlock_class+0x4e/0x130 [ 537.238567][T15758] ? mark_lock+0xb5/0xc60 [ 537.238590][T15758] ? __pfx___schedule+0x10/0x10 [ 537.238624][T15758] ? cap_capable+0xb3/0x250 [ 537.238641][T15758] mmap_region+0x1ab/0x3f0 [ 537.238656][T15758] do_mmap+0xd8d/0x11b0 [ 537.238678][T15758] ? __pfx_do_mmap+0x10/0x10 [ 537.238695][T15758] ? __pfx_down_write_killable+0x10/0x10 [ 537.238716][T15758] vm_mmap_pgoff+0x203/0x3a0 [ 537.238737][T15758] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 537.238757][T15758] ? __x64_sys_futex+0x1e1/0x4c0 [ 537.238772][T15758] ? __x64_sys_futex+0x1ea/0x4c0 [ 537.238789][T15758] ksys_mmap_pgoff+0x7d/0x5c0 [ 537.238805][T15758] ? rcu_is_watching+0x12/0xc0 [ 537.238820][T15758] __x64_sys_mmap+0x125/0x190 [ 537.238841][T15758] do_syscall_64+0xcd/0x250 [ 537.238858][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.238876][T15758] RIP: 0033:0x7fd01c78d169 [ 537.238887][T15758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.238900][T15758] RSP: 002b:00007fd01d58e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 537.238914][T15758] RAX: ffffffffffffffda RBX: 00007fd01c9a5fa0 RCX: 00007fd01c78d169 [ 537.238923][T15758] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 537.238930][T15758] RBP: 00007fd01c80e2a0 R08: fffffffffffffffa R09: 0000000000008000 [ 537.238938][T15758] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 537.238946][T15758] R13: 0000000000000000 R14: 00007fd01c9a5fa0 R15: 00007fffc84d54f8 [ 537.238962][T15758] [ 538.698533][T15774] random: crng reseeded on system resumption [ 539.039700][T15780] EXT4-fs error: 13 callbacks suppressed [ 539.676368][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 539.688421][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.707445][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.716552][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.726210][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 539.733388][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.256601][T15798] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1670'. [ 540.475146][T15798] hsr_slave_1 (unregistering): left promiscuous mode [ 540.622527][T15784] chnl_net:caif_netlink_parms(): no params data found [ 541.049303][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.076895][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.104817][T15784] bridge_slave_0: entered allmulticast mode [ 541.134643][T15784] bridge_slave_0: entered promiscuous mode [ 541.171905][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.234488][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.260947][T15784] bridge_slave_1: entered allmulticast mode [ 541.292212][T15784] bridge_slave_1: entered promiscuous mode [ 541.437293][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.493648][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.620065][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1673'. [ 541.636306][T15808] ima: policy update failed [ 541.667821][ T29] audit: type=1802 audit(1081.720:24): pid=15808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1672" res=0 errno=0 [ 541.696736][T15784] team0: Port device team_slave_0 added [ 541.732722][T15784] team0: Port device team_slave_1 added [ 541.756361][ T5837] Bluetooth: hci3: command tx timeout [ 541.877968][T15820] input: f as /devices/virtual/input/input23 [ 541.893488][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.940717][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.103141][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.162140][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.199920][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.356349][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.691991][T15784] hsr_slave_0: entered promiscuous mode [ 542.732059][T15784] hsr_slave_1: entered promiscuous mode [ 542.756450][T15784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.797378][T15784] Cannot create hsr debugfs directory [ 543.740355][T15860] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1682'. [ 543.836215][ T5837] Bluetooth: hci3: command tx timeout [ 543.868828][T15866] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 544.095666][ T29] audit: type=1800 audit(1084.150:25): pid=15874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1684" name="dbroot" dev="configfs" ino=56071 res=0 errno=0 [ 544.172986][T15859] openvswitch: HfR: Dropping previously announced user features [ 544.403097][T15877] EXT4-fs error: 14 callbacks suppressed [ 545.917117][ T5837] Bluetooth: hci3: command tx timeout [ 546.346969][T15784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 546.524717][T15784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 546.648600][T15784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 546.701303][T15784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 546.857028][T15923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 547.397476][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.460597][T15784] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.547890][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.554974][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.637060][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.644193][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.996825][ T5837] Bluetooth: hci3: command tx timeout [ 548.021135][ T7465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.126290][T15955] FAULT_INJECTION: forcing a failure. [ 548.126290][T15955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.194946][T15784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 548.266914][T15955] CPU: 0 UID: 0 PID: 15955 Comm: syz.7.1697 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 548.266938][T15955] Tainted: [U]=USER [ 548.266943][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 548.266951][T15955] Call Trace: [ 548.266956][T15955] [ 548.266963][T15955] dump_stack_lvl+0x16c/0x1f0 [ 548.266985][T15955] should_fail_ex+0x50a/0x650 [ 548.267010][T15955] strncpy_from_user+0x3b/0x2d0 [ 548.267031][T15955] getname_flags.part.0+0x8f/0x550 [ 548.267049][T15955] getname+0x8d/0xe0 [ 548.267065][T15955] do_sys_openat2+0x104/0x1e0 [ 548.267079][T15955] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.267098][T15955] __x64_sys_openat+0x175/0x210 [ 548.267112][T15955] ? __pfx___x64_sys_openat+0x10/0x10 [ 548.267133][T15955] do_syscall_64+0xcd/0x250 [ 548.267151][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.267168][T15955] RIP: 0033:0x7facfe98bad0 [ 548.267179][T15955] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 548.267191][T15955] RSP: 002b:00007facff7eef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 548.267204][T15955] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007facfe98bad0 [ 548.267213][T15955] RDX: 0000000000000002 RSI: 00007facff7eefa0 RDI: 00000000ffffff9c [ 548.267221][T15955] RBP: 00007facff7eefa0 R08: 0000000000000000 R09: 0000000000000000 [ 548.267229][T15955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 548.267237][T15955] R13: 0000000000000000 R14: 00007facfeba5fa0 R15: 00007ffc5e5f77e8 [ 548.267254][T15955] [ 548.436075][T15784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.846373][T15940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.921155][ T7465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.934896][T15940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.178127][T15940] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 549.184087][T15940] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 549.352554][ T7465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.417784][T15968] EXT4-fs error: 27 callbacks suppressed [ 549.452527][T15784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.520289][T15940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.544896][ T7465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.611441][T15940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 549.715692][T15784] veth0_vlan: entered promiscuous mode [ 549.734093][T15940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 549.844632][T15784] veth1_vlan: entered promiscuous mode [ 549.970000][ T7465] bridge_slave_1: left allmulticast mode [ 549.975700][ T7465] bridge_slave_1: left promiscuous mode [ 550.032930][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.120613][ T7465] bridge_slave_0: left allmulticast mode [ 550.145308][ T7465] bridge_slave_0: left promiscuous mode [ 550.171104][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.956355][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.036879][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 551.076765][T16002] netlink: 306 bytes leftover after parsing attributes in process `syz.7.1706'. [ 551.143468][T15982] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 551.284890][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 551.520573][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 552.103989][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1708'. [ 553.072759][ T7465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.115422][ T7465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.176154][ T7465] bond0 (unregistering): Released all slaves [ 553.227187][T16017] Falling back ldisc for ptm0. [ 553.266375][T15784] veth0_macvtap: entered promiscuous mode [ 553.358154][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 553.489343][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1706'. [ 553.585024][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1706'. [ 553.599828][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 553.858793][T15784] veth1_macvtap: entered promiscuous mode [ 554.182691][T16027] Process accounting paused [ 554.285493][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.350032][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.419378][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.479974][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.525047][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.583764][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.638620][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.684285][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.741336][T15784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.955624][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.008997][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.081218][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.134489][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.187335][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.227870][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.261695][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.313496][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.362184][T15784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.547610][T15784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.586642][T15784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.613946][T15784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.635243][T15784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.676964][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 555.694493][T16054] EXT4-fs error: 10 callbacks suppressed [ 555.780648][ T7465] hsr_slave_0: left promiscuous mode [ 555.812793][ T7465] hsr_slave_1: left promiscuous mode [ 555.849656][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.881363][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.911489][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.935080][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.009330][ T7465] veth0_macvtap: left promiscuous mode [ 556.049187][ T7465] veth1_vlan: left promiscuous mode [ 556.054474][ T7465] veth0_vlan: left promiscuous mode [ 557.377925][ T5837] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 557.894799][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 558.028802][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 559.779535][T12918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.852132][T12918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.006861][ T7465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.053401][ T7465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.191215][T16107] EXT4-fs error: 10 callbacks suppressed [ 561.800928][T16122] udevd[16122]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 562.692093][T16152] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1732'. [ 563.360627][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.367165][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.257855][T16191] udevd[16191]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 565.564281][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 565.891688][T16204] udevd[16204]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 566.559403][T16219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 566.660320][T16219] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 566.753065][T16219] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 566.838074][T16219] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 567.232484][T16241] EXT4-fs error: 20 callbacks suppressed [ 568.383601][T16255] KVM: debugfs: duplicate directory 16255-3 [ 568.636882][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 568.718183][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.803369][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 568.876290][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 569.565611][T16271] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 572.275039][T16329] EXT4-fs error: 5 callbacks suppressed [ 572.306721][T16329] udevd[16329]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 572.527120][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1774'. [ 574.259930][T16356] program syz.0.1779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.360880][T16361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'. [ 574.423723][T16358] lo: entered allmulticast mode [ 574.642362][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1781'. [ 574.797405][T16358] lo: left allmulticast mode [ 576.282597][T16387] udevd[16387]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 577.498501][T16412] EXT4-fs error: 12 callbacks suppressed [ 577.522698][T16406] svc: failed to register nfsdv3 RPC service (errno 111). [ 577.571953][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 577.693656][T16406] svc: failed to register nfsaclv3 RPC service (errno 111). [ 578.146798][T16426] udevd[16426]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 578.518783][T16432] openvswitch: netlink: Duplicate key (type 15). [ 579.597368][T16447] udevd[16447]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 580.022159][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 581.514130][T16486] delete_channel: no stack [ 585.203235][T16515] Process accounting resumed [ 586.576568][T16584] EXT4-fs error: 6 callbacks suppressed [ 586.851189][ T29] audit: type=1804 audit(1126.900:26): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1836" name="/newroot/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject" dev="tracefs" ino=19680823 res=1 errno=0 [ 587.476751][T16610] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1838'. [ 587.662844][T16610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.744086][T16610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.921964][T16610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.991424][T16610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.617974][T16621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1842'. [ 588.669692][T16621] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 590.581111][T16632] Console: switching to colour frame buffer device 128x48 [ 596.066841][T16688] EXT4-fs error: 6 callbacks suppressed [ 597.038369][T16707] openvswitch: netlink: Flow key attribute not present in set flow. [ 599.945200][T16756] udevd[16756]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 600.899596][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.925300][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.933936][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.943729][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.952567][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 600.960827][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.109281][T16775] EXT4-fs error: 3 callbacks suppressed [ 601.422634][T16771] chnl_net:caif_netlink_parms(): no params data found [ 601.999980][T16771] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.042687][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.098797][T16767] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 602.113302][T16771] bridge_slave_0: entered allmulticast mode [ 602.167507][T16771] bridge_slave_0: entered promiscuous mode [ 602.225051][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.256227][T16767] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.262233][T16767] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 602.279065][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.321649][T16771] bridge_slave_1: entered allmulticast mode [ 602.331796][T16799] zswap: compressor not available [ 602.367002][T16771] bridge_slave_1: entered promiscuous mode [ 602.443635][T16767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.500279][T16767] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 602.570957][T16771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.633053][T16767] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 602.647755][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.865904][T16767] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 602.964360][T16771] team0: Port device team_slave_0 added [ 603.059320][T16771] team0: Port device team_slave_1 added [ 603.457825][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.491379][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.517326][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.677896][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.792194][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.848389][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.000395][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.038969][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.320352][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 604.328664][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 604.476757][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 604.499182][T16771] hsr_slave_0: entered promiscuous mode [ 604.552120][T16771] hsr_slave_1: entered promiscuous mode [ 604.560380][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 604.603198][T16771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.673839][T16771] Cannot create hsr debugfs directory [ 606.285759][T16840] EXT4-fs error: 10 callbacks suppressed [ 606.636211][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 608.716266][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 610.799510][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 611.035095][T16882] FAULT_INJECTION: forcing a failure. [ 611.035095][T16882] name failslab, interval 1, probability 0, space 0, times 0 [ 611.137927][T16882] CPU: 0 UID: 0 PID: 16882 Comm: syz.9.1890 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 611.137951][T16882] Tainted: [U]=USER [ 611.137956][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.137965][T16882] Call Trace: [ 611.137969][T16882] [ 611.137975][T16882] dump_stack_lvl+0x16c/0x1f0 [ 611.138000][T16882] should_fail_ex+0x50a/0x650 [ 611.138019][T16882] ? fs_reclaim_acquire+0xae/0x150 [ 611.138038][T16882] should_failslab+0xc2/0x120 [ 611.138052][T16882] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 611.138072][T16882] ? nlmsg_notify+0xac/0x220 [ 611.138088][T16882] ? nlmsg_notify+0x11e/0x220 [ 611.138104][T16882] ? __devinet_sysctl_register+0xbc/0x360 [ 611.138124][T16882] kmemdup_noprof+0x29/0x60 [ 611.138141][T16882] __devinet_sysctl_register+0xbc/0x360 [ 611.138161][T16882] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 611.138177][T16882] ? trace_kmalloc+0x2d/0xd0 [ 611.138192][T16882] ? devinet_init_net+0xeb/0x900 [ 611.138208][T16882] ? __asan_memcpy+0x3c/0x60 [ 611.138225][T16882] ? __pfx_devinet_init_net+0x10/0x10 [ 611.138241][T16882] devinet_init_net+0x347/0x900 [ 611.138259][T16882] ? __pfx_devinet_init_net+0x10/0x10 [ 611.138275][T16882] ops_init+0x1df/0x5f0 [ 611.138296][T16882] setup_net+0x21f/0x860 [ 611.138316][T16882] ? __pfx_setup_net+0x10/0x10 [ 611.138333][T16882] ? down_read_killable+0xcc/0x380 [ 611.138351][T16882] ? __pfx_down_read_killable+0x10/0x10 [ 611.138367][T16882] ? __raw_spin_lock_init+0x3a/0x110 [ 611.138389][T16882] ? debug_mutex_init+0x37/0x70 [ 611.138404][T16882] copy_net_ns+0x2a6/0x5f0 [ 611.138418][T16882] create_new_namespaces+0x3ea/0xad0 [ 611.138442][T16882] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 611.138463][T16882] ksys_unshare+0x45d/0xa40 [ 611.138477][T16882] ? __pfx_ksys_unshare+0x10/0x10 [ 611.138489][T16882] ? xfd_validate_state+0x5d/0x180 [ 611.138513][T16882] __x64_sys_unshare+0x31/0x40 [ 611.138525][T16882] do_syscall_64+0xcd/0x250 [ 611.138542][T16882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.138560][T16882] RIP: 0033:0x7fd01c78d169 [ 611.138571][T16882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.138584][T16882] RSP: 002b:00007fd01d56d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 611.138598][T16882] RAX: ffffffffffffffda RBX: 00007fd01c9a6080 RCX: 00007fd01c78d169 [ 611.138607][T16882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 611.138615][T16882] RBP: 00007fd01c80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 611.138623][T16882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.138630][T16882] R13: 0000000000000000 R14: 00007fd01c9a6080 R15: 00007fffc84d54f8 [ 611.138647][T16882] [ 611.716443][T16771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 611.815588][T16886] EXT4-fs error: 29 callbacks suppressed [ 612.531188][T16771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 612.700571][T16771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 612.781968][T16771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 612.876351][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 613.179995][T16771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.284959][T16771] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.344769][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.351920][T14787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.484188][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.491342][T14780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.673272][T16771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.796101][T16771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.001451][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.188123][T16771] veth0_vlan: entered promiscuous mode [ 614.262477][T16771] veth1_vlan: entered promiscuous mode [ 614.406302][T16771] veth0_macvtap: entered promiscuous mode [ 614.415514][T16771] veth1_macvtap: entered promiscuous mode [ 614.581373][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.659525][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.733196][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.797687][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.896254][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.958646][ T5837] Bluetooth: hci1: command 0x041b tx timeout [ 614.973902][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.048790][T16771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.147040][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.220195][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.304311][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.373807][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.434628][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.517957][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.593635][T16771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.672452][T16925] Process accounting paused [ 615.701423][T16771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.767537][T16771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.831998][T16771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.892370][T16771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.950151][T10865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.991435][T16958] EXT4-fs error: 14 callbacks suppressed [ 617.034512][T10865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.242436][T12920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.320301][T12920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.594251][ T29] audit: type=1806 audit(4294968454.648:27): xattr="" res=-22 [ 620.017028][T17009] qrtr: Invalid version 47 [ 621.867556][T17048] udevd[17048]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 622.121105][T17054] netlink: 246 bytes leftover after parsing attributes in process `syz.7.1922'. [ 622.175227][T17055] EXT4-fs error: 8 callbacks suppressed [ 624.806394][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.817784][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.416122][T17182] FAULT_INJECTION: forcing a failure. [ 627.416122][T17182] name failslab, interval 1, probability 0, space 0, times 0 [ 627.472974][T17184] EXT4-fs error: 27 callbacks suppressed [ 627.547875][T17182] CPU: 0 UID: 0 PID: 17182 Comm: syz.1.1941 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 627.547900][T17182] Tainted: [U]=USER [ 627.547905][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 627.547917][T17182] Call Trace: [ 627.547921][T17182] [ 627.547927][T17182] dump_stack_lvl+0x16c/0x1f0 [ 627.547950][T17182] should_fail_ex+0x50a/0x650 [ 627.547971][T17182] ? fs_reclaim_acquire+0xae/0x150 [ 627.547990][T17182] should_failslab+0xc2/0x120 [ 627.548003][T17182] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 627.548022][T17182] ? alloc_empty_file+0x73/0x1e0 [ 627.548039][T17182] alloc_empty_file+0x73/0x1e0 [ 627.548053][T17182] alloc_file_pseudo+0x13b/0x230 [ 627.548068][T17182] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 627.548083][T17182] ? hugetlbfs_get_inode+0x323/0x740 [ 627.548098][T17182] hugetlb_file_setup+0x4cd/0x620 [ 627.548113][T17182] ksys_mmap_pgoff+0x189/0x5c0 [ 627.548131][T17182] __x64_sys_mmap+0x125/0x190 [ 627.548151][T17182] do_syscall_64+0xcd/0x250 [ 627.548168][T17182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.548186][T17182] RIP: 0033:0x7f998118d169 [ 627.548198][T17182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.548211][T17182] RSP: 002b:00007f9981f9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 627.548224][T17182] RAX: ffffffffffffffda RBX: 00007f99813a5fa0 RCX: 00007f998118d169 [ 627.548232][T17182] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 627.548240][T17182] RBP: 00007f998120e2a0 R08: 0000000000000401 R09: 0000300000000000 [ 627.548247][T17182] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 627.548255][T17182] R13: 0000000000000000 R14: 00007f99813a5fa0 R15: 00007ffd3b6f9bc8 [ 627.548271][T17182] [ 627.923356][T17182] FAULT_INJECTION: forcing a failure. [ 627.923356][T17182] name failslab, interval 1, probability 0, space 0, times 0 [ 628.016454][T17182] CPU: 0 UID: 0 PID: 17182 Comm: syz.1.1941 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 628.016480][T17182] Tainted: [U]=USER [ 628.016485][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 628.016493][T17182] Call Trace: [ 628.016498][T17182] [ 628.016504][T17182] dump_stack_lvl+0x16c/0x1f0 [ 628.016526][T17182] should_fail_ex+0x50a/0x650 [ 628.016547][T17182] ? fs_reclaim_acquire+0xae/0x150 [ 628.016566][T17182] should_failslab+0xc2/0x120 [ 628.016579][T17182] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 628.016599][T17182] ? __d_alloc+0x31/0xaa0 [ 628.016614][T17182] __d_alloc+0x31/0xaa0 [ 628.016625][T17182] ? find_held_lock+0x2d/0x110 [ 628.016640][T17182] d_alloc_pseudo+0x1c/0xc0 [ 628.016655][T17182] alloc_file_pseudo+0xd0/0x230 [ 628.016680][T17182] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 628.016695][T17182] ? lock_acquire+0x2f/0xb0 [ 628.016717][T17182] __anon_inode_getfile+0xf8/0x370 [ 628.016738][T17182] anon_inode_getfile_fmode+0x37/0xa0 [ 628.016757][T17182] __do_sys_fanotify_init+0x8b8/0xb50 [ 628.016774][T17182] do_syscall_64+0xcd/0x250 [ 628.016792][T17182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.016810][T17182] RIP: 0033:0x7f998118d169 [ 628.016821][T17182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.016834][T17182] RSP: 002b:00007f9981f9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 628.016847][T17182] RAX: ffffffffffffffda RBX: 00007f99813a5fa0 RCX: 00007f998118d169 [ 628.016856][T17182] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 628.016864][T17182] RBP: 00007f998120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 628.016871][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.016882][T17182] R13: 0000000000000000 R14: 00007f99813a5fa0 R15: 00007ffd3b6f9bc8 [ 628.016898][T17182] [ 629.538378][T17207] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1944'. [ 632.861108][T17264] EXT4-fs error: 6 callbacks suppressed [ 632.945176][T17263] ecryptfs_parse_packet_length: Error parsing packet length [ 633.036267][T17263] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 635.174613][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 636.027963][T17313] FAULT_INJECTION: forcing a failure. [ 636.027963][T17313] name failslab, interval 1, probability 0, space 0, times 0 [ 636.159574][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.1.1967 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 636.159626][T17313] Tainted: [U]=USER [ 636.159630][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 636.159639][T17313] Call Trace: [ 636.159644][T17313] [ 636.159649][T17313] dump_stack_lvl+0x16c/0x1f0 [ 636.159672][T17313] should_fail_ex+0x50a/0x650 [ 636.159693][T17313] ? fs_reclaim_acquire+0xae/0x150 [ 636.159712][T17313] should_failslab+0xc2/0x120 [ 636.159726][T17313] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 636.159746][T17313] ? jbd2__journal_start+0x193/0x6a0 [ 636.159766][T17313] ? __pfx___might_resched+0x10/0x10 [ 636.159788][T17313] jbd2__journal_start+0x193/0x6a0 [ 636.159809][T17313] __ext4_journal_start_sb+0x19f/0x660 [ 636.159825][T17313] ? ext4_do_writepages+0xc04/0x32d0 [ 636.159845][T17313] ext4_do_writepages+0xc04/0x32d0 [ 636.159946][T17313] ? trace_raw_output_hugetlbfs_fallocate+0x1b2/0x240 [ 636.159973][T17313] ? __pfx___lock_acquire+0x10/0x10 [ 636.160001][T17313] ? __pfx_ext4_do_writepages+0x10/0x10 [ 636.160021][T17313] ? __pfx___lock_acquire+0x10/0x10 [ 636.160037][T17313] ? do_writepages+0x1b3/0x820 [ 636.160054][T17313] ? ext4_writepages+0x303/0x730 [ 636.160069][T17313] ext4_writepages+0x303/0x730 [ 636.160086][T17313] ? __pfx_ext4_writepages+0x10/0x10 [ 636.160109][T17313] ? lock_acquire+0x2f/0xb0 [ 636.160124][T17313] ? do_writepages+0x5b7/0x820 [ 636.160138][T17313] ? __pfx_ext4_writepages+0x10/0x10 [ 636.160155][T17313] do_writepages+0x1b3/0x820 [ 636.160171][T17313] ? __pfx_do_writepages+0x10/0x10 [ 636.160184][T17313] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 636.160199][T17313] ? __pfx_lock_release+0x10/0x10 [ 636.160216][T17313] ? do_raw_spin_lock+0x12d/0x2c0 [ 636.160228][T17313] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 636.160241][T17313] ? lock_acquire+0x2f/0xb0 [ 636.160256][T17313] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 636.160271][T17313] ? do_raw_spin_unlock+0x172/0x230 [ 636.160287][T17313] filemap_fdatawrite_wbc+0x104/0x160 [ 636.160301][T17313] __filemap_fdatawrite_range+0xb3/0xf0 [ 636.160318][T17313] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 636.160355][T17313] ? find_held_lock+0x2d/0x110 [ 636.160370][T17313] ? ext4_fallocate+0x139/0x3950 [ 636.160390][T17313] filemap_write_and_wait_range+0xa3/0x130 [ 636.160409][T17313] ext4_punch_hole+0x194/0x10d0 [ 636.160433][T17313] ext4_fallocate+0x9b7/0x3950 [ 636.160451][T17313] ? rcu_is_watching+0x12/0xc0 [ 636.160465][T17313] ? trace_lock_acquire+0x14e/0x1f0 [ 636.160480][T17313] ? madvise_vma_behavior+0x1ae3/0x1de0 [ 636.160497][T17313] ? __pfx_ext4_fallocate+0x10/0x10 [ 636.160516][T17313] vfs_fallocate+0x60d/0x10d0 [ 636.160536][T17313] ? __pfx_vfs_fallocate+0x10/0x10 [ 636.160555][T17313] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 636.160577][T17313] madvise_vma_behavior+0x1ae3/0x1de0 [ 636.160600][T17313] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 636.160616][T17313] ? find_vma_prev+0xdb/0x160 [ 636.160634][T17313] ? __pfx_find_vma_prev+0x10/0x10 [ 636.160655][T17313] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 636.160688][T17313] ? __pfx_futex_wait+0x10/0x10 [ 636.160707][T17313] ? do_madvise+0x2b3/0x7c0 [ 636.160726][T17313] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 636.160740][T17313] madvise_walk_vmas+0x1cf/0x2c0 [ 636.160754][T17313] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 636.160772][T17313] do_madvise+0x366/0x7c0 [ 636.160789][T17313] ? __pfx_do_madvise+0x10/0x10 [ 636.160804][T17313] ? __x64_sys_futex+0x1e1/0x4c0 [ 636.160825][T17313] ? rcu_is_watching+0x12/0xc0 [ 636.160842][T17313] __x64_sys_madvise+0xa9/0x110 [ 636.160856][T17313] ? lockdep_hardirqs_on+0x7c/0x110 [ 636.160872][T17313] do_syscall_64+0xcd/0x250 [ 636.160890][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.160909][T17313] RIP: 0033:0x7f998118d169 [ 636.160922][T17313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.160938][T17313] RSP: 002b:00007f9981f9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 636.160952][T17313] RAX: ffffffffffffffda RBX: 00007f99813a5fa0 RCX: 00007f998118d169 [ 636.160962][T17313] RDX: 0000000000000009 RSI: 00000000000031ca RDI: 000000110c230000 [ 636.160971][T17313] RBP: 00007f998120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 636.160979][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.160988][T17313] R13: 0000000000000000 R14: 00007f99813a5fa0 R15: 00007ffd3b6f9bc8 [ 636.161006][T17313] [ 636.162576][T17313] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 1924; err -12 [ 638.630147][T17334] EXT4-fs error: 5 callbacks suppressed [ 641.993020][T17388] udevd[17388]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 642.271214][T17395] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1980'. [ 643.731256][T17412] EXT4-fs error: 11 callbacks suppressed [ 644.931579][T17409] kexec: Could not allocate control_code_buffer [ 646.559941][T17444] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1991'. [ 647.076069][T17434] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1991'. [ 647.113662][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1993'. [ 647.257806][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 648.937380][T17479] EXT4-fs error: 11 callbacks suppressed [ 649.081304][T10867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.828551][T10867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.444944][T10867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.852564][T10867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.371959][T10867] bridge_slave_1: left allmulticast mode [ 651.443811][T10867] bridge_slave_1: left promiscuous mode [ 651.476865][T10867] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.911463][T10867] bridge_slave_0: left allmulticast mode [ 651.963044][T10867] bridge_slave_0: left promiscuous mode [ 652.016232][T10867] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.186068][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 652.202463][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 652.216329][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 652.224047][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 652.231811][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 652.239415][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 654.109372][T17531] EXT4-fs error: 9 callbacks suppressed [ 654.324986][ T5843] Bluetooth: hci3: command tx timeout [ 654.633701][T17530] netlink: 'syz.3.2010': attribute type 29 has an invalid length. [ 654.843654][T17530] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2010'. [ 654.862425][T17535] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 655.365847][T10867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.475070][T10867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.518838][T10867] bond0 (unregistering): Released all slaves [ 656.396433][ T5843] Bluetooth: hci3: command tx timeout [ 656.412733][T17557] random: crng reseeded on system resumption [ 656.508793][T17559] cifs: Unknown parameter '' [ 656.540771][T10867] hsr_slave_0: left promiscuous mode [ 656.555383][T10867] hsr_slave_1: left promiscuous mode [ 656.576511][T10867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.603424][T10867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.633992][T10867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.665371][T10867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.730867][T10867] veth1_macvtap: left promiscuous mode [ 656.752696][T10867] veth0_macvtap: left promiscuous mode [ 656.771779][T10867] veth1_vlan: left promiscuous mode [ 656.793108][T10867] veth0_vlan: left promiscuous mode [ 657.821575][T17572] could not allocate digest TFM handle [ 658.480088][ T5843] Bluetooth: hci3: command tx timeout [ 658.542519][T17589] udevd[17589]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 658.892439][T10867] team0 (unregistering): Port device team_slave_1 removed [ 658.999353][ T5843] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 659.087789][T10867] team0 (unregistering): Port device team_slave_0 removed [ 659.217338][T17597] EXT4-fs error: 14 callbacks suppressed [ 660.558629][ T5843] Bluetooth: hci3: command tx timeout [ 661.239001][T17522] chnl_net:caif_netlink_parms(): no params data found [ 661.603223][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.644449][T17522] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.684880][T17522] bridge_slave_0: entered allmulticast mode [ 661.709561][T17522] bridge_slave_0: entered promiscuous mode [ 661.745040][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.786803][T17522] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.826644][T10867] ref_tracker: net notrefcnt@ffff88805e5c81e0 has 1/2 users at [ 661.826644][T10867] sk_alloc+0xa93/0xb90 [ 661.826644][T10867] inet6_create+0x380/0x1320 [ 661.826644][T10867] __sock_create+0x335/0x8d0 [ 661.826644][T10867] udp_sock_create6+0xc8/0x6a0 [ 661.826644][T10867] sctp_udp_sock_start+0x280/0x4b0 [ 661.826644][T10867] proc_sctp_do_udp_port+0x380/0x450 [ 661.826644][T10867] proc_sys_call_handler+0x3c6/0x5a0 [ 661.826644][T10867] iter_file_splice_write+0x90f/0x10b0 [ 661.826644][T10867] direct_splice_actor+0x18f/0x6c0 [ 661.826644][T10867] splice_direct_to_actor+0x346/0xa40 [ 661.826644][T10867] do_splice_direct+0x178/0x250 [ 661.826644][T10867] do_sendfile+0xafb/0xe40 [ 661.826644][T10867] __x64_sys_sendfile64+0x1da/0x220 [ 661.826644][T10867] do_syscall_64+0xcd/0x250 [ 661.826644][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.826644][T10867] [ 661.914878][T10867] ref_tracker: net notrefcnt@ffff88805e5c81e0 has 1/2 users at [ 661.914878][T10867] sk_alloc+0xa93/0xb90 [ 661.914878][T10867] inet_create+0x3a1/0x10a0 [ 661.914878][T10867] __sock_create+0x335/0x8d0 [ 661.914878][T10867] udp_sock_create4+0xa7/0x450 [ 661.914878][T10867] sctp_udp_sock_start+0x10b/0x4b0 [ 661.914878][T10867] proc_sctp_do_udp_port+0x380/0x450 [ 661.914878][T10867] proc_sys_call_handler+0x3c6/0x5a0 [ 661.914878][T10867] iter_file_splice_write+0x90f/0x10b0 [ 661.914878][T10867] direct_splice_actor+0x18f/0x6c0 [ 661.914878][T10867] splice_direct_to_actor+0x346/0xa40 [ 661.914878][T10867] do_splice_direct+0x178/0x250 [ 661.914878][T10867] do_sendfile+0xafb/0xe40 [ 661.914878][T10867] __x64_sys_sendfile64+0x1da/0x220 [ 661.914878][T10867] do_syscall_64+0xcd/0x250 [ 661.914878][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.914878][T10867] [ 662.030485][T17522] bridge_slave_1: entered allmulticast mode [ 662.043542][T17522] bridge_slave_1: entered promiscuous mode [ 662.278276][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 662.369811][T17522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.435148][T17522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.543966][T17522] team0: Port device team_slave_0 added [ 662.597154][T17522] team0: Port device team_slave_1 added [ 662.717533][T17522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.756032][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.828356][T10867] ------------[ cut here ]------------ [ 662.834184][T10867] WARNING: CPU: 0 PID: 10867 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 662.843975][T10867] Modules linked in: [ 662.848002][T10867] CPU: 0 UID: 0 PID: 10867 Comm: kworker/u8:20 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 662.858812][T10867] Tainted: [U]=USER [ 662.862806][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 662.873036][T10867] Workqueue: netns cleanup_net [ 662.877884][T10867] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 662.883979][T10867] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 662.903755][T10867] RSP: 0018:ffffc9000402fab0 EFLAGS: 00010246 [ 662.909894][T10867] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 662.917945][T10867] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 [ 662.926078][T10867] RBP: ffff88805e5c81e0 R08: 0000000000000001 R09: fffffbfff2dd7dba [ 662.934172][T10867] R10: ffffffff96ebedd7 R11: 0000000000002ba2 R12: ffff88805e5c8230 [ 662.942328][T10867] R13: ffff88805e5c8230 R14: ffff88805e5c8230 R15: ffff88805e5c8230 [ 662.950334][T10867] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 662.959297][T10867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.966088][T10867] CR2: 0000001b32e1dff8 CR3: 000000003001c000 CR4: 00000000003526f0 [ 662.974058][T10867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 662.982198][T10867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 662.990226][T10867] Call Trace: [ 662.993498][T10867] [ 662.996468][T10867] ? __warn+0xea/0x3c0 [ 663.000534][T10867] ? ref_tracker_dir_exit+0x3e3/0x680 [ 663.005996][T10867] ? report_bug+0x3c0/0x580 [ 663.010508][T10867] ? handle_bug+0x54/0xa0 [ 663.014829][T10867] ? exc_invalid_op+0x17/0x50 [ 663.019565][T10867] ? asm_exc_invalid_op+0x1a/0x20 [ 663.024590][T10867] ? ref_tracker_dir_exit+0x3e3/0x680 [ 663.029992][T10867] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 663.035842][T10867] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 663.041861][T10867] ? net_passive_dec+0x7d/0xd0 [ 663.046660][T10867] net_passive_dec+0x89/0xd0 [ 663.051246][T10867] cleanup_net+0x8ac/0xb30 [ 663.055653][T10867] ? __pfx_cleanup_net+0x10/0x10 [ 663.060662][T10867] ? lock_acquire+0x2f/0xb0 [ 663.065339][T10867] ? process_one_work+0x921/0x1ba0 [ 663.070602][T10867] process_one_work+0x9c5/0x1ba0 [ 663.075541][T10867] ? __pfx_batadv_nc_worker+0x10/0x10 [ 663.080959][T10867] ? __pfx_process_one_work+0x10/0x10 [ 663.086384][T10867] ? assign_work+0x1a0/0x250 [ 663.090967][T10867] worker_thread+0x6c8/0xf00 [ 663.095554][T10867] ? __kthread_parkme+0x148/0x220 [ 663.100611][T10867] ? __pfx_worker_thread+0x10/0x10 [ 663.105715][T10867] kthread+0x3af/0x750 [ 663.109867][T10867] ? __pfx_kthread+0x10/0x10 [ 663.114465][T10867] ? lock_acquire+0x2f/0xb0 [ 663.119206][T10867] ? __pfx_kthread+0x10/0x10 [ 663.123799][T10867] ret_from_fork+0x45/0x80 [ 663.128257][T10867] ? __pfx_kthread+0x10/0x10 [ 663.132860][T10867] ret_from_fork_asm+0x1a/0x30 [ 663.137806][T10867] [ 663.140817][T10867] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 663.148077][T10867] CPU: 0 UID: 0 PID: 10867 Comm: kworker/u8:20 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 663.158824][T10867] Tainted: [U]=USER [ 663.162611][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.172650][T10867] Workqueue: netns cleanup_net [ 663.177413][T10867] Call Trace: [ 663.180676][T10867] [ 663.183591][T10867] dump_stack_lvl+0x3d/0x1f0 [ 663.188171][T10867] panic+0x71d/0x800 [ 663.192055][T10867] ? __pfx_panic+0x10/0x10 [ 663.196458][T10867] ? show_trace_log_lvl+0x29d/0x3d0 [ 663.201651][T10867] ? check_panic_on_warn+0x1f/0xb0 [ 663.206750][T10867] ? ref_tracker_dir_exit+0x3e3/0x680 [ 663.212113][T10867] check_panic_on_warn+0xab/0xb0 [ 663.217035][T10867] __warn+0xf6/0x3c0 [ 663.220919][T10867] ? ref_tracker_dir_exit+0x3e3/0x680 [ 663.226280][T10867] report_bug+0x3c0/0x580 [ 663.230602][T10867] handle_bug+0x54/0xa0 [ 663.234743][T10867] exc_invalid_op+0x17/0x50 [ 663.239236][T10867] asm_exc_invalid_op+0x1a/0x20 [ 663.244074][T10867] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 663.250062][T10867] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 663.269676][T10867] RSP: 0018:ffffc9000402fab0 EFLAGS: 00010246 [ 663.275733][T10867] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 663.283706][T10867] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 [ 663.291697][T10867] RBP: ffff88805e5c81e0 R08: 0000000000000001 R09: fffffbfff2dd7dba [ 663.299684][T10867] R10: ffffffff96ebedd7 R11: 0000000000002ba2 R12: ffff88805e5c8230 [ 663.307647][T10867] R13: ffff88805e5c8230 R14: ffff88805e5c8230 R15: ffff88805e5c8230 [ 663.315625][T10867] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 663.321347][T10867] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 663.327164][T10867] ? net_passive_dec+0x7d/0xd0 [ 663.331925][T10867] net_passive_dec+0x89/0xd0 [ 663.336501][T10867] cleanup_net+0x8ac/0xb30 [ 663.340902][T10867] ? __pfx_cleanup_net+0x10/0x10 [ 663.345825][T10867] ? lock_acquire+0x2f/0xb0 [ 663.350319][T10867] ? process_one_work+0x921/0x1ba0 [ 663.355421][T10867] process_one_work+0x9c5/0x1ba0 [ 663.360357][T10867] ? __pfx_batadv_nc_worker+0x10/0x10 [ 663.365715][T10867] ? __pfx_process_one_work+0x10/0x10 [ 663.371081][T10867] ? assign_work+0x1a0/0x250 [ 663.375659][T10867] worker_thread+0x6c8/0xf00 [ 663.380241][T10867] ? __kthread_parkme+0x148/0x220 [ 663.385303][T10867] ? __pfx_worker_thread+0x10/0x10 [ 663.390438][T10867] kthread+0x3af/0x750 [ 663.394519][T10867] ? __pfx_kthread+0x10/0x10 [ 663.399136][T10867] ? lock_acquire+0x2f/0xb0 [ 663.403650][T10867] ? __pfx_kthread+0x10/0x10 [ 663.408226][T10867] ret_from_fork+0x45/0x80 [ 663.412630][T10867] ? __pfx_kthread+0x10/0x10 [ 663.417212][T10867] ret_from_fork_asm+0x1a/0x30 [ 663.421971][T10867] [ 663.425021][T10867] Kernel Offset: disabled [ 663.429428][T10867] Rebooting in 86400 seconds..