last executing test programs: 8m44.772966548s ago: executing program 2 (id=206): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0x21) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(r0, 0x0, 0x5) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x4f20, 0x0, 0x5, 0x7) 8m43.743732339s ago: executing program 2 (id=209): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x0) sysfs$auto(0xfffffe00, 0x1, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) getpeername$auto(r0, &(0x7f0000000180)=@in={0x2, 0x4e22, @empty}, &(0x7f00000001c0)=0x1000000) remap_file_pages$auto(0x40, 0x2000fff, 0x0, 0xdc, 0x100000) 8m43.619783232s ago: executing program 2 (id=210): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r0, 0x40045542, 0xffffffffffffffff) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400443, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x123c40, 0x140) fanotify_mark$auto(r1, 0x25, 0x400000000000a, r2, 0x0) r3 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hwsim/dfs_simulate_radar\x00', 0x40002, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) statmount$auto(&(0x7f0000000000)={0x7, @raw=0x4, 0x4, 0x1, 0x1ff}, &(0x7f0000000080)={0x84, 0xff, 0x10, 0xff, 0xb, 0xfffe, 0xada, 0x2, 0x72d48315, 0xd, 0x178b, 0x3, 0xff, 0x5, 0x4, 0xfc00000000000000, 0x4, 0x7, 0x6, 0x7, 0xfffffffd, 0x6, 0xec4, 0x74a4, 0x7, 0x80000000, 0x4, 0x2, 0x2, 0x5, 0x683660ff, [0x5, 0x100000000, 0x7, 0xa, 0x7, 0x63, 0x81, 0x7, 0x9e2, 0x6, 0x81, 0xff, 0x6, 0x8, 0xd, 0x0, 0x4, 0x5853, 0x9, 0x1, 0x200000, 0x1, 0x5, 0x0, 0x8, 0x1c04, 0x94a, 0x80000001, 0xffffffff, 0xb0, 0xae10, 0xffff, 0x6005, 0xdc9, 0x8, 0x2, 0xd, 0x1, 0x5, 0xfff, 0x3, 0x9, 0x6], "d96c376a9685c7a79abf28e6dfd9c3b654853f5841f6ededcacb87fca1f3a589e3124a3143a119143a5496ce12d00e36d7c899b563d04dd8f00859e3ad87c49802b1a2725a6d01ef2e91ae88f123453097011e573479eacf4595c2a478187210a7b36dc60cbeebc99512da58405b9f9bf666"}, 0x1, 0xf) 8m43.489932692s ago: executing program 2 (id=212): socket(0x3, 0x1, 0x0) r0 = prctl$auto(0x10001, 0xfffc, 0x2008, 0xb, 0x7fffffff) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x400000000006) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mmap$auto(0xfffffffffffffff7, 0x4020009, 0xdf, 0xfffffffffffffffb, r0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x15b883, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r5) r6 = socketpair$auto(0x6, 0x3, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = open(0x0, 0x278481, 0x90) socket(0xa, 0x3, 0x3b) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) select$auto(0x8, &(0x7f00000001c0)={[0x7, 0x6, 0x9, 0x9, 0x0, 0x5, 0x3, 0x2, 0x542a, 0x8, 0x8, 0xffffffffffffffff, 0x3ff, 0x0, 0x8, 0xff]}, &(0x7f0000000240)={[0x8, 0x9, 0x4, 0xa, 0x4, 0x20000001, 0x100000000000b50, 0x8000, 0x8, 0x0, 0x4, 0x1ff, 0x5, 0x975, 0x4, 0x5]}, &(0x7f00000002c0)={[0x4, 0x80000000, 0x5, 0x286a, 0x95, 0x1, 0x3, 0x7, 0x81, 0x7fff, 0x6, 0x9, 0x100000000, 0xfff, 0x80000001, 0xe60]}, &(0x7f0000000140)={0xfd2, 0x8000000000000001}) fchown$auto(r4, 0xe5a, 0x5) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r8, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x23, 0x3fffffff}, 0x1000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x3, 0xa, 0x0, 0x18, r7, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x900) bind$auto(r2, &(0x7f0000000040)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffd}, 0x86a) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000000c0), r6) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/security/tomoyo/manager\x00', 0x701f00, 0x0) 8m43.146573812s ago: executing program 2 (id=215): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000040)="0ab61f041f6714e468b06e6cc9efec46ba315f06da58d7bf74e4af9525ff0a2f40ca602cec277bf1747e4c37fb1eb043dba997c8631bfe15790f8844f8f7960394a5fb89ef6cb1d927c508e7bce06261ea2a3df3e74fb70a5cddff8c", 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3670400000000000000ba831c1b", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) 8m43.036893788s ago: executing program 2 (id=216): mmap$auto(0x0, 0x8000000000007, 0x4000000000df, 0x40eb4, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) socket(0x21, 0x801, 0xd69) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x4, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x401, 0x3) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x66abd95e3e29e241, 0x0) r4 = epoll_create$auto(0x3e) socket(0xa, 0x2, 0x3a) epoll_ctl$auto(r1, 0x1, r0, 0x0) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x3fff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000200)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x100000011, r3, 0x400000000000004) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xfffffffd, 0x1, 0x8, r5, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x5, 0x176c, 0x7, 0x87}, {0x7ff, 0x400, 0x3b, 0x8, 0x5, 0x553, 0xd, 0x9, 0x4}}) keyctl$auto(0x7ff, 0x0, 0xee01, 0x0, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) 8m27.809155453s ago: executing program 32 (id=216): mmap$auto(0x0, 0x8000000000007, 0x4000000000df, 0x40eb4, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) socket(0x21, 0x801, 0xd69) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x4, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x401, 0x3) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x66abd95e3e29e241, 0x0) r4 = epoll_create$auto(0x3e) socket(0xa, 0x2, 0x3a) epoll_ctl$auto(r1, 0x1, r0, 0x0) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x3fff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000200)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x100000011, r3, 0x400000000000004) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xfffffffd, 0x1, 0x8, r5, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x5, 0x176c, 0x7, 0x87}, {0x7ff, 0x400, 0x3b, 0x8, 0x5, 0x553, 0xd, 0x9, 0x4}}) keyctl$auto(0x7ff, 0x0, 0xee01, 0x0, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) 7m29.128822707s ago: executing program 0 (id=476): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/slab/kmalloc-64/remote_node_defrag_ratio\x00', 0x2062, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/slab/kmalloc-64/remote_node_defrag_ratio\x00', 0x2062, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) (async) statmount$auto(0x0, 0x0, 0x1fe, 0xd) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/afs/addr_prefs\x00', 0x441, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/afs/addr_prefs\x00', 0x441, 0x0) write$auto(r2, &(0x7f0000000300)='/ ys -ernel/tracing/set_event_notrace_p}d\xde\xc7\xbd8\xbe\xd7\xdeN\x86\xcf\x1d\rD!U\xb4\xe4+\v\xc3\x06$\xe1\x0eA\xf3ua\x8fT\xd9J\xfd\x02\x00\x00\x00\x00\x00\x00\x00\xbf\x9f\xb0e\xfex,c-\xdf\a\x9e\x9bX\x13n\xdf\xc8\x94%\x7fp\xe0\xa0x\x1f\x17\xea\xc3\xbf\xb2(}\x7f\xd3\xf6\xc5\x9bj\xcf~\x7f)\xd2\x7f\tN\xa9m\xe8\xdc\xb1\xe3\xf3L\xad\xdd%(0c\x9d\x13\xc7\x0elZ\x87K\x14_\xbau\x88\x9f\xe2\x04\x16\xec\xfa\xad\xe0\x87G[N\xf1\xb5\xc0\xab\x00\x00\x00\x00\x00\x00\x00\x04+\xc1\xd3m\xb8\xe5\a\x92\xc2\xd4\xcc\x91\x90\x05$G\x9a\x9b\xe1I\xa9/(\xd3\xa1\\8\x1afmY\xd6m\x931\xe6\xbd\xfb\xd6\x91\xbb\xef\xa1\x03\xd8j\x06ngka\xd1\xf1\xfd\xaeX)w\x1e4\x91\xc9\xce4\x97\x00', 0x40) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x401bf, 0x7352, 0x3c, 0x662, 0x1ffde, 0x5, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x3, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0xffff]}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="000826bd70000200000000000000060007000800004e6ea501000080000008000200", @ANYRES32=0x0, @ANYRESHEX=r1], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0x200000000eb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) (async) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) write$auto(0xffffffffffffffff, 0x0, 0x7d) socket(0x2b, 0x1, 0x1) unshare$auto(0x40000080) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x277, 0x100, 0x3fc}]}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xd3000, 0x0) syslog$auto(0x3, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 7m26.98091646s ago: executing program 0 (id=480): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x8) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') 7m26.381215733s ago: executing program 0 (id=482): r0 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x80001, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) getpid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/radio25\x00', 0xc0000, 0x0) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, 0x0, 0x6) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r2, 0x7, 0xb, 0x0, 0x2000007) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4e0302, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x1010001, 0x100000003) mlock$auto(0xfbe8, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x4, 0x9, 0x1, 0x11, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x3, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x10, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa, 0x0, 0xffffffffffff25be, 0x4, 0x23c, 0xf1, 0x0, 0x0, 0x2000000000000000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffb, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x1fe, 0xec35) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="d5cfa638d3f0952f35c851c2c3db84195595deacec67b0056ea29252c78637809887ba1b4cd428a10cb544ba21353b5896127d824794ea6f5adb54e231ff3a5a6164c8075d4a8c281d0d3657b0fead7e79112a52a950241383295d7ddab1700c99c51ef94f80902c231c5979d16771252701f55c783527ebfdef69c304def953468fad394fb1927721a0f98af07ba498b18dbdfce1c295a477c708fd0f1fc33423afe9", @ANYRES64=r0, @ANYBLOB="63b599927c1966f6b2303af9c7c59e0a8941e0d9431d9d33b0e0469bc59a6e5ea8f9b1160456f8b0b51d55ba83be60afd1b812a6c48bba93ac893cdfec7c8e31c2f8ae0732d21d6f7482c5271b527662b4b4859bb71661c80f687e36621e57c74829054913925c6b8bc568fee51828"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x10, 0x2, 0x4) 7m25.116029801s ago: executing program 0 (id=485): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) semctl$auto_SETVAL(0x3, 0x28, 0x10, 0x4) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x3, 0x2) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) (async) semctl$auto_SETVAL(0x3, 0x28, 0x10, 0x4) (async) 7m24.310126955s ago: executing program 0 (id=488): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/sctp/rto_beta_exp_divisor\x00', 0xa0081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D2\x00', 0x105400, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) 7m23.127073774s ago: executing program 0 (id=491): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) (async) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x1) (async) unshare$auto(0x3ff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x40002, 0x0) sendfile$auto(r3, r3, &(0x7f0000000040)=0x8010, 0x788b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r4) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4851}, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbf7, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20091) read$auto(0x3, 0x0, 0xf34) (async) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) (async) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r7, 0xd35, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x61cf770a5abe6d4a}, 0x8010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) 7m7.699253179s ago: executing program 33 (id=491): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) (async) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x1) (async) unshare$auto(0x3ff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x40002, 0x0) sendfile$auto(r3, r3, &(0x7f0000000040)=0x8010, 0x788b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r4) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4851}, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbf7, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20091) read$auto(0x3, 0x0, 0xf34) (async) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) (async) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r7, 0xd35, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x61cf770a5abe6d4a}, 0x8010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) 5m3.896185229s ago: executing program 5 (id=915): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0x7b3, 0x7ff, 0x6, 0x9, 0xe35, 0xffffffffffffffff}) capget$auto(&(0x7f0000000080)={0xdcd9}, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) getsockopt$auto(0x4, 0x6, 0x14, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3f, 0x7ffe, 0x1, 0x7, 0x2, 0x4, 0x9, 0x3, 0x0, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x5a6e, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, 0x0, 0x16) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000380), r0) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x120, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xff, 0x7, 0x0, 0x1, [@typed={0x4, 0x86}, @generic="1d1387dca383fcdd3be7be56b53004ad4e0a51d4a7873921e32d2ff30eadd010331f038d607d6aa003469a57ae5b011d99e07c3cd71af52f36ccde9ea94a72019f7be1f85cd8252bdedd7105c3b4f6ad79910612d9177e988f4bc5117f044e5e7f10b2080084539bc521ebbe3c9da4e50771e1592c1e4f6e304d65882bea408dc5c1dfcfd82fd5fb9836e460fd8ff9ba84bf52495424e0da78e516db5842b52c70b70b432ce54de927cc5cb8ebe1820592081786225e36fab1ebb4d02000f21f2002b382c711588d010bd6fc8d1b73ba7f44043d10488a42665d80a538e27fa6696a2206f86a3d6214467b9f5d47ba788ee6a04e19c593"]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket(0x26, 0x80805, 0x0) rt_sigaction$auto(0x36, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) rmdir$auto(&(0x7f0000000080)='.\x00') getsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x2, 0x9, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) connect$auto(r2, 0x0, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0xffffffffffffffff, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5m3.365013324s ago: executing program 5 (id=917): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0xff7ffffd) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae9c, &(0x7f0000000040)={0x2}) 5m1.674103082s ago: executing program 5 (id=919): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(0x68a3) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x20040894) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = open(0x0, 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r2, 0x90009427, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x400c014}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = socket(0x10, 0x2, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000180)={@_si_pad}, 0x10000, &(0x7f0000000340)={{0x8000, 0x1a}, {0x81, 0x1}, 0xf4d, 0x2, 0x9e, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8000000000000001, 0x4, 0x8, 0x81, 0x7, 0xc, 0x1, 0x0, 0xfffffffffffffeff}) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r4, 0x0, 0x400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) ioctl$auto_PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000100)={0x4b, 0xfffffffffffffff8}) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy16/hwflags\x00', 0x510400, 0x0) 5m0.170537308s ago: executing program 5 (id=927): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) r0 = socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x80000, 0x0) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0xbea2b4add95e8312, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x400}, @BATADV_ATTR_FLAG_BEST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) setsockopt$auto(r0, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r3, 0xd35, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x61cf770a5abe6d4a}, 0x8010) write$auto(0x3, 0x0, 0x7ffffffa) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) 4m58.02063368s ago: executing program 5 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x86) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r2, 0x0, 0xc3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000094) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PHY_HEADER={0x4}, @ETHTOOL_A_PHY_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_PHY_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PHY_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9818}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd169}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010025bd700fc0bd3744c2f345e604001000"], 0x18}}, 0x18800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) 4m57.080644612s ago: executing program 5 (id=937): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, &(0x7f0000000040)='!\x00', {0x3, 0x9b70}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x3ff, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0xffffffffffffffff, 0x5) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r0 = socket(0xa, 0x2, 0x3a) open_by_handle_at$auto(r0, 0x0, 0xffffffff) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x8, 0x0, 0x9, 0x80000001, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="9bff29bd7000fbdbdf250100007b"], 0x14}}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0) tgkill$auto(0x1, 0x1, 0x5) select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x3, 0x9, 0x6, 0xa80d, 0x8000000010000, 0x0, 0x7c43, 0x9, 0x0, 0x4, 0xd133]}, 0x0, 0x0, &(0x7f00000000c0)={0x100}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) 4m40.992604778s ago: executing program 34 (id=937): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, &(0x7f0000000040)='!\x00', {0x3, 0x9b70}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x3ff, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0xffffffffffffffff, 0x5) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r0 = socket(0xa, 0x2, 0x3a) open_by_handle_at$auto(r0, 0x0, 0xffffffff) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x8, 0x0, 0x9, 0x80000001, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="9bff29bd7000fbdbdf250100007b"], 0x14}}, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0) tgkill$auto(0x1, 0x1, 0x5) select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x3, 0x9, 0x6, 0xa80d, 0x8000000010000, 0x0, 0x7c43, 0x9, 0x0, 0x4, 0xd133]}, 0x0, 0x0, &(0x7f00000000c0)={0x100}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) 13.41758581s ago: executing program 3 (id=1630): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x19) (async) syz_clone3(0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async) sysfs$auto(0x2, 0x27, 0x0) (async) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 12.646371677s ago: executing program 3 (id=1634): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x2}, 0x1fa, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) 11.172069532s ago: executing program 3 (id=1639): unshare$auto(0x100000d) futex$auto(0x0, 0x85, 0x104, 0x0, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82800, 0x0) (async, rerun: 64) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) (async, rerun: 64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x600243, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cpu/1/cpuid\x00', 0xaba45ce5256f4b1a, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x800000001fc, 0x8, 0x100000000000d, 0x3, 0x4, 0x80, 0x8, 0x3ffffffff, 0x8, 0x300000000000000, 0x10001, 0x5, 0x0, 0x7c00000000, 0x6, 0x7]}, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) socket(0x1e, 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x101800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3) (async) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) (async) write$auto(0x3, 0x0, 0xffd8) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async, rerun: 64) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) socket(0xa, 0x5, 0x84) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) 9.936183036s ago: executing program 3 (id=1645): bind$auto(0xffffffffffffffff, 0x0, 0x66) r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0xffffffffffffff85, 0x2020009, 0x3, 0xeb1, r0, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x591002, 0x0) unshare$auto(0x40000080) futex$auto(0x0, 0x85, 0x104, 0x0, 0x0, 0x7fffffff) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) fstatfs$auto(0x0, 0x0) write$auto(0xca, &(0x7f00000005c0)='\x04>\x01\x01\x00\x00\xe2\x00\x00\xb6d\x89\x14\xd7\xe0\x99T%4&c\xde\xdf\xe4A\x83\x1dX{\xb4\xf4\xdc\x81\xa7\xda\xb5 F\xc3\xd5\xd4\nK#\xc7\x10\xd6h\xfc\xa1\x87(\x85\x95f\x87\nW\xf8\f@\x0e^\x84B}\x94\xb4\xe2\xdd\xfe\xb6I\xd4\v5\xef@\xb3d\xbdW\xaa\xe2\x8b\x94W\xa2%1?f\xdb?\\\xb1\x9fvl\x89\xf6\xcb\t\x97\x89\x9b\xea\x14+\x9e\x19q\xea3-c_\x89\xbd\xb7O\x94\xeeS\x9d\xa8\x17\xb3\xf6\xa2r~\xbc\x80\xbb~\xa9\xd2$\x1bU\xa2t%\x066\x9e\x15|\xa5\x8b\x98Jc\xb4[\xc5\xb5\xdd\x84\v\x17\x1f\a\x06\xd7\x1d\xed\xd6\x8eKBZ\xcc\xcd\xc4T\xb0\v\xcdd\xb6\\\xbaiV\xfd\xf9\x03\xf4[\x92,\xe5\x83\x0e\xa7\xef\"\xf3\xc5\xe0\xc5\f\xb2F[\xbe\xe3\x9f\x0f*\xaa\x04\x02\xfa\x8b8\xfe\x14\xd7\xf5\xb2\f\xfaxz\xbb\xcb\xa2\x99\x9b\x8dgF\x00\x9b\xe8$\x02\x18\x93A\xae\xb2\xc7\xa2&?\x9b\x9b\x9eE\xc78\xc4\x99\al\xa43\xdaf\x13q\xe3\xe9LH\xbdO\xf7\xd80M\xd04]`\xe2\xa0\b\x14\f$K\xf5\xd40\x01\xd3\xd7\n\x8e\x93\xb8\x1e\xa8h\x8c\x9c\xe4I\xb4\x19-#\xe2\x95\xd7\x18\x96M\xc3;M\xb2\x95\x1b\xb9\x9bg\xec\x87{x\xed\xcf\xc8\x80X\xc2XBY\xa2\\s\r\xe3\xd2enFM$O\xbd\xdb\x01\xe1m\x16\xd7\xe7P\xfeq_`1\xd9]a\xee\x18\xca\x8cP!y\x04y\xe8N\xa5F\x06zL\xd1p8:p-NDf\xb3\xd6\xc4\xe2\xb9`]+\xc3\xa50\x0e\xf3\xc1,B\xd8\x89\x8a\xa4b\x0e\xb1\xc9;\xd2\xcd9\xf73\xb7\x92\xcc\xb6G\x0f\x1b?\x9b 6o\xa0~g\x01b\x0f\xd8Y!P\xff\x97\xa6j8B[\x9fG\xf1\x00'/467, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) 9.453385617s ago: executing program 4 (id=1648): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x106) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x400000003, 0x6, 0x0, 0x1, 0x5b8f5189, 0x2, {0x100000001, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x2, 0x81, 0xffffffffffff6291, 0xa747, 0xdeb1}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r1 = mq_open$auto(&(0x7f00000005c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x200) syz_open_procfs$namespace(r3, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x64) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x105c0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 7.23182863s ago: executing program 6 (id=1654): mmap$auto(0x0, 0x20009, 0xdf, 0x18, 0x200000000000404, 0x0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) r0 = gettid() r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x7, 0x8, 0x9, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r2, 0xfffff588, 0x1, 0xffffffe1, 0x8000, 0xffffffffffffffff, r2}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f00000000c0)) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r3, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c71a", 0x31) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r4, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$auto(r1, 0xffff, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) getrandom$auto(&(0x7f0000000080)='\xd6.%*\x00', 0xf, 0x1000) ioperm$auto(0x7, 0x6, 0x2) madvise$auto(0x1, 0xffffffffffff0005, 0x800015) unlinkat$auto(0xffffffffffffffff, 0x0, 0x8) 6.891809639s ago: executing program 4 (id=1655): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop9\x00', 0x0, 0x0) ioctl$auto(r0, 0x127d, r0) r1 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$auto(r1, 0xa4b, r0) 6.697702606s ago: executing program 4 (id=1656): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x0, 0x1, 0x0, 0x2, 0xa98) ioctl$auto_SG_GET_VERSION_NUM2(r0, 0x2282, &(0x7f0000000040)="f7906c1c3e057ab5a244cf300f2d19f1512b494dc8e8984b91f0fa43319853d860c591c9d68535de87cdec06b1daad01790c627c58634261deaeac8abbe6ec1ae52a6b7aff34d330d3e7885a9af0c5b8b09f135b5e36fec20d30dd7be7456bc8fd5b774bfe7669393039923c9d0c9ef944588dd88e1cca30d39dfc2bead19f682793aa6d3d5b513d985824dafab6d526978cc9daa9f79f58f09d689c3a83d8ffedeb2b92b962c40f6fd61ef71a54d9b512756e3eff43020a4db79bfd9bb376545de777dd6986d79bba959d1fdcb9e5ff072e783af8e695fe29b845c17d8026387f71a90e3680") r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r1, 0x8, 0x400000000000006, 0x4) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto_BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$auto(r2, 0xd00064c0, 0xc36) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f00000001c0)="2a1d264add69b6440800ac8caf4bdecc30b530ac6ebbff950e1a647d6a08a1b55dde5a409b73830b7803aef33addb33f3a800002000000f179fa3d472949a7264a1b2547c4346fa2e5f21fce0030523285c82be9da9b31", 0x57) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x300) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) keyctl$auto(0x1, 0x0, 0x2, 0x8, 0xd87f) socket(0x21, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff100"}, 0x55) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\x88\xa8\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) read$auto(0x3, 0x0, 0x80) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) 5.739414861s ago: executing program 6 (id=1659): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x24008010) (async) mmap$auto(0x0, 0x4, 0x3, 0xebe, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) ioperm$auto(0x7, 0x6, 0x1) (async) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) read$auto(r0, 0x0, 0x9e7) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc2\x00', 0x800, 0x0) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$auto(0x3, 0x40246f4c, 0x38) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) r4 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x200000, 0x0) write$auto_tracing_cpumask_fops_trace(r4, &(0x7f00000000c0)="1cfbd212d95822d786e6f1afb718358df37c186090172d181293b5db64922d51b56460d8e065163c633c881507905f4afd614231f8f3853e02419c1316e4c2af10baf8d0ac29c3bfca18032f67828b74a9d0d273c088102218547d65572d31974871ae9cad0c86f25d55f7390c7300a317462418c33c9d6f26a6f9f2637eac7af5df1309f527c116fc52db8f826da7219cd0bd244f9d8da8cfd0d349235ad87f913c8a7fdaeb247eb7d30b3e454f57d0523a526c59a4153a5be63737c675964d5a7e12c8c7c88efacde8c1e427cbb13d07fa45c6", 0xd4) (async) sendfile$auto(r3, r3, 0x0, 0x7dfff001) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000) (async) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x559c02, 0x0) 5.562787503s ago: executing program 3 (id=1660): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) clone$auto(0x400000000000007, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x43, &(0x7f0000000000)='\x00', 0xbb) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) waitid$auto_P_PIDFD(0x3, r1, &(0x7f00000000c0)={@_si_pad}, 0xfffffff7, &(0x7f0000000140)={{0x59, 0x200}, {0x60e1, 0x6}, 0xfffffffffffffff6, 0xfffffffffffffff7, 0x3, 0x9, 0xf63b, 0x32f, 0x6, 0x8, 0x0, 0x2, 0x6, 0x3, 0xfc4, 0x7}) setrlimit$auto(0x8, 0x0) mlockall$auto(0x7) write$auto(0x3, 0x0, 0x81) 4.647005814s ago: executing program 4 (id=1664): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x3, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socket(0x15, 0x5, 0x0) read$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000200)="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", 0x17b) read$auto(r1, 0x0, 0x1f40) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) 4.285052958s ago: executing program 6 (id=1665): mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) write$auto(0xffffffffffffffff, 0x0, 0x7fffffff) mmap$auto(0x0, 0x771c, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x2, 0x1) setrlimit$auto(0x1000000007, 0x0) readv$auto(0x0, 0x0, 0x3) socket(0x25, 0x5, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/15/effective_affinity_list\x00', 0x4c00, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket(0x28, 0x5, 0x8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0) ioctl$auto_BLKRASET(r0, 0x1262, 0x0) mmap$auto(0x2000000000000, 0xfffffffffffffffe, 0x8, 0x810, 0xffffffffffffffff, 0x5d63) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000030c0), 0x7) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x10a00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.816493914s ago: executing program 1 (id=1666): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x288000, 0x0) r1 = ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000040)=0x1) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000080)={0x9, @raw=0xfff, @raw, 0x1, 0x7, '\x00', {0x5, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2, 0xfff, 0x4, {0xfffffffffffffff7, 0x4}, {0x80, 0x2}, {0x242}, 0x70000000000000, 0x8001, 0x7, 0x9, 0x4, 0x8, 0x1000, 0x1, 0xffed, 0x4, '\x00', 0x7, 0x9, 0xc7d1, 0x40}}) r3 = geteuid() setreuid$auto(r2, r3) r4 = waitid$auto_P_ALL(0x0, 0xfffffffd, &(0x7f0000000140)={@siginfo_0_0={0x9, 0x37, 0xbf, @_sigchld={0xffffffffffffffff, r3, 0xffffffff, 0x1, 0x58e3}}}, 0x2800000, &(0x7f00000001c0)={{0x6, 0xfff}, {0xfffffffffffffffd}, 0x5, 0x7fffffff, 0x3, 0xb08, 0x3ff, 0x42d1, 0x1, 0x40, 0x9, 0xc, 0x8, 0x2, 0xa76, 0x8000}) get_robust_list$auto(r4, &(0x7f0000000380)=&(0x7f0000000340)={{&(0x7f00000002c0)={&(0x7f0000000280)}}, 0x8, &(0x7f0000000300)}, &(0x7f00000003c0)=0x9) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f0000000400)={0x5, 0x8, 0x7, [0x1, 0x7, 0x200000000, 0x84, 0x1, 0x400, 0x3]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bind$auto(r0, &(0x7f00000004c0)=@xdp={0x2c, 0xe, r5, 0x11}, 0x9) mmap$auto(0x2, 0x4bb, 0x3, 0x14, r0, 0x8000000000000000) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7ee}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, 'V&-'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000680), r1) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x20008010) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x308, r9, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x2e1, 0x2d, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @typed={0x8, 0x17, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0xad, 0xa1, 0x0, 0x1, [@nested={0x4, 0x40}, @generic="0264c14093f0aad23429d9832c94a8f5b110ac1b9658e562b0f46d", @generic="2734e60093677efb7eb2cbfc87381cfc42419534093f6a8c523278e3cf8cfbda6df49a3d0a060034e23b3778da72fbe59364a608ce5649e7237e295e830148ca52e9be439c984ea2f4b8fd1fad07318250e5fb1c2bb887a7ff34d13854dddcf649066673db20037e9f9f9ea5b3f10f49e0577c2b2a8bffe6c292b3e7593e776ef25cb5fc01533084526c"]}, @nested={0x100, 0x80, 0x0, 0x1, [@nested={0x4, 0xa0}, @nested={0x4, 0xd0}, @typed={0xf2, 0x140, 0x0, 0x0, @binary="deaca5f7803b69dd1c7d964ce39e657277cc36fa5b9513758d35f871d52d3b2f29b17ae59f43e5adf52303861697574bdbaca1fdb36500154825011bf1860f798ab5caf5f926022a909f75a1bec1713583791b71b04e1da3839f22354c10495e698a49b0d049b807a38bf9b0c987d903a3e434a1594f11ad04933d4b7a7d634fd272dc5ae48935a068c839588f41968ca53fe3976c3a143087c108afb466fe667531d46110748ffd7424e6d0c4f4d72af9a07948dcbfef488afa3412847cba308c0dcb44de29e167e27cdd53cbb350bd874353cd1a226cde43a84701710b3c381f4b28763f4d95d5592c5e750004"}]}, @generic="3c6ac4c5e00214cb79e093ae4667afff18c3b599d85bc161e41e8baa9f6ed3701582ac9de5e4cb67af3632afb46dd7cd39dbd64bfa2789cb0ea5759cfdc997d4d9540f181151056c8405952772c1244c4466333eb8b67e5fd4f7484b30f52e72d7b389a4bc3d535e8e9cb478da2a95ac2a8bf32d9b87d3111e293b16543f712bb1575eacc631e1185489f3c822b58fc36bc51569594edf3ea4e3c21daf8e0d62b8cdfd702f0a9fedb222fe2446", @nested={0x6d, 0x11d, 0x0, 0x1, [@nested={0x4, 0x98}, @generic="f8fd179485f3abc0bf8e7b43656829adc187c030c0f0067c56035363c81041f9d382a7066f66d1f678a56d270dfa31c0b5a7d486c240e1745efb9c06dc7d43711d30873e4d2a0046d0668b19600ecb4776f0ec7c5e324ee50c62f0280d95f05486ecede405"]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x20004048}, 0x802) lsm_list_modules$auto(&(0x7f0000000bc0)=0x100000000, &(0x7f0000000c00)=0x8, 0x7) r10 = socket(0x21, 0x4, 0x4) sendto$auto(r10, &(0x7f0000000c40)="02c9c2033ad0a320b598241f20d55be5c35e882df3012af07c88b6a50b90c6305adf5e58c859adb816d59037f257429e2ff07bd5702b3d70d59465042cb6c147354ddf1364f02f2280d1e5149e54132130ae3ffca1fbc9274dfbd26c920f81b1e2a61011", 0x1, 0x0, &(0x7f0000000cc0)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x8) r11 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x400c00, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000d40)=0xfffffffb) ioctl$auto_USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000d80)=0xf251) r12 = syz_clone(0x149669f209163eef, &(0x7f0000000dc0)="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", 0x1000, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="9605110215640e02982342a689e6d698cec45201d48ca58c4985c2678edb7044816314613daf75542a9a84abceb25cbe57459ec75febdc0de8b4458cbf4c1b11c808b7dc8e051e44b1a27963c119d9814ac216ae3947ee81135214273dd035ec353347b44c7b63b8fa3337a292745a1dcab2a6792ee4765642d5f2457975dd22944f311cb822790af8c85f522505ae775e06dcb7ca1c4112265d59db216e97e491cfb6018f6ecd265b94015886153eca2e3c58c90d3ee6ec3781cbf17ca3c4bb0fa6") r13 = prctl$auto(0x5, 0x1, r12, 0xfffffffffffff800, 0x4) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r13, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x18, r9, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_EPCS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x10) setsockopt$auto_SO_RCVBUF(r11, 0xffffffff, 0x8, &(0x7f0000002040)='nl80211\x00', 0x7) r14 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), r7) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002100)={'batadv0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r13, &(0x7f0000002300)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000022c0)={&(0x7f0000002140)={0x180, r14, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf03}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) 3.574628292s ago: executing program 1 (id=1667): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_get$auto(0x1, 0x0) (async) ioprio_get$auto(0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0xe2, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x600000, 0x0) set_robust_list$auto(&(0x7f00000001c0)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x1b2, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000100)}}}, 0xfffffffffffffffb) (async) set_robust_list$auto(&(0x7f00000001c0)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x1b2, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000100)}}}, 0xfffffffffffffffb) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c004ea5", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf256000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x4000000) 3.317738225s ago: executing program 6 (id=1668): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) timerfd_create$auto(0x7, 0x0) (async) timerfd_gettime$auto(0x4, 0x0) (async) timerfd_settime$auto(0xffffffffffffffff, 0x2, &(0x7f0000000040)={{0x0, 0x80000000}, {0x1200, 0xe}}, 0x0) pipe$auto(&(0x7f00000000c0)=r0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000003a00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="016795b234d82340bf2502000000040001801c000180150039800400eb8008002d00", @ANYRES32, @ANYBLOB="5ecb8698ec000000"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) (async) r3 = gettid() kill$auto(r3, 0x11) (async) r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0xc4200, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe) (async) clone$auto(0x3, 0x10001, 0x0, 0x0, 0x9) (async) getsockopt$auto_SO_PASSCRED(r1, 0x170c, 0x10, &(0x7f0000000000)='{{-^]$!\x00', &(0x7f0000000080)=0x2) 3.248957573s ago: executing program 1 (id=1669): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x9, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x20800}, 0x4, 0x4008) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = socket(0xf, 0x5, 0x20) setsockopt$auto(r2, 0x6, 0xc, 0x0, 0x70000002) getsockopt$auto(r2, 0x4, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) mmap$auto(0x0, 0x4020006, 0xdf, 0xeb5, 0x401, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(r3, 0x5609, r4) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, r3, 0x8002) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c03, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3ef84, 0x6) madvise$auto(0x7, 0x8, 0x1a) socket(0x6, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) 2.940459678s ago: executing program 6 (id=1670): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x24008010) r0 = socket(0x10, 0x2, 0x0) r1 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x43ff) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0x40000, 0x0) dup2$auto(0x0, 0x3) read$auto_clk_dump_fops_(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000980), 0x400, 0x0) sendfile$auto(r4, r2, &(0x7f00000009c0)=0x100000001, 0x6) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r3, 0x28000) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000000)=0x1) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, 0x0, 0x5, 0x80000000) r7 = epoll_create$auto(0x8) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r0) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x3, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, 0x200, 0x8, 0x8, 0x7, 0x28be, 0x11d, 0x5, 0x1, 0x3}, 0x5) r10 = getpgid$auto(0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\a\x00\x00', @ANYRES16=r8, @ANYBLOB="000125bd7000fddbdf25030000007f010780348b17377b315c340ef1ce9be16cc06c440bd3def74737f6434a3ddfc39277e7677aa8b5e447f7c00c138d8a69b798c7400a4b876a6348904dc446e3d46c162ad7e91bfc65493dbff6fcc29ce441a1eeecbb05c66daa58817d487b5dfff2f6ddc501993b7c595c1c538454dd6ca0eec070525ee1ecf35722f7fc1326683ec31400428004001380040000448004018a8008009000", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="35000500d86f478535d2f3c07c8caac8b7ec13707bbb0aa0d1fab9d74af995251e91990cbb68f163a104d7916aa09818e6c4319e0a00000008000700", @ANYRES32=r3, @ANYBLOB="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"], 0x700}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x579802, 0x0) r11 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r11, 0x0, 0x40) 2.438198697s ago: executing program 4 (id=1671): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x5}, 0x3) mbind$auto(0x0, 0x100000004, 0x100000003, 0x0, 0x6, 0x2) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r2, 0x0, 0x20) mmap$auto(0xff0f200000000000, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x64) io_uring_setup$auto(0x6, 0x0) shmctl$auto_IPC_STAT(0x1, 0x2, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x105c0, 0x0) add_key$auto(0x0, 0x0, 0x0, 0x2, 0x31f) madvise$auto(0x0, 0xffffffffffff0005, 0x17) clone$auto(0x2, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='\xa1\x8f$\xe9\xb95\xf1\xfcygthtool\xaa\x12\a\x93\x95lT\xa9AKP\xda\x95\xae~\xd6\xce\x1dW\xa1\x8a\xf6\xa9X\xf2\x98J[\xf5\x89Ek\x9eA\xa1\xdd\x87@\xf9\vD\xba\xfc\x17\x9ea\xc6\xc8%?\x94\x99)\xca;\x99U\xcd\xa9\xc4O\x90]K\xf4\x97\xe8\xdb\x1c\xfe oX 260 [ 330.435731][ T5829] Bluetooth: hci3: unexpected subevent 0x0d length: 722 > 260 [ 330.450778][ T5829] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 330.450830][ T5829] Bluetooth: hci3: Malformed LE Event: 0x0d [ 330.480148][T10471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.844'. [ 330.949126][T10487] netlink: 346 bytes leftover after parsing attributes in process `syz.4.847'. [ 331.756312][T10494] Invalid ELF header magic: != ELF [ 332.175360][T10509] MTRR 1 not used [ 332.250955][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.849'. [ 333.395881][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.853'. [ 333.738862][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.836087][T10506] bridge_slave_1 (unregistering): left allmulticast mode [ 333.863647][T10506] bridge_slave_1 (unregistering): left promiscuous mode [ 333.894070][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.544494][T10563] FAULT_INJECTION: forcing a failure. [ 335.544494][T10563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.639213][T10563] CPU: 1 UID: 0 PID: 10563 Comm: syz.5.860 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 335.639240][T10563] Tainted: [U]=USER [ 335.639245][T10563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 335.639253][T10563] Call Trace: [ 335.639258][T10563] [ 335.639265][T10563] dump_stack_lvl+0x16c/0x1f0 [ 335.639289][T10563] should_fail_ex+0x512/0x640 [ 335.639312][T10563] should_fail_alloc_page+0xe7/0x130 [ 335.639338][T10563] prepare_alloc_pages+0x3c2/0x610 [ 335.639362][T10563] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 335.639380][T10563] ? __lock_acquire+0x5ca/0x1ba0 [ 335.639403][T10563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.639421][T10563] ? find_held_lock+0x2b/0x80 [ 335.639434][T10563] ? bpf_ksym_find+0x124/0x1c0 [ 335.639454][T10563] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.639468][T10563] ? is_bpf_text_address+0x94/0x1a0 [ 335.639483][T10563] ? kernel_text_address+0x8d/0x100 [ 335.639502][T10563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.639521][T10563] ? policy_nodemask+0xea/0x4e0 [ 335.639537][T10563] alloc_pages_mpol+0x1fb/0x550 [ 335.639554][T10563] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 335.639574][T10563] alloc_pages_noprof+0x131/0x390 [ 335.639591][T10563] __pud_alloc+0x39/0x690 [ 335.639610][T10563] copy_page_range+0x3a6d/0x5fe0 [ 335.639645][T10563] ? mas_destroy+0x5de/0xa20 [ 335.639666][T10563] ? __pfx_copy_page_range+0x10/0x10 [ 335.639686][T10563] ? mas_store+0x93a/0x10c0 [ 335.639704][T10563] ? __pfx___might_resched+0x10/0x10 [ 335.639721][T10563] ? __pfx_mas_store+0x10/0x10 [ 335.639738][T10563] ? __vma_enter_locked+0x163/0x3f0 [ 335.639752][T10563] ? down_write+0x14d/0x200 [ 335.639781][T10563] copy_process+0x862b/0x91a0 [ 335.639810][T10563] ? __pfx_copy_process+0x10/0x10 [ 335.639827][T10563] ? try_to_wake_up+0xa2f/0x1680 [ 335.639847][T10563] ? plist_check_head+0xa3/0x150 [ 335.639860][T10563] ? find_held_lock+0x2b/0x80 [ 335.639877][T10563] ? wake_up_q+0xb0/0x160 [ 335.639891][T10563] ? do_raw_spin_unlock+0x172/0x230 [ 335.639913][T10563] kernel_clone+0xfc/0x960 [ 335.639929][T10563] ? __pfx_futex_wake+0x10/0x10 [ 335.639944][T10563] ? __pfx_kernel_clone+0x10/0x10 [ 335.639971][T10563] __do_sys_clone+0xce/0x120 [ 335.639986][T10563] ? __pfx___do_sys_clone+0x10/0x10 [ 335.640012][T10563] ? rcu_is_watching+0x12/0xc0 [ 335.640030][T10563] do_syscall_64+0xcd/0x230 [ 335.640049][T10563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.640063][T10563] RIP: 0033:0x7f19b8b8e969 [ 335.640075][T10563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.640088][T10563] RSP: 002b:00007f19b9aa8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 335.640103][T10563] RAX: ffffffffffffffda RBX: 00007f19b8db5fa0 RCX: 00007f19b8b8e969 [ 335.640112][T10563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000120000 [ 335.640121][T10563] RBP: 00007f19b8c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 335.640129][T10563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.640138][T10563] R13: 0000000000000000 R14: 00007f19b8db5fa0 R15: 00007fff1d60b538 [ 335.640156][T10563] [ 336.848898][T10583] syz.5.863 (10583): attempted to duplicate a private mapping with mremap. This is not supported. [ 338.045339][T10604] : Can't lookup blockdev [ 340.378068][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 340.911691][T10658] netlink: 206 bytes leftover after parsing attributes in process `syz.1.878'. [ 341.343755][T10656] lo: entered allmulticast mode [ 341.384289][T10656] lo: left allmulticast mode [ 341.476379][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.877'. [ 341.555144][T10663] ptrace attach of "./syz-executor exec"[8561] was attempted by "./syz-executor exec"[10663] [ 341.583736][T10669] netlink: 'syz.3.882': attribute type 11 has an invalid length. [ 341.605720][T10669] netlink: 'syz.3.882': attribute type 11 has an invalid length. [ 342.561701][T10680] netlink: 342 bytes leftover after parsing attributes in process `syz.4.885'. [ 346.251254][T10708] ptrace attach of "./syz-executor exec"[8561] was attempted by "./syz-executor exec"[10708] [ 346.330278][T10718] ptrace attach of "./syz-executor exec"[8561] was attempted by "./syz-executor exec"[10718] [ 349.277734][T10745] netlink: 'syz.4.899': attribute type 1 has an invalid length. [ 351.437571][T10782] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 352.327280][T10798] vivid-003: ================= START STATUS ================= [ 352.449172][T10798] vivid-003: Radio HW Seek Mode: Bounded [ 352.454854][T10798] vivid-003: Radio Programmable HW Seek: false [ 352.591980][T10798] vivid-003: RDS Rx I/O Mode: Block I/O [ 352.638949][T10798] vivid-003: Generate RBDS Instead of RDS: false [ 352.715022][T10798] vivid-003: RDS Reception: true [ 352.797264][T10798] vivid-003: RDS Program Type: 0 inactive [ 352.923550][T10798] vivid-003: RDS PS Name: inactive [ 352.964312][T10798] vivid-003: RDS Radio Text: inactive [ 353.026197][T10798] vivid-003: RDS Traffic Announcement: false inactive [ 353.090197][T10798] vivid-003: RDS Traffic Program: false inactive [ 353.133432][T10805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.142474][T10805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 353.154260][T10798] vivid-003: RDS Music: false inactive [ 353.196659][T10798] vivid-003: ================== END STATUS ================== [ 354.717651][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 354.799700][T10805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.826288][T10805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.857912][T10805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.891696][T10805] CPU0 is offline. [ 355.750398][T10846] ima: policy update failed [ 355.792534][ T30] audit: type=1802 audit(4294982523.487:8): pid=10846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.922" res=0 errno=0 [ 356.263022][T10853] bridge0: port 4(gretap0) entered blocking state [ 356.294082][T10853] bridge0: port 4(gretap0) entered disabled state [ 356.333587][T10853] gretap0: entered allmulticast mode [ 356.403223][T10853] gretap0: entered promiscuous mode [ 356.459526][T10853] bridge0: port 4(gretap0) entered blocking state [ 356.467248][T10853] bridge0: port 4(gretap0) entered forwarding state [ 356.800425][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 356.830354][T10860] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 356.876884][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout [ 356.882922][ T5829] Bluetooth: hci3: command 0x0419 tx timeout [ 356.889079][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 357.017829][T10861] ptm ptm10: ldisc open failed (-12), clearing slot 10 [ 359.788739][T10908] tty tty15: ldisc open failed (-12), clearing slot 14 [ 359.843443][T10913] netlink: 21452 bytes leftover after parsing attributes in process `syz.1.936'. [ 359.947700][T10905] tty tty15: ldisc open failed (-12), clearing slot 14 [ 360.333769][ T5829] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 360.333795][ T5829] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 360.348732][ T5829] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 360.348766][ T5829] Bluetooth: hci4: adv larger than maximum supported [ 360.356108][ T5829] Bluetooth: hci4: adv larger than maximum supported [ 360.363084][ T5829] Bluetooth: hci4: Malformed LE Event: 0x0d [ 365.481165][T10965] FAULT_INJECTION: forcing a failure. [ 365.481165][T10965] name failslab, interval 1, probability 0, space 0, times 0 [ 365.706596][T10965] CPU: 1 UID: 0 PID: 10965 Comm: syz.4.946 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 365.706624][T10965] Tainted: [U]=USER [ 365.706629][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 365.706637][T10965] Call Trace: [ 365.706642][T10965] [ 365.706648][T10965] dump_stack_lvl+0x16c/0x1f0 [ 365.706671][T10965] should_fail_ex+0x512/0x640 [ 365.706689][T10965] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 365.706707][T10965] should_failslab+0xc2/0x120 [ 365.706723][T10965] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 365.706738][T10965] ? alloc_inode+0xc3/0x240 [ 365.706757][T10965] alloc_inode+0xc3/0x240 [ 365.706772][T10965] path_from_stashed+0x2be/0xb00 [ 365.706787][T10965] ? __pfx_path_from_stashed+0x10/0x10 [ 365.706801][T10965] ? do_raw_read_unlock+0x44/0xe0 [ 365.706822][T10965] ns_get_path+0x5f/0x80 [ 365.706841][T10965] proc_ns_get_link+0x121/0x260 [ 365.706862][T10965] ? __pfx_proc_ns_get_link+0x10/0x10 [ 365.706888][T10965] ? __pfx___might_resched+0x10/0x10 [ 365.706906][T10965] ? __pfx_proc_ns_get_link+0x10/0x10 [ 365.706927][T10965] step_into+0x1b22/0x2270 [ 365.706951][T10965] ? __pfx_step_into+0x10/0x10 [ 365.706969][T10965] ? find_held_lock+0x2b/0x80 [ 365.706986][T10965] path_openat+0x749/0x2d40 [ 365.707005][T10965] ? __pfx_path_openat+0x10/0x10 [ 365.707022][T10965] do_filp_open+0x20b/0x470 [ 365.707035][T10965] ? __pfx_do_filp_open+0x10/0x10 [ 365.707059][T10965] ? alloc_fd+0x471/0x7d0 [ 365.707082][T10965] do_sys_openat2+0x11b/0x1d0 [ 365.707099][T10965] ? __pfx_do_sys_openat2+0x10/0x10 [ 365.707121][T10965] __x64_sys_openat+0x174/0x210 [ 365.707138][T10965] ? __pfx___x64_sys_openat+0x10/0x10 [ 365.707156][T10965] ? do_user_addr_fault+0x843/0x1370 [ 365.707173][T10965] do_syscall_64+0xcd/0x230 [ 365.707192][T10965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.707206][T10965] RIP: 0033:0x7f8e7758d2d0 [ 365.707217][T10965] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 365.707230][T10965] RSP: 002b:00007f8e78443f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 365.707243][T10965] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8e7758d2d0 [ 365.707251][T10965] RDX: 0000000000000002 RSI: 00007f8e78443fa0 RDI: 00000000ffffff9c [ 365.707260][T10965] RBP: 00007f8e78443fa0 R08: 0000000000000000 R09: 0000000000000000 [ 365.707268][T10965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 365.707276][T10965] R13: 0000000000000000 R14: 00007f8e777b5fa0 R15: 00007fffd6c6cc38 [ 365.707293][T10965] [ 367.496906][T11006] netlink: 93 bytes leftover after parsing attributes in process `syz.3.951'. [ 371.584993][ T30] audit: type=1806 audit(4294982539.267:9): xattr="0" res=-22 [ 373.066758][T11082] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #1267: comm kworker/u8:3: No space for directory leaf checksum. Please run e2fsck -D. [ 373.186577][T11082] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #1267: comm kworker/u8:3: checksumming directory block 0 [ 374.618396][T11098] FAULT_INJECTION: forcing a failure. [ 374.618396][T11098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.736658][T11098] CPU: 1 UID: 0 PID: 11098 Comm: syz.1.965 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 374.736686][T11098] Tainted: [U]=USER [ 374.736690][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 374.736699][T11098] Call Trace: [ 374.736704][T11098] [ 374.736710][T11098] dump_stack_lvl+0x16c/0x1f0 [ 374.736734][T11098] should_fail_ex+0x512/0x640 [ 374.736761][T11098] should_fail_alloc_page+0xe7/0x130 [ 374.736780][T11098] prepare_alloc_pages+0x3c2/0x610 [ 374.736799][T11098] ? rcu_is_watching+0x12/0xc0 [ 374.736814][T11098] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 374.736830][T11098] ? kasan_save_stack+0x33/0x60 [ 374.736845][T11098] ? cgroup_rstat_updated+0x2a/0xb20 [ 374.736870][T11098] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 374.736893][T11098] ? __lock_acquire+0x5ca/0x1ba0 [ 374.736911][T11098] ? __lock_acquire+0x5ca/0x1ba0 [ 374.736929][T11098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 374.736956][T11098] ? policy_nodemask+0xea/0x4e0 [ 374.736977][T11098] alloc_pages_mpol+0x1fb/0x550 [ 374.736995][T11098] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 374.737013][T11098] ? __lock_acquire+0x5ca/0x1ba0 [ 374.737035][T11098] folio_alloc_mpol_noprof+0x36/0x2f0 [ 374.737054][T11098] vma_alloc_folio_noprof+0xed/0x1e0 [ 374.737072][T11098] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 374.737095][T11098] do_pte_missing+0x223d/0x3fb0 [ 374.737115][T11098] __handle_mm_fault+0x103d/0x2a40 [ 374.737133][T11098] ? __pfx___handle_mm_fault+0x10/0x10 [ 374.737145][T11098] ? __pte_offset_map_lock+0x155/0x2f0 [ 374.737162][T11098] ? find_held_lock+0x2b/0x80 [ 374.737173][T11098] ? find_held_lock+0x2b/0x80 [ 374.737196][T11098] handle_mm_fault+0x3fe/0xad0 [ 374.737213][T11098] __get_user_pages+0x771/0x36f0 [ 374.737237][T11098] ? __pfx_mt_find+0x10/0x10 [ 374.737257][T11098] ? __pfx___get_user_pages+0x10/0x10 [ 374.737283][T11098] populate_vma_page_range+0x278/0x3a0 [ 374.737296][T11098] ? __pfx_populate_vma_page_range+0x10/0x10 [ 374.737308][T11098] ? __pfx_find_vma_intersection+0x10/0x10 [ 374.737327][T11098] ? do_mmap+0x69c/0x11b0 [ 374.737346][T11098] __mm_populate+0x1d8/0x380 [ 374.737361][T11098] ? __pfx___mm_populate+0x10/0x10 [ 374.737375][T11098] ? up_write+0x1b2/0x520 [ 374.737394][T11098] vm_mmap_pgoff+0x362/0x450 [ 374.737415][T11098] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 374.737437][T11098] ? __x64_sys_futex+0x1e0/0x4c0 [ 374.737449][T11098] ? __x64_sys_futex+0x1e9/0x4c0 [ 374.737465][T11098] ksys_mmap_pgoff+0x7d/0x5c0 [ 374.737483][T11098] ? rcu_is_watching+0x12/0xc0 [ 374.737497][T11098] __x64_sys_mmap+0x125/0x190 [ 374.737512][T11098] do_syscall_64+0xcd/0x230 [ 374.737531][T11098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.737545][T11098] RIP: 0033:0x7fe05f58e969 [ 374.737557][T11098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.737570][T11098] RSP: 002b:00007fe0603fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 374.737583][T11098] RAX: ffffffffffffffda RBX: 00007fe05f7b5fa0 RCX: 00007fe05f58e969 [ 374.737591][T11098] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 374.737599][T11098] RBP: 00007fe05f610ab1 R08: 0000000000000002 R09: 0000000000008000 [ 374.737607][T11098] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 374.737615][T11098] R13: 0000000000000000 R14: 00007fe05f7b5fa0 R15: 00007fff90262748 [ 374.737632][T11098] [ 376.695250][T11111] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 377.115659][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.165777][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.199138][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.242192][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.249898][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.612917][T11112] chnl_net:caif_netlink_parms(): no params data found [ 378.725430][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.732676][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.988100][T11134] netlink: 326 bytes leftover after parsing attributes in process `syz.1.971'. [ 379.145955][ T7332] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.356843][ T5841] Bluetooth: hci0: command tx timeout [ 379.910186][ T7332] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.743946][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.872431][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.995216][T11112] bridge_slave_0: entered allmulticast mode [ 381.058485][T11112] bridge_slave_0: entered promiscuous mode [ 381.302447][ T5845] udevd[5845]: inotify_add_watch(7, /dev/nbd9, 10) failed: No such file or directory [ 381.436798][ T5829] Bluetooth: hci0: command tx timeout [ 381.520503][ T7332] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.020623][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.082377][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.137415][T11112] bridge_slave_1: entered allmulticast mode [ 382.197580][T11112] bridge_slave_1: entered promiscuous mode [ 382.603176][ T7332] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.733690][T11112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.971078][T11112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.438131][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 383.465100][T11112] team0: Port device team_slave_0 added [ 383.474616][T11169] FAULT_INJECTION: forcing a failure. [ 383.474616][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 383.519677][ T5841] Bluetooth: hci0: command tx timeout [ 383.588664][T11112] team0: Port device team_slave_1 added [ 383.706572][T11169] CPU: 1 UID: 0 PID: 11169 Comm: syz.3.976 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 383.706599][T11169] Tainted: [U]=USER [ 383.706604][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 383.706612][T11169] Call Trace: [ 383.706618][T11169] [ 383.706624][T11169] dump_stack_lvl+0x16c/0x1f0 [ 383.706648][T11169] should_fail_ex+0x512/0x640 [ 383.706666][T11169] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 383.706689][T11169] should_failslab+0xc2/0x120 [ 383.706705][T11169] __kmalloc_cache_noprof+0x6a/0x3e0 [ 383.706725][T11169] ? resv_map_alloc+0x7e/0x400 [ 383.706744][T11169] resv_map_alloc+0x7e/0x400 [ 383.706760][T11169] hugetlb_reserve_pages+0x799/0xd90 [ 383.706782][T11169] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 383.706800][T11169] ? atime_needs_update+0x8b/0x710 [ 383.706823][T11169] hugetlbfs_file_mmap+0x4a1/0x730 [ 383.706841][T11169] __mmap_region+0x1485/0x27c0 [ 383.706859][T11169] ? __pfx___mmap_region+0x10/0x10 [ 383.706872][T11169] ? kernel_text_address+0x8d/0x100 [ 383.706905][T11169] ? stack_depot_save_flags+0x28/0xa50 [ 383.706943][T11169] ? trace_cap_capable+0x18d/0x200 [ 383.706958][T11169] ? cap_capable+0xb3/0x250 [ 383.706973][T11169] mmap_region+0x1ab/0x3f0 [ 383.706991][T11169] do_mmap+0xd8e/0x11b0 [ 383.707013][T11169] ? __pfx_do_mmap+0x10/0x10 [ 383.707031][T11169] ? __pfx_down_write_killable+0x10/0x10 [ 383.707054][T11169] vm_mmap_pgoff+0x281/0x450 [ 383.707083][T11169] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 383.707101][T11169] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 383.707120][T11169] ? hugetlbfs_get_inode+0x31f/0x730 [ 383.707143][T11169] ksys_mmap_pgoff+0x1c8/0x5c0 [ 383.707163][T11169] ? rcu_is_watching+0x12/0xc0 [ 383.707177][T11169] __x64_sys_mmap+0x125/0x190 [ 383.707192][T11169] do_syscall_64+0xcd/0x230 [ 383.707211][T11169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.707225][T11169] RIP: 0033:0x7f343858e969 [ 383.707237][T11169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.707249][T11169] RSP: 002b:00007f3439459038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 383.707262][T11169] RAX: ffffffffffffffda RBX: 00007f34387b5fa0 RCX: 00007f343858e969 [ 383.707271][T11169] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 383.707279][T11169] RBP: 00007f3438610ab1 R08: 000000000000000d R09: 0000300000000000 [ 383.707287][T11169] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 383.707296][T11169] R13: 0000000000000000 R14: 00007f34387b5fa0 R15: 00007fff81f0c938 [ 383.707313][T11169] [ 385.046406][T11112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.053743][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.360237][T11112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.473379][ T7332] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.539397][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'. [ 385.597712][ T5841] Bluetooth: hci0: command tx timeout [ 385.614210][T11188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'. [ 385.718897][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 385.815676][T11112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.908743][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.159629][T11112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.959621][T11112] hsr_slave_0: entered promiscuous mode [ 387.003205][T11191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.023109][T11112] hsr_slave_1: entered promiscuous mode [ 387.059286][T11191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.065315][T11191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.107080][T11112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.162851][T11112] Cannot create hsr debugfs directory [ 387.188669][T11191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.194636][T11191] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 387.294973][T11191] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 387.421292][T11191] CPU0 is offline. [ 388.258873][ T7332] bridge_slave_0: left allmulticast mode [ 388.264551][ T7332] bridge_slave_0: left promiscuous mode [ 388.341775][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.646552][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 389.116698][ T5829] Bluetooth: hci3: command 0x0419 tx timeout [ 389.122750][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 389.277185][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.397452][ T7332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.438663][ T7332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.478309][ T7332] bond0 (unregistering): Released all slaves [ 391.356689][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.481896][ T7332] hsr_slave_0: left promiscuous mode [ 391.558619][ T7332] hsr_slave_1: left promiscuous mode [ 391.564447][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.627883][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.708067][ T7332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.715485][ T7332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.831644][ T7332] veth1_macvtap: left promiscuous mode [ 391.881796][ T7332] veth0_macvtap: left promiscuous mode [ 391.916413][ T7332] veth1_vlan: left promiscuous mode [ 393.441055][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.015216][ T7332] team0 (unregistering): Port device team_slave_1 removed [ 394.288248][ T7332] team0 (unregistering): Port device team_slave_0 removed [ 396.711426][T11112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 396.869876][T11112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.003891][T11112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.136913][T11112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.752614][T11112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.873154][T11112] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.185884][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.193054][ T9956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.322471][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.329656][ T9956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.625473][T11290] ima: policy update failed [ 398.660877][ T30] audit: type=1802 audit(4294982566.357:10): pid=11290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.987" res=0 errno=0 [ 400.271905][T11112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.377761][ T5829] Bluetooth: hci1: unexpected event 0x3e length: 728 > 260 [ 401.377785][ T5829] Bluetooth: hci1: unexpected subevent 0x03 length: 727 > 9 [ 402.074966][T11112] veth0_vlan: entered promiscuous mode [ 402.261008][T11112] veth1_vlan: entered promiscuous mode [ 402.788410][T11112] veth0_macvtap: entered promiscuous mode [ 402.895756][T11370] zram: Removed device: zram0 [ 403.235212][T11112] veth1_macvtap: entered promiscuous mode [ 403.810854][T11377] ptrace attach of "./syz-executor exec"[7327] was attempted by "./syz-executor exec"[11377] [ 404.155630][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.250857][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.337677][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.404134][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.486592][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.540496][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.604435][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.686928][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.750130][T11112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.846256][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.927862][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.001660][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.093528][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.158349][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.238372][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.302712][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.373811][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.445731][T11112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.628445][T11112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.708351][T11112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.756771][T11112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.796535][T11112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.929890][T11411] kAFS: unparsable volume name [ 407.225108][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.318678][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.390245][ T9960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.466608][ T9960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.039261][T11434] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1007'. [ 408.217035][T11436] random: crng reseeded on system resumption [ 418.818117][T11622] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 422.000499][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 422.170239][T11660] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1043'. [ 422.195627][T11658] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1042'. [ 425.638558][T11716] can: request_module (can-proto-0) failed. [ 425.998516][T11716] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input17 [ 426.491724][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1053'. [ 430.394969][ T5495] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 430.509576][ T5495] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2004: comm dhcpcd: checksumming directory block 0 [ 430.665718][ T5495] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #2004: comm dhcpcd: No space for directory leaf checksum. Please run e2fsck -D. [ 430.827241][ T5495] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #2004: comm dhcpcd: checksumming directory block 0 [ 430.862613][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1064'. [ 430.865124][T11820] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1064'. [ 430.865141][T11820] tc_dump_action: action bad kind [ 431.940737][T11807] tty tty61: ldisc open failed (-12), clearing slot 60 [ 432.904500][T11860] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 433.067686][T11860] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 433.191807][T11860] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 433.327706][T11860] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 434.490203][T11893] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 434.611006][T11893] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 434.717731][T11893] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 434.901002][T11893] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 435.290969][T11901] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 435.424264][T11901] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 435.524032][T11901] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 435.655479][T11901] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 436.147027][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1079'. [ 436.748644][T11921] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 436.914998][T11921] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 437.022671][T11921] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 437.151452][T11921] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 437.639316][T11928] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 437.778856][T11928] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 437.878308][T11928] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 438.012433][T11928] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 439.403480][T11940] vivid-007: ================= START STATUS ================= [ 439.452230][T11940] vivid-007: Generate PTS: true [ 439.517416][T11940] vivid-007: Generate SCR: true [ 439.539975][T11940] tpg source WxH: 640x360 (Y'CbCr) [ 439.545118][T11940] tpg field: 1 [ 439.633309][T11940] tpg crop: (0,0)/640x360 [ 439.679402][T11940] tpg compose: (0,0)/640x360 [ 439.715107][T11940] tpg colorspace: 8 [ 439.741259][T11940] tpg transfer function: 0/0 [ 439.745886][T11940] tpg Y'CbCr encoding: 0/0 [ 439.826902][T11940] tpg quantization: 0/0 [ 439.831122][T11940] tpg RGB range: 0/2 [ 439.834999][T11940] vivid-007: ================== END STATUS ================== [ 440.159822][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.169557][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.178617][T11948] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 440.403955][T11952] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 440.568347][T11952] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 440.665727][T11959] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input18 [ 440.722989][T11952] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 440.876737][T11952] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 442.357367][T11981] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 442.510701][T11981] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 442.525185][T11985] netlink: 'syz.6.1093': attribute type 1 has an invalid length. [ 442.667397][T11981] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 442.854883][T11981] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 443.271230][T11994] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 443.438942][T11994] EXT4-fs error (device sda1): htree_dirblock_to_tree:1053: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 443.571799][T11994] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 443.735149][T11994] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 444.117977][T12018] netlink: 86 bytes leftover after parsing attributes in process `syz.4.1101'. [ 444.782651][T12021] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 448.227198][T12054] Invalid ELF header magic: != ELF [ 448.374432][T12057] FAULT_INJECTION: forcing a failure. [ 448.374432][T12057] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.514577][T12057] CPU: 1 UID: 0 PID: 12057 Comm: syz.4.1109 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 448.514605][T12057] Tainted: [U]=USER [ 448.514610][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 448.514618][T12057] Call Trace: [ 448.514623][T12057] [ 448.514629][T12057] dump_stack_lvl+0x16c/0x1f0 [ 448.514654][T12057] should_fail_ex+0x512/0x640 [ 448.514676][T12057] should_fail_alloc_page+0xe7/0x130 [ 448.514694][T12057] prepare_alloc_pages+0x3c2/0x610 [ 448.514713][T12057] ? rcu_is_watching+0x12/0xc0 [ 448.514728][T12057] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 448.514748][T12057] ? __lock_acquire+0x5ca/0x1ba0 [ 448.514767][T12057] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 448.514788][T12057] ? __lock_acquire+0x5ca/0x1ba0 [ 448.514806][T12057] ? __lock_acquire+0x5ca/0x1ba0 [ 448.514822][T12057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 448.514841][T12057] ? policy_nodemask+0xea/0x4e0 [ 448.514858][T12057] alloc_pages_mpol+0x1fb/0x550 [ 448.514874][T12057] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 448.514889][T12057] ? __lock_acquire+0x5ca/0x1ba0 [ 448.514908][T12057] folio_alloc_mpol_noprof+0x36/0x2f0 [ 448.514927][T12057] vma_alloc_folio_noprof+0xed/0x1e0 [ 448.514944][T12057] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 448.514967][T12057] do_pte_missing+0x223d/0x3fb0 [ 448.514987][T12057] __handle_mm_fault+0x103d/0x2a40 [ 448.515005][T12057] ? __pfx___handle_mm_fault+0x10/0x10 [ 448.515016][T12057] ? __pte_offset_map_lock+0x155/0x2f0 [ 448.515034][T12057] ? find_held_lock+0x2b/0x80 [ 448.515045][T12057] ? find_held_lock+0x2b/0x80 [ 448.515069][T12057] handle_mm_fault+0x3fe/0xad0 [ 448.515084][T12057] __get_user_pages+0x771/0x36f0 [ 448.515108][T12057] ? __pfx_mt_find+0x10/0x10 [ 448.515128][T12057] ? __pfx___get_user_pages+0x10/0x10 [ 448.515153][T12057] populate_vma_page_range+0x278/0x3a0 [ 448.515167][T12057] ? __pfx_populate_vma_page_range+0x10/0x10 [ 448.515178][T12057] ? __pfx_find_vma_intersection+0x10/0x10 [ 448.515197][T12057] ? do_mmap+0x69c/0x11b0 [ 448.515217][T12057] __mm_populate+0x1d8/0x380 [ 448.515230][T12057] ? __pfx___mm_populate+0x10/0x10 [ 448.515243][T12057] ? up_write+0x1b2/0x520 [ 448.515271][T12057] vm_mmap_pgoff+0x362/0x450 [ 448.515293][T12057] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 448.515317][T12057] ? __x64_sys_futex+0x1e0/0x4c0 [ 448.515331][T12057] ? __x64_sys_futex+0x1e9/0x4c0 [ 448.515348][T12057] ksys_mmap_pgoff+0x7d/0x5c0 [ 448.515367][T12057] ? rcu_is_watching+0x12/0xc0 [ 448.515380][T12057] __x64_sys_mmap+0x125/0x190 [ 448.515395][T12057] do_syscall_64+0xcd/0x230 [ 448.515414][T12057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.515428][T12057] RIP: 0033:0x7f8e7758e969 [ 448.515441][T12057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.515453][T12057] RSP: 002b:00007f8e78444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 448.515467][T12057] RAX: ffffffffffffffda RBX: 00007f8e777b5fa0 RCX: 00007f8e7758e969 [ 448.515476][T12057] RDX: 00000000000000db RSI: 0000000000400008 RDI: 0000000000000000 [ 448.515484][T12057] RBP: 00007f8e77610ab1 R08: 0000000000000009 R09: 0000000000008000 [ 448.515492][T12057] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 448.515500][T12057] R13: 0000000000000000 R14: 00007f8e777b5fa0 R15: 00007fffd6c6cc38 [ 448.515519][T12057] [ 450.110570][T12073] busy [ 452.067518][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 452.090533][T12093] Invalid ELF header magic: != ELF [ 452.897920][T12124] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1122'. [ 453.064671][T12121] can: request_module (can-proto-3) failed. [ 455.658748][T12154] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 459.122439][T12212] can: request_module (can-proto-5) failed. [ 459.145137][T12217] : Can't lookup blockdev [ 459.554371][T12222] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1139'. [ 459.687311][T12226] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 460.110854][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 460.180324][T12224] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1138'. [ 461.525639][T12222] syz.6.1139 (12222) used greatest stack depth: 21272 bytes left [ 463.468659][T12259] GUP no longer grows the stack in syz.3.1146 (12259): 14000-401000 (4000) [ 463.614324][T12259] CPU: 1 UID: 0 PID: 12259 Comm: syz.3.1146 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 463.614351][T12259] Tainted: [U]=USER [ 463.614356][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 463.614365][T12259] Call Trace: [ 463.614370][T12259] [ 463.614376][T12259] dump_stack_lvl+0x16c/0x1f0 [ 463.614400][T12259] gup_vma_lookup+0x1d2/0x220 [ 463.614422][T12259] __get_user_pages+0x234/0x36f0 [ 463.614447][T12259] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 463.614464][T12259] ? look_up_lock_class+0x59/0x150 [ 463.614481][T12259] ? __pfx___get_user_pages+0x10/0x10 [ 463.614500][T12259] ? process_vm_rw+0x216/0x2c0 [ 463.614513][T12259] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 463.614528][T12259] ? do_syscall_64+0xcd/0x230 [ 463.614550][T12259] __gup_longterm_locked+0x20d/0x1850 [ 463.614575][T12259] ? __pfx___gup_longterm_locked+0x10/0x10 [ 463.614603][T12259] pin_user_pages_remote+0xed/0x140 [ 463.614624][T12259] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 463.614642][T12259] ? mm_access+0x22d/0x2e0 [ 463.614664][T12259] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 463.614688][T12259] ? futex_wait_queue+0x14c/0x220 [ 463.614705][T12259] ? futex_unqueue+0xba/0x140 [ 463.614722][T12259] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 463.614740][T12259] ? iovec_from_user+0xbb/0x140 [ 463.614768][T12259] ? iovec_from_user+0xbb/0x140 [ 463.614788][T12259] process_vm_rw+0x216/0x2c0 [ 463.614805][T12259] ? __pfx_process_vm_rw+0x10/0x10 [ 463.614848][T12259] ? xfd_validate_state+0x5d/0x180 [ 463.614875][T12259] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 463.614893][T12259] ? do_syscall_64+0x91/0x230 [ 463.614911][T12259] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.614928][T12259] do_syscall_64+0xcd/0x230 [ 463.614947][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.614960][T12259] RIP: 0033:0x7f343858e969 [ 463.614972][T12259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.614984][T12259] RSP: 002b:00007f3439438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 463.614997][T12259] RAX: ffffffffffffffda RBX: 00007f34387b6080 RCX: 00007f343858e969 [ 463.615006][T12259] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000573 [ 463.615014][T12259] RBP: 00007f3438610ab1 R08: 0000000000000003 R09: 0000000000000000 [ 463.615026][T12259] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 463.615034][T12259] R13: 0000000000000000 R14: 00007f34387b6080 R15: 00007fff81f0c938 [ 463.615051][T12259] [ 465.355076][T12292] zswap: compressor not available [ 467.053876][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1161'. [ 467.141490][T12330] HfR: entered promiscuous mode [ 467.507752][T12331] HfR: left promiscuous mode [ 470.241527][T12378] netlink: 138 bytes leftover after parsing attributes in process `syz.6.1168'. [ 472.577394][T12404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.618406][T12404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.678236][T12404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.758532][T12404] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.764680][T12404] CPU0 is offline. [ 472.997229][T12427] FAULT_INJECTION: forcing a failure. [ 472.997229][T12427] name failslab, interval 1, probability 0, space 0, times 0 [ 473.132037][T12434] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1179'. [ 473.147057][T12427] CPU: 1 UID: 0 PID: 12427 Comm: syz.3.1178 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 473.147083][T12427] Tainted: [U]=USER [ 473.147088][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 473.147096][T12427] Call Trace: [ 473.147101][T12427] [ 473.147107][T12427] dump_stack_lvl+0x16c/0x1f0 [ 473.147131][T12427] should_fail_ex+0x512/0x640 [ 473.147150][T12427] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 473.147166][T12427] should_failslab+0xc2/0x120 [ 473.147182][T12427] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 473.147196][T12427] ? d_instantiate+0x77/0x90 [ 473.147210][T12427] ? alloc_empty_file+0x55/0x1e0 [ 473.147228][T12427] alloc_empty_file+0x55/0x1e0 [ 473.147245][T12427] alloc_file_pseudo+0x13a/0x230 [ 473.147261][T12427] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 473.147278][T12427] ? alloc_fd+0x471/0x7d0 [ 473.147299][T12427] sock_alloc_file+0x50/0x210 [ 473.147316][T12427] __sys_socket+0x1c0/0x260 [ 473.147335][T12427] ? __pfx___sys_socket+0x10/0x10 [ 473.147354][T12427] ? do_user_addr_fault+0x843/0x1370 [ 473.147369][T12427] __x64_sys_socket+0x72/0xb0 [ 473.147386][T12427] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.147403][T12427] do_syscall_64+0xcd/0x230 [ 473.147422][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.147435][T12427] RIP: 0033:0x7f3438590887 [ 473.147447][T12427] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.147459][T12427] RSP: 002b:00007f3439457fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 473.147472][T12427] RAX: ffffffffffffffda RBX: 00007f34387b5fa0 RCX: 00007f3438590887 [ 473.147481][T12427] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 473.147489][T12427] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 473.147496][T12427] R10: 0000200000002c00 R11: 0000000000000286 R12: 0000000000000000 [ 473.147503][T12427] R13: 0000000000000000 R14: 00007f34387b5fa0 R15: 00007fff81f0c938 [ 473.147520][T12427] [ 473.358887][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.366499][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.638416][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 474.720121][ T5829] Bluetooth: hci3: command 0x0419 tx timeout [ 474.796647][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.970620][T12448] FAULT_INJECTION: forcing a failure. [ 474.970620][T12448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 475.218681][T12448] CPU: 1 UID: 0 PID: 12448 Comm: syz.3.1181 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 475.218707][T12448] Tainted: [U]=USER [ 475.218712][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 475.218720][T12448] Call Trace: [ 475.218725][T12448] [ 475.218730][T12448] dump_stack_lvl+0x16c/0x1f0 [ 475.218753][T12448] should_fail_ex+0x512/0x640 [ 475.218775][T12448] should_fail_alloc_page+0xe7/0x130 [ 475.218793][T12448] prepare_alloc_pages+0x3c2/0x610 [ 475.218813][T12448] ? rcu_is_watching+0x12/0xc0 [ 475.218827][T12448] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 475.218846][T12448] ? cgroup_rstat_updated+0x2a/0xb20 [ 475.218870][T12448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 475.218889][T12448] ? lru_gen_add_folio+0x1a4/0xef0 [ 475.218907][T12448] ? __lock_acquire+0x5ca/0x1ba0 [ 475.218926][T12448] ? __lock_acquire+0x5ca/0x1ba0 [ 475.218941][T12448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 475.218960][T12448] ? policy_nodemask+0xea/0x4e0 [ 475.218977][T12448] alloc_pages_mpol+0x1fb/0x550 [ 475.218993][T12448] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 475.219009][T12448] ? __lock_acquire+0x5ca/0x1ba0 [ 475.219028][T12448] folio_alloc_mpol_noprof+0x36/0x2f0 [ 475.219046][T12448] vma_alloc_folio_noprof+0xed/0x1e0 [ 475.219064][T12448] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 475.219087][T12448] do_pte_missing+0x223d/0x3fb0 [ 475.219106][T12448] __handle_mm_fault+0x103d/0x2a40 [ 475.219124][T12448] ? __pfx___handle_mm_fault+0x10/0x10 [ 475.219136][T12448] ? __pte_offset_map_lock+0x155/0x2f0 [ 475.219154][T12448] ? find_held_lock+0x2b/0x80 [ 475.219165][T12448] ? find_held_lock+0x2b/0x80 [ 475.219189][T12448] handle_mm_fault+0x3fe/0xad0 [ 475.219205][T12448] __get_user_pages+0x771/0x36f0 [ 475.219247][T12448] ? __pfx_mt_find+0x10/0x10 [ 475.219267][T12448] ? __pfx___get_user_pages+0x10/0x10 [ 475.219293][T12448] populate_vma_page_range+0x278/0x3a0 [ 475.219306][T12448] ? __pfx_populate_vma_page_range+0x10/0x10 [ 475.219318][T12448] ? __pfx_find_vma_intersection+0x10/0x10 [ 475.219338][T12448] ? do_mmap+0x69c/0x11b0 [ 475.219357][T12448] __mm_populate+0x1d8/0x380 [ 475.219371][T12448] ? __pfx___mm_populate+0x10/0x10 [ 475.219384][T12448] ? up_write+0x1b2/0x520 [ 475.219404][T12448] vm_mmap_pgoff+0x362/0x450 [ 475.219424][T12448] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 475.219442][T12448] ? find_held_lock+0x2b/0x80 [ 475.219456][T12448] ? __x64_sys_futex+0x1e0/0x4c0 [ 475.219469][T12448] ? __x64_sys_futex+0x1e9/0x4c0 [ 475.219485][T12448] ksys_mmap_pgoff+0x7d/0x5c0 [ 475.219503][T12448] ? rcu_is_watching+0x12/0xc0 [ 475.219516][T12448] __x64_sys_mmap+0x125/0x190 [ 475.219532][T12448] do_syscall_64+0xcd/0x230 [ 475.219552][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.219566][T12448] RIP: 0033:0x7f343858e969 [ 475.219580][T12448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.219593][T12448] RSP: 002b:00007f3439459038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 475.219606][T12448] RAX: ffffffffffffffda RBX: 00007f34387b5fa0 RCX: 00007f343858e969 [ 475.219615][T12448] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 475.219627][T12448] RBP: 00007f3438610ab1 R08: 0000000000000002 R09: 0000040000008000 [ 475.219635][T12448] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 475.219653][T12448] R13: 0000000000000000 R14: 00007f34387b5fa0 R15: 00007fff81f0c938 [ 475.219671][T12448] [ 475.569512][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.300143][ T5829] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 479.449056][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 479.570569][T12503] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1191'. [ 481.121092][T12515] hugetlbfs: syz.3.1194 (12515): Using mlock ulimits for SHM_HUGETLB is obsolete [ 487.714270][T12667] FAULT_INJECTION: forcing a failure. [ 487.714270][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 487.990127][T12667] CPU: 1 UID: 0 PID: 12667 Comm: syz.4.1217 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 487.990154][T12667] Tainted: [U]=USER [ 487.990159][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 487.990167][T12667] Call Trace: [ 487.990172][T12667] [ 487.990177][T12667] dump_stack_lvl+0x16c/0x1f0 [ 487.990201][T12667] should_fail_ex+0x512/0x640 [ 487.990221][T12667] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 487.990245][T12667] should_failslab+0xc2/0x120 [ 487.990260][T12667] __kmalloc_cache_noprof+0x6a/0x3e0 [ 487.990289][T12667] ? sctp_endpoint_new+0x7c/0xcd0 [ 487.990313][T12667] sctp_endpoint_new+0x7c/0xcd0 [ 487.990336][T12667] sctp_init_sock+0xe2d/0x1330 [ 487.990354][T12667] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 487.990373][T12667] sctp_v6_init_sock+0x16/0x70 [ 487.990389][T12667] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 487.990407][T12667] inet6_create+0xb2d/0x1300 [ 487.990422][T12667] ? inet6_create+0x7f/0x1300 [ 487.990436][T12667] __sock_create+0x335/0x8d0 [ 487.990459][T12667] inet_ctl_sock_create+0x94/0x230 [ 487.990476][T12667] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 487.990492][T12667] ? lockdep_init_map_type+0x5c/0x280 [ 487.990510][T12667] ? do_init_timer+0xc9/0x110 [ 487.990525][T12667] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 487.990542][T12667] sctp_ctrlsock_init+0x40/0xf0 [ 487.990559][T12667] ops_init+0x1df/0x5f0 [ 487.990576][T12667] setup_net+0x21e/0x850 [ 487.990593][T12667] ? __pfx_setup_net+0x10/0x10 [ 487.990607][T12667] ? lockdep_init_map_type+0x5c/0x280 [ 487.990623][T12667] ? __pfx_down_read_killable+0x10/0x10 [ 487.990644][T12667] ? debug_mutex_init+0x37/0x70 [ 487.990658][T12667] copy_net_ns+0x2a6/0x5f0 [ 487.990676][T12667] create_new_namespaces+0x3ea/0xad0 [ 487.990695][T12667] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 487.990711][T12667] ksys_unshare+0x45b/0xa40 [ 487.990729][T12667] ? __pfx_ksys_unshare+0x10/0x10 [ 487.990744][T12667] ? xfd_validate_state+0x5d/0x180 [ 487.990765][T12667] ? rcu_is_watching+0x12/0xc0 [ 487.990781][T12667] __x64_sys_unshare+0x31/0x40 [ 487.990797][T12667] do_syscall_64+0xcd/0x230 [ 487.990816][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.990829][T12667] RIP: 0033:0x7f8e7758e969 [ 487.990840][T12667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.990853][T12667] RSP: 002b:00007f8e78444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 487.990866][T12667] RAX: ffffffffffffffda RBX: 00007f8e777b5fa0 RCX: 00007f8e7758e969 [ 487.990874][T12667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 487.990882][T12667] RBP: 00007f8e77610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 487.990889][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.990897][T12667] R13: 0000000000000000 R14: 00007f8e777b5fa0 R15: 00007fffd6c6cc38 [ 487.990915][T12667] [ 488.687860][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1215'. [ 488.846626][T12665] nbd: must specify a size in bytes for the device [ 492.554056][T12704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 495.384457][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1230'. [ 495.802594][T12740] team0: Port device team_slave_0 removed [ 497.125262][T12765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1235'. [ 497.186156][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.479752][T12765] bridge_slave_1 (unregistering): left allmulticast mode [ 497.537275][T12765] bridge_slave_1 (unregistering): left promiscuous mode [ 497.569685][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.348065][T12777] kernel read not supported for file /set_event_notrace_pid (pid: 12777 comm: syz.6.1234) [ 499.784004][ T30] audit: type=1800 audit(4294967370.437:11): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1234" name="set_event_notrace_pid" dev="tracefs" ino=1069 res=0 errno=0 [ 501.199875][T12806] lo: entered allmulticast mode [ 501.493192][T12811] lo: left allmulticast mode [ 501.600747][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.613481][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.649257][T12835] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.656237][T12835] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 506.427128][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'. [ 507.827483][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 507.860116][ T5829] Bluetooth: hci2: unexpected subevent 0x01 length: 122 > 18 [ 507.939760][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 512.547255][T12992] syz.4.1276 (12992): /proc/12989/oom_adj is deprecated, please use /proc/12989/oom_score_adj instead. [ 513.431368][T13011] [ 519.798007][T13083] FAULT_INJECTION: forcing a failure. [ 519.798007][T13083] name failslab, interval 1, probability 0, space 0, times 0 [ 520.142643][T13083] CPU: 1 UID: 0 PID: 13083 Comm: syz.4.1288 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 520.142675][T13083] Tainted: [U]=USER [ 520.142680][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 520.142689][T13083] Call Trace: [ 520.142694][T13083] [ 520.142699][T13083] dump_stack_lvl+0x16c/0x1f0 [ 520.142725][T13083] should_fail_ex+0x512/0x640 [ 520.142744][T13083] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 520.142761][T13083] should_failslab+0xc2/0x120 [ 520.142778][T13083] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 520.142793][T13083] ? __d_alloc+0x31/0xaa0 [ 520.142808][T13083] __d_alloc+0x31/0xaa0 [ 520.142823][T13083] d_alloc_pseudo+0x1c/0xc0 [ 520.142839][T13083] alloc_file_pseudo+0xcf/0x230 [ 520.142857][T13083] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 520.142873][T13083] ? alloc_fd+0x471/0x7d0 [ 520.142894][T13083] sock_alloc_file+0x50/0x210 [ 520.142911][T13083] __sys_socket+0x1c0/0x260 [ 520.142929][T13083] ? __pfx___sys_socket+0x10/0x10 [ 520.142947][T13083] ? rcu_is_watching+0x12/0xc0 [ 520.142964][T13083] __x64_sys_socket+0x72/0xb0 [ 520.142981][T13083] ? lockdep_hardirqs_on+0x7c/0x110 [ 520.142998][T13083] do_syscall_64+0xcd/0x230 [ 520.143017][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.143030][T13083] RIP: 0033:0x7f8e7758e969 [ 520.143041][T13083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.143054][T13083] RSP: 002b:00007f8e78444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 520.143067][T13083] RAX: ffffffffffffffda RBX: 00007f8e777b5fa0 RCX: 00007f8e7758e969 [ 520.143076][T13083] RDX: 0000000000000073 RSI: 0000000000080002 RDI: 0000000000000002 [ 520.143083][T13083] RBP: 00007f8e77610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 520.143090][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.143098][T13083] R13: 0000000000000000 R14: 00007f8e777b5fa0 R15: 00007fffd6c6cc38 [ 520.143114][T13083] [ 520.976615][T13087] netlink: 146 bytes leftover after parsing attributes in process `syz.6.1290'. [ 522.611619][T13111] FAULT_INJECTION: forcing a failure. [ 522.611619][T13111] name failslab, interval 1, probability 0, space 0, times 0 [ 522.751526][T13111] CPU: 1 UID: 0 PID: 13111 Comm: syz.6.1297 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 522.751552][T13111] Tainted: [U]=USER [ 522.751557][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 522.751566][T13111] Call Trace: [ 522.751571][T13111] [ 522.751576][T13111] dump_stack_lvl+0x16c/0x1f0 [ 522.751600][T13111] should_fail_ex+0x512/0x640 [ 522.751620][T13111] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 522.751638][T13111] should_failslab+0xc2/0x120 [ 522.751655][T13111] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 522.751669][T13111] ? __kernfs_new_node+0xd2/0x8a0 [ 522.751693][T13111] __kernfs_new_node+0xd2/0x8a0 [ 522.751714][T13111] ? __pfx___kernfs_new_node+0x10/0x10 [ 522.751739][T13111] ? find_held_lock+0x2b/0x80 [ 522.751752][T13111] ? kernfs_root+0xee/0x2a0 [ 522.751768][T13111] kernfs_new_node+0x13c/0x1e0 [ 522.751785][T13111] __kernfs_create_file+0x53/0x350 [ 522.751804][T13111] sysfs_add_file_mode_ns+0x207/0x3c0 [ 522.751827][T13111] sysfs_merge_group+0x1aa/0x340 [ 522.751841][T13111] ? __pfx_sysfs_merge_group+0x10/0x10 [ 522.751855][T13111] ? __pfx_dev_add_physical_location+0x10/0x10 [ 522.751871][T13111] ? bus_to_subsys+0x131/0x160 [ 522.751892][T13111] dpm_sysfs_add+0x237/0x280 [ 522.751908][T13111] device_add+0x9a6/0x1a70 [ 522.751927][T13111] ? __pfx_device_add+0x10/0x10 [ 522.751943][T13111] ? lockdep_init_map_type+0x5c/0x280 [ 522.751960][T13111] ? __init_waitqueue_head+0xca/0x150 [ 522.751985][T13111] rfkill_register+0x1ad/0xb40 [ 522.752001][T13111] nfc_register_device+0x11f/0x3c0 [ 522.752022][T13111] nci_register_device+0x7f1/0xb80 [ 522.752038][T13111] ? __pfx_nci_register_device+0x10/0x10 [ 522.752057][T13111] ? lockdep_init_map_type+0x5c/0x280 [ 522.752078][T13111] virtual_ncidev_open+0x141/0x220 [ 522.752097][T13111] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 522.752114][T13111] misc_open+0x35a/0x420 [ 522.752139][T13111] ? __pfx_misc_open+0x10/0x10 [ 522.752159][T13111] chrdev_open+0x231/0x6a0 [ 522.752173][T13111] ? __pfx_apparmor_file_open+0x10/0x10 [ 522.752192][T13111] ? __pfx_chrdev_open+0x10/0x10 [ 522.752206][T13111] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 522.752228][T13111] do_dentry_open+0x741/0x1c10 [ 522.752243][T13111] ? __pfx_chrdev_open+0x10/0x10 [ 522.752262][T13111] vfs_open+0x82/0x3f0 [ 522.752280][T13111] path_openat+0x1e5e/0x2d40 [ 522.752300][T13111] ? __pfx_path_openat+0x10/0x10 [ 522.752318][T13111] do_filp_open+0x20b/0x470 [ 522.752330][T13111] ? __pfx_do_filp_open+0x10/0x10 [ 522.752356][T13111] ? alloc_fd+0x471/0x7d0 [ 522.752388][T13111] do_sys_openat2+0x11b/0x1d0 [ 522.752406][T13111] ? __pfx_do_sys_openat2+0x10/0x10 [ 522.752431][T13111] __x64_sys_openat+0x174/0x210 [ 522.752449][T13111] ? __pfx___x64_sys_openat+0x10/0x10 [ 522.752467][T13111] ? rcu_is_watching+0x12/0xc0 [ 522.752486][T13111] do_syscall_64+0xcd/0x230 [ 522.752506][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.752520][T13111] RIP: 0033:0x7f847c18e969 [ 522.752532][T13111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.752545][T13111] RSP: 002b:00007f847cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 522.752558][T13111] RAX: ffffffffffffffda RBX: 00007f847c3b5fa0 RCX: 00007f847c18e969 [ 522.752567][T13111] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 522.752576][T13111] RBP: 00007f847c210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 522.752585][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.752602][T13111] R13: 0000000000000000 R14: 00007f847c3b5fa0 R15: 00007fff5ad2d798 [ 522.752621][T13111] [ 525.895382][T13148] netlink: 'syz.3.1305': attribute type 11 has an invalid length. [ 525.895403][T13148] netlink: 'syz.3.1305': attribute type 11 has an invalid length. [ 525.895422][T13148] netlink: 'syz.3.1305': attribute type 11 has an invalid length. [ 528.107846][T13173] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1310'. [ 531.714597][ T30] audit: type=1326 audit(4294967402.367:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13222 comm="syz.1.1320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe05f58e969 code=0x0 [ 534.590374][T13280] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 535.005098][T13288] netlink: 334 bytes leftover after parsing attributes in process `syz.6.1331'. [ 538.231372][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 546.674501][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 547.812587][T13453] FAULT_INJECTION: forcing a failure. [ 547.812587][T13453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.068062][T13453] CPU: 1 UID: 0 PID: 13453 Comm: syz.6.1365 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 548.068088][T13453] Tainted: [U]=USER [ 548.068094][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 548.068101][T13453] Call Trace: [ 548.068106][T13453] [ 548.068113][T13453] dump_stack_lvl+0x16c/0x1f0 [ 548.068138][T13453] should_fail_ex+0x512/0x640 [ 548.068159][T13453] should_fail_alloc_page+0xe7/0x130 [ 548.068177][T13453] prepare_alloc_pages+0x3c2/0x610 [ 548.068199][T13453] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 548.068216][T13453] ? find_held_lock+0x2b/0x80 [ 548.068230][T13453] ? mm_drop_all_locks+0x395/0x4c0 [ 548.068247][T13453] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 548.068265][T13453] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.068280][T13453] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.068306][T13453] ? mm_drop_all_locks+0x395/0x4c0 [ 548.068320][T13453] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.068339][T13453] ? policy_nodemask+0xea/0x4e0 [ 548.068355][T13453] alloc_pages_mpol+0x1fb/0x550 [ 548.068371][T13453] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 548.068391][T13453] alloc_pages_noprof+0x131/0x390 [ 548.068406][T13453] kvm_coalesced_mmio_init+0x1a/0x120 [ 548.068426][T13453] kvm_dev_ioctl+0xe76/0x1ad0 [ 548.068445][T13453] ? __pfx___might_resched+0x10/0x10 [ 548.068459][T13453] ? hook_file_ioctl_common+0x145/0x410 [ 548.068474][T13453] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 548.068491][T13453] ? xfd_validate_state+0x5d/0x180 [ 548.068513][T13453] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 548.068529][T13453] __x64_sys_ioctl+0x190/0x200 [ 548.068547][T13453] do_syscall_64+0xcd/0x230 [ 548.068566][T13453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.068579][T13453] RIP: 0033:0x7f847c18e969 [ 548.068591][T13453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.068603][T13453] RSP: 002b:00007f847cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.068616][T13453] RAX: ffffffffffffffda RBX: 00007f847c3b5fa0 RCX: 00007f847c18e969 [ 548.068625][T13453] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 548.068633][T13453] RBP: 00007f847c210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 548.068640][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.068647][T13453] R13: 0000000000000000 R14: 00007f847c3b5fa0 R15: 00007fff5ad2d798 [ 548.068664][T13453] [ 548.320300][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.960979][T13501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 551.791947][T13502] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 555.230904][T13535] FAULT_INJECTION: forcing a failure. [ 555.230904][T13535] name failslab, interval 1, probability 0, space 0, times 0 [ 555.419549][T13535] CPU: 1 UID: 0 PID: 13535 Comm: syz.3.1385 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 555.419575][T13535] Tainted: [U]=USER [ 555.419580][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 555.419588][T13535] Call Trace: [ 555.419593][T13535] [ 555.419598][T13535] dump_stack_lvl+0x16c/0x1f0 [ 555.419621][T13535] should_fail_ex+0x512/0x640 [ 555.419640][T13535] ? fs_reclaim_acquire+0xae/0x150 [ 555.419661][T13535] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 555.419679][T13535] should_failslab+0xc2/0x120 [ 555.419695][T13535] __kmalloc_noprof+0xd2/0x510 [ 555.419713][T13535] tomoyo_realpath_from_path+0xc2/0x6e0 [ 555.419732][T13535] ? tomoyo_profile+0x47/0x60 [ 555.419753][T13535] tomoyo_path_number_perm+0x245/0x580 [ 555.419768][T13535] ? tomoyo_path_number_perm+0x237/0x580 [ 555.419784][T13535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 555.419800][T13535] ? find_held_lock+0x2b/0x80 [ 555.419829][T13535] ? find_held_lock+0x2b/0x80 [ 555.419844][T13535] ? hook_file_ioctl_common+0x145/0x410 [ 555.419863][T13535] ? __fget_files+0x20e/0x3c0 [ 555.419886][T13535] security_file_ioctl+0x9b/0x240 [ 555.419908][T13535] __x64_sys_ioctl+0xb7/0x200 [ 555.419928][T13535] do_syscall_64+0xcd/0x230 [ 555.419948][T13535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.419961][T13535] RIP: 0033:0x7f343858e969 [ 555.419972][T13535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.419985][T13535] RSP: 002b:00007f3439459038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.419998][T13535] RAX: ffffffffffffffda RBX: 00007f34387b5fa0 RCX: 00007f343858e969 [ 555.420007][T13535] RDX: ffffffffffffffff RSI: 0000000000002272 RDI: 0000000000000003 [ 555.420015][T13535] RBP: 00007f3439459090 R08: 0000000000000000 R09: 0000000000000000 [ 555.420023][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.420030][T13535] R13: 0000000000000000 R14: 00007f34387b5fa0 R15: 00007fff81f0c938 [ 555.420047][T13535] [ 555.420260][T13535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 556.427295][T13552] bridge0: port 3(batadv0) entered blocking state [ 556.466582][T13552] bridge0: port 3(batadv0) entered disabled state [ 556.473159][T13552] batadv0: entered allmulticast mode [ 556.540949][T13552] batadv0: entered promiscuous mode [ 556.586895][T13552] bridge0: port 3(batadv0) entered blocking state [ 556.593467][T13552] bridge0: port 3(batadv0) entered forwarding state [ 556.680968][ T9960] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 556.690773][ T9960] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 560.854490][T13582] kexec: Could not allocate control_code_buffer [ 563.042294][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.049089][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.252826][T13640] openvswitch: netlink: Flow key attribute not present in set flow. [ 564.895817][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 564.908106][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1411'. [ 565.114880][T13660] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1411'. [ 565.800690][T13672] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1412'. [ 569.729999][T13714] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 570.749979][T13729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 570.974037][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 571.198329][T13729] syz.1.1428 (13729) used greatest stack depth: 20104 bytes left [ 580.005054][T13849] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1450'. [ 580.014965][T13845] vivid-009: ================= START STATUS ================= [ 580.116896][T13845] vivid-009: Enable Output Cropping: true [ 580.150329][T13845] vivid-009: Enable Output Composing: true [ 580.229771][T13845] vivid-009: Enable Output Scaler: true [ 580.254415][T13845] vivid-009: Tx RGB Quantization Range: Automatic [ 580.314102][T13845] vivid-009: Transmit Mode: HDMI [ 580.380675][T13845] vivid-009: Hotplug Present: 0x00000000 [ 580.446787][T13845] vivid-009: RxSense Present: 0x00000000 [ 580.470246][T13845] vivid-009: EDID Present: 0x00000000 [ 580.561513][T13845] vivid-009: ================== END STATUS ================== [ 580.874346][ T5841] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 583.267792][T13894] random: crng reseeded on system resumption                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        syzkaller syzkaller login: [ 650.177381][T14865] program syz.6.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.834984][T14876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1657'. [ 651.758411][T14899] bridge0: port 4(hsr0) entered blocking state [ 651.784627][T14899] bridge0: port 4(hsr0) entered disabled state [ 651.785714][T14899] hsr0: entered allmulticast mode [ 651.796586][T14899] hsr_slave_0: entered allmulticast mode [ 651.797751][T14899] hsr_slave_1: entered allmulticast mode [ 651.814954][T14899] hsr0: entered promiscuous mode [ 651.820688][T14899] bridge0: port 4(hsr0) entered blocking state [ 651.821652][T14899] bridge0: port 4(hsr0) entered forwarding state [ 652.168070][T14907] bridge0: port 5(veth0_to_bridge) entered blocking state [ 652.169263][T14907] bridge0: port 5(veth0_to_bridge) entered disabled state [ 652.170375][T14907] veth0_to_bridge: entered allmulticast mode [ 652.225690][T14907] veth0_to_bridge: entered promiscuous mode [ 652.238311][T14909] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 652.243065][T14907] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 652.246378][T14907] bridge0: port 5(veth0_to_bridge) entered blocking state [ 652.247481][T14907] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 654.080487][T14936] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1669'. [ 654.491469][T14941] FAULT_INJECTION: forcing a failure. [ 654.491469][T14941] name failslab, interval 1, probability 0, space 0, times 0 [ 654.550110][T14941] CPU: 1 UID: 0 PID: 14941 Comm: syz.6.1670 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 654.550137][T14941] Tainted: [U]=USER [ 654.550142][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 654.550150][T14941] Call Trace: [ 654.550156][T14941] [ 654.550170][T14941] dump_stack_lvl+0x16c/0x1f0 [ 654.550194][T14941] should_fail_ex+0x512/0x640 [ 654.550213][T14941] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 654.550231][T14941] should_failslab+0xc2/0x120 [ 654.550248][T14941] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 654.550263][T14941] ? __d_alloc+0x31/0xaa0 [ 654.550279][T14941] __d_alloc+0x31/0xaa0 [ 654.550294][T14941] d_alloc_pseudo+0x1c/0xc0 [ 654.550310][T14941] alloc_file_pseudo+0xcf/0x230 [ 654.550327][T14941] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 654.550343][T14941] ? do_raw_spin_unlock+0x172/0x230 [ 654.550365][T14941] __anon_inode_getfile+0xf7/0x370 [ 654.550388][T14941] do_epoll_create+0x31b/0x470 [ 654.550406][T14941] __x64_sys_epoll_create+0x45/0x70 [ 654.550423][T14941] do_syscall_64+0xcd/0x230 [ 654.550443][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.550456][T14941] RIP: 0033:0x7f847c18e969 [ 654.550468][T14941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.550480][T14941] RSP: 002b:00007f847cf23038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 654.550503][T14941] RAX: ffffffffffffffda RBX: 00007f847c3b6080 RCX: 00007f847c18e969 [ 654.550512][T14941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 654.550520][T14941] RBP: 00007f847c210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 654.550529][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.550537][T14941] R13: 0000000000000000 R14: 00007f847c3b6080 R15: 00007fff5ad2d798 [ 654.550555][T14941] syzkaller syzkaller login: [ 655.101235][T14949] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 655.996992][T14959] Invalid ELF header magic: != ELF [ 660.323710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.327168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.330050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.332944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.335789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.340212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.343143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.345883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.348687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.351505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 660.371791][ C1] sched: DL replenish lagged too much [ 665.327296][ C1] net_ratelimit: 3983 callbacks suppressed [ 665.327315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.331282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.334171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.337074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.340083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.343061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.346251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.349185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.362530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 665.375890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.337518][ C1] net_ratelimit: 3824 callbacks suppressed [ 670.337536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.356827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.370328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.383726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.397190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.410580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.424032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.437475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.451057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 670.464427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.346769][ C1] net_ratelimit: 3798 callbacks suppressed [ 675.346785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.366105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.379553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.393011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.406400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.419885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.433325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.446747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.460225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 675.473599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.357605][ C1] net_ratelimit: 3841 callbacks suppressed [ 680.357640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.376963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.390436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.403930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.417435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.430894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.444291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.457729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.471115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 680.485363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.366510][ C1] net_ratelimit: 3806 callbacks suppressed [ 685.366526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.385747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.399142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.412629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.425992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.439497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.452882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.466310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.479674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 685.493079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.376960][ C1] net_ratelimit: 3798 callbacks suppressed [ 690.376977][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.396269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.409729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.423128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.436673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.450114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.463518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.476970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.490355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 690.504446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.387612][ C1] net_ratelimit: 3820 callbacks suppressed [ 695.387629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.406982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.420456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.433965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.447417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.460854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.474242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.487738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.501198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 695.514658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.396557][ C1] net_ratelimit: 3822 callbacks suppressed [ 700.396574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.415858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.429432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.443388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.456886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.470801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.484248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.497668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.511120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 700.524723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.406581][ C1] net_ratelimit: 3824 callbacks suppressed [ 705.406599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.425782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.439142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.452800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.466214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.479635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.493002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.506535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.520404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 705.533787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.416728][ C1] net_ratelimit: 3853 callbacks suppressed [ 710.416744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.436558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.450014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.463367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.476776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.490141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.503788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.517189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.530573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 710.543925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.427569][ C1] net_ratelimit: 3776 callbacks suppressed [ 715.427585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.446895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.460396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.473794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.487276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.500706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.514922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.528351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.541764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 715.555225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 719.858983][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.437666][ C1] net_ratelimit: 3776 callbacks suppressed [ 720.437683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.457026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.470417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.483877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.497363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.511638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.525084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.538510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.551936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 720.565317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.446957][ C1] net_ratelimit: 3792 callbacks suppressed [ 725.446974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.466219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.479663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.493123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.506711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.520257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.533734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.547208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.560615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 725.574046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.457108][ C1] net_ratelimit: 3802 callbacks suppressed [ 730.457125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.476398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.489845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.503230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.516693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.530117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.543611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.557001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.570431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 730.583856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 732.534246][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 735.466515][ C1] net_ratelimit: 3755 callbacks suppressed [ 735.466533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.485686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.498976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.512311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.525608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.539018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.552387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.565735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.579086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 735.592455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.477662][ C1] net_ratelimit: 3845 callbacks suppressed [ 740.477678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.496910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.510302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.523811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.537252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.550775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.564124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.577436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.590805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 740.604086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.486910][ C1] net_ratelimit: 3785 callbacks suppressed [ 745.486927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.506193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.519605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.532980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.546454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.559847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.573363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.586794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.600293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 745.613699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.497043][ C1] net_ratelimit: 3864 callbacks suppressed [ 750.497060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.516125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.529528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.542892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.556215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.569432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.582712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.595951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.609275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 750.622538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.507705][ C1] net_ratelimit: 3904 callbacks suppressed [ 755.507721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.527005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.540399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.553876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.567274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.580678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.594037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.607472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.620933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 755.634319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.517295][ C1] net_ratelimit: 3828 callbacks suppressed [ 760.517311][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.536399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.549639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.562837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.576139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.589373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.602619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.615827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.629052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 760.642308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 761.966452][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 761.973774][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14958/1:b..l [ 761.982266][ C1] rcu: (detected by 1, t=10502 jiffies, g=63681, q=1088 ncpus=1) [ 761.990058][ C1] task:syz.6.1673 state:R running task stack:24312 pid:14958 tgid:14955 ppid:11112 task_flags:0x400140 flags:0x00004002 [ 762.004395][ C1] Call Trace: [ 762.007729][ C1] [ 762.010913][ C1] __schedule+0x116f/0x5de0 [ 762.015415][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 762.020355][ C1] ? __pfx___schedule+0x10/0x10 [ 762.025201][ C1] ? find_held_lock+0x2b/0x80 [ 762.029870][ C1] ? mark_held_locks+0x49/0x80 [ 762.034638][ C1] preempt_schedule_irq+0x51/0x90 [ 762.039653][ C1] irqentry_exit+0x36/0x90 [ 762.044062][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.050036][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 762.055227][ C1] Code: 85 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 02 71 ed 0e 0f 82 74 02 00 00 8b 35 7a a0 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 d9 84 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 762.074827][ C1] RSP: 0018:ffffc90004b96d40 EFLAGS: 00000206 [ 762.080887][ C1] RAX: 0000000000000046 RBX: ffffffff8e3bf440 RCX: 000000009c22ba9f [ 762.088847][ C1] RDX: 0000000000000000 RSI: ffffffff8dbb6284 RDI: ffffffff8bf46ce0 [ 762.096805][ C1] RBP: 0000000000000002 R08: 437f0b3048eb3a99 R09: 0000000000000000 [ 762.104762][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 762.112720][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 762.120694][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 762.125887][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 762.132026][ C1] unwind_next_frame+0xd1/0x20a0 [ 762.136954][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 762.142075][ C1] ? shmem_alloc_folio+0x135/0x160 [ 762.147174][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 762.153321][ C1] arch_stack_walk+0x94/0x100 [ 762.157989][ C1] ? shmem_alloc_folio+0x135/0x160 [ 762.163091][ C1] stack_trace_save+0x8e/0xc0 [ 762.167787][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 762.173151][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 762.178085][ C1] save_stack+0x160/0x1f0 [ 762.182404][ C1] ? __pfx_save_stack+0x10/0x10 [ 762.187263][ C1] ? post_alloc_hook+0x181/0x1b0 [ 762.192216][ C1] ? get_page_from_freelist+0x135c/0x3920 [ 762.197960][ C1] ? __alloc_frozen_pages_noprof+0x263/0x23a0 [ 762.204012][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 762.209024][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 762.214557][ C1] ? shmem_alloc_folio+0x135/0x160 [ 762.219661][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 762.224637][ C1] __set_page_owner+0x91/0x550 [ 762.229410][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 762.234802][ C1] ? bad_range+0x244/0x490 [ 762.239219][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.244429][ C1] ? get_page_from_freelist+0x133c/0x3920 [ 762.250143][ C1] post_alloc_hook+0x181/0x1b0 [ 762.255005][ C1] get_page_from_freelist+0x135c/0x3920 [ 762.260574][ C1] ? __pfx___might_resched+0x10/0x10 [ 762.265941][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 762.272172][ C1] ? should_fail_alloc_page+0xee/0x130 [ 762.277619][ C1] ? prepare_alloc_pages+0x3c2/0x610 [ 762.282895][ C1] ? rcu_is_watching+0x12/0xc0 [ 762.287662][ C1] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 762.293557][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 762.299876][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 762.304891][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 762.310256][ C1] ? find_held_lock+0x2b/0x80 [ 762.314923][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 762.319853][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.325742][ C1] ? policy_nodemask+0xea/0x4e0 [ 762.330588][ C1] alloc_pages_mpol+0x1fb/0x550 [ 762.335543][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 762.340940][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 762.346320][ C1] shmem_alloc_folio+0x135/0x160 [ 762.351248][ C1] shmem_alloc_and_add_folio+0x499/0xc20 [ 762.356876][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 762.363023][ C1] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 762.368907][ C1] shmem_get_folio_gfp+0x687/0x1530 [ 762.374137][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 762.379778][ C1] ? __pfx_timestamp_truncate+0x10/0x10 [ 762.385405][ C1] shmem_fault+0x1fe/0xa30 [ 762.389815][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 762.394854][ C1] ? __pfx___up_read+0x10/0x10 [ 762.399616][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 762.405066][ C1] __do_fault+0x10a/0x490 [ 762.409389][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 762.415279][ C1] do_pte_missing+0x1a6/0x3fb0 [ 762.420060][ C1] ? __handle_mm_fault+0x1010/0x2a40 [ 762.425356][ C1] __handle_mm_fault+0x103d/0x2a40 [ 762.430493][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 762.435980][ C1] ? __pte_offset_map_lock+0x155/0x2f0 [ 762.441444][ C1] ? find_held_lock+0x2b/0x80 [ 762.446107][ C1] ? find_held_lock+0x2b/0x80 [ 762.450813][ C1] handle_mm_fault+0x3fe/0xad0 [ 762.455602][ C1] __get_user_pages+0x771/0x36f0 [ 762.460565][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 762.465933][ C1] ? __pfx_down_read_killable+0x10/0x10 [ 762.471473][ C1] ? faultin_page_range+0x2c1/0x980 [ 762.476658][ C1] ? faultin_page_range+0x304/0x980 [ 762.481847][ C1] faultin_page_range+0x249/0x980 [ 762.486865][ C1] madvise_do_behavior+0x233/0x3b0 [ 762.491999][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 762.497648][ C1] do_madvise+0x10b/0x170 [ 762.501973][ C1] __x64_sys_madvise+0xa9/0x110 [ 762.506813][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.512033][ C1] do_syscall_64+0xcd/0x230 [ 762.516544][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.522430][ C1] RIP: 0033:0x7f847c18e969 [ 762.526833][ C1] RSP: 002b:00007f847cf44038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 762.535239][ C1] RAX: ffffffffffffffda RBX: 00007f847c3b5fa0 RCX: 00007f847c18e969 [ 762.543219][ C1] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 762.551190][ C1] RBP: 00007f847c210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 762.559151][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.567104][ C1] R13: 0000000000000000 R14: 00007f847c3b5fa0 R15: 00007fff5ad2d798 [ 762.575109][ C1] [ 762.578136][ C1] rcu: rcu_preempt kthread starved for 498 jiffies! g63681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 762.589144][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 762.599094][ C1] rcu: RCU grace-period kthread stack dump: [ 762.604965][ C1] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 762.618435][ C1] Call Trace: [ 762.621701][ C1] [ 762.624624][ C1] __schedule+0x116f/0x5de0 [ 762.629148][ C1] ? find_held_lock+0x2b/0x80 [ 762.633812][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 762.638742][ C1] ? __pfx___schedule+0x10/0x10 [ 762.643585][ C1] ? find_held_lock+0x2b/0x80 [ 762.648247][ C1] ? schedule+0x2d7/0x3a0 [ 762.652568][ C1] schedule+0xe7/0x3a0 [ 762.656622][ C1] schedule_timeout+0x123/0x290 [ 762.661460][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 762.666821][ C1] ? __pfx_process_timeout+0x10/0x10 [ 762.672098][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 762.677898][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 762.683348][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 762.688101][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 762.693383][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 762.698259][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.704066][ C1] rcu_gp_kthread+0x270/0x380 [ 762.708732][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.713919][ C1] ? rcu_is_watching+0x12/0xc0 [ 762.718675][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.723864][ C1] ? __kthread_parkme+0x19e/0x250 [ 762.728945][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 762.734136][ C1] kthread+0x3c2/0x780 [ 762.738197][ C1] ? __pfx_kthread+0x10/0x10 [ 762.742776][ C1] ? __pfx_kthread+0x10/0x10 [ 762.747356][ C1] ? __pfx_kthread+0x10/0x10 [ 762.751935][ C1] ? __pfx_kthread+0x10/0x10 [ 762.756517][ C1] ? rcu_is_watching+0x12/0xc0 [ 762.761269][ C1] ? __pfx_kthread+0x10/0x10 [ 762.765851][ C1] ret_from_fork+0x45/0x80 [ 762.770261][ C1] ? __pfx_kthread+0x10/0x10 [ 762.774840][ C1] ret_from_fork_asm+0x1a/0x30 [ 762.779605][ C1] [ 762.782610][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 762.788920][ C1] CPU: 1 UID: 0 PID: 9960 Comm: kworker/u8:30 Tainted: G U 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 762.802718][ C1] Tainted: [U]=USER [ 762.806510][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 762.816561][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 762.823493][ C1] RIP: 0010:stack_access_ok+0x30/0x200 [ 762.828949][ C1] Code: 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 48 89 f5 53 48 89 fb 48 83 ec 08 80 3c 02 00 <0f> 85 94 01 00 00 4c 8d 6b 10 4c 8b 7b 08 48 b8 00 00 00 00 00 fc [ 762.848559][ C1] RSP: 0018:ffffc90000a07c78 EFLAGS: 00000246 [ 762.854617][ C1] RAX: dffffc0000000000 RBX: ffffc90000a07d28 RCX: ffffffff91b7a3c6 [ 762.862575][ C1] RDX: 1ffff92000140fa6 RSI: ffffc90000a08860 RDI: ffffc90000a07d28 [ 762.870533][ C1] RBP: ffffc90000a08860 R08: ffffffff91b7a3ca R09: 0000000000000000 [ 762.878489][ C1] R10: 0000000000000006 R11: 0000000000094793 R12: 0000000000000008 [ 762.886446][ C1] R13: ffffc90000a07d28 R14: ffffc90000a07d30 R15: ffffc90000a07d5c [ 762.894406][ C1] FS: 0000000000000000(0000) GS:ffff888124aee000(0000) knlGS:0000000000000000 [ 762.903340][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.909943][ C1] CR2: 00007f8e78402990 CR3: 000000000e180000 CR4: 00000000003526f0 [ 762.917930][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.925915][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 762.933969][ C1] Call Trace: [ 762.937260][ C1] [ 762.940112][ C1] unwind_next_frame+0xb7d/0x20a0 [ 762.945146][ C1] ? br_nf_pre_routing+0x860/0x15b0 [ 762.950338][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 762.956484][ C1] arch_stack_walk+0x94/0x100 [ 762.961153][ C1] ? br_nf_pre_routing+0x860/0x15b0 [ 762.966342][ C1] stack_trace_save+0x8e/0xc0 [ 762.971018][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 762.976383][ C1] ? lock_acquire+0x179/0x350 [ 762.981050][ C1] kasan_save_stack+0x33/0x60 [ 762.985719][ C1] ? kasan_save_stack+0x33/0x60 [ 762.990561][ C1] ? kasan_save_track+0x14/0x30 [ 762.995399][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 763.000408][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 763.006037][ C1] ? skb_ext_add+0xf8/0x7a0 [ 763.010532][ C1] ? br_nf_forward_ip.part.0+0x28/0x810 [ 763.016068][ C1] ? br_nf_forward+0xf0f/0x1be0 [ 763.020906][ C1] ? nf_hook_slow+0xbb/0x200 [ 763.025506][ C1] ? nf_hook+0x45e/0x780 [ 763.029741][ C1] ? __br_forward+0x1be/0x5b0 [ 763.034413][ C1] ? br_flood+0x39c/0x650 [ 763.038733][ C1] ? br_handle_frame_finish+0xe8e/0x1c20 [ 763.044350][ C1] ? br_nf_hook_thresh+0x301/0x410 [ 763.049450][ C1] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 763.055589][ C1] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 763.061118][ C1] ? br_nf_pre_routing+0x860/0x15b0 [ 763.066325][ C1] kasan_save_track+0x14/0x30 [ 763.070991][ C1] __kasan_slab_alloc+0x89/0x90 [ 763.075829][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 763.081273][ C1] ? ebt_do_table+0x1bd9/0x21a0 [ 763.086110][ C1] ? skb_ext_add+0xf8/0x7a0 [ 763.090606][ C1] skb_ext_add+0xf8/0x7a0 [ 763.094929][ C1] ? find_held_lock+0x2b/0x80 [ 763.099594][ C1] br_nf_forward_ip.part.0+0x28/0x810 [ 763.104956][ C1] br_nf_forward+0xf0f/0x1be0 [ 763.109620][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 763.114715][ C1] nf_hook_slow+0xbb/0x200 [ 763.119126][ C1] nf_hook+0x45e/0x780 [ 763.123187][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 763.128642][ C1] ? __pfx_nf_hook+0x10/0x10 [ 763.133223][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 763.138680][ C1] __br_forward+0x1be/0x5b0 [ 763.143175][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 763.148626][ C1] br_flood+0x39c/0x650 [ 763.152784][ C1] br_handle_frame_finish+0xe8e/0x1c20 [ 763.158236][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 763.164126][ C1] ? ip6t_do_table+0xc20/0x1be0 [ 763.168972][ C1] ? nf_hook_slow+0x132/0x200 [ 763.173646][ C1] br_nf_hook_thresh+0x301/0x410 [ 763.178568][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 763.184449][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 763.189894][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 763.195777][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 763.201659][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 763.207544][ C1] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 763.213533][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 763.219416][ C1] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 763.224781][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 763.230659][ C1] ? lock_acquire+0x179/0x350 [ 763.235331][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 763.241824][ C1] ? net_generic+0xea/0x2a0 [ 763.246315][ C1] br_nf_pre_routing+0x860/0x15b0 [ 763.251327][ C1] br_handle_frame+0xad5/0x14a0 [ 763.256169][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 763.261444][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 763.267327][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 763.272604][ C1] __netif_receive_skb_core.constprop.0+0xa23/0x4a00 [ 763.279273][ C1] ? kasan_quarantine_put+0x60/0x240 [ 763.284552][ C1] ? kmem_cache_free+0x2d4/0x4d0 [ 763.289479][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 763.296586][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 763.301254][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 763.306439][ C1] ? ip6_mc_input+0x46c/0xfd0 [ 763.311109][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 763.316124][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 763.321058][ C1] ? process_backlog+0x3f0/0x15e0 [ 763.326065][ C1] __netif_receive_skb_one_core+0xb0/0x1e0 [ 763.331859][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 763.338256][ C1] ? lock_acquire+0x179/0x350 [ 763.342932][ C1] ? process_backlog+0x3f0/0x15e0 [ 763.347969][ C1] __netif_receive_skb+0x1d/0x160 [ 763.353006][ C1] process_backlog+0x442/0x15e0 [ 763.357869][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 763.363229][ C1] net_rx_action+0xa97/0x1010 [ 763.367898][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 763.372998][ C1] ? mark_held_locks+0x49/0x80 [ 763.377820][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 763.383015][ C1] ? tmigr_handle_remote+0x132/0x380 [ 763.388304][ C1] ? mark_held_locks+0x49/0x80 [ 763.393064][ C1] handle_softirqs+0x216/0x8e0 [ 763.397824][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 763.403102][ C1] ? kernel_fpu_end+0x59/0x70 [ 763.407776][ C1] do_softirq+0xb2/0xf0 [ 763.412011][ C1] [ 763.414927][ C1] [ 763.417843][ C1] __local_bh_enable_ip+0x100/0x120 [ 763.423032][ C1] kernel_fpu_end+0x5e/0x70 [ 763.427522][ C1] blake2s_compress+0x7f/0xe0 [ 763.432198][ C1] blake2s_final+0xc9/0x150 [ 763.436697][ C1] hmac.constprop.0+0x252/0x420 [ 763.441537][ C1] ? __pfx_hmac.constprop.0+0x10/0x10 [ 763.446899][ C1] ? __asan_memcpy+0x3c/0x60 [ 763.451482][ C1] ? __pfx_encode_point+0x10/0x10 [ 763.456507][ C1] kdf.constprop.0+0x14b/0x280 [ 763.461259][ C1] ? __pfx_kdf.constprop.0+0x10/0x10 [ 763.466534][ C1] ? __pfx_curve25519_arch+0x10/0x10 [ 763.471809][ C1] ? kdf.constprop.0+0x223/0x280 [ 763.476745][ C1] ? __pfx_mix_hash+0x10/0x10 [ 763.481413][ C1] ? __crypto_memneq+0x203/0x430 [ 763.486343][ C1] mix_dh+0xe8/0x150 [ 763.490233][ C1] ? __pfx_mix_dh+0x10/0x10 [ 763.494728][ C1] wg_noise_handshake_create_initiation+0x2e1/0x650 [ 763.501302][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 763.508398][ C1] ? find_held_lock+0x2b/0x80 [ 763.513064][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 763.518252][ C1] ? ktime_get_coarse_with_offset+0x1f3/0x270 [ 763.524309][ C1] ? ktime_get_coarse_with_offset+0x176/0x270 [ 763.530371][ C1] wg_packet_send_handshake_initiation+0x19a/0x360 [ 763.536869][ C1] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 763.543887][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 763.548832][ C1] wg_packet_handshake_send_worker+0x1c/0x30 [ 763.554817][ C1] process_one_work+0x9cc/0x1b70 [ 763.559755][ C1] ? __pfx_kfree_rcu_monitor+0x10/0x10 [ 763.565204][ C1] ? __pfx_process_one_work+0x10/0x10 [ 763.570597][ C1] ? assign_work+0x1a0/0x250 [ 763.575181][ C1] worker_thread+0x6c8/0xf10 [ 763.579773][ C1] ? __pfx_worker_thread+0x10/0x10 [ 763.584882][ C1] kthread+0x3c2/0x780 [ 763.588948][ C1] ? __pfx_kthread+0x10/0x10 [ 763.593534][ C1] ? __pfx_kthread+0x10/0x10 [ 763.598128][ C1] ? __pfx_kthread+0x10/0x10 [ 763.602710][ C1] ? __pfx_kthread+0x10/0x10 [ 763.607297][ C1] ? rcu_is_watching+0x12/0xc0 [ 763.612049][ C1] ? __pfx_kthread+0x10/0x10 [ 763.616736][ C1] ret_from_fork+0x45/0x80 [ 763.621182][ C1] ? __pfx_kthread+0x10/0x10 [ 763.625773][ C1] ret_from_fork_asm+0x1a/0x30 [ 763.630556][ C1] [ 765.526997][ C1] net_ratelimit: 2503 callbacks suppressed [ 765.527014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.546419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.559980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.573407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.586868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.600289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.613704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.627272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.640750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 765.654226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.536893][ C1] net_ratelimit: 3731 callbacks suppressed [ 770.536910][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.556139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.569517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.582877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.596541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.609905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.623261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.636662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.650024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0) [ 770.663367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f2:01:d6:4f:b2:2f, vlan:0)