last executing test programs: 5m9.675962028s ago: executing program 32 (id=36): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x88002, 0x0) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000240)=0x39) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4b, 0x100000001, 0x5, 0x2, 0x4, 0x1000005, 0x9, 0xe, 0x6, 0x2dde, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x8000000000003, 0x8001]}, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x8a002, 0x0) setreuid$auto(0x0, 0x0) read$auto(r1, 0x0, 0x3) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r3 = socket(0x11, 0x80003, 0x300) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) mmap$auto(0x7, 0x2020007, 0x10, 0x16, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0) bpf$auto(0x4, &(0x7f0000000640)=@token_create={0x1, r2}, 0x8) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, 0x0, 0x402800, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) process_vm_readv$auto(r4, &(0x7f0000000200)={&(0x7f0000000180)="ea478b5c622d2d60c27f853db66dc11209fc82e1a047dd6e6e25a2819f2f0263c7c7ab9170c9892f3196a2b390fc56860c4255d7f3e6b9be1b275ebbbb2d28a17a2abfcaeb997ff462c53d69c1900348741437a468ab8706e2af3f97a4522ed192bc0f800b40c8aac218c2097509e8be0e6357b6f2a9d6c19411", 0x38}, 0x0, &(0x7f0000000240)={&(0x7f0000000540)="1fb5502f410a3300a4ba928d7083b0cbdf33f27cc8dd9d54eef70d5459e2baf00cd2ac1351031415fef219644c49a88e855e85bb4332c015b015703d87b4d05b5795fe1977deaf729fc576d25711691326a41cf3b0e93c7c8ace48062f645d2cac857d432c6831709f6dde6332a75ba82fcf", 0x4}, 0x8, 0x3ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r3) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mincore$auto(0x1000, 0x4000000, 0x0) 4m59.740150237s ago: executing program 33 (id=63): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000040)) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/026/001\x00', 0xa9e82, 0x0) mmap$auto(0x1, 0x80009, 0xb, 0x8000000008011, r1, 0x0) syz_clone3(&(0x7f0000000200)={0x4000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80300, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) execveat$auto(r2, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0xa, 0x3, 0x3c) r3 = socket(0x1e, 0x3, 0xfffffff5) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24004050}, 0x4000005) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x8}}, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x2284, 0x38) r5 = socket(0x18, 0x800, 0x8) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) madvise$auto(0x0, 0x2000040080000004, 0xe) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/220, 0xdc) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_console_fops_tty_io(r2, &(0x7f0000000080)="5652600ea63c85e7b2c14c1b301ccc2652374a84dd9f8514b708e8002d782c8e3c67d45b75c6", 0x26) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) 4m24.96155755s ago: executing program 34 (id=144): ioperm$auto(0x3, 0xe, 0x2000000000000149) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000100)={0x3, 0x80000001, 0x3, 0x50, 0x81, 0x535, 0x5, 0x20000000000009, 0x9b, 0xea50}, 0xeaf, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x4, 0x7) r2 = fcntl$auto_F_GETOWN_EX(r0, 0x10, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(r2, 0x40806685, &(0x7f0000000380)={0x5, 0x4, 0xfd7, 0x0, 0x3, 0x3, 0x0, 0x1}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r4 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r4, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x4, 0x5, @_sigchld={r4, 0x0, 0x401, 0x5, 0x3}}}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="44020000", @ANYRES16=r3, @ANYBLOB="00042dbd7000fbdbdf251f00000016009c0086b7d5007ee3d4d181dd95d31e23408e7aff00000800c900010000801b0275802878475ef9e9791aaa54c3d710bd74dfed8d9a8effb4b897da68f5aef8fb81a659f048b841ba663a33f4fac3a31df32767135ba5d0380c47d3434c00068028006600f6f0da4b11f1a19cabc2db1cc1ad72fc3c68e90013763a2f514f51ab1b3c0c5db3ab331c08009000", @ANYRES32=r4, @ANYBLOB="0c000d0006000000000000000400148008004800", @ANYRES32=r1, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) shutdown$auto(0x200000003, 0x2) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003540)=ANY=[@ANYBLOB="200080eb", @ANYRES16=r6, @ANYBLOB="55372cbd7000fbdbdf250700000008000b000000000005001f0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c040) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mincore$auto(0x0, 0x10000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) prctl$auto(0x23, 0xb, 0x2008, 0x0, 0x0) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) ioctl$auto_TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) 4m21.224240905s ago: executing program 35 (id=152): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ram14\x00', 0x109102, 0x0) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ram14\x00', 0x109102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SEND_CMD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000002e80)=ANY=[@ANYBLOB="04000040329bee63ac9500", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0400d9806653733ef3d0d02191d2e65913cb15d8e0f1efff1a8dd6c3021d8ad427dbba9a5d8a062990515eae5d36b83508e5a7d40b4a1188bd86fdde178732950d7745bb453a0c5608c218e176006087fd19434f55efb1af19377751a473a2bab12d9f61b85eb0a4bd02fa65662c1ec8b97eda62813c5ceaa8a4ffcc4018c928d882cc230f33dd9848fed5b913a6b163688340f819f15721d64a9614e5094afa9a940c9f2763e7944c4e7a900b4ea59f6d5e3d6caca9c580beb92b1011995d800318e6ec67480baf91c88ed5da9a61cb239178874b7d50eccb776752bd7791430006aa12feaf28c91c5c0ede2105483deb2d1a8a06474ff1340336947bda777ec8834c0d89087595d67722faf83f14c7235282c4f2155b29872df6003830cb28775122e88c7c9c3b7e02e3870125990df92d5650a580ace3c09a8c903f17707521c00877c288bbc91467d7c000aa339bc732711e52e95c3b803e65edd2fe2d9d3d860401ee621d258d34d50c8adccefac002c8c2d0989232c82be0a4193159decea3f2ced502487f02c126a9d5c85776ab44a83c7880c9bc3a7480cee6acbf7cd6472ab6047a2971f4c1b24dfdd547a13dee9a593249dc0cfdff9053f4cb43c344aa890e5531e9e7c8fb2dcfdc88cc4896a893896f22cf03f20b695f9ab58a1145effbea77ca1d588cfa9ba1457fe20c042374bed1d56eb5c0c85406592f935092c3624762ab7da5cc72aaac51abb6cab8d81b6c0806d283a42a33bcac7dc0ca5d8f9144a565cc5978433b014796078aa8b1a9f0262f84732f25243add98596edd6c27b1f105b8a8a371ed360978ccb14bc0b766297483d3387d15eb4969e8276c975303f038426f07961645dfc1fd472a134a061e7936440047cf339691065e4c1eb126f888ce9a186fffebee2bb91664cc810a55089855f6487d6be4e21f5f39c3261f3dd908c6d67ec4d5be975cd9b44e99ce2aa734db9e93236babae7a05a3385400865011968ad71d412c574d801f2e532e0e227101b0f1d4b09bff97ff252ff0915f293675b55674eca092cf7b6967c646808cb027a286942faee4a646f4986fc33962e1bd5b5f36b244c6dc3c1513811c7273bd16034d75c2933e13fed6686ae4fadee16ce46f4ec43533c93d1a495b09acf82344ebbb4342ab5a95b7b372cd06fe05518abb6c105254689fa1bdcfa12be885819220223a70821602d427e0962e88246dc2e7ffa1686d0d5cfe82951f80faf170733a2f0d6868c84e7ae365924ceaa67a5cde0e40fc8ae736860b2fdf4bb389c8e60b8d91c0f366ed42d22de0e8e116cda7fb7b3e7316177de792aae27809991588043b6b97d4eb359a5fb84f873047ccc20f749fad487aa93a086cfa24991983d9c16a7b367386351c2312fc283056a174c3d69aa979f2764244ce6c691228e671ea35255a985f0fa6c2931ecbc0a9fda4e854d39204f585e4358ef2a20c166edebcecb22a7e878a21e79f21d74d5c5a8512311d524a6086a9a66af1d906cae1d4774dcfe87ac0450e2d1633d3d3ca50af3f865d89c18e6799da28319fdb6dba115210736a82e8b83165201603d7652b4d04cacf8b1c38e1baad434d9e355ba711ed1abc4de52ed8b98e14dac5e6c74ae9b6763155fe7053f62b8d55b87c6f19a98202481e95e35514f333e1d1506b326b58f8c49b39c018390389940a5d64e90525116787ddff3ee97ee5aed3b14b091c1e1b814a58d2325faea9bf6e01678ccc09dea8363e4ed8f559b993f3ad67b49b49c0566a622d9d9ae8a51c5131c9ab98bd41427f8b9852b0066aedaa431aeebcefaf0be3f2f538c4f45c614972f5849c370bc07f407ffb291c898e79f31eacf8b6d92ddf82cb08a94f3ace30f9bf5e0a77e6e1b852e260acd997fb50033c40972aeb3a6f7b4a3cae76f35cb35f83f1f236d3b50b6d68d55c324aeb6a02bc2a167188c2b7315f24ce45e73d8976947c2f9a7a8d63ca2f37b8221727477d16c78c813bdff281af6cf302e91d86bd090b36a5fab8ddaf93270668f99354bdcdf9d51692559d86348513e3955ec957d1fe528e926946b23b953f1999b81d2eca27d004c679d59539fdc17f9e66a8c422bf444c2c83e912a64c16c540f5a9147cc36adb4ada321d75d5e4243904467c754dbf29da814ad04f7070c8c98efe67fe70a714fbb55997097fe45be9e3f64358a3f2f85a46dfce278f977c43e491913eb79411d7b808fae9ba039517ae279276f76e633210a066b8e72cbb4c63fe869b3422e112905babc824a47b46010e78eaad2acc5046d2ce8bf0ff4195be1d5d5d28d9470a66ba01f34c0aea24ecf881719be70324b3403fbb800b6e66be8ae5d01a8e60b7ccd8c351d9de2214f12d125eeb3fda50245ab2c7be9a0a35bdf1500eb94abc0283796c172c012e99996fc178df4ce589fdd8853f66ea33f998352f831f031d5e1e857f93f542836638ed78d6dc14ebc1145f036df28bd659634c700f0b75ba7d818159659d78a31bf971182e25466d236970157389c817050a54b2aee1a5b8ed75ba0be88973f95cd3ec62510495b87b839258d6f3feca09bc94424d75c20e79a49fb201863d403bb2e5f91d0bc172b90ef756d2df14bc280b5b8f4712402eba9c73ce0352d0d1d89e94c73234f16324911cf3fe782b0f69f0442967a79cdad83338c8064fe45ba3df3112e2f960e50789a639fc1c6994799de0162d6a51c13004350c4765d0463c97b84a44db917542701eba23fdb3751e65f46a52f6152b14bf9fa4ee75348d66e91c754200ef1e710ef1e141745e4c1a049b2bec8f50d5a7412e37aa0dabd171820fcaabb2b97daac1e8b5b74c185aaaaeb5043f625e50cbb3950e6f61f575f4e021567b45b070735b3115816b0571366fb73f12033cd9c2c0efa49b866c5d76cf6126b0017037213427f5a028a20db27a01b68a21095c315019cc5697729d30b281b60191c1ee9263b745fe174c7e36e5c661bd87e60c4deb2b6c2bb7034dc06f87d1dc063c1bb0046dc23e731a9960d6069338d948ed197d282573e3d414f25f349ccc599ff720b8025f589dcb283f357070ca770a379e0f8390f4ffb28142a130560e9bcd83d2d16aedf473211ca93b1e547e66bda3059d1ce7dfc879f9772cdddf187dc36571e78d2b94edb7ca4c8447799d1c48f9842b0fe42e4c5e833912850cc7d4927488e880e9b7b57c1290fb68e0e43a1371498284398f956e2d4bd8c014ef7f3dae7425655dcc096b2b32e5312f0fc601b3f3edc74841839a9f0aa5312f1e5ee8c5d69b452e0b86ba65f6acffe445b31ece56a7b3bbeae3ab0945a0f2d7939e0dca70905487bfe16ecc007d2290c1774c3f6f14bd1de377ba6777a8fdf48703f40a75be019ef6f4cf0957152136b282be29916a0f554bb16d776c4c395797cd92c471abd6fe1872aeddd187a281128e68189cc06a03e595de07db242e8d7c8ceac3469565566f08bbda8c9e3177694fca8720459f6d40c445f9ba3d03508870cae13522911b600bd8e2e9bb554486b5579b99a9af947a79495ba97e962a72fd014f832b650c0198e1d8211929b2771895c379bdf5c74e87fcb8a94846acbb76af56e2683da837420b8c924043130a05aa516e14c954d20197d2154e5a7330ffe473c2e5cf09bca0cfb4a3a6d11ebf6e33900705d2ef3cb7582be80576ab96ff30c98f3e5d6a08033d55b8fba5323af1efd87d069ec3e8b45762ac22d39ed672e8bf9aa0293e89e9e8f1d62ee710f8c3dcb7ca65629c25625245d9b93bd13822bae05db95fb07eeebe1ff26e03c378a02ac3148a782c968b0fde90523da412d37cfa7b5305691a321414eca186eb15639838af7102910e73567b4a146f0d7ea66a7a8c8d08dde15a5da5cfc0d13b2ad05ee35e5e4705ff341fca421d58229e25ac78539b08073246a2889019ee61a17d359f5f07bb5a0bb319247a5170374e449c6795e3abe93b70a4a5f4c79dc413791ab5f3ff4f1d70b03b82b9701f5b90cd6b1c39fc3f5e428acbe4565cc8f88f78f8689fd2c9fd561b2308c729b399f251e3bc7987ee8aa5b9c9e82750e55be5aa717a4c1477ecff7630882e791094b1779f63fde3636bcd53df8947dd51e364d725dbac62e96bc12388f397085e056ee089b25210946e22dfc848f1d89d818556f0108711744a9329f804c0e4469662866a9a546811370e0557105cb3e2fe1c5e13ec0e3971e9e0d5998bbcea960dee0a6d0ef6b010f886dd7cad916b4b22903ccffbe49ce3548f4fd2caf208176809bc94cf8f345d6077ad12f051e49e6ab0063d4938be9eee9d104e7dadbea76aed8c417b35c55e2b62c78ea6c2abc9da8619ccbdad3551ebae80695fe3f7182535de5a4fd7851ab0284892253e0fb5a510e76904c5e890bad78be57562ec873bf591c87c9405decb9637f44522f0dc2ab287155d7a6e4f3d12a17273316dfca1d1950053e289bcaf2e0b03c3c8718c1a9a5cc90e78c738366c6526f4d8a25081e2484be7c17c6ba60b91d82c9a69261d74a27090b72500d1257a0ab04e67833481b61f804ee57b7c4dd17fb0ff65168088515ee8a1f32cf9eb656703322f51b871041dae8c3777fad2c9c670baa3fa8ed1cac13873594c365bd8225566cd3d83444a1c2db4434c61424d6ec539f5cb90093380a95a0761f4eb878ca2428f89b13e2d01b99d3e27b820b2253a1f33aabccd85c4f0ed38566c9eb843d8ba32b94780f194594ab51333460c253820b43343f693c1b9ae1f8a19e44813d442963154cabd60bca0cef0c2007a14768f514e29b82b302783505fea7eb05b6f9792282a6f4eefaa4025588aadb647663bce31101beb4af45332a62c5f6a8dbc33e7cc1ce80679020ab8257ac037497c51a09ae0fadbb1eab98a79c1c22f999f554d02186f585ee918a6afa58aef63310134c269def3306b94c6d17bf37e59ad2a0ffac8f828b55ccb045efa4dcbefaee18313b69096e0ca1076a2381d5abc5e7818a9696f5a7d144807c76f152321132e044ec3d9355aa43e298de08a3b512ea97f8c2d1674ced4126b3e6ff94397e855258ea50f51190ff20e27078eb93de125b64098c73a94baa0fe31dc491b66d444055449844fed79f52d09a28219d71741371d3c008b6351ed0b8001c7f63865b9e101e15b0806987b3ebc8ed34ef8c13536bb3bb5faa666ede17bc2b10c561e1b606caf443c0b9cdf9210060a17162a5e54f367ee753b22796de2cf74f28fcbcce88cdd04520b3feb9a72fd06a6adac69d8db9071c35746ef985610f9b774bb903178b4a085b5d85867e4c247fc63949efed694fede4713f550750086f741221fb62a9425c1362d23033bca5f73bfc8513105f6fedb7ea1467c1daecaf68657c79f361d0ce0eb343a48d8edea1fd46f7bb238d079f9b5a989baa6dbb10aeb5194c000147f755c6fc73f652ad56047c917a7deffaa2d00a6476a08f9d0542af7852045126389720713ed348cb56c71cda182889993a17da2bc418f4cf0f1de100d0dc826708034bd594fff6b8953997bf44292400f5cc2a3d6a2f7dd41f88917f4dff389c179ea949e444d1a7bf4e51050d4a8eca0d8955651f2c55712305036df9198eafab02eea420487c71788c6d262fd3c579a640fab0ddc5d73781a1c3cfeb70294bba2ebdb964e82d4c055260b4eb85ce7038f2ff5feb0f192798e639f62d00ef17f49d29a469c7dd56a14b4750aebd3139a9ec340e5497efc02a9f01068eb1200d2b0c5382cc03edfde6495dca5cab8a6766bca03dbeaee63dc4d51d5a43e1b17c3aa654a6f5b369a5a0bb815608e89f93c34d128742539b3f5c50f284d2b5d6e968af8101deaa326548db3a2102f89b46ce09ebb0fda5d4ab0d67fa0d1f04562ceee46bbcb4a211a87411f8890993adf9b3f55472998bff8af203befa182e8a191286bb4b1fea985977ed9aecd3578bac455338b92d0219736e1c92916a41e2d3c8d518b845b954770ea48916efcce98755e011cf5c2064ebd50ed80b364df985fa0fc8aeaca6b30c270db5172b9f2b78e6208d8bd111133e01673416cba67a0230f2c0f880fb7fca98fb9c2f35637fc66bb6c4c07296bf1c7fadf805e97c9d765a5ddaedb574784a2af5659e9447c83c32af6b5d082d137975220250d1d7e582b2b43226bbfac356040e2f0d37ad21af60abe5b9ae55bbd919c2dd7cc8b22aeba7261f52cafef9827b58d605a53215c4a142c3f8d3a996d1cdbe57a42474c95945815d803e8c747fb520ac0bf5c8497d0767226d3247393b34891adba54f8af1d868fc29458f6ea53967f8192cf92cfb31fbaf87adac1765fce1247db44375d4678c75cd603a8af6aab9e3db1ce0000"], 0x1610}, 0x1, 0x0, 0x0, 0x10}, 0x40050) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x882, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40040c1) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40040c1) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x4000000d, 0x3000, 0xfff, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x3, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2]}, 0x1fe, 0x81) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x4) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) mq_timedsend$auto(r1, &(0x7f0000000100)='@\x00', 0x0, 0x6, &(0x7f0000000180)={0x401, 0x8}) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) semctl$auto_SEM_STAT(0x4, 0x5, 0x12, 0x9) (async) semctl$auto_SEM_STAT(0x4, 0x5, 0x12, 0x9) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) execveat$auto(r3, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=&(0x7f0000000280)='/sys/kernel/debug/regulator/regulator_summary\x00', &(0x7f0000000340)=&(0x7f0000000300)=',$}\x00', 0x7fff) unshare$auto(0x40000080) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 4m1.880319758s ago: executing program 2 (id=227): socket(0xa, 0x5, 0xff) close_range$auto(0x2, 0x8, 0x400002) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80080, 0x0) read$auto(r2, 0x0, 0x805644) madvise$auto(0x108000, 0x800034, 0x4) 4m0.507417073s ago: executing program 2 (id=231): mmap$auto(0x0, 0x2020009, 0x4000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendfile$auto(r0, r0, 0x0, 0x200002) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) socket(0x2, 0x1, 0x106) (async) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2a, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r4, 0x4, 0x1, r3, @relative_id=0x13, 0xe604}, 0xf) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x3, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 3m59.405970878s ago: executing program 36 (id=200): ioperm$auto(0x0, 0x3, 0x1) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) r2 = gettid() set_mempolicy$auto(0x2, &(0x7f0000000100)=0x7d, 0x6) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRNcmyT\x04\xe9M\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\x85\x8a=\xbaKgn6\xa7\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\t\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9\x1d\xe1\xc6\x8b\xc0\xe8-\x94k\xef\x95\x1c\xcf_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/261, 0x5, 0x3d) close_range$auto(0x2, r0, 0xfffffffc) mmap$auto(0x4, 0xcc8, 0x20000000000000df, 0x209b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)) r5 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tkip_mic_test\x00', 0x80002, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D1\x00', 0x1, 0x0) socket(0xa, 0x801, 0x100) sendmmsg$auto(r6, 0x0, 0x7, 0x2000) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0x8, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x1, 0xfffffffffffffffe, 0x52d, 0x6d3c, 0x5, 0x2]}, 0x0) close_range$auto(r5, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) rt_sigqueueinfo$auto(r2, 0x1, 0x0) 3m51.04681471s ago: executing program 37 (id=218): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0x18, 0x2, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0) ioctl$auto(r1, 0xc0205648, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/net_prio.prioidx\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x15, 0x5, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) pread64$auto(r0, &(0x7f00000000c0)='./cgroup.net/net_prio.prioidx\x00', 0x10, 0xfff) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) read$auto(0x3, 0x0, 0x80) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x24000005) 3m45.164151996s ago: executing program 38 (id=231): mmap$auto(0x0, 0x2020009, 0x4000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendfile$auto(r0, r0, 0x0, 0x200002) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0xe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) socket(0x2, 0x1, 0x106) (async) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2a, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r4, 0x4, 0x1, r3, @relative_id=0x13, 0xe604}, 0xf) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x3, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 3m42.866812369s ago: executing program 8 (id=249): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0x3, 0x0, 0x0) 3m42.665992856s ago: executing program 8 (id=250): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) mmap$auto(0x768, 0x2, 0xdf, 0x19, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r1, &(0x7f0000000200)='\x97\x01\x9e\x9aM\x1f\'\x94 K\x9d\fB\x83\xd4\x04}\x7fP\xad\r\xbb\x1a}\x91=\x7f\xd6E\x11\xbf-4\xeb\x8bSo\xaeuUN\xc3\xb3A\x99\x00\xd4+tN\xaa\x1a\x12V\xe7]`9\xa394m\xf4\xbb\xa3&\x9dY\xe6\x987\xa7R\xf5', 0xbfd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m42.091414875s ago: executing program 8 (id=254): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) read$auto_rfcomm_dlc_debugfs_fops_(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x1d, 0x2, 0x6) getsockopt$auto(r2, 0x6a, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x50050) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x80002, 0xffffffff) r3 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x800020000000006, 0xdd, 0x0, 0x0, 0x2) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x20, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4000000000002, 0x10000, 0x4000000000db, 0x110, r3, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x1, 0x84) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m41.520115335s ago: executing program 8 (id=256): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x5, 0x100, 0x1) mmap$auto(0x0, 0x200006, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 3m40.939552965s ago: executing program 8 (id=257): socket(0xa, 0x5, 0xff) close_range$auto(0x2, 0x8, 0x400002) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80080, 0x0) read$auto(r1, 0x0, 0x805644) madvise$auto(0x108000, 0x800034, 0x4) 3m39.562971027s ago: executing program 8 (id=260): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0xb, 0x9067, 0x18c, 0x6d, 0x0, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x2001007, 0x1, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7fb, 0x6, 0xa, 0x47ffffff, 0xa7c2}, 0x102) r0 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdb7e, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044054}, 0x140080e4) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000000c0)=""/9, 0x9) socket(0x22, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) r4 = getpgid(0x0) r5 = pidfd_open$auto(r4, 0x0) setns(r5, 0x48000080) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) mmap$auto(0x81, 0x400008, 0x9, 0x10, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(r6, 0x0, 0x5) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) setsockopt$auto(r0, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000140)={0x8a, &(0x7f0000000100)=&(0x7f00000001c0)="847a75d9e87d316a32e47ea1b3c9323703399d3abd8b2521e2953e3439095d70afe872951b5dedb79e9fe544183ba0172dd67aecad6c5d9222d64996bb9c765dbb6f6b4422701f51f5e16e1db80f704d78ab6a2f33337dacaa857eaca1491df77ac162fd18cc6d893e7869cdd08e838453c321b41676a232ef34d40894dc4b54287b13633cd830f5147332d15a4138bb0ab35c4ea2bb1d58ca4a52a942eb0c9c9df939c28b8b241b4137b8c7b805bfd3b70e363cae3bc986f988fd2376538490f57e7d1dc9d760396e5d29", 0x3}) 3m39.402457931s ago: executing program 7 (id=261): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, 0x0, 0x6a) r0 = socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) connect$auto(r0, &(0x7f0000000000), 0x55) sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000100)="c9a19b9bd45daf8d1e42325618d266e9b4d29346a538f4501870f63224261ea46d2048306cb48caaa96d8e74944fe4311b40ed00640d041ca43967b3a4f18b86c38c26c9df10a988d1f2c1c69262f1908a4880ba65a9fca956c49dc5990384089f8c005c64f32d9bbba6f289964068a8ced940397118c0aa87e26591cfeead8827333219be3c5524a56ceb46dbe9688b2156", 0x10000, 0x0, 0x2, 0x0, 0x3, 0xfffff2cf}, 0x6}, 0x2319, 0x5) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) ioperm$auto(0x3, 0xe, 0x2000000000000149) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) r2 = getpid() connect$auto(0x3, 0x0, 0x55) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_SETLK(r3, 0x6, r2) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffff6, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xccb, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2, 0x800, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c]}, 0xfffff7fffffffffa, 0x81) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) seccomp$auto(0xfffffffb, 0xfffffff8, 0x0) io_setup$auto(0xffff, &(0x7f0000000580)) statmount$auto(0x0, 0x0, 0x9, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 3m38.819960339s ago: executing program 7 (id=262): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) setgroups$auto(0xe32, 0x0) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x19) (rerun: 32) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x1ed242, 0x0) (async) mmap$auto(0x9, 0x1, 0x7fffffff, 0x44eb1, 0xffffffffffffffff, 0x300000000000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram9\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c04, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0x406, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r1 = socket(0x2b, 0x2, 0xfffffffc) bind$auto(r1, 0x0, 0x67) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) (async) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) (async, rerun: 64) r3 = socket(0x25, 0x5, 0x0) (rerun: 64) getpid() (async) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250700000025000280d55a23f175ef8db6edfe89c98b47aa01e23d29598881cd4f0abe615fbca7abb446000000340003802e00fb00cfe7401b2d3c50a5b364dfaa4aa04127d01fe213f02858ded2acfa6da8a1430d2bacef57c18d22b4cf770000174a3dd25ab4472afb9da6c32ad65f35c2c66d348a3357c66de56e7b83a3523cab694d150975018b2a07ac4e6e6551410d41222d4278b645f1c75b389c7af52407d7eea9f73ea0f938d4f302eb52279883c085389803472071066fc68e34285d9982cd3052fc5149113eb3"], 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, r3) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) poll$auto(&(0x7f0000000080)={r4, 0x9, 0x9816}, 0x7f, 0x3) ioctl$auto(r4, 0xaf01, 0xffffffffffffffff) (async) ioctl$auto_VHOST_SET_MEM_TABLE2(r5, 0x4008af03, &(0x7f0000000240)={0xd, 0x0, [{0x4, 0x16ba00, 0x2}, {0x3, 0x3ff, 0x9}, {0x7fffffffffffffff, 0x13c}, {0x1, 0x7fffffff, 0x4574ba0c}, {0x8, 0x10, 0x4}, {0xfffffffffffffff8, 0x3, 0x4}, {0xff, 0x2, 0xfffffffffffffb77}]}) (async) mmap$auto(0x0, 0x202000c, 0x3, 0xab1, 0xfffffffffffffffa, 0x80000000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r6, 0x800c5012, 0x0) 3m36.490510576s ago: executing program 7 (id=264): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b5", 0x40) 3m36.210739504s ago: executing program 7 (id=266): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0x18, 0x0, 0x0) 3m35.834121993s ago: executing program 7 (id=267): socket(0xa, 0x5, 0xff) close_range$auto(0x2, 0x8, 0x400002) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80080, 0x0) read$auto(r1, 0x0, 0x805644) madvise$auto(0x108000, 0x800034, 0x4) 3m34.652220316s ago: executing program 3 (id=269): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000005540)='/dev/input/event2\x00', 0xa481, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x88080, 0x0) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x68200, 0x0) read$auto(r1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x202002, 0x0) pipe$auto(0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x40, 0x1ffde, 0x9, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x28a2, 0x3, 0xb, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x800200000000, 0x6, 0x0, 0x4, 0x0, 0x0, 0x70624ce7, 0x1, 0xffffffeffffffffd, 0x8, 0x8, 0x10, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x3, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0x9) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="c6ba98b269d2e6cdf9aef6", 0x7}, 0x3, 0x1) write$auto(0xca, 0x0, 0x2d9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = socket(0x2, 0x801, 0x6) sendmsg$auto_OVS_DP_CMD_DEL(r3, 0x0, 0x90) ioctl$auto(r2, 0x4008af04, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m34.469059961s ago: executing program 7 (id=271): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ipv6_route\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) shmctl$auto_IPC_STAT(0x401, 0x2, &(0x7f00000006c0)={{0x1, 0xee01, 0xee00, 0x5b0, 0xe21, 0x2e, 0xa}, 0xb, 0x2, 0x4fae9fc4, 0x4, @raw=0x6, @raw=0x5, 0x9, 0x0, 0x0, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vkms/graphics/fb0/modes\x00', 0x129102, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 3m34.164649988s ago: executing program 3 (id=272): openat2$auto(0xffffffffffffff9c, 0x0, 0x0, 0xf6) mmap$auto(0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xcb1, 0xfffffffffffffffa, 0x4000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.13/usb35/35-0:1.0/usb35-port4/over_current_count\x00', 0x2800c1, 0x0) write$auto(r0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0xa299, 0xffffffffffffffff, 0xffff) prctl$auto(0x17, 0x10000000000001, 0x0, 0xfffff7ffffffffff, 0x8) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) fsopen$auto(0x0, 0x1) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000140), 0x107}, 0x8) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x800, 0xf) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) unshare$auto(0x40000080) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m33.318978238s ago: executing program 3 (id=276): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000005540)='/dev/input/event2\x00', 0xa481, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x88080, 0x0) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x68200, 0x0) read$auto(r1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x202002, 0x0) pipe$auto(0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x40, 0x1ffde, 0x9, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x28a2, 0x3, 0xb, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x800200000000, 0x6, 0x0, 0x4, 0x0, 0x0, 0x70624ce7, 0x1, 0xffffffeffffffffd, 0x8, 0x8, 0x10, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x3, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0x9) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="c6ba98b269d2e6cdf9aef6", 0x7}, 0x3, 0x1) write$auto(0xca, 0x0, 0x2d9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = socket(0x2, 0x801, 0x6) sendmsg$auto_OVS_DP_CMD_DEL(r3, 0x0, 0x90) ioctl$auto(r2, 0x4008af04, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m32.17438474s ago: executing program 3 (id=278): nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) write$auto(0x3, 0x0, 0xfdf3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8, 0x5, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 3m32.064345116s ago: executing program 3 (id=280): socket(0xa, 0x5, 0xff) close_range$auto(0x2, 0x8, 0x400002) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80080, 0x0) read$auto(r2, 0x0, 0x805644) madvise$auto(0x108000, 0x800034, 0x4) 3m31.469779386s ago: executing program 3 (id=281): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000005540)='/dev/input/event2\x00', 0xa481, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x88080, 0x0) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x68200, 0x0) read$auto(r1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x202002, 0x0) pipe$auto(0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x40, 0x1ffde, 0x9, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x28a2, 0x3, 0xb, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x800200000000, 0x6, 0x0, 0x4, 0x0, 0x0, 0x70624ce7, 0x1, 0xffffffeffffffffd, 0x8, 0x8, 0x10, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x3, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0x9) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="c6ba98b269d2e6cdf9aef6", 0x7}, 0x3, 0x1) write$auto(0xca, 0x0, 0x2d9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = socket(0x2, 0x801, 0x6) sendmsg$auto_OVS_DP_CMD_DEL(r3, 0x0, 0x90) ioctl$auto(r2, 0x4008af04, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m28.618466849s ago: executing program 9 (id=285): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x88080, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vkms/graphics/fb0/modes\x00', 0x129102, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 3m28.408660304s ago: executing program 9 (id=286): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x632b491c) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) msgsnd$auto(0x2, &(0x7f0000000180)={0xd83, 0xe}, 0xb4a5, 0x100) write$auto(r2, &(0x7f00000000c0)=',.\\\x00', 0xd) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000200)=0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130026bd7000fcdbdf2517c5edd808000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r0, 0x867c, 0x0, 0x8000}) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = getsockopt$auto_SO_DEBUG(r0, 0x6, 0x1, &(0x7f0000000040)='-@\x00', &(0x7f00000000c0)=0x7) mknod$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x6) io_uring_setup$auto(0xff, &(0x7f0000000100)={0x5, 0x9, 0x8001, 0x9aa, 0x4, 0x200, r6, [0x6, 0x8000, 0x9], {0x4, 0x2, 0x8, 0x3, 0x10000, 0x10000, 0x4, 0x2, 0x512}, {0xffffffe6, 0x10000, 0x1, 0x0, 0x3, 0xab, 0xffffffff, 0x5, 0x5}}) 3m27.816616395s ago: executing program 9 (id=287): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000005540)='/dev/input/event2\x00', 0xa481, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x88080, 0x0) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x68200, 0x0) read$auto(r1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x202002, 0x0) pipe$auto(0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x40, 0x1ffde, 0x9, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x28a2, 0x3, 0xb, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x800200000000, 0x6, 0x0, 0x4, 0x0, 0x0, 0x70624ce7, 0x1, 0xffffffeffffffffd, 0x8, 0x8, 0x10, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x3, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0x9) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="c6ba98b269d2e6cdf9aef6", 0x7}, 0x3, 0x1) write$auto(0xca, 0x0, 0x2d9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = socket(0x2, 0x801, 0x6) sendmsg$auto_OVS_DP_CMD_DEL(r3, 0x0, 0x90) ioctl$auto(r2, 0x4008af04, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m27.143830836s ago: executing program 9 (id=288): mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000) r0 = clone3$auto(&(0x7f0000000400)={0x40000000006, 0x3, 0x5, 0x0, 0x4000000007542, 0x8264, 0x3ff, 0x4, 0x49, 0xfffb, 0x4}, 0x3) socket(0x2a, 0x1, 0x3) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) clock_gettime$auto(0xa, 0xffffffffffffffff) mmap$auto(0x0, 0x6000, 0x204000000000df, 0x40eb2, 0x402, 0x1) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100273d7000fcdbdf2524000000186211f619aa414d96737230000000000000000000000040"], 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x400d8) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3f, 0x7a) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) read$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000007c0)=""/217, 0xd9) r4 = prctl$auto_PR_SET_MM_ENV_START(0x80c, 0xa, r0, 0xd, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x38, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'rose0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYBLOB="00012abd7000fddbdf250200000008000100040000001e0005006fe59fceabd34d7d512ce0840048e271481baf67e1789b64ffa4edd3e58b2f73", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20814}, 0x4004054) 3m26.526931717s ago: executing program 9 (id=289): socket(0xa, 0x5, 0xff) close_range$auto(0x2, 0x8, 0x400002) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80080, 0x0) read$auto(r2, 0x0, 0x805644) madvise$auto(0x108000, 0x800034, 0x4) 3m26.038585277s ago: executing program 9 (id=290): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/netdevsim4/power/runtime_suspended_time\x00', 0x181400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.net/blkio.bfq.dequeue\x00', 0x8ad00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x1, 0x0) socket(0x2c, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) adjtimex$auto(&(0x7f0000001100)={0xf332b6e, 0x0, 0x0, 0x0, 0xd4, 0x1, 0x3fe0, 0x0, 0xed, 0x328e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x3, 0x84, 0xffffffffffff628e, 0xa747, 0xdeb4, 0x804}) vmsplice$auto(0x1, 0x0, 0xa, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xc, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x5, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) r4 = prctl$auto_PR_SVE_GET_VL(0x33, 0xb1, 0x0, 0x0, 0xe) close_range$auto(r4, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x1, 0x0) 3m23.576942128s ago: executing program 39 (id=260): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0xb, 0x9067, 0x18c, 0x6d, 0x0, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x2001007, 0x1, 0x2, 0xe, 0x5, @attach_btf_obj_fd=0x3, 0x166, 0x7fb, 0x6, 0xa, 0x47ffffff, 0xa7c2}, 0x102) r0 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdb7e, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044054}, 0x140080e4) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000000c0)=""/9, 0x9) socket(0x22, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) r4 = getpgid(0x0) r5 = pidfd_open$auto(r4, 0x0) setns(r5, 0x48000080) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) mmap$auto(0x81, 0x400008, 0x9, 0x10, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(r6, 0x0, 0x5) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) setsockopt$auto(r0, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000140)={0x8a, &(0x7f0000000100)=&(0x7f00000001c0)="847a75d9e87d316a32e47ea1b3c9323703399d3abd8b2521e2953e3439095d70afe872951b5dedb79e9fe544183ba0172dd67aecad6c5d9222d64996bb9c765dbb6f6b4422701f51f5e16e1db80f704d78ab6a2f33337dacaa857eaca1491df77ac162fd18cc6d893e7869cdd08e838453c321b41676a232ef34d40894dc4b54287b13633cd830f5147332d15a4138bb0ab35c4ea2bb1d58ca4a52a942eb0c9c9df939c28b8b241b4137b8c7b805bfd3b70e363cae3bc986f988fd2376538490f57e7d1dc9d760396e5d29", 0x3}) 3m18.552042559s ago: executing program 40 (id=271): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ipv6_route\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) shmctl$auto_IPC_STAT(0x401, 0x2, &(0x7f00000006c0)={{0x1, 0xee01, 0xee00, 0x5b0, 0xe21, 0x2e, 0xa}, 0xb, 0x2, 0x4fae9fc4, 0x4, @raw=0x6, @raw=0x5, 0x9, 0x0, 0x0, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vkms/graphics/fb0/modes\x00', 0x129102, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 3m15.575327547s ago: executing program 41 (id=281): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000005540)='/dev/input/event2\x00', 0xa481, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x88080, 0x0) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x68200, 0x0) read$auto(r1, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x202002, 0x0) pipe$auto(0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x40, 0x1ffde, 0x9, 0x3, 0x9, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0x28a2, 0x3, 0xb, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x800200000000, 0x6, 0x0, 0x4, 0x0, 0x0, 0x70624ce7, 0x1, 0xffffffeffffffffd, 0x8, 0x8, 0x10, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x3, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567]}, 0x1fe, 0x9) vmsplice$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="c6ba98b269d2e6cdf9aef6", 0x7}, 0x3, 0x1) write$auto(0xca, 0x0, 0x2d9) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) r3 = socket(0x2, 0x801, 0x6) sendmsg$auto_OVS_DP_CMD_DEL(r3, 0x0, 0x90) ioctl$auto(r2, 0x4008af04, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/num_grat_arp\x00', 0xc8282, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m10.597389603s ago: executing program 42 (id=290): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/netdevsim4/power/runtime_suspended_time\x00', 0x181400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.net/blkio.bfq.dequeue\x00', 0x8ad00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x1, 0x0) socket(0x2c, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) adjtimex$auto(&(0x7f0000001100)={0xf332b6e, 0x0, 0x0, 0x0, 0xd4, 0x1, 0x3fe0, 0x0, 0xed, 0x328e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x3, 0x84, 0xffffffffffff628e, 0xa747, 0xdeb4, 0x804}) vmsplice$auto(0x1, 0x0, 0xa, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xc, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x5, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) r4 = prctl$auto_PR_SVE_GET_VL(0x33, 0xb1, 0x0, 0x0, 0xe) close_range$auto(r4, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x1, 0x0) 3m0.73674315s ago: executing program 0 (id=298): nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) write$auto(0x3, 0x0, 0xfdf3) socketpair$auto(0x8, 0x5, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 3m0.474692218s ago: executing program 0 (id=299): r0 = socket(0x11, 0x3, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000028c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1000c0de873cfddbdf250300000044f0318008000200010000000800020046ffffff080001000a73000008000200080000000800020004000000080002000400000008000200000030000800010000000000080008007953ea53cea5452af582ca55424425c1b690f1584f06ad4fb30ac5ad26d9986686096c6485a8a7dcd1b54803c6bc49ca45f80f9bc43c0d50fa1020100065e082c4ca5d7553bc91683dda950298fcc64963c335a0dd376c7f89acc33027f052deab8efc5b4d4398ecb9cd2560a26e81da9a5142d2ce351066dd797364ecc970fbad123fe519eded4a52c85757fe136ee65909b5c7abb6fa1b03d9b54c9d5bccd819baeaefba5963a10d0d5544cfc8bbbd8b30f3e80a", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8815) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x5, 0x80000, 0x0) socket(0x2b, 0x809, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000340), r1) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000380), 0x444041, 0x0) sendmsg$auto_IPVS_CMD_GET_CONFIG(r1, &(0x7f0000002780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002940)=ANY=[@ANYBLOB="04010000", @ANYRES16=r2, @ANYBLOB="000026bd7000fc09000000000000000002803000868008005600ac14143e080094f6", @ANYRES32=r3, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x400}, 0x24040845) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0x10, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368d, 0x2, {0x100000000, 0x10000}, 0x4, 0x6, 0xd, 0x1008000, 0x0, 0x80000008, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) vmsplice$auto(0x1, 0x0, 0xa, 0x6) mmap$auto(0x0, 0x4020009, 0x6, 0x12, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0x20000000e1, 0x12, 0x7, 0x40000028000) io_uring_setup$auto(0x1000006, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x10ba03, 0x55) socketpair$auto(0xf90, 0x4005, 0xfffff9c5, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) 2m59.290460445s ago: executing program 0 (id=300): nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) ioctl$auto_PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket(0x23, 0x5, 0x0) bind$auto(r1, 0x0, 0x80) mmap$auto(0x800, 0xe983, 0x4800, 0xebe, r1, 0x1fc) mmap$auto(0x0, 0x20009, 0x101, 0x14, r0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/devpath\x00', 0xc3100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/49, 0x31) eventfd$auto(0x5) r3 = socket(0x10, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) dup2$auto(r2, r1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xffffffff, 0x0) semctl$auto_GETALL(0x0, 0x80, 0xd, 0x2) write$auto(0x3, 0x0, 0xfdf3) socket(0x10, 0x2, 0x0) listen$auto(r3, 0xffffff65) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) 2m58.689629062s ago: executing program 0 (id=301): mmap$auto(0xfffffffffffffff3, 0x4fff, 0x100df, 0x9b72, 0x400, 0x28000) sysfs$auto(0x2, 0x20, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x6, 0x0) getsockopt$auto(r1, 0x10d, 0x6, 0x0, &(0x7f0000000000)=0xb) fstatfs$auto(0x3, 0x0) ioctl$auto(r0, 0x4b67, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyz6\x00', 0x800, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x2100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x84, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x800}) r2 = socket(0x26, 0xa, 0x1005) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) unshare$auto(0x40000080) bpf$auto(0x1442, &(0x7f0000000000)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x2}, 0xa1) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) socket(0xa, 0x3, 0xff) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(r0, 0x8, 0x3) 2m57.143865408s ago: executing program 0 (id=306): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0p/sub0/status\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000180)=""/8, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/irq/0/smp_affinity\x00', 0x149441, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10000e, 0x10000c, 0x10000f, @raw=0x200000002}, 0x283) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)="7aa87453be80f312b4d5737eb65bfe0d021b52a2b3c98802288ea13980c2d9e6f01b10a769605450995add15322662ed74b789f7f9989a87e0680f7d0a29b6f2263855f79e8b4e5878947df5c901d50d38b2da85cc05b30827e0d45ff612a76fb90558872ff17499cdd5b44418565a444aa1fb858831cc3939e127e243d2fddc4dd7", 0x82) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf251100fffc0c00018008000100", @ANYRES32=r5, @ANYBLOB="43bd352b231f84ef610b5e41ea1324eca433cbfe7e14fb7cb0179b47d0e758c463ea5f735a890d53da1d408b67f42dc4684e43addbdedf2e9eed73828c6225c3ffa10c86ac0033fa2f1458d2eb17fadd8aafad2e69365b5a371e369e7a88b8"], 0x20}}, 0x400c0) write$auto(r0, &(0x7f0000000480)='\x80\xa3\xf3.\x80UX\xb3\xec4\xfbX+\xa7:\x8ao\x8c\x90VBt\x93\x8f\xe19\x9cg\xaa\xb5w\x10\xba9\"T\xfa\'\xcdJz\xf9\x97\x1e{\x88\x87\x1d\xdc\x149\b\x15\xb4\xeai\xd2\\ak\xd0O#f[\xff\x8d[\x83[\x00\xaa\xcdc\xae:\x00\x00\x00\x00\x9e\x00\xd9\xe0\x83\t?&\x00\x00\x00\x00\x00\x00\xd1\xb2\xd4\xb7]\xf0\x80Q\xdb\x8e\x03\x02\xc12\x8a\xc1\xd5f\xa3r\xbb7\x04\xc2\b{s\xefF\x17\xe38\x1d\xd5r\x94\xfc\xfa\xaex2n\xe2v~\xfe\xe0\xf7Ed\xb8*\xa8\xb2\xc8`\x91v\xf9\t\x9e_!\x16\xb31\xe1\xb5\x90\xcd\x1b\x00Bh\b$gv\xc6^\f\xfc.\xda\xe1\x1c5\xbf\xc5\xcb\x91\x18%\xe2\xdc\x1e1\x8cy\x00\xa0MJ}v\xb6tF\x12\xe9(\xa6~\xdd\x889K>\x85\\\x125\xb0\aa\xbd\xb5u\xb2\x10|\r-\x8f\xb2\xd4\x91,\xae\x01\xbd\xb8\xa0\xe2\xbc\xa9\xc0\xb9\xd1J\xaf\"\xa8a\xde\a\x02]/\x10\x8fX\x99\xe1\xdd\x8b\xe6\x87:DD\xd6\x18\x1f\x19\xa09\x86\x9b\xdc\x04\x87\f', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x9, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fsopen$auto(0x0, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) socket(0x1e, 0x1, 0x0) pipe2$auto(0x0, 0x80) socket(0x15, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mtrr\x00', 0x74641, 0x0) 2m56.465951327s ago: executing program 0 (id=309): bpf$auto(0x0, 0x0, 0x6f4) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20000004) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000005) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x248c91, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xc, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lseek$auto(r2, 0x9, 0x2) clock_gettime$auto(0xfffffffc, 0x0) socket(0x11, 0x3, 0x2) 2m41.30928034s ago: executing program 43 (id=309): bpf$auto(0x0, 0x0, 0x6f4) sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20000004) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000005) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x248c91, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xc, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lseek$auto(r2, 0x9, 0x2) clock_gettime$auto(0xfffffffc, 0x0) socket(0x11, 0x3, 0x2) 1m12.534483747s ago: executing program 4 (id=647): socket(0xa, 0x5, 0xff) close_range$auto(0x2, 0x8, 0x400002) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x6, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80080, 0x0) read$auto(r1, 0x0, 0x805644) madvise$auto(0x108000, 0x800034, 0x4) 1m9.15271038s ago: executing program 4 (id=654): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x1000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x6804c1, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0x81}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xe}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @HSR_A_IF1_AGE={0x8, 0x3, 0x2e}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev_snmp6/hsr_slave_0\x00', 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, 0x0) 1m8.236427502s ago: executing program 4 (id=657): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cpu.stat.local\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)=""/251, 0xfb) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0b45545, 0xffffffffffffffff) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x80008) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty30\x00', 0x200, 0x0) ioctl$auto_TCSBRK2(r2, 0x5409, &(0x7f00000003c0)) 1m4.967579262s ago: executing program 4 (id=666): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) timer_create$auto(0x1, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$auto(0x3, 0x400, 0x1) ioctl$auto(r2, 0x6, r2) shmctl$auto(0xf, 0x9, &(0x7f00000003c0)={{0x69ceb51c, 0x0, 0xffffffffffffffff, 0x49a5, 0x0, 0x8, 0x101}, 0x1, 0x5, 0x82a7, 0x0, @inferred=0xffffffffffffffff, @raw=0x7, 0x5, 0x0, &(0x7f0000000100)="4ec8ff437a8d4b658672bfddeb937bbff39139760dbd860d0bd09fde9b13137f828e793f7b96eb01e2070aa5923c1bd967396e753a5dff1876e14da08cd97a58c798cc9a817c3c945cc57f2b55ca6ab77e1e623739bdce4f0bd0870394be95c77794d85a3295f372147f0922eb28190eb43e89be9c4199db88005c9832dd43e28fd68f3df13bd07fa7f8c6c18e0c00456115cc10db18397cac53be4a0181631cb6a824cc07c3630cc36a7072dab27e39b73b8a0f88479b6129b48e572bf5c919dffcc4cd615af333596ce897528b5b82de45500922b6d94338675f316ee893ecb9a941640e82", &(0x7f0000000300)="234d7d8ff68c74a3f04749b41c2156ca1e8e7287e4be9dff1292b48ca6a06eaaf2488b413d874110e73b1c6199885bf9b1fab97cdefcd45ac0d0eb14a3b381e83ca2d382c06b4bd89275e3893a04b7fac546fb49b7beba89c1ca5e35459d65eef1cbad9c010a10eca26a67689276749140d2122b51539dc9ca1edd94a9eadc6ded4cfea5364cb064b04a690a881e5ae8f764ce0cc537defb3877"}) lstat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)={0xcd, 0x2, 0x7, 0x3, 0x0, 0xee00, 0x0, 0xd, 0x2, 0x0, 0x81, 0x4, 0x7, 0x1, 0x400, 0xcd6, 0x7}) ioctl$auto_XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000580)={0xffffffff, @raw=0x4164000000, @inferred=r0, 0x542, 0x2, '\x00', {0x2, 0x3, 0x7, r3, r4, 0x3000000, 0x4, 0x7, {0x6}, {0x1, 0x10000}, {0x6, 0x100}, 0x6, 0x9, 0x3, 0x7, 0x0, 0x7, 0x8, 0x9, 0x401, 0x7, '\x00', 0x2c, 0xd2, 0xf2b8, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x5, 0x1, 0x4b, 0x0, 0x9) socketpair$auto(0x6, 0x40a8, 0x0, &(0x7f0000000040)=0x10) r5 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) signalfd$auto(r5, &(0x7f0000000200)={0x5}, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x4, 0xffffffffffff8000, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) 51.062877429s ago: executing program 4 (id=698): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x2}}, 0x66) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x6, 0x200004, 0x4000000000df, 0x40eb3, 0x402, 0x300000000000) (async) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec22\x00', 0x101901, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0x7) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x6) socket(0xf, 0x3, 0x2) (async) socket(0x2, 0xa, 0xe57a) (async) socket(0x2b, 0x1, 0x1) (async) setsockopt$auto(0x6, 0x6, 0xd, 0x0, 0xc) (async) getsockopt$auto(0x6, 0x1d0, 0x25, 0x0, 0x0) (async) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x3b71, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1b, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) mlock$auto(0xfbe8, 0x4) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="f141a885f57aa50568caee38000000", @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf250300000004000800080003800400128012000100898771f1c19f1779048590828847000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu1/topology/core_id\x00', 0x0, 0x0) 43.421481356s ago: executing program 4 (id=702): r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) pipe2$auto(&(0x7f0000000080)=r0, 0x3fb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @local}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x16e, 0xcd8, 0x6) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a00000a"], 0xf8}}, 0x10004010) clock_getres$auto(0xfffffffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r4, 0xb81, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, 0x0, 0xc) mmap$auto(0x0, 0x400008, 0x2000000e, 0x17, r5, 0x9) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r6, 0x720, 0x0) socket$nl_generic(0x10, 0x3, 0x10) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000200)={@siginfo_0_0={0x6, 0x4, 0x3, @_kill={0xffffffffffffffff, 0xffffffffffffffff}}}, 0x648, &(0x7f0000000280)={{0x7, 0xfffffffffffffe00}, {0xd031, 0x4}, 0x8, 0x9, 0x9, 0x6, 0x1, 0xb, 0x0, 0x8000, 0x1, 0x4, 0x7, 0x10, 0xd, 0x2}) 28.105577063s ago: executing program 44 (id=702): r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) pipe2$auto(&(0x7f0000000080)=r0, 0x3fb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @local}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x16e, 0xcd8, 0x6) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a00000a"], 0xf8}}, 0x10004010) clock_getres$auto(0xfffffffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1c, r4, 0xb81, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, 0x0, 0xc) mmap$auto(0x0, 0x400008, 0x2000000e, 0x17, r5, 0x9) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r6, 0x720, 0x0) socket$nl_generic(0x10, 0x3, 0x10) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000200)={@siginfo_0_0={0x6, 0x4, 0x3, @_kill={0xffffffffffffffff, 0xffffffffffffffff}}}, 0x648, &(0x7f0000000280)={{0x7, 0xfffffffffffffe00}, {0xd031, 0x4}, 0x8, 0x9, 0x9, 0x6, 0x1, 0xb, 0x0, 0x8000, 0x1, 0x4, 0x7, 0x10, 0xd, 0x2}) 11.104352348s ago: executing program 5 (id=756): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) r0 = fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x200) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x5, 0x2020009, 0x8, 0x100000000eb9, 0xffffffffffffffff, 0x6) semctl$auto(0x9, 0xc1b8, 0x4, 0x1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) socket(0x10, 0x5, 0x0) (async) syz_clone(0x40100100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x2040001) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) pwrite64$auto(r1, 0x0, 0x4, 0x2) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r1, r2, 0x0, 0x3) (async) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) (async) ioperm$auto(0x7, 0x6, 0x3) 9.686489672s ago: executing program 6 (id=760): setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0xa8100, 0x0) fcntl$auto_F_RDLCK(r0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20006, 0x3, 0xe71, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = inotify_init1$auto(0x4007ff) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(0x0, 0x10fe) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/152, 0x98) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109a42, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000012c0)={{&(0x7f0000000100)="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", 0x3, &(0x7f00000011c0)={&(0x7f0000001100)="a9b446d0beb6177bc6f19189a852ae5006e45f20fb84d944b023c1ac132b5e2798a453ad68f982cb9d938330a0dc689bcb504a3ce6af595983fae4dc41da372b28b42a379531b0bd2e256d2eb0d4ca97ed0ad63b4c4a1cc8106f485b421ba2d30c22dcf1b28c30dc1ab0a9005da8baf59fe60d51d71b1bd2eb52273146c00c07fb8d523e871f094d8778"}, 0xec5, &(0x7f0000001200)="bd9f7558a11ebfa8f93bd3570951444bd375c1fc15925e7054b11455d196dcabdf759ea828fa720b6094e80e8168dfc51748fc2aa31080efddd6ac1aca656f44894c36c8a067d6386786a7a2fdec725f2e83b39b7dc28e24c2153ae0d2bc9446f3566f6f346db9de42ca60d942f40eadf5f6c5a4ca805a9a63a99049c2175653083b84c48d832cdb8254a78c46ec6562882410de13256f3b7f2cdc81c9ef2cec0bff59e44d9f6f932f1d", 0xffff, 0x345}}, 0x1, 0x8) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xa, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x4, r2, 0x9, r2}, 0xffffffff) r3 = socket(0xa, 0x3, 0x3) connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xfdef) 8.126251116s ago: executing program 1 (id=763): mmap$auto(0x0, 0x6, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x2) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x\t\x18\x8b\xec\xd7\xe80xee01, 0xee00, 0x3, 0x3, 0x0, 0xb, 0xffffffff, 0x2, {0x6018, 0x8}, {0x372, 0x8000}, {0x7, 0x1}, {0x1, 0x6}, 0x0, 0x5, 0x5, 0x9, 0xf, 0x1, 0xfffffff7, 0xd77, 0x1, 0xb06, 0x1, 0x2, [0x10, 0xbec, 0x100000000, 0x7, 0x5, 0x3ff, 0x4, 0x1, 0xaa8]}) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0x0) r2 = setfsgid$auto(0x0) keyctl$auto_KEYCTL_REJECT(0x13, 0xffffffffffffffff, r1, r2, 0xfff) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x100000, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) bpf$auto(0x4, &(0x7f0000000600)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0xd, 0x6, 0x2e}, 0x6f4) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) read$auto(r3, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D1\x00', 0x2001, 0x0) select$auto(0xfffffffb, 0x0, &(0x7f0000000500)={[0x1, 0x101, 0x9, 0x4a, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, 0xf, 0x51c7, 0x7, 0x8, 0x9, 0x1, 0x8000000000000001]}, &(0x7f0000000580)={[0x9, 0x5, 0xfffffffffffffc01, 0x4, 0xfffd, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x69, 0xa4, 0x5, 0x2, 0x3]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0x9, 0x37, 0x948a, 0x101, 0x15f4da0b, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x8, 0x9, 0xfffffffffffffffc]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x40100, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 4.470309479s ago: executing program 6 (id=769): unshare$auto(0x40000080) r0 = socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = getsockopt$auto(r0, 0x0, 0x26, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x806, 0x0) read$auto(0x3, 0x0, 0x7) read$auto(r3, 0x0, 0xb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/remaddr\x00', 0x181580, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_clear_warn_once_fops_(r2, &(0x7f00000000c0)="bb80d4c5697c897c350324ae2f99a542b3e21c0661fb528e31501369cf1b25618d7430144b3e8211bae0c5d391ed8389a842f6bf848532def353a68b319b71aba20a0bfe32e552e02f2700de802a0b2909f4c7d7d3bb6316ec73f37a9508370a7089946062986bc7a5553d334c390e5e5145c5d5b7087e38c074ec49f1952b2052ee0cd3e15c85df6a3ff82c56e0e3664b773f7bbf0f72f42322ad467efeb2b99edc172758e7f50ab52c9991e68678c1583951e0308614352c152ba52f04d55e7a1fa311989232b9a9bd86", 0xcb) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000034000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 3.597789208s ago: executing program 1 (id=770): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101d00, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) memfd_create$auto(&(0x7f0000000000)='\x00', 0xe) capget$auto(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf258c0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) r5 = userfaultfd$auto(0x0) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_VERSION={0x8, 0x3, 0x101}, @NLBL_MGMT_A_DOMAIN={0x1f, 0x1, '/proc/thread-self/fail-nth\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x8000) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x840) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101d00, 0x0) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) read$auto(r0, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) memfd_create$auto(&(0x7f0000000000)='\x00', 0xe) (async) capget$auto(0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) (async) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf258c0000000c"], 0x20}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) (async) userfaultfd$auto(0x0) (async) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_VERSION={0x8, 0x3, 0x101}, @NLBL_MGMT_A_DOMAIN={0x1f, 0x1, '/proc/thread-self/fail-nth\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x8000) (async) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x14}, 0x840) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) 3.534702139s ago: executing program 2 (id=724): unshare$auto(0x40000080) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu1\x00', 0x80802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001) unshare$auto(0x40000080) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026f7dd46db2ead009500000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x180c0) msgctl$auto_MSG_STAT_ANY(0x9, 0xd, &(0x7f0000000280)={{0x2, 0x0, 0xee01, 0x8, 0x401, 0x7, 0xe07f}, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x2a, 0x7, 0x0, 0x8, 0x9, 0x9, 0x2, 0x800, 0x5034, @raw=0x8, @raw=0x3ff}) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000300)={0x6, 0x800d, 0xffff, 0x19, 0x4, 0xffffffffffffffff}) r2 = semctl$auto_IPC_RMID(0x4, 0xaf6e, 0x0, 0xff0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)={0x1558, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x8, 0x3, "cf56b8e7"}, @ETHTOOL_A_WOL_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_SOPASS={0x5, 0x3, 'f'}, @ETHTOOL_A_WOL_MODES={0x1242, 0x2, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @u32=0xf87a}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x6}, @generic="0d494100fe0c0023deb67829229050185b44d064524838e1342017adb83c127167432c97e6651cd616b67085018dc44c7cce224b628aa8e8ed339e32a0bfbc3ed200be55c877355960ceeff898a0feac3c61bd9f916bf9fb22bd340008c3db69b7d02326192335046cd9cdbefdb01a090df90b6795c23c6165a043c5c0f73124c640ad4057b068aea6040e89bff7eb14fcaf", @nested={0x119c, 0x22, 0x0, 0x1, [@nested={0x4, 0xec}, @generic="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", @nested={0x4, 0x62}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x4}, @typed={0x16, 0xd3, 0x0, 0x0, @str='/proc/sysvipc/shm\x00'}, @nested={0x16c, 0x6b, 0x0, 0x1, [@nested={0x8, 0x22, 0x0, 0x1, [@generic, @nested={0x4, 0x10}]}, @generic="0b99550319d33503833cd898c3613ea2060a630ad061f0bc87052f56daeae5c9919d09579d98eb08e31cce1a464e729c52b37764d21e63783cf3e031fdafcee7a143676c6f9d4ea25e2b382e62168f61a3608ce0025499147f24a01ad849e7b3606157e24a5152bdcc50b0f2d249ca02faf281e20e329b03f0bb21d51067e75022958c91f7e93cfcc7766b56e776243562eebcac578711b3ab81a458cf9a205cb00c99ddb5204347277afbf7284eaa631bc8", @generic="45b4334755f407be7bbb745492b89d38a08c678c0782a57e050b582504d23218984cc87d4fbe7032ecfd525037850c114183571333d52393ffc3b8c3137e200a2806e95597a41f80c0b2f2f88e030d3796cbfe0c1e121176c2d414d09ab1813741d6305571e74a4bb4bbec14b140783c1df31c497284444dc63da9d817210ac2e7dfcab98b1236bb5b7ebb656a3064ef0ace8402d155d2082cd2449be4cda9e75d7b1b57aa39f46fa1b7eeacf930"]}]}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x222, 0x2, 0x0, 0x1, [@generic="29a8eec36433e5798430d8ce1ab8e975b57133a39a4460a9f071d3f6e22818ffe38bfcccdb57fbf7d96d63acb145de36469b5aa40f98eff1148e89d741801bf8350bd9aaa6a7c7eaa0e101aa499f0346571e12a51427a68e174f4c134899f0b8b5559881f6a70aa915cd31ed296a6ef3ac57df75bfc4", @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x9356}, @nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @pid=r2}]}, @generic="45d688beea8cd9608c1b8257faf5bbd44da79b8868581302198421088951593a7c231f5d812f5e36e8d5e313d76b5ca36ba3848d9f2e604464ba0a8a6d164718104cb3192f20cd96f668dd2a782aa655df136a9eca4ea829291a11376c7af760dc98682fb6ebff45b2037d10c7e14c12", @nested={0xc1, 0x7c, 0x0, 0x1, [@nested={0x4, 0xec}, @typed={0x5a, 0xe3, 0x0, 0x0, @binary="01d578bbb1930df0637c525b4214a9f33535ce4fd6f3a8c17e91960afb2421048ff9b5adfd845ef177fcf41c24781fe577eba61d3985e23def2bbf88108efe7d2e043bb71d141aa21a42575e088a2a1b3818099d2510"}, @typed={0x8, 0x10e, 0x0, 0x0, @fd}, @generic="14f7db4f13dfa9e679c5cde8f788a638df0310371365a54e0f5791674b9513d7e71a312ee69da9adb1e6b4a6b97da6f850613efe931df35ec69f7f5ddceb3971a50498b0f2ad8670742d2bb9e0fbf9fca8340fb13e"]}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x5}, @generic="e9be2d777e32b8c7e9f626fe0f5dbcde6899e2f3577cf162d30adc4cf2a5d0b4655bdd7aed0427da7006c223387ced800a6f233e369a48a0f79824e4975da332d31e26b572e0a632a91997804533db6dcd63977b"]}, @ETHTOOL_A_WOL_SOPASS={0x9, 0x3, "c2057c6ddc"}]}, 0x1558}, 0x1, 0x0, 0x0, 0x800}, 0xc040) epoll_create$auto(0x4) fcntl$auto(0x0, 0x407, 0x100000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mlock$auto(0x4, 0x0) mlock$auto(0x7c89, 0x47fff) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x1a3000, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto(0x3, 0x50434903, 0x1) setrlimit$auto(0x1000000007, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) move_pages$auto(0x0, 0x2, 0x0, 0x0, 0x0, 0x1) 3.449515734s ago: executing program 6 (id=771): r0 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/scsi/drivers/st/fixed_buffer_size\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r2 = socket(0x2, 0x1, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x69) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}}, 0x5, 0x20000000) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000007eb09caf6dc5de9460053cd22e85549704baebc56de938ecf5d1c341b20cfc3160b54db903cdadeab48f0c8c66ff869f4564d4dbca34c0ef1dce6dd477", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf2515000000060011000400000006001100ff070000080003001c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x110) r3 = prctl$auto_PR_SYS_DISPATCH_OFF(0x4, 0x0, 0x0, 0x5, 0x0) close_range$auto(0x6, 0xeffff000, 0x6) finit_module$auto(r3, 0xfffffffffffffffe, 0x7) r4 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000080), r0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x32c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x20004000) mmap$auto(0x400000000000, 0x2000b, 0x0, 0xeb2, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) write$auto(0x3, 0x0, 0xf5f3) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000240), 0x481, 0x0) setsockopt$auto(r0, 0x6, 0x3, 0x0, 0xa1) 3.068194666s ago: executing program 6 (id=772): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioprio_set$auto(0x1, 0x0, 0x0) ioprio_get$auto(0x2000000002, 0x0) madvise$auto(0x0, 0x53, 0x9) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x3b8b, 0xa) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000002200)="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", 0x106b) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) 2.670563034s ago: executing program 1 (id=773): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/usb/usbmon/32u\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000100)={0x4}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 2.22331067s ago: executing program 5 (id=774): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x23, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000140)=@phonet={0x23, 0x7, 0x6, 0x2}, 0x52) socket(0x28, 0x5, 0x0) connect$auto(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0) readv$auto(r1, &(0x7f0000000080)={0x0, 0x8}, 0x1003) socketpair$auto(0xd, 0x5, 0x6, &(0x7f0000000000)=0x2) 1.932166914s ago: executing program 1 (id=775): unshare$auto(0x40000080) madvise$auto(0x5, 0x7fffffffffffffff, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x68300, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) pipe$auto(0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) inotify_add_watch$auto(0x4, 0x0, 0xe6e) semget$auto(0x0, 0x13c, 0x1ff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x200, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) mmap$auto(0xfe, 0xffffffffffffff9a, 0x4, 0x1ff, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x11, 0x80003, 0x300) socket(0x25, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x4a040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0b, 0x6, 0x80000000080, 0x1fffe000000000, 0x80000001, 0x5, 0x6d3c, 0x200000000000005, 0x2]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mlock$auto(0x7c89, 0x47fff) 1.82092881s ago: executing program 2 (id=776): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty30\x00', 0x200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x11b8, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x110, 0x1, 0x0, 0x1, [@nested={0x101, 0x116, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0x5c, 0x0, 0x0, @fd=r1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x108c, 0x2, 0x0, 0x1, [@nested={0x1085, 0xda, 0x0, 0x1, [@typed={0x61, 0x9f, 0x0, 0x0, @binary="4d8b3c4267089464b4aa1bab29ba85b4292fed2f8b900e0101096d00fcf9c595552d54be4ebe3d547ff067f1a26893f5f1131ef9e9b26672e3b1ea0e9e302c7136cc4d46ee3098174d51c9d48fd52224d6245f9b63bd03195708387543"}, @generic="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", @nested={0x4, 0xe7}, @typed={0x8, 0x146, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xf3, 0x0, 0x0, @fd}, @typed={0xc, 0xab, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private0}]}]}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) memfd_create$auto(0x0, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x2, 0x9, 0x2da0000, 0xff, 0x1000101, 0x1c00000, 0xa1, 0x6, 0xfffffffffffffffe, 0x200000000000008, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) ioctl$auto_TCSBRK2(r0, 0x5409, &(0x7f00000003c0)) 1.471928145s ago: executing program 5 (id=777): mmap$auto(0x0, 0x20008, 0x4001000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) mmap$auto(0x80000001, 0x56e, 0xdf, 0x19, 0x2, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) readv$auto(r0, 0x0, 0x1) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) madvise$auto(0x0, 0xffffffffffff0002, 0x15) mlock2$auto(0x8, 0x5c00000000000000, 0x3) msgrcv$auto(0x0, 0x0, 0x8, 0x1, 0xb1) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYRES64=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) 900.5919ms ago: executing program 2 (id=778): sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0x472, 0x9b74, 0x2, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = prctl$auto_PR_PAC_SET_ENABLED_KEYS(0x3c, 0xfffffffffffffffa, 0x0, 0x20000000, 0xfffffffffffffff9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000049c0), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_FLUSH(r1, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000004a00)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf2502000000050002000000000005000300000000000500020000000000130002002521282c245e2e8a2f21d26d8327021a252d9b7d252f2100"], 0x48}, 0x1, 0x0, 0x0, 0x8000041}, 0x41) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x3e1083, 0x0) socket(0x1f, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x89f1, 0xffffffffffffffff) syz_clone(0x0, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000640)="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") get_mempolicy$auto(&(0x7f0000000180)=0x6, 0x0, 0xa6, 0xfff, 0x3) r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/exec\x00', 0x200, 0x0) read$auto_proc_pid_attr_operations_base(r3, 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x2802, 0x0) 455.8929ms ago: executing program 1 (id=779): gettid() (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) (async) socket(0xa, 0x3, 0x3a) (async) socket(0x1d, 0x2, 0x2) (async, rerun: 64) connect$auto(0x3, 0x0, 0x55) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume\x00', 0x8100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) (async, rerun: 64) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) unshare$auto(0x9) (async) setsockopt$auto(0x3, 0x29, 0x39, 0xffffffffffffffff, 0x1) (async) io_submit$auto(0x6, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x5, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0xfff, 0x0, 0x6}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64) mmap$auto(0x2, 0x8, 0x4000000000db, 0x44eb1, 0x4000000000000006, 0x300000000000) 193.224305ms ago: executing program 5 (id=780): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) recvfrom$auto(r0, 0x0, 0xc, 0xb21, 0x0, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x3ac42, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 0s ago: executing program 2 (id=781): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) prctl$auto(0x2f, 0x2, 0x8, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000700)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81J*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x1b\xc1\x96\x0e\x91\x0f\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x1f\x00\xbe\xc0\xf4\xf5\xe2\xe8\x9e)\xea2\xbb`\xb2\x0f[\x1c6\xc8&\bw\xd7\x13=\"\xe6\x13\xb4\xc3\x04\xfe\x85\x01\x10b=\xed\xa5\x04\xbf\x86\xac\xc2\xd3\xa5g\xac\x1a\xd9*\xef\xd2\xeb\xb8sVt&M\xc2=SXu\x9aN\xa1\xf6\a\x1a\xe3\xe6{t2\xe2\xdc\xcf\x95\"\xd8\xbe\xfe\xdc0N\x7f\xb2D\xc5\b__f\xc7\x04F\x8d#\xf54\xfc\x92\x9f2\'\xbe\\\xa1\xb5\xa2\xf9\x12', 0xffffffffffffff5a, 0x13) r0 = socket(0xa, 0x3, 0xff) setsockopt$auto(r0, 0xfffffffe, 0x7fffffff, 0x0, 0x28) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0xffffffff, 0x8000) mmap$auto(0x0, 0x3, 0xe0, 0x9b72, 0x2, 0x10000) ioctl$auto(0x3, 0x8918, 0x91) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) socketpair$auto(0xfffffff9, 0x7, 0x1003, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x41cb01, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_KVM_CREATE_VM(r1, 0x4188aea7, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/183, 0xb7) read$auto(0x3, 0x0, 0x80) kernel console output (not intermixed with test programs): 1761][ T7716] veth0_vlan: entered promiscuous mode [ 196.141148][ T7716] veth1_vlan: entered promiscuous mode [ 196.270091][ T7716] veth0_macvtap: entered promiscuous mode [ 196.439904][ T7716] veth1_macvtap: entered promiscuous mode [ 196.638260][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.688565][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.703436][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.723046][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.734349][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.751388][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.761575][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.772574][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.784234][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.923046][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.955844][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.985109][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.025219][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.065258][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.105169][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.125934][ T7716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.157853][ T7716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.235444][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.270488][ T7716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.283236][ T7716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.329301][ T7716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.346047][ T7716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.593162][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.631391][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.739940][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.761034][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.775469][ T5847] Bluetooth: hci2: command tx timeout [ 198.248820][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.9.265'. [ 199.903435][ T7883] netlink: 'syz.9.270': attribute type 1 has an invalid length. [ 199.937435][ T5847] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 200.266379][ T29] audit: type=1800 audit(6035729477.461:2): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="discovery_nqn" dev="configfs" ino=18705 res=0 errno=0 [ 201.824050][ T5847] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 206.176474][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.9.286'. [ 206.928777][ T5847] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 211.541171][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.560197][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.575604][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.584590][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.595363][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.603322][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.743386][ T4535] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.964498][ T4535] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.106151][ T4535] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.266732][ T4535] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.604399][ T8109] chnl_net:caif_netlink_parms(): no params data found [ 212.715286][ T4535] bridge_slave_1: left allmulticast mode [ 212.720981][ T4535] bridge_slave_1: left promiscuous mode [ 212.761186][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.837044][ T4535] bridge_slave_0: left allmulticast mode [ 212.842744][ T4535] bridge_slave_0: left promiscuous mode [ 212.876772][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.685174][ T5847] Bluetooth: hci1: command tx timeout [ 214.116534][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.145577][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.156993][ T4535] bond0 (unregistering): Released all slaves [ 214.613739][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.632022][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.654060][ T8109] bridge_slave_0: entered allmulticast mode [ 214.675913][ T8109] bridge_slave_0: entered promiscuous mode [ 214.691548][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.705159][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.712385][ T8109] bridge_slave_1: entered allmulticast mode [ 214.738151][ T8109] bridge_slave_1: entered promiscuous mode [ 215.039453][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.185285][ T4535] hsr_slave_0: left promiscuous mode [ 215.195141][ T4535] hsr_slave_1: left promiscuous mode [ 215.201047][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.235534][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.276159][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.283630][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.376623][ T4535] veth1_macvtap: left promiscuous mode [ 215.382194][ T4535] veth0_macvtap: left promiscuous mode [ 215.441986][ T4535] veth1_vlan: left promiscuous mode [ 215.455478][ T4535] veth0_vlan: left promiscuous mode [ 215.765481][ T5847] Bluetooth: hci1: command tx timeout [ 216.489804][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.513036][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.521420][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.529525][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.537752][ T5148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.545287][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.232500][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 217.316001][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 217.846991][ T5847] Bluetooth: hci1: command tx timeout [ 218.330309][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.492197][ T8109] team0: Port device team_slave_0 added [ 218.581061][ T8109] team0: Port device team_slave_1 added [ 218.646660][ T5847] Bluetooth: hci3: command tx timeout [ 218.787336][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.794328][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.913841][ T8109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.962306][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.033259][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.125521][ T8109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.266227][ T8109] hsr_slave_0: entered promiscuous mode [ 219.272533][ T8109] hsr_slave_1: entered promiscuous mode [ 219.389032][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.399102][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.407203][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.415641][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.423236][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.430624][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.712621][ T4535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.909374][ T4535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.925311][ T5847] Bluetooth: hci1: command tx timeout [ 220.142713][ T4535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.174026][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 220.424297][ T4535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.725714][ T5847] Bluetooth: hci3: command tx timeout [ 220.932943][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.944113][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.952216][ T8177] bridge_slave_0: entered allmulticast mode [ 220.960725][ T8177] bridge_slave_0: entered promiscuous mode [ 221.021018][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.032774][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.041645][ T8177] bridge_slave_1: entered allmulticast mode [ 221.060447][ T8177] bridge_slave_1: entered promiscuous mode [ 221.101374][ T4535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.140393][ T8207] chnl_net:caif_netlink_parms(): no params data found [ 221.218064][ T4535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.298074][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.371927][ T4535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.397934][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.504399][ T4535] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.526975][ T5847] Bluetooth: hci2: command tx timeout [ 221.626308][ T8177] team0: Port device team_slave_0 added [ 221.647284][ T8109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.677321][ T8109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.712401][ T8109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.746326][ T8177] team0: Port device team_slave_1 added [ 221.768357][ T8109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.017660][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.024805][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.040452][ T8207] bridge_slave_0: entered allmulticast mode [ 222.048070][ T8207] bridge_slave_0: entered promiscuous mode [ 222.059325][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.075261][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.082560][ T8207] bridge_slave_1: entered allmulticast mode [ 222.096823][ T8207] bridge_slave_1: entered promiscuous mode [ 222.106150][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.113118][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.175553][ T8177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.203865][ T4535] bridge_slave_1: left allmulticast mode [ 222.210723][ T4535] bridge_slave_1: left promiscuous mode [ 222.224743][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.247374][ T4535] bridge_slave_0: left allmulticast mode [ 222.253075][ T4535] bridge_slave_0: left promiscuous mode [ 222.265892][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.288187][ T4535] bridge_slave_1: left allmulticast mode [ 222.293896][ T4535] bridge_slave_1: left promiscuous mode [ 222.304629][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.317245][ T4535] bridge_slave_0: left allmulticast mode [ 222.323355][ T4535] bridge_slave_0: left promiscuous mode [ 222.346513][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.806043][ T5847] Bluetooth: hci3: command tx timeout [ 223.574098][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.593936][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.606070][ T5847] Bluetooth: hci2: command tx timeout [ 223.617839][ T4535] bond0 (unregistering): Released all slaves [ 223.952129][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.004114][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.019955][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.026827][ T4535] bond0 (unregistering): Released all slaves [ 224.031466][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.041708][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.054158][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.067917][ T5148] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.075802][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.123288][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.133629][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.141066][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.168789][ T8177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.203008][ T4535] HSR: left promiscuous mode [ 224.220973][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.278435][ T8207] team0: Port device team_slave_0 added [ 224.357072][ T8207] team0: Port device team_slave_1 added [ 224.383906][ T8177] hsr_slave_0: entered promiscuous mode [ 224.391592][ T8177] hsr_slave_1: entered promiscuous mode [ 224.398577][ T8177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.406792][ T8177] Cannot create hsr debugfs directory [ 224.453318][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.460519][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.493822][ T8207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.508067][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.515170][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.541495][ T8207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.741799][ T8207] hsr_slave_0: entered promiscuous mode [ 224.751359][ T8207] hsr_slave_1: entered promiscuous mode [ 224.757804][ T8207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.765735][ T8207] Cannot create hsr debugfs directory [ 224.874624][ T8109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.885394][ T5847] Bluetooth: hci3: command tx timeout [ 224.901110][ T8283] chnl_net:caif_netlink_parms(): no params data found [ 225.081895][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.218662][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.225832][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.256371][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.263486][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.281009][ T4535] hsr_slave_0: left promiscuous mode [ 225.287119][ T4535] hsr_slave_1: left promiscuous mode [ 225.293657][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.301724][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.311426][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.318973][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.333036][ T4535] hsr_slave_0: left promiscuous mode [ 225.338873][ T4535] hsr_slave_1: left promiscuous mode [ 225.344502][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.352188][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.359941][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.369851][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.400151][ T4535] veth1_macvtap: left promiscuous mode [ 225.406013][ T4535] veth0_macvtap: left promiscuous mode [ 225.411557][ T4535] veth1_vlan: left promiscuous mode [ 225.416952][ T4535] veth0_vlan: left promiscuous mode [ 225.424630][ T4535] veth1_macvtap: left promiscuous mode [ 225.430318][ T4535] veth0_macvtap: left promiscuous mode [ 225.435953][ T4535] veth1_vlan: left promiscuous mode [ 225.441261][ T4535] veth0_vlan: left promiscuous mode [ 225.685419][ T5847] Bluetooth: hci2: command tx timeout [ 225.920070][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 225.964011][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 226.166079][ T5847] Bluetooth: hci0: command tx timeout [ 226.693731][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 226.734592][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 227.215719][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.222879][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.231448][ T8283] bridge_slave_0: entered allmulticast mode [ 227.241540][ T8283] bridge_slave_0: entered promiscuous mode [ 227.338000][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.348096][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.356963][ T8283] bridge_slave_1: entered allmulticast mode [ 227.363532][ T8283] bridge_slave_1: entered promiscuous mode [ 227.489511][ T8283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.527398][ T8283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.620335][ T8283] team0: Port device team_slave_0 added [ 227.649012][ T8283] team0: Port device team_slave_1 added [ 227.765244][ T5847] Bluetooth: hci2: command tx timeout [ 227.807259][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.814961][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.844972][ T8283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.867533][ T8283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.874483][ T8283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.915427][ T8283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.029198][ T8283] hsr_slave_0: entered promiscuous mode [ 228.044909][ T8283] hsr_slave_1: entered promiscuous mode [ 228.051183][ T8283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.061077][ T8283] Cannot create hsr debugfs directory [ 228.247296][ T5847] Bluetooth: hci0: command tx timeout [ 228.392952][ T4535] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.433956][ T8109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.446520][ T8207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.464210][ T8207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.502287][ T4535] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.516985][ T8207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.538550][ T8207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.598769][ T4535] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.622051][ T8177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.644856][ T8177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.705922][ T4535] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.725745][ T8177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.748973][ T8177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.872495][ T8109] veth0_vlan: entered promiscuous mode [ 228.989493][ T8109] veth1_vlan: entered promiscuous mode [ 229.124030][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.135937][ T4535] bridge_slave_1: left allmulticast mode [ 229.141615][ T4535] bridge_slave_1: left promiscuous mode [ 229.149070][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.160665][ T4535] bridge_slave_0: left allmulticast mode [ 229.167061][ T4535] bridge_slave_0: left promiscuous mode [ 229.172803][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.673462][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.687056][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.699099][ T4535] bond0 (unregistering): Released all slaves [ 229.753384][ T8207] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.890014][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.897160][ T7837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.911771][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.953613][ T8109] veth0_macvtap: entered promiscuous mode [ 229.988877][ T8283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.064888][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.072063][ T7836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.093500][ T8283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.109061][ T8283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.124481][ T8109] veth1_macvtap: entered promiscuous mode [ 230.142934][ T8177] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.174527][ T8283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.206869][ T4535] hsr_slave_0: left promiscuous mode [ 230.213636][ T4535] hsr_slave_1: left promiscuous mode [ 230.224835][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.234075][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.250982][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.260927][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.294767][ T4535] veth1_macvtap: left promiscuous mode [ 230.300761][ T4535] veth0_macvtap: left promiscuous mode [ 230.314140][ T4535] veth1_vlan: left promiscuous mode [ 230.320433][ T4535] veth0_vlan: left promiscuous mode [ 230.325635][ T5847] Bluetooth: hci0: command tx timeout [ 230.983831][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 231.063991][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 231.611052][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.618213][ T7835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.661140][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.680745][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.696629][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.728617][ T8207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.747468][ T8207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.773380][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.780544][ T6957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.815815][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.846763][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.874575][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.928430][ T8109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.945769][ T8109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.965622][ T8109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.975169][ T8109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.198936][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.233919][ T7838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.266919][ T7838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.349525][ T7836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.366640][ T7836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.405466][ T5847] Bluetooth: hci0: command tx timeout [ 232.422306][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.472360][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.502375][ T8207] veth0_vlan: entered promiscuous mode [ 232.520607][ T8207] veth1_vlan: entered promiscuous mode [ 232.548006][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.555207][ T7838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.593692][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.600893][ T7838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.624497][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.694984][ T8207] veth0_macvtap: entered promiscuous mode [ 232.730444][ T8207] veth1_macvtap: entered promiscuous mode [ 232.771309][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.802311][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.822194][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.845766][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.872937][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.907385][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.926089][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.950293][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.971090][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.006151][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.048333][ T8207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.073363][ T8207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.093318][ T8207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.113175][ T8207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.276141][ T8283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.373549][ T6957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.405706][ T6957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.501957][ T7838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.513772][ T8177] veth0_vlan: entered promiscuous mode [ 233.530152][ T7838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.566088][ T8177] veth1_vlan: entered promiscuous mode [ 233.661298][ T8177] veth0_macvtap: entered promiscuous mode [ 233.731907][ T8177] veth1_macvtap: entered promiscuous mode [ 233.817324][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.834200][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.852688][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.866823][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.877806][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.890029][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.902714][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.939181][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.959469][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.980890][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.005198][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.024150][ T8177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.057570][ T8177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.079105][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.124202][ T8177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.152897][ T8177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.166926][ T8177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.176109][ T8177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.212118][ T8283] veth0_vlan: entered promiscuous mode [ 234.253039][ T8283] veth1_vlan: entered promiscuous mode [ 234.459180][ T8283] veth0_macvtap: entered promiscuous mode [ 234.513616][ T8283] veth1_macvtap: entered promiscuous mode [ 234.550520][ T7838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.587124][ T7838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.634695][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.675727][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.705422][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.736746][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.767423][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.785888][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.797543][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.809235][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.821683][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.889698][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.923200][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.934091][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.951546][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.972358][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.993094][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.003380][ T8283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.014331][ T8283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.027158][ T8283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.071704][ T7835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.106416][ T8283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.125582][ T7835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.155207][ T8283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.177252][ T8283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.195146][ T8283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 235.635454][ T8504] FAULT_INJECTION: forcing a failure. [ 235.635454][ T8504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.680017][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.705740][ T8504] CPU: 0 UID: 0 PID: 8504 Comm: syz.5.292 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 235.705776][ T8504] Tainted: [U]=USER [ 235.705783][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.705795][ T8504] Call Trace: [ 235.705801][ T8504] [ 235.705810][ T8504] dump_stack_lvl+0x16c/0x1f0 [ 235.705843][ T8504] should_fail_ex+0x50a/0x650 [ 235.705875][ T8504] ? __pfx___might_resched+0x10/0x10 [ 235.705912][ T8504] should_fail_alloc_page+0xe7/0x130 [ 235.705934][ T8504] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 235.705967][ T8504] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 235.706003][ T8504] ? __pfx_mark_lock+0x10/0x10 [ 235.706036][ T8504] ? __pfx___lock_acquire+0x10/0x10 [ 235.706065][ T8504] ? mark_lock+0xb5/0xc60 [ 235.706092][ T8504] ? find_held_lock+0x2d/0x110 [ 235.706119][ T8504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.706185][ T8504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.706222][ T8504] ? policy_nodemask+0xea/0x4e0 [ 235.706261][ T8504] alloc_pages_mpol+0x1fc/0x540 [ 235.706285][ T8504] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 235.706308][ T8504] ? find_held_lock+0x2d/0x110 [ 235.706338][ T8504] folio_alloc_mpol_noprof+0x36/0x2f0 [ 235.706366][ T8504] shmem_alloc_folio+0x135/0x160 [ 235.706404][ T8504] shmem_alloc_and_add_folio+0x48e/0xc10 [ 235.706436][ T8504] ? shmem_huge_global_enabled+0x72/0x6b0 [ 235.706460][ T8504] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 235.706491][ T8504] ? shmem_allowable_huge_orders+0xd0/0x410 [ 235.706523][ T8504] shmem_get_folio_gfp+0x689/0x1530 [ 235.706557][ T8504] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 235.706586][ T8504] ? filemap_map_pages+0xf92/0x16b0 [ 235.706619][ T8504] shmem_fault+0x200/0xae0 [ 235.706648][ T8504] ? __pfx_shmem_fault+0x10/0x10 [ 235.706681][ T8504] ? do_pte_missing+0xde9/0x3e10 [ 235.706713][ T8504] ? __pfx_lock_release+0x10/0x10 [ 235.706750][ T8504] __do_fault+0x10a/0x490 [ 235.706781][ T8504] do_pte_missing+0xecf/0x3e10 [ 235.706814][ T8504] ? do_raw_spin_unlock+0x172/0x230 [ 235.706838][ T8504] ? __pmd_alloc+0x3c2/0x870 [ 235.706871][ T8504] __handle_mm_fault+0x1166/0x2c60 [ 235.706912][ T8504] ? __pfx___handle_mm_fault+0x10/0x10 [ 235.706943][ T8504] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 235.706995][ T8504] ? find_vma+0xc0/0x140 [ 235.707020][ T8504] ? __pfx_find_vma+0x10/0x10 [ 235.707051][ T8504] handle_mm_fault+0x3fa/0xaa0 [ 235.707089][ T8504] do_user_addr_fault+0x7a3/0x13f0 [ 235.707129][ T8504] exc_page_fault+0x5c/0xc0 [ 235.707159][ T8504] asm_exc_page_fault+0x26/0x30 [ 235.707193][ T8504] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 235.707218][ T8504] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 235.707238][ T8504] RSP: 0018:ffffc90003097d60 EFLAGS: 00050202 [ 235.707256][ T8504] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 235.707269][ T8504] RDX: fffff52000612fbc RSI: 0000000000000000 RDI: ffffc90003097de0 [ 235.707284][ T8504] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000612fbc [ 235.707297][ T8504] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 235.707310][ T8504] R13: ffffc90003097de0 R14: 0000000000000000 R15: 0000000000000107 [ 235.707341][ T8504] _copy_from_user+0x98/0xd0 [ 235.707367][ T8504] do_sock_getsockopt+0x5f6/0x800 [ 235.707392][ T8504] ? trace_lock_acquire+0x80/0x1f0 [ 235.707419][ T8504] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 235.707443][ T8504] ? lock_acquire+0x2f/0xb0 [ 235.707471][ T8504] ? __fget_files+0x40/0x3a0 [ 235.707507][ T8504] ? __fget_files+0x206/0x3a0 [ 235.707545][ T8504] __sys_getsockopt+0x12f/0x260 [ 235.707583][ T8504] __x64_sys_getsockopt+0xbd/0x160 [ 235.707613][ T8504] ? do_syscall_64+0x91/0x250 [ 235.707641][ T8504] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.707669][ T8504] do_syscall_64+0xcd/0x250 [ 235.707700][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.707730][ T8504] RIP: 0033:0x7f2794f8d169 [ 235.707748][ T8504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.707769][ T8504] RSP: 002b:00007f2795d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 235.707789][ T8504] RAX: ffffffffffffffda RBX: 00007f27951a5fa0 RCX: 00007f2794f8d169 [ 235.707805][ T8504] RDX: 0000000000000003 RSI: 0000000000000107 RDI: 0000000000000003 [ 235.707818][ T8504] RBP: 00007f2795d62090 R08: 0000000000000000 R09: 0000000000000000 [ 235.707832][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.707845][ T8504] R13: 0000000000000000 R14: 00007f27951a5fa0 R15: 00007fffc33e0e78 [ 235.707876][ T8504] [ 235.718419][ T8465] kexec: Could not allocate control_code_buffer [ 235.727655][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.544855][ T6957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.632582][ T6957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.279327][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.294'. [ 237.583295][ T8556] netlink: 'syz.4.307': attribute type 32 has an invalid length. [ 237.619874][ T8556] netlink: 'syz.4.307': attribute type 33 has an invalid length. [ 237.658294][ T8556] netlink: 'syz.4.307': attribute type 35 has an invalid length. [ 237.666839][ T8556] netlink: 'syz.4.307': attribute type 37 has an invalid length. [ 237.674600][ T8556] netlink: 'syz.4.307': attribute type 39 has an invalid length. [ 237.690867][ T8556] netlink: 'syz.4.307': attribute type 40 has an invalid length. [ 237.700216][ T8556] netlink: 'syz.4.307': attribute type 41 has an invalid length. [ 237.718006][ T8556] netlink: 'syz.4.307': attribute type 44 has an invalid length. [ 237.753641][ T8556] netlink: 'syz.4.307': attribute type 46 has an invalid length. [ 237.772525][ T8556] netlink: 'syz.4.307': attribute type 47 has an invalid length. [ 237.848088][ T8565] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 237.863410][ T8556] netlink: 2 bytes leftover after parsing attributes in process `syz.4.307'. [ 238.248638][ T8575] nbd: socks must be embedded in a SOCK_ITEM attr [ 238.271799][ T8575] block nbd0: shutting down sockets [ 238.310443][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 238.816497][ T8593] netlink: 244 bytes leftover after parsing attributes in process `syz.1.315'. [ 239.954925][ T8623] netlink: 2 bytes leftover after parsing attributes in process `syz.1.320'. [ 240.971593][ T8636] sock: sock_set_timeout: `syz.5.323' (pid 8636) tries to set negative timeout [ 241.746092][ T8669] netlink: 186 bytes leftover after parsing attributes in process `syz.4.329'. [ 241.761310][ T8669] netlink: 186 bytes leftover after parsing attributes in process `syz.4.329'. [ 243.176591][ T8727] FAULT_INJECTION: forcing a failure. [ 243.176591][ T8727] name failslab, interval 1, probability 0, space 0, times 0 [ 243.221390][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.5.335 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 243.221432][ T8727] Tainted: [U]=USER [ 243.221440][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.221455][ T8727] Call Trace: [ 243.221463][ T8727] [ 243.221473][ T8727] dump_stack_lvl+0x16c/0x1f0 [ 243.221513][ T8727] should_fail_ex+0x50a/0x650 [ 243.221552][ T8727] ? fs_reclaim_acquire+0xae/0x150 [ 243.221589][ T8727] should_failslab+0xc2/0x120 [ 243.221614][ T8727] __kmalloc_cache_node_noprof+0x6e/0x420 [ 243.221652][ T8727] ? bdi_alloc+0x44/0x170 [ 243.221689][ T8727] bdi_alloc+0x44/0x170 [ 243.221721][ T8727] __alloc_disk_node+0xa9/0x610 [ 243.221750][ T8727] ? blk_alloc_queue+0x1a3/0x700 [ 243.221788][ T8727] __blk_alloc_disk+0xd8/0x170 [ 243.221820][ T8727] ? __pfx___blk_alloc_disk+0x10/0x10 [ 243.221877][ T8727] ? __pfx_idr_alloc+0x10/0x10 [ 243.221911][ T8727] ? __raw_spin_lock_init+0x3a/0x110 [ 243.221954][ T8727] ? __pfx_hot_add_show+0x10/0x10 [ 243.221988][ T8727] zram_add+0x160/0x6b0 [ 243.222021][ T8727] ? __pfx_zram_add+0x10/0x10 [ 243.222077][ T8727] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 243.222112][ T8727] ? rcu_is_watching+0x12/0xc0 [ 243.222146][ T8727] ? __pfx_hot_add_show+0x10/0x10 [ 243.222180][ T8727] hot_add_show+0x21/0x80 [ 243.222213][ T8727] class_attr_show+0x6f/0xa0 [ 243.222246][ T8727] ? __pfx_class_attr_show+0x10/0x10 [ 243.222276][ T8727] sysfs_kf_seq_show+0x23e/0x410 [ 243.222314][ T8727] seq_read_iter+0x4f4/0x12b0 [ 243.222363][ T8727] kernfs_fop_read_iter+0x414/0x580 [ 243.222389][ T8727] ? rw_verify_area+0xcf/0x680 [ 243.222423][ T8727] vfs_read+0x886/0xbf0 [ 243.222463][ T8727] ? __pfx_vfs_read+0x10/0x10 [ 243.222521][ T8727] ksys_read+0x12b/0x250 [ 243.222553][ T8727] ? __pfx_ksys_read+0x10/0x10 [ 243.222597][ T8727] do_syscall_64+0xcd/0x250 [ 243.222633][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.222666][ T8727] RIP: 0033:0x7f2794f8d169 [ 243.222686][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.222709][ T8727] RSP: 002b:00007f2795d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.222733][ T8727] RAX: ffffffffffffffda RBX: 00007f27951a5fa0 RCX: 00007f2794f8d169 [ 243.222750][ T8727] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000008 [ 243.222771][ T8727] RBP: 00007f279500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 243.222787][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.222802][ T8727] R13: 0000000000000000 R14: 00007f27951a5fa0 R15: 00007fffc33e0e78 [ 243.222838][ T8727] [ 243.773544][ T8727] zram: Error allocating disk structure for device 1 [ 244.362527][ T8745] Invalid ELF header magic: != ELF [ 244.980267][ T8772] nvme_fcloop: unknown parameter or missing value '' [ 244.999098][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 245.035764][ T8772] macvlan1: entered allmulticast mode [ 245.052865][ T8772] veth1_vlan: entered allmulticast mode [ 245.230155][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.343'. [ 245.447292][ T8784] Invalid ELF header magic: != ELF [ 245.683531][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.345'. [ 245.956529][ T8784] Invalid ELF header magic: != ELF [ 245.978384][ T8796] team0: Port device team_slave_1 removed [ 246.408124][ T5847] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 249.264903][ T8871] FAULT_INJECTION: forcing a failure. [ 249.264903][ T8871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 249.306968][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: syz.1.355 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 249.307009][ T8871] Tainted: [U]=USER [ 249.307017][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.307032][ T8871] Call Trace: [ 249.307040][ T8871] [ 249.307050][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 249.307088][ T8871] should_fail_ex+0x50a/0x650 [ 249.307131][ T8871] get_futex_key+0x4a3/0x1000 [ 249.307164][ T8871] ? __pfx_get_futex_key+0x10/0x10 [ 249.307219][ T8871] futex_wake+0xe8/0x4e0 [ 249.307256][ T8871] ? __pfx_futex_wake+0x10/0x10 [ 249.307304][ T8871] do_futex+0x1e5/0x350 [ 249.307333][ T8871] ? __pfx_do_futex+0x10/0x10 [ 249.307364][ T8871] ? __pfx___might_resched+0x10/0x10 [ 249.307404][ T8871] __x64_sys_futex+0x1e1/0x4c0 [ 249.307433][ T8871] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 249.307463][ T8871] ? __pfx___x64_sys_futex+0x10/0x10 [ 249.307490][ T8871] ? ksys_mmap_pgoff+0x85/0x5c0 [ 249.307521][ T8871] ? rcu_is_watching+0x12/0xc0 [ 249.307555][ T8871] do_syscall_64+0xcd/0x250 [ 249.307589][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.307621][ T8871] RIP: 0033:0x7f979fd8d169 [ 249.307641][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.307665][ T8871] RSP: 002b:00007f97a0c3e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.307688][ T8871] RAX: ffffffffffffffda RBX: 00007f979ffa5fa8 RCX: 00007f979fd8d169 [ 249.307705][ T8871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f979ffa5fac [ 249.307721][ T8871] RBP: 00007f979ffa5fa0 R08: 00007f97a0c3f000 R09: 0000000000000000 [ 249.307736][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f979ffa5fac [ 249.307751][ T8871] R13: 0000000000000000 R14: 00007ffd5814ef80 R15: 00007ffd5814f068 [ 249.307782][ T8871] [ 251.555079][ T29] audit: type=1804 audit(6035729528.751:3): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.364" name="/newroot/sys/kernel/debug/tracing/current_tracer" dev="tracefs" ino=96 res=1 errno=0 [ 252.267383][ T8957] Malformed UNC in devname [ 252.267383][ T8957] [ 252.274256][ T8957] CIFS: VFS: Malformed UNC in devname [ 252.557380][ T8961] FAULT_INJECTION: forcing a failure. [ 252.557380][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 252.570296][ T8961] CPU: 1 UID: 0 PID: 8961 Comm: syz.1.369 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 252.570334][ T8961] Tainted: [U]=USER [ 252.570342][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.570356][ T8961] Call Trace: [ 252.570363][ T8961] [ 252.570372][ T8961] dump_stack_lvl+0x16c/0x1f0 [ 252.570408][ T8961] should_fail_ex+0x50a/0x650 [ 252.570453][ T8961] ? fs_reclaim_acquire+0xae/0x150 [ 252.570488][ T8961] should_failslab+0xc2/0x120 [ 252.570512][ T8961] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 252.570549][ T8961] ? sock_alloc_inode+0x25/0x1c0 [ 252.570586][ T8961] ? __pfx_sock_alloc_inode+0x10/0x10 [ 252.570609][ T8961] sock_alloc_inode+0x25/0x1c0 [ 252.570632][ T8961] alloc_inode+0x5d/0x230 [ 252.570654][ T8961] sock_alloc+0x40/0x280 [ 252.570693][ T8961] __sock_create+0xc1/0x8d0 [ 252.570727][ T8961] smc_create+0x15d/0x2a0 [ 252.570766][ T8961] __sock_create+0x335/0x8d0 [ 252.570799][ T8961] __sys_socket+0x14f/0x260 [ 252.570826][ T8961] ? __pfx___sys_socket+0x10/0x10 [ 252.570862][ T8961] ? rcu_is_watching+0x12/0xc0 [ 252.570896][ T8961] __x64_sys_socket+0x72/0xb0 [ 252.570923][ T8961] ? lockdep_hardirqs_on+0x7c/0x110 [ 252.570952][ T8961] do_syscall_64+0xcd/0x250 [ 252.570984][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.571017][ T8961] RIP: 0033:0x7f979fd8d169 [ 252.571037][ T8961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.571062][ T8961] RSP: 002b:00007f97a0c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 252.571085][ T8961] RAX: ffffffffffffffda RBX: 00007f979ffa5fa0 RCX: 00007f979fd8d169 [ 252.571101][ T8961] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 252.571115][ T8961] RBP: 00007f979fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 252.571130][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.571144][ T8961] R13: 0000000000000000 R14: 00007f979ffa5fa0 R15: 00007ffd5814f068 [ 252.571177][ T8961] [ 252.571196][ T8961] socket: no more sockets [ 253.766227][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.802125][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.815954][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.839158][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.855556][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 253.865456][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.085241][ T7837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.316851][ T7837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.584568][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 254.628240][ T7837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.807626][ T7837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.238840][ T7837] bridge_slave_1: left allmulticast mode [ 255.244548][ T7837] bridge_slave_1: left promiscuous mode [ 255.282557][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.333854][ T7837] bridge_slave_0: left allmulticast mode [ 255.367178][ T7837] bridge_slave_0: left promiscuous mode [ 255.372946][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.474873][ T9049] page: refcount:3 mapcount:2 mapping:0000000000000000 index:0xffff888078006d80 pfn:0x78004 [ 255.514283][ T9049] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 255.556885][ T9049] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 255.575157][ T9049] raw: ffff888078006d80 0000000000000000 0000000300000001 0000000000000000 [ 255.583803][ T9049] page dumped because: unmovable page [ 255.664629][ T9049] page_owner tracks the page as allocated [ 255.722339][ T9049] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 8971, tgid 8971 (syz-executor), ts 253115855731, free_ts 241878843696 [ 255.814353][ T9049] post_alloc_hook+0x181/0x1b0 [ 255.829965][ T9049] get_page_from_freelist+0xfce/0x2f80 [ 255.863112][ T9049] __alloc_frozen_pages_noprof+0x221/0x2470 [ 255.896088][ T9053] could not allocate digest TFM handle binfmt_misc [ 255.925330][ T5148] Bluetooth: hci1: command tx timeout [ 255.937054][ T9049] alloc_pages_mpol+0x1fc/0x540 [ 255.941972][ T9049] alloc_pages_noprof+0x131/0x390 [ 255.972810][ T9049] __vmalloc_node_range_noprof+0x721/0x1530 [ 255.979404][ T9049] vmalloc_user_noprof+0x6b/0x90 [ 255.984495][ T9049] kcov_ioctl+0x4c/0x730 [ 255.989364][ T9049] __x64_sys_ioctl+0x190/0x200 [ 255.994180][ T9049] do_syscall_64+0xcd/0x250 [ 255.999759][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.036222][ T9049] page last free pid 7838 tgid 7838 stack trace: [ 256.042779][ T9049] free_frozen_pages+0x6db/0xfb0 [ 256.051537][ T9049] __folio_put+0x32a/0x450 [ 256.065195][ T9049] ops_free_list+0x14e/0x410 [ 256.085627][ T9049] cleanup_net+0x619/0xb30 [ 256.088752][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.105266][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.173783][ T9049] process_one_work+0x9c5/0x1ba0 [ 256.206712][ T9049] worker_thread+0x6c8/0xf00 [ 256.280953][ T9049] kthread+0x3af/0x750 [ 256.295120][ T9049] ret_from_fork+0x45/0x80 [ 256.299624][ T9049] ret_from_fork_asm+0x1a/0x30 [ 257.406270][ T9094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.384'. [ 257.446256][ T9094] netlink: 23 bytes leftover after parsing attributes in process `syz.4.384'. [ 257.950086][ T7837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.971306][ T7837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.994904][ T7837] bond0 (unregistering): Released all slaves [ 258.005660][ T5148] Bluetooth: hci1: command tx timeout [ 258.020741][ T8996] chnl_net:caif_netlink_parms(): no params data found [ 258.606864][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.622607][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.635457][ T8996] bridge_slave_0: entered allmulticast mode [ 258.654643][ T8996] bridge_slave_0: entered promiscuous mode [ 258.688623][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.716297][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.723833][ T8996] bridge_slave_1: entered allmulticast mode [ 258.747839][ T8996] bridge_slave_1: entered promiscuous mode [ 258.810352][ T7837] hsr_slave_0: left promiscuous mode [ 258.847572][ T7837] hsr_slave_1: left promiscuous mode [ 258.860438][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.883119][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.969923][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.005098][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.080511][ T7837] veth1_macvtap: left promiscuous mode [ 259.099189][ T7837] veth0_macvtap: left promiscuous mode [ 259.120233][ T7837] veth1_vlan: left promiscuous mode [ 259.135308][ T7837] veth0_vlan: left promiscuous mode [ 260.085255][ T5148] Bluetooth: hci1: command tx timeout [ 260.289897][ T7837] team0 (unregistering): Port device team_slave_1 removed [ 260.404023][ T7837] team0 (unregistering): Port device team_slave_0 removed [ 261.421590][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.462324][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.628337][ T8996] team0: Port device team_slave_0 added [ 261.723294][ T8996] team0: Port device team_slave_1 added [ 261.829660][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.846629][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.912872][ T8996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.962733][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.969802][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.035289][ T8996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.165455][ T5148] Bluetooth: hci1: command tx timeout [ 262.265794][ T8996] hsr_slave_0: entered promiscuous mode [ 262.306474][ T8996] hsr_slave_1: entered promiscuous mode [ 264.131100][ T8996] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.166709][ T8996] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.198146][ T8996] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.225222][ T8996] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.416698][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.466804][ T8996] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.490604][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.497819][ T7838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.559643][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.566816][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.986294][ T9300] validate_nla: 10 callbacks suppressed [ 264.986315][ T9300] netlink: 'syz.1.402': attribute type 32 has an invalid length. [ 265.020706][ T9300] netlink: 'syz.1.402': attribute type 33 has an invalid length. [ 265.045646][ T9300] netlink: 'syz.1.402': attribute type 35 has an invalid length. [ 265.069055][ T9292] netlink: 'syz.5.400': attribute type 1 has an invalid length. [ 265.082627][ T9300] netlink: 'syz.1.402': attribute type 37 has an invalid length. [ 265.091125][ T9292] netlink: 'syz.5.400': attribute type 3 has an invalid length. [ 265.105486][ T9300] netlink: 'syz.1.402': attribute type 39 has an invalid length. [ 265.113318][ T9300] netlink: 'syz.1.402': attribute type 40 has an invalid length. [ 265.146196][ T9300] netlink: 'syz.1.402': attribute type 41 has an invalid length. [ 265.154032][ T9300] netlink: 'syz.1.402': attribute type 44 has an invalid length. [ 265.177573][ T9300] netlink: 2 bytes leftover after parsing attributes in process `syz.1.402'. [ 265.212401][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.924955][ T8996] veth0_vlan: entered promiscuous mode [ 265.959881][ T8996] veth1_vlan: entered promiscuous mode [ 266.110877][ T8996] veth0_macvtap: entered promiscuous mode [ 266.143303][ T8996] veth1_macvtap: entered promiscuous mode [ 266.220712][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.294774][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.333022][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.402841][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.441132][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.486925][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.515124][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.536606][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.576257][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.654000][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.685096][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.694950][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.740832][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.775248][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.803079][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.821518][ T8996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.875156][ T8996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.910466][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.926471][ T8996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.952626][ T8996] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.972138][ T8996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.995515][ T8996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.509927][ T7838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.535907][ T7838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.632713][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.657445][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.955257][ T29] audit: type=1800 audit(6035729546.161:4): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.414" name="SYSV00001400" dev="tmpfs" ino=0 res=0 errno=0 [ 269.097505][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 269.119553][ T9425] can: request_module (can-proto-0) failed. [ 269.764006][ T9457] netlink: 346 bytes leftover after parsing attributes in process `syz.4.416'. [ 269.923326][ T9463] nbd: must specify a device to reconfigure [ 271.566701][ T9482] vivid-003: ================= START STATUS ================= [ 271.574439][ T9482] vivid-003: Radio HW Seek Mode: Bounded [ 271.605982][ T9482] vivid-003: Radio Programmable HW Seek: false [ 271.612224][ T9482] vivid-003: RDS Rx I/O Mode: Block I/O [ 271.628150][ T9482] vivid-003: Generate RBDS Instead of RDS: false [ 271.634556][ T9482] vivid-003: RDS Reception: true [ 271.647783][ T9482] vivid-003: RDS Program Type: 0 inactive [ 271.653600][ T9482] vivid-003: RDS PS Name: inactive [ 271.660093][ T9508] FAULT_INJECTION: forcing a failure. [ 271.660093][ T9508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.685172][ T9482] vivid-003: RDS Radio Text: inactive [ 271.714576][ T9482] vivid-003: RDS Traffic Announcement: false inactive [ 271.735083][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.5.427 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 271.735118][ T9508] Tainted: [U]=USER [ 271.735124][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.735137][ T9508] Call Trace: [ 271.735143][ T9508] [ 271.735152][ T9508] dump_stack_lvl+0x16c/0x1f0 [ 271.735188][ T9508] should_fail_ex+0x50a/0x650 [ 271.735229][ T9508] _copy_from_iter+0x465/0x1560 [ 271.735261][ T9508] ? __pfx__copy_from_iter+0x10/0x10 [ 271.735283][ T9508] ? __virt_addr_valid+0x1a4/0x590 [ 271.735312][ T9508] ? __virt_addr_valid+0x5e/0x590 [ 271.735335][ T9508] ? __phys_addr_symbol+0x30/0x80 [ 271.735357][ T9508] ? __check_object_size+0x488/0x710 [ 271.735384][ T9508] kernfs_fop_write_iter+0x19d/0x500 [ 271.735413][ T9508] do_iter_readv_writev+0x655/0x950 [ 271.735444][ T9508] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 271.735472][ T9508] ? rcu_is_watching+0x12/0xc0 [ 271.735501][ T9508] ? do_writev+0x133/0x340 [ 271.735538][ T9508] vfs_writev+0x363/0xdd0 [ 271.735565][ T9508] ? fdget_pos+0x267/0x390 [ 271.735600][ T9508] ? rcu_is_watching+0x12/0xc0 [ 271.735627][ T9508] ? __pfx_vfs_writev+0x10/0x10 [ 271.735654][ T9508] ? __mutex_lock+0x1cc/0xb10 [ 271.735681][ T9508] ? find_held_lock+0x2d/0x110 [ 271.735713][ T9508] ? __pfx___mutex_lock+0x10/0x10 [ 271.735741][ T9508] ? trace_lock_acquire+0x14e/0x1f0 [ 271.735779][ T9508] ? __fget_files+0x206/0x3a0 [ 271.735828][ T9508] ? do_writev+0x133/0x340 [ 271.735854][ T9508] do_writev+0x133/0x340 [ 271.735883][ T9508] ? __pfx_do_writev+0x10/0x10 [ 271.735922][ T9508] do_syscall_64+0xcd/0x250 [ 271.735954][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.735986][ T9508] RIP: 0033:0x7f2794f8d169 [ 271.736004][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.736026][ T9508] RSP: 002b:00007f2795d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 271.736049][ T9508] RAX: ffffffffffffffda RBX: 00007f27951a5fa0 RCX: 00007f2794f8d169 [ 271.736063][ T9508] RDX: 0000000000000008 RSI: 0000400000000100 RDI: 0000000000000003 [ 271.736077][ T9508] RBP: 00007f2795d62090 R08: 0000000000000000 R09: 0000000000000000 [ 271.736091][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.736108][ T9508] R13: 0000000000000000 R14: 00007f27951a5fa0 R15: 00007fffc33e0e78 [ 271.736140][ T9508] [ 271.811384][ T9482] vivid-003: RDS Traffic Program: false inactive [ 272.064341][ T9482] vivid-003: RDS Music: false inactive [ 272.104578][ T9482] vivid-003: ================== END STATUS ================== [ 276.800896][ T9623] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 276.822434][ T9623] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 277.490933][ T9623] syz.4.444 (9623) used greatest stack depth: 20352 bytes left [ 277.882402][ T9656] raw_sendmsg: syz.5.446 forgot to set AF_INET. Fix it! [ 282.772028][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.108850][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.360906][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.708559][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.583028][ T53] bridge_slave_1: left allmulticast mode [ 284.607299][ T53] bridge_slave_1: left promiscuous mode [ 284.636695][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.690868][ T53] bridge_slave_0: left allmulticast mode [ 284.748991][ T53] bridge_slave_0: left promiscuous mode [ 284.785575][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.153085][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.192275][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.210336][ T53] bond0 (unregistering): Released all slaves [ 286.240030][ T9813] bridge0: port 3(netdevsim2) entered blocking state [ 286.253811][ T9813] bridge0: port 3(netdevsim2) entered disabled state [ 286.265250][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.5.465'. [ 286.296021][ T9813] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 286.323630][ T9813] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 286.345720][ T9813] bridge0: port 3(netdevsim2) entered blocking state [ 286.352831][ T9813] bridge0: port 3(netdevsim2) entered forwarding state [ 287.741054][ T9856] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 287.880425][ T53] hsr_slave_0: left promiscuous mode [ 287.934141][ T53] hsr_slave_1: left promiscuous mode [ 287.955639][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.976657][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.000314][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.015923][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.079834][ T53] veth1_macvtap: left promiscuous mode [ 288.089164][ T53] veth0_macvtap: left promiscuous mode [ 288.094801][ T53] veth1_vlan: left promiscuous mode [ 288.101103][ T53] veth0_vlan: left promiscuous mode [ 288.630324][ T53] team0 (unregistering): Port device team_slave_1 removed [ 288.671556][ T53] team0 (unregistering): Port device team_slave_0 removed [ 290.037297][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.472'. [ 290.425107][ T9897] lo: entered allmulticast mode [ 290.433107][ T9902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.857010][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.009018][ T9897] lo: left allmulticast mode [ 293.501205][ T9969] usb usb15: usbfs: interface 0 claimed by hub while 'syz.5.479' sets config #5 [ 295.374917][ T9988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.432920][ T9988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 295.594381][ T9988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 295.682592][ T9988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.750434][ T9988] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 295.925408][ T9988] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 296.082609][ T9988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.145269][ T9988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 296.165134][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 296.263625][ T9988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 296.508806][ T9988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.539512][ T9988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 296.615454][ T9988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 296.870393][T10069] FAULT_INJECTION: forcing a failure. [ 296.870393][T10069] name failslab, interval 1, probability 0, space 0, times 0 [ 296.943537][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.6.491 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 296.943573][T10069] Tainted: [U]=USER [ 296.943580][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.943592][T10069] Call Trace: [ 296.943598][T10069] [ 296.943606][T10069] dump_stack_lvl+0x16c/0x1f0 [ 296.943639][T10069] should_fail_ex+0x50a/0x650 [ 296.943671][T10069] ? fs_reclaim_acquire+0xae/0x150 [ 296.943708][T10069] ? tomoyo_realpath_from_path+0xb9/0x720 [ 296.943740][T10069] should_failslab+0xc2/0x120 [ 296.943763][T10069] __kmalloc_noprof+0xcb/0x510 [ 296.943796][T10069] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 296.943835][T10069] tomoyo_realpath_from_path+0xb9/0x720 [ 296.943866][T10069] ? tomoyo_path_number_perm+0x235/0x590 [ 296.943894][T10069] ? tomoyo_path_number_perm+0x235/0x590 [ 296.943925][T10069] tomoyo_path_number_perm+0x248/0x590 [ 296.943951][T10069] ? tomoyo_path_number_perm+0x235/0x590 [ 296.943981][T10069] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.944040][T10069] ? __pfx_lock_release+0x10/0x10 [ 296.944069][T10069] ? trace_lock_acquire+0x14e/0x1f0 [ 296.944100][T10069] ? lock_acquire+0x2f/0xb0 [ 296.944128][T10069] ? __fget_files+0x40/0x3a0 [ 296.944164][T10069] ? __fget_files+0x206/0x3a0 [ 296.944201][T10069] security_file_ioctl+0x9b/0x240 [ 296.944231][T10069] __x64_sys_ioctl+0xb7/0x200 [ 296.944262][T10069] do_syscall_64+0xcd/0x250 [ 296.944294][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.944326][T10069] RIP: 0033:0x7fc9a278d169 [ 296.944345][T10069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.944367][T10069] RSP: 002b:00007fc9a36ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.944389][T10069] RAX: ffffffffffffffda RBX: 00007fc9a29a5fa0 RCX: 00007fc9a278d169 [ 296.944404][T10069] RDX: 00004000000003c0 RSI: 0000000000005409 RDI: 0000000000000003 [ 296.944418][T10069] RBP: 00007fc9a36ca090 R08: 0000000000000000 R09: 0000000000000000 [ 296.944431][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.944445][T10069] R13: 0000000000000000 R14: 00007fc9a29a5fa0 R15: 00007ffc3d88f748 [ 296.944476][T10069] [ 297.189387][T10069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.705268][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.942052][T10093] vivid-003: ================= START STATUS ================= [ 297.964611][T10093] vivid-003: Radio HW Seek Mode: Bounded [ 297.999884][T10093] vivid-003: Radio Programmable HW Seek: false [ 298.029042][T10093] vivid-003: RDS Rx I/O Mode: Block I/O [ 298.085094][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.098269][T10093] vivid-003: Generate RBDS Instead of RDS: false [ 298.100612][T10097] FAULT_INJECTION: forcing a failure. [ 298.100612][T10097] name failslab, interval 1, probability 0, space 0, times 0 [ 298.104658][T10093] vivid-003: RDS Reception: true [ 298.104692][T10093] vivid-003: RDS Program Type: 0 inactive [ 298.104728][T10093] vivid-003: RDS PS Name: inactive [ 298.145238][T10097] CPU: 0 UID: 0 PID: 10097 Comm: syz.1.496 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 298.145280][T10097] Tainted: [U]=USER [ 298.145292][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.145317][T10097] Call Trace: [ 298.145324][T10097] [ 298.145334][T10097] dump_stack_lvl+0x16c/0x1f0 [ 298.145370][T10097] should_fail_ex+0x50a/0x650 [ 298.145407][T10097] ? fs_reclaim_acquire+0xae/0x150 [ 298.145440][T10097] should_failslab+0xc2/0x120 [ 298.145465][T10097] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 298.145501][T10097] ? acpi_ps_alloc_op+0x25f/0x310 [ 298.145534][T10097] acpi_ps_alloc_op+0x25f/0x310 [ 298.145560][T10097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.145596][T10097] acpi_ps_create_op+0x3dd/0xc20 [ 298.145625][T10097] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 298.145655][T10097] ? acpi_ut_push_generic_state+0x13/0x70 [ 298.145683][T10097] acpi_ps_parse_loop+0xdce/0x1ce0 [ 298.145716][T10097] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 298.145738][T10097] ? acpi_ns_get_normalized_pathname+0x97/0xd0 [ 298.145771][T10097] ? acpi_ds_call_control_method+0x96/0x6d0 [ 298.145802][T10097] acpi_ps_parse_aml+0x3c1/0xcb0 [ 298.145832][T10097] acpi_ps_execute_method+0x55a/0xb30 [ 298.145862][T10097] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 298.145895][T10097] acpi_ns_evaluate+0x76c/0xca0 [ 298.145925][T10097] ? kasan_save_track+0x14/0x30 [ 298.145957][T10097] acpi_evaluate_object+0x1fb/0xa90 [ 298.145984][T10097] ? __lock_acquire+0xcc5/0x3c40 [ 298.146012][T10097] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 298.146045][T10097] acpi_evaluate_integer+0xde/0x200 [ 298.146065][T10097] ? __pfx___lock_acquire+0x10/0x10 [ 298.146092][T10097] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 298.146111][T10097] ? rcu_is_watching+0x12/0xc0 [ 298.146133][T10097] ? trace_contention_end+0xee/0x140 [ 298.146173][T10097] ? __pfx_status_show+0x10/0x10 [ 298.146197][T10097] status_show+0xa1/0x120 [ 298.146222][T10097] ? __pfx_status_show+0x10/0x10 [ 298.146254][T10097] dev_attr_show+0x53/0xe0 [ 298.146282][T10097] ? __pfx_dev_attr_show+0x10/0x10 [ 298.146316][T10097] sysfs_kf_seq_show+0x23e/0x410 [ 298.146349][T10097] seq_read_iter+0x4f4/0x12b0 [ 298.146391][T10097] kernfs_fop_read_iter+0x414/0x580 [ 298.146413][T10097] ? rw_verify_area+0xcf/0x680 [ 298.146441][T10097] vfs_read+0x886/0xbf0 [ 298.146475][T10097] ? __pfx_vfs_read+0x10/0x10 [ 298.146524][T10097] ksys_read+0x12b/0x250 [ 298.146550][T10097] ? __pfx_ksys_read+0x10/0x10 [ 298.146587][T10097] do_syscall_64+0xcd/0x250 [ 298.146617][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.146645][T10097] RIP: 0033:0x7f979fd8d169 [ 298.146663][T10097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.146682][T10097] RSP: 002b:00007f97a0c1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.146703][T10097] RAX: ffffffffffffffda RBX: 00007f979ffa6080 RCX: 00007f979fd8d169 [ 298.146718][T10097] RDX: 0000000000000070 RSI: 0000400000000000 RDI: 0000000000000006 [ 298.146731][T10097] RBP: 00007f979fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.146744][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.146757][T10097] R13: 0000000000000000 R14: 00007f979ffa6080 R15: 00007ffd5814f068 [ 298.146786][T10097] [ 298.146943][T10097] ACPI Error: [ 298.260416][T10093] [ 298.275503][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.381580][T10097] Aborting method [ 298.386026][T10093] vivid-003: RDS Radio Text: [ 298.472693][T10097] \_SB.IQST [ 298.477034][T10093] inactive [ 298.515589][T10093] vivid-003: RDS Traffic Announcement: false inactive [ 298.545073][T10093] vivid-003: RDS Traffic Program: false inactive [ 298.551499][T10093] vivid-003: RDS Music: false inactive [ 298.567984][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.603509][T10097] due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 298.605201][T10093] vivid-003: ================== END STATUS ================== [ 298.675357][T10097] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 299.422052][ T29] audit: type=1800 audit(6035729576.631:5): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.502" name="discovery_nqn" dev="configfs" ino=28466 res=0 errno=0 [ 299.765228][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.165961][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.409418][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.645163][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.065675][T10157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.074773][T10157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.095347][T10157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 301.101427][T10157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.588107][T10199] FAULT_INJECTION: forcing a failure. [ 301.588107][T10199] name failslab, interval 1, probability 0, space 0, times 0 [ 301.621264][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.1.514 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 301.621304][T10199] Tainted: [U]=USER [ 301.621313][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.621326][T10199] Call Trace: [ 301.621333][T10199] [ 301.621343][T10199] dump_stack_lvl+0x16c/0x1f0 [ 301.621380][T10199] should_fail_ex+0x50a/0x650 [ 301.621419][T10199] ? fs_reclaim_acquire+0xae/0x150 [ 301.621453][T10199] should_failslab+0xc2/0x120 [ 301.621476][T10199] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 301.621512][T10199] ? __xlate_proc_name+0x173/0x210 [ 301.621548][T10199] ? __proc_create+0x2c0/0x8b0 [ 301.621588][T10199] __proc_create+0x2c0/0x8b0 [ 301.621625][T10199] ? __pfx___proc_create+0x10/0x10 [ 301.621668][T10199] ? _raw_write_unlock+0x28/0x50 [ 301.621700][T10199] proc_create_reg+0x7d/0x180 [ 301.621727][T10199] proc_create_data+0x86/0x190 [ 301.621750][T10199] ? __pfx_proc_create_data+0x10/0x10 [ 301.621785][T10199] cache_register_net+0x1e0/0x5e0 [ 301.621815][T10199] nfsd_idmap_init+0xb6/0x250 [ 301.621839][T10199] ? __pfx_nfsd_net_init+0x10/0x10 [ 301.621871][T10199] nfsd_net_init+0x69/0x3a0 [ 301.621903][T10199] ? __pfx_nfsd_net_init+0x10/0x10 [ 301.621934][T10199] ops_init+0x1df/0x5f0 [ 301.621973][T10199] setup_net+0x21f/0x860 [ 301.622011][T10199] ? __pfx_setup_net+0x10/0x10 [ 301.622054][T10199] ? down_read_killable+0xcc/0x380 [ 301.622089][T10199] ? __pfx_down_read_killable+0x10/0x10 [ 301.622124][T10199] ? __raw_spin_lock_init+0x3a/0x110 [ 301.622164][T10199] ? debug_mutex_init+0x37/0x70 [ 301.622194][T10199] copy_net_ns+0x2a6/0x5f0 [ 301.622222][T10199] create_new_namespaces+0x3ea/0xad0 [ 301.622262][T10199] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 301.622303][T10199] ksys_unshare+0x45d/0xa40 [ 301.622327][T10199] ? __pfx_ksys_unshare+0x10/0x10 [ 301.622349][T10199] ? xfd_validate_state+0x5d/0x180 [ 301.622395][T10199] __x64_sys_unshare+0x31/0x40 [ 301.622420][T10199] do_syscall_64+0xcd/0x250 [ 301.622450][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.622477][T10199] RIP: 0033:0x7f979fd8d169 [ 301.622494][T10199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.622515][T10199] RSP: 002b:00007f97a0c3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 301.622536][T10199] RAX: ffffffffffffffda RBX: 00007f979ffa5fa0 RCX: 00007f979fd8d169 [ 301.622549][T10199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 301.622561][T10199] RBP: 00007f979fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 301.622574][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.622586][T10199] R13: 0000000000000000 R14: 00007f979ffa5fa0 R15: 00007ffd5814f068 [ 301.622614][T10199] [ 302.352053][ T5148] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 302.352090][ T5148] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 302.367485][ T5148] Bluetooth: hci1: adv larger than maximum supported [ 302.485112][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.075844][T10238] netlink: 342 bytes leftover after parsing attributes in process `syz.4.519'. [ 303.125166][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 303.130459][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.131205][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 303.268231][T10248] netlink: 85 bytes leftover after parsing attributes in process `syz.6.521'. [ 305.433233][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.527'. [ 306.152821][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 306.335512][T10323] validate_nla: 2 callbacks suppressed [ 306.335530][T10323] netlink: 'syz.4.532': attribute type 27 has an invalid length. [ 306.389297][T10323] netlink: 334 bytes leftover after parsing attributes in process `syz.4.532'. [ 307.928690][T10382] FAULT_INJECTION: forcing a failure. [ 307.928690][T10382] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.979358][T10382] CPU: 1 UID: 0 PID: 10382 Comm: syz.5.541 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 307.979400][T10382] Tainted: [U]=USER [ 307.979408][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.979423][T10382] Call Trace: [ 307.979430][T10382] [ 307.979440][T10382] dump_stack_lvl+0x16c/0x1f0 [ 307.979518][T10382] should_fail_ex+0x50a/0x650 [ 307.979561][T10382] get_futex_key+0x4a3/0x1000 [ 307.979594][T10382] ? __pfx_get_futex_key+0x10/0x10 [ 307.979634][T10382] futex_wake+0xe8/0x4e0 [ 307.979663][T10382] ? __pfx___lock_acquire+0x10/0x10 [ 307.979691][T10382] ? lockdep_init_map_type+0x16d/0x7d0 [ 307.979721][T10382] ? __pfx_futex_wake+0x10/0x10 [ 307.979754][T10382] ? lock_acquire.part.0+0x11b/0x380 [ 307.979783][T10382] ? find_held_lock+0x2d/0x110 [ 307.979813][T10382] do_futex+0x1e5/0x350 [ 307.979840][T10382] ? __pfx_do_futex+0x10/0x10 [ 307.979875][T10382] __x64_sys_futex+0x1e1/0x4c0 [ 307.979905][T10382] ? __pfx___x64_sys_futex+0x10/0x10 [ 307.979934][T10382] ? rcu_is_watching+0x12/0xc0 [ 307.979968][T10382] do_syscall_64+0xcd/0x250 [ 307.980001][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.980033][T10382] RIP: 0033:0x7f2794f8d169 [ 307.980053][T10382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.980076][T10382] RSP: 002b:00007f2795d620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.980099][T10382] RAX: ffffffffffffffda RBX: 00007f27951a5fa8 RCX: 00007f2794f8d169 [ 307.980115][T10382] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f27951a5fac [ 307.980130][T10382] RBP: 00007f27951a5fa0 R08: 00007f2795d63000 R09: 0000000000000000 [ 307.980146][T10382] R10: 0000000000000002 R11: 0000000000000246 R12: 00007f27951a5fac [ 307.980161][T10382] R13: 0000000000000000 R14: 00007fffc33e0d90 R15: 00007fffc33e0e78 [ 307.980192][T10382] [ 309.476850][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.550'. [ 312.775433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 312.852612][T10532] netlink: 252 bytes leftover after parsing attributes in process `syz.6.562'. [ 312.924059][T10532] netlink: 'syz.6.562': attribute type 29 has an invalid length. [ 312.973421][T10532] Unable to find swap-space signature [ 313.014444][T10532] FAULT_INJECTION: forcing a failure. [ 313.014444][T10532] name fail_futex, interval 1, probability 0, space 0, times 0 [ 313.030533][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.6.562 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 313.030572][T10532] Tainted: [U]=USER [ 313.030580][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.030594][T10532] Call Trace: [ 313.030600][T10532] [ 313.030610][T10532] dump_stack_lvl+0x16c/0x1f0 [ 313.030646][T10532] should_fail_ex+0x50a/0x650 [ 313.030692][T10532] get_futex_key+0x4a3/0x1000 [ 313.030719][T10532] ? __pfx_get_futex_key+0x10/0x10 [ 313.030743][T10532] ? plist_check_head+0xa3/0x150 [ 313.030774][T10532] futex_wake+0xe8/0x4e0 [ 313.030809][T10532] ? __pfx_futex_wake+0x10/0x10 [ 313.030834][T10532] ? __pfx_futex_wake_mark+0x10/0x10 [ 313.030871][T10532] ? __might_fault+0xe3/0x190 [ 313.030898][T10532] do_futex+0x1e5/0x350 [ 313.030923][T10532] ? __pfx_do_futex+0x10/0x10 [ 313.030955][T10532] __x64_sys_futex+0x1e1/0x4c0 [ 313.030988][T10532] ? __pfx___x64_sys_futex+0x10/0x10 [ 313.031016][T10532] ? rcu_is_watching+0x12/0xc0 [ 313.031049][T10532] do_syscall_64+0xcd/0x250 [ 313.031080][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.031112][T10532] RIP: 0033:0x7fc9a278d169 [ 313.031130][T10532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.031153][T10532] RSP: 002b:00007fc9a36ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 313.031175][T10532] RAX: ffffffffffffffda RBX: 00007fc9a29a5fa8 RCX: 00007fc9a278d169 [ 313.031196][T10532] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc9a29a5fac [ 313.031212][T10532] RBP: 00007fc9a29a5fa0 R08: 00007fc9a36cb000 R09: 0000000000000000 [ 313.031226][T10532] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc9a29a5fac [ 313.031241][T10532] R13: 0000000000000000 R14: 00007ffc3d88f660 R15: 00007ffc3d88f748 [ 313.031271][T10532] [ 314.824902][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.825071][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 315.335350][T10590] Invalid ELF header magic: != ELF [ 316.530235][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.570'. [ 316.660559][T10590] geneve1: entered allmulticast mode [ 317.533053][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.539676][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.717702][T10708] netlink: 'syz.4.585': attribute type 32 has an invalid length. [ 320.742428][T10708] netlink: 'syz.4.585': attribute type 33 has an invalid length. [ 320.755177][T10708] netlink: 'syz.4.585': attribute type 35 has an invalid length. [ 320.763022][T10708] netlink: 'syz.4.585': attribute type 37 has an invalid length. [ 320.774841][T10712] FAULT_INJECTION: forcing a failure. [ 320.774841][T10712] name failslab, interval 1, probability 0, space 0, times 0 [ 320.775773][T10708] netlink: 'syz.4.585': attribute type 39 has an invalid length. [ 320.801587][T10708] netlink: 'syz.4.585': attribute type 40 has an invalid length. [ 320.809475][T10712] CPU: 0 UID: 0 PID: 10712 Comm: syz.6.586 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 320.809509][T10712] Tainted: [U]=USER [ 320.809516][T10712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.809529][T10712] Call Trace: [ 320.809537][T10712] [ 320.809546][T10712] dump_stack_lvl+0x16c/0x1f0 [ 320.809581][T10712] should_fail_ex+0x50a/0x650 [ 320.809617][T10712] ? fs_reclaim_acquire+0xae/0x150 [ 320.809649][T10712] should_failslab+0xc2/0x120 [ 320.809671][T10712] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 320.809703][T10712] ? percpu_counter_add_batch+0xb5/0x1e0 [ 320.809734][T10712] ? vm_area_dup+0x21/0x2f0 [ 320.809772][T10712] vm_area_dup+0x21/0x2f0 [ 320.809803][T10712] copy_process+0x776f/0x8c50 [ 320.809849][T10712] ? __pfx_copy_process+0x10/0x10 [ 320.809871][T10712] ? __might_fault+0x13b/0x190 [ 320.809894][T10712] ? __pfx_lock_release+0x10/0x10 [ 320.809932][T10712] ? __might_fault+0xe3/0x190 [ 320.809955][T10712] ? __might_fault+0xe3/0x190 [ 320.809983][T10712] ? _copy_from_user+0x59/0xd0 [ 320.810013][T10712] kernel_clone+0xfd/0x960 [ 320.810037][T10712] ? __pfx_kernel_clone+0x10/0x10 [ 320.810067][T10712] ? __pfx_futex_wait+0x10/0x10 [ 320.810108][T10712] __do_sys_clone3+0x214/0x290 [ 320.810130][T10712] ? __pfx___do_sys_clone3+0x10/0x10 [ 320.810167][T10712] ? __fget_files+0x1fc/0x3a0 [ 320.810223][T10712] do_syscall_64+0xcd/0x250 [ 320.810256][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.810286][T10712] RIP: 0033:0x7fc9a278d169 [ 320.810305][T10712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.810325][T10712] RSP: 002b:00007fc9a36c9f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 320.810347][T10712] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc9a278d169 [ 320.810362][T10712] RDX: 00007fc9a36c9f20 RSI: 0000000000000058 RDI: 00007fc9a36c9f20 [ 320.810376][T10712] RBP: 00007fc9a280e2a0 R08: 0000000000000000 R09: 0000000000000058 [ 320.810390][T10712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.810403][T10712] R13: 0000000000000000 R14: 00007fc9a29a5fa0 R15: 00007ffc3d88f748 [ 320.810434][T10712] [ 321.085067][T10708] netlink: 'syz.4.585': attribute type 41 has an invalid length. [ 321.092845][T10708] netlink: 'syz.4.585': attribute type 44 has an invalid length. [ 321.192282][T10708] netlink: 'syz.4.585': attribute type 46 has an invalid length. [ 321.216753][T10708] netlink: 'syz.4.585': attribute type 47 has an invalid length. [ 321.236322][T10708] netlink: 2 bytes leftover after parsing attributes in process `syz.4.585'. [ 321.684582][T10745] bridge0: port 3(netdevsim2) entered blocking state [ 321.691696][T10745] bridge0: port 3(netdevsim2) entered disabled state [ 321.703122][T10745] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 321.722187][T10745] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 321.745569][T10745] bridge0: port 3(netdevsim2) entered blocking state [ 321.752418][T10745] bridge0: port 3(netdevsim2) entered forwarding state [ 322.732860][T10760] can: request_module (can-proto-0) failed. [ 325.695485][ T5148] Bluetooth: hci1: Malformed Event: 0x13 [ 325.701288][ T5148] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 327.176411][T10900] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 327.401374][T10929] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 327.466256][T10898] cgroup: fork rejected by pids controller in /syz4 [ 327.954547][T10954] netlink: 'syz.6.617': attribute type 32 has an invalid length. [ 328.026168][T10954] netlink: 'syz.6.617': attribute type 33 has an invalid length. [ 328.105931][T10954] netlink: 'syz.6.617': attribute type 35 has an invalid length. [ 328.113755][T10954] netlink: 'syz.6.617': attribute type 37 has an invalid length. [ 328.165394][T10954] netlink: 'syz.6.617': attribute type 39 has an invalid length. [ 328.173200][T10954] netlink: 'syz.6.617': attribute type 40 has an invalid length. [ 328.226999][T10954] netlink: 'syz.6.617': attribute type 41 has an invalid length. [ 328.234787][T10954] netlink: 'syz.6.617': attribute type 44 has an invalid length. [ 328.281247][T10954] netlink: 'syz.6.617': attribute type 46 has an invalid length. [ 328.334034][T10954] netlink: 'syz.6.617': attribute type 47 has an invalid length. [ 328.390773][T10954] netlink: 2 bytes leftover after parsing attributes in process `syz.6.617'. [ 328.913829][T10968] netlink: 330 bytes leftover after parsing attributes in process `syz.6.619'. [ 328.991805][T10968] : renamed from vlan0 (while UP) [ 332.490067][T11035] netlink: 338 bytes leftover after parsing attributes in process `syz.5.627'. [ 336.240989][T11142] netlink: 500 bytes leftover after parsing attributes in process `syz.5.635'. [ 336.261692][T11142] netlink: 500 bytes leftover after parsing attributes in process `syz.5.635'. [ 336.299852][T11142] netlink: 350 bytes leftover after parsing attributes in process `syz.5.635'. [ 339.486817][T11224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.492949][T11224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.530535][T11224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.577321][T11224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.285534][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.525318][ T5148] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.623906][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.630174][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.255585][T11352] nbd: must specify a device to reconfigure [ 345.676754][T11380] netlink: 330 bytes leftover after parsing attributes in process `syz.4.654'. [ 346.390883][T11397] netlink: 330 bytes leftover after parsing attributes in process `syz.5.656'. [ 346.548701][T11338] syz.1.650 (11338) used greatest stack depth: 18752 bytes left [ 346.774451][T11414] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 4 [ 347.792426][T11430] netlink: 186 bytes leftover after parsing attributes in process `syz.5.660'. [ 349.188349][ T52] smpboot: CPU 0 is now offline [ 349.383683][T11451] netlink: 'syz.6.662': attribute type 1 has an invalid length. [ 349.471771][T11469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.667'. [ 352.271997][T11526] FAULT_INJECTION: forcing a failure. [ 352.271997][T11526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 352.371833][T11526] CPU: 1 UID: 0 PID: 11526 Comm: syz.5.674 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 352.371860][T11526] Tainted: [U]=USER [ 352.371865][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.371873][T11526] Call Trace: [ 352.371877][T11526] [ 352.371883][T11526] dump_stack_lvl+0x16c/0x1f0 [ 352.371906][T11526] should_fail_ex+0x50a/0x650 [ 352.371928][T11526] ? __pfx___might_resched+0x10/0x10 [ 352.371952][T11526] should_fail_alloc_page+0xe7/0x130 [ 352.371966][T11526] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 352.371988][T11526] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 352.372009][T11526] ? hlock_class+0x4e/0x130 [ 352.372023][T11526] ? __lock_acquire+0xcc5/0x3c40 [ 352.372044][T11526] ? hlock_class+0x4e/0x130 [ 352.372057][T11526] ? mark_lock+0xb5/0xc60 [ 352.372073][T11526] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.372094][T11526] ? __pfx_mark_lock+0x10/0x10 [ 352.372110][T11526] ? __pfx_lock_release+0x10/0x10 [ 352.372127][T11526] ? trace_lock_acquire+0x14e/0x1f0 [ 352.372144][T11526] ? is_bpf_text_address+0x30/0x1a0 [ 352.372161][T11526] ? bpf_ksym_find+0x124/0x1c0 [ 352.372175][T11526] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 352.372191][T11526] ? is_bpf_text_address+0x94/0x1a0 [ 352.372208][T11526] ? kernel_text_address+0x8d/0x100 [ 352.372224][T11526] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.372245][T11526] ? policy_nodemask+0xea/0x4e0 [ 352.372267][T11526] alloc_pages_mpol+0x1fc/0x540 [ 352.372288][T11526] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 352.372303][T11526] ? __pfx___lock_acquire+0x10/0x10 [ 352.372323][T11526] alloc_pages_noprof+0x131/0x390 [ 352.372337][T11526] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 352.372356][T11526] get_free_pages_noprof+0xc/0x40 [ 352.372370][T11526] kasan_populate_vmalloc_pte+0x2d/0x160 [ 352.372389][T11526] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 352.372407][T11526] __apply_to_page_range+0x5fd/0xd30 [ 352.372427][T11526] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 352.372449][T11526] ? __pfx___apply_to_page_range+0x10/0x10 [ 352.372467][T11526] ? insert_vmap_area+0x2ef/0x4d0 [ 352.372484][T11526] alloc_vmap_area+0x93e/0x2a60 [ 352.372506][T11526] ? __pfx_alloc_vmap_area+0x10/0x10 [ 352.372526][T11526] __get_vm_area_node+0x19e/0x2f0 [ 352.372546][T11526] __vmalloc_node_range_noprof+0x26a/0x1530 [ 352.372564][T11526] ? htab_map_alloc+0x3e0/0x17b0 [ 352.372588][T11526] ? htab_map_alloc+0x3e0/0x17b0 [ 352.372606][T11526] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 352.372624][T11526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.372641][T11526] ? pcpu_alloc_noprof+0x126/0x1680 [ 352.372656][T11526] ? bpf_map_alloc_percpu+0x9a/0x4b0 [ 352.372678][T11526] ? htab_map_alloc+0x3e0/0x17b0 [ 352.372694][T11526] __bpf_map_area_alloc+0xea/0x190 [ 352.372707][T11526] ? htab_map_alloc+0x3e0/0x17b0 [ 352.372726][T11526] htab_map_alloc+0x3e0/0x17b0 [ 352.372748][T11526] ? ns_capable+0xd7/0x110 [ 352.372769][T11526] map_create+0x5c5/0x1d20 [ 352.372788][T11526] ? __pfx_lock_release+0x10/0x10 [ 352.372806][T11526] ? trace_lock_acquire+0x14e/0x1f0 [ 352.372821][T11526] ? __pfx_map_create+0x10/0x10 [ 352.372839][T11526] ? lock_acquire+0x2f/0xb0 [ 352.372855][T11526] ? __might_fault+0xe3/0x190 [ 352.372868][T11526] ? __might_fault+0xe3/0x190 [ 352.372886][T11526] __sys_bpf+0x4391/0x49c0 [ 352.372907][T11526] ? __pfx___sys_bpf+0x10/0x10 [ 352.372931][T11526] ? do_futex+0x123/0x350 [ 352.372947][T11526] ? __pfx_do_futex+0x10/0x10 [ 352.372970][T11526] ? xfd_validate_state+0x5d/0x180 [ 352.372989][T11526] ? rcu_is_watching+0x12/0xc0 [ 352.373006][T11526] __x64_sys_bpf+0x78/0xc0 [ 352.373018][T11526] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.373034][T11526] do_syscall_64+0xcd/0x250 [ 352.373053][T11526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.373071][T11526] RIP: 0033:0x7f2794f8d169 [ 352.373083][T11526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.373096][T11526] RSP: 002b:00007f2795d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.373109][T11526] RAX: ffffffffffffffda RBX: 00007f27951a5fa0 RCX: 00007f2794f8d169 [ 352.373118][T11526] RDX: 00000000000000a3 RSI: 0000400000000780 RDI: 0000000000000000 [ 352.373126][T11526] RBP: 00007f279500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 352.373134][T11526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.373143][T11526] R13: 0000000000000000 R14: 00007f27951a5fa0 R15: 00007fffc33e0e78 [ 352.373160][T11526] [ 352.814093][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.976229][T11572] program syz.5.680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.595789][T11583] FAULT_INJECTION: forcing a failure. [ 354.595789][T11583] name failslab, interval 1, probability 0, space 0, times 0 [ 354.651742][T11583] CPU: 1 UID: 0 PID: 11583 Comm: syz.5.681 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 354.651772][T11583] Tainted: [U]=USER [ 354.651777][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 354.651785][T11583] Call Trace: [ 354.651791][T11583] [ 354.651797][T11583] dump_stack_lvl+0x16c/0x1f0 [ 354.651820][T11583] should_fail_ex+0x50a/0x650 [ 354.651842][T11583] ? fs_reclaim_acquire+0xae/0x150 [ 354.651861][T11583] should_failslab+0xc2/0x120 [ 354.651875][T11583] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 354.651896][T11583] ? security_file_alloc+0x34/0x2b0 [ 354.651916][T11583] security_file_alloc+0x34/0x2b0 [ 354.651933][T11583] init_file+0x93/0x4c0 [ 354.651947][T11583] alloc_empty_file+0x91/0x1e0 [ 354.651961][T11583] path_openat+0xe1/0x2d80 [ 354.651979][T11583] ? hlock_class+0x4e/0x130 [ 354.651993][T11583] ? __lock_acquire+0x15a9/0x3c40 [ 354.652016][T11583] ? __pfx_path_openat+0x10/0x10 [ 354.652042][T11583] ? __pfx___lock_acquire+0x10/0x10 [ 354.652059][T11583] ? lock_acquire.part.0+0x11b/0x380 [ 354.652077][T11583] ? find_held_lock+0x2d/0x110 [ 354.652094][T11583] do_filp_open+0x20c/0x470 [ 354.652114][T11583] ? __pfx_do_filp_open+0x10/0x10 [ 354.652132][T11583] ? find_held_lock+0x2d/0x110 [ 354.652157][T11583] ? alloc_fd+0x41f/0x760 [ 354.652180][T11583] do_sys_openat2+0x17a/0x1e0 [ 354.652195][T11583] ? __pfx_do_sys_openat2+0x10/0x10 [ 354.652214][T11583] __x64_sys_openat+0x175/0x210 [ 354.652229][T11583] ? __pfx___x64_sys_openat+0x10/0x10 [ 354.652249][T11583] do_syscall_64+0xcd/0x250 [ 354.652269][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.652288][T11583] RIP: 0033:0x7f2794f8d169 [ 354.652298][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.652311][T11583] RSP: 002b:00007f2795d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 354.652325][T11583] RAX: ffffffffffffffda RBX: 00007f27951a5fa0 RCX: 00007f2794f8d169 [ 354.652333][T11583] RDX: 0000000000000040 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 354.652342][T11583] RBP: 00007f279500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 354.652349][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.652357][T11583] R13: 0000000000000000 R14: 00007f27951a5fa0 R15: 00007fffc33e0e78 [ 354.652373][T11583] [ 354.888338][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.880335][T11611] netlink: 342 bytes leftover after parsing attributes in process `syz.1.684'. [ 355.929449][T11611] netlink: 342 bytes leftover after parsing attributes in process `syz.1.684'. [ 355.996298][T11614] netlink: 302 bytes leftover after parsing attributes in process `syz.1.684'. [ 357.678554][ T5900] Process accounting resumed [ 360.808348][T11740] FAULT_INJECTION: forcing a failure. [ 360.808348][T11740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.886735][T11740] CPU: 1 UID: 0 PID: 11740 Comm: syz.6.692 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 360.886761][T11740] Tainted: [U]=USER [ 360.886766][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.886774][T11740] Call Trace: [ 360.886778][T11740] [ 360.886784][T11740] dump_stack_lvl+0x16c/0x1f0 [ 360.886807][T11740] should_fail_ex+0x50a/0x650 [ 360.886829][T11740] ? __pfx___might_resched+0x10/0x10 [ 360.886852][T11740] should_fail_alloc_page+0xe7/0x130 [ 360.886868][T11740] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 360.886886][T11740] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.886904][T11740] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 360.886925][T11740] ? unwind_get_return_address+0x59/0xa0 [ 360.886945][T11740] ? arch_stack_walk+0xa7/0x100 [ 360.886961][T11740] ? hlock_class+0x4e/0x130 [ 360.886974][T11740] ? mark_lock+0xb5/0xc60 [ 360.886991][T11740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 360.887013][T11740] ? __pfx_mark_lock+0x10/0x10 [ 360.887029][T11740] ? __pfx_stack_trace_save+0x10/0x10 [ 360.887044][T11740] ? stack_depot_save_flags+0x28/0x9c0 [ 360.887067][T11740] ? kasan_save_stack+0x42/0x60 [ 360.887085][T11740] ? kasan_save_stack+0x33/0x60 [ 360.887102][T11740] ? kasan_save_track+0x14/0x30 [ 360.887119][T11740] ? __kasan_slab_alloc+0x89/0x90 [ 360.887138][T11740] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 360.887157][T11740] ? alloc_vmap_area+0x636/0x2a60 [ 360.887171][T11740] ? __get_vm_area_node+0x19e/0x2f0 [ 360.887186][T11740] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 360.887203][T11740] ? __bpf_map_area_alloc+0xea/0x190 [ 360.887216][T11740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 360.887237][T11740] ? policy_nodemask+0xea/0x4e0 [ 360.887259][T11740] alloc_pages_mpol+0x1fc/0x540 [ 360.887273][T11740] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 360.887287][T11740] ? __pfx___lock_acquire+0x10/0x10 [ 360.887306][T11740] alloc_pages_noprof+0x131/0x390 [ 360.887319][T11740] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 360.887337][T11740] get_free_pages_noprof+0xc/0x40 [ 360.887351][T11740] kasan_populate_vmalloc_pte+0x2d/0x160 [ 360.887369][T11740] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 360.887391][T11740] __apply_to_page_range+0x5fd/0xd30 [ 360.887411][T11740] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 360.887433][T11740] ? __pfx___apply_to_page_range+0x10/0x10 [ 360.887459][T11740] ? insert_vmap_area+0x2ef/0x4d0 [ 360.887477][T11740] alloc_vmap_area+0x93e/0x2a60 [ 360.887502][T11740] ? __pfx_alloc_vmap_area+0x10/0x10 [ 360.887522][T11740] __get_vm_area_node+0x19e/0x2f0 [ 360.887541][T11740] ? pcpu_block_refresh_hint+0x1eb/0x290 [ 360.887564][T11740] __vmalloc_node_range_noprof+0x26a/0x1530 [ 360.887583][T11740] ? htab_map_alloc+0x3e0/0x17b0 [ 360.887606][T11740] ? htab_map_alloc+0x3e0/0x17b0 [ 360.887624][T11740] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 360.887643][T11740] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.887661][T11740] ? pcpu_alloc_noprof+0x126/0x1680 [ 360.887675][T11740] ? bpf_map_alloc_percpu+0x9a/0x4b0 [ 360.887698][T11740] ? htab_map_alloc+0x3e0/0x17b0 [ 360.887714][T11740] __bpf_map_area_alloc+0xea/0x190 [ 360.887727][T11740] ? htab_map_alloc+0x3e0/0x17b0 [ 360.887746][T11740] htab_map_alloc+0x3e0/0x17b0 [ 360.887769][T11740] ? ns_capable+0xd7/0x110 [ 360.887789][T11740] map_create+0x5c5/0x1d20 [ 360.887809][T11740] ? __pfx_lock_release+0x10/0x10 [ 360.887826][T11740] ? trace_lock_acquire+0x14e/0x1f0 [ 360.887842][T11740] ? __pfx_map_create+0x10/0x10 [ 360.887860][T11740] ? lock_acquire+0x2f/0xb0 [ 360.887877][T11740] ? __might_fault+0xe3/0x190 [ 360.887890][T11740] ? __might_fault+0xe3/0x190 [ 360.887907][T11740] __sys_bpf+0x4391/0x49c0 [ 360.887926][T11740] ? __pfx_futex_wake+0x10/0x10 [ 360.887942][T11740] ? __pfx_lock_release+0x10/0x10 [ 360.887961][T11740] ? __pfx___sys_bpf+0x10/0x10 [ 360.887985][T11740] ? do_futex+0x123/0x350 [ 360.888000][T11740] ? __pfx_do_futex+0x10/0x10 [ 360.888024][T11740] ? xfd_validate_state+0x5d/0x180 [ 360.888042][T11740] ? rcu_is_watching+0x12/0xc0 [ 360.888059][T11740] __x64_sys_bpf+0x78/0xc0 [ 360.888071][T11740] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.888087][T11740] do_syscall_64+0xcd/0x250 [ 360.888106][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.888125][T11740] RIP: 0033:0x7fc9a278d169 [ 360.888136][T11740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.888150][T11740] RSP: 002b:00007fc9a36ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.888163][T11740] RAX: ffffffffffffffda RBX: 00007fc9a29a5fa0 RCX: 00007fc9a278d169 [ 360.888172][T11740] RDX: 00000000000000a3 RSI: 0000400000000780 RDI: 0000000000000000 [ 360.888180][T11740] RBP: 00007fc9a280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 360.888188][T11740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.888196][T11740] R13: 0000000000000000 R14: 00007fc9a29a5fa0 R15: 00007ffc3d88f748 [ 360.888213][T11740] [ 362.748704][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.694'. [ 362.834062][T11758] device-mapper: ioctl: Unable to rename non-existent device, to [ 374.860679][T12019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.707'. [ 376.420536][T12023] kexec: Could not allocate control_code_buffer [ 377.068173][T12019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.210162][T12019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.235857][T12019] bond0 (unregistering): Released all slaves [ 377.321241][T12036] netlink: 342 bytes leftover after parsing attributes in process `syz.6.709'. [ 377.417590][T12041] netlink: 342 bytes leftover after parsing attributes in process `syz.6.709'. [ 377.633191][T12054] FAULT_INJECTION: forcing a failure. [ 377.633191][T12054] name failslab, interval 1, probability 0, space 0, times 0 [ 377.687955][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.694279][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.811612][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 377.893457][T12057] svc: failed to register nfsdv3 RPC service (errno 111). [ 377.939171][T12057] svc: failed to register nfsaclv3 RPC service (errno 111). [ 377.967534][T12054] CPU: 1 UID: 0 PID: 12054 Comm: syz.5.710 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 377.967560][T12054] Tainted: [U]=USER [ 377.967564][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.967573][T12054] Call Trace: [ 377.967577][T12054] [ 377.967584][T12054] dump_stack_lvl+0x16c/0x1f0 [ 377.967607][T12054] should_fail_ex+0x50a/0x650 [ 377.967630][T12054] ? fs_reclaim_acquire+0xae/0x150 [ 377.967649][T12054] should_failslab+0xc2/0x120 [ 377.967662][T12054] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 377.967682][T12054] ? __kernfs_new_node+0xd3/0x890 [ 377.967704][T12054] __kernfs_new_node+0xd3/0x890 [ 377.967724][T12054] ? __pfx___kernfs_new_node+0x10/0x10 [ 377.967741][T12054] ? __pfx_lock_release+0x10/0x10 [ 377.967760][T12054] ? kernfs_add_one+0x39d/0x520 [ 377.967785][T12054] ? up_write+0x1b2/0x520 [ 377.967807][T12054] kernfs_new_node+0x186/0x240 [ 377.967830][T12054] __kernfs_create_file+0x53/0x350 [ 377.967847][T12054] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 377.967868][T12054] internal_create_group+0x56c/0xf10 [ 377.967891][T12054] ? __pfx_internal_create_group+0x10/0x10 [ 377.967912][T12054] ? kernfs_create_link+0x1bd/0x240 [ 377.967929][T12054] internal_create_groups+0x9d/0x150 [ 377.967948][T12054] device_add+0x6d3/0x1a70 [ 377.967969][T12054] ? __pfx_device_add+0x10/0x10 [ 377.967989][T12054] ? __init_waitqueue_head+0xca/0x150 [ 377.968007][T12054] netdev_register_kobject+0x183/0x3a0 [ 377.968030][T12054] register_netdevice+0x147b/0x1eb0 [ 377.968055][T12054] ? __pfx_register_netdevice+0x10/0x10 [ 377.968081][T12054] __ip_tunnel_create+0x4aa/0x690 [ 377.968100][T12054] ? __pfx___ip_tunnel_create+0x10/0x10 [ 377.968117][T12054] ? read_word_at_a_time+0xe/0x20 [ 377.968147][T12054] ip_tunnel_init_net+0x22a/0x790 [ 377.968169][T12054] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 377.968191][T12054] ? __kmalloc_noprof+0x23b/0x510 [ 377.968214][T12054] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 377.968229][T12054] ops_init+0x1df/0x5f0 [ 377.968251][T12054] setup_net+0x21f/0x860 [ 377.968272][T12054] ? __pfx_setup_net+0x10/0x10 [ 377.968291][T12054] ? down_read_killable+0xcc/0x380 [ 377.968310][T12054] ? __pfx_down_read_killable+0x10/0x10 [ 377.968328][T12054] ? __raw_spin_lock_init+0x3a/0x110 [ 377.968350][T12054] ? debug_mutex_init+0x37/0x70 [ 377.968365][T12054] copy_net_ns+0x2a6/0x5f0 [ 377.968381][T12054] create_new_namespaces+0x3ea/0xad0 [ 377.968406][T12054] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 377.968429][T12054] ksys_unshare+0x45d/0xa40 [ 377.968443][T12054] ? __pfx_ksys_unshare+0x10/0x10 [ 377.968456][T12054] ? xfd_validate_state+0x5d/0x180 [ 377.968481][T12054] __x64_sys_unshare+0x31/0x40 [ 377.968494][T12054] do_syscall_64+0xcd/0x250 [ 377.968513][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.968532][T12054] RIP: 0033:0x7f2794f8d169 [ 377.968544][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.968557][T12054] RSP: 002b:00007f2795d41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 377.968570][T12054] RAX: ffffffffffffffda RBX: 00007f27951a6080 RCX: 00007f2794f8d169 [ 377.968579][T12054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 377.968587][T12054] RBP: 00007f279500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.968596][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.968604][T12054] R13: 0000000000000000 R14: 00007f27951a6080 R15: 00007fffc33e0e78 [ 377.968622][T12054] [ 381.060700][T12096] netlink: 'syz.5.716': attribute type 32 has an invalid length. [ 381.165737][T12096] netlink: 'syz.5.716': attribute type 33 has an invalid length. [ 381.296514][T12096] netlink: 'syz.5.716': attribute type 35 has an invalid length. [ 381.367111][T12096] netlink: 'syz.5.716': attribute type 37 has an invalid length. [ 381.474890][T12096] netlink: 'syz.5.716': attribute type 39 has an invalid length. [ 381.581647][T12096] netlink: 'syz.5.716': attribute type 40 has an invalid length. [ 381.674322][T12096] netlink: 'syz.5.716': attribute type 41 has an invalid length. [ 381.782695][T12096] netlink: 'syz.5.716': attribute type 44 has an invalid length. [ 381.935269][T12096] netlink: 'syz.5.716': attribute type 46 has an invalid length. [ 381.965736][T12096] netlink: 'syz.5.716': attribute type 47 has an invalid length. [ 382.034321][T12096] netlink: 2 bytes leftover after parsing attributes in process `syz.5.716'. [ 382.605268][T12127] random: crng reseeded on system resumption [ 386.264325][T12201] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 386.366800][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'. [ 386.407320][T12201] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 386.555085][T12201] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 387.858773][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.868107][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.876572][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.884741][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.895156][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 387.903175][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.469067][T12228] dyndbg: expected <4096 bytes into control [ 388.749018][T12234] process 'syz.1.728' launched '/dev/fd/2/./file1' with NULL argv: empty string added [ 389.360421][T12239] chnl_net:caif_netlink_parms(): no params data found [ 390.005981][ T55] Bluetooth: hci4: command tx timeout [ 390.718314][T12239] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.768238][T12239] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.800508][T12239] bridge_slave_0: entered allmulticast mode [ 390.839056][T12239] bridge_slave_0: entered promiscuous mode [ 390.878082][T12239] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.918930][T12239] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.960115][T12239] bridge_slave_1: entered allmulticast mode [ 390.987347][T12239] bridge_slave_1: entered promiscuous mode [ 391.900424][T12239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.085117][ T55] Bluetooth: hci4: command tx timeout [ 392.134331][T12239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.902803][T12239] team0: Port device team_slave_0 added [ 392.954659][T12066] Invalid ELF header magic: != ELF [ 392.995974][T12239] team0: Port device team_slave_1 added [ 394.095254][T10914] syz.4.613 (10914) used greatest stack depth: 18728 bytes left [ 394.169875][ T55] Bluetooth: hci4: command tx timeout [ 394.257467][T12239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.286799][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.475057][T12239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.533461][T12239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.579282][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.755217][T12239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.961752][T12239] hsr_slave_0: entered promiscuous mode [ 395.009615][T12239] hsr_slave_1: entered promiscuous mode [ 395.046658][T12239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.054288][T12239] Cannot create hsr debugfs directory [ 396.245273][ T55] Bluetooth: hci4: command tx timeout [ 396.356181][T12377] netlink: 'syz.6.739': attribute type 1 has an invalid length. [ 396.363845][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.739'. [ 396.867194][T12382] input: f as /devices/virtual/input/input12 [ 398.199325][T12422] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 399.027219][ T29] audit: type=1800 audit(6035737476.233:6): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.745" name="dbroot" dev="configfs" ino=34877 res=0 errno=0 [ 399.191391][ T29] audit: type=1804 audit(6035737476.283:7): pid=12441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.745" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=34877 res=1 errno=0 [ 399.386345][T10928] syz.4.613 (10928) used greatest stack depth: 17296 bytes left [ 401.548597][T12239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.694195][T12239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.811196][T12239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.000810][T12239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 402.246540][ T7838] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.484415][ T7838] bridge0: port 3(netdevsim2) entered disabled state [ 402.931907][T12498] netlink: set zone limit has 8 unknown bytes [ 403.026166][ T7838] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 403.034751][ T7838] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode [ 403.151821][ T7838] bridge0: port 3(netdevsim2) entered disabled state [ 403.183266][ T7838] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.409184][ T7838] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.713896][ T7838] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.908050][T12239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.160788][T12239] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.407473][ T7838] bridge_slave_1: left allmulticast mode [ 404.420443][ T7838] bridge_slave_1: left promiscuous mode [ 404.451278][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.517380][ T7838] bridge_slave_0: left allmulticast mode [ 404.523056][ T7838] bridge_slave_0: left promiscuous mode [ 404.557443][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.362635][ T7838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.383173][ T7838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.416820][ T7838] bond0 (unregistering): Released all slaves [ 405.456495][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.463573][ T7835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.522158][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.529280][ T7835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.631314][T12239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.662174][T12239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.079340][ T7838] hsr_slave_0: left promiscuous mode [ 406.109601][ T7838] hsr_slave_1: left promiscuous mode [ 406.127651][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.158309][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.203201][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.221113][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.265752][ T7838] veth1_macvtap: left promiscuous mode [ 406.271264][ T7838] veth0_macvtap: left promiscuous mode [ 406.299417][ T7838] veth1_vlan: left allmulticast mode [ 406.321922][ T7838] veth1_vlan: left promiscuous mode [ 406.340742][ T7838] veth0_vlan: left promiscuous mode [ 407.268667][ T7838] team0 (unregistering): Port device team_slave_1 removed [ 407.312101][ T7838] team0 (unregistering): Port device team_slave_0 removed [ 408.054694][T12239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.161620][T12239] veth0_vlan: entered promiscuous mode [ 408.268801][T12239] veth1_vlan: entered promiscuous mode [ 408.409089][T12239] veth0_macvtap: entered promiscuous mode [ 408.450221][T12239] veth1_macvtap: entered promiscuous mode [ 408.533965][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.628219][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.690803][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.745661][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.803050][T12239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.863186][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.924013][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.148725][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.269649][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.358319][T12239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.437972][T12239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.509358][T12239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.598994][T12239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.655235][T12239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.725078][T12239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.787509][T12239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.162779][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.329947][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.398786][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.466746][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.810666][T12589] FAULT_INJECTION: forcing a failure. [ 410.810666][T12589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.898445][T12589] CPU: 1 UID: 0 PID: 12589 Comm: syz.1.770 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 410.898470][T12589] Tainted: [U]=USER [ 410.898475][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.898482][T12589] Call Trace: [ 410.898487][T12589] [ 410.898492][T12589] dump_stack_lvl+0x16c/0x1f0 [ 410.898516][T12589] should_fail_ex+0x50a/0x650 [ 410.898541][T12589] _copy_from_user+0x2e/0xd0 [ 410.898557][T12589] io_uring_setup+0xb1/0x2200 [ 410.898573][T12589] ? __pfx_io_uring_setup+0x10/0x10 [ 410.898587][T12589] ? do_futex+0x123/0x350 [ 410.898604][T12589] ? __pfx_do_futex+0x10/0x10 [ 410.898621][T12589] ? __pfx___might_resched+0x10/0x10 [ 410.898649][T12589] ? rcu_is_watching+0x12/0xc0 [ 410.898667][T12589] __x64_sys_io_uring_setup+0x98/0x140 [ 410.898682][T12589] do_syscall_64+0xcd/0x250 [ 410.898702][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.898721][T12589] RIP: 0033:0x7f979fd8d169 [ 410.898732][T12589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.898745][T12589] RSP: 002b:00007f97a0c3e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 410.898759][T12589] RAX: ffffffffffffffda RBX: 00007f979ffa5fa0 RCX: 00007f979fd8d169 [ 410.898775][T12589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 410.898783][T12589] RBP: 00007f979fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 410.898791][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.898799][T12589] R13: 0000000000000000 R14: 00007f979ffa5fa0 R15: 00007ffd5814f068 [ 410.898815][T12589] [ 411.859099][T12613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.871731][T12613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.921474][T12613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.994170][T12613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 412.036163][T12613] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 412.091671][T12613] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 412.137029][T12613] CPU0 is offline. [ 413.928298][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 413.934329][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 413.940415][ T5148] Bluetooth: hci3: command 0x0c1a tx timeout [ 414.005659][T12655] Bluetooth: hci4: command 0x0c1a tx timeout [ 414.805051][ C1] ================================================================== [ 414.813136][ C1] BUG: KASAN: slab-use-after-free in __run_timers+0x8b0/0x930 [ 414.820590][ C1] Write of size 8 at addr ffff88807bae1250 by task syz.6.772/12611 [ 414.828469][ C1] [ 414.830780][ C1] CPU: 1 UID: 0 PID: 12611 Comm: syz.6.772 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 414.830803][ C1] Tainted: [U]=USER [ 414.830808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.830818][ C1] Call Trace: [ 414.830823][ C1] [ 414.830830][ C1] dump_stack_lvl+0x116/0x1f0 [ 414.830853][ C1] print_report+0xc3/0x670 [ 414.830878][ C1] ? __virt_addr_valid+0x5e/0x590 [ 414.830894][ C1] ? __phys_addr+0xc6/0x150 [ 414.830910][ C1] kasan_report+0xd9/0x110 [ 414.830923][ C1] ? __run_timers+0x8b0/0x930 [ 414.830943][ C1] ? __run_timers+0x8b0/0x930 [ 414.830965][ C1] __run_timers+0x8b0/0x930 [ 414.830986][ C1] ? __pfx___run_timers+0x10/0x10 [ 414.831007][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 414.831031][ C1] ? rcu_is_watching+0x12/0xc0 [ 414.831049][ C1] ? lock_acquire+0x2f/0xb0 [ 414.831069][ C1] ? run_timer_base+0x10c/0x190 [ 414.831090][ C1] run_timer_base+0x114/0x190 [ 414.831110][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 414.831131][ C1] run_timer_softirq+0x1a/0x40 [ 414.831151][ C1] handle_softirqs+0x213/0x8f0 [ 414.831176][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.831200][ C1] __irq_exit_rcu+0x109/0x170 [ 414.831222][ C1] irq_exit_rcu+0x9/0x30 [ 414.831244][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 414.831264][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.831287][ C1] RIP: 0033:0x7fc9a26665c5 [ 414.831300][ C1] Code: 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 <48> 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 24 eb bf 48 39 [ 414.831316][ C1] RSP: 002b:00007ffc3d88f700 EFLAGS: 00000283 [ 414.831329][ C1] RAX: 00007fc9a1e22a90 RBX: 00007fc9a1e20600 RCX: ffffffff81f18fa0 [ 414.831340][ C1] RDX: ffffffff81f18fa0 RSI: ffffffff81f18fa0 RDI: 00007fc9a1e230e0 [ 414.831350][ C1] RBP: 00007fc9a1e20088 R08: 00007fc9a1e218b0 R09: 00007fc9a2992000 [ 414.831360][ C1] R10: 00007fc9a1dff008 R11: 0000000000000008 R12: 00007fc9a1e20080 [ 414.831370][ C1] R13: 000000000000001a R14: ffffffffffffffff R15: 00007fc9a1dff008 [ 414.831383][ C1] ? noop_dirty_folio+0x10/0xb0 [ 414.831405][ C1] ? noop_dirty_folio+0x10/0xb0 [ 414.831426][ C1] ? noop_dirty_folio+0x10/0xb0 [ 414.831452][ C1] [ 414.831457][ C1] [ 415.059086][ C1] Allocated by task 12590: [ 415.063482][ C1] kasan_save_stack+0x33/0x60 [ 415.068153][ C1] kasan_save_track+0x14/0x30 [ 415.072819][ C1] __kasan_kmalloc+0xaa/0xb0 [ 415.077397][ C1] __kmalloc_noprof+0x21c/0x510 [ 415.082236][ C1] ops_init+0x77/0x5f0 [ 415.086298][ C1] setup_net+0x21f/0x860 [ 415.090530][ C1] copy_net_ns+0x2a6/0x5f0 [ 415.094927][ C1] create_new_namespaces+0x3ea/0xad0 [ 415.100202][ C1] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 415.105825][ C1] ksys_unshare+0x45d/0xa40 [ 415.110311][ C1] __x64_sys_unshare+0x31/0x40 [ 415.115059][ C1] do_syscall_64+0xcd/0x250 [ 415.119548][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.125429][ C1] [ 415.127734][ C1] Freed by task 4535: [ 415.131693][ C1] kasan_save_stack+0x33/0x60 [ 415.136366][ C1] kasan_save_track+0x14/0x30 [ 415.141030][ C1] kasan_save_free_info+0x3b/0x60 [ 415.146039][ C1] __kasan_slab_free+0x51/0x70 [ 415.150794][ C1] kfree+0x2c4/0x4d0 [ 415.154677][ C1] ops_free_list+0x14e/0x410 [ 415.159261][ C1] cleanup_net+0x619/0xb30 [ 415.163675][ C1] process_one_work+0x9c5/0x1ba0 [ 415.168605][ C1] worker_thread+0x6c8/0xf00 [ 415.173182][ C1] kthread+0x3af/0x750 [ 415.177236][ C1] ret_from_fork+0x45/0x80 [ 415.181641][ C1] ret_from_fork_asm+0x1a/0x30 [ 415.186396][ C1] [ 415.188711][ C1] The buggy address belongs to the object at ffff88807bae0000 [ 415.188711][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 415.202743][ C1] The buggy address is located 4688 bytes inside of [ 415.202743][ C1] freed 8192-byte region [ffff88807bae0000, ffff88807bae2000) [ 415.216691][ C1] [ 415.219004][ C1] The buggy address belongs to the physical page: [ 415.225391][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bae0 [ 415.234129][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 415.242606][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 415.250131][ C1] page_type: f5(slab) [ 415.254094][ C1] raw: 00fff00000000040 ffff88801b042280 ffffea000170f600 dead000000000002 [ 415.262660][ C1] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 415.271224][ C1] head: 00fff00000000040 ffff88801b042280 ffffea000170f600 dead000000000002 [ 415.279875][ C1] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 415.288531][ C1] head: 00fff00000000003 ffffea0001eeb801 ffffffffffffffff 0000000000000000 [ 415.297181][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 415.305826][ C1] page dumped because: kasan: bad access detected [ 415.312223][ C1] page_owner tracks the page as allocated [ 415.317913][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5512, tgid 5512 (dhcpcd-run-hook), ts 47204899451, free_ts 47176274194 [ 415.338734][ C1] post_alloc_hook+0x181/0x1b0 [ 415.343489][ C1] get_page_from_freelist+0xfce/0x2f80 [ 415.348938][ C1] __alloc_frozen_pages_noprof+0x221/0x2470 [ 415.354821][ C1] alloc_pages_mpol+0x1fc/0x540 [ 415.359652][ C1] new_slab+0x23d/0x330 [ 415.363799][ C1] ___slab_alloc+0xc5d/0x1720 [ 415.368465][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 415.373824][ C1] __kmalloc_cache_noprof+0xfa/0x410 [ 415.379096][ C1] tomoyo_init_log+0xcb3/0x2170 [ 415.383933][ C1] tomoyo_supervisor+0x313/0x1380 [ 415.388949][ C1] tomoyo_env_perm+0x193/0x210 [ 415.393704][ C1] tomoyo_find_next_domain+0xed4/0x20c0 [ 415.399230][ C1] tomoyo_bprm_check_security+0x12e/0x1d0 [ 415.404940][ C1] security_bprm_check+0x1b9/0x1e0 [ 415.410033][ C1] bprm_execve+0x832/0x16d0 [ 415.414523][ C1] do_execveat_common.isra.0+0x4a2/0x610 [ 415.420142][ C1] page last free pid 5511 tgid 5511 stack trace: [ 415.426446][ C1] free_frozen_pages+0x6db/0xfb0 [ 415.431394][ C1] __put_partials+0x14c/0x170 [ 415.436078][ C1] qlist_free_all+0x4e/0x120 [ 415.440670][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 415.446126][ C1] __kasan_slab_alloc+0x69/0x90 [ 415.450969][ C1] __kmalloc_noprof+0x1cd/0x510 [ 415.455809][ C1] tomoyo_supervisor+0x46c/0x1380 [ 415.460840][ C1] tomoyo_env_perm+0x193/0x210 [ 415.465604][ C1] tomoyo_find_next_domain+0xed4/0x20c0 [ 415.471145][ C1] tomoyo_bprm_check_security+0x12e/0x1d0 [ 415.476867][ C1] security_bprm_check+0x1b9/0x1e0 [ 415.481966][ C1] bprm_execve+0x832/0x16d0 [ 415.486459][ C1] do_execveat_common.isra.0+0x4a2/0x610 [ 415.492094][ C1] __x64_sys_execve+0x8c/0xb0 [ 415.496768][ C1] do_syscall_64+0xcd/0x250 [ 415.501261][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.507151][ C1] [ 415.509459][ C1] Memory state around the buggy address: [ 415.515078][ C1] ffff88807bae1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.523123][ C1] ffff88807bae1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.531166][ C1] >ffff88807bae1200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.539206][ C1] ^ [ 415.545857][ C1] ffff88807bae1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.553902][ C1] ffff88807bae1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.561939][ C1] ================================================================== [ 415.569979][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 415.577170][ C1] CPU: 1 UID: 0 PID: 12611 Comm: syz.6.772 Tainted: G U 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 415.589324][ C1] Tainted: [U]=USER [ 415.593118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.603160][ C1] Call Trace: [ 415.606431][ C1] [ 415.609356][ C1] dump_stack_lvl+0x3d/0x1f0 [ 415.613945][ C1] panic+0x71d/0x800 [ 415.617834][ C1] ? __pfx_panic+0x10/0x10 [ 415.622255][ C1] ? rcu_is_watching+0x12/0xc0 [ 415.627037][ C1] ? __pfx_lock_release+0x10/0x10 [ 415.632058][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 415.637163][ C1] check_panic_on_warn+0xab/0xb0 [ 415.642111][ C1] end_report+0x117/0x180 [ 415.646454][ C1] kasan_report+0xe9/0x110 [ 415.650861][ C1] ? __run_timers+0x8b0/0x930 [ 415.655538][ C1] ? __run_timers+0x8b0/0x930 [ 415.660213][ C1] __run_timers+0x8b0/0x930 [ 415.664717][ C1] ? __pfx___run_timers+0x10/0x10 [ 415.669735][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 415.675361][ C1] ? rcu_is_watching+0x12/0xc0 [ 415.680113][ C1] ? lock_acquire+0x2f/0xb0 [ 415.684609][ C1] ? run_timer_base+0x10c/0x190 [ 415.689452][ C1] run_timer_base+0x114/0x190 [ 415.694118][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 415.699309][ C1] run_timer_softirq+0x1a/0x40 [ 415.704066][ C1] handle_softirqs+0x213/0x8f0 [ 415.708821][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 415.714100][ C1] __irq_exit_rcu+0x109/0x170 [ 415.718768][ C1] irq_exit_rcu+0x9/0x30 [ 415.723003][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 415.728624][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.734599][ C1] RIP: 0033:0x7fc9a26665c5 [ 415.738996][ C1] Code: 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 <48> 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 24 eb bf 48 39 [ 415.758607][ C1] RSP: 002b:00007ffc3d88f700 EFLAGS: 00000283 [ 415.764661][ C1] RAX: 00007fc9a1e22a90 RBX: 00007fc9a1e20600 RCX: ffffffff81f18fa0 [ 415.772619][ C1] RDX: ffffffff81f18fa0 RSI: ffffffff81f18fa0 RDI: 00007fc9a1e230e0 [ 415.780578][ C1] RBP: 00007fc9a1e20088 R08: 00007fc9a1e218b0 R09: 00007fc9a2992000 [ 415.788536][ C1] R10: 00007fc9a1dff008 R11: 0000000000000008 R12: 00007fc9a1e20080 [ 415.796492][ C1] R13: 000000000000001a R14: ffffffffffffffff R15: 00007fc9a1dff008 [ 415.804449][ C1] ? noop_dirty_folio+0x10/0xb0 [ 415.809298][ C1] ? noop_dirty_folio+0x10/0xb0 [ 415.814140][ C1] ? noop_dirty_folio+0x10/0xb0 [ 415.818985][ C1] [ 415.822040][ C1] Kernel Offset: disabled [ 415.826356][ C1] Rebooting in 86400 seconds..