last executing test programs: 7.45719747s ago: executing program 3 (id=164): futex$auto(&(0x7f0000000240)=0x2948, 0x2, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080), 0x3, 0x8, 0x0, &(0x7f0000000100)=0x7, 0x7fffffff) syz_clone(0x84012000, &(0x7f0000000000)="64ef827268b62b15e3386414b34124aac54cd46957d95eb1bd40c1fb1f2432ce4841c750616a3b7672975be8b3b9ef419353d7171003561d3ff52880e732c686732d52b287ad85975f21be60b3f639f8fd804a1b83fa438f4e5064a34dd5d35d00f6c43dc1ad", 0x66, 0xfffffffffffffffe, &(0x7f00000000c0), &(0x7f0000000140)="413fd939cded33245ebbaa9c5de72682825fdc293ff840e1366b06739edf74c2c2b01985d203b92341fb32bb24ca33bf54556c06e246627f46a74486d297713b805a0387b6f4db9c5766ec50a591d6389420f9d64338589fa7f422ad88882fe5495f1c80dd939525ed9dfcaaa1eec1050d2da0daa6e0013d867db1aaedaf3fbbb4d01981bff2a32eb4df7468944de4beaedd733610a320e7465c9cc2035123c6cd9b516cf720fb4d42fc88fefd44473ac0ce4bb0c041a2df92df40cbe87700e195dfa86a89852dee4d4f") 6.93598837s ago: executing program 3 (id=166): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0x2, 0x630, 0x57d, 0x9, 0x8}, 0xa3) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000001700)=""/4096, 0x1000) (fail_nth: 1) 6.330620689s ago: executing program 3 (id=169): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r0, 0x4, 0x8) prctl$auto(0xb, 0x1, r0, 0x40000000004, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28882, 0x0) syz_genetlink_get_family_id$auto_ncsi(0x0, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0xf) getcwd$auto(0x0, 0xffffffffffffffff) link$auto(0x0, &(0x7f0000000200)='./file1\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) uname$auto(0x0) 5.898425297s ago: executing program 0 (id=173): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x48045, 0x0) write$auto(r0, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_enter$auto(0xffffffffffffffff, 0x6, 0xfffffffe, 0x6b80, 0x0, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="13042dbd70009dd2d28d4ffa5e4f08000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80) ioctl$auto(r2, 0x200, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbfedf1b70a1a6c35ed5a4569cd7dd80"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) unshare$auto(0x40000080) write$auto(r1, &(0x7f0000000400)='\x04>\x00\x19\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb7\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p\x0flzM\xa6\xab\xde!T\x9bG\x19\x9680\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R\x00\x00', 0xff) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_BUF_LOCK(0xffffffffffffffff, 0x0, 0x48, &(0x7f0000000240)='\x00', 0x81) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r9 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r8, 0x541c, r9) 5.17432261s ago: executing program 3 (id=178): sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket(0x10, 0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000e47ddc098760416a6ee5f2285cb689f2ccc626505c9b162ab7be0dc176889923b6b7d73f4778099f0a1c01ebfbd916d007d8d37056a91b5dbb8f13c95562427a22e532f5e83859694cb7f64fd5916caeb2791c1fccbcd002df3c0fcd9eb78b6399420bef0838cf", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25030000000a000200a060292f83d90000"], 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x401, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x5, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20282, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/vlan/config\x00', 0x41900, 0x0) pread64$auto(r4, 0x0, 0xe, 0x100000000007) fsetxattr$auto(r3, &(0x7f0000000040)='\x00', &(0x7f00000005c0)="29643b82f0ee7099389c671d3ca82692659f29d42095faf6db027fc3788a2844d946e7bc67a56b8640e61b1c1f8c4218375718821c2ad6942b920b668c916b20a0853ab857b54b1d60b3da190f2dd2083f741cc5b6db71c4ce5fb854323b11b7f045a0af29985d7ab9f3fd77499afec136e71a3b2417b2e642f3996bff7db01caa0484f1fac789da3c4b51a59d2bb8d3c37401a13c00738acb8aac833bdc4486d3904b16f0a4744a6433366329f1ee3ce2ef3344a6f45a5885088e099985ffe731a23324ef05379e4a9e8334a18f791d770e538d97fb78fcf9804f266e218a5f52055ab2ea34fdd3a7bb24982f421582295d449af7", 0x3, 0x40000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x84280, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto(r5, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c03, 0xfffffffffffffffd) bind$auto(0x3, 0x0, 0x6a) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x9, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x101100, 0x0) 5.006839286s ago: executing program 1 (id=179): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 4.883735716s ago: executing program 3 (id=181): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto(0x4, 0x0, 0x100082) socket(0x2, 0x2, 0x1) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x0, 0x7) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x201, 0x0) mmap$auto(0x0, 0x400009, 0xde, 0x100000011, 0xffffffffffffffff, 0x8000) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x8080, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) gettid() socket(0x2, 0x1, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0x40000040, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x6, 0x8, 0x4, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r0, 0xfffff588, 0x9, 0x2, 0x100000000000200}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000000c0)) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x105800, 0x0) write$auto_sg_fops_sg(r2, &(0x7f00000001c0), 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x12300, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(0xffffffffffffffff, 0x80085502, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000005", @ANYRESOCT=r1]) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x840, 0xc) io_uring_setup$auto(0xb30, 0x0) 4.662398474s ago: executing program 1 (id=182): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket(0x27, 0x3, 0x1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(0x3, 0x4020940b, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) close_range$auto(r2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) write$auto(0x3, 0x0, 0x1) 4.540137353s ago: executing program 0 (id=183): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x82, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x13, 0x0, 0x0, 0x110000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r3) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r3, &(0x7f0000000fc0)={0x0, 0x34000, &(0x7f0000000f80)={&(0x7f0000000c00)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r5 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r5, 0x29, 0xd1, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x454, 0x9) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) write$auto_proc_mem_operations_base(r1, &(0x7f0000000380)="974fae5a72547f02087bebd882671b2c1db5544247ccc436ec48faea054ca4d2a304bdda19ca35c178a27e7c2236e1134263a8cfc7132157dbf5c39267bbc50a9f0e1f5e51893447a3cb33b03bee230e122b83aa8ebedcf06c4b223d3dd25af89f2b5934c53a81b755bef345c36cb456c15568f5a70c369929e8bb92944d8696898ce74be4755056b7bde6c65d4b6fcfc3cb706ec18a6ed3e112a964364279f5352b216ba25d366422b96f33eca9bbbdb18f5f27dffa01b7a2b6b48f14fb73e2fc0c6eb966bf509e625dc3f0f368c490519a7d", 0xd3) 4.157188528s ago: executing program 2 (id=184): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x0, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x2f43, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socket(0xa, 0x2, 0x3a) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r0, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 3.966127683s ago: executing program 0 (id=185): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto_PR_SET_MM_END_CODE(0xffffffff, 0x2, 0x0, 0x6, 0x3ff) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r2, &(0x7f00000003c0)="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", 0x100) mremap$auto(0x4000, 0xfee0, 0x9, 0x3, 0xfffff000) ioctl$auto_BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000180)={@inferred=r0, "f919bd4d806ba75d60c4368a2f515769451e7c36fe262254517f305e7228ef2ebe19f9e56dc8650a70a4f7dac4de68a90827644788779e6208e9767786a31d75479c304eba80724819354cbca11250f409e53ac45ab95fcc4d96d8b93d4984945aa6ce5c0de35423e92f9adc935847fd478a6d64656949c9f89905514c488dc556b5cb66f3df0f85ac0e6022eac3ca6a9b5b590b98651e352fe2ddb3c8c177208862631c0831e266a063cf9439aa6c3fd5cac6b2dbc5570ad3c025ae7bdea3402cbf4eaafd932837e48b4695d551c29004f07bf1217f322ad9cf248f6a8002e28196c94e89d9b61fcd1be1d52dd26821da64a5d0256e004b9a191433e0bd6422ac83ac5c0574c2fdda0d53b1fb3894d49b25135f770cc386eb7f5f27c4ad1aed8ee611b433fe124af45fff8fe009abde2d14266c29ffb36b695792c43897acebf9aed4ce89de7cd83bc13ad11193109560eca143ea79ddafbe4eff2485b70e13ff7a3c00f2a21b8bc6f8f4e4c21ceabc8ef7cd09e7df4fe1c1a8bfeacf919ae0b442d39d26b5f66410f5a207aa385dbd82b799f04ec878558f29bbf660c9ca503b65ab5400518debbc8a3728df9643ea628453f8eb58f9f95e214050cd946079d7e203f2717819a05774cb92e31a793bb96410af82a32a9c99878abaca855a32e8e0d8077d8129c2d9be1aeb25a510bda53b1faf6c549a6dcff751b3db568db6ba10a60b6cb217c99da73ba4fbe92d9133a6b1d55e42ad60ec7fd6dd0da20eed652027ab53623fab46dbab983ffc88b9f213722882b1725a69ea68de3ad525e6449ed4c23470c8ffac38af20a18de84022a07dd997ab2e1607f9a02e11876b0aaf1e3921ae92d63d73f5d92e75dc2053327cb13b2615f76c0bf756660db24ba8d587dc3ad14de9c085b88384c9373aa20818895b14c517fe4d876d29abc8aea459b3055470c110928bdce55c09b1bed335762a050e5f1edb8295447571632a9d9131e160dc3f7ce229f8fdd3a91492a7044446685bbb42113a5cc517da70dfcff184ca038f9128d7aaf9aa757d94eff58d41ec716d9bb658a4b771e2ac9dc59820095728e14fba3ad19f8c8a5d4896628080c282d0c3bcea8ac355b6829e2959508251af68867992ec3314ab2fcf3312dee012492a858d197b6b6b151941df094fbc62fc0238d140754abf95b0a2f7ff4bea6ffa3035bc6218c06c8fdd05b094c3cffd834d5aa808245baa9c66a55c062fc27db02e7218c2bdd31d9ddc8fc9ae394331e439395febcc0b87366fb89078bdfcf3063a84b85317187dbb1b75233450dde7123a919d52c088587ebdbc5d0e90fbf6efcd4d70cfe08a006a1417c4be4e71761ca829ebe4d3767a07925c1fb8955f3ac83f2b213d8ae9e3cc6443f546e9d7e26d1d511f5307dd647050382e62878b7519cc08e7b80065f00a3f47e42b5b3996ecc2fb8673e2dcdf5179f088281d73014281da48185b11ef591fbdc16d45847233faea64135e555538d1fbdae3bd6132d3529322131977edde3089021bf3b6e88fca534867d8955691bb29ff85446f6bce509ca6a037c6fd9bec3e59b110f2f5dbac47ff590a546467790b96e43b75a45cc6fbbb9587fa38b83e7592c127576dd0136e1e5f9e686c5c9a6449bbc2ac6cb396ac93c8d635e9c10c959fd41792be28770284648cc7381e4904b545d4ceb67fbe68a7a44c61b6690628c60d2cca1ca581a48be4c5b9b97646346bf63bffad9c319f96f7dc29dd87b9dd04f54072990c1529eca7f60d6dac049fe6fe5f7333f73234506cda74061038fedc88158cdfe5dadd9a7294e5c2f9bcfd1b1aa1853ea44ce0d60809265251b5a48e1959fed4dd82fdbd721159e5986eb164c6b28becceef3dfb9f70246d2fa9b1cbcb688864c1657b6acd0cc3ec6a73207f905cdf27562b80acec1e4a78032e81c1208e9b984d1e0ad67740c3515ae382a0da32d274c69e6932891c5f0be705a264e7678c240ce2408da7c89ca66788718771a239a09856a08799ca0a7e859e7a6e997825a86eec67ec091395ca9a640395ebbe868cef5d33649d25f8571623f9987914d25204d96771cb00f7fd1d0e632ef6cfa97b4b179a6648b7e257950510e3a53a6de3e6d6918b620263604d404956c2f23378d491ce7d04bf73c9892227d337db46866d88d08710f433f3c4cc960d6d830c7cac334bac7bfd954fd61180bc698c18a2e7ce38c5a97f832ee4add55d247894c71309a33a485bf52649dc64f84e9e94f80a200e90027cd595bd67d8135257dda231ca4c336a32fcce2bb2584cdac9f2cbea51b2f48ec8fe9cf1f4b6a9df9490de192767233188301d7018a5f0e55ea5066fb0037c91de7198dce2df852248995f76a00553a71eb57bd6f18a8c7a288ac96aec9e07602f219c39ae9effb208e3f4f90b920823cf1030b7d8bdb5a5ddb46139365c8d6ff18a5fd021baded4eeb92f19ff94fcf9c638af3c92a125564d3d7a8eb936f905b1233ff1fa4fcca652a7207a9269596197ec246ce2df1e6d54b15bf0d6153209cbf791128dd86da80692c644d53075d372aa9cfaec93a33a38a0b1fe50bf2f7235b60b960b7d77f76839b5d486642fa1d35c0ae7c2b2cb9d9612a0dd3df64a3056c8a12ae9c26257c1d18b2b3e717b6b7783e5cdbc446129df36c37d0e65bfc850f5f68a29cd72ed60089718ca27bafdb51a4f519582d003dd686d6116e5d9358b6dc88b227c6ba2714b74f5acaca2ecb64ba1428daeabedaaad5bc5f20ad2606b0b20eef7701ae95a4fe0f4eb988b26aaa725cbba70be8d4ea0301204e10948e7216b14397997e877517a00a269e5a9cffc71647385a1456012c511598d3bc5956ca037ad1a13c78feed5d02f40d0c30f2fa8dd6b68e844cbfb160de17e726cf66286886f77cbddf4e1a0b9233bb25801230db50c2651827b58969fab47fc75cb6fc8ab5d1b8a72e4b3ecc998b708e7548c4c11a7ef22b2644c208b6512c7320433a94b301974bed10fe631abbafa0aa31f51c351bcfa3e9e473e14fbc6816f9e6a47b264cab2e4355be2f6c8bbe0bc5d9fcc070be536ff0602ef655090d13a80e3fffd26f2a64997a57c7705512d342ab1b7a5f01aca0936695594043caf1fc24b09091aa00002cb4dde25122675055d3a36d247434be4dc253a32a6df27532446981982644f531d2dba587927139278049184b9295ff58d7dc02a031ffac41b67d85444f8a7e9dfc0896617ac355a7b104391c23a953b525858c16f37a1ffe5ab68577b6a1bf128bff4219feaa2427d27195e45251da891551ad715b0aaa3e361f32e6feafa403baa729534a840c2ad7aab5a4d8271d7b05e42a50091bcb90a937e47607395755a85c6b3f4be735f1f29a08c2b4e87c86f2dffbd47dec4c5013531df9cbf6400d1658c1445709af31a3b6434460704eb85e75933b5f82d16736836d78583dc9e38bbd676ca8031a4978bcbc2aff2903d5b3882b96d508183fdccdca16853728cdbc29594067fa826a2a719c64e7bcae0388ecaed8ad1eec5fb53c5609fb931acec733d055961dcdc6e74982d9c52682dbc8b8fd13e525d9e004190b30025ccd04001736cd6a60cb010bdaa6502efe652973a857b70ea0ca1659bff3a02dd23ef8b334d435afa5d4ba60a7723c73af8699159d1f803a9328963e93c53d8dd0d95fa0b56bd40fb5a799f55c566b4102f5a5200bccb23706ed52f4eb25974614901c6862f72e6d055cbe8b370e9af48b861717092a831672b6ac2a5b10f04f62c7baa10e622f8f936c6e90fea3d05ee41e0596704375b41e56563e2e7c150d07ae99e71b1f1eabddf82a3c079dec6a83641eb59463b8891b336d841d6fbdb24b0614c426a2d74675a25a34f902d5d629111d31ad7905a87ee4690ea5a7d900160003b1b8493a96b8e4c65c75bd145d5b937afdbd98e952a9c5dc06e71be20439c00d3380294226b878850b8e780cecb2f023a959677a985c5cefc19c6c40603f2b19f756097a1e5f06adb9c6e467e4ec1ff14c565f423814e82923e24f988178e16974cb24b20173cab8ef56df57d37d29b12bb365add3bbf76e178a90a5f5bfa0f1bdc67d37858cae9e572df7493099c9c5a1e479ea987cf3b77500bec54ca39e12065923292d4a9a992db04f735219fbdd1c4e7fcd3a39d1a27dc3e5a28002e7c8acbfd39e09c0493e00f3d3443c2a82a47e116b183a776ea152107da525c1d90c6b10c3bfafcf0d25f78cd014a62ed1f8f4cffb10b392d5c5bd52e2cedc26262765f2f1c01f57b0982f51fa08595ece6e7954f3a8bd68202b49b9ee0542274f1f28552a30ec7cf33e98b3021b1b080f83855f270e5a4ef85542c594fd340570ac5cf2a9cf652ac677615df1540d1e32b406a63eb6990abebbda0fc0d00affaae7352cabe56005dbcf62a6cc14cf0454aa1261df09e7eb63ced1ea96e1b4908139d86280d00e9eccf338bddacfa46ae9249a058d7be85f93085e4ace251b6f828cfa862a29807d27546ef74d3274c34cb3af25e96dbc45e0d93ce2fdcd442b699c9278228f72e1c3c6fed43f26b585b817d469720a94e7133e19268b1968dc36eb07653fd81d9735f9e860bb6220abd8e0158593ea22666b2771188d1f876de9730766ff8ab42ff166b4613341a2ea2bbca7b978a5de75adfeb69b66f70ff7e8b5899873af86b5925c22e7a65888b63604b39c1da34c1fda874c0870c456112cd3aa38267d73fca92d4e55ab7b165512b249c608424e5993c52d0936f16a1d11f47c5fe0c56f7dc10b2197142e3b9e7aa8a4ce160e9f25d1e2b68e98d04e8f01883a4ba3f5c250606f5d49e773a4a4c42a934fdd293c5b7e8e9fa50e4b0ecf84e08a938f9bdaeefd5cdf32a2a3113b60ded349c8523e68a65b46ae8fceab663cb18ed3e7fad1870ec0201c4ac13a7dec954ff825f64b7a4feb419f7a24e6567765de41a1079743757a5c107fbbb32291e8df815fd845014ebb0a9735f815cebdef4938bec124cd0f98e7c08bef39734af5c1872429b485c26f3a9a03b3549aa2c87c7b47727627a3aee299efa31192ac56c6f4a0ae16f556e47c908ccc1a61b2a115774bcd625945d2042c2d26f3381a1193a558ea0059c25680311477914c8c78b53b86279a0ee1b32717018040287b9b496ff89e3d9fa91ac51f9c66458abd930dcefef27b92547aa5c899a3e85e0296e75149fe44caa5b324e2372b792541112d3d1f4243f2d2dfec80f91b5931738b86b94a18a689aad76ca002ada2cc12960b8f3f28581a3808f212b34ed300105f235dddcfd63555d0bac6fdff51cba7b4f7c0c82485086d78a92c5f1e8fcf8b117b5bbd89573a4bd3b52a358b2b35af9c6ef9aae0457c65ada247c9bacb62826d1522967b0705963c7bd58dc00aa31fdd7df416a70b885cc13369c0b9390ca27731ee85dc698955bcd57da3488f488da3cbf6ccce454cef3f452802bd77f341c836b9516e33dd70b6ea913ba494dcbb117883300d09f1b076b7b382c751ccf924322de1649d47fda84e9e0e117828ddf523cd0f8f53cffbcbf26b78251c8b8f613f1b723b125619a073268cffb51531bccf0ddecdfaedf7f408d05d5d709be79ad7358f5d9bd7c7ffd9138253286b25efdb678eb9967784dc6e80de4e4c1d64b754118dde4e39fcfe879af301dde4984a9ac753a0103694a31aa23aa29425e64af4d4e9f4800396fd2da7775dee14a005b4faf7987854972b0667dd46c69c1482e6375bd948ebc7bc4c22167510f8240130fd2d77f215c5c"}) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) r4 = socket(0xa, 0x2, 0x3a) capget$auto(&(0x7f0000000080)={0x10000}, &(0x7f0000001180)={0x6, 0xaa, 0x8}) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d00"}, 0x66) read$auto(r3, 0x0, 0xb4d3) 3.780047487s ago: executing program 2 (id=186): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xd, 0x9, 0x803, 0x22, 0x6, 0xb, 0x3, 0x3, 0x8000003, 0x409, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x47, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffbfc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x920]}, 0x7, 0x281) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0x0) setsockopt$auto(r2, 0x29, 0xb, 0x0, 0xca6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r4, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/@#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=I+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x2, 0x1, 0x0) setsockopt$auto(r6, 0x6, 0x1f, 0x0, 0x3d) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x23a8c70effffffe) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000140)=@raw_tracepoint={0x807, r0, 0x0, 0x2}, 0x81) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r1, 0x0, 0x594c, 0x7) 3.282758328s ago: executing program 2 (id=187): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000400)="67e5c65f4c4305f8add19e1d01ddea69b6440843b6e6688a2b9f68a189ed88902b4505a00f86ffc958626780f47f21189c540a61cfa8ac47a6661b63", 0x3c) (fail_nth: 2) 3.149533695s ago: executing program 1 (id=188): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty29\x00', 0x400cc1, 0x0) ioctl$auto(r2, 0x5453, r2) getrandom$auto(0x0, 0x8, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) unshare$auto(0x20000) write$auto(r3, 0x0, 0x7ff) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) mmap$auto(0x1, 0x858d, 0x3ff, 0x200000000eb1, r0, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) sendfile$auto(r3, r0, &(0x7f00000001c0)=0x3ff, 0x10001) r4 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX], 0xf8}}, 0x10004010) 2.028351855s ago: executing program 3 (id=189): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000500"/16, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd95, 0x2}, 0x0, 0x7ffffffff000, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 1.961812095s ago: executing program 1 (id=190): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub1/status\x00', 0x200, 0x0) pread64$auto(r0, 0x0, 0x10003, 0x82f) socket(0x2, 0x5, 0x0) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$auto(r1, 0x0, 0x5781) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x8000003) mmap$auto(0x0, 0xe2, 0xdf, 0xeb1, 0xf6f6, 0x8000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = io_uring_setup$auto(0x3ff, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9b9373ab40aa0000000000002f0000e0bfa40800", 0x20) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x10001, 0x0) read$auto(r3, 0x0, 0x4) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180a02, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20010, 0x4000000000e3, 0x10, 0xffffffffffffffff, 0x8000) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000640)='/dev/binderfs/binder0\x00', 0x22800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001180)='/proc/irq/25/effective_affinity_list\x00', 0xd00, 0x0) ioctl$auto_BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 1.920682979s ago: executing program 2 (id=191): arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x5) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto(r1, 0x0, 0xffffff7f) madvise$auto(0x7f, 0x7fff, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) prctl$auto(0x801, 0x1, 0x0, 0x3, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x9, &(0x7f0000000100)={0x694f, 0x4, 0x2, 0x80, 0xbf, 0x1, r2, [0x81, 0x1, 0x1], {0xffffffff, 0xb627, 0x1, 0x8, 0x0, 0x1, 0x1, 0xfffffff7, 0xa}, {0x8, 0x9f33, 0xb27, 0x3, 0x9, 0x9, 0xabd, 0x3, 0x9}}) setsockopt$auto(0x7, 0x114, 0x3, 0xffffffffffffffff, 0xa0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1.918921531s ago: executing program 0 (id=192): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x7, &(0x7f0000000000)="693cd318784111fca8ed3abe1fe83c0ec512c6a1a758881e7ace2c985ae51cb5543a0e7a4c8330f83888b34a431d57224ade12f18b24ad5ebed95e4f63b6f1f39c8705d6a98c02b0f22c3f720f96241198a5d54f6aa33a8e07cc057f04") mmap$auto(0x0, 0x200007, 0x4000000000e3, 0x40eb2, r0, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008014}, 0x20008000) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach={r2}, 0x40) r3 = open(0x0, 0x22240, 0x155) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x6, r3, 0x7, 0xcf) read$auto_proc_pid_set_comm_operations_base(r4, &(0x7f0000000180), 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) semctl$auto(0x1ff, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) recvmmsg$auto(0x3, 0x0, 0x6, 0x0, 0x0) timerfd_settime$auto(r3, 0xffff6462, &(0x7f0000000080)={{0x3, 0x3}, {0x0, 0x9}}, &(0x7f00000000c0)={{0x6, 0x4}, {0x400, 0x5}}) prctl$auto(0x2f, 0x6, 0x0, 0x0, 0x0) unshare$auto(0x40000080) 1.729420758s ago: executing program 1 (id=193): r0 = socket(0x18, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x80047437, 0x0) 1.017536288s ago: executing program 1 (id=194): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xe4}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x184b01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x0, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x2f43, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') socket(0xa, 0x2, 0x3a) socketpair$auto(0x1e, 0x5, 0x805, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/can/rcvlist_sff\x00', 0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x280, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) close_range$auto(r1, r1, 0xf) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) msgctl$auto_IPC_RMID(0x37, 0x0, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x100, 0x5, 0x8, 0xffff}, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1, 0x7, 0x6, 0x2, 0xdff, 0x15f, 0x6, 0xd, 0x7, @raw=0x1, @inferred=0xffffffffffffffff}) 962.568748ms ago: executing program 2 (id=195): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x141343, 0x4) socket(0x2, 0x3, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x3) socket(0x18, 0x2, 0x1ff) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x400800}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r5, 0x0, 0x880) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) sendmsg$auto_NFC_CMD_START_POLL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) 279.178632ms ago: executing program 0 (id=196): r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590820806"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 122.853446ms ago: executing program 2 (id=197): socket(0x2, 0x1, 0x106) socket(0xf, 0x80000, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x42400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/125, 0x7d) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x40006]}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 0s ago: executing program 0 (id=198): mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xffffffffffffffff, 0x28000) socket(0x2, 0x3, 0x100) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0xa00, 0x0) pread64$auto(r0, 0x0, 0xc404, 0x1000) (fail_nth: 2) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x400d, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) kernel console output (not intermixed with test programs): [ 97.047672][ T1208] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 101.748829][ T5819] cgroup: Unknown subsys name 'net' [ 101.859800][ T5819] cgroup: Unknown subsys name 'cpuset' [ 101.869773][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.819717][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.168879][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.178016][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.186704][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.194857][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.203867][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.212128][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.234335][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.255215][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.257982][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.263571][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.269706][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.277938][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.292095][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.293065][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.300081][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.314483][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.322577][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.331965][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.339334][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.347768][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.943970][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 107.059245][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 107.115058][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 107.249633][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 107.319383][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.326670][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.335597][ T5836] bridge_slave_0: entered allmulticast mode [ 107.343154][ T5836] bridge_slave_0: entered promiscuous mode [ 107.405551][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.412744][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.420670][ T5836] bridge_slave_1: entered allmulticast mode [ 107.428473][ T5836] bridge_slave_1: entered promiscuous mode [ 107.449729][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.457594][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.464782][ T5835] bridge_slave_0: entered allmulticast mode [ 107.472981][ T5835] bridge_slave_0: entered promiscuous mode [ 107.481508][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.488772][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.496456][ T5835] bridge_slave_1: entered allmulticast mode [ 107.503850][ T5835] bridge_slave_1: entered promiscuous mode [ 107.511337][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.519145][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.526745][ T5834] bridge_slave_0: entered allmulticast mode [ 107.534050][ T5834] bridge_slave_0: entered promiscuous mode [ 107.601867][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.609194][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.617664][ T5834] bridge_slave_1: entered allmulticast mode [ 107.625170][ T5834] bridge_slave_1: entered promiscuous mode [ 107.683085][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.727220][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.740359][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.767419][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.779984][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.846665][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.853842][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.861243][ T5837] bridge_slave_0: entered allmulticast mode [ 107.868730][ T5837] bridge_slave_0: entered promiscuous mode [ 107.879092][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.886396][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.893618][ T5837] bridge_slave_1: entered allmulticast mode [ 107.902028][ T5837] bridge_slave_1: entered promiscuous mode [ 107.911137][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.940497][ T5836] team0: Port device team_slave_0 added [ 107.949824][ T5835] team0: Port device team_slave_0 added [ 107.996158][ T5836] team0: Port device team_slave_1 added [ 108.003905][ T5835] team0: Port device team_slave_1 added [ 108.029902][ T5834] team0: Port device team_slave_0 added [ 108.040131][ T5834] team0: Port device team_slave_1 added [ 108.076987][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.090234][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.178650][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.185918][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.212166][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.226608][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.233594][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.260670][ T5839] Bluetooth: hci2: command tx timeout [ 108.266952][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.296405][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.303424][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.329716][ T5839] Bluetooth: hci0: command tx timeout [ 108.330211][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.349487][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.356624][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.383332][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.395600][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.402587][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.428659][ T5839] Bluetooth: hci1: command tx timeout [ 108.429013][ T5839] Bluetooth: hci3: command tx timeout [ 108.440331][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.452284][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.459312][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.485930][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.500385][ T5837] team0: Port device team_slave_0 added [ 108.533609][ T5837] team0: Port device team_slave_1 added [ 108.590000][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.597108][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.624129][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.681230][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.688359][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.715113][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.732661][ T5834] hsr_slave_0: entered promiscuous mode [ 108.739590][ T5834] hsr_slave_1: entered promiscuous mode [ 108.790851][ T5836] hsr_slave_0: entered promiscuous mode [ 108.799813][ T5836] hsr_slave_1: entered promiscuous mode [ 108.806445][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.814180][ T5836] Cannot create hsr debugfs directory [ 108.844288][ T5835] hsr_slave_0: entered promiscuous mode [ 108.850865][ T5835] hsr_slave_1: entered promiscuous mode [ 108.857240][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.864824][ T5835] Cannot create hsr debugfs directory [ 108.968103][ T5837] hsr_slave_0: entered promiscuous mode [ 108.974534][ T5837] hsr_slave_1: entered promiscuous mode [ 108.981257][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.989775][ T5837] Cannot create hsr debugfs directory [ 109.485236][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.503876][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.516854][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.543711][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.597195][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.614109][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.632766][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.664662][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.741549][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.757653][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.781563][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.816381][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.916636][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.941231][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.971878][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.007496][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.100738][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.144619][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.186999][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.203349][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.234916][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.242401][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.279314][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.286507][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.312552][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.325261][ T55] Bluetooth: hci2: command tx timeout [ 110.344723][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.352048][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.362737][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.370491][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.392958][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.406598][ T55] Bluetooth: hci0: command tx timeout [ 110.429360][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.436610][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.448295][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.455585][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.485652][ T55] Bluetooth: hci3: command tx timeout [ 110.491300][ T55] Bluetooth: hci1: command tx timeout [ 110.618379][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.693731][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.759306][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.766578][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.812493][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.819751][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.283891][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.342313][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.358391][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.484003][ T5834] veth0_vlan: entered promiscuous mode [ 111.529131][ T5834] veth1_vlan: entered promiscuous mode [ 111.538044][ T5835] veth0_vlan: entered promiscuous mode [ 111.561906][ T5837] veth0_vlan: entered promiscuous mode [ 111.582158][ T5835] veth1_vlan: entered promiscuous mode [ 111.596273][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.613788][ T5837] veth1_vlan: entered promiscuous mode [ 111.686828][ T5834] veth0_macvtap: entered promiscuous mode [ 111.703010][ T5834] veth1_macvtap: entered promiscuous mode [ 111.718539][ T5836] veth0_vlan: entered promiscuous mode [ 111.754585][ T5837] veth0_macvtap: entered promiscuous mode [ 111.774320][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.787825][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.814099][ T5837] veth1_macvtap: entered promiscuous mode [ 111.824056][ T5836] veth1_vlan: entered promiscuous mode [ 111.835194][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.844058][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.853656][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.862732][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.887608][ T5835] veth0_macvtap: entered promiscuous mode [ 111.897156][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.919230][ T5835] veth1_macvtap: entered promiscuous mode [ 111.939012][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.971612][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.982211][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.991528][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.000709][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.054802][ T5836] veth0_macvtap: entered promiscuous mode [ 112.114334][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.142483][ T5836] veth1_macvtap: entered promiscuous mode [ 112.183014][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.199535][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.207833][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.239344][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.252679][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.261698][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.270738][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.308320][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.331564][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.358458][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.370993][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.372981][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.407687][ T55] Bluetooth: hci2: command tx timeout [ 112.435042][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.451151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.459835][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.486459][ T55] Bluetooth: hci0: command tx timeout [ 112.527016][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.539111][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.564087][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.573270][ T55] Bluetooth: hci1: command tx timeout [ 112.578779][ T5839] Bluetooth: hci3: command tx timeout [ 112.582636][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.594459][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.744605][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.788278][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.852728][ T5896] random: crng reseeded on system resumption [ 112.911243][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.929867][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.966862][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.993935][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.123737][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.133252][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.268554][ T5899] Invalid ELF header magic: != ELF [ 114.052576][ T5918] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 114.065541][ T5918] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 114.074124][ T5918] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 114.088216][ T5918] page_type: f5(slab) [ 114.116322][ T5918] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 114.151789][ T5918] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 114.193158][ T5918] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000 [ 114.205476][ T5918] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 114.214463][ T5918] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 114.224483][ T5918] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 114.255547][ T5918] page dumped because: unmovable page [ 114.261015][ T5918] page_owner tracks the page as allocated [ 114.355704][ T5925] could not allocate digest TFM handle binfmt_misc [ 114.397423][ T5918] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5675, tgid 5675 (dhcpcd-run-hook), ts 83308017691, free_ts 72412541832 [ 114.452794][ T5918] post_alloc_hook+0x181/0x1b0 [ 114.486234][ T55] Bluetooth: hci2: command tx timeout [ 114.568647][ T55] Bluetooth: hci0: command tx timeout [ 114.595935][ T5918] get_page_from_freelist+0x135c/0x3920 [ 114.601614][ T5918] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 114.608411][ T5918] alloc_pages_mpol+0x1fb/0x550 [ 114.613376][ T5918] new_slab+0x244/0x340 [ 114.617662][ T5918] ___slab_alloc+0xd9c/0x1940 [ 114.622400][ T5918] __slab_alloc.constprop.0+0x56/0xb0 [ 114.628722][ T5918] __kmalloc_noprof+0x2f2/0x510 [ 114.633640][ T5918] tomoyo_realpath_from_path+0xc2/0x6e0 [ 114.642362][ T5918] tomoyo_check_open_permission+0x2ab/0x3c0 [ 114.649041][ T55] Bluetooth: hci1: command tx timeout [ 114.654490][ T55] Bluetooth: hci3: command tx timeout [ 114.661821][ T5918] tomoyo_file_open+0x6b/0x90 [ 114.666963][ T5918] security_file_open+0x84/0x1e0 [ 114.671999][ T5918] do_dentry_open+0x596/0x1c10 [ 114.676917][ T5918] vfs_open+0x82/0x3f0 [ 114.681056][ T5918] path_openat+0x1e5e/0x2d40 [ 114.686056][ T5918] do_filp_open+0x20b/0x470 [ 114.690661][ T5918] page last free pid 5601 tgid 5601 stack trace: [ 114.697105][ T5918] __free_frozen_pages+0x69d/0xff0 [ 114.702294][ T5918] __put_partials+0x16d/0x1c0 [ 114.707500][ T5918] qlist_free_all+0x4e/0x120 [ 114.712204][ T5918] kasan_quarantine_reduce+0x195/0x1e0 [ 114.717970][ T5918] __kasan_slab_alloc+0x69/0x90 [ 114.722911][ T5918] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 114.729057][ T5918] getname_flags.part.0+0x4c/0x550 [ 114.734288][ T5918] getname_flags+0x93/0xf0 [ 114.740484][ T5918] do_sys_openat2+0xb8/0x1d0 [ 114.745584][ T5918] __x64_sys_openat+0x174/0x210 [ 114.750518][ T5918] do_syscall_64+0xcd/0x230 [ 114.755170][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.506542][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.699918][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.036708][ T5950] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 116.092917][ T5950] Zero length message leads to an empty skb [ 116.446427][ T5954] binder: 5953:5954 unknown command 0 [ 116.460009][ T5954] binder: 5953:5954 ioctl c0306201 0 returned -22 [ 117.770631][ T5976] FAULT_INJECTION: forcing a failure. [ 117.770631][ T5976] name failslab, interval 1, probability 0, space 0, times 1 [ 117.800766][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.3.18 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 117.800809][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.800832][ T5976] Call Trace: [ 117.800842][ T5976] [ 117.800857][ T5976] dump_stack_lvl+0x16c/0x1f0 [ 117.800916][ T5976] should_fail_ex+0x512/0x640 [ 117.800966][ T5976] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 117.801009][ T5976] should_failslab+0xc2/0x120 [ 117.801052][ T5976] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 117.801087][ T5976] ? __proc_create+0xc3/0x8c0 [ 117.801122][ T5976] ? __proc_create+0x2ce/0x8c0 [ 117.801160][ T5976] __proc_create+0x2ce/0x8c0 [ 117.801196][ T5976] ? __pfx___proc_create+0x10/0x10 [ 117.801236][ T5976] ? _raw_write_unlock+0x28/0x50 [ 117.801280][ T5976] ? proc_register+0x314/0x5f0 [ 117.801319][ T5976] proc_create_reg+0x7d/0x180 [ 117.801365][ T5976] proc_create_seq_private+0x8e/0x1d0 [ 117.801405][ T5976] ? __pfx_proc_create_seq_private+0x10/0x10 [ 117.801440][ T5976] ? __pfx_nl_fib_input+0x10/0x10 [ 117.801489][ T5976] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 117.801533][ T5976] ip_rt_do_proc_init+0xac/0x1b0 [ 117.801575][ T5976] ops_init+0x1df/0x5f0 [ 117.801624][ T5976] setup_net+0x21e/0x850 [ 117.801673][ T5976] ? __pfx_setup_net+0x10/0x10 [ 117.801712][ T5976] ? lockdep_init_map_type+0x5c/0x280 [ 117.801758][ T5976] ? __pfx_down_read_killable+0x10/0x10 [ 117.801796][ T5976] ? debug_mutex_init+0x37/0x70 [ 117.801832][ T5976] copy_net_ns+0x2a6/0x5f0 [ 117.801901][ T5976] create_new_namespaces+0x3ea/0xad0 [ 117.801950][ T5976] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 117.801992][ T5976] ksys_unshare+0x45b/0xa40 [ 117.802037][ T5976] ? __pfx_ksys_unshare+0x10/0x10 [ 117.802098][ T5976] __x64_sys_unshare+0x31/0x40 [ 117.802144][ T5976] do_syscall_64+0xcd/0x230 [ 117.802194][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.802222][ T5976] RIP: 0033:0x7f58c1b8e969 [ 117.802245][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.802279][ T5976] RSP: 002b:00007f58c2ab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 117.802304][ T5976] RAX: ffffffffffffffda RBX: 00007f58c1db6080 RCX: 00007f58c1b8e969 [ 117.802322][ T5976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 117.802345][ T5976] RBP: 00007f58c1c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 117.802362][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.802378][ T5976] R13: 0000000000000000 R14: 00007f58c1db6080 R15: 00007fff0519da08 [ 117.802413][ T5976] [ 118.216136][ T5962] bond0: option all_slaves_active: invalid value () [ 118.478014][ T5962] bond0: option all_slaves_active: invalid value () [ 119.069143][ T5990] random: crng reseeded on system resumption [ 119.403391][ T5991] Invalid ELF header magic: != ELF [ 120.165857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 120.697339][ T6012] netlink: 326 bytes leftover after parsing attributes in process `syz.2.26'. [ 120.781325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.016031][ T6016] FAULT_INJECTION: forcing a failure. [ 121.016031][ T6016] name failslab, interval 1, probability 0, space 0, times 0 [ 121.071337][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.1.27 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 121.071385][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.071404][ T6016] Call Trace: [ 121.071415][ T6016] [ 121.071427][ T6016] dump_stack_lvl+0x16c/0x1f0 [ 121.071484][ T6016] should_fail_ex+0x512/0x640 [ 121.071533][ T6016] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 121.071577][ T6016] should_failslab+0xc2/0x120 [ 121.071621][ T6016] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 121.071660][ T6016] ? __proc_create+0xc3/0x8c0 [ 121.071698][ T6016] ? __proc_create+0x2ce/0x8c0 [ 121.071744][ T6016] __proc_create+0x2ce/0x8c0 [ 121.071794][ T6016] ? __pfx___proc_create+0x10/0x10 [ 121.071831][ T6016] ? proc_register+0x30f/0x5f0 [ 121.071877][ T6016] ? _raw_write_unlock+0x28/0x50 [ 121.071931][ T6016] proc_create_reg+0x7d/0x180 [ 121.071975][ T6016] proc_create_net_data+0x8e/0x1b0 [ 121.072018][ T6016] ? __pfx_proc_create_net_data+0x10/0x10 [ 121.072061][ T6016] ? __pfx___netlink_kernel_create+0x10/0x10 [ 121.072117][ T6016] fib_proc_init+0xf4/0x1b0 [ 121.072156][ T6016] fib_net_init+0x2af/0x3f0 [ 121.072196][ T6016] ? __pfx___register_sysctl_table+0x10/0x10 [ 121.072238][ T6016] ? __pfx_fib_net_init+0x10/0x10 [ 121.072280][ T6016] ? lockdep_init_map_type+0x5c/0x280 [ 121.072328][ T6016] ? __pfx_nl_fib_input+0x10/0x10 [ 121.072376][ T6016] ? devinet_init_net+0x5c2/0x910 [ 121.072427][ T6016] ? __pfx_fib_net_init+0x10/0x10 [ 121.072496][ T6016] ops_init+0x1df/0x5f0 [ 121.072546][ T6016] setup_net+0x21e/0x850 [ 121.072595][ T6016] ? __pfx_setup_net+0x10/0x10 [ 121.072638][ T6016] ? lockdep_init_map_type+0x5c/0x280 [ 121.072684][ T6016] ? __pfx_down_read_killable+0x10/0x10 [ 121.072724][ T6016] ? debug_mutex_init+0x37/0x70 [ 121.072761][ T6016] copy_net_ns+0x2a6/0x5f0 [ 121.072820][ T6016] create_new_namespaces+0x3ea/0xad0 [ 121.072872][ T6016] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 121.072917][ T6016] ksys_unshare+0x45b/0xa40 [ 121.072966][ T6016] ? __pfx_ksys_unshare+0x10/0x10 [ 121.073010][ T6016] ? xfd_validate_state+0x5d/0x180 [ 121.073045][ T6016] ? rcu_is_watching+0x12/0xc0 [ 121.073088][ T6016] __x64_sys_unshare+0x31/0x40 [ 121.073135][ T6016] do_syscall_64+0xcd/0x230 [ 121.073189][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.073223][ T6016] RIP: 0033:0x7f5598f8e969 [ 121.073250][ T6016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.073281][ T6016] RSP: 002b:00007f5599dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 121.073312][ T6016] RAX: ffffffffffffffda RBX: 00007f55991b6080 RCX: 00007f5598f8e969 [ 121.073334][ T6016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 121.073353][ T6016] RBP: 00007f5599010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 121.073373][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.073391][ T6016] R13: 0000000000000000 R14: 00007f55991b6080 R15: 00007ffcf5b11798 [ 121.073432][ T6016] [ 121.387328][ T6022] random: crng reseeded on system resumption [ 121.680536][ T6024] Invalid ELF header magic: != ELF [ 122.490518][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 122.515312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.525911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 122.623392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.246733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.405543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.575859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.618930][ T6061] random: crng reseeded on system resumption [ 123.950408][ T6062] Invalid ELF header magic: != ELF [ 124.446725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.625395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.705822][ T6084] ovs_ÿþ: entered promiscuous mode [ 124.910551][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.43'. [ 125.090612][ T6087] team0: Port device team_slave_0 removed [ 125.128231][ T6092] binder: 6091:6092 unknown command 0 [ 125.133811][ T6092] binder: 6091:6092 ioctl c0306201 0 returned -22 [ 125.785204][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 126.385431][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'. [ 126.474433][ T6121] FAULT_INJECTION: forcing a failure. [ 126.474433][ T6121] name failslab, interval 1, probability 0, space 0, times 0 [ 126.499511][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.0.51 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 126.499557][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.499575][ T6121] Call Trace: [ 126.499586][ T6121] [ 126.499597][ T6121] dump_stack_lvl+0x16c/0x1f0 [ 126.499649][ T6121] should_fail_ex+0x512/0x640 [ 126.499696][ T6121] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 126.499738][ T6121] should_failslab+0xc2/0x120 [ 126.499778][ T6121] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 126.499814][ T6121] ? __alloc_skb+0x2b2/0x380 [ 126.499858][ T6121] __alloc_skb+0x2b2/0x380 [ 126.499893][ T6121] ? __pfx___alloc_skb+0x10/0x10 [ 126.499929][ T6121] ? genl_rcv_msg+0x4bb/0x800 [ 126.499988][ T6121] netlink_ack+0x15d/0xb80 [ 126.500029][ T6121] ? __lock_acquire+0xaa4/0x1ba0 [ 126.500079][ T6121] netlink_rcv_skb+0x347/0x440 [ 126.500120][ T6121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.500168][ T6121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.500230][ T6121] ? __pfx_down_read+0x10/0x10 [ 126.500262][ T6121] ? netlink_deliver_tap+0x1ae/0xd30 [ 126.500319][ T6121] genl_rcv+0x28/0x40 [ 126.500360][ T6121] netlink_unicast+0x53a/0x7f0 [ 126.500406][ T6121] ? __pfx_netlink_unicast+0x10/0x10 [ 126.500445][ T6121] ? __lock_acquire+0xaa4/0x1ba0 [ 126.500497][ T6121] netlink_sendmsg+0x8d1/0xdd0 [ 126.500547][ T6121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.500605][ T6121] ____sys_sendmsg+0xa98/0xc70 [ 126.500655][ T6121] ? copy_msghdr_from_user+0x10a/0x160 [ 126.500694][ T6121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.500750][ T6121] ? try_to_wake_up+0xa2f/0x1680 [ 126.500787][ T6121] ___sys_sendmsg+0x134/0x1d0 [ 126.500826][ T6121] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.500916][ T6121] __sys_sendmsg+0x16d/0x220 [ 126.500955][ T6121] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.500993][ T6121] ? __x64_sys_futex+0x1e0/0x4c0 [ 126.501039][ T6121] ? rcu_is_watching+0x12/0xc0 [ 126.501107][ T6121] do_syscall_64+0xcd/0x230 [ 126.501159][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.501190][ T6121] RIP: 0033:0x7f5df138e969 [ 126.501216][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.501246][ T6121] RSP: 002b:00007f5def1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.501282][ T6121] RAX: ffffffffffffffda RBX: 00007f5df15b5fa0 RCX: 00007f5df138e969 [ 126.501303][ T6121] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 126.501322][ T6121] RBP: 00007f5df1410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 126.501340][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.501359][ T6121] R13: 0000000000000000 R14: 00007f5df15b5fa0 R15: 00007ffd6bac0998 [ 126.501398][ T6121] [ 126.874671][ T6117] team0: Port device team_slave_0 removed [ 126.893397][ T6126] random: crng reseeded on system resumption [ 127.160742][ T6128] Invalid ELF header magic: != ELF [ 127.296501][ T6130] ima: policy update failed [ 127.312270][ T30] audit: type=1802 audit(6042400574.368:2): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.52" res=0 errno=0 [ 127.646081][ T6138] binder: 6137:6138 unknown command 0 [ 127.666715][ T6138] binder: 6137:6138 ioctl c0306201 0 returned -22 [ 127.825861][ T6146] mmap: syz.2.57 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.228915][ T6167] random: crng reseeded on system resumption [ 129.437819][ T6169] Invalid ELF header magic: != ELF [ 131.392233][ T6198] binder: 6197:6198 unknown command 0 [ 131.408403][ T6198] binder: 6197:6198 ioctl c0306201 0 returned -22 [ 131.679236][ T6205] random: crng reseeded on system resumption [ 131.887014][ T6206] Invalid ELF header magic: != ELF [ 132.442239][ T6214] random: crng reseeded on system resumption [ 132.681360][ T6216] Invalid ELF header magic: != ELF [ 134.890512][ T6240] FAULT_INJECTION: forcing a failure. [ 134.890512][ T6240] name failslab, interval 1, probability 0, space 0, times 0 [ 134.935024][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.3.74 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 134.935074][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.935094][ T6240] Call Trace: [ 134.935106][ T6240] [ 134.935119][ T6240] dump_stack_lvl+0x16c/0x1f0 [ 134.935178][ T6240] should_fail_ex+0x512/0x640 [ 134.935229][ T6240] ? fs_reclaim_acquire+0xae/0x150 [ 134.935284][ T6240] ? tomoyo_encode2+0x100/0x3e0 [ 134.935330][ T6240] should_failslab+0xc2/0x120 [ 134.935373][ T6240] __kmalloc_noprof+0xd2/0x510 [ 134.935416][ T6240] ? d_absolute_path+0x136/0x1a0 [ 134.935465][ T6240] tomoyo_encode2+0x100/0x3e0 [ 134.935522][ T6240] tomoyo_encode+0x29/0x50 [ 134.935569][ T6240] tomoyo_realpath_from_path+0x18f/0x6e0 [ 134.935635][ T6240] tomoyo_path_number_perm+0x245/0x580 [ 134.935677][ T6240] ? tomoyo_path_number_perm+0x237/0x580 [ 134.935731][ T6240] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.935817][ T6240] ? find_held_lock+0x2b/0x80 [ 134.935849][ T6240] ? hook_file_ioctl_common+0x145/0x410 [ 134.935900][ T6240] ? __fget_files+0x20e/0x3c0 [ 134.935946][ T6240] security_file_ioctl+0x9b/0x240 [ 134.935992][ T6240] __x64_sys_ioctl+0xb7/0x200 [ 134.936044][ T6240] do_syscall_64+0xcd/0x230 [ 134.936098][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.936132][ T6240] RIP: 0033:0x7f58c1b8e969 [ 134.936159][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.936191][ T6240] RSP: 002b:00007f58c2a91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.936223][ T6240] RAX: ffffffffffffffda RBX: 00007f58c1db6160 RCX: 00007f58c1b8e969 [ 134.936244][ T6240] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 134.936264][ T6240] RBP: 00007f58c1c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 134.936284][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.936303][ T6240] R13: 0000000000000000 R14: 00007f58c1db6160 R15: 00007fff0519da08 [ 134.936347][ T6240] [ 134.936408][ T6240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.390074][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 138.015726][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.022448][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.194615][ T6317] random: crng reseeded on system resumption [ 139.465943][ T6320] Invalid ELF header magic: != ELF [ 141.164623][ T55] Bluetooth: hci3: unexpected subevent 0x01 length: 122 > 18 [ 141.320558][ T6347] binder: 6346:6347 unknown command 0 [ 141.334189][ T6347] binder: 6346:6347 ioctl c0306201 0 returned -22 [ 142.165347][ T6358] ======================================================= [ 142.165347][ T6358] WARNING: The mand mount option has been deprecated and [ 142.165347][ T6358] and is ignored by this kernel. Remove the mand [ 142.165347][ T6358] option from the mount to silence this warning. [ 142.165347][ T6358] ======================================================= [ 142.200258][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.792154][ T6372] binder: 6371:6372 unknown command 0 [ 142.827411][ T6372] binder: 6371:6372 ioctl c0306201 0 returned -22 [ 142.844804][ T6376] random: crng reseeded on system resumption [ 143.118302][ T6383] netlink: 'syz.0.110': attribute type 11 has an invalid length. [ 143.275846][ T6386] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 143.331592][ T6378] Invalid ELF header magic: != ELF [ 144.070558][ T6398] binder: 6397:6398 unknown command 0 [ 144.085009][ T6398] binder: 6397:6398 ioctl c0306201 0 returned -22 [ 147.747465][ T6445] FAULT_INJECTION: forcing a failure. [ 147.747465][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 147.799261][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.1.119 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 147.799315][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.799334][ T6445] Call Trace: [ 147.799344][ T6445] [ 147.799356][ T6445] dump_stack_lvl+0x16c/0x1f0 [ 147.799413][ T6445] should_fail_ex+0x512/0x640 [ 147.799473][ T6445] ? fs_reclaim_acquire+0xae/0x150 [ 147.799535][ T6445] ? tomoyo_encode2+0x100/0x3e0 [ 147.799597][ T6445] should_failslab+0xc2/0x120 [ 147.799647][ T6445] __kmalloc_noprof+0xd2/0x510 [ 147.799695][ T6445] ? d_absolute_path+0x136/0x1a0 [ 147.799752][ T6445] tomoyo_encode2+0x100/0x3e0 [ 147.799814][ T6445] tomoyo_encode+0x29/0x50 [ 147.799861][ T6445] tomoyo_realpath_from_path+0x18f/0x6e0 [ 147.799926][ T6445] tomoyo_path_number_perm+0x245/0x580 [ 147.799969][ T6445] ? tomoyo_path_number_perm+0x237/0x580 [ 147.800018][ T6445] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.800108][ T6445] ? find_held_lock+0x2b/0x80 [ 147.800142][ T6445] ? hook_file_ioctl_common+0x145/0x410 [ 147.800192][ T6445] ? __fget_files+0x20e/0x3c0 [ 147.800230][ T6445] security_file_ioctl+0x9b/0x240 [ 147.800284][ T6445] __x64_sys_ioctl+0xb7/0x200 [ 147.800337][ T6445] do_syscall_64+0xcd/0x230 [ 147.800391][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.800424][ T6445] RIP: 0033:0x7f5598f8e969 [ 147.800451][ T6445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.800483][ T6445] RSP: 002b:00007f5599d8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.800515][ T6445] RAX: ffffffffffffffda RBX: 00007f55991b6240 RCX: 00007f5598f8e969 [ 147.800537][ T6445] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 147.800564][ T6445] RBP: 00007f5599010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 147.800584][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.800603][ T6445] R13: 0000000000000000 R14: 00007f55991b6240 R15: 00007ffcf5b11798 [ 147.800646][ T6445] [ 147.800675][ T6445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.867059][ T6534] binder: 6533:6534 unknown command 0 [ 153.872524][ T6534] binder: 6533:6534 ioctl c0306201 0 returned -22 [ 154.499749][ T6544] FAULT_INJECTION: forcing a failure. [ 154.499749][ T6544] name failslab, interval 1, probability 0, space 0, times 0 [ 154.555898][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.2.144 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 154.555956][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.555976][ T6544] Call Trace: [ 154.555988][ T6544] [ 154.556000][ T6544] dump_stack_lvl+0x16c/0x1f0 [ 154.556057][ T6544] should_fail_ex+0x512/0x640 [ 154.556107][ T6544] ? __kmalloc_noprof+0xbf/0x510 [ 154.556148][ T6544] ? xfrm_hash_alloc+0xd1/0x100 [ 154.556197][ T6544] should_failslab+0xc2/0x120 [ 154.556241][ T6544] __kmalloc_noprof+0xd2/0x510 [ 154.556276][ T6544] ? proc_create_reg+0xe3/0x180 [ 154.556327][ T6544] xfrm_hash_alloc+0xd1/0x100 [ 154.556378][ T6544] xfrm_state_init+0x11e/0x630 [ 154.556437][ T6544] ? __pfx_xfrm_net_init+0x10/0x10 [ 154.556466][ T6544] xfrm_net_init+0x210/0xcc0 [ 154.556505][ T6544] ? __pfx_xfrm_net_init+0x10/0x10 [ 154.556536][ T6544] ops_init+0x1df/0x5f0 [ 154.556586][ T6544] setup_net+0x21e/0x850 [ 154.556634][ T6544] ? __pfx_setup_net+0x10/0x10 [ 154.556675][ T6544] ? lockdep_init_map_type+0x5c/0x280 [ 154.556722][ T6544] ? __pfx_down_read_killable+0x10/0x10 [ 154.556769][ T6544] ? debug_mutex_init+0x37/0x70 [ 154.556806][ T6544] copy_net_ns+0x2a6/0x5f0 [ 154.556858][ T6544] create_new_namespaces+0x3ea/0xad0 [ 154.556908][ T6544] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 154.556959][ T6544] ksys_unshare+0x45b/0xa40 [ 154.557007][ T6544] ? __pfx_ksys_unshare+0x10/0x10 [ 154.557053][ T6544] ? xfd_validate_state+0x5d/0x180 [ 154.557088][ T6544] ? rcu_is_watching+0x12/0xc0 [ 154.557131][ T6544] __x64_sys_unshare+0x31/0x40 [ 154.557175][ T6544] do_syscall_64+0xcd/0x230 [ 154.557231][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.557265][ T6544] RIP: 0033:0x7fb11c58e969 [ 154.557290][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.557322][ T6544] RSP: 002b:00007fb11d369038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.557353][ T6544] RAX: ffffffffffffffda RBX: 00007fb11c7b6080 RCX: 00007fb11c58e969 [ 154.557375][ T6544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 154.557395][ T6544] RBP: 00007fb11c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 154.557414][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.557433][ T6544] R13: 0000000000000000 R14: 00007fb11c7b6080 R15: 00007fffc0c70878 [ 154.557476][ T6544] [ 154.805099][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.010970][ T6565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 156.992124][ T6581] FAULT_INJECTION: forcing a failure. [ 156.992124][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 157.065399][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz.1.155 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 157.065455][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.065475][ T6581] Call Trace: [ 157.065485][ T6581] [ 157.065498][ T6581] dump_stack_lvl+0x16c/0x1f0 [ 157.065557][ T6581] should_fail_ex+0x512/0x640 [ 157.065606][ T6581] ? __kmalloc_noprof+0xbf/0x510 [ 157.065645][ T6581] ? xfrm_hash_alloc+0xd1/0x100 [ 157.065696][ T6581] should_failslab+0xc2/0x120 [ 157.065737][ T6581] __kmalloc_noprof+0xd2/0x510 [ 157.065771][ T6581] ? proc_create_reg+0xe3/0x180 [ 157.065824][ T6581] xfrm_hash_alloc+0xd1/0x100 [ 157.065877][ T6581] xfrm_state_init+0x11e/0x630 [ 157.065934][ T6581] ? __pfx_xfrm_net_init+0x10/0x10 [ 157.065964][ T6581] xfrm_net_init+0x210/0xcc0 [ 157.066002][ T6581] ? __pfx_xfrm_net_init+0x10/0x10 [ 157.066032][ T6581] ops_init+0x1df/0x5f0 [ 157.066080][ T6581] setup_net+0x21e/0x850 [ 157.066128][ T6581] ? __pfx_setup_net+0x10/0x10 [ 157.066174][ T6581] ? lockdep_init_map_type+0x5c/0x280 [ 157.066223][ T6581] ? __pfx_down_read_killable+0x10/0x10 [ 157.066263][ T6581] ? debug_mutex_init+0x37/0x70 [ 157.066300][ T6581] copy_net_ns+0x2a6/0x5f0 [ 157.066354][ T6581] create_new_namespaces+0x3ea/0xad0 [ 157.066403][ T6581] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 157.066455][ T6581] ksys_unshare+0x45b/0xa40 [ 157.066504][ T6581] ? __pfx_ksys_unshare+0x10/0x10 [ 157.066549][ T6581] ? xfd_validate_state+0x5d/0x180 [ 157.066584][ T6581] ? rcu_is_watching+0x12/0xc0 [ 157.066627][ T6581] __x64_sys_unshare+0x31/0x40 [ 157.066673][ T6581] do_syscall_64+0xcd/0x230 [ 157.066729][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.066763][ T6581] RIP: 0033:0x7f5598f8e969 [ 157.066790][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.066822][ T6581] RSP: 002b:00007f5599dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.066854][ T6581] RAX: ffffffffffffffda RBX: 00007f55991b6080 RCX: 00007f5598f8e969 [ 157.066875][ T6581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 157.066894][ T6581] RBP: 00007f5599010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 157.066913][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.066931][ T6581] R13: 0000000000000000 R14: 00007f55991b6080 R15: 00007ffcf5b11798 [ 157.066972][ T6581] [ 157.763557][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.156'. [ 158.322613][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'. [ 158.559989][ T6610] random: crng reseeded on system resumption [ 158.787338][ T6611] Invalid ELF header magic: != ELF [ 160.249890][ T6638] FAULT_INJECTION: forcing a failure. [ 160.249890][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 160.271965][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.3.166 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 160.272003][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.272016][ T6638] Call Trace: [ 160.272024][ T6638] [ 160.272032][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 160.272072][ T6638] should_fail_ex+0x512/0x640 [ 160.272107][ T6638] ? __kvmalloc_node_noprof+0x122/0x600 [ 160.272134][ T6638] should_failslab+0xc2/0x120 [ 160.272163][ T6638] __kvmalloc_node_noprof+0x135/0x600 [ 160.272188][ T6638] ? __lock_acquire+0xaa4/0x1ba0 [ 160.272219][ T6638] ? seq_read_iter+0x826/0x12c0 [ 160.272258][ T6638] ? seq_read_iter+0x826/0x12c0 [ 160.272290][ T6638] seq_read_iter+0x826/0x12c0 [ 160.272322][ T6638] ? __mutex_trylock_common+0xe9/0x250 [ 160.272366][ T6638] proc_reg_read_iter+0x21d/0x310 [ 160.272392][ T6638] vfs_read+0x8cb/0xc70 [ 160.272424][ T6638] ? __pfx___mutex_lock+0x10/0x10 [ 160.272460][ T6638] ? __pfx_vfs_read+0x10/0x10 [ 160.272501][ T6638] ksys_read+0x12a/0x240 [ 160.272523][ T6638] ? __pfx_ksys_read+0x10/0x10 [ 160.272543][ T6638] ? rcu_is_watching+0x12/0xc0 [ 160.272573][ T6638] do_syscall_64+0xcd/0x230 [ 160.272610][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.272632][ T6638] RIP: 0033:0x7f58c1b8e969 [ 160.272650][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.272670][ T6638] RSP: 002b:00007f58c2ad3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.272691][ T6638] RAX: ffffffffffffffda RBX: 00007f58c1db5fa0 RCX: 00007f58c1b8e969 [ 160.272705][ T6638] RDX: 0000000000001000 RSI: 0000200000001700 RDI: 0000000000000004 [ 160.272719][ T6638] RBP: 00007f58c2ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 160.272732][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.272745][ T6638] R13: 0000000000000000 R14: 00007f58c1db5fa0 R15: 00007fff0519da08 [ 160.272773][ T6638] [ 161.504557][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 162.284814][ T6685] random: crng reseeded on system resumption [ 162.891163][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 163.423037][ T6686] program syz.3.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.874222][ T6712] FAULT_INJECTION: forcing a failure. [ 163.874222][ T6712] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 163.945790][ T6712] CPU: 0 UID: 0 PID: 6712 Comm: syz.2.187 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 163.945833][ T6712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.945851][ T6712] Call Trace: [ 163.945862][ T6712] [ 163.945874][ T6712] dump_stack_lvl+0x16c/0x1f0 [ 163.945928][ T6712] should_fail_ex+0x512/0x640 [ 163.945983][ T6712] _copy_from_iter+0x2a4/0x15b0 [ 163.946046][ T6712] ? __pfx__copy_from_iter+0x10/0x10 [ 163.946097][ T6712] ? rcu_is_watching+0x12/0xc0 [ 163.946139][ T6712] ? rcu_is_watching+0x12/0xc0 [ 163.946169][ T6712] ? kfree+0x252/0x4d0 [ 163.946197][ T6712] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 163.946249][ T6712] file_tty_write.constprop.0+0x486/0x9b0 [ 163.946305][ T6712] redirected_tty_write+0xd4/0x150 [ 163.946348][ T6712] vfs_write+0x5bd/0x1180 [ 163.946381][ T6712] ? __pfx_redirected_tty_write+0x10/0x10 [ 163.946427][ T6712] ? __pfx_vfs_write+0x10/0x10 [ 163.946456][ T6712] ? find_held_lock+0x2b/0x80 [ 163.946517][ T6712] ksys_write+0x12a/0x240 [ 163.946548][ T6712] ? __pfx_ksys_write+0x10/0x10 [ 163.946576][ T6712] ? rcu_is_watching+0x12/0xc0 [ 163.946620][ T6712] do_syscall_64+0xcd/0x230 [ 163.946674][ T6712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.946707][ T6712] RIP: 0033:0x7fb11c58e969 [ 163.946731][ T6712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.946762][ T6712] RSP: 002b:00007fb11d38a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.946791][ T6712] RAX: ffffffffffffffda RBX: 00007fb11c7b5fa0 RCX: 00007fb11c58e969 [ 163.946815][ T6712] RDX: 000000000000003c RSI: 0000200000000400 RDI: 0000000000000003 [ 163.946835][ T6712] RBP: 00007fb11d38a090 R08: 0000000000000000 R09: 0000000000000000 [ 163.946854][ T6712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.946872][ T6712] R13: 0000000000000000 R14: 00007fb11c7b5fa0 R15: 00007fffc0c70878 [ 163.946913][ T6712] [ 164.960789][ T6714] tty tty12: ldisc open failed (-12), clearing slot 11 [ 165.206687][ T6727] binder: 6725:6727 ioctl c0306201 0 returned -14 [ 165.241832][ T6729] FAULT_INJECTION: forcing a failure. [ 165.241832][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 165.272432][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.2.191 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 165.272480][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.272499][ T6729] Call Trace: [ 165.272510][ T6729] [ 165.272523][ T6729] dump_stack_lvl+0x16c/0x1f0 [ 165.272581][ T6729] should_fail_ex+0x512/0x640 [ 165.272630][ T6729] ? __kmalloc_noprof+0xbf/0x510 [ 165.272673][ T6729] ? xfrm_hash_alloc+0xd1/0x100 [ 165.272723][ T6729] should_failslab+0xc2/0x120 [ 165.272774][ T6729] __kmalloc_noprof+0xd2/0x510 [ 165.272811][ T6729] ? proc_create_reg+0xe3/0x180 [ 165.272858][ T6729] ? __pfx_xfrm_net_init+0x10/0x10 [ 165.272891][ T6729] xfrm_hash_alloc+0xd1/0x100 [ 165.272945][ T6729] xfrm_state_init+0xdd/0x630 [ 165.273005][ T6729] ? __pfx_xfrm_net_init+0x10/0x10 [ 165.273035][ T6729] xfrm_net_init+0x210/0xcc0 [ 165.273074][ T6729] ? __pfx_xfrm_net_init+0x10/0x10 [ 165.273105][ T6729] ops_init+0x1df/0x5f0 [ 165.273154][ T6729] setup_net+0x21e/0x850 [ 165.273203][ T6729] ? __pfx_setup_net+0x10/0x10 [ 165.273244][ T6729] ? lockdep_init_map_type+0x5c/0x280 [ 165.273292][ T6729] ? __pfx_down_read_killable+0x10/0x10 [ 165.273332][ T6729] ? debug_mutex_init+0x37/0x70 [ 165.273370][ T6729] copy_net_ns+0x2a6/0x5f0 [ 165.273423][ T6729] create_new_namespaces+0x3ea/0xad0 [ 165.273473][ T6729] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 165.273516][ T6729] ksys_unshare+0x45b/0xa40 [ 165.273565][ T6729] ? __pfx_ksys_unshare+0x10/0x10 [ 165.273610][ T6729] ? xfd_validate_state+0x5d/0x180 [ 165.273645][ T6729] ? rcu_is_watching+0x12/0xc0 [ 165.273686][ T6729] __x64_sys_unshare+0x31/0x40 [ 165.273731][ T6729] do_syscall_64+0xcd/0x230 [ 165.273795][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.273827][ T6729] RIP: 0033:0x7fb11c58e969 [ 165.273851][ T6729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.273882][ T6729] RSP: 002b:00007fb11d369038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 165.273912][ T6729] RAX: ffffffffffffffda RBX: 00007fb11c7b6080 RCX: 00007fb11c58e969 [ 165.273933][ T6729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 165.273953][ T6729] RBP: 00007fb11c610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 165.273973][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.273992][ T6729] R13: 0000000000000000 R14: 00007fb11c7b6080 R15: 00007fffc0c70878 [ 165.274037][ T6729] [ 166.283243][ T6740] random: crng reseeded on system resumption [ 166.314432][ T6742] FAULT_INJECTION: forcing a failure. [ 166.314432][ T6742] name fail_futex, interval 1, probability 0, space 0, times 1 [ 166.328395][ T6742] CPU: 1 UID: 0 PID: 6742 Comm: syz.2.195 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 166.328425][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.328439][ T6742] Call Trace: [ 166.328446][ T6742] [ 166.328454][ T6742] dump_stack_lvl+0x16c/0x1f0 [ 166.328493][ T6742] should_fail_ex+0x512/0x640 [ 166.328532][ T6742] get_futex_key+0xabc/0x1000 [ 166.328560][ T6742] ? __pfx_get_futex_key+0x10/0x10 [ 166.328594][ T6742] futex_wake+0xe7/0x4e0 [ 166.328621][ T6742] ? rcu_is_watching+0x12/0xc0 [ 166.328645][ T6742] ? __pfx_futex_wake+0x10/0x10 [ 166.328686][ T6742] do_futex+0x1e3/0x350 [ 166.328711][ T6742] ? __pfx_do_futex+0x10/0x10 [ 166.328733][ T6742] ? __might_fault+0xe3/0x190 [ 166.328767][ T6742] mm_release+0x24e/0x300 [ 166.328793][ T6742] do_exit+0x898/0x2c30 [ 166.328822][ T6742] ? __pfx_futex_wake_mark+0x10/0x10 [ 166.328856][ T6742] ? __pfx_do_exit+0x10/0x10 [ 166.328895][ T6742] ? do_raw_spin_lock+0x12c/0x2b0 [ 166.328930][ T6742] ? find_held_lock+0x2b/0x80 [ 166.328956][ T6742] do_group_exit+0xd3/0x2a0 [ 166.328991][ T6742] get_signal+0x2673/0x26d0 [ 166.329028][ T6742] ? __pfx_get_signal+0x10/0x10 [ 166.329054][ T6742] ? do_futex+0x122/0x350 [ 166.329079][ T6742] ? __pfx_do_futex+0x10/0x10 [ 166.329106][ T6742] arch_do_signal_or_restart+0x8f/0x7a0 [ 166.329140][ T6742] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.329182][ T6742] ? rcu_is_watching+0x12/0xc0 [ 166.329208][ T6742] syscall_exit_to_user_mode+0x150/0x2a0 [ 166.329245][ T6742] do_syscall_64+0xda/0x230 [ 166.329282][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.329304][ T6742] RIP: 0033:0x7fb11c58e969 [ 166.329322][ T6742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.329343][ T6742] RSP: 002b:00007fb11d38a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.329365][ T6742] RAX: fffffffffffffe00 RBX: 00007fb11c7b5fa8 RCX: 00007fb11c58e969 [ 166.329380][ T6742] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb11c7b5fa8 [ 166.329393][ T6742] RBP: 00007fb11c7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 166.329407][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb11c7b5fac [ 166.329420][ T6742] R13: 0000000000000000 R14: 00007fffc0c70790 R15: 00007fffc0c70878 [ 166.329448][ T6742] [ 166.568644][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.188248][ T6751] FAULT_INJECTION: forcing a failure. [ 167.188248][ T6751] name failslab, interval 1, probability 0, space 0, times 0 [ 167.267643][ T6751] CPU: 1 UID: 0 PID: 6751 Comm: syz.0.198 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 167.267688][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.267707][ T6751] Call Trace: [ 167.267717][ T6751] [ 167.267729][ T6751] dump_stack_lvl+0x16c/0x1f0 [ 167.267784][ T6751] should_fail_ex+0x512/0x640 [ 167.267832][ T6751] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 167.267870][ T6751] should_failslab+0xc2/0x120 [ 167.267913][ T6751] __kmalloc_cache_noprof+0x6a/0x3e0 [ 167.267945][ T6751] ? rcu_is_watching+0x12/0xc0 [ 167.267975][ T6751] ? s_start+0x7b/0x320 [ 167.268021][ T6751] s_start+0x7b/0x320 [ 167.268067][ T6751] traverse.part.0.constprop.0+0xac/0x640 [ 167.268133][ T6751] seq_read_iter+0x932/0x12c0 [ 167.268201][ T6751] seq_read+0x39e/0x4e0 [ 167.268250][ T6751] ? __pfx_seq_read+0x10/0x10 [ 167.268299][ T6751] ? get_pid_task+0xfc/0x250 [ 167.268365][ T6751] ? rw_verify_area+0xcf/0x680 [ 167.268412][ T6751] ? __pfx_seq_read+0x10/0x10 [ 167.268462][ T6751] vfs_read+0x1de/0xc70 [ 167.268502][ T6751] ? __pfx_vfs_read+0x10/0x10 [ 167.268539][ T6751] ? find_held_lock+0x2b/0x80 [ 167.268573][ T6751] ? __fget_files+0x204/0x3c0 [ 167.268610][ T6751] ? __fget_files+0x20e/0x3c0 [ 167.268636][ T6751] ? __fget_files+0x140/0x3c0 [ 167.268681][ T6751] __x64_sys_pread64+0x1f4/0x250 [ 167.268718][ T6751] ? __pfx___x64_sys_pread64+0x10/0x10 [ 167.268751][ T6751] ? rcu_is_watching+0x12/0xc0 [ 167.268794][ T6751] do_syscall_64+0xcd/0x230 [ 167.268849][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.268881][ T6751] RIP: 0033:0x7f5df138e969 [ 167.268906][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.268937][ T6751] RSP: 002b:00007f5def1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 167.268966][ T6751] RAX: ffffffffffffffda RBX: 00007f5df15b5fa0 RCX: 00007f5df138e969 [ 167.268986][ T6751] RDX: 000000000000c404 RSI: 0000000000000000 RDI: 0000000000000004 [ 167.269004][ T6751] RBP: 00007f5def1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.269023][ T6751] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 167.269042][ T6751] R13: 0000000000000000 R14: 00007f5df15b5fa0 R15: 00007ffd6bac0998 [ 167.269085][ T6751] [ 167.503408][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.511649][ T6752] sock: sock_timestamping_bind_phc: sock not bind to device [ 167.525045][ T6751] [ 167.527438][ T6751] ===================================== [ 167.532999][ T6751] WARNING: bad unlock balance detected! [ 167.538552][ T6751] 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 Not tainted [ 167.545674][ T6751] ------------------------------------- [ 167.551244][ T6751] syz.0.198/6751 is trying to release lock (event_mutex) at: [ 167.558660][ T6751] [] traverse.part.0.constprop.0+0x2bd/0x640 [ 167.566255][ T6751] but there are no more locks to release! [ 167.571983][ T6751] [ 167.571983][ T6751] other info that might help us debug this: [ 167.580065][ T6751] 1 lock held by syz.0.198/6751: [ 167.585016][ T6751] #0: ffff888030110668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 167.594043][ T6751] [ 167.594043][ T6751] stack backtrace: [ 167.599981][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.0.198 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 167.600017][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.600033][ T6751] Call Trace: [ 167.600042][ T6751] [ 167.600053][ T6751] dump_stack_lvl+0x116/0x1f0 [ 167.600095][ T6751] ? traverse.part.0.constprop.0+0x2bd/0x640 [ 167.600137][ T6751] print_unlock_imbalance_bug+0x11b/0x130 [ 167.600170][ T6751] ? traverse.part.0.constprop.0+0x2bd/0x640 [ 167.600210][ T6751] lock_release+0x242/0x2f0 [ 167.600245][ T6751] __mutex_unlock_slowpath+0xa2/0x6a0 [ 167.600287][ T6751] ? rcu_is_watching+0x12/0xc0 [ 167.600312][ T6751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.600352][ T6751] ? __kmalloc_cache_noprof+0x249/0x3e0 [ 167.600379][ T6751] ? rcu_is_watching+0x12/0xc0 [ 167.600409][ T6751] ? kfree+0x252/0x4d0 [ 167.600431][ T6751] ? s_start+0x28c/0x320 [ 167.600465][ T6751] traverse.part.0.constprop.0+0x2bd/0x640 [ 167.600515][ T6751] seq_read_iter+0x932/0x12c0 [ 167.600559][ T6751] seq_read+0x39e/0x4e0 [ 167.600596][ T6751] ? __pfx_seq_read+0x10/0x10 [ 167.600634][ T6751] ? get_pid_task+0xfc/0x250 [ 167.600677][ T6751] ? rw_verify_area+0xcf/0x680 [ 167.600715][ T6751] ? __pfx_seq_read+0x10/0x10 [ 167.600754][ T6751] vfs_read+0x1de/0xc70 [ 167.600781][ T6751] ? __pfx_vfs_read+0x10/0x10 [ 167.600803][ T6751] ? find_held_lock+0x2b/0x80 [ 167.600827][ T6751] ? __fget_files+0x204/0x3c0 [ 167.600853][ T6751] ? __fget_files+0x20e/0x3c0 [ 167.600874][ T6751] ? __fget_files+0x140/0x3c0 [ 167.600900][ T6751] __x64_sys_pread64+0x1f4/0x250 [ 167.600927][ T6751] ? __pfx___x64_sys_pread64+0x10/0x10 [ 167.600954][ T6751] ? rcu_is_watching+0x12/0xc0 [ 167.600981][ T6751] do_syscall_64+0xcd/0x230 [ 167.601023][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.601050][ T6751] RIP: 0033:0x7f5df138e969 [ 167.601070][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.601095][ T6751] RSP: 002b:00007f5def1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 167.601119][ T6751] RAX: ffffffffffffffda RBX: 00007f5df15b5fa0 RCX: 00007f5df138e969 [ 167.601136][ T6751] RDX: 000000000000c404 RSI: 0000000000000000 RDI: 0000000000000004 [ 167.601152][ T6751] RBP: 00007f5def1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.601167][ T6751] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 167.601182][ T6751] R13: 0000000000000000 R14: 00007f5df15b5fa0 R15: 00007ffd6bac0998 [ 167.601206][ T6751]