last executing test programs: 1m57.098691078s ago: executing program 1 (id=83): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) setresuid$auto(0x8, 0x8, 0x0) bpf$auto(0x7d, 0x0, 0x10) read$auto(r0, 0x0, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) select$auto(0x6, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0xfffffffffffffff8, 0xc, 0x6, 0x5f, 0x7, 0x7, 0x6d3f, 0x329, 0x4, 0x3]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x5, 0x3, 0xf, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0xe35, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x3, @empty}, 0x54) getsockopt$auto(r2, 0x80000011, 0x4, 0x0, &(0x7f0000000200)=0x1400c0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) 1m56.119484042s ago: executing program 1 (id=86): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x2, 0x948f, 0x3, 0x15f4da06, 0x1, 0x7, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() acct$auto(&(0x7f0000000280)='}\x00') process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r2, &(0x7f0000001080)=""/157, 0x9d) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram3/queue/max_segment_size\x00', 0x10001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000011c0), r0) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="040028bd7000fedbdf25070000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f62726905006500140002006c6f00002e5dd22282bca11e573d810003000000", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="3400018014ee0002006c756e6c30000000000000000000000014000200766c616e310000000000000000000000080003005d000000180001801400020069703665647370616e300000000000"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/ib_srp/parameters/fast_io_fail_tmo\x00', 0x22001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000000c0)=""/48, 0x30) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x40a042, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r9 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r9, 0x29, 0x17, &(0x7f0000000240)='!\x00\x00\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) 1m54.283219369s ago: executing program 1 (id=91): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x13c, 0x0, 0x0, 0xd}, 0x5af}, 0x40, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) 1m53.464600522s ago: executing program 1 (id=94): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0xa, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x6, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) 1m48.36694204s ago: executing program 1 (id=108): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x801f00, 0x20499d, 0x9) 1m46.747335078s ago: executing program 1 (id=112): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/184, 0xb8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) readv$auto(r0, &(0x7f0000000200)={&(0x7f0000000100)="764fa884287a03925b5f1986847948da46125e98ee0b44c85e33278e0fe08745ef15de45ad6679a3589b34eedb8b4ec428951880f2252e1396870ff4f755f595d3be628d0bd38ea92eefc291e0b6188794b996f451697197d3a311286554c78aafd5c950d0c7e8c3d5eb94c7ae34695266cd1e354344da1025f3d2c7ce44252a32652b99ee38d55dd45555a8a341bd8cbae0eec7c0bf3d15ea512b7941b6a31070f5b045f03a98bd96053c93ab74eab66a3551647e2bcf1282d9463eff2449ba3c5b0116a2cd9896ba44526f234e639d22c957d3c14de7549ceac00bdc359f3c72c01dddb56db95ccf", 0xf}, 0x9) 1m31.512198976s ago: executing program 32 (id=112): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/184, 0xb8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) readv$auto(r0, &(0x7f0000000200)={&(0x7f0000000100)="764fa884287a03925b5f1986847948da46125e98ee0b44c85e33278e0fe08745ef15de45ad6679a3589b34eedb8b4ec428951880f2252e1396870ff4f755f595d3be628d0bd38ea92eefc291e0b6188794b996f451697197d3a311286554c78aafd5c950d0c7e8c3d5eb94c7ae34695266cd1e354344da1025f3d2c7ce44252a32652b99ee38d55dd45555a8a341bd8cbae0eec7c0bf3d15ea512b7941b6a31070f5b045f03a98bd96053c93ab74eab66a3551647e2bcf1282d9463eff2449ba3c5b0116a2cd9896ba44526f234e639d22c957d3c14de7549ceac00bdc359f3c72c01dddb56db95ccf", 0xf}, 0x9) 47.696735388s ago: executing program 3 (id=277): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/usb/usbmon/28u\x00', 0x4080, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r0, 0x4) r2 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r2, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) r3 = geteuid() keyctl$auto(0x1e, r3, r3, 0x5, 0x8) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, 0x0, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="e93c0e1c", @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf25090000000400670004004a01"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x20000) unshare$auto(0x20000) timer_create$auto(0x7, &(0x7f0000000000)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000040)=0x200) timer_settime$auto(0x0, 0x3b4, &(0x7f0000000040)={{0x0, 0xd3}, {0x200001005, 0x6}}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000080)={{0x5, 0x8}, {0x7f, 0x10000}}) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) 46.736787304s ago: executing program 3 (id=280): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/194, 0xc2) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x4, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) r2 = open(0x0, 0x477fd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0x10000a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r0, 0x0, 0x100082) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x38000, 0x0) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) mmap$auto(0x7f, 0x82020009, 0x3, 0x17, r3, 0xff6) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="32211df0071d5e259bcbcbc83ab30498fd67597894777d4b0d6625733fca3c000000000000", @ANYRES16=0x0, @ANYBLOB="0400000006000000000000009095ff4ecd90dfdd0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) socket(0x2, 0x2, 0x1) getsockopt$auto(r2, 0x5, 0x81, &(0x7f0000000500)='/dev/c\x04\x00\x00\x00\x00\x81Tq\x00\xce\xdfwc\xa4\xfe<\x8c\xc9\x82\x93\xb1G}{\xf0\xad\x94z7\x87h\xf4w4\xfe\xc6\xdd\x008\xf2J\f\x05\xce0\xc5K\"A\xad\xa7\x14\xc5\x1fI\x9f\x88CLt\xa1H\x84iq\x84|.\x188\xf9\x88\xeb\xff\xca\xe9\n\xb6\xe1\xbe\xce\x00\x82\xcf3;\xba\xf7\xf3E\xc9\xdcxI\x00\x80\x00\x00\x00\x00\x00\x00\xc5k\x1aHn\xdd\rcp\xbfY2p\x94\x87>\xaf\x84\x80\xd7n\xc4a\xfej\xf8\x9bs\x1b\x97\x7f\x06\xb3', &(0x7f0000000080)=0x9) madvise$auto(0x93, 0xa, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xee01, 0xffff, 0xa8, 0x80, 0x9}, &(0x7f0000000340)=0xb, &(0x7f0000000380)=0x2, 0xa, 0x1, 0x1, 0x0, 0x8, 0x5, 0xffec, 0x8c2, @raw=0x1, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) 45.800604478s ago: executing program 3 (id=286): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000000)={'tunl0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) (async) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000000)={'tunl0\x00'}) (async) 45.393677651s ago: executing program 3 (id=287): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/net/snmp\x00', 0x101100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/103, 0x67) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000000)={{@raw=0x6, 0x3, 0x0, 0x0, "51b940a259152c8ca966bd246803eeabff81b2ef124e1b6c0d1fb20f18706ecf8933794f1b2eda1a457fc076", @inferred=0xffffffffffffffff}, 0x8, 0x9, 0x54, @raw=0x7, @enumerated={0x8, 0x1, "d2aef1f72ff3adebf9c480f66e17c03dfdccd5d5069eb1aa42ed6749a976129fbb8e515d982226c9e47a83496e7ab2b98254b8503ffc0a2e58a079ad8361d154", 0x4, 0x8}, "bb1156438d34180a0e1708f922feda2c76bb748b9eb4214fda83afad830d5ceb31302d4671fb3187eddb4fab640f024d32864bd91f98202ba675f2012120820f"}) 45.136951881s ago: executing program 3 (id=288): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/vlan0/use_tempaddr\x00', 0x143402, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x10, &(0x7f0000000080)='%+(H-*$\x00', 0x100) (async) setsockopt$auto_SO_SNDBUF(r0, 0xffffffff, 0x7, &(0x7f0000000380)='/dev/admmidi2\x00', 0x34) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/kernel/perf_cpu_time_max_percent\x00', 0xa042, 0x0) (async, rerun: 32) recvmmsg$auto(r0, &(0x7f00000002c0)={{&(0x7f0000000040)="baa0a822bd80db7e5c10d509d432d53dad101a558e768377c45a188871222c26c8f950d572cafc7583b725c5d6f15156b8bd275fb8f4e35eaecddfc0855481dfe572498f4ee370e31dc2e979003e4f2777dcd2d0329c1d734e911299df03c4fffc670d595458a40fb7007199ec26cebc0369029ed1a2f5aeeb54d47588ca580f7ab8f0f4b6841548b84a1f6d359eb071974bbe96a5913be84f23ddf5fb628d7a01b49c0b4440159b146cc29bc5d1b49664c143679fb1b6fdf52531", 0x5, &(0x7f00000003c0)={&(0x7f0000000100)="cb1373ee2812e1f54536415d0dd13824aa65fe113606b310f0e7a51e5a74b050003184de4a0e768f1a46228f9c083eaf15d7891ca0cf01bd1bc12b818cdf91ddbb9a1580dbdb3a3e6cc309198d74fe939e64a1cc3d3a35e1794f1497a7d0a641d36384c58afa9949c825ddfa7921048eaec38dfc93323bfc10d8bed108ca278f957e1d32e0c82463fecfb7dfbff25a63695867d3f35a6b6a53900d2061521c31e8abbcc1969a569089eebad9317fda6656f979f88d0e72ee87146f66f1f699bbcae9b1b6083ad6ed6d007565", 0x4}, 0xa9, &(0x7f0000000240)="cfb4fc", 0x6, 0x2}, 0x2}, 0x800, 0x8, &(0x7f0000000300)={0x3, 0x582}) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/admmidi2\x00', 0x0, 0x0) sendfile$auto(r2, r0, 0x0, 0x48) 44.899509201s ago: executing program 3 (id=290): mmap$auto(0x7fffffffffffffff, 0x10000000000009, 0xdf, 0x14, 0xffffffffffffffff, 0xc) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xc4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\t=URYY\xe2\xb8\xd9\xe6I\x02\xca\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x9a\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x10000100000a3d7) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="18000000", @ANYRESOCT=r1, @ANYRESDEC=r0], 0x18}, 0x1, 0x0, 0x0, 0x4c010}, 0x2000c000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x5, 0x0, 0x1ff, 0x0, 0x2, 0xfffffff5}, 0x1}, 0xe4d, 0x6, 0x0) mmap$auto(0x0, 0x800000000004, 0x24000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x5, 0xa, 0x2) ioctl$auto_SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f00000006c0)="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") r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f00000016c0)="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", 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x1, 0x0, 0x4, 0xf}, 0xfff}, 0x5, 0x311) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) listen$auto(r5, 0x5) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)=@bpf_attr_11={0x4998, 0xfffffffffffffffc, 0x3, 0x6, 0x1, 0xca800000, 0x6}, 0x5) socket(0x0, 0x3, 0xff) shutdown$auto(0xffffffffffffffff, 0x2) 29.85056389s ago: executing program 33 (id=290): mmap$auto(0x7fffffffffffffff, 0x10000000000009, 0xdf, 0x14, 0xffffffffffffffff, 0xc) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xc4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\t=URYY\xe2\xb8\xd9\xe6I\x02\xca\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x9a\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x10000100000a3d7) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="18000000", @ANYRESOCT=r1, @ANYRESDEC=r0], 0x18}, 0x1, 0x0, 0x0, 0x4c010}, 0x2000c000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x5, 0x0, 0x1ff, 0x0, 0x2, 0xfffffff5}, 0x1}, 0xe4d, 0x6, 0x0) mmap$auto(0x0, 0x800000000004, 0x24000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x5, 0xa, 0x2) ioctl$auto_SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f00000006c0)="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") r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f00000016c0)="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", 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x1, 0x0, 0x4, 0xf}, 0xfff}, 0x5, 0x311) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) listen$auto(r5, 0x5) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)=@bpf_attr_11={0x4998, 0xfffffffffffffffc, 0x3, 0x6, 0x1, 0xca800000, 0x6}, 0x5) socket(0x0, 0x3, 0xff) shutdown$auto(0xffffffffffffffff, 0x2) 5.812211169s ago: executing program 2 (id=401): mmap$auto(0x2000000000000000, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x88f42, 0x0) write$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f0000000040)='F', 0x1) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@isdn={0x22, 0x5, 0xf1, 0x1, 0x2}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x4, 0xffffffffffffff00, 0x7, 0x17, 0xffffffffffffffff, 0x8002) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r1, r2, 0x0, 0x1000200) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8000000000000, 0x8000000e983, 0xdf, 0x32, 0x401, 0xfffffffffffffffc) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cec15\x00', 0x100, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x1, 0x9b4, 0x9, "ce25aafc24b9952f997e703f222ce1", '\x00', "00f8ff00", "008b8c00", ["e5a494b8cbb68adbc6cc2a9f", "f8ffffffffffffff00000001", "b06f8ca10c66eebcbd6f17c8", "5fe1de420000000000002a92"]}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 5.230236999s ago: executing program 0 (id=405): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) getsockopt$auto(r3, 0x9, 0x0, &(0x7f0000000080)='\x00', &(0x7f0000000200)=0x1691) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd4/queue/optimal_io_size\x00', 0x40000, 0x0) read$auto(r6, 0x0, 0x20) (async) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64) r7 = socket(0x3, 0x5, 0x0) (rerun: 64) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) (async) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) (async) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x1000200) (async) close_range$auto(0x0, 0x5, 0x0) 3.238243638s ago: executing program 0 (id=413): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F-\xe3\xd3\x8d\xc7\xa4*\x96\xf7', 0x9) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x1, 0x6, 0x6, 0x1000, r1, r2, 0x0, 0x4, 0x7, 0x9, 0xffffffffffff8000, 0x9, 0x9, 0x4, 0x2, 0x7, 0x8}) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000af3f7fa44b50789bcbcc63da49a17050e75fd3bef30893aae94f52ec2031f9eebb9f7f0650538c3b99f804e0d2c694237699de4d018cde0f8c5dcbf98bca73b0994a898dfa14193472f22ba12de6b62ed8cb2ef011e538d35a297a1d211b37ece799fffe631334d3993d49", @ANYRES16=0x0, @ANYBLOB="080027bd7000fcdbdf25050000000800040004000000080004000500000008000500020000000400028008000400ff010000"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$auto_OSS_GETVERSION2(0xffffffffffffffff, 0x80044d76, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) inotify_init1$auto(0x3000000000000) personality$auto(0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000001440)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16, @ANYBLOB="a9e127bd7000ffdbdf2501000000050006000700000008000300010001000700040096e300000500050003000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) write$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/input/event1\x00', 0xfffe) 2.05923956s ago: executing program 4 (id=419): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0, 0x0) (async) mmap$auto(0x0, 0x40000a, 0xdb, 0x10010, 0x2, 0x8003) (async) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/card1/cable#0\x00', 0x1, 0x0) (async) socket(0x1e, 0x80000, 0x5c) (async) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0xfffffffffffffff7, 0x1fffffff, 0x40000, 0x401000000eb4, 0xffffffffffffffff, 0x800000000009) (async) clock_nanosleep$auto(0x0, 0x1000, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, 0x0, 0x4000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3a8044}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0xc814}, 0x10) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x8182, 0x0) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000440)='\v', 0x1) madvise$auto(0x0, 0x20499d, 0x9) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/modalias\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/195, 0xc3) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) (async) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x810) (async) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) 1.897606513s ago: executing program 5 (id=420): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x80000000) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) socket(0x10, 0x2, 0xffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) close_range$auto(0x2, 0x8, 0x0) gettid() syz_clone3(&(0x7f0000000380)={0x4883000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x405b) 1.420611122s ago: executing program 2 (id=423): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) (async) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dmmidi2\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) (async) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/9, 0x9) (async) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) (async) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff, 0x0}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) (async) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'pim6reg\x00'}) rename$auto(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x0, 0x59c4, r5, 0x8, 0xfffffffffffffffa) (async) r6 = prctl$auto(0x0, 0x59c4, r5, 0x8, 0xfffffffffffffffa) r7 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0xe420c85b92fbda3, 0x0) close_range$auto(r6, r7, 0x1) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) (async) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) (async) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r8, r8, 0x0, 0x7) 966.700419ms ago: executing program 5 (id=424): mmap$auto(0x0, 0x2000a, 0x11, 0xd1f4, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x26c982, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000080)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, 0x0, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) 467.57272ms ago: executing program 0 (id=425): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) mmap$auto(0x0, 0x100000000000000, 0xe20, 0x9a73, 0x2, 0x5) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) socket(0x25, 0x1, 0x3) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r2, 0xc0205648, r2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x32bc2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x1) mremap$auto(0x4000, 0xb8, 0xffffffffffffffff, 0x3, 0xfffff003) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x3, 0x7, 0x401, r2, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x705b}, {0x100, 0x1, 0x4e, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) open(0x0, 0x22240, 0x154) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev1\x00') openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r3, 0x6e3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 375.430883ms ago: executing program 2 (id=426): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r0, 0x8100451b, r0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) fanotify_init$auto(0x5, 0x2000000000002) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x100, 0xfffffffffffffffe, 0x6f) socket(0x25, 0x1, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) socket(0x1f, 0x6, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x18) socket(0x2, 0xa, 0x2) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@can, 0x6a) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, "3118078745dd08b7ed50db959635f3be"}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffde, 0x203, 0x2000000000000006, 0x3, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x82, 0x3, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x10, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x9, 0x0, 0x200, 0x80, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3, 0x8000000000000002, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb100000000000000, 0x0, 0x7fffffff, 0x72, 0xfffffffffffffffc, 0x8]}, 0x6, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8000e, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x1, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x4, 0x10000]}, 0x0) 0s ago: executing program 4 (id=427): unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x260dc3, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r1, r1, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = pidfd_getfd$auto(r0, r0, 0x4) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) bpf$auto(0x1, &(0x7f0000000140)=@bpf_attr_3={0xffff7fff, 0x7, 0x6, 0x800000000, 0xfff, 0x782262a8, 0xffffffffffffffff, 0x4, 0x1, "b24e60307bfbaf9f7c5385a1a21be4c9", r5, 0x80000000, r4, 0x0, 0xfffffffffffffffe, 0x27, 0x2, 0xb9f00, 0x8, 0x82, @attach_btf_obj_fd=r1, 0x6, 0x0, 0xc, 0x10, 0x2af, r1, r1}, 0xfffffffa) r6 = socket(0xa, 0x3, 0xff) connect$auto(r6, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r10, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, '+o*#\x90\x80\x8b\x00'}, @SMC_PNETID_NAME={0xb, 0x1, 'netdev\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 81.833045][ T5849] cgroup: Unknown subsys name 'net' [ 82.024908][ T5849] cgroup: Unknown subsys name 'cpuset' [ 82.033919][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.484343][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.275050][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.282512][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.290039][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.297582][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.300771][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.305943][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.323169][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.341740][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.348942][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.349236][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.356763][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.363847][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.370574][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.379552][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.384934][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.391263][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.399559][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.406725][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.412590][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.419195][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.753066][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 85.789311][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 85.846334][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 85.915957][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 85.944502][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.951938][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.959408][ T5858] bridge_slave_0: entered allmulticast mode [ 85.966645][ T5858] bridge_slave_0: entered promiscuous mode [ 85.998420][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.005679][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.013100][ T5858] bridge_slave_1: entered allmulticast mode [ 86.019830][ T5858] bridge_slave_1: entered promiscuous mode [ 86.048765][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.056105][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.063569][ T5860] bridge_slave_0: entered allmulticast mode [ 86.070264][ T5860] bridge_slave_0: entered promiscuous mode [ 86.096685][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.104718][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.111987][ T5860] bridge_slave_1: entered allmulticast mode [ 86.118922][ T5860] bridge_slave_1: entered promiscuous mode [ 86.127571][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.139190][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.174738][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.181909][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.189296][ T5861] bridge_slave_0: entered allmulticast mode [ 86.196645][ T5861] bridge_slave_0: entered promiscuous mode [ 86.204264][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.211889][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.219479][ T5861] bridge_slave_1: entered allmulticast mode [ 86.227359][ T5861] bridge_slave_1: entered promiscuous mode [ 86.269897][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.280826][ T5858] team0: Port device team_slave_0 added [ 86.288881][ T5858] team0: Port device team_slave_1 added [ 86.304927][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.323685][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.350331][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.367899][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.375799][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.383586][ T5859] bridge_slave_0: entered allmulticast mode [ 86.390320][ T5859] bridge_slave_0: entered promiscuous mode [ 86.419930][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.427362][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.434689][ T5859] bridge_slave_1: entered allmulticast mode [ 86.441421][ T5859] bridge_slave_1: entered promiscuous mode [ 86.456603][ T5860] team0: Port device team_slave_0 added [ 86.463717][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.470695][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.496875][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.509180][ T5861] team0: Port device team_slave_0 added [ 86.525223][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.535586][ T5860] team0: Port device team_slave_1 added [ 86.541861][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.549081][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.575350][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.591674][ T5861] team0: Port device team_slave_1 added [ 86.599321][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.633683][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.640675][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.667515][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.695288][ T5859] team0: Port device team_slave_0 added [ 86.710024][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.717158][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.743252][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.763143][ T5859] team0: Port device team_slave_1 added [ 86.786125][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.793480][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.819616][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.832007][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.839933][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.866182][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.892446][ T5858] hsr_slave_0: entered promiscuous mode [ 86.898683][ T5858] hsr_slave_1: entered promiscuous mode [ 86.932959][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.939976][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.966340][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.997394][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.004571][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.030643][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.075939][ T5860] hsr_slave_0: entered promiscuous mode [ 87.082404][ T5860] hsr_slave_1: entered promiscuous mode [ 87.088681][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 87.095123][ T5860] Cannot create hsr debugfs directory [ 87.130941][ T5861] hsr_slave_0: entered promiscuous mode [ 87.137229][ T5861] hsr_slave_1: entered promiscuous mode [ 87.143744][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 87.149508][ T5861] Cannot create hsr debugfs directory [ 87.169851][ T5859] hsr_slave_0: entered promiscuous mode [ 87.176277][ T5859] hsr_slave_1: entered promiscuous mode [ 87.182871][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 87.188635][ T5859] Cannot create hsr debugfs directory [ 87.429421][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.436721][ T5183] Bluetooth: hci3: command tx timeout [ 87.451761][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.461365][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.475022][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.507609][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.514457][ T5183] Bluetooth: hci0: command tx timeout [ 87.523014][ T5183] Bluetooth: hci1: command tx timeout [ 87.523041][ T5873] Bluetooth: hci2: command tx timeout [ 87.531009][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.544454][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.554463][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.601600][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.611505][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.625858][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.635482][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.710077][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.720701][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.740614][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.750416][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.820457][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.837858][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.859194][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.885657][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.892926][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.920597][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.940115][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.947279][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.957751][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.964998][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.984488][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.991611][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.014081][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.049346][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.067658][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.087048][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.094247][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.108980][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.119931][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.143330][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.150471][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.167115][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.193589][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.235907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.243119][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.284043][ T5859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.296974][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.315941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.323169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.528742][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.613182][ T5861] veth0_vlan: entered promiscuous mode [ 88.629474][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.658399][ T5861] veth1_vlan: entered promiscuous mode [ 88.710628][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.761150][ T5861] veth0_macvtap: entered promiscuous mode [ 88.779511][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.788507][ T5858] veth0_vlan: entered promiscuous mode [ 88.807932][ T5859] veth0_vlan: entered promiscuous mode [ 88.828157][ T5859] veth1_vlan: entered promiscuous mode [ 88.836803][ T5861] veth1_macvtap: entered promiscuous mode [ 88.846556][ T5858] veth1_vlan: entered promiscuous mode [ 88.894808][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.905260][ T5860] veth0_vlan: entered promiscuous mode [ 88.917656][ T5858] veth0_macvtap: entered promiscuous mode [ 88.927128][ T5858] veth1_macvtap: entered promiscuous mode [ 88.945561][ T5859] veth0_macvtap: entered promiscuous mode [ 88.956900][ T5859] veth1_macvtap: entered promiscuous mode [ 88.966285][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.979137][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.990942][ T5860] veth1_vlan: entered promiscuous mode [ 89.007579][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.016626][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.035692][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.055216][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.068184][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.085058][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.114200][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.137129][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.148501][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158160][ T5860] veth0_macvtap: entered promiscuous mode [ 89.170693][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.179659][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.191912][ T5860] veth1_macvtap: entered promiscuous mode [ 89.201937][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.215503][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.228134][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.230623][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.245704][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.256129][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.296363][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.309763][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.323382][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.331261][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.360593][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.400900][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.410718][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.424487][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.443193][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.466225][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.496029][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.512755][ T5873] Bluetooth: hci3: command tx timeout [ 89.530512][ T5951] syz.1.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.546453][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.565447][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.592465][ T5873] Bluetooth: hci2: command tx timeout [ 89.592803][ T5183] Bluetooth: hci1: command tx timeout [ 89.597925][ T5873] Bluetooth: hci0: command tx timeout [ 89.610348][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.631131][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.700670][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.722735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.737123][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.785168][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.858665][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.881766][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.980662][ T5957] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.212479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.231101][ T5964] FAULT_INJECTION: forcing a failure. [ 90.231101][ T5964] name failslab, interval 1, probability 0, space 0, times 1 [ 90.259411][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: syz.0.1 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 90.259458][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.259476][ T5964] Call Trace: [ 90.259486][ T5964] [ 90.259498][ T5964] dump_stack_lvl+0x16c/0x1f0 [ 90.259564][ T5964] should_fail_ex+0x512/0x640 [ 90.259612][ T5964] should_failslab+0xc2/0x120 [ 90.259655][ T5964] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 90.259696][ T5964] ? trace_kmem_cache_alloc+0x28/0xc0 [ 90.259740][ T5964] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 90.259774][ T5964] ? rcu_is_watching+0x12/0xc0 [ 90.259807][ T5964] ? mas_dup_build.constprop.0+0x5f3/0x1740 [ 90.259851][ T5964] ? mas_dup_build.constprop.0+0xc52/0x1740 [ 90.259888][ T5964] mas_dup_build.constprop.0+0xc52/0x1740 [ 90.259933][ T5964] __mt_dup+0xeb/0x1f0 [ 90.259971][ T5964] ? __pfx___mt_dup+0x10/0x10 [ 90.260013][ T5964] ? rcu_is_watching+0x12/0xc0 [ 90.260054][ T5964] dup_mmap+0x373/0x21d0 [ 90.260108][ T5964] ? do_raw_spin_lock+0x12c/0x2b0 [ 90.260157][ T5964] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 90.260200][ T5964] ? __pfx_dup_mmap+0x10/0x10 [ 90.260247][ T5964] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 90.260295][ T5964] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 90.260336][ T5964] ? __pfx___might_resched+0x10/0x10 [ 90.260367][ T5964] ? mm_init+0xd22/0x13a0 [ 90.260404][ T5964] copy_process+0x4081/0x7690 [ 90.260442][ T5964] ? __pfx___futex_wait+0x10/0x10 [ 90.260497][ T5964] ? __pfx_copy_process+0x10/0x10 [ 90.260548][ T5964] ? lock_release+0x201/0x2f0 [ 90.260592][ T5964] ? futex_private_hash_put+0x11c/0x300 [ 90.260633][ T5964] kernel_clone+0xfc/0x930 [ 90.260673][ T5964] ? __pfx_kernel_clone+0x10/0x10 [ 90.260725][ T5964] ? 0xffffffff81000000 [ 90.260756][ T5964] __do_sys_clone+0xce/0x120 [ 90.260798][ T5964] ? __pfx___do_sys_clone+0x10/0x10 [ 90.260839][ T5964] ? 0xffffffff81000000 [ 90.260867][ T5964] ? xfd_validate_state+0x61/0x180 [ 90.260922][ T5964] do_syscall_64+0xcd/0x490 [ 90.260965][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.260997][ T5964] RIP: 0033:0x7f1df798ebe9 [ 90.261020][ T5964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.261058][ T5964] RSP: 002b:00007f1df8733038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 90.261090][ T5964] RAX: ffffffffffffffda RBX: 00007f1df7bb6090 RCX: 00007f1df798ebe9 [ 90.261111][ T5964] RDX: 9999999999999999 RSI: 0000000000000004 RDI: 0000000000000000 [ 90.261131][ T5964] RBP: 00007f1df7a11e19 R08: 0000000000000009 R09: 0000000000000000 [ 90.261150][ T5964] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.261170][ T5964] R13: 00007f1df7bb6128 R14: 00007f1df7bb6090 R15: 00007fff281829e8 [ 90.261194][ T5964] ? 0xffffffff81000000 [ 90.261221][ T5964] [ 90.549823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 90.696031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.412492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 91.593444][ T5873] Bluetooth: hci3: command tx timeout [ 91.662716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.672658][ T5183] Bluetooth: hci1: command tx timeout [ 91.678124][ T5183] Bluetooth: hci2: command tx timeout [ 91.684067][ T5873] Bluetooth: hci0: command tx timeout [ 91.732750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.767490][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 92.063170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.068195][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.082181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.098474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.107064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.748724][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.213438][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.673672][ T5183] Bluetooth: hci3: command tx timeout [ 93.755218][ T5183] Bluetooth: hci2: command tx timeout [ 93.755240][ T51] Bluetooth: hci0: command tx timeout [ 93.755274][ T51] Bluetooth: hci1: command tx timeout [ 93.885817][ T6004] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.144195][ T51] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 94.144249][ T51] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 94.161212][ T51] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 94.161250][ T51] Bluetooth: hci2: adv larger than maximum supported [ 94.168602][ T51] Bluetooth: hci2: adv larger than maximum supported [ 94.175464][ T51] Bluetooth: hci2: Malformed LE Event: 0x0d [ 94.638870][ T5996] Zero length message leads to an empty skb [ 96.732880][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 97.385466][ T1218] cfg80211: failed to load regulatory.db [ 97.932982][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 98.148371][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 99.336287][ T6076] mmap: syz.3.29 (6076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.085201][ T6089] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.776352][ T6097] FAULT_INJECTION: forcing a failure. [ 100.776352][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 100.795686][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.1.32 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 100.795729][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.795744][ T6097] Call Trace: [ 100.795751][ T6097] [ 100.795760][ T6097] dump_stack_lvl+0x16c/0x1f0 [ 100.795793][ T6097] should_fail_ex+0x512/0x640 [ 100.795829][ T6097] should_failslab+0xc2/0x120 [ 100.795860][ T6097] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 100.795889][ T6097] ? __d_alloc+0x32/0xae0 [ 100.795919][ T6097] __d_alloc+0x32/0xae0 [ 100.795948][ T6097] d_alloc_pseudo+0x1c/0xc0 [ 100.795984][ T6097] alloc_file_pseudo+0xcf/0x230 [ 100.796019][ T6097] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 100.796058][ T6097] __shmem_file_setup+0x1a3/0x330 [ 100.796082][ T6097] shmem_zero_setup+0x93/0x1a0 [ 100.796110][ T6097] __mmap_region+0x2081/0x27b0 [ 100.796139][ T6097] ? __pfx___mmap_region+0x10/0x10 [ 100.796166][ T6097] ? rcu_is_watching+0x12/0xc0 [ 100.796191][ T6097] ? rcu_is_watching+0x12/0xc0 [ 100.796214][ T6097] ? trace_sched_exit_tp+0xd1/0x120 [ 100.796250][ T6097] ? __schedule+0x11a3/0x5de0 [ 100.796283][ T6097] ? __pfx___schedule+0x10/0x10 [ 100.796306][ T6097] ? futex_private_hash_put+0x112/0x300 [ 100.796332][ T6097] ? rcu_is_watching+0x12/0xc0 [ 100.796370][ T6097] ? trace_cap_capable+0x18d/0x200 [ 100.796394][ T6097] ? cap_capable+0xb3/0x250 [ 100.796418][ T6097] mmap_region+0x1ab/0x3f0 [ 100.796445][ T6097] ? __get_unmapped_area+0x267/0x440 [ 100.796480][ T6097] do_mmap+0xa3e/0x1210 [ 100.796515][ T6097] ? __pfx_do_mmap+0x10/0x10 [ 100.796548][ T6097] ? __pfx_down_write_killable+0x10/0x10 [ 100.796581][ T6097] ? do_writev+0x218/0x340 [ 100.796606][ T6097] vm_mmap_pgoff+0x29e/0x470 [ 100.796641][ T6097] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 100.796676][ T6097] ? __x64_sys_futex+0x1e0/0x4c0 [ 100.796713][ T6097] ? __x64_sys_futex+0x1e9/0x4c0 [ 100.796744][ T6097] ksys_mmap_pgoff+0x7d/0x5c0 [ 100.796776][ T6097] ? xfd_validate_state+0x61/0x180 [ 100.796810][ T6097] ? __pfx_do_writev+0x10/0x10 [ 100.796836][ T6097] __x64_sys_mmap+0x125/0x190 [ 100.796873][ T6097] do_syscall_64+0xcd/0x490 [ 100.796904][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.796928][ T6097] RIP: 0033:0x7f984f78ebe9 [ 100.796945][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.796967][ T6097] RSP: 002b:00007f9850528038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 100.796989][ T6097] RAX: ffffffffffffffda RBX: 00007f984f9b5fa0 RCX: 00007f984f78ebe9 [ 100.797004][ T6097] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 100.797018][ T6097] RBP: 00007f984f811e19 R08: 0000000000000401 R09: 0000000000008000 [ 100.797032][ T6097] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 100.797045][ T6097] R13: 00007f984f9b6038 R14: 00007f984f9b5fa0 R15: 00007ffc7b549ef8 [ 100.797067][ T6097] [ 102.652808][ T6109] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 105.559629][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 105.822416][ T6152] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.42'. [ 107.025515][ T6163] random: crng reseeded on system resumption [ 108.995377][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 109.571396][ T6199] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 110.251658][ T6200] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 110.513086][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 114.018333][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 114.620775][ T6260] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.66'. [ 117.660019][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 119.435405][ T6302] kexec: Could not allocate control_code_buffer [ 119.981045][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 120.001206][ T6327] vlan1: entered allmulticast mode [ 120.089749][ T6327] veth0_vlan: entered allmulticast mode [ 120.411766][ T6310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.431484][ T6310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.677800][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 120.701256][ T6310] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.720171][ T6310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.747372][ T6310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.864372][ T6310] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.922672][ T6310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.928815][ T6310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.942782][ T6310] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.960235][ T6310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.001381][ T6310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.183260][ T6310] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.352602][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.562432][ T6318] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 122.039430][ T6350] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.85'. [ 122.061375][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 122.798270][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.955797][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.032295][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.434549][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.553365][ T6369] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.89'. [ 124.131687][ T6362] zswap: compressor not available [ 124.872380][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.970258][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 125.033753][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.112271][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.515227][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.743117][ T6394] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.952606][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.067132][ T6421] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.99'. [ 127.112307][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.193194][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.373746][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 129.200302][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 131.728512][ T6477] Console: switching to colour VGA+ 80x25 [ 132.775806][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 134.532481][ T6500] netlink: 268 bytes leftover after parsing attributes in process `syz.0.116'. [ 134.768289][ T6516] FAULT_INJECTION: forcing a failure. [ 134.768289][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 134.802292][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.2.118 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 134.802328][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.802342][ T6516] Call Trace: [ 134.802351][ T6516] [ 134.802360][ T6516] dump_stack_lvl+0x16c/0x1f0 [ 134.802395][ T6516] should_fail_ex+0x512/0x640 [ 134.802430][ T6516] ? cache_create_net+0x9d/0x220 [ 134.802455][ T6516] should_failslab+0xc2/0x120 [ 134.802486][ T6516] __kmalloc_noprof+0xd2/0x510 [ 134.802516][ T6516] cache_create_net+0x9d/0x220 [ 134.802540][ T6516] ? __pfx_nfsd_net_init+0x10/0x10 [ 134.802566][ T6516] nfsd_export_init+0x62/0x250 [ 134.802593][ T6516] ? __pfx_nfsd_net_init+0x10/0x10 [ 134.802618][ T6516] nfsd_net_init+0x33/0x3d0 [ 134.802643][ T6516] ? __pfx_nfsd_net_init+0x10/0x10 [ 134.802669][ T6516] ops_init+0x1df/0x5f0 [ 134.802701][ T6516] setup_net+0x10f/0x380 [ 134.802730][ T6516] ? lockdep_init_map_type+0x5c/0x280 [ 134.802763][ T6516] ? __pfx_setup_net+0x10/0x10 [ 134.802794][ T6516] ? debug_mutex_init+0x37/0x70 [ 134.802817][ T6516] copy_net_ns+0x2a6/0x5f0 [ 134.802853][ T6516] create_new_namespaces+0x3ea/0xa90 [ 134.802882][ T6516] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 134.802910][ T6516] ksys_unshare+0x45b/0xa40 [ 134.802942][ T6516] ? __pfx_ksys_unshare+0x10/0x10 [ 134.802974][ T6516] ? xfd_validate_state+0x61/0x180 [ 134.803020][ T6516] __x64_sys_unshare+0x31/0x40 [ 134.803050][ T6516] do_syscall_64+0xcd/0x490 [ 134.803082][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.803106][ T6516] RIP: 0033:0x7fe62798ebe9 [ 134.803123][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.803145][ T6516] RSP: 002b:00007fe628732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.803167][ T6516] RAX: ffffffffffffffda RBX: 00007fe627bb5fa0 RCX: 00007fe62798ebe9 [ 134.803182][ T6516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 134.803195][ T6516] RBP: 00007fe627a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.803209][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.803222][ T6516] R13: 00007fe627bb6038 R14: 00007fe627bb5fa0 R15: 00007ffdc13fe7a8 [ 134.803244][ T6516] [ 135.805685][ T6500] syz.0.116 (6500) used greatest stack depth: 17992 bytes left [ 136.313393][ T6527] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.120'. [ 136.742857][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 137.488940][ T6535] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.121'. [ 137.878202][ T6539] netlink: 186 bytes leftover after parsing attributes in process `syz.2.122'. [ 138.308223][ T6535] Process accounting resumed [ 138.667140][ T6542] zswap: compressor 000 not available [ 142.730257][ T6596] mkiss: ax0: crc mode is auto. [ 142.850220][ T6600] syz.2.136 uses obsolete (PF_INET,SOCK_PACKET) [ 142.932638][ T6601] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.135'. [ 143.441234][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.449097][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.954090][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 147.165479][ T6653] openvswitch: netlink: Message has 4 unknown bytes. [ 147.777496][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.792403][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.799753][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.809063][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.818295][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.048006][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.149169][ T6663] chnl_net:caif_netlink_parms(): no params data found [ 149.318479][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.835200][ T5873] Bluetooth: hci4: command tx timeout [ 149.855281][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.003765][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 150.111986][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.377963][ T6663] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.389704][ T6663] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.458877][ T6663] bridge_slave_0: entered allmulticast mode [ 150.478162][ T6663] bridge_slave_0: entered promiscuous mode [ 150.518516][ T6663] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.541101][ T6663] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.577320][ T6663] bridge_slave_1: entered allmulticast mode [ 150.618335][ T6663] bridge_slave_1: entered promiscuous mode [ 150.866078][ T6663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.877677][ T6663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.988236][ T6718] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.157'. [ 151.121706][ T6663] team0: Port device team_slave_0 added [ 151.354177][ T6663] team0: Port device team_slave_1 added [ 151.519101][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.533122][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.603716][ T6663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.638244][ T12] bridge_slave_1: left allmulticast mode [ 151.644814][ T12] bridge_slave_1: left promiscuous mode [ 151.652850][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.721864][ T12] bridge_slave_0: left allmulticast mode [ 151.728173][ T12] bridge_slave_0: left promiscuous mode [ 151.734661][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.924129][ T5873] Bluetooth: hci4: command tx timeout [ 152.235583][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.312828][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.334509][ T12] bond0 (unregistering): Released all slaves [ 152.805767][ T6663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.826011][ T6663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.872769][ T6663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.413708][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.571967][ T6749] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.162'. [ 153.705571][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.840095][ T6663] hsr_slave_0: entered promiscuous mode [ 153.886093][ T6663] hsr_slave_1: entered promiscuous mode [ 153.919099][ T6663] debugfs: 'hsr0' already exists in 'hsr' [ 153.954487][ T6663] Cannot create hsr debugfs directory [ 153.992379][ T5873] Bluetooth: hci4: command tx timeout [ 154.559916][ T12] hsr_slave_0: left promiscuous mode [ 154.587165][ T12] hsr_slave_1: left promiscuous mode [ 154.621368][ T6768] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.164'. [ 154.634838][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.662473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.684279][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.702515][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.793854][ T12] veth1_macvtap: left promiscuous mode [ 154.809482][ T12] veth0_macvtap: left promiscuous mode [ 154.843390][ T12] veth1_vlan: left promiscuous mode [ 154.859899][ T12] veth0_vlan: left promiscuous mode [ 155.163612][ T12] team0 (unregistering): Port device team_slave_1 removed [ 155.189898][ T6774] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 155.210883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 155.847245][ T6663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.926801][ T6663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.975604][ T6787] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.167'. [ 156.012588][ T6663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.037949][ T6663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.072292][ T5873] Bluetooth: hci4: command tx timeout [ 156.515184][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 156.705443][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.916918][ T6663] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.937680][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.944863][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.156723][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.164237][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.501986][ T6823] process 'syz.3.170' launched './file0' with NULL argv: empty string added [ 157.807585][ T6823] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 157.830910][ T6823] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 157.850690][ T6663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.144791][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 158.197260][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 158.744076][ T6663] veth0_vlan: entered promiscuous mode [ 158.806784][ T6663] veth1_vlan: entered promiscuous mode [ 158.929502][ T6863] mmap: syz.3.175 (6863): VmData 54300672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 158.967672][ T6863] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.175'. [ 159.099297][ T6663] veth0_macvtap: entered promiscuous mode [ 159.241011][ T6663] veth1_macvtap: entered promiscuous mode [ 159.284159][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.297654][ T6663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.342905][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.404149][ T3175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.460913][ T3175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.511719][ T3175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.966541][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.997846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.042439][ T31] audit: type=1800 audit(1755506602.162:2): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.177" name="version" dev="configfs" ino=13531 res=0 errno=0 [ 160.462836][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.502472][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.703174][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 162.484885][ T6927] netlink: 'syz.3.183': attribute type 29 has an invalid length. [ 162.492961][ T6927] netlink: 'syz.3.183': attribute type 30 has an invalid length. [ 162.500704][ T6927] netlink: 'syz.3.183': attribute type 31 has an invalid length. [ 162.534278][ T6927] netlink: 'syz.3.183': attribute type 32 has an invalid length. [ 162.639491][ T6927] netlink: 'syz.3.183': attribute type 33 has an invalid length. [ 162.652276][ T6927] netlink: 'syz.3.183': attribute type 35 has an invalid length. [ 162.675687][ T6927] netlink: 'syz.3.183': attribute type 37 has an invalid length. [ 162.761608][ T6927] netlink: 18 bytes leftover after parsing attributes in process `syz.3.183'. [ 164.410423][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 166.174954][ T6991] vivid-003: ================= START STATUS ================= [ 166.183171][ T6991] vivid-003: Radio HW Seek Mode: Bounded [ 166.191053][ T6991] vivid-003: Radio Programmable HW Seek: false [ 166.198927][ T6991] vivid-003: RDS Rx I/O Mode: Block I/O [ 166.206456][ T6991] vivid-003: Generate RBDS Instead of RDS: false [ 166.213341][ T6991] vivid-003: RDS Reception: true [ 166.218481][ T6991] vivid-003: RDS Program Type: 0 inactive [ 166.224378][ T6991] vivid-003: RDS PS Name: inactive [ 166.229843][ T6991] vivid-003: RDS Radio Text: inactive [ 166.235697][ T6991] vivid-003: RDS Traffic Announcement: false inactive [ 166.324877][ T6991] vivid-003: RDS Traffic Program: false inactive [ 166.331430][ T6991] vivid-003: RDS Music: false inactive [ 166.341823][ T6991] vivid-003: ================== END STATUS ================== [ 167.143833][ T7003] random: crng reseeded on system resumption [ 167.228846][ T7013] random: crng reseeded on system resumption [ 168.095654][ T7035] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 168.192736][ T7037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 169.115807][ T7030] Process accounting paused [ 169.663461][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 169.701961][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 169.780492][ T7067] FAULT_INJECTION: forcing a failure. [ 169.780492][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 169.863613][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.4.210 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 169.863649][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.863663][ T7067] Call Trace: [ 169.863670][ T7067] [ 169.863678][ T7067] dump_stack_lvl+0x16c/0x1f0 [ 169.863712][ T7067] should_fail_ex+0x512/0x640 [ 169.863748][ T7067] should_failslab+0xc2/0x120 [ 169.863779][ T7067] __kmalloc_cache_noprof+0x6a/0x3e0 [ 169.863803][ T7067] ? __debugfs_file_get+0x2ad/0x840 [ 169.863841][ T7067] __debugfs_file_get+0x2ad/0x840 [ 169.863876][ T7067] ? __pfx___debugfs_file_get+0x10/0x10 [ 169.863911][ T7067] ? __pfx_apparmor_file_open+0x10/0x10 [ 169.863937][ T7067] ? path_get+0x61/0x80 [ 169.863967][ T7067] ? rcu_is_watching+0x12/0xc0 [ 169.863993][ T7067] full_proxy_open_short+0x4b/0x180 [ 169.864016][ T7067] do_dentry_open+0x982/0x1530 [ 169.864045][ T7067] ? __pfx_full_proxy_open_short+0x10/0x10 [ 169.864071][ T7067] vfs_open+0x82/0x3f0 [ 169.864106][ T7067] path_openat+0x1de4/0x2cb0 [ 169.864137][ T7067] ? __pfx_path_openat+0x10/0x10 [ 169.864167][ T7067] do_filp_open+0x20b/0x470 [ 169.864194][ T7067] ? __pfx_do_filp_open+0x10/0x10 [ 169.864231][ T7067] ? alloc_fd+0x471/0x7d0 [ 169.864260][ T7067] do_sys_openat2+0x11b/0x1d0 [ 169.864295][ T7067] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.864336][ T7067] __x64_sys_openat+0x174/0x210 [ 169.864372][ T7067] ? __pfx___x64_sys_openat+0x10/0x10 [ 169.864414][ T7067] do_syscall_64+0xcd/0x490 [ 169.864452][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.864479][ T7067] RIP: 0033:0x7fc31e38ebe9 [ 169.864504][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.864526][ T7067] RSP: 002b:00007fc31c5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.864554][ T7067] RAX: ffffffffffffffda RBX: 00007fc31e5b5fa0 RCX: 00007fc31e38ebe9 [ 169.864575][ T7067] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 169.864595][ T7067] RBP: 00007fc31e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 169.864614][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.864632][ T7067] R13: 00007fc31e5b6038 R14: 00007fc31e5b5fa0 R15: 00007ffed439f6e8 [ 169.864660][ T7067] [ 170.672075][ T7078] FAULT_INJECTION: forcing a failure. [ 170.672075][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 170.714572][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.4.211 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 170.714622][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.714642][ T7078] Call Trace: [ 170.714652][ T7078] [ 170.714663][ T7078] dump_stack_lvl+0x16c/0x1f0 [ 170.714710][ T7078] should_fail_ex+0x512/0x640 [ 170.714759][ T7078] should_failslab+0xc2/0x120 [ 170.714802][ T7078] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 170.714840][ T7078] ? security_inode_alloc+0x3b/0x2b0 [ 170.714879][ T7078] security_inode_alloc+0x3b/0x2b0 [ 170.714914][ T7078] inode_init_always_gfp+0xce4/0x1030 [ 170.714953][ T7078] alloc_inode+0x86/0x240 [ 170.714999][ T7078] sock_alloc+0x40/0x280 [ 170.715044][ T7078] __sock_create+0xc1/0x8d0 [ 170.715076][ T7078] __sys_socket+0x14d/0x260 [ 170.715107][ T7078] ? __pfx___sys_socket+0x10/0x10 [ 170.715150][ T7078] ? xfd_validate_state+0x61/0x180 [ 170.715201][ T7078] __x64_sys_socket+0x72/0xb0 [ 170.715230][ T7078] do_syscall_64+0xcd/0x490 [ 170.715273][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.715304][ T7078] RIP: 0033:0x7fc31e38ebe9 [ 170.715328][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.715357][ T7078] RSP: 002b:00007fc31c5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 170.715386][ T7078] RAX: ffffffffffffffda RBX: 00007fc31e5b5fa0 RCX: 00007fc31e38ebe9 [ 170.715407][ T7078] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 170.715426][ T7078] RBP: 00007fc31e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.715446][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.715465][ T7078] R13: 00007fc31e5b6038 R14: 00007fc31e5b5fa0 R15: 00007ffed439f6e8 [ 170.715497][ T7078] [ 170.715524][ T7078] socket: no more sockets [ 170.960249][ T7087] __vm_enough_memory: pid: 7087, comm: syz.3.215, bytes: 4398046511104 not enough memory for the allocation [ 170.979195][ T7085] kAFS: unparsable volume name [ 171.119654][ T7089] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.213'. [ 171.385162][ T7100] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.217'. [ 172.141186][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 172.543796][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 172.698790][ T7143] FAULT_INJECTION: forcing a failure. [ 172.698790][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 172.711721][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.3.226 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 172.711756][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.711770][ T7143] Call Trace: [ 172.711777][ T7143] [ 172.711785][ T7143] dump_stack_lvl+0x16c/0x1f0 [ 172.711818][ T7143] should_fail_ex+0x512/0x640 [ 172.711853][ T7143] ? tomoyo_encode2+0x100/0x3e0 [ 172.711885][ T7143] should_failslab+0xc2/0x120 [ 172.711916][ T7143] __kmalloc_noprof+0xd2/0x510 [ 172.711954][ T7143] tomoyo_encode2+0x100/0x3e0 [ 172.711986][ T7143] ? tomoyo_check_open_permission+0x1e1/0x3c0 [ 172.712034][ T7143] tomoyo_encode+0x29/0x50 [ 172.712065][ T7143] tomoyo_realpath_from_path+0x18f/0x6e0 [ 172.712101][ T7143] ? tomoyo_profile+0x47/0x60 [ 172.712122][ T7143] tomoyo_path_perm+0x274/0x460 [ 172.712150][ T7143] ? tomoyo_path_perm+0x260/0x460 [ 172.712194][ T7143] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 172.712248][ T7143] ? __pfx_ima_file_check+0x10/0x10 [ 172.712278][ T7143] ? hook_file_truncate+0xc7/0x250 [ 172.712323][ T7143] security_file_truncate+0x84/0x1e0 [ 172.712368][ T7143] path_openat+0xc10/0x2cb0 [ 172.712409][ T7143] ? __pfx_path_openat+0x10/0x10 [ 172.712451][ T7143] do_filp_open+0x20b/0x470 [ 172.712487][ T7143] ? __pfx_do_filp_open+0x10/0x10 [ 172.712535][ T7143] ? alloc_fd+0x471/0x7d0 [ 172.712571][ T7143] do_sys_openat2+0x11b/0x1d0 [ 172.712620][ T7143] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.712678][ T7143] __x64_sys_openat+0x174/0x210 [ 172.712727][ T7143] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.712784][ T7143] do_syscall_64+0xcd/0x490 [ 172.712821][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.712845][ T7143] RIP: 0033:0x7f1dbf98ebe9 [ 172.712864][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.712887][ T7143] RSP: 002b:00007f1dc07c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.712908][ T7143] RAX: ffffffffffffffda RBX: 00007f1dbfbb5fa0 RCX: 00007f1dbf98ebe9 [ 172.712923][ T7143] RDX: 0000000000101202 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 172.712938][ T7143] RBP: 00007f1dbfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.712962][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.712976][ T7143] R13: 00007f1dbfbb6038 R14: 00007f1dbfbb5fa0 R15: 00007fff36026c78 [ 172.712998][ T7143] [ 173.032745][ T7143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.217033][ T7145] ICMPv6: process `syz.0.227' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 173.388946][ T7157] netlink: 2468 bytes leftover after parsing attributes in process `syz.4.228'. [ 173.713798][ T7152] ptrace attach of ""[7155] was attempted by "./syz-executor exec"[7152] [ 174.407201][ T7187] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.232'. [ 174.448368][ T7188] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.231'. [ 175.578665][ T7206] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 176.049261][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 178.346919][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 179.052492][ T7286] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.243'. [ 183.331926][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 183.569355][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 184.628428][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.258'. [ 184.782284][ T7385] bridge_slave_1: left allmulticast mode [ 184.798660][ T7385] bridge_slave_1: left promiscuous mode [ 184.891730][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.054290][ T7385] bridge_slave_0: left allmulticast mode [ 185.060137][ T7385] bridge_slave_0: left promiscuous mode [ 185.070107][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.985606][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 187.277209][ T7406] FAULT_INJECTION: forcing a failure. [ 187.277209][ T7406] name failslab, interval 1, probability 0, space 0, times 0 [ 187.322389][ T7406] CPU: 1 UID: 0 PID: 7406 Comm: syz.3.260 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 187.322426][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.322440][ T7406] Call Trace: [ 187.322448][ T7406] [ 187.322457][ T7406] dump_stack_lvl+0x16c/0x1f0 [ 187.322490][ T7406] should_fail_ex+0x512/0x640 [ 187.322526][ T7406] should_failslab+0xc2/0x120 [ 187.322558][ T7406] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 187.322587][ T7406] ? alloc_inode+0x64/0x240 [ 187.322621][ T7406] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 187.322646][ T7406] alloc_inode+0x64/0x240 [ 187.322678][ T7406] new_inode+0x22/0x1c0 [ 187.322712][ T7406] debugfs_create_dir+0xdd/0x5f0 [ 187.322740][ T7406] ieee80211_debugfs_recreate_netdev+0x22b/0x17e0 [ 187.322770][ T7406] ? rcu_is_watching+0x12/0xc0 [ 187.322798][ T7406] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 187.322834][ T7406] ? trace_event_printf+0x90/0x160 [ 187.322870][ T7406] ? __pfx___might_resched+0x10/0x10 [ 187.322892][ T7406] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 187.322920][ T7406] ? skb_dequeue+0x126/0x180 [ 187.322941][ T7406] drv_remove_interface+0x2bf/0x640 [ 187.322978][ T7406] ieee80211_do_stop+0x18a6/0x2520 [ 187.323001][ T7406] ? __pfx___mutex_trylock_common+0x10/0x10 [ 187.323040][ T7406] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 187.323068][ T7406] ? do_raw_spin_lock+0x12c/0x2b0 [ 187.323107][ T7406] ? ieee80211_stop+0x116/0x320 [ 187.323129][ T7406] ? rcu_is_watching+0x12/0xc0 [ 187.323153][ T7406] ? rcu_is_watching+0x12/0xc0 [ 187.323176][ T7406] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 187.323213][ T7406] ? __pfx_ieee80211_stop+0x10/0x10 [ 187.323237][ T7406] ieee80211_stop+0x169/0x320 [ 187.323261][ T7406] ? __pfx_ieee80211_stop+0x10/0x10 [ 187.323284][ T7406] __dev_close_many+0x29b/0x760 [ 187.323322][ T7406] ? __pfx___dev_close_many+0x10/0x10 [ 187.323361][ T7406] ? rcu_is_watching+0x12/0xc0 [ 187.323386][ T7406] netif_close_many+0x233/0x630 [ 187.323423][ T7406] ? nl80211_del_interface+0xb9/0x190 [ 187.323454][ T7406] ? rcu_is_watching+0x12/0xc0 [ 187.323476][ T7406] ? lock_release+0x201/0x2f0 [ 187.323506][ T7406] ? __pfx_netif_close_many+0x10/0x10 [ 187.323544][ T7406] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 187.323579][ T7406] netif_close+0x17f/0x230 [ 187.323615][ T7406] ? __pfx_netif_close+0x10/0x10 [ 187.323656][ T7406] dev_close+0xaa/0x240 [ 187.323689][ T7406] nl80211_del_interface+0xec/0x190 [ 187.323722][ T7406] genl_family_rcv_msg_doit+0x206/0x2f0 [ 187.323760][ T7406] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.323802][ T7406] ? bpf_lsm_capable+0x9/0x10 [ 187.323830][ T7406] ? security_capable+0x7e/0x260 [ 187.323853][ T7406] ? ns_capable+0xd7/0x110 [ 187.323878][ T7406] genl_rcv_msg+0x55c/0x800 [ 187.323914][ T7406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.323949][ T7406] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 187.323972][ T7406] ? __pfx_nl80211_del_interface+0x10/0x10 [ 187.324002][ T7406] ? __pfx_nl80211_post_doit+0x10/0x10 [ 187.324039][ T7406] netlink_rcv_skb+0x155/0x420 [ 187.324071][ T7406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.324107][ T7406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.324143][ T7406] ? netlink_deliver_tap+0x1ae/0xd30 [ 187.324173][ T7406] genl_rcv+0x28/0x40 [ 187.324204][ T7406] netlink_unicast+0x5aa/0x870 [ 187.324236][ T7406] ? __pfx_netlink_unicast+0x10/0x10 [ 187.324267][ T7406] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 187.324302][ T7406] netlink_sendmsg+0x8d1/0xdd0 [ 187.324334][ T7406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.324367][ T7406] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 187.324393][ T7406] ____sys_sendmsg+0xa95/0xc70 [ 187.324430][ T7406] ? copy_msghdr_from_user+0x10a/0x160 [ 187.324460][ T7406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.324495][ T7406] ? preempt_schedule_thunk+0x16/0x30 [ 187.324529][ T7406] ? try_to_wake_up+0xa67/0x1870 [ 187.324552][ T7406] ___sys_sendmsg+0x134/0x1d0 [ 187.324581][ T7406] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.324609][ T7406] ? futex_private_hash_put+0x11c/0x300 [ 187.324640][ T7406] ? rcu_is_watching+0x12/0xc0 [ 187.324671][ T7406] __sys_sendmsg+0x16d/0x220 [ 187.324700][ T7406] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.324728][ T7406] ? __x64_sys_futex+0x1e0/0x4c0 [ 187.324764][ T7406] do_syscall_64+0xcd/0x490 [ 187.324795][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.324823][ T7406] RIP: 0033:0x7f1dbf98ebe9 [ 187.324841][ T7406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.324863][ T7406] RSP: 002b:00007f1dc07c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.324886][ T7406] RAX: ffffffffffffffda RBX: 00007f1dbfbb5fa0 RCX: 00007f1dbf98ebe9 [ 187.324901][ T7406] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000006 [ 187.324914][ T7406] RBP: 00007f1dbfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 187.324928][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.324942][ T7406] R13: 00007f1dbfbb6038 R14: 00007f1dbfbb5fa0 R15: 00007fff36026c78 [ 187.324963][ T7406] [ 187.325029][ T7406] debugfs: out of free dentries, can not create directory 'stations' [ 187.628283][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 187.704071][ T7412] netlink: 93 bytes leftover after parsing attributes in process `syz.0.261'. [ 189.253449][ T7443] ICMPv6: process `syz.3.270' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 190.789261][ T7470] random: crng reseeded on system resumption [ 190.950589][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 191.678260][ T7453] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 192.248858][ T7494] netlink: 10 bytes leftover after parsing attributes in process `syz.4.278'. [ 192.532567][ T7503] random: crng reseeded on system resumption [ 192.868350][ T7507] netlink: 186 bytes leftover after parsing attributes in process `syz.4.281'. [ 193.161671][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 198.177909][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 199.641762][ T7606] netlink: 268 bytes leftover after parsing attributes in process `syz.4.301'. [ 201.832225][ T5873] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 204.882771][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.889292][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.184003][ T7718] FAULT_INJECTION: forcing a failure. [ 206.184003][ T7718] name failslab, interval 1, probability 0, space 0, times 0 [ 206.236311][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.4.315 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 206.236361][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.236384][ T7718] Call Trace: [ 206.236394][ T7718] [ 206.236406][ T7718] dump_stack_lvl+0x16c/0x1f0 [ 206.236455][ T7718] should_fail_ex+0x512/0x640 [ 206.236504][ T7718] should_failslab+0xc2/0x120 [ 206.236547][ T7718] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 206.236600][ T7718] ? ipv6_sysctl_net_init+0x30/0x2b0 [ 206.236636][ T7718] ? lockdep_init_map_type+0x5c/0x280 [ 206.236682][ T7718] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 206.236719][ T7718] kmemdup_noprof+0x29/0x60 [ 206.236782][ T7718] ipv6_sysctl_net_init+0x30/0x2b0 [ 206.236818][ T7718] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 206.236852][ T7718] ops_init+0x1df/0x5f0 [ 206.236895][ T7718] setup_net+0x10f/0x380 [ 206.236934][ T7718] ? lockdep_init_map_type+0x5c/0x280 [ 206.236977][ T7718] ? __pfx_setup_net+0x10/0x10 [ 206.237020][ T7718] ? debug_mutex_init+0x37/0x70 [ 206.237051][ T7718] copy_net_ns+0x2a6/0x5f0 [ 206.237099][ T7718] create_new_namespaces+0x3ea/0xa90 [ 206.237139][ T7718] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 206.237176][ T7718] ksys_unshare+0x45b/0xa40 [ 206.237220][ T7718] ? __pfx_ksys_unshare+0x10/0x10 [ 206.237262][ T7718] ? xfd_validate_state+0x61/0x180 [ 206.237316][ T7718] __x64_sys_unshare+0x31/0x40 [ 206.237359][ T7718] do_syscall_64+0xcd/0x490 [ 206.237403][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.237434][ T7718] RIP: 0033:0x7fc31e38ebe9 [ 206.237458][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.237506][ T7718] RSP: 002b:00007fc31c5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 206.237536][ T7718] RAX: ffffffffffffffda RBX: 00007fc31e5b5fa0 RCX: 00007fc31e38ebe9 [ 206.237557][ T7718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 206.237575][ T7718] RBP: 00007fc31e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 206.237600][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.237618][ T7718] R13: 00007fc31e5b6038 R14: 00007fc31e5b5fa0 R15: 00007ffed439f6e8 [ 206.237649][ T7718] [ 209.156605][ T7752] nbd: illegal input index -5 [ 209.170232][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 209.185261][ T5860] Process accounting resumed [ 209.222558][ T7754] netlink: 93 bytes leftover after parsing attributes in process `syz.2.323'. [ 210.096195][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.110975][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.118636][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.126559][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.134556][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.450283][ T7758] chnl_net:caif_netlink_parms(): no params data found [ 212.232420][ T5873] Bluetooth: hci3: command tx timeout [ 212.459181][ T7758] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.516912][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.615224][ T7758] bridge_slave_0: entered allmulticast mode [ 212.648222][ T7758] bridge_slave_0: entered promiscuous mode [ 212.677323][ T7758] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.745557][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.802424][ T7758] bridge_slave_1: entered allmulticast mode [ 212.843827][ T7758] bridge_slave_1: entered promiscuous mode [ 213.222178][ T7758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.261705][ T7758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.559054][ T7758] team0: Port device team_slave_0 added [ 213.585142][ T7758] team0: Port device team_slave_1 added [ 214.264594][ T7758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.272052][ T7758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.312303][ T5873] Bluetooth: hci3: command tx timeout [ 214.455548][ T7758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.499818][ T7758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.532600][ T7758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.702314][ T7758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.008005][ T7758] hsr_slave_0: entered promiscuous mode [ 215.053331][ T7758] hsr_slave_1: entered promiscuous mode [ 215.059598][ T7758] debugfs: 'hsr0' already exists in 'hsr' [ 215.109365][ T7758] Cannot create hsr debugfs directory [ 216.393223][ T5873] Bluetooth: hci3: command tx timeout [ 216.474599][ T7758] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.571805][ T7758] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.595287][ T7758] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.627103][ T7758] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.933732][ T7758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.968645][ T7758] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.038222][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.045469][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.117923][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.125136][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.855680][ T7758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.241470][ T7881] netlink: 93 bytes leftover after parsing attributes in process `syz.0.343'. [ 218.475554][ T5873] Bluetooth: hci3: command tx timeout [ 218.717469][ T7758] veth0_vlan: entered promiscuous mode [ 218.766813][ T7758] veth1_vlan: entered promiscuous mode [ 218.903491][ T7758] veth0_macvtap: entered promiscuous mode [ 218.938989][ T7758] veth1_macvtap: entered promiscuous mode [ 219.034911][ T7758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.055631][ T7758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.184829][ T1140] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.203338][ T1140] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.349518][ T1140] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.387085][ T1140] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.595512][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.612357][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.760310][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.802273][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.624800][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.324'. [ 220.723387][ T7917] netlink: 93 bytes leftover after parsing attributes in process `syz.5.324'. [ 220.953796][ T7927] FAULT_INJECTION: forcing a failure. [ 220.953796][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 220.966855][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.0.353 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 220.966899][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.966918][ T7927] Call Trace: [ 220.966927][ T7927] [ 220.966939][ T7927] dump_stack_lvl+0x16c/0x1f0 [ 220.966983][ T7927] should_fail_ex+0x512/0x640 [ 220.967029][ T7927] should_failslab+0xc2/0x120 [ 220.967072][ T7927] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 220.967110][ T7927] ? getname_flags.part.0+0x4c/0x550 [ 220.967160][ T7927] getname_flags.part.0+0x4c/0x550 [ 220.967209][ T7927] getname_flags+0x93/0xf0 [ 220.967242][ T7927] __do_sys_newstat+0x8a/0x130 [ 220.967286][ T7927] ? __pfx___do_sys_newstat+0x10/0x10 [ 220.967342][ T7927] ? xfd_validate_state+0x61/0x180 [ 220.967390][ T7927] ? rcu_is_watching+0x12/0xc0 [ 220.967433][ T7927] do_syscall_64+0xcd/0x490 [ 220.967476][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.967509][ T7927] RIP: 0033:0x7f1df798ebe9 [ 220.967532][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.967560][ T7927] RSP: 002b:00007f1df8754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 220.967589][ T7927] RAX: ffffffffffffffda RBX: 00007f1df7bb5fa0 RCX: 00007f1df798ebe9 [ 220.967609][ T7927] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000240 [ 220.967628][ T7927] RBP: 00007f1df7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 220.967645][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.967662][ T7927] R13: 00007f1df7bb6038 R14: 00007f1df7bb5fa0 R15: 00007fff281829e8 [ 220.967691][ T7927] [ 221.212240][ T7925] netlink: 338 bytes leftover after parsing attributes in process `syz.4.351'. [ 221.259522][ T7922] netlink: 338 bytes leftover after parsing attributes in process `syz.4.351'. [ 221.773930][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 222.142470][ T7945] netlink: 93 bytes leftover after parsing attributes in process `syz.0.354'. [ 223.035780][ T7956] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 225.823230][ T8004] nbd: must specify an index to disconnect [ 226.684000][ T8026] Unable to find swap-space signature [ 226.789350][ T8026] Unable to find swap-space signature [ 227.002239][ T8026] Unable to find swap-space signature [ 227.049940][ T8026] Unable to find swap-space signature [ 228.416615][ T8061] netlink: 2468 bytes leftover after parsing attributes in process `syz.4.384'. [ 229.367937][ T8070] bridge0: port 3(team0) entered blocking state [ 229.415623][ T8070] bridge0: port 3(team0) entered disabled state [ 229.436674][ T8070] team0: entered allmulticast mode [ 229.443896][ T8070] team_slave_0: entered allmulticast mode [ 229.453976][ T8070] team_slave_1: entered allmulticast mode [ 229.479496][ T8081] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 229.530627][ T8070] team0: entered promiscuous mode [ 229.536946][ T8070] team_slave_0: entered promiscuous mode [ 229.544961][ T8070] team_slave_1: entered promiscuous mode [ 229.555365][ T8070] bridge0: port 3(team0) entered blocking state [ 229.561845][ T8070] bridge0: port 3(team0) entered forwarding state [ 230.300050][ T8089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 230.774179][ T8097] FAULT_INJECTION: forcing a failure. [ 230.774179][ T8097] name failslab, interval 1, probability 0, space 0, times 0 [ 230.815749][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: syz.2.393 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 230.815783][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.815797][ T8097] Call Trace: [ 230.815804][ T8097] [ 230.815812][ T8097] dump_stack_lvl+0x16c/0x1f0 [ 230.815844][ T8097] should_fail_ex+0x512/0x640 [ 230.815878][ T8097] should_failslab+0xc2/0x120 [ 230.815909][ T8097] __kmalloc_cache_noprof+0x6a/0x3e0 [ 230.815932][ T8097] ? sctp_auth_init_hmacs+0xf2/0x440 [ 230.815963][ T8097] sctp_auth_init_hmacs+0xf2/0x440 [ 230.815990][ T8097] ? kasan_save_track+0x14/0x30 [ 230.816017][ T8097] sctp_auth_init+0x90/0x570 [ 230.816045][ T8097] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 230.816082][ T8097] sctp_setsockopt+0xa371/0xb870 [ 230.816115][ T8097] ? lock_release+0x201/0x2f0 [ 230.816146][ T8097] ? __pfx_sctp_setsockopt+0x10/0x10 [ 230.816177][ T8097] ? rcu_is_watching+0x12/0xc0 [ 230.816202][ T8097] ? aa_sock_opt_perm+0xfd/0x1c0 [ 230.816222][ T8097] ? sock_common_setsockopt+0x2e/0xf0 [ 230.816257][ T8097] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 230.816293][ T8097] do_sock_setsockopt+0xf3/0x1d0 [ 230.816328][ T8097] __sys_setsockopt+0x120/0x1a0 [ 230.816357][ T8097] __x64_sys_setsockopt+0xbd/0x160 [ 230.816390][ T8097] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 230.816426][ T8097] do_syscall_64+0xcd/0x490 [ 230.816456][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.816479][ T8097] RIP: 0033:0x7fe62798ebe9 [ 230.816496][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.816518][ T8097] RSP: 002b:00007fe628732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.816539][ T8097] RAX: ffffffffffffffda RBX: 00007fe627bb5fa0 RCX: 00007fe62798ebe9 [ 230.816554][ T8097] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 230.816567][ T8097] RBP: 00007fe627a11e19 R08: 0000000000000008 R09: 0000000000000000 [ 230.816580][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.816594][ T8097] R13: 00007fe627bb6038 R14: 00007fe627bb5fa0 R15: 00007ffdc13fe7a8 [ 230.816615][ T8097] [ 231.044561][ T8101] KVM: debugfs: duplicate directory 8101-3 [ 234.006499][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'. [ 234.165582][ T8163] netlink: 93 bytes leftover after parsing attributes in process `syz.0.405'. [ 234.978473][ T8171] sctp: [Deprecated]: syz.0.407 (pid 8171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.978473][ T8171] Use struct sctp_sack_info instead [ 235.216955][ T8194] netlink: 314 bytes leftover after parsing attributes in process `syz.5.410'. [ 235.842383][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 235.885639][ T8215] netlink: 93 bytes leftover after parsing attributes in process `syz.0.413'. [ 236.479109][ T8233] capability: warning: `syz.4.416' uses 32-bit capabilities (legacy support in use) [ 236.810115][ T8242] sctp: [Deprecated]: syz.0.417 (pid 8242) Use of int in max_burst socket option deprecated. [ 236.810115][ T8242] Use struct sctp_assoc_value instead [ 237.328357][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.420'. [ 237.442455][ T8257] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 237.542096][ T8251] netlink: 93 bytes leftover after parsing attributes in process `syz.5.420'. [ 237.720799][ T8264] blktrace: Concurrent blktraces are not allowed on ram7 [ 238.057535][ T8258] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 238.510357][ T8279] FAULT_INJECTION: forcing a failure. [ 238.510357][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 238.583641][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.0.425 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 238.583685][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.583704][ T8279] Call Trace: [ 238.583714][ T8279] [ 238.583724][ T8279] dump_stack_lvl+0x16c/0x1f0 [ 238.583775][ T8279] should_fail_ex+0x512/0x640 [ 238.583825][ T8279] should_failslab+0xc2/0x120 [ 238.583867][ T8279] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 238.583904][ T8279] ? security_inode_alloc+0x3b/0x2b0 [ 238.583938][ T8279] ? sk_prot_alloc+0x60/0x2a0 [ 238.583987][ T8279] sk_prot_alloc+0x60/0x2a0 [ 238.584036][ T8279] sk_alloc+0x36/0xc20 [ 238.584073][ T8279] smc_create+0x114/0x2a0 [ 238.584104][ T8279] __sock_create+0x338/0x8d0 [ 238.584137][ T8279] __sys_socket+0x14d/0x260 [ 238.584168][ T8279] ? __pfx___sys_socket+0x10/0x10 [ 238.584198][ T8279] ? xfd_validate_state+0x61/0x180 [ 238.584249][ T8279] __x64_sys_socket+0x72/0xb0 [ 238.584279][ T8279] do_syscall_64+0xcd/0x490 [ 238.584322][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.584354][ T8279] RIP: 0033:0x7f1df798ebe9 [ 238.584377][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.584407][ T8279] RSP: 002b:00007f1df8754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 238.584437][ T8279] RAX: ffffffffffffffda RBX: 00007f1df7bb5fa0 RCX: 00007f1df798ebe9 [ 238.584457][ T8279] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 238.584477][ T8279] RBP: 00007f1df7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 238.584501][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.584520][ T8279] R13: 00007f1df7bb6038 R14: 00007f1df7bb5fa0 R15: 00007fff281829e8 [ 238.584548][ T8279] [ 238.893339][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.426'. [ 239.105308][ T8282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.124205][ T8282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.156230][ T8282] bond0 (unregistering): Released all slaves [ 239.183318][ T8287] FAULT_INJECTION: forcing a failure. [ 239.183318][ T8287] name failslab, interval 1, probability 0, space 0, times 0 [ 239.210142][ T8287] CPU: 1 UID: 0 PID: 8287 Comm: syz.4.427 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 239.210187][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.210207][ T8287] Call Trace: [ 239.210217][ T8287] [ 239.210229][ T8287] dump_stack_lvl+0x16c/0x1f0 [ 239.210275][ T8287] should_fail_ex+0x512/0x640 [ 239.210323][ T8287] should_failslab+0xc2/0x120 [ 239.210368][ T8287] __kmalloc_cache_noprof+0x6a/0x3e0 [ 239.210401][ T8287] ? percpu_ref_init+0xec/0x410 [ 239.210444][ T8287] ? __pfx_css_release+0x10/0x10 [ 239.210487][ T8287] percpu_ref_init+0xec/0x410 [ 239.210527][ T8287] ? init_and_link_css+0x32c/0x700 [ 239.210563][ T8287] cgroup_apply_control_enable+0x50b/0xbb0 [ 239.210619][ T8287] cgroup_mkdir+0x5e7/0x11f0 [ 239.210672][ T8287] ? __pfx_cgroup_mkdir+0x10/0x10 [ 239.210723][ T8287] kernfs_iop_mkdir+0x10e/0x190 [ 239.210770][ T8287] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 239.210814][ T8287] vfs_mkdir+0x593/0x8c0 [ 239.210846][ T8287] do_mkdirat+0x304/0x3e0 [ 239.210887][ T8287] ? __pfx_do_mkdirat+0x10/0x10 [ 239.210926][ T8287] ? getname_flags.part.0+0x1c5/0x550 [ 239.210990][ T8287] __x64_sys_mkdir+0xef/0x140 [ 239.211030][ T8287] do_syscall_64+0xcd/0x490 [ 239.211074][ T8287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.211109][ T8287] RIP: 0033:0x7fc31e38ebe9 [ 239.211134][ T8287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.211165][ T8287] RSP: 002b:00007fc31c5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 239.211196][ T8287] RAX: ffffffffffffffda RBX: 00007fc31e5b6090 RCX: 00007fc31e38ebe9 [ 239.211217][ T8287] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 239.211237][ T8287] RBP: 00007fc31e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 239.211256][ T8287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.211275][ T8287] R13: 00007fc31e5b6128 R14: 00007fc31e5b6090 R15: 00007ffed439f6e8 [ 239.211306][ T8287] [ 239.638332][ T1218] ------------[ cut here ]------------ [ 239.644113][ T1218] WARNING: CPU: 1 PID: 1218 at kernel/cgroup/rstat.c:488 css_rstat_exit+0x368/0x470 [ 239.653884][ T1218] Modules linked in: [ 239.657851][ T1218] CPU: 1 UID: 0 PID: 1218 Comm: kworker/1:2 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 239.670374][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.680825][ T1218] Workqueue: cgroup_destroy css_free_rwork_fn [ 239.687395][ T1218] RIP: 0010:css_rstat_exit+0x368/0x470 [ 239.693325][ T1218] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 239.713268][ T1218] RSP: 0000:ffffc9000440fbc0 EFLAGS: 00010293 [ 239.719504][ T1218] RAX: 0000000000000000 RBX: ffff88807ac68d00 RCX: ffff8881246c4000 [ 239.727772][ T1218] RDX: ffff8880285b5a00 RSI: ffffffff81b40667 RDI: ffffffff8df57e60 [ 239.736444][ T1218] RBP: ffff88807ac68d08 R08: 0000000000000005 R09: 0000000000000007 [ 239.744710][ T1218] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807ac68d20 [ 239.753207][ T1218] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 239.761495][ T1218] FS: 0000000000000000(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 239.770855][ T1218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.777600][ T1218] CR2: 0000200000252000 CR3: 0000000034e1a000 CR4: 00000000003526f0 [ 239.785764][ T1218] Call Trace: [ 239.789058][ T1218] [ 239.792274][ T1218] css_free_rwork_fn+0x80/0x12e0 [ 239.797295][ T1218] ? rcu_is_watching+0x12/0xc0 [ 239.802438][ T1218] process_one_work+0x9cc/0x1b70 [ 239.807674][ T1218] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 239.813407][ T1218] ? __pfx_process_one_work+0x10/0x10 [ 239.818929][ T1218] ? assign_work+0x1a0/0x250 [ 239.823607][ T1218] worker_thread+0x6c8/0xf10 [ 239.828317][ T1218] ? __kthread_parkme+0x19e/0x250 [ 239.833403][ T1218] ? __pfx_worker_thread+0x10/0x10 [ 239.838580][ T1218] kthread+0x3c2/0x780 [ 239.842762][ T1218] ? __pfx_kthread+0x10/0x10 [ 239.847410][ T1218] ? ret_from_fork+0x25/0x6f0 [ 239.852188][ T1218] ? rcu_is_watching+0x12/0xc0 [ 239.857188][ T1218] ? rcu_is_watching+0x12/0xc0 [ 239.862054][ T1218] ? __pfx_kthread+0x10/0x10 [ 239.866819][ T1218] ret_from_fork+0x5d4/0x6f0 [ 239.871554][ T1218] ? __pfx_kthread+0x10/0x10 [ 239.876224][ T1218] ret_from_fork_asm+0x1a/0x30 [ 239.881034][ T1218] [ 239.884084][ T1218] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 239.891387][ T1218] CPU: 1 UID: 0 PID: 1218 Comm: kworker/1:2 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(full) [ 239.903483][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.913648][ T1218] Workqueue: cgroup_destroy css_free_rwork_fn [ 239.919771][ T1218] Call Trace: [ 239.923061][ T1218] [ 239.926016][ T1218] dump_stack_lvl+0x3d/0x1f0 [ 239.930643][ T1218] vpanic+0x6e8/0x7a0 [ 239.934739][ T1218] ? __pfx_vpanic+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 239.939327][ T1218] ? css_rstat_exit+0x368/0x470 [ 239.944233][ T1218] panic+0xca/0xd0 [ 239.948276][ T1218] ? __pfx_panic+0x10/0x10 [ 239.952769][ T1218] ? check_panic_on_warn+0x1f/0xb0 [ 239.958049][ T1218] check_panic_on_warn+0xab/0xb0 [ 239.963046][ T1218] __warn+0xf6/0x3c0 [ 239.966977][ T1218] ? css_rstat_exit+0x368/0x470 [ 239.971861][ T1218] report_bug+0x3c3/0x580 [ 239.976331][ T1218] ? css_rstat_exit+0x368/0x470 [ 239.981224][ T1218] handle_bug+0x184/0x210 [ 239.985599][ T1218] exc_invalid_op+0x17/0x50 [ 239.990160][ T1218] asm_exc_invalid_op+0x1a/0x20 [ 239.995080][ T1218] RIP: 0010:css_rstat_exit+0x368/0x470 [ 240.000638][ T1218] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 240.020285][ T1218] RSP: 0000:ffffc9000440fbc0 EFLAGS: 00010293 [ 240.026408][ T1218] RAX: 0000000000000000 RBX: ffff88807ac68d00 RCX: ffff8881246c4000 [ 240.034406][ T1218] RDX: ffff8880285b5a00 RSI: ffffffff81b40667 RDI: ffffffff8df57e60 [ 240.042409][ T1218] RBP: ffff88807ac68d08 R08: 0000000000000005 R09: 0000000000000007 [ 240.050398][ T1218] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807ac68d20 [ 240.058686][ T1218] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 240.066796][ T1218] ? css_rstat_exit+0x367/0x470 [ 240.071681][ T1218] css_free_rwork_fn+0x80/0x12e0 [ 240.076649][ T1218] ? rcu_is_watching+0x12/0xc0 [ 240.081452][ T1218] process_one_work+0x9cc/0x1b70 [ 240.086749][ T1218] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 240.092528][ T1218] ? __pfx_process_one_work+0x10/0x10 [ 240.097955][ T1218] ? assign_work+0x1a0/0x250 [ 240.102630][ T1218] worker_thread+0x6c8/0xf10 [ 240.107277][ T1218] ? __kthread_parkme+0x19e/0x250 [ 240.112345][ T1218] ? __pfx_worker_thread+0x10/0x10 [ 240.117693][ T1218] kthread+0x3c2/0x780 [ 240.121795][ T1218] ? __pfx_kthread+0x10/0x10 [ 240.126413][ T1218] ? ret_from_fork+0x25/0x6f0 [ 240.131218][ T1218] ? rcu_is_watching+0x12/0xc0 [ 240.135998][ T1218] ? rcu_is_watching+0x12/0xc0 [ 240.140783][ T1218] ? __pfx_kthread+0x10/0x10 [ 240.145413][ T1218] ret_from_fork+0x5d4/0x6f0 [ 240.150050][ T1218] ? __pfx_kthread+0x10/0x10 [ 240.154698][ T1218] ret_from_fork_asm+0x1a/0x30 [ 240.159510][ T1218] [ 240.162713][ T1218] Kernel Offset: disabled [ 240.167061][ T1218] Rebooting in 86400 seconds..