last executing test programs: 8.758077135s ago: executing program 0 (id=93): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socketpair$auto(0x2, 0x0, 0x2, 0x0) acct$auto(&(0x7f00000001c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x1f') socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4, 0x7f, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NFSD_A_SERVER_PROTO_VERSION={0xc, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 6.95287132s ago: executing program 0 (id=97): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram7\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x12, 0x2, 0x8001) madvise$auto(0x0, 0xffffffffffff0002, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) unshare$auto(0x40000080) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) unshare$auto(0x40000080) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) r2 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x33, 0xfffffffffffffffe, 0x0) uname$auto(0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="5e48fedc", @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048041) openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x6c000, 0x63) acct$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d@\x85\x059\xb0\x15kD\x8b\n\xd8$\x9c\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x027B3/\x82\xda\x8c\xa5\xa9T\xden\xb5\xc2\x05\xad\x9c\xda\n.S\xcb\x10\x9d\xbc\x9a>\xd0\xb9\xae\x85\t\xc2\xd1\x16M\xef\x90\xcc\x19%s\x93\xa2\x9a\x06\x95\xe3\xa8C\xea\x9e\x0e\x82`\xe4\x0eZ\xac\xab_\xbd\xf3\x12\x1a\x9f\xeb{\xe3\x9d\xb6\x83H\x04\x1a\x7f\xc2\x178\xd1%\'\xd8D\xf9\xc9\xfe\x89\xa6\xdbR\xe3y\x9e\xe8:\xd8\x91\xe67t') ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) 6.924379029s ago: executing program 1 (id=98): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) socket(0x2, 0x3, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/ip6_tables_targets\x00', 0x608100, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) r2 = prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3c, 0x9, 0x0, 0x1, 0x9) ioctl$auto_TIOCMGET2(r1, 0x5415, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x6, 0x7, 0xc, 0x110, r1, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY2(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x719d}, @CTRL_ATTR_FAMILY_NAME={0xc, 0x2, '$/,:\\#-\x00'}]}, 0x28}}, 0x20040000) 5.842295298s ago: executing program 3 (id=99): io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) ftruncate$auto(0x3, 0x700) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) getpgid$auto(0x0) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x103142, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x900, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r1, 0x4030582b, 0x7) ioperm$auto(0x4, 0xbc6, 0x81) quotactl$auto(0x2, 0x0, 0x62a0, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)="5d3d4b8c60c2f201bbdecdf45a36e14cf63e57caea0fdf108d") 5.404503956s ago: executing program 1 (id=100): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x212200, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r0, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x4000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x2, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x882, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) connect$auto(0x3, 0x0, 0x54) r3 = getegid() setregid$auto(r3, r3) 5.24988986s ago: executing program 0 (id=101): socket(0x5, 0x3, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop15/rqos/wbt/wb_background\x00', 0x80, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) mount$auto(&(0x7f0000000180)='ipvlan1\x00', &(0x7f00000001c0)='./cgroup/../file0\x00', &(0x7f0000000200)='/sys/kernel/debug/block/loop15/rqos/wbt/wb_background\x00', 0x81, &(0x7f0000000240)="c6c246de695b9bb9e43ba024053a8763fca1fefbdb1897f65331a45d4972d305eecff3bd545d44faa4034a5e28c1d335c840fab73ee91d98d0eb7c1ce6e9cfb5baa4bc431c00611730d63c8e021f991ce7b4ae57d6c9491c35f4c5878c037b9cb902a0e112a20071f79f70072df5e33eb8c22b1fa8d46ce9dc9fbadeb9cca48e2d93ffb47582c9e9bdd2d048a83c6ff10388132ddf2c1fcbb49b0c348b2a14ce") sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, 0x0, 0x20004010) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) ioctl$auto(0xc8, 0x400454d0, 0x5) mmap$auto(0xa0b, 0x4, 0xf61, 0xeb5, 0x401, 0x40000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffe, 0x0, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [0x0, 0x0, 0xc], {0x9, 0x6, 0xff, 0x2a2, 0xfc, 0x10000001, 0x4102, 0x7fc, 0x3}, {0x28, 0x1, 0x52, 0x5, 0x9, 0xfffffffd, 0x76c6, 0x8, 0x100000000}}) open(0x0, 0x261c2, 0x84) readv$auto(0x3, 0x0, 0x400) write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, &(0x7f0000000b40), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2581, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setregid$auto(0x0, 0x3) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x642, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 4.495324131s ago: executing program 1 (id=102): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r1 = socket(0xf, 0x5, 0x20) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r4) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) read$auto_ftrace_enable_fops_trace_events(r3, &(0x7f0000000580)=""/155, 0x9b) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r4, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) r6 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r5, 0x0, 0xffffffffffffffff, 0x9}, {r0, 0x0, 0x10000333d, 0x7}, {r6, 0x0, 0x7, 0x2}, {r1, 0x0, 0xa7, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20040, 0x0) r7 = fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x800, 0x0) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) 4.251106006s ago: executing program 2 (id=103): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x103001, 0x0) ioctl$auto_I2C_RDWR(r2, 0x707, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) 3.727700224s ago: executing program 0 (id=104): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xc6a00, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r2, &(0x7f0000000080)=""/81, 0x51) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20901, 0x0) mlock$auto(0xc, 0x87) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) pwrite64$auto(r3, 0x0, 0x0, 0x200000000005) ioctl$auto(r1, 0x4b66, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) socket(0x1a, 0x3, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0xa882, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x23) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, r5, 0x0) 3.57856077s ago: executing program 3 (id=105): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) migrate_pages$auto(0x0, 0x3, 0x0, 0x0) r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x80000, 0x0) close_range$auto(r1, r0, 0xfffffffd) ioperm$auto(0x7000, 0x9, 0x3) fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x2, 0x1, 0x5) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/kvm/irq_exits\x00', 0x22002, 0x0) readv$auto(r1, &(0x7f0000000040)={0x0, 0x2}, 0x5) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$auto(r3, 0x8004b708, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x1, 0xb, 0xfffffffffffffffc, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 3.340475637s ago: executing program 3 (id=106): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0xd, &(0x7f0000000000)={0x30, 0xf1, 0xb0}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) move_pages$auto(0x0, 0x81, 0x0, 0x0, 0x0, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) clock_settime$auto(0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) 3.069963552s ago: executing program 2 (id=107): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101003, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0xf729, 0x20009, 0x4000010000df, 0xeb1, 0x401, 0x8400) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, 0x0, 0x9) (fail_nth: 1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000980)=""/4098, 0x1002) 2.133335604s ago: executing program 3 (id=108): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101003, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0xf729, 0x20009, 0x4000010000df, 0xeb1, 0x401, 0x8400) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, 0x0, 0x9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000980)=""/4098, 0x1002) getpeername$auto(r0, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, &(0x7f0000000100)=0x9) 2.083672215s ago: executing program 1 (id=109): rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf250200"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1, 0x8, 0xf, 0x66b, 0x0, 0x1}, 0x40006f4) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) (async) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 1.708470295s ago: executing program 2 (id=110): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x212200, 0x0) r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r0, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x4000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x2, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x882, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) connect$auto(0x3, 0x0, 0x54) r3 = getegid() setregid$auto(r3, r3) 1.494160155s ago: executing program 3 (id=111): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/environ\x00', 0x202400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(r0, 0x0, 0x40000000000400) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0xa2180, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f27, 0x0) read$auto_proc_environ_operations_base(r0, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x2000002060009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x1, 0x0) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, &(0x7f0000000100)={{0x9, 0xee00, 0xee00, 0x3, 0x97a, 0x9f, 0x3}, &(0x7f0000000040)=0x8e, &(0x7f00000000c0)=0x40, 0xd6, 0x7, 0x4, 0x81, 0x9, 0x4, 0x9, 0x2, @raw=0xfbed0000, @raw=0xfffff004}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) bpf$auto(0x1, &(0x7f0000000540)=@link_create={@map_fd=r0, @target_fd=r4, 0x7, 0x7, @perf_event={0x8}}, 0x6f4) sendfile$auto(r4, r3, 0x0, 0x48) syz_clone(0xa300100, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$auto_SHM_LOCK(0xac6, 0xb, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xd9}, 0xfffffc00, 0x3, 0x5, 0x6, @raw=0x8, @raw=0x201, 0x4, 0x0, &(0x7f0000000740)="99a67a2b1bead10c128805537cdc7ff5be4a3b2c23992fe21010dbf8eed366dc9585f8d49269004532f18b573b29b6289c42273242e3012dc480983a49eee5ce74d6b817a2874e87ce297ae23c820366d8386d7257000000befab0e5158baa789d20d31feb159f9cd5df7fee5681a9decf7a456fec159bd51922c44daa37b894ab23595a70307f0b37cbd75b600d02ec14f449ca0772c8df4702012681b42f72df4be69184e9466e34517e7c9fc7bd63f03edce692611efde9351d5f99146a005cbb9c02f88ae1631eae6173efd280ae2b2ba04b01e105c95323f6bccc0b7c902baaee8ebd788e885920f970951adb507cf64589", &(0x7f00000001c0)="9665d61804696ab62bde66a62307b69444c6dc9e775d4b4407afbc2c181920d474e19dc4cff52ed741474221b00b58bcde9884d13a5143529d8c3c57f7b84d1b79c023d1113151c7c0e16e10d4cf888cf37ba970759326edb105bd465da5913bc8be1b2e371a27f61e0b079fe4dd0d554c81a6046ec2d747dd8d314773b059a1d9a92629a39c1ee5d7fd747be24c9e60b97a10d6353616d0e2de1cab52767a20614a28d64cce11f6347bc544c30f2a2c3c7211ee8f39f2fde5c6997290a34cd5e99ef6d3a27838f38a488f08"}) r6 = getpgid$auto(0xffffffffffffffff) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f00000004c0)={{0x4, r2, r5, 0x5, 0x7ff, 0x1}, 0x5, 0x10000000000fff, 0x8, 0x5, @inferred, @inferred=r6, 0xd69, 0x0, &(0x7f0000000340)="0e9b1f8a9f2d3d3c0c24454d879bd405ae3eed8a51fae20acf5cfb1cf36176841dcb4432f273315c460460e1533cc5895ae9813677ac27e70b0925c871de1e0e6c96347bb2438e0b613bcb7da493c4e87521d49d53dafda627c82e8a834b87a9860a8117b2fe8751c2839752658dd46a2f0bc74500da10667c8b3749df1460e1bfa4e16c9add9b6ee39f780c83e188cc47c3f6c1ab29d150db1b309d8c8b2fabca07e4117e4a8b84654a6032f75093fdda8f5af14286a9b1fa086c3ad9e9569cc1c6a706590ccc248e53c0351f7a45c12617333ccfff", &(0x7f0000000440)="108cea25fb64e2f6a105bddd4622712d06f5bae8398a46bbaef09f94b0f502f89d2c0501a70417e535331b13d24a453c73a014ff5c66c24548c0bc4b4f6d56a8320af2be0ceedb198ffd001328d1b4c1d44e06120bba651a83a25c375bdee888256a06045bf35ace"}) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r7, 0x5453, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000700), 0x8001) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r8, 0x5606, 0x7) 1.488726889s ago: executing program 1 (id=112): socket(0x5, 0x3, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop15/rqos/wbt/wb_background\x00', 0x80, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) mount$auto(&(0x7f0000000180)='ipvlan1\x00', &(0x7f00000001c0)='./cgroup/../file0\x00', &(0x7f0000000200)='/sys/kernel/debug/block/loop15/rqos/wbt/wb_background\x00', 0x81, &(0x7f0000000240)="c6c246de695b9bb9e43ba024053a8763fca1fefbdb1897f65331a45d4972d305eecff3bd545d44faa4034a5e28c1d335c840fab73ee91d98d0eb7c1ce6e9cfb5baa4bc431c00611730d63c8e021f991ce7b4ae57d6c9491c35f4c5878c037b9cb902a0e112a20071f79f70072df5e33eb8c22b1fa8d46ce9dc9fbadeb9cca48e2d93ffb47582c9e9bdd2d048a83c6ff10388132ddf2c1fcbb49b0c348b2a14ce") sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, 0x0, 0x20004010) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x480000, 0x0) mmap$auto(0xa0b, 0x4, 0xf61, 0xeb5, 0x401, 0x40000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffe, 0x0, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [0x0, 0x0, 0xc], {0x9, 0x6, 0xff, 0x2a2, 0xfc, 0x10000001, 0x4102, 0x7fc, 0x3}, {0x28, 0x1, 0x52, 0x5, 0x9, 0xfffffffd, 0x76c6, 0x8, 0x100000000}}) open(0x0, 0x261c2, 0x84) readv$auto(0x3, 0x0, 0x400) write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, &(0x7f0000000b40), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2581, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setregid$auto(0x0, 0x3) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x642, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1.25037234s ago: executing program 2 (id=113): socket(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 804.477456ms ago: executing program 0 (id=114): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7}, 0x8) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x5, 0xd0, 0x98) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) read$auto(r0, 0x0, 0x20) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r1, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x105c01, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xc44c1, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) mmap$auto(0x0, 0x9, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='>', 0x1) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim6/health/break_health\x00', 0x45cd81, 0x0) write$auto(r4, 0x0, 0x1ff) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioperm$auto(0x7, 0x4, 0x2) mknod$auto(&(0x7f0000000100)=':,\x00', 0x2e, 0x2) unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00') ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) 696.792293ms ago: executing program 2 (id=115): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) r1 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x103001, 0x0) ioctl$auto_I2C_RDWR(r2, 0x707, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) 689.386426ms ago: executing program 3 (id=116): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000000000899edb615550fd8c7c924d87f0030047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="42bf46", 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.14/usb38/38-0:1.0/usb38-port1/usb3_lpm_permit\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000280)="16c8ae39519bbe7a253b302a6c81a04860426be36aeb99776aa7d3b33c38351cc5e8272e595bab60ffdb32d15924bc60d45976da67d6b4f371ca226225857acb4e5b4f09456946b869fc1b01bb0602285368c084334b0678e13ed49d8d52533df3fe6b48d1c99f83c613ff7be83f42fdccf2bdd1628aebde9d3429813ef8aada", 0x80) capset$auto(0x0, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyz0\x00', 0x23a002, 0x0) ioctl$auto_TIOCSWINSZ(r4, 0x5414, &(0x7f0000000300)) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x44084) madvise$auto(0x0, 0xffffffffffff0009, 0x19) 442.944382ms ago: executing program 0 (id=117): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r1 = socket(0xf, 0x5, 0x20) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r4) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) read$auto_ftrace_enable_fops_trace_events(r3, &(0x7f0000000580)=""/155, 0x9b) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r4, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) r6 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r5, 0x0, 0xffffffffffffffff, 0x9}, {r0, 0x0, 0x10000333d, 0x7}, {r6, 0x0, 0x7, 0x2}, {r1, 0x0, 0xa7, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20040, 0x0) r7 = fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x800, 0x0) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) 152.261889ms ago: executing program 1 (id=118): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0xd, &(0x7f0000000000)={0x30, 0xf1, 0xb0}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0603d06, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) move_pages$auto(0x0, 0x81, 0x0, 0x0, 0x0, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) clock_settime$auto(0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 2 (id=119): mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) write$auto(r0, 0x0, 0xfffffde9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1c/xrun_debug\x00', 0x20440, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/hsr_slave_1/proxy_ndp\x00', 0x440000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x4020565b, 0x38) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/040/001\x00', 0x29202, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 96.968021][ T976] cfg80211: failed to load regulatory.db [ 98.360441][ T5818] cgroup: Unknown subsys name 'net' [ 98.470616][ T5818] cgroup: Unknown subsys name 'cpuset' [ 98.481286][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.411713][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.719670][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.771282][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.783349][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.790787][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.792982][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.806661][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.806749][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.821683][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.830317][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.839134][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.840352][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.847559][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.853914][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.861764][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.869019][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.876802][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.882095][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.889757][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.897461][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.902723][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.491894][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 103.717408][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 103.774829][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 103.790210][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 103.842632][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.851886][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.859837][ T5829] bridge_slave_0: entered allmulticast mode [ 103.867865][ T5829] bridge_slave_0: entered promiscuous mode [ 103.923639][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.931114][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.940281][ T5829] bridge_slave_1: entered allmulticast mode [ 103.948600][ T5829] bridge_slave_1: entered promiscuous mode [ 104.043462][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.076778][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.204897][ T5829] team0: Port device team_slave_0 added [ 104.214840][ T5829] team0: Port device team_slave_1 added [ 104.221444][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.228739][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.236025][ T5837] bridge_slave_0: entered allmulticast mode [ 104.243460][ T5837] bridge_slave_0: entered promiscuous mode [ 104.322792][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.330331][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.338290][ T5837] bridge_slave_1: entered allmulticast mode [ 104.345915][ T5837] bridge_slave_1: entered promiscuous mode [ 104.369090][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.376428][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.383614][ T5828] bridge_slave_0: entered allmulticast mode [ 104.391990][ T5828] bridge_slave_0: entered promiscuous mode [ 104.401096][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.408625][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.435305][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.461842][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.469475][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.476870][ T5827] bridge_slave_0: entered allmulticast mode [ 104.484328][ T5827] bridge_slave_0: entered promiscuous mode [ 104.492049][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.499515][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.507372][ T5828] bridge_slave_1: entered allmulticast mode [ 104.514769][ T5828] bridge_slave_1: entered promiscuous mode [ 104.527292][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.534279][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.560654][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.606088][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.613301][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.621225][ T5827] bridge_slave_1: entered allmulticast mode [ 104.631351][ T5827] bridge_slave_1: entered promiscuous mode [ 104.684046][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.698905][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.746863][ T5829] hsr_slave_0: entered promiscuous mode [ 104.753640][ T5829] hsr_slave_1: entered promiscuous mode [ 104.831684][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.848702][ T5837] team0: Port device team_slave_0 added [ 104.859730][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.871676][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.913207][ T5837] team0: Port device team_slave_1 added [ 104.921844][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.948127][ T5828] team0: Port device team_slave_0 added [ 104.967353][ T5833] Bluetooth: hci0: command tx timeout [ 104.967358][ T5840] Bluetooth: hci3: command tx timeout [ 104.978510][ T5842] Bluetooth: hci2: command tx timeout [ 104.980671][ T5833] Bluetooth: hci1: command tx timeout [ 105.045285][ T5828] team0: Port device team_slave_1 added [ 105.069187][ T5827] team0: Port device team_slave_0 added [ 105.077042][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.084046][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.111394][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.155444][ T5827] team0: Port device team_slave_1 added [ 105.162429][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.169689][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.195695][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.239513][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.246722][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.272885][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.321219][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.328486][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.355020][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.368625][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.375629][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.402053][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.428697][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.435823][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.462193][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.550967][ T5837] hsr_slave_0: entered promiscuous mode [ 105.557627][ T5837] hsr_slave_1: entered promiscuous mode [ 105.563896][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.571784][ T5837] Cannot create hsr debugfs directory [ 105.710017][ T5828] hsr_slave_0: entered promiscuous mode [ 105.717530][ T5828] hsr_slave_1: entered promiscuous mode [ 105.723719][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.732031][ T5828] Cannot create hsr debugfs directory [ 105.761632][ T5827] hsr_slave_0: entered promiscuous mode [ 105.772179][ T5827] hsr_slave_1: entered promiscuous mode [ 105.778842][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.786569][ T5827] Cannot create hsr debugfs directory [ 105.959909][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.998977][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.019336][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.079782][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.335803][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.352891][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.365660][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.382749][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.485209][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.510211][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.527492][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.543781][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.602279][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.693077][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.701984][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.715354][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.740184][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.753730][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.775229][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.782576][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.813375][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.820667][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.937791][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.030519][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.046989][ T5833] Bluetooth: hci1: command tx timeout [ 107.047218][ T5840] Bluetooth: hci2: command tx timeout [ 107.052471][ T55] Bluetooth: hci3: command tx timeout [ 107.065669][ T5842] Bluetooth: hci0: command tx timeout [ 107.121993][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.129326][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.155823][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.191524][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.198816][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.277424][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.298755][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.350625][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.358484][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.404999][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.412237][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.475250][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.525232][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.532643][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.577129][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.599510][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.606770][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.851943][ T5829] veth0_vlan: entered promiscuous mode [ 107.901230][ T5829] veth1_vlan: entered promiscuous mode [ 107.972810][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.069078][ T5829] veth0_macvtap: entered promiscuous mode [ 108.124847][ T5829] veth1_macvtap: entered promiscuous mode [ 108.183110][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.194869][ T5828] veth0_vlan: entered promiscuous mode [ 108.215164][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.245240][ T5828] veth1_vlan: entered promiscuous mode [ 108.279487][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.292359][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.302615][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.312871][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.372919][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.401283][ T5828] veth0_macvtap: entered promiscuous mode [ 108.425431][ T5828] veth1_macvtap: entered promiscuous mode [ 108.440232][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.491878][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.502650][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.517433][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.569800][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.582952][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.603637][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.615107][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.627689][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.662659][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.671706][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.681491][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.691282][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.771784][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.780215][ T5827] veth0_vlan: entered promiscuous mode [ 108.787280][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.814261][ T5837] veth0_vlan: entered promiscuous mode [ 108.873723][ T5837] veth1_vlan: entered promiscuous mode [ 108.888126][ T5827] veth1_vlan: entered promiscuous mode [ 108.952297][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.970533][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.983126][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.075286][ T5827] veth0_macvtap: entered promiscuous mode [ 109.131280][ T5842] Bluetooth: hci0: command tx timeout [ 109.136748][ T5833] Bluetooth: hci1: command tx timeout [ 109.137250][ T5842] Bluetooth: hci3: command tx timeout [ 109.142295][ T5833] Bluetooth: hci2: command tx timeout [ 109.159432][ T5827] veth1_macvtap: entered promiscuous mode [ 109.160503][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.199506][ T5837] veth0_macvtap: entered promiscuous mode [ 109.208564][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.222660][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.243180][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.253570][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.264142][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.277636][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.289530][ T5837] veth1_macvtap: entered promiscuous mode [ 109.340605][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.351640][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.370158][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.382479][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.401892][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.438059][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.476026][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.484821][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.517759][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.553288][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.567558][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.586049][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.606322][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.626287][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.656019][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.678838][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.812776][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.824215][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.865727][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.886870][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.890846][ T5903] mmap: syz.2.3 (5903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.898414][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.957310][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.971769][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.024686][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.034805][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.048228][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.057297][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.313032][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.340013][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.474315][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.482941][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.650706][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.686399][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.841580][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.863879][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.210332][ T5833] Bluetooth: hci2: command tx timeout [ 111.211325][ T5840] Bluetooth: hci3: command tx timeout [ 111.215798][ T5833] Bluetooth: hci1: command tx timeout [ 111.221832][ T5842] Bluetooth: hci0: command tx timeout [ 111.246382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 111.255328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.656617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 111.673026][ T5925] sp0: Synchronizing with TNC [ 111.835641][ T5916] Invalid ELF header magic: != ELF [ 112.373052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.476088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.556549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.903669][ T5932] Zero length message leads to an empty skb [ 113.356377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.586499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.553452][ T5955] process 'syz.3.11' launched './file0' with NULL argv: empty string added [ 114.866380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.875683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.485007][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15'. [ 117.014889][ T5981] Invalid ELF header magic: != ELF [ 117.923566][ T5993] Invalid ELF header magic: != ELF [ 120.978497][ T6023] sp0: Synchronizing with TNC [ 127.980357][ T6102] Invalid ELF header magic: != ELF [ 129.187077][ T6122] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.477916][ T6150] ovs_ÿþ: entered promiscuous mode [ 137.209989][ T6258] FAULT_INJECTION: forcing a failure. [ 137.209989][ T6258] name failslab, interval 1, probability 0, space 0, times 1 [ 137.234391][ T6258] CPU: 1 UID: 0 PID: 6258 Comm: syz.2.73 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 137.234436][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.234457][ T6258] Call Trace: [ 137.234468][ T6258] [ 137.234483][ T6258] dump_stack_lvl+0x16c/0x1f0 [ 137.234539][ T6258] should_fail_ex+0x512/0x640 [ 137.234586][ T6258] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 137.234621][ T6258] should_failslab+0xc2/0x120 [ 137.234662][ T6258] __kmalloc_cache_noprof+0x6a/0x3e0 [ 137.234694][ T6258] ? do_shmat+0x657/0x1330 [ 137.234739][ T6258] ? do_shmat+0x696/0x1330 [ 137.234790][ T6258] do_shmat+0x696/0x1330 [ 137.234846][ T6258] ? __pfx_do_shmat+0x10/0x10 [ 137.234904][ T6258] __x64_sys_shmat+0xd7/0x170 [ 137.234951][ T6258] ? __pfx_ksys_write+0x10/0x10 [ 137.234983][ T6258] ? __pfx___x64_sys_shmat+0x10/0x10 [ 137.235033][ T6258] ? rcu_is_watching+0x12/0xc0 [ 137.235062][ T6258] ? do_syscall_64+0x91/0x230 [ 137.235112][ T6258] do_syscall_64+0xcd/0x230 [ 137.235163][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.235194][ T6258] RIP: 0033:0x7f2ceb78e969 [ 137.235218][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.235253][ T6258] RSP: 002b:00007f2cec62d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 137.235282][ T6258] RAX: ffffffffffffffda RBX: 00007f2ceb9b5fa0 RCX: 00007f2ceb78e969 [ 137.235302][ T6258] RDX: 0000000000000873 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.235320][ T6258] RBP: 00007f2cec62d090 R08: 0000000000000000 R09: 0000000000000000 [ 137.235344][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.235363][ T6258] R13: 0000000000000001 R14: 00007f2ceb9b5fa0 R15: 00007fff66d60858 [ 137.235405][ T6258] [ 137.938527][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.951608][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.318476][ T6274] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[6274] [ 139.549695][ T6288] sp0: Synchronizing with TNC [ 144.687557][ T6357] sp0: Synchronizing with TNC [ 145.034754][ T6354] Invalid ELF header magic: != ELF [ 146.630576][ T6378] Invalid ELF header magic: != ELF [ 148.008871][ T6400] FAULT_INJECTION: forcing a failure. [ 148.008871][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 148.136022][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.1.100 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 148.136069][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.136088][ T6400] Call Trace: [ 148.136098][ T6400] [ 148.136108][ T6400] dump_stack_lvl+0x16c/0x1f0 [ 148.136174][ T6400] should_fail_ex+0x512/0x640 [ 148.136221][ T6400] ? __kmalloc_noprof+0xbf/0x510 [ 148.136263][ T6400] ? lsm_blob_alloc+0x68/0x90 [ 148.136290][ T6400] should_failslab+0xc2/0x120 [ 148.136331][ T6400] __kmalloc_noprof+0xd2/0x510 [ 148.136376][ T6400] lsm_blob_alloc+0x68/0x90 [ 148.136406][ T6400] security_prepare_creds+0x30/0x270 [ 148.136475][ T6400] prepare_creds+0x56f/0x7d0 [ 148.136529][ T6400] __sys_setregid+0x101/0x910 [ 148.136563][ T6400] ? rcu_is_watching+0x12/0xc0 [ 148.136599][ T6400] do_syscall_64+0xcd/0x230 [ 148.136653][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.136686][ T6400] RIP: 0033:0x7f93da58e969 [ 148.136712][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.136744][ T6400] RSP: 002b:00007f93db3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 148.136787][ T6400] RAX: ffffffffffffffda RBX: 00007f93da7b5fa0 RCX: 00007f93da58e969 [ 148.136808][ T6400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.136828][ T6400] RBP: 00007f93da610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 148.136848][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.136871][ T6400] R13: 0000000000000000 R14: 00007f93da7b5fa0 R15: 00007ffef822c9d8 [ 148.136914][ T6400] [ 149.298275][ T6395] binder: 6394:6395 ioctl 4030582b 7 returned -22 [ 149.308904][ T6395] binder: 6394:6395 ioctl c0306201 200000000000 returned -11 [ 151.549934][ T6440] FAULT_INJECTION: forcing a failure. [ 151.549934][ T6440] name failslab, interval 1, probability 0, space 0, times 0 [ 151.600086][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.2.110 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 151.600134][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.600153][ T6440] Call Trace: [ 151.600164][ T6440] [ 151.600177][ T6440] dump_stack_lvl+0x16c/0x1f0 [ 151.600231][ T6440] should_fail_ex+0x512/0x640 [ 151.600282][ T6440] ? __kmalloc_noprof+0xbf/0x510 [ 151.600321][ T6440] ? lsm_blob_alloc+0x68/0x90 [ 151.600352][ T6440] should_failslab+0xc2/0x120 [ 151.600395][ T6440] __kmalloc_noprof+0xd2/0x510 [ 151.600443][ T6440] lsm_blob_alloc+0x68/0x90 [ 151.600475][ T6440] security_prepare_creds+0x30/0x270 [ 151.600529][ T6440] prepare_creds+0x56f/0x7d0 [ 151.600584][ T6440] __sys_setregid+0x101/0x910 [ 151.600619][ T6440] ? rcu_is_watching+0x12/0xc0 [ 151.600656][ T6440] do_syscall_64+0xcd/0x230 [ 151.600720][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.600754][ T6440] RIP: 0033:0x7f2ceb78e969 [ 151.600780][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.600815][ T6440] RSP: 002b:00007f2cec62d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 151.600846][ T6440] RAX: ffffffffffffffda RBX: 00007f2ceb9b5fa0 RCX: 00007f2ceb78e969 [ 151.600868][ T6440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.600888][ T6440] RBP: 00007f2ceb810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 151.600907][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.600927][ T6440] R13: 0000000000000000 R14: 00007f2ceb9b5fa0 R15: 00007fff66d60858 [ 151.600970][ T6440] [ 151.629735][ T6419] FAULT_INJECTION: forcing a failure. [ 151.629735][ T6419] name fail_futex, interval 1, probability 0, space 0, times 1 [ 151.813399][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.0.104 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 151.813443][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.813462][ T6419] Call Trace: [ 151.813472][ T6419] [ 151.813483][ T6419] dump_stack_lvl+0x16c/0x1f0 [ 151.813534][ T6419] should_fail_ex+0x512/0x640 [ 151.813586][ T6419] get_futex_key+0x1c2/0x1000 [ 151.813624][ T6419] ? __pfx_get_futex_key+0x10/0x10 [ 151.813672][ T6419] futex_wake+0xe7/0x4e0 [ 151.813710][ T6419] ? rcu_is_watching+0x12/0xc0 [ 151.813744][ T6419] ? __pfx_futex_wake+0x10/0x10 [ 151.813804][ T6419] do_futex+0x1e3/0x350 [ 151.813839][ T6419] ? __pfx_do_futex+0x10/0x10 [ 151.813871][ T6419] ? __might_fault+0xe3/0x190 [ 151.813918][ T6419] mm_release+0x24e/0x300 [ 151.813962][ T6419] do_exit+0x898/0x2c30 [ 151.814003][ T6419] ? __pfx_futex_wake_mark+0x10/0x10 [ 151.814050][ T6419] ? __pfx_do_exit+0x10/0x10 [ 151.814093][ T6419] ? do_raw_spin_lock+0x12c/0x2b0 [ 151.814140][ T6419] ? find_held_lock+0x2b/0x80 [ 151.814176][ T6419] do_group_exit+0xd3/0x2a0 [ 151.814224][ T6419] get_signal+0x2673/0x26d0 [ 151.814275][ T6419] ? __pfx_get_signal+0x10/0x10 [ 151.814310][ T6419] ? do_futex+0x122/0x350 [ 151.814343][ T6419] ? __pfx_do_futex+0x10/0x10 [ 151.814382][ T6419] arch_do_signal_or_restart+0x8f/0x7a0 [ 151.814429][ T6419] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 151.814486][ T6419] ? __pfx___do_sys_close_range+0x10/0x10 [ 151.814517][ T6419] ? rcu_is_watching+0x12/0xc0 [ 151.814554][ T6419] syscall_exit_to_user_mode+0x150/0x2a0 [ 151.814603][ T6419] do_syscall_64+0xda/0x230 [ 151.814653][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.814684][ T6419] RIP: 0033:0x7fba3698e969 [ 151.814708][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.814738][ T6419] RSP: 002b:00007fba3775d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.814766][ T6419] RAX: fffffffffffffe00 RBX: 00007fba36bb5fa8 RCX: 00007fba3698e969 [ 151.814785][ T6419] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fba36bb5fa8 [ 151.814804][ T6419] RBP: 00007fba36bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 151.814822][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fba36bb5fac [ 151.814841][ T6419] R13: 0000000000000000 R14: 00007ffc9148d8f0 R15: 00007ffc9148d9d8 [ 151.814880][ T6419] [ 153.296899][ T5840] ================================================================== [ 153.305296][ T5840] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 153.313250][ T5840] Read of size 140 at addr ffffc900026ce000 by task kworker/u9:5/5840 [ 153.321421][ T5840] [ 153.323752][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: kworker/u9:5 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 153.323781][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.323797][ T5840] Workqueue: hci0 hci_devcd_timeout [ 153.323831][ T5840] Call Trace: [ 153.323840][ T5840] [ 153.323849][ T5840] dump_stack_lvl+0x116/0x1f0 [ 153.323884][ T5840] print_report+0xc3/0x670 [ 153.323913][ T5840] ? __virt_addr_valid+0x5e/0x590 [ 153.323947][ T5840] ? hci_devcd_dump+0x142/0x240 [ 153.323977][ T5840] kasan_report+0xe0/0x110 [ 153.324005][ T5840] ? hci_devcd_dump+0x142/0x240 [ 153.324039][ T5840] kasan_check_range+0xef/0x1a0 [ 153.324072][ T5840] __asan_memcpy+0x23/0x60 [ 153.324094][ T5840] hci_devcd_dump+0x142/0x240 [ 153.324126][ T5840] hci_devcd_timeout+0xb5/0x2e0 [ 153.324157][ T5840] ? rcu_is_watching+0x12/0xc0 [ 153.324181][ T5840] process_one_work+0x9cc/0x1b70 [ 153.324221][ T5840] ? __pfx_process_one_work+0x10/0x10 [ 153.324261][ T5840] ? assign_work+0x1a0/0x250 [ 153.324293][ T5840] worker_thread+0x6c8/0xf10 [ 153.324332][ T5840] ? __kthread_parkme+0x19e/0x250 [ 153.324360][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 153.324395][ T5840] kthread+0x3c5/0x780 [ 153.324427][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.324457][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.324487][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.324518][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.324549][ T5840] ? rcu_is_watching+0x12/0xc0 [ 153.324569][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.324601][ T5840] ret_from_fork+0x48/0x80 [ 153.324620][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.324651][ T5840] ret_from_fork_asm+0x1a/0x30 [ 153.324702][ T5840] [ 153.324710][ T5840] [ 153.490678][ T5840] The buggy address ffffc900026ce000 belongs to a vmalloc virtual mapping [ 153.499188][ T5840] Memory state around the buggy address: [ 153.504844][ T5840] ffffc900026cdf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 153.513354][ T5840] ffffc900026cdf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 153.521480][ T5840] >ffffc900026ce000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 153.529551][ T5840] ^ [ 153.533625][ T5840] ffffc900026ce080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 153.541704][ T5840] ffffc900026ce100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 153.549774][ T5840] ================================================================== [ 153.566000][ T5840] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.573243][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: kworker/u9:5 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 153.585416][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.595481][ T5840] Workqueue: hci0 hci_devcd_timeout [ 153.600712][ T5840] Call Trace: [ 153.604017][ T5840] [ 153.606954][ T5840] dump_stack_lvl+0x3d/0x1f0 [ 153.611616][ T5840] panic+0x71c/0x800 [ 153.615540][ T5840] ? __pfx_panic+0x10/0x10 [ 153.619986][ T5840] ? irqentry_exit+0x3b/0x90 [ 153.624598][ T5840] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.629840][ T5840] ? preempt_schedule_thunk+0x16/0x30 [ 153.635240][ T5840] ? hci_devcd_dump+0x142/0x240 [ 153.640126][ T5840] ? preempt_schedule_common+0x44/0xc0 [ 153.645647][ T5840] ? check_panic_on_warn+0x1f/0xb0 [ 153.650790][ T5840] ? hci_devcd_dump+0x142/0x240 [ 153.655659][ T5840] check_panic_on_warn+0xab/0xb0 [ 153.660620][ T5840] end_report+0x107/0x170 [ 153.664960][ T5840] kasan_report+0xee/0x110 [ 153.669392][ T5840] ? hci_devcd_dump+0x142/0x240 [ 153.674266][ T5840] kasan_check_range+0xef/0x1a0 [ 153.679138][ T5840] __asan_memcpy+0x23/0x60 [ 153.683562][ T5840] hci_devcd_dump+0x142/0x240 [ 153.688260][ T5840] hci_devcd_timeout+0xb5/0x2e0 [ 153.693153][ T5840] ? rcu_is_watching+0x12/0xc0 [ 153.697926][ T5840] process_one_work+0x9cc/0x1b70 [ 153.702893][ T5840] ? __pfx_process_one_work+0x10/0x10 [ 153.708311][ T5840] ? assign_work+0x1a0/0x250 [ 153.712923][ T5840] worker_thread+0x6c8/0xf10 [ 153.717543][ T5840] ? __kthread_parkme+0x19e/0x250 [ 153.722582][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 153.727722][ T5840] kthread+0x3c5/0x780 [ 153.731834][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.736444][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.741052][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.745681][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.750297][ T5840] ? rcu_is_watching+0x12/0xc0 [ 153.755068][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.759761][ T5840] ret_from_fork+0x48/0x80 [ 153.764202][ T5840] ? __pfx_kthread+0x10/0x10 [ 153.768812][ T5840] ret_from_fork_asm+0x1a/0x30 [ 153.773609][ T5840] [ 153.776939][ T5840] Kernel Offset: disabled [ 153.781298][ T5840] Rebooting in 86400 seconds..