last executing test programs: 38.789347896s ago: executing program 3 (id=160): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/89, 0x59) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x181000, 0x0) socket(0xa, 0x4, 0x143) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x39b8) capset$auto(0x0, 0x0) capget$auto(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ffc2c7a6df4c2487de0600aa2889aa3c095470f7ddae77f67097ad774017acd44b9b2181afce21e85a7391bfbdd0d15c95a619faab9a71d73d8d59d1235f08eded77", @ANYRES16=r2, @ANYBLOB="017f00d1365bfaf0d7bfeed524e5d0857b16b98dfdff81abdb7b89477a0c580ac581e3b68e01ac9b2ad70557072b6cd05d31e1e0c72b4c7453b3a68372f495056bffaa6628e518ec55af308542bfd6e8d7d36c7504bb3541eb2f01ca7cd3d393c0c7f63798ddccaf1033a4ad72db5e260218082d9437b1f29b6c6aac", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x14) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x501102, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto_MON_IOCX_GETX(r4, 0x4018920a, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2b, 0x800, 0x1) listen$auto(0x3, 0x81) lstat$auto(0x0, &(0x7f0000000180)={0x761f, 0x9, 0xe, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x200, 0x400000002, 0x1000000040000401, 0x1000, 0x8, 0x0, 0xffffffff, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x6) read$auto(0x3, 0x0, 0xf3c) fsopen$auto(&(0x7f0000000280)='$].\x00', 0x3) 36.677134746s ago: executing program 3 (id=164): mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd15/queue/iosched/writes_starved\x00', 0x0, 0x0) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000080)=0x2) read$auto(r1, 0x0, 0x800000000205) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim6/ports/3/ipsec\x00', 0x4200, 0x0) mmap$auto(0xfffffffffffffff7, 0x0, 0xfffffffffffffffc, 0x110, r5, 0xe) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='%\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x400c990}, 0x4090) setreuid$auto(0x3, 0x7) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r8) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4) shmctl$auto_SHM_UNLOCK(0x7ff, 0xc, &(0x7f0000001340)={{0x8, 0xffffffffffffffff, 0xee00, 0x80, 0x0, 0x1, 0x9}, 0x6, 0x5, 0x4, 0x9, @inferred, @raw=0x40, 0x1, 0x0, &(0x7f0000000280)="a5d9de84bedf55cdf83421477e6b0ca99a97f9020d761e728ef0b38cedb44fb6f530d64c5a9f96aa3cd7f465d64287c794f467131e8aa5c208f9a7344256bf9e462c9b4b7041e82c46f1f6d00e456b1b8fe59ca8ad3cf657a56f7db34359edaa1695401e2c15633454812a6c6e74f8060b4b9dde3a1c1256a1263d34d17e6579dc47571c712779d27c0cf282a0c69d9458a06c1d91df982659f25db6112c5a86036a7123c32e4dd84d59d73a5e491698a82124f734787f5f4c0c656092c0b301adcd989b3b1f9261f32f3296dda8fdb8ca207e68c33e776764c5e7247d0df02f1109bda269ede810fabd484ed828fd33657cde27209c16e6dd6c68df857e9e8f17c0a1a57c64faa6d5463308b5d0a652e0b449c825683de6459446b946a710597f1d45a0c0fa34ce9d9fcd29120d6aab2c4af4f1297cc6152bf136225b36aa78507f5a2c7f27198e064c45268ebd11dd18e5ffd7abe0bf5a79366362ef6bc6ea1984107c44de917109b29a2428b28cfe7192094d7d00c38896fc11577669baa061be948f5c82ecdcfbbfcf544766ab0068221f1d179a18597ecf4d63304ff0dcdb42a3cb770b9c28a1d540ced371fd04345442ee31adcb67cbc04206095d7277716228e5377589faa986f8189a63f7850e1536acbb30c61703eb8f9919d3060e38de3882d705f96c300bf77737527c1d7205043526c04188f2b33262f4cf74041a93d9d5411765d351cfb922a47038066e4904e6bd6cfefca569b4173a068c90c1684ba32a7f46df74ceafb55aa536f6f33810fd5615eaef3a01808174fe2552e87f39c1882df6a31117ba581636dea64c88c548e3ca0affde6cc3e220a4feb6b6f769beb700aeb78e9a7de1cefb14618213861ef262512061bc3e87d87768822f47de64ec14aa00608b61e89afd304f94c8d1b31a0144f5d6a2f411ab0604f12c046d905e00c75e4b759f5ba99b6a80c278ea51086d6342981f898428c11b149974726e0495e11fe9f52db17a01647ec30e40630149cb2a20e6bbc997ffddd4cd6631a8d334034224f56e2f5fb6685fafa5fbca61702b535e8ec208a392d88088e428c76474998ee1caed91ab0a671c263e8b0e4ec177b2dfb6304be35772e6d407e440064fcdf22bd70091c038be56b13fd10ee2a1e6aaa45bf22dc24bd44700b0db79ea3f25e5ad834f59aa72328acfc6a6595d9f14d31079f73fd6b4c5f567ee2e41addd70df45117479b2c6f6df6b00c08f26f4e7f34bd554c389df55947fc7b347182731eec02fe55095422394cc243808e0b329d5f296aebc1e447680ceeef550da33904b411cc883cfbce41dd62cdb19701e5a4094aed88fc770868305d3f52e3099df6cf43243b136b4bf8ca6a3c2f06ec71e781bfa4da31a35a1c53c579e9de5ee26c7eaf03b022f420045f6ed834942eb8e811171599e7f509344a1527072d6fe98cc289f5d9579a1960dd4cad35a7530db644f23d1f6ee1e81d97e4e23c284d7bb2139d7cfcbafdadd81fb0bb39f70cc67d0ddba701a65c747f735e9c2a913db0e17b69bd32a7f3e68474c05e6023a2cc71898dfe543291f774c1da99ce871c27265a3c99b9bb00fbb343f6cd5ebaeacda1549fa29af7f3f57b847b6a3ea0e6dd45bc2fa8aae68bfd648cd90c5095c03166bef41b05a4eba950c1405e5c136d6563bedacefc4f2fdebc2099337d81ae4326fb704ffe927cd739b1440ea921a1fd5e9db1190a78bdcd108978cf1e79181ba402932b91c299f36efd48507af0419c87e047de3e7a14a84358e0d0ab99f2ae3fd69de02e60934332d49647ee249094ad9f6b1cd023aead156bc8ba378e0394030ebb223855795b530824739d7f0574fc45a7dd54cf8529d44e7bfb2250c5002dc08f4a166cb8caeabe72db487d4730e8bc64cead0d0cd26f69c30b423193f2e6da678a376bc58bef02c75cd4a77d3bba8e28670914d903b9d8aa9b8eba9e974521bd3157ff323f5903b23acdb3b7b9e06ec4a8ceae83e9608f818c4858cf51778b7b4284cf93d06d6f9a90aaf4882e8c3ef3f9a5bcd804465d2bb5f42604aaa66b5e4ebc579b8f352b137d5e5b58ac378802c7eb2b01eacde9bd4cf1187021320be2fd51a86e07151d04ad3090ec2707a6f0f824f5e4c3403130d8de8632eefba15b23a022c17cb5324845ee4ed2f7524193261d1a3ed510a59257def00a44ade88ce419472c06ed629b1bad412bfa635622f645a3a17215cd34438a89f0ed06bbfa820ef819a18d99c865c97133217eccd43f7d1a8cbd2a5986b77f67362f520fd1fea6a206312c8490da38a21b10b570c030e1d18536593bb00cf427a53370bccb47d5fb0cf6abaecae6b3dc2650aad2aea9ec459d1a4f19cefc31da8a24c7cc05d64f1b22f35cbf2bac1d8619a0dcd148adea78b628553dcdfac44dc0f9a81a3d582c37a45cc620e6fa4d005d3af4d3051809cd535ec32be8622849190a00d73aadcfdf107d6f4943fbfde7e5b5ed51b49de3dd95c293ee19553300d252e60bb2069d109f4584808f8cec3bfba69dc6604772cff17dad4e75c5c79c9209e2d29181c889f1688654a44b7980ed68e26f01875cc7044c905631a994c55cc00cf671c4b8ef97106f6e1dbf43cc1678dd4e9a28fc13a06d0a7e7a63ffbc1f62f81cacf2a0005dbf81c09174ec100bd3becd2ca222555f2b9cf54ed8683c362e1f70a308965b2cd84e7dbf4d8c09aca189288a20075b14d1451799ed3778dc54113a2cc506950087c8c1f50779891b62e13c8ab2d34bfd926d2fca6dddb179007b346b8019b004a53b2c8a929231897b87d071367d054b6e3570bc75a4dba7a25cb2146d073bfcbc628566b625e002f968d57ff95c43c8810ce0d58c54cd496d4158a4495d87be03322e8eb459cb2f5e81e9f557c37514d592b04673b2e0e69201ec051caf1e5f2698b0bbd4112038d991f59a7cbcca74cf4243a1a553f9a21f74c56c532fcace2959a4f3723a80fc6476fdeea6baada2d7419036fc3576ab021a28623a4bcd90659f52b458b2c2b371b49b42ba1cdee56e6514186064f654b9cc4bb135f95e5c3c9e2800fc198436a9743266e8ac37cd42a582c139c77cf6a36d73aa9918110ca27b0d8d636e7aaa5b10e569a9df93422ad15f79647eafa86d62b33b3164e98d1a170dfa031ff8c23e814b755d519ef66dd0eb298eca47650a285318473179fbe70cf0577041db2c42850b5bf0a2a4463bc62181a880a004cac57ebbbf047f471540388cf3127e6e163e8a069eb213a01330f01952f21ac4d778bf42219f77c1eb0689ba8384001bdb7517040ed9f26d22528122e41d2a2a49a0cca36a5bdd47d408863faf9d49bf8f6129534030c59d521772fa36730cd3d27029048bb749e33767d11d1338211d48c87a7fd50a4d3b3da415187be554dca644462d0b440e477bc3096f91f1525f3718ddc30dfcfd9afc92cfd1a5b17654339ff5f71fc843483ca0b33204f5ede5c3e1f7aca6bcc88e0710e5617d2f7ddda277cde819ba3d52c3eb72c465747a83672a9f556d86b4152a0f55d6524f4626d1bf24441bb87e7744db8038a58866e8ee22b2731fa2465b310ea6ed9ef92e2f4d8ca1c06295b33c1efdcb38fb219c02e60740319efb0201a4351aa66aa49b7ee95aaa0a204ec6b8eb3fcb92bb848b965cb7e9f5bf26ead6075bb30f5f6f2ba2788d89740b4ad6aedfa7b93748c41023931f10b60fae145e44c4de12946cd6a700e80562b0c7fed8cf8096274401a26b65cc6580d800dc2f85f7ae44cff41ec32f34dd971ee35963d3fe6fe939ac2e2e6e9beec2d9c5b8dd89bf74bec38b9361c40c7520f2d8cb26f49186320c26addacb318eacb1bd7b2a99ccd7bf777ba0e00ffc4421f8644d2e1d59c53e244fd2ff923dba77f4f89fabb7e803e3395bd9244fa2dbc54ebbe2e0a3521041ffe675ffab14161cf05385b11cc7acca00227f0a4661cd4b9b30aee8c63e8c0a4c0993794032e65baff5e7de1d6e772fa79ada09759942819688882c28a23f1db66366c9f024dff76bcf452499c6694a5cf2f985beafd031273922c1e2f7b323413a9b7e2773e97a26af910274f13951c7e8d8eae901cacfba7ee539ae7d41d12502dafce59afe9424c4780209cfa9e9296ed689d4150e97104fd2b7260fa231d8d01fea383638ec7111507bb65511540653c667cf2b4f492ea71d9cd61fff144c0d4b22d2fd6fc561c8662d3e679bcca518fa804af4460a63fba0b2826ad9fae7a898f9b88a7c293c359f7ad232724123791c7933e86ac5cc03300b6ec14795d48bbb104d2d75e9c24c46df736323c603663ab98fa11b35e533abb251d009a1cfee0842fc4e0e63f863beb609abaff929c9e745e10e2af005dd48abc98032eca4221e313404fea0084a9da22b7e88915cfc8a48891478fbbfda369a001a0f1ec2b3dbd7a86122ffe37d8453d099e5421c7f69d8fad9444c1fd9dba000303a248363fbcee2393359cabc80997eb913bc75c071c4579fa51ee2fb8d5341d562557da4f52331ce1abdbdfb25da02d90f019104728877b1ba442747c020237f9c6a2816875986efd14ef733055251b422838122b44c0ae860209d509135bdc49eefde5784504cb0751e1b301b26aa30bfa9ff066bb83e96118b0c85a96379421babed51a77b1512ab349b84d0c9bae3700b2177fd8f2cc24e78c28d634b7109a53feca14105eb0e4dccf3506e357f398f812d60de183f406006c83591dc1fcee9d4490cb97973ab861fe895890093cd636c488d566de41fda4d5bfb3b30f44bc07877d2fc355c9f31794f358b5351acd40f3141ce224975bcbe2082665a925c94314bbfe8aa1be124f441f7b7e91e876fd1cf5d6d716824bac9d242d8a94badc6da2fdc9a71e9379700de38101729ab1fbf58673ab3d311ff41f6e0cd18d1b60c503c2c72a9fc513be0f3c85a35216cd15452f0f1606b51af8bcddc7ca3dfa38557966c2fa9d7098c94f51552ab0557bdc84ea4d168754b47955dedf741364c72887a0ef0a3fe677292ac6d016fc88a96120fb3c97696646bc9eba911b6d9ba07cc186c9ac08c8c87b03128baa1b30cd65a48e7318bfa2118b1b89412e09059347729c66a9692ab69ac3c67b0640e82001d5d6575fd51ee7142232890e7c1db5337f7f39d938b69f99c99a2dabea41811c3deb28c7bd667c516bceae7ed236b5e93fd4984ba6057d9a511ef4860064255ce0b32f5d9a836e12ac19aa37179416413f3ed8e918656d4c3147fe50427c44f23c6aa251396622346db14c2203128b9e263344ed324f601d2bf8b349da2b70828cfa6057d8340ad4bbacf786a755b8154b85ebfe3a99ebb7a485e75eb6cf3600b28182087397c187f807278947067bd3b7d43c813269009059073b7fa2a455e038cfc876855b8bba9ea6c8d34ef64e4be38871d405677a3530cf10b637b0c3d88eeccb8a5b8fcad2500d25e687641eca4a1dd477e4c6f3f23f1d3babd214ff3237d957e992cb4367621e5db29b62a2dfd6ef4d09b100d130cc6f3e25bdb31e684afe582ba55d9d2bc2a0cee4bc85947fe751fb8678a2424b8771b105726b2ec8c04db51c3fad05ea1daa3bb583ef0169ecab4bc79852e56d9c05a9b374edcbdbc914a5b72b150a420be5fa0d95fe83cb6f6c2df71a2c7db627c666823dd1537eb2431568848d1a4326525d5d6fa36e853d8b840115eb834ff4362b886e1d52d50a225c0181854689dbd20f7b19933cd8fd7b28a19bec08cf6b7a099924f901705a2a7f79b2515d1fff65d8c89b0269", &(0x7f0000001280)="00fa683c99199af623491be91b0b947bf29e778a20603713f79a4db06f063d3e50e668faf3581923a637d63c0241a3b597335ccc994049d01e914e10993d87d226e397d009f46e2d33355a3b44c3c2da1286b76ff7bd70eb5e8babc05d2fdfef14aa60f46ed8a13e4d4ae9158aea390e5a6abb298a2d5ed5c89fbb0b05b3a16427f61e47f647c9b199b17c9ea3f0d63f440b20e57f67079f261326d12a214a5a03eedd"}) sendmsg$auto_IPVS_CMD_ZERO(r7, &(0x7f0000001740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f00000013c0)={0x334, r9, 0xa, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xb0, 0x1, 0x0, 0x1, [@nested={0xa9, 0x145, 0x0, 0x1, [@generic="754ab5081459ded587508b405f1a9dfa8feb0879db28e49ffd940fde9b46b1943e2e2ec8b6c981f8baf582e93070a05c1b3dc9d7806568844ffa6e4506ee16f364b869f7da7a71592c33026fc4cb670d360fe02de5150d8623599b629e4fd0822323e9763433ba0a03dceaf774b2474d94a1d331cf7fe263906bf4bd5ca9b46ec4ce6d3675435bf260e2a23f33ac3d9f0f70e9a0aa5d91779b1297ff29a44dd683ada6beec"]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x246, 0x3, 0x0, 0x1, [@generic="7aba1e7a9ed23c606f7d714def716b1f5d817ffef52adf9c31557bb10c2aa6746f3310c67b740c5fd3ae2462a8902c09fa46a75ab248f27e47cfcaa51da91712942c9aef45d7c6fa28f0e0ab534071adae2a3f47ea035f5a79bd", @typed={0x8, 0xc8, 0x0, 0x0, @u32=0x1}, @nested={0x20, 0xc8, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x3e}, @nested={0x4, 0x8f}, @nested={0x4, 0x127}, @typed={0x8, 0x90, 0x0, 0x0, @uid=r10}]}, @typed={0x8, 0xab, 0x0, 0x0, @u32=0x991}, @nested={0x15b, 0x78, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0x8a}, @generic="0c7567eed177d0da2352f85d8579439fcc6107bd207580b89d0cacaf9728a39e17b2c8126f8918b3afb3f40c85f6530357d29c466dd446eea9f070a130571966f1d91075d705bcfa56501de66fb8bec1585a00bc7b51214a307fdcb7d6f877f11965c5cd2a99510c9e34f2667a75579a9d69f25bc39314f60683508a90a64a4be78b1fea2ded3ffb14c25c8435beccba9e06efbe4129ae6434d14e34543556e2d24f821d7c6c7c107472cf0a37eb7bbc1089ea8a5daae70e4b4cde4082c7c68d4ebc21b7b03477dd4bd0d9f0926c48b32e943b0bf67173ab1d4d6ae3960313b31eac8d", @typed={0x8, 0x12f, 0x0, 0x0, @u32=0x620cdf4}, @generic="c3feecfa833482716af09a351251e330e86028a7b89a378a7131dd5ccbe7b9517c29f5e57197e78e8574483be73bdadd002e496bb9079c40e35596db75101e576291c282d8056cbe1f95620b", @generic="0ec3773a7a7568735e56ffb3d8cc7670e359bf6d33e662f4"]}, @nested={0x59, 0x9c, 0x0, 0x1, [@nested={0x4, 0xbc}, @generic="03d9020bf5bab75e11ef9e5c1e0b99e9c271ac7f2240e5d948c53262c2740fb22399f948d864d0e63a70d48fd70acd8a3f9fe8c2664d8b0e5f850b0d920a115f53e192dff88bdd1d698691a2035dd94c45"]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x334}, 0x1, 0x0, 0x0, 0x4060000}, 0x20040050) r11 = io_uring_setup$auto(0x48, 0x0) write$auto(r2, &(0x7f0000000140)='/%-@--\x00', 0x2) getsockopt$auto_SO_PEEK_OFF(r3, 0x3, 0x2a, &(0x7f0000000040)='@\x04', 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000001c0), r11) 36.220836359s ago: executing program 3 (id=166): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/min_links\x00', 0xc0202, 0x0) getpid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x8) write$auto(0x3, 0x0, 0x81) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/89, 0x59) 35.902710757s ago: executing program 3 (id=167): read$auto_fops_u32_ro_(0xffffffffffffffff, 0x0, 0x0) statmount$auto(&(0x7f0000000540)={0x5, @inferred, 0x101, 0x5, 0x9}, &(0x7f0000000200)={0x13, 0x7, 0x8, 0x1000, 0x6, 0x8, 0x0, 0xffffffff, 0x40, 0x8, 0xc000000, 0x1a0, 0x401, 0x0, 0x6, 0x7, 0x0, 0xe9e3, 0x3, 0x2, 0x7, 0x0, 0x9, 0xe, 0x7, 0x37ea, [0x6, 0x2, 0x80000001, 0xd3, 0x3ff, 0x4, 0x7ff, 0x6, 0x4, 0x4a, 0x7, 0x3, 0x4, 0x88, 0x5, 0x1, 0x7, 0x5, 0x95, 0x9, 0x1, 0x40000000000006, 0x8, 0x0, 0x8000, 0x8000000007, 0x100000000, 0x80000001, 0x1880000000, 0x6, 0x8, 0xe, 0x9, 0x8000, 0x2, 0x6, 0xfffffffffffffffe, 0x0, 0x1800000000000000, 0x6, 0x6d4, 0xa167, 0x401, 0x8, 0xd, 0x1], "5570dc3f9ad44830af3163d864bc95e7c2f20b73514acedd76c758302594d65bd302ca9ecc185d57394faba70458781ee273422a086f4150b7bbc62f378698dc4bb416012fe83757c2a6b6138782a93efaae631832d1320a2c445e677ab57af787304d6fc35065c814476477528a5044f7d5182c487e52524bb822340ea67f1393cb807347d880152c56670f40347cd4455e69"}, 0x5062, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) semctl$auto_GETPID(0x1, 0x1, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty32\x00', 0x22002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x80000000006) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) statmount$auto(&(0x7f0000000140)={0x9, @inferred=r0, 0x8000000000000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000680)={0x401, 0xffffffff, 0x1, 0x80000001, 0x2, 0x0, 0xc0000000, 0xfff, 0xffffffffffff1604, 0x8, 0x0, 0x8, 0x4, 0x0, 0xffffffffffff0b6e, 0xae, 0xffff, 0x190, 0x8, 0x5, 0x8d3, 0x1, 0x0, 0x5, 0xfffffffd, 0x9, [0xd603, 0x3, 0x7fffffff, 0x0, 0x1, 0x5c, 0x7, 0x5, 0x9a, 0x8dbd, 0x100000000, 0x7, 0x100000000, 0x2, 0xa, 0x7, 0x10, 0x7, 0x3, 0xfffffffffffffffc, 0x3, 0x426eace5, 0x6, 0x2, 0x1, 0xc000000, 0x9, 0xffffffff00000001, 0x4, 0xfffffffffffffeff, 0x7f, 0x7fffffff, 0x400, 0x80000001, 0x3, 0x1, 0x8, 0x3, 0x943d, 0x9, 0xa, 0x1, 0x3, 0x5, 0x3, 0x9], "97aab2c82f963f2a17b16bd23393e7a3cd66e1ad753e3807c79452a9de8dff9b150b8bb05714527d307af16169036b5baa35a11da17219450993b8a2920d58f74dde13d8b4e40e933e4a9e039a6ec5886b50d9a3c5290cf02392e7bc4697"}, 0x7, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0xc0000, 0x0) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x40000) setsockopt$auto(r2, 0x6, 0x5, &(0x7f0000000080)='*\x00', 0xe6) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x16, 0x1000000002, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) fcntl$auto(r3, 0x8, 0x1) fcntl$auto(r3, 0x10, 0x2) 34.815143097s ago: executing program 3 (id=171): rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo$auto(r1, r0, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x3, 0x3, @_sigchld={0x0, 0x0, 0xceb, 0x5, 0x4}}}) ioperm$auto(0x7, 0x6, 0x2) fstat$auto(0x1, &(0x7f0000001a40)={0x2, 0x3, 0x1, 0x2, 0x3, 0x0, 0x0, 0x6, 0xe, 0x7, 0x3, 0x7, 0x7ff, 0xffffffff80000000, 0x7, 0x7ff, 0x81}) rt_sigtimedwait$auto(&(0x7f0000000040)={0x4}, &(0x7f0000000080)={@_si_pad}, &(0x7f0000000100)={0xa72, 0xfffffffffffffffb}, 0x8) 34.654426977s ago: executing program 3 (id=172): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x112b730c2c00220b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) clock_settime$auto(0xfffefffb, &(0x7f0000000000)={0x7ffffffffffffffb, 0x100}) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x42102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f00000007c0)=""/153, 0x99) ioctl$auto_KVM_CREATE_VM(r1, 0x4018aee1, 0x1000000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0xa26, 0x4) sendmsg$auto_NL80211_CMD_STOP_AP(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000825bd7000fedbdf2510000000a7016e8008001900060000001400b300ff0200000000000000000000000000010c00848008008200", @ANYRES32=r6, @ANYRESHEX=r0], 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0xd1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0xfdef) 19.570123734s ago: executing program 32 (id=172): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x112b730c2c00220b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) clock_settime$auto(0xfffefffb, &(0x7f0000000000)={0x7ffffffffffffffb, 0x100}) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x42102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f00000007c0)=""/153, 0x99) ioctl$auto_KVM_CREATE_VM(r1, 0x4018aee1, 0x1000000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0xa26, 0x4) sendmsg$auto_NL80211_CMD_STOP_AP(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000825bd7000fedbdf2510000000a7016e8008001900060000001400b300ff0200000000000000000000000000010c00848008008200", @ANYRES32=r6, @ANYRESHEX=r0], 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0xd1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0xfdef) 12.046682713s ago: executing program 1 (id=240): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x8000000000000000, 0xffffffff7fff0005, 0xa) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fc39ad872c00000008000300", @ANYRES32=r2], 0x40}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000004c0)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="dc210021", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf254a000000c000ac00265b558ba278f7de696330fa134e7e655ece68561a7a730ed20172674a27f3c4ab639c767df6824f8d3e628d316e77ba89b361a0998b4bceaa36494d1018c4dae2e30a1060ab8ddb71942b97146208f7b51af5bcd603db2e446521353961b637587021c86ab6d84359321f6d082907b59da7a21fc712f40b1652bccbacb09d90fc329c402e1b0071e0a2fffd879c420f379bf10e151505b96f1f9fa04cea3cc99ebe38c65696b3794f365ce17a1c142c8be627cf8fbf927e85f1f81508002600c0ffffff"], 0xdc}, 0x1, 0x0, 0x0, 0x5183784f5d14f498}, 0x20004000) mmap$auto(0x0, 0x5, 0x1, 0x8010, 0x3, 0x7fff) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r3 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r3, 0x84, 0x0, 0x0, 0x0) fcntl$auto_F_SETLKW(0xffffffffffffffff, 0x7, 0x0) bpf$auto(0x5, 0x0, 0x171) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ec, 0x12) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)="bbaffd52e12c6021b3d70b10c2577f4d84c0bbbff8c13fac2bd2862b88838f9aff5b8aa87330dde4bd60123d29fb6c4bb61dd191331d12d88f7326d9b92184acda717212b07a4b92d9c7051b77de2655fe547176c3c591cd1a7ac9da6da5e0bb095b5031508aa8036a73882609b0f8d2f7913dd422ea0abb6c1fc3b958eac3b84762de9ea8893aee01b6dfaf", 0x9, &(0x7f0000000380)={&(0x7f0000000180)="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", 0x4}, 0xfffffffffffff6c4, &(0x7f00000003c0)="c2f191c3630f936081fb91cd405dd683583c02874ffe1f6ca373c363df2d8930722e9578f6", 0x4, 0xfffffffe}, 0xff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) stat$auto(0x0, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x4) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x6}) adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0x8, 0x100000001, 0x8, 0xffffffffffffffff, 0xffffffff, 0x0, 0x3, 0x0, 0x10001, {0xf}, 0x7fffffffffffffff, 0x3a9d, 0x5, 0xf, 0x0, 0x6, 0x1, 0x7, 0x800, 0x5, 0x3}) adjtimex$auto(&(0x7f0000000540)={0x6, 0x0, 0x9, 0x9, 0x1, 0x2, 0x4, 0x0, 0x4, 0x9531, 0x7, {0x200, 0x8000000000000000}, 0x9cc9, 0x82, 0x6, 0x2000006, 0x0, 0x100000000, 0x5, 0x7ff, 0x6, 0x5, 0x14}) 10.43865149s ago: executing program 1 (id=243): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mincore$auto(0x0, 0x10000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x4, 0x100000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x80000, 0x4020009, 0x2, 0x66f7, 0x3ff, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000240)={0x81, [0xc06, 0x4e, 0x3], [{0x4, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x80000001, 0xf3, 0x1, 0x1, 0x1}, {0xdbbd, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xfffff801, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x5b96, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xffffff4f, 0x0, 0x1, 0x1, 0x1}, {0xb, 0x9, 0x1, 0x0, 0x0, 0x1}, {0xfffffff8, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x2, 0x1, 0x0, 0x0, 0x1}, {0xf, 0x10000, 0x0, 0x1, 0x1}, {0x8001, 0xfffffffd, 0x0, 0x0, 0x1}, {0x1, 0x10000, 0x0, 0x1, 0x0, 0x1}], 0x3, 0x1, 0x5, 0xe34b, 0x8, 0x9, 0x8, "b9c1674bc0d6bf9354134c0aa38d4a81b23c37f3475cf8ddca7c788619d0fd30d33134d528c7c73d803aa2858e7a7bfbdfa4f7a2b5e16953cdfab47522bc4c35"}) sysinfo$auto(0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x703, 0x70bd27, 0x25dfd9fc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x4) listen$auto(r3, 0x80000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) listmount$auto(&(0x7f0000000000)={0x7, @raw=0x3, 0x5, 0x9, 0x9}, &(0x7f0000000100)=0x7, 0x40b1, 0xfe) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x8, 0x0) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000340)={0x50, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x1f, 0x11, '/P\x13jE\f\xf9^\xd7\xear\xf5\xa3\xd2\x84[\xf9*\x9b\"\x1c\xa4\xcd\x83\xf7\x12\xd3'}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x933}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000180)=ANY=[@ANYBLOB="aee93954f9c51a70a620adb28fc2eebf2c84eea06964ff6f78a73644d2e4df42f9fc7c15a5f34a9de65cf365a2cdc0df57f02876e62f020cfa843e45d60541cd54cea7d493d2fc3156fa069cc1b7431cd9cbd6019583d6c7c8e789108f3fa5467058f4d351625cf2418494fc172ffcea80fb910db0aa97cc21c77a41de366fcefb13da947855d3adef54e217", @ANYRES16=r6, @ANYBLOB="01032ebd7000fddbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) 9.254761131s ago: executing program 1 (id=255): mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) r0 = prctl$auto_PR_TASK_PERF_EVENTS_ENABLE(0x20, 0x4, 0x0, 0x2, 0x8) mmap$auto(0x0, 0x2020009, 0x40, 0xeb1, r0, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x4, 0x9, 0x9363, 0x9b72, 0x2, 0x1000) mmap$auto(0x9, 0x2000a, 0xf2, 0xeb1, 0x405, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) 9.004024761s ago: executing program 0 (id=248): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x200001, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x68c2, 0x0) socket(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x141801, 0x0) mmap$auto(0x0, 0x20009, 0x4004000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x98c7) write$auto(0x3, 0x0, 0xa26) madvise$auto(0x0, 0x20499d, 0x9) 7.86850445s ago: executing program 0 (id=249): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(r0, &(0x7f0000000300)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0x40009}, 0xc, &(0x7f00000002c0), 0x4, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000000)="8c09777ac3ccd4f45fb33d5f70fbd53a6da01b641379cdc13e19440b89882b9460e50ced475f9cf9ac4c46d357f4772c16a9e55956d26dce42a123925bcaa513f9b51dce04a8de5e8e00", 0x35, &(0x7f0000000140)={&(0x7f0000000080)="33b5440d12dfb7646342b4ec4229bd677b877e8701508e2a827fb41c6474558d11d7146ea94fdd53d85a13054d7afeaecb7d1ea366567ba026ec7638520267a032d213b64426985785e5356d9ab91fda7d9349108864e37f0208c4104fead82dd260da3e0b69c22361d8f40f106fa21632f2db485a5867f3bd97f1b8010d3e48aaa631686e2b2abeda01754cbacd5b70300e9738ec0cb4a4", 0x80000001}, 0x1, &(0x7f0000000180)="632c171de26c82ece8b67833aa2dbb7cf9c35b1a64bf78a8cae544576f4d459e25f45b903493be8dae0da89c4a9dd0c59fa5ccbe8bdfdde0dd09816c9bd4e4e333d3f920554f2209f29758424d60e08b226dbad5c64a0d14e2df27ef4c69b5399b8ce9c263493f3f5c1013d19670cdb9374483ab957ee40ea0eda295c85377337fa1c52dc5eddb009c438f512ea9b5104a6c8a131cb99ba37d256bb9a808e1ba15edc35722756daae6ac35b61f4bc8314be73f078ddaeccdadd97c0b1ba6d26946b568a7cdad40738beb7b322a334b0893ddc02437aaa78f92e7c8bf7ff194c7f32c6f35", 0x7, 0x3}, 0x2}, 0x80000001, 0x3, &(0x7f00000002c0)={0x7, 0x7f}) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x1, 0x1) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) socket(0x1f, 0x2, 0x7754) 7.463385167s ago: executing program 0 (id=250): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x2, 0x1a525c0f) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto(r1, 0x10000000084, 0x22, 0x0, 0x30) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x200}, 0x55) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) read$auto(0x3, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_ioam6(0x0, r2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x80000000, &(0x7f0000000380)={{0x9, 0x8a4}, {0x40, 0x7}, 0x0, 0x1, 0x0, 0x2, 0x8, 0x7, 0x4, 0xf, 0xbd8, 0x7, 0x9, 0x7, 0x80000000, 0x8}) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x4008800) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.069512932s ago: executing program 1 (id=251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) pipe2$auto(&(0x7f0000000080), 0x3fb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/suspend_stats/failed_suspend\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/255, 0xff) init_module$auto(&(0x7f0000000380)="e5727894b9a8e0675ac7b9b416ff8e5ddbcac2eb44ea34057974d5b692af5c6b4fc4737e6e2222fdad3cc7772d9b3aea37d456e12ee6b9a00076114d385e35a7b62b467a091821235a3cca1ea47e07f68f17bf32198a992718f2f453c9c27fa2fa40a286564b03d4a541cf6ebbc680d74c2ed69802b84bd208998e06a1e376719960fb4dc4150fe6e2a828df60f23b5dc5fdaa51bc39bafe9489f4778b7aa1cc4839b127ab904336db13670cb0c2e8712cc5c31b95911d2f3b513815fc1ce2402556e2d7a177f25f14e813788b3e84c89618d494de013cc5ab35e24e42c930b927", 0x1, &(0x7f0000000480)='#,\x00') move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x8, 0x5, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x30, 0x80000006, 0x4) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x200, 0x1ff, 0x7, 0x80000042, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0xc, 0x80, 0x100000000, 0x0, 0x7, 0x20fc, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa39, 0x0, 0x3, 0xfffffffffffffffa, 0xffffffffffff5a66, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) 6.851451749s ago: executing program 4 (id=252): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x341, 0x0) (async) r0 = socket(0x29, 0x800, 0x80) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8}) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_1={r0, 0x6, @next_key=0x3, 0x8000}, 0x6f3) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) (async) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x2029c1, 0x1ee) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) mmap$auto(0x0, 0x400008, 0x400000df, 0x9b72, 0x2, 0x8000) (async, rerun: 64) mlockall$auto(0x7) (rerun: 64) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/state\x00', 0x2000, 0x0) lseek$auto(r3, 0x9, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) ioprio_set$auto(0x3, 0x0, 0x4b34) (rerun: 64) mmap$auto(0x5, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8001) (async) capset$auto(0x0, 0x0) (async) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x961064a0, 0x600000000200007) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 6.349282339s ago: executing program 0 (id=254): mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) r0 = prctl$auto_PR_TASK_PERF_EVENTS_ENABLE(0x20, 0x4, 0x0, 0x2, 0x8) mmap$auto(0x0, 0x2020009, 0x40, 0xeb1, r0, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x4, 0x9, 0x9363, 0x9b72, 0x2, 0x1000) mmap$auto(0x9, 0x2000a, 0xf2, 0xeb1, 0x405, 0x80000000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r3, 0x0, 0x1) 5.800610938s ago: executing program 4 (id=256): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r1 = socket(0x18, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb5, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) fadvise64$auto(r1, 0x1, 0x9493, 0x3) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xa0501, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000080)="782a94502c0b522011ae455567b0c289466e57cc9aeebe16182135caab48a1bceb12696bed") r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f00000001c0)="4cea6ed1dc1f91f3c388b5622a274610e10800ca08ba7aa1995d92e1d0ae2ef23f241b2338", 0x25) 5.436713685s ago: executing program 4 (id=257): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r1 = socket(0x18, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb5, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) fadvise64$auto(r1, 0x1, 0x9493, 0x3) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xa0501, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000080)="782a94502c0b522011ae455567b0c289466e57cc9aeebe16182135caab48a1bceb12696bed") r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f00000001c0)="4cea6ed1dc1f91f3c388b5622a274610e10800ca08ba7aa1995d92e1d0ae2ef23f241b2338", 0x25) 4.660458826s ago: executing program 4 (id=258): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x6) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) getsockopt$auto_SO_PEEK_OFF(r1, 0x3, 0x2a, &(0x7f0000000040)='\x00\x00\xaf\xc7\xa4\xbc\x11\xdc\xd1$:2\xcc\x87\xfe\xe2\xd05\x0e\xc8\x06\xb998\xa3\x02\xcf\xe0Y*\x10\x0e\x9f`\x00\x00', 0x0) (async) unshare$auto(0x40000080) 4.449351775s ago: executing program 0 (id=259): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) sched_setscheduler$auto(0x0, 0x8, &(0x7f0000000000)={0xfff}) fcntl$auto(r1, 0x402, 0x2) prctl$auto(0x23, 0xa, 0xd929, 0x0, 0x0) r2 = fcntl$auto(r1, 0x402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0) writev$auto(r3, &(0x7f0000000000)={0x0, 0x710d}, 0x8000000000000001) pread64$auto(r0, 0x0, 0x3f, 0x7fff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) recvmmsg$auto(r2, &(0x7f0000001540)={{&(0x7f0000001380)="09c016331236064167b10709eaeed95717361fe423a6aebf3135ac96661c8578175d05f3f3e510f1d33fc1e63870ba256583ad155df26cc5941a2b2b6e47911621da8c61e82d8b986638db9906fc273b0de39737b2764cd92057e787cce05e04fb523ce66cfee2910624f1156be595f2ede9f2359448589f19bd10f91c8f682e4a32d254f0c16366d59b9d3c5b63a760ccc76bcad4f0046dac76a1ee9280acec4755602a2b8b03d4d0a1ade94a1cc22228d030841079a252f9345e570303fac39137e3efdc9a389d87df404284c16e5e80da33ddf6c46fd12d19dc14f1fc3a625e334e55ca2f08fb93ea504d6224c6f83ee255c3", 0xfff, &(0x7f0000000140)={&(0x7f00000000c0)="3d73dc8eb3cc8be7002d00f361f76989acc1ef12fb2393dfe55e6b62ae7840362e24552a3216f0790f4670fd87482c7649671360528ee98233ab569f90943e21cd15f0ca160e0cf904109703afcd8c06f5", 0x3}, 0x6, &(0x7f0000001480)="fb148f64071b84f6562ba314effceb81b6d570eea79d824d1a7eebc2791f6351682d16b04a68c9e249ed46314013901a90338e4aa716c2ba9554827101d99203b83041b73deb2007068aeee6571207d607efd8130902b01ee555087cf3b0be6b80103a3c278aafbef46e33bc9bdac38a5bb620ca0291860a6c2a98d730a59c08c517a542ed628e0187a7c833f7f96d4165b71e", 0x2, 0x7}}, 0xfffffe01, 0x0, &(0x7f0000001580)={0x0, 0x60}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) futex$auto(&(0x7f00000015c0)=0xfff, 0x0, 0x5, &(0x7f0000001600)={0xca, 0x9}, &(0x7f0000001640), 0xfffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1) mmap$auto(0x3, 0x4020029, 0x6, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x2, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x1, 0x202, 0x0, 0x84, [0x6, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x2006, 0x0, 0xfffffffffffbfffe, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x4, 0x0, 0x5, 0x400000000005b8, 0xffff, 0x4, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x8, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) 4.297428144s ago: executing program 1 (id=260): setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r5, 0x3f}, 0x36) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r6) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/mpls/conf/netdevsim3/input\x00', 0x42a81, 0x0) pwrite64$auto(r8, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000000000), 0x0, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xa, 0x16, "000200000000"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) prctl$auto(0x4b, 0x8, 0x0, 0x0, 0x0) ioprio_get$auto(0x2, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.684624803s ago: executing program 4 (id=261): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x100000011, 0xffffffffffffffff, 0x62) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x206d00, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x401) (async) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="11000000126584", 0x7) (async) socket(0x2, 0x1, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) madvise$auto(0x8e, 0x3, 0x7fff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop8/events\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001c00)=""/4111, 0x100f) futex$auto(0x0, 0x6, 0x9, &(0x7f0000000a00)={0xfff, 0xffffffffffffffd4}, 0x0, 0xffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/009/001\x00', 0x4aa003, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) (async) futex$auto(&(0x7f0000000080)=0x1000003, 0x3, 0x1, 0x0, 0x0, 0xfbfffffa) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/devices\x00', 0x800, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, &(0x7f0000002c40)=""/4086, 0xff6) (async) ioctl$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x1, &(0x7f0000000280)) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES8, @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20080800) ioctl$auto(0x3, 0x80000541b, 0x38) 3.324533623s ago: executing program 1 (id=263): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) prctl$auto_PR_SET_NAME(0xf, 0x5, 0x0, 0x8, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/ext4/sda1/mb_stats\x00', 0x109100, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) nanosleep$auto(&(0x7f0000000080)={0xfffffffffffffff7, 0x5ea}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d000000"], 0x6c}}, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) unshare$auto(0x40000080) lsm_list_modules$auto(0x0, 0x0, 0x0) mlock$auto(0xc, 0x87) sendmsg$auto_IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4000004) 2.183204408s ago: executing program 2 (id=265): read$auto_fops_u32_ro_(0xffffffffffffffff, 0x0, 0x0) statmount$auto(&(0x7f0000000540)={0x5, @inferred, 0x101, 0x5, 0x9}, &(0x7f0000000200)={0x13, 0x7, 0x8, 0x1000, 0x6, 0x8, 0x0, 0xffffffff, 0x40, 0x8, 0xc000000, 0x1a0, 0x401, 0x0, 0x6, 0x7, 0x0, 0xe9e3, 0x3, 0x2, 0x7, 0x0, 0x9, 0xe, 0x7, 0x37ea, [0x6, 0x2, 0x80000001, 0xd3, 0x3ff, 0x4, 0x7ff, 0x6, 0x4, 0x4a, 0x7, 0x3, 0x4, 0x88, 0x5, 0x1, 0x7, 0x5, 0x95, 0x9, 0x1, 0x40000000000006, 0x8, 0x0, 0x8000, 0x8000000007, 0x100000000, 0x80000001, 0x1880000000, 0x6, 0x8, 0xe, 0x9, 0x8000, 0x2, 0x6, 0xfffffffffffffffe, 0x0, 0x1800000000000000, 0x6, 0x6d4, 0xa167, 0x401, 0x8, 0xd, 0x1], "5570dc3f9ad44830af3163d864bc95e7c2f20b73514acedd76c758302594d65bd302ca9ecc185d57394faba70458781ee273422a086f4150b7bbc62f378698dc4bb416012fe83757c2a6b6138782a93efaae631832d1320a2c445e677ab57af787304d6fc35065c814476477528a5044f7d5182c487e52524bb822340ea67f1393cb807347d880152c56670f40347cd4455e69"}, 0x5062, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) semctl$auto_GETPID(0x1, 0x1, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty32\x00', 0x22002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x80000000006) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) statmount$auto(&(0x7f0000000140)={0x9, @inferred=r0, 0x8000000000000001, 0x7fffffffffffffff, 0x2}, &(0x7f0000000680)={0x401, 0xffffffff, 0x1, 0x80000001, 0x2, 0x0, 0xc0000000, 0xfff, 0xffffffffffff1604, 0x8, 0x0, 0x8, 0x4, 0x0, 0xffffffffffff0b6e, 0xae, 0xffff, 0x190, 0x8, 0x5, 0x8d3, 0x1, 0x0, 0x5, 0xfffffffd, 0x9, [0xd603, 0x3, 0x7fffffff, 0x0, 0x1, 0x5c, 0x7, 0x5, 0x9a, 0x8dbd, 0x100000000, 0x7, 0x100000000, 0x2, 0xa, 0x7, 0x10, 0x7, 0x3, 0xfffffffffffffffc, 0x3, 0x426eace5, 0x6, 0x2, 0x1, 0xc000000, 0x9, 0xffffffff00000001, 0x4, 0xfffffffffffffeff, 0x7f, 0x7fffffff, 0x400, 0x80000001, 0x3, 0x1, 0x8, 0x3, 0x943d, 0x9, 0xa, 0x1, 0x3, 0x5, 0x3, 0x9], "97aab2c82f963f2a17b16bd23393e7a3cd66e1ad753e3807c79452a9de8dff9b150b8bb05714527d307af16169036b5baa35a11da17219450993b8a2920d58f74dde13d8b4e40e933e4a9e039a6ec5886b50d9a3c5290cf02392e7bc4697"}, 0x7, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0xc0000, 0x0) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x40000) setsockopt$auto(r2, 0x6, 0x5, &(0x7f0000000080)='*\x00', 0xe6) mmap$auto(0x0, 0x9, 0x400000072, 0x16, 0x1000000002, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r3, 0x8, 0x1) fcntl$auto(r3, 0x10, 0x2) 1.749374019s ago: executing program 2 (id=266): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r1 = socket(0x18, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb5, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) fadvise64$auto(r1, 0x1, 0x9493, 0x3) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xa0501, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000080)="782a94502c0b522011ae455567b0c289466e57cc9aeebe16182135caab48a1bceb12696bed") r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f00000001c0)="4cea6ed1dc1f91f3c388b5622a274610e10800ca08ba7aa1995d92e1d0ae2ef23f241b2338", 0x25) 1.440215709s ago: executing program 2 (id=267): open(0x0, 0x22240, 0x154) r0 = fcntl$auto(0x3, 0x400, 0x1) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(r0, 0x6, r0) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) socket(0x29, 0x6, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram14\x00', 0x20201, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000180)="b46557685267a028e14e25a5b7d9003af9ce45fa5b437217a685454a0392c0a552f8be9f0ce46fd2c3cd3f08bbb2ca0f42ab2578e39acc36b4ad3c7297a66a5cd421979ee5da27fe0327e133bbb03c1e062c430383927eee3452f9f98497c3ef4223e273144dbedb62", 0x12, 0x0, 0xa, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf25020000006d"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) ioctl$auto(0x3, 0x127c, 0x38) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) setuid$auto(0xe) bpf$auto(0x5, &(0x7f0000003c80)=@bpf_attr_7={@map_id=0x8, 0x81, 0xf}, 0x5) setfsuid$auto(0xee01) 864.485288ms ago: executing program 2 (id=268): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) write$auto(r0, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x920xee01, 0x0, 0x0, 0xffdfffffffffff91, 0xfd3, 0x2, 0x8, 0x1, 0x80000000080, 0x0, 0x1, 0x3}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r7, @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r8 = getsockopt$auto_SO_DOMAIN(r3, 0x8ac, 0x27, &(0x7f0000000100)='\x00', &(0x7f0000000140)=0xb) msgctl$auto_MSG_STAT(0x10, 0xb, &(0x7f0000000480)={{0x7, r6, r7, 0x7, 0x7fffffff, 0x6, 0x4b}, &(0x7f0000000340)=0x6, &(0x7f0000000380)=0x77, 0x2, 0x7, 0x7f, 0x9, 0x5eb3, 0x4, 0x1, 0x8, @raw=0x9, @raw=0xe5c7}) ioctl$auto(r8, 0x400, r5) syslog$auto(0x1, &(0x7f00000001c0)='!$\'(\x00', 0x2) write$auto(r3, &(0x7f0000000040)='/dev/uinput\x00', 0x5) 264.516264ms ago: executing program 0 (id=270): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), 0xffffffffffffffff) ioperm$auto(0xde, 0x9, 0x100402) brk$auto(0xfff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x7904a4a47fe859c7, 0x70bd22, 0x25dfdbfc}, 0x14}}, 0x40810) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_START_POLL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f0, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x9}, @NFC_ATTR_VENDOR_DATA={0xeb, 0x1f, "5bd9f9fee6b3f6611f7d93a2566f658595a08e9e31a9533d4ea5afaa7c6dc039060f340747d5d5d3d251458ad4bf2382ad9e3696c31fd0178f97c8674519d81d539459df518ac153903d7340f730601fdf47e5fb886ae3b9f9d3564bfc6325b579bc3a6d29bd6ce469d4783b891397edd7c0c48230012907d9e601182da630c7b233462b075b6d9019a173826b3db487d586340aa0c68a4a12525f582db5bc0b04255e5bed39949fefac4546a105879850827930866802c57453d80c408a7accb3abc252a914c0d71b7fd1e95fa5c9f16023fd0775ddb6047f547804556be89f93a265860f8a07"}, @NFC_ATTR_SE_APDU={0xd8, 0x19, "ab466fde3903ebebba07b079a7eada9755a944977b797f0650e555764e328fc99d1fe3e878cfd48369f2b55c630b831d4c8cc9c48f56751bc67ae54889b3b4918c9575b9d2da1b769a2104ab5735bc254ec09b5c6fe0f8d3d7b62634da5cac13d0817f35aaeb30b513edf6869d886a3b6681dd1558a632437f106727dbd2f6035309d788e336e79f3d925826176e438368434fc09285216e202fcb4dd4c6f8d677b66e0ffbb482b25ccaa2d1482b60cebe91613d211a139ce4215804176d20e1c2f3433064c621078868ac513927dca3e85adf01"}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x5}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pkey_free$auto(0xfffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/writes_starved\x00', 0x6c2180, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r3 = socket(0x1f, 0x6, 0x8) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 208.149487ms ago: executing program 2 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_prog_fd=0x4, 0x7, @old_prog_fd=0x8000}, 0xa3) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x3, &(0x7f0000000100)=@raw_tracepoint={0x5, r2, 0x0, 0x7}, 0xe) mlockall$auto(0x7) getrandom$auto(&(0x7f00000000c0)='ovs_meter\x00', 0x6, 0x2) madvise$auto(0x2000, 0xffffffffffff0001, 0x9) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25020000005cf5c554cb023c0600592d7a017ad8fbca73002310a92702cdc2aaeb7192b8d5c24300000000"], 0x30}, 0x1, 0x0, 0x0, 0x48804}, 0x4004) 0s ago: executing program 4 (id=272): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xb5, 0x10, 0x4, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0xa821, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="028006000000000005"]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x20000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88G\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) open(0x0, 0x10001, 0x144) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) seccomp$auto(0x4, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fstat$auto(0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r2, 0x10e, 0x1, 0x0, 0xe) setsockopt$auto(0x3, 0x10e, 0x2, 0x0, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r1, 0x1, 0x34, &(0x7f00000000c0)='/dev/pts/ptmx\x00', 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 67.175530][ T5823] cgroup: Unknown subsys name 'net' [ 67.288840][ T5823] cgroup: Unknown subsys name 'cpuset' [ 67.296952][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.706155][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.703464][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.712173][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.720399][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.729775][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.737871][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.745237][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.916923][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.931090][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.963830][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.972696][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.974123][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.987556][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.987561][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.996724][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.002411][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.009622][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.023647][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.023909][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.031689][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.047364][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.055089][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.063168][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.066503][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 71.070728][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.085200][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.204197][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.211683][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.219770][ T5832] bridge_slave_0: entered allmulticast mode [ 71.226513][ T5832] bridge_slave_0: entered promiscuous mode [ 71.261862][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.269070][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.276957][ T5832] bridge_slave_1: entered allmulticast mode [ 71.283915][ T5832] bridge_slave_1: entered promiscuous mode [ 71.320821][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.332512][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.376547][ T5832] team0: Port device team_slave_0 added [ 71.408087][ T5832] team0: Port device team_slave_1 added [ 71.448869][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.457184][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.483808][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.518139][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.525128][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.551624][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.652664][ T5832] hsr_slave_0: entered promiscuous mode [ 71.659237][ T5832] hsr_slave_1: entered promiscuous mode [ 71.705603][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.768537][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.813016][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 71.830644][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.837276][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.857003][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.864260][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.871606][ T5838] bridge_slave_0: entered allmulticast mode [ 71.879038][ T5838] bridge_slave_0: entered promiscuous mode [ 71.901808][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.909285][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.917097][ T5838] bridge_slave_1: entered allmulticast mode [ 71.923884][ T5838] bridge_slave_1: entered promiscuous mode [ 71.992316][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.004673][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.064872][ T5838] team0: Port device team_slave_0 added [ 72.095836][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.103030][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.110738][ T5839] bridge_slave_0: entered allmulticast mode [ 72.117631][ T5839] bridge_slave_0: entered promiscuous mode [ 72.129567][ T5838] team0: Port device team_slave_1 added [ 72.140734][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.148181][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.155549][ T5840] bridge_slave_0: entered allmulticast mode [ 72.162496][ T5840] bridge_slave_0: entered promiscuous mode [ 72.169834][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.177041][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.184219][ T5840] bridge_slave_1: entered allmulticast mode [ 72.191060][ T5840] bridge_slave_1: entered promiscuous mode [ 72.198239][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.205393][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.212703][ T5839] bridge_slave_1: entered allmulticast mode [ 72.224641][ T5839] bridge_slave_1: entered promiscuous mode [ 72.276510][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.283507][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.310192][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.327361][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.343680][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.351091][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.377710][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.394119][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.414378][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.442955][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.473177][ T5839] team0: Port device team_slave_0 added [ 72.482116][ T5840] team0: Port device team_slave_0 added [ 72.491252][ T5840] team0: Port device team_slave_1 added [ 72.515176][ T5839] team0: Port device team_slave_1 added [ 72.560330][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.567880][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.594841][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.608687][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.616527][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.642599][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.658090][ T5838] hsr_slave_0: entered promiscuous mode [ 72.664194][ T5838] hsr_slave_1: entered promiscuous mode [ 72.670390][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.678326][ T5838] Cannot create hsr debugfs directory [ 72.711958][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.719011][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.745413][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.757967][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.764935][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.791742][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.802543][ T5846] Bluetooth: hci0: command tx timeout [ 72.821375][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.835255][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.857986][ T5840] hsr_slave_0: entered promiscuous mode [ 72.864877][ T5840] hsr_slave_1: entered promiscuous mode [ 72.871915][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.879935][ T5840] Cannot create hsr debugfs directory [ 72.897423][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.908742][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.942503][ T5839] hsr_slave_0: entered promiscuous mode [ 72.948754][ T5839] hsr_slave_1: entered promiscuous mode [ 72.954676][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.962320][ T5839] Cannot create hsr debugfs directory [ 73.096482][ T5846] Bluetooth: hci1: command tx timeout [ 73.096488][ T5847] Bluetooth: hci2: command tx timeout [ 73.175931][ T5846] Bluetooth: hci3: command tx timeout [ 73.245107][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.255005][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.269856][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.290063][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.334681][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.346282][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.356676][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.366383][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.407599][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.427376][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.456516][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.469145][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.476414][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.492543][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.504743][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.518274][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.525414][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.537873][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.681780][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.725208][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.752451][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.787491][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.794636][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.811410][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.818620][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.872431][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.891932][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.903798][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.911032][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.934514][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.941691][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.955545][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.976415][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.035474][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.100456][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.107723][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.118431][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.125571][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.159056][ T5832] veth0_vlan: entered promiscuous mode [ 74.220485][ T5832] veth1_vlan: entered promiscuous mode [ 74.244321][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.333661][ T5832] veth0_macvtap: entered promiscuous mode [ 74.391138][ T5840] veth0_vlan: entered promiscuous mode [ 74.399558][ T5832] veth1_macvtap: entered promiscuous mode [ 74.432066][ T5840] veth1_vlan: entered promiscuous mode [ 74.443385][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.484893][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.529787][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.541713][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.551171][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.561147][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.570258][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.586717][ T5838] veth0_vlan: entered promiscuous mode [ 74.603152][ T5838] veth1_vlan: entered promiscuous mode [ 74.636944][ T5840] veth0_macvtap: entered promiscuous mode [ 74.652335][ T5840] veth1_macvtap: entered promiscuous mode [ 74.663020][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.691455][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.702967][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.714535][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.725180][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.736146][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.747273][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.757605][ T5838] veth0_macvtap: entered promiscuous mode [ 74.777476][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.787185][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.801231][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.810325][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823410][ T5838] veth1_macvtap: entered promiscuous mode [ 74.866540][ T5846] Bluetooth: hci0: command tx timeout [ 74.888376][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.894384][ T1342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.907861][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.908268][ T1342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.924321][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.935858][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.947079][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.982398][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.993298][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.003355][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.014177][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.026430][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.049907][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.058847][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.068290][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.078401][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.118363][ T5839] veth0_vlan: entered promiscuous mode [ 75.140638][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.152207][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.161162][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.170688][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.176358][ T5846] Bluetooth: hci2: command tx timeout [ 75.178720][ T5847] Bluetooth: hci1: command tx timeout [ 75.192871][ T5839] veth1_vlan: entered promiscuous mode [ 75.257744][ T5847] Bluetooth: hci3: command tx timeout [ 75.305198][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.306874][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.332812][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.344101][ T5839] veth0_macvtap: entered promiscuous mode [ 75.365221][ T5839] veth1_macvtap: entered promiscuous mode [ 75.402926][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428635][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.468784][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.498341][ T5895] Invalid ELF header magic: != ELF [ 75.504773][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.519205][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.530748][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.540676][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.551255][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.564250][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.589263][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.599994][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.610920][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.623630][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.634534][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.649899][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.662735][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.677667][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.691511][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.716426][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.725194][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.752034][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.764778][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.981821][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.013808][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.089658][ T329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.117292][ T329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.775009][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.943802][ T5847] Bluetooth: hci0: command tx timeout [ 77.183016][ T5939] Zero length message leads to an empty skb [ 77.257519][ T5847] Bluetooth: hci1: command tx timeout [ 77.263573][ T5846] Bluetooth: hci2: command tx timeout [ 77.347204][ T5847] Bluetooth: hci3: command tx timeout [ 79.027439][ T5847] Bluetooth: hci0: command tx timeout [ 79.335987][ T5847] Bluetooth: hci1: command tx timeout [ 79.341472][ T5847] Bluetooth: hci2: command tx timeout [ 79.415744][ T5847] Bluetooth: hci3: command tx timeout [ 84.566019][ T6017] process 'syz.3.24' launched './file0' with NULL argv: empty string added [ 84.657225][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 84.697473][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 84.705183][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 84.836121][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 84.844895][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 84.925953][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 84.955881][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 85.250182][ T6013] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 86.021220][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.206206][ T975] cfg80211: failed to load regulatory.db [ 89.808005][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.920490][ T6107] netlink: 330 bytes leftover after parsing attributes in process `syz.0.40'. [ 90.251036][ T6118] FAULT_INJECTION: forcing a failure. [ 90.251036][ T6118] name failslab, interval 1, probability 0, space 0, times 1 [ 90.267573][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.0.44 Not tainted 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 90.267605][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.267621][ T6118] Call Trace: [ 90.267627][ T6118] [ 90.267639][ T6118] dump_stack_lvl+0x16c/0x1f0 [ 90.267677][ T6118] should_fail_ex+0x50a/0x650 [ 90.267710][ T6118] ? fs_reclaim_acquire+0xae/0x150 [ 90.267741][ T6118] should_failslab+0xc2/0x120 [ 90.267764][ T6118] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 90.267796][ T6118] ? vma_merge_new_range+0x40a/0xbb0 [ 90.267828][ T6118] ? vm_area_alloc+0x1f/0x230 [ 90.267866][ T6118] vm_area_alloc+0x1f/0x230 [ 90.267903][ T6118] __mmap_region+0x108d/0x2760 [ 90.267927][ T6118] ? __pfx___mmap_region+0x10/0x10 [ 90.267957][ T6118] ? lock_acquire+0x2f/0xb0 [ 90.267984][ T6118] ? is_bpf_text_address+0x30/0x1a0 [ 90.268012][ T6118] ? bpf_ksym_find+0x124/0x1c0 [ 90.268042][ T6118] ? hlock_class+0x4e/0x130 [ 90.268065][ T6118] ? mark_lock+0xb5/0xc60 [ 90.268148][ T6118] ? cap_capable+0xb3/0x250 [ 90.268179][ T6118] mmap_region+0x1ab/0x3f0 [ 90.268208][ T6118] do_mmap+0xd8d/0x11b0 [ 90.268243][ T6118] ? __pfx_do_mmap+0x10/0x10 [ 90.268272][ T6118] ? __pfx_down_write_killable+0x10/0x10 [ 90.268310][ T6118] vm_mmap_pgoff+0x203/0x3a0 [ 90.268348][ T6118] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 90.268392][ T6118] ksys_mmap_pgoff+0x7d/0x5c0 [ 90.268420][ T6118] ? rcu_is_watching+0x12/0xc0 [ 90.268448][ T6118] __x64_sys_mmap+0x125/0x190 [ 90.268485][ T6118] do_syscall_64+0xcd/0x250 [ 90.268516][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.268547][ T6118] RIP: 0033:0x7f6c1378d169 [ 90.268566][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.268591][ T6118] RSP: 002b:00007f6c14587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 90.268613][ T6118] RAX: ffffffffffffffda RBX: 00007f6c139a5fa0 RCX: 00007f6c1378d169 [ 90.268628][ T6118] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 90.268641][ T6118] RBP: 00007f6c1380e2a0 R08: 0000000000000401 R09: 0000000000008000 [ 90.268654][ T6118] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 90.268668][ T6118] R13: 0000000000000000 R14: 00007f6c139a5fa0 R15: 00007ffd4f0d6288 [ 90.268699][ T6118] [ 90.530912][ T6116] FAULT_INJECTION: forcing a failure. [ 90.530912][ T6116] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.544260][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.1.43 Not tainted 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 90.544290][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.544303][ T6116] Call Trace: [ 90.544309][ T6116] [ 90.544318][ T6116] dump_stack_lvl+0x16c/0x1f0 [ 90.544353][ T6116] should_fail_ex+0x50a/0x650 [ 90.544391][ T6116] _copy_from_user+0x2e/0xd0 [ 90.544415][ T6116] copy_msghdr_from_user+0x99/0x160 [ 90.544448][ T6116] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.544495][ T6116] ___sys_sendmsg+0xff/0x1e0 [ 90.544527][ T6116] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.544572][ T6116] ? __pfx_lock_release+0x10/0x10 [ 90.544600][ T6116] ? trace_lock_acquire+0x14e/0x1f0 [ 90.544635][ T6116] ? __fget_files+0x206/0x3a0 [ 90.544673][ T6116] __sys_sendmsg+0x16e/0x220 [ 90.544702][ T6116] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.544748][ T6116] do_syscall_64+0xcd/0x250 [ 90.544774][ T6116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.544802][ T6116] RIP: 0033:0x7f687598d169 [ 90.544828][ T6116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.544846][ T6116] RSP: 002b:00007f687688c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.544867][ T6116] RAX: ffffffffffffffda RBX: 00007f6875ba5fa0 RCX: 00007f687598d169 [ 90.544879][ T6116] RDX: 0000000000000080 RSI: 00004000000028c0 RDI: 0000000000000005 [ 90.544891][ T6116] RBP: 00007f687688c090 R08: 0000000000000000 R09: 0000000000000000 [ 90.544903][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.544915][ T6116] R13: 0000000000000000 R14: 00007f6875ba5fa0 R15: 00007ffeada49fc8 [ 90.544940][ T6116] [ 93.206446][ T6169] GUP no longer grows the stack in syz.0.53 (6169): 14000-401000 (4000) [ 93.265921][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.0.53 Not tainted 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 93.265954][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.265966][ T6169] Call Trace: [ 93.265974][ T6169] [ 93.265983][ T6169] dump_stack_lvl+0x16c/0x1f0 [ 93.266016][ T6169] gup_vma_lookup+0x1d2/0x220 [ 93.266049][ T6169] __get_user_pages+0x236/0x36f0 [ 93.266089][ T6169] ? hlock_class+0x4e/0x130 [ 93.266113][ T6169] ? __lock_acquire+0x15a9/0x3c40 [ 93.266144][ T6169] ? __pfx___get_user_pages+0x10/0x10 [ 93.266189][ T6169] __gup_longterm_locked+0x212/0x1870 [ 93.266222][ T6169] ? __pfx___lock_acquire+0x10/0x10 [ 93.266260][ T6169] ? __pfx___gup_longterm_locked+0x10/0x10 [ 93.266294][ T6169] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 93.266327][ T6169] ? rwsem_read_trylock+0x12d/0x250 [ 93.266362][ T6169] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 93.266396][ T6169] ? process_vm_rw_core.constprop.0+0x3ff/0x9c0 [ 93.266427][ T6169] pin_user_pages_remote+0xee/0x150 [ 93.266461][ T6169] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 93.266493][ T6169] ? down_read+0xc9/0x330 [ 93.266534][ T6169] process_vm_rw_core.constprop.0+0x42b/0x9c0 [ 93.266565][ T6169] ? futex_wait_queue+0x103/0x1f0 [ 93.266604][ T6169] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 93.266658][ T6169] process_vm_rw+0x301/0x360 [ 93.266684][ T6169] ? __pfx_process_vm_rw+0x10/0x10 [ 93.266750][ T6169] ? xfd_validate_state+0x5d/0x180 [ 93.266782][ T6169] ? rcu_is_watching+0x12/0xc0 [ 93.266817][ T6169] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 93.266843][ T6169] ? do_syscall_64+0x91/0x250 [ 93.266870][ T6169] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.266897][ T6169] do_syscall_64+0xcd/0x250 [ 93.266927][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.266958][ T6169] RIP: 0033:0x7f6c1378d169 [ 93.266977][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.266997][ T6169] RSP: 002b:00007f6c14587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 93.267019][ T6169] RAX: ffffffffffffffda RBX: 00007f6c139a5fa0 RCX: 00007f6c1378d169 [ 93.267035][ T6169] RDX: 0000000000000004 RSI: 0000400000000040 RDI: 0000000000000047 [ 93.267049][ T6169] RBP: 00007f6c1380e2a0 R08: 0000000000000003 R09: 0000000000000000 [ 93.267062][ T6169] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 93.267076][ T6169] R13: 0000000000000000 R14: 00007f6c139a5fa0 R15: 00007ffd4f0d6288 [ 93.267108][ T6169] [ 93.552593][ T29] audit: type=1806 audit(1740205556.618:2): xattr="." res=0 [ 94.629092][ T6191] device-mapper: ioctl: name not supplied when creating device [ 96.369430][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.428212][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.459411][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.483164][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.496820][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.530670][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.574962][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.586288][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.612313][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 96.622666][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 100.000839][ T6314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.045899][ T6314] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.140854][ T6314] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.238327][ T6314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.244493][ T6314] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.295441][ T6314] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.321617][ T6314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.329919][ T6314] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.341212][ T6314] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.353037][ T6314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.375941][ T6314] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.394321][ T6314] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.852844][ T6341] __nla_validate_parse: 25 callbacks suppressed [ 101.852865][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 101.893871][ T6345] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 102.061176][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.070734][ T6342] ima: policy update failed [ 102.076466][ T29] audit: type=1802 audit(1740205565.148:3): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.97" res=0 errno=0 [ 102.295855][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.375857][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.382044][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.472978][ T6354] Invalid ELF header magic: != ELF [ 102.761296][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.829739][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.859493][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.900256][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.929168][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.970229][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.987745][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.010966][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.039763][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.707410][ T6380] Line length is too long: Should be less than 4094 [ 104.135736][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.376186][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.467251][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.473469][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.535861][ T6398] random: crng reseeded on system resumption [ 106.215777][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.343273][ T6443] tipc: Started in network mode [ 106.343300][ T6443] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 106.343315][ T6443] tipc: Node number set to 2387504917 [ 106.455774][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.536412][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.536461][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.828879][ T6448] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd83 [ 106.947753][ T6452] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 107.163621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.176042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.196241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.682382][ T6472] nbd: must specify a device to reconfigure [ 108.079215][ T6484] __nla_validate_parse: 28 callbacks suppressed [ 108.079237][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 108.580895][ T6493] udc dummy_udc.0: soft-connect without a gadget driver [ 110.301019][ T6522] cgroup: fork rejected by pids controller in /syz0 [ 113.649296][ T6713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.655453][ T6713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.776083][ T6713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.782197][ T6713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.671462][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 115.656245][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.663216][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.815854][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.821949][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.019587][ T6763] netlink: 'syz.2.145': attribute type 8 has an invalid length. [ 119.843851][ T6806] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 120.081675][ T6811] random: crng reseeded on system resumption [ 121.870600][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 123.899910][ T6862] FAULT_INJECTION: forcing a failure. [ 123.899910][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 123.899960][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.3.164 Tainted: G U 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 123.899995][ T6862] Tainted: [U]=USER [ 123.900003][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.900017][ T6862] Call Trace: [ 123.900024][ T6862] [ 123.900037][ T6862] dump_stack_lvl+0x16c/0x1f0 [ 123.900073][ T6862] should_fail_ex+0x50a/0x650 [ 123.900107][ T6862] ? fs_reclaim_acquire+0xae/0x150 [ 123.900139][ T6862] should_failslab+0xc2/0x120 [ 123.900163][ T6862] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 123.900197][ T6862] ? __local_bh_enable_ip+0xa4/0x120 [ 123.900231][ T6862] ? __alloc_skb+0x2b1/0x380 [ 123.900266][ T6862] __alloc_skb+0x2b1/0x380 [ 123.900295][ T6862] ? __pfx___alloc_skb+0x10/0x10 [ 123.900325][ T6862] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 123.900365][ T6862] netlink_ack+0x15f/0xb80 [ 123.900405][ T6862] netlink_rcv_skb+0x348/0x440 [ 123.900447][ T6862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.900484][ T6862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.900535][ T6862] ? netlink_deliver_tap+0x1ae/0xd30 [ 123.900572][ T6862] netlink_unicast+0x53c/0x7f0 [ 123.900606][ T6862] ? __pfx_netlink_unicast+0x10/0x10 [ 123.900638][ T6862] ? __phys_addr_symbol+0x30/0x80 [ 123.900662][ T6862] ? __check_object_size+0x488/0x710 [ 123.900688][ T6862] netlink_sendmsg+0x8b8/0xd70 [ 123.900724][ T6862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.900767][ T6862] ____sys_sendmsg+0xaaf/0xc90 [ 123.900792][ T6862] ? copy_msghdr_from_user+0x10b/0x160 [ 123.900825][ T6862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.900872][ T6862] ___sys_sendmsg+0x135/0x1e0 [ 123.900908][ T6862] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.900961][ T6862] ? __pfx_lock_release+0x10/0x10 [ 123.900992][ T6862] ? trace_lock_acquire+0x14e/0x1f0 [ 123.901032][ T6862] ? __fget_files+0x206/0x3a0 [ 123.901076][ T6862] __sys_sendmsg+0x16e/0x220 [ 123.901110][ T6862] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.901143][ T6862] ? __x64_sys_futex+0x1e1/0x4c0 [ 123.901190][ T6862] do_syscall_64+0xcd/0x250 [ 123.901222][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.901255][ T6862] RIP: 0033:0x7fe6e0d8d169 [ 123.901273][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.901296][ T6862] RSP: 002b:00007fe6debf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.901320][ T6862] RAX: ffffffffffffffda RBX: 00007fe6e0fa5fa0 RCX: 00007fe6e0d8d169 [ 123.901336][ T6862] RDX: 0000000000004090 RSI: 00004000000000c0 RDI: 0000000000000007 [ 123.901351][ T6862] RBP: 00007fe6e0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.901364][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.901378][ T6862] R13: 0000000000000000 R14: 00007fe6e0fa5fa0 R15: 00007ffcc4ae0cc8 [ 123.901408][ T6862] [ 124.504538][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'. [ 124.504602][ T6854] nbd: must specify at least one socket [ 124.741807][ T6872] FAULT_INJECTION: forcing a failure. [ 124.741807][ T6872] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 124.741910][ T6872] CPU: 1 UID: 0 PID: 6872 Comm: syz.2.168 Tainted: G U 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 124.741946][ T6872] Tainted: [U]=USER [ 124.741954][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.741969][ T6872] Call Trace: [ 124.741976][ T6872] [ 124.741986][ T6872] dump_stack_lvl+0x16c/0x1f0 [ 124.742022][ T6872] should_fail_ex+0x50a/0x650 [ 124.742059][ T6872] ? __pfx___might_resched+0x10/0x10 [ 124.742100][ T6872] should_fail_alloc_page+0xe7/0x130 [ 124.742126][ T6872] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 124.742164][ T6872] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 124.742202][ T6872] ? hlock_class+0x4e/0x130 [ 124.742226][ T6872] ? mark_lock+0xb5/0xc60 [ 124.742261][ T6872] ? __pfx_mark_lock+0x10/0x10 [ 124.742295][ T6872] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 124.742333][ T6872] ? hlock_class+0x4e/0x130 [ 124.742357][ T6872] ? mark_lock+0xb5/0xc60 [ 124.742386][ T6872] ? hlock_class+0x4e/0x130 [ 124.742417][ T6872] ? hlock_class+0x4e/0x130 [ 124.742441][ T6872] ? __lock_acquire+0xcc5/0x3c40 [ 124.742474][ T6872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.742512][ T6872] ? policy_nodemask+0xea/0x4e0 [ 124.742553][ T6872] alloc_pages_mpol+0x1fc/0x540 [ 124.742578][ T6872] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 124.742616][ T6872] ? __lock_acquire+0x15a9/0x3c40 [ 124.742663][ T6872] folio_alloc_mpol_noprof+0x36/0x2f0 [ 124.742694][ T6872] vma_alloc_folio_noprof+0xee/0x1b0 [ 124.742722][ T6872] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 124.742748][ T6872] ? find_held_lock+0x2d/0x110 [ 124.742778][ T6872] do_pte_missing+0x202f/0x3e10 [ 124.742825][ T6872] __handle_mm_fault+0x1166/0x2c60 [ 124.742870][ T6872] ? __pfx___handle_mm_fault+0x10/0x10 [ 124.742903][ T6872] ? follow_page_pte+0x3ac/0x1490 [ 124.742936][ T6872] ? __pfx_lock_release+0x10/0x10 [ 124.742995][ T6872] handle_mm_fault+0x3fa/0xaa0 [ 124.743037][ T6872] __get_user_pages+0x773/0x36f0 [ 124.743079][ T6872] ? __pfx_mt_find+0x10/0x10 [ 124.743109][ T6872] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 124.743144][ T6872] ? __pfx___get_user_pages+0x10/0x10 [ 124.743182][ T6872] ? __mm_populate+0x21d/0x380 [ 124.743221][ T6872] populate_vma_page_range+0x27f/0x3a0 [ 124.743256][ T6872] ? __pfx_populate_vma_page_range+0x10/0x10 [ 124.743287][ T6872] ? __pfx_find_vma_intersection+0x10/0x10 [ 124.743315][ T6872] ? vm_mmap_pgoff+0x29b/0x3a0 [ 124.743351][ T6872] __mm_populate+0x1d6/0x380 [ 124.743385][ T6872] ? __pfx___mm_populate+0x10/0x10 [ 124.743417][ T6872] ? up_write+0x1b2/0x520 [ 124.743453][ T6872] vm_mmap_pgoff+0x2d3/0x3a0 [ 124.743488][ T6872] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 124.743520][ T6872] ? __x64_sys_futex+0x1e1/0x4c0 [ 124.743545][ T6872] ? __x64_sys_futex+0x1ea/0x4c0 [ 124.743574][ T6872] ksys_mmap_pgoff+0x7d/0x5c0 [ 124.743599][ T6872] ? rcu_is_watching+0x12/0xc0 [ 124.743637][ T6872] __x64_sys_mmap+0x125/0x190 [ 124.743672][ T6872] do_syscall_64+0xcd/0x250 [ 124.743704][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.743733][ T6872] RIP: 0033:0x7f11fe58d169 [ 124.743752][ T6872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.743774][ T6872] RSP: 002b:00007f11ff348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.743802][ T6872] RAX: ffffffffffffffda RBX: 00007f11fe7a5fa0 RCX: 00007f11fe58d169 [ 124.743818][ T6872] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 124.743832][ T6872] RBP: 00007f11fe60e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 124.743845][ T6872] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 124.743858][ T6872] R13: 0000000000000000 R14: 00007f11fe7a5fa0 R15: 00007ffe575fc768 [ 124.743888][ T6872] [ 126.617880][ T6885] ima: policy update failed [ 126.632296][ T29] audit: type=1802 audit(6035172894.698:4): pid=6885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.172" res=0 errno=0 [ 127.257751][ T6893] tty tty1: ldisc open failed (-12), clearing slot 0 [ 127.277649][ T6906] tty tty17: ldisc open failed (-12), clearing slot 16 [ 127.625523][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 131.376455][ T6975] FAULT_INJECTION: forcing a failure. [ 131.376455][ T6975] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.400488][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: syz.1.192 Tainted: G U 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 131.400529][ T6975] Tainted: [U]=USER [ 131.400537][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.400550][ T6975] Call Trace: [ 131.400558][ T6975] [ 131.400568][ T6975] dump_stack_lvl+0x16c/0x1f0 [ 131.400606][ T6975] should_fail_ex+0x50a/0x650 [ 131.400642][ T6975] ? __pfx___might_resched+0x10/0x10 [ 131.400698][ T6975] should_fail_alloc_page+0xe7/0x130 [ 131.400724][ T6975] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 131.400761][ T6975] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 131.400800][ T6975] ? hlock_class+0x4e/0x130 [ 131.400824][ T6975] ? mark_lock+0xb5/0xc60 [ 131.400859][ T6975] ? __pfx_mark_lock+0x10/0x10 [ 131.400894][ T6975] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 131.400932][ T6975] ? hlock_class+0x4e/0x130 [ 131.400957][ T6975] ? mark_lock+0xb5/0xc60 [ 131.400987][ T6975] ? hlock_class+0x4e/0x130 [ 131.401019][ T6975] ? hlock_class+0x4e/0x130 [ 131.401043][ T6975] ? __lock_acquire+0xcc5/0x3c40 [ 131.401075][ T6975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.401114][ T6975] ? policy_nodemask+0xea/0x4e0 [ 131.401154][ T6975] alloc_pages_mpol+0x1fc/0x540 [ 131.401179][ T6975] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 131.401216][ T6975] ? __lock_acquire+0x15a9/0x3c40 [ 131.401255][ T6975] folio_alloc_mpol_noprof+0x36/0x2f0 [ 131.401284][ T6975] vma_alloc_folio_noprof+0xee/0x1b0 [ 131.401312][ T6975] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 131.401339][ T6975] ? find_held_lock+0x2d/0x110 [ 131.401372][ T6975] do_pte_missing+0x202f/0x3e10 [ 131.401416][ T6975] __handle_mm_fault+0x1166/0x2c60 [ 131.401457][ T6975] ? __pfx___handle_mm_fault+0x10/0x10 [ 131.401487][ T6975] ? follow_page_pte+0x3ac/0x1490 [ 131.401518][ T6975] ? __pfx_lock_release+0x10/0x10 [ 131.401575][ T6975] handle_mm_fault+0x3fa/0xaa0 [ 131.401615][ T6975] __get_user_pages+0x773/0x36f0 [ 131.401669][ T6975] ? __pfx_mt_find+0x10/0x10 [ 131.401702][ T6975] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 131.401737][ T6975] ? __pfx___get_user_pages+0x10/0x10 [ 131.401776][ T6975] ? __mm_populate+0x21d/0x380 [ 131.401817][ T6975] populate_vma_page_range+0x27f/0x3a0 [ 131.401854][ T6975] ? __pfx_populate_vma_page_range+0x10/0x10 [ 131.401885][ T6975] ? __pfx_find_vma_intersection+0x10/0x10 [ 131.401917][ T6975] ? vm_mmap_pgoff+0x29b/0x3a0 [ 131.401955][ T6975] __mm_populate+0x1d6/0x380 [ 131.401991][ T6975] ? __pfx___mm_populate+0x10/0x10 [ 131.402028][ T6975] ? up_write+0x1b2/0x520 [ 131.402067][ T6975] vm_mmap_pgoff+0x2d3/0x3a0 [ 131.402104][ T6975] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 131.402142][ T6975] ? __x64_sys_futex+0x1e1/0x4c0 [ 131.402169][ T6975] ? __x64_sys_futex+0x1ea/0x4c0 [ 131.402203][ T6975] ksys_mmap_pgoff+0x7d/0x5c0 [ 131.402232][ T6975] ? rcu_is_watching+0x12/0xc0 [ 131.402260][ T6975] __x64_sys_mmap+0x125/0x190 [ 131.402298][ T6975] do_syscall_64+0xcd/0x250 [ 131.402331][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.402363][ T6975] RIP: 0033:0x7f687598d169 [ 131.402383][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.402405][ T6975] RSP: 002b:00007f687688c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 131.402428][ T6975] RAX: ffffffffffffffda RBX: 00007f6875ba5fa0 RCX: 00007f687598d169 [ 131.402444][ T6975] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 131.402460][ T6975] RBP: 00007f6875a0e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 131.402474][ T6975] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 131.402487][ T6975] R13: 0000000000000000 R14: 00007f6875ba5fa0 R15: 00007ffeada49fc8 [ 131.402516][ T6975] [ 132.576600][ T6983] ======================================================= [ 132.576600][ T6983] WARNING: The mand mount option has been deprecated and [ 132.576600][ T6983] and is ignored by this kernel. Remove the mand [ 132.576600][ T6983] option from the mount to silence this warning. [ 132.576600][ T6983] ======================================================= [ 133.259970][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266751][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.952895][ T7018] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input6 [ 136.188200][ T7021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.195215][ T7021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.246221][ T7021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.252501][ T7021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.215736][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.221838][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.295832][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.301938][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.751994][ T7065] FAULT_INJECTION: forcing a failure. [ 139.751994][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 139.915059][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.0.212 Tainted: G U 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 139.915096][ T7065] Tainted: [U]=USER [ 139.915104][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.915116][ T7065] Call Trace: [ 139.915123][ T7065] [ 139.915132][ T7065] dump_stack_lvl+0x16c/0x1f0 [ 139.915169][ T7065] should_fail_ex+0x50a/0x650 [ 139.915204][ T7065] ? fs_reclaim_acquire+0xae/0x150 [ 139.915235][ T7065] ? tomoyo_find_next_domain+0x14a/0x20c0 [ 139.915259][ T7065] should_failslab+0xc2/0x120 [ 139.915288][ T7065] __kmalloc_cache_noprof+0x68/0x410 [ 139.915322][ T7065] ? kasan_save_track+0x14/0x30 [ 139.915358][ T7065] tomoyo_find_next_domain+0x14a/0x20c0 [ 139.915396][ T7065] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 139.915423][ T7065] ? tomoyo_bprm_check_security+0x119/0x1d0 [ 139.915460][ T7065] ? lock_acquire+0x2f/0xb0 [ 139.915490][ T7065] ? tomoyo_bprm_check_security+0x119/0x1d0 [ 139.915529][ T7065] tomoyo_bprm_check_security+0x12e/0x1d0 [ 139.915563][ T7065] ? tomoyo_bprm_check_security+0x119/0x1d0 [ 139.915602][ T7065] security_bprm_check+0x1b9/0x1e0 [ 139.915622][ T7065] bprm_execve+0x832/0x16d0 [ 139.915658][ T7065] ? __pfx_bprm_execve+0x10/0x10 [ 139.915694][ T7065] ? copy_string_kernel+0x210/0x250 [ 139.915730][ T7065] do_execveat_common.isra.0+0x4a2/0x610 [ 139.915768][ T7065] __x64_sys_execve+0x8c/0xb0 [ 139.915800][ T7065] do_syscall_64+0xcd/0x250 [ 139.915832][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.915863][ T7065] RIP: 0033:0x7f6c1378d169 [ 139.915882][ T7065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.915903][ T7065] RSP: 002b:00007f6c14587038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 139.915925][ T7065] RAX: ffffffffffffffda RBX: 00007f6c139a5fa0 RCX: 00007f6c1378d169 [ 139.915940][ T7065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000000 [ 139.915954][ T7065] RBP: 00007f6c1380e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.915968][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.915981][ T7065] R13: 0000000000000000 R14: 00007f6c139a5fa0 R15: 00007ffd4f0d6288 [ 139.916013][ T7065] [ 140.977290][ T7067] kexec: Could not allocate control_code_buffer [ 141.516457][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.530072][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.531364][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.544228][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.557657][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.558508][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.918674][ T7093] chnl_net:caif_netlink_parms(): no params data found [ 142.291891][ T7110] Invalid ELF header magic: != ELF [ 142.332681][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.356184][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.363448][ T7093] bridge_slave_0: entered allmulticast mode [ 142.396237][ T7093] bridge_slave_0: entered promiscuous mode [ 142.464095][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.481647][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.490776][ T7093] bridge_slave_1: entered allmulticast mode [ 142.499497][ T7093] bridge_slave_1: entered promiscuous mode [ 142.691780][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.723179][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.795383][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 143.011529][ T7093] team0: Port device team_slave_0 added [ 143.034904][ T7093] team0: Port device team_slave_1 added [ 143.287426][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.287467][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.287497][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.289491][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.289508][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.289545][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.402724][ T7093] hsr_slave_0: entered promiscuous mode [ 143.404389][ T7093] hsr_slave_1: entered promiscuous mode [ 143.404932][ T7093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.405008][ T7093] Cannot create hsr debugfs directory [ 143.655773][ T5847] Bluetooth: hci4: command tx timeout [ 144.263588][ T7093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.321975][ T7093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.407881][ T7093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.419350][ T7093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.987072][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.023166][ T7093] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.088895][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.089005][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.095535][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.095666][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.174954][ T7093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.174984][ T7093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.721640][ T7093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.742917][ T5847] Bluetooth: hci4: command tx timeout [ 146.564590][ T7093] veth0_vlan: entered promiscuous mode [ 146.596803][ T7093] veth1_vlan: entered promiscuous mode [ 146.712807][ T7093] veth0_macvtap: entered promiscuous mode [ 146.725456][ T7093] veth1_macvtap: entered promiscuous mode [ 146.755384][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.755420][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.755432][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.755447][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.755459][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.755474][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.755485][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.755500][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.766612][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.771854][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.025765][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.045133][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.083671][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.109921][ T7180] Invalid ELF header magic: != ELF [ 147.116130][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.149205][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.208752][ T7093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.254906][ T7093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.276696][ T7093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.319508][ T7093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.362495][ T7093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.373403][ T7093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.390256][ T7093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.409166][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'. [ 147.585758][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.593631][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.669010][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.678715][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.826772][ T5847] Bluetooth: hci4: command tx timeout [ 147.968188][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 148.545967][ T7198] could not allocate digest TFM handle [ 149.905853][ T5847] Bluetooth: hci4: command tx timeout [ 149.971752][ T7220] mmap: syz.1.243 (7220) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.798909][ T1127] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.935676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.022726][ T1127] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.178355][ T1127] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.401825][ T1127] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.070347][ T1127] bridge_slave_1: left allmulticast mode [ 152.092926][ T1127] bridge_slave_1: left promiscuous mode [ 152.122191][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.359139][ T1127] bridge_slave_0: left allmulticast mode [ 152.419924][ T1127] bridge_slave_0: left promiscuous mode [ 152.435937][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.159021][ T7244] kexec: Could not allocate control_code_buffer [ 153.299426][ T7274] Invalid ELF header magic: != ELF [ 154.737046][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'. [ 154.883541][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.077306][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.103600][ T1127] bond0 (unregistering): Released all slaves [ 155.257164][ T7299] netlink: 194 bytes leftover after parsing attributes in process `syz.2.253'. [ 155.561250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.757136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.878610][ T7299] [U] [ 155.881634][ T7299] [U] [ 155.884371][ T7299] [U] [ 155.887091][ T7299] [U] [ 155.949770][ T7299] [U] [ 155.952537][ T7299] [U] [ 155.955276][ T7299] [U] [ 155.958006][ T7299] [U] [ 156.083811][ T7307] FAULT_INJECTION: forcing a failure. [ 156.083811][ T7307] name fail_futex, interval 1, probability 0, space 0, times 1 [ 156.105944][ T7299] [U] [ 156.108702][ T7299] [U] [ 156.111427][ T7299] [U] [ 156.114153][ T7299] [U] [ 156.129387][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.4.258 Tainted: G U 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 156.129424][ T7307] Tainted: [U]=USER [ 156.129431][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.129443][ T7307] Call Trace: [ 156.129449][ T7307] [ 156.129458][ T7307] dump_stack_lvl+0x16c/0x1f0 [ 156.129491][ T7307] should_fail_ex+0x50a/0x650 [ 156.129524][ T7307] ? __lock_acquire+0x15a9/0x3c40 [ 156.129557][ T7307] get_futex_key+0xac1/0x1000 [ 156.129587][ T7307] ? __pfx_get_futex_key+0x10/0x10 [ 156.129625][ T7307] futex_wake+0xe8/0x4e0 [ 156.129658][ T7307] ? __pfx_futex_wake+0x10/0x10 [ 156.129691][ T7307] ? find_held_lock+0x2d/0x110 [ 156.129723][ T7307] do_futex+0x1e5/0x350 [ 156.129750][ T7307] ? __pfx_do_futex+0x10/0x10 [ 156.129775][ T7307] ? __might_fault+0xe3/0x190 [ 156.129799][ T7307] ? __might_fault+0xe3/0x190 [ 156.129825][ T7307] mm_release+0x24e/0x300 [ 156.129858][ T7307] do_exit+0x886/0x2d70 [ 156.129885][ T7307] ? get_signal+0x8f7/0x26c0 [ 156.129916][ T7307] ? __pfx_do_exit+0x10/0x10 [ 156.129939][ T7307] ? do_raw_spin_lock+0x12d/0x2c0 [ 156.129961][ T7307] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.129986][ T7307] do_group_exit+0xd3/0x2a0 [ 156.130012][ T7307] get_signal+0x24ed/0x26c0 [ 156.130056][ T7307] ? __pfx_get_signal+0x10/0x10 [ 156.130090][ T7307] ? __pfx_do_futex+0x10/0x10 [ 156.130114][ T7307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.130147][ T7307] arch_do_signal_or_restart+0x90/0x7e0 [ 156.130231][ T7307] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 156.130264][ T7307] ? __pfx_do_writev+0x10/0x10 [ 156.130298][ T7307] syscall_exit_to_user_mode+0x150/0x2a0 [ 156.130327][ T7307] do_syscall_64+0xda/0x250 [ 156.130357][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.130387][ T7307] RIP: 0033:0x7feaa958d169 [ 156.130405][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.130425][ T7307] RSP: 002b:00007feaaa44f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.130447][ T7307] RAX: fffffffffffffe00 RBX: 00007feaa97a5fa8 RCX: 00007feaa958d169 [ 156.130462][ T7307] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feaa97a5fa8 [ 156.130476][ T7307] RBP: 00007feaa97a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 156.130489][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feaa97a5fac [ 156.130503][ T7307] R13: 0000000000000000 R14: 00007ffe158ea3f0 R15: 00007ffe158ea4d8 [ 156.130532][ T7307] [ 156.390950][ T7321] vcan0: tx drop: invalid da for name 0x000000000000003f [ 156.417116][ T7299] [U] [ 156.419888][ T7299] [U] [ 156.422611][ T7299] [U] [ 156.425336][ T7299] [U] [ 156.599068][ T7299] [U] [ 156.601832][ T7299] [U] [ 156.604568][ T7299] [U] [ 156.607297][ T7299] [U] [ 156.610852][ T7299] [U] [ 156.613616][ T7299] [U] [ 156.616340][ T7299] [U] [ 156.619064][ T7299] [U] [ 156.627250][ T7299] [U] [ 156.629975][ T7299] [U] [ 156.632784][ T7299] [U] [ 156.635509][ T7299] [U] [ 156.638432][ T7299] [U] [ 156.641173][ T7299] [U] [ 156.643899][ T7299] [U] [ 156.646621][ T7299] [U] [ 156.649526][ T7299] [U] [ 156.652262][ T7299] [U] [ 156.654989][ T7299] [U] [ 156.657713][ T7299] [U] [ 156.660636][ T7299] [U] [ 156.663350][ T7299] [U] [ 156.666054][ T7299] [U] [ 156.668758][ T7299] [U] [ 156.671840][ T7299] [U] [ 156.674567][ T7299] [U] [ 156.677281][ T7299] [U] [ 156.680001][ T7299] [U] [ 156.682837][ T7302] [U] [ 157.229223][ T1127] hsr_slave_0: left promiscuous mode [ 157.429161][ T1127] hsr_slave_1: left promiscuous mode [ 157.466807][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.525268][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.544855][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.556637][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.592370][ T1127] veth1_macvtap: left promiscuous mode [ 157.598554][ T1127] veth0_macvtap: left promiscuous mode [ 157.605023][ T1127] veth1_vlan: left promiscuous mode [ 157.610892][ T1127] veth0_vlan: left promiscuous mode [ 158.779980][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 158.905856][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 159.451735][ T7359] usbip-vudc usbip-vudc.0: gadget not bound [ 160.302835][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 160.325681][ T1127] ref_tracker: net notrefcnt@ffff88807885be60 has 1/2 users at [ 160.325681][ T1127] sk_alloc+0xa93/0xb90 [ 160.325681][ T1127] inet6_create+0x380/0x1320 [ 160.325681][ T1127] __sock_create+0x335/0x8d0 [ 160.325681][ T1127] udp_sock_create6+0xc8/0x6a0 [ 160.325681][ T1127] sctp_udp_sock_start+0x280/0x4b0 [ 160.325681][ T1127] proc_sctp_do_udp_port+0x380/0x450 [ 160.325681][ T1127] proc_sys_call_handler+0x3c6/0x5a0 [ 160.325681][ T1127] iter_file_splice_write+0x90f/0x10b0 [ 160.325681][ T1127] direct_splice_actor+0x18f/0x6c0 [ 160.325681][ T1127] splice_direct_to_actor+0x346/0xa40 [ 160.325681][ T1127] do_splice_direct+0x178/0x250 [ 160.325681][ T1127] do_sendfile+0xafb/0xe40 [ 160.325681][ T1127] __x64_sys_sendfile64+0x1da/0x220 [ 160.325681][ T1127] do_syscall_64+0xcd/0x250 [ 160.325681][ T1127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.325681][ T1127] [ 160.413259][ T1127] ref_tracker: net notrefcnt@ffff88807885be60 has 1/2 users at [ 160.413259][ T1127] sk_alloc+0xa93/0xb90 [ 160.413259][ T1127] inet_create+0x3a1/0x10a0 [ 160.413259][ T1127] __sock_create+0x335/0x8d0 [ 160.413259][ T1127] udp_sock_create4+0xa7/0x450 [ 160.413259][ T1127] sctp_udp_sock_start+0x10b/0x4b0 [ 160.413259][ T1127] proc_sctp_do_udp_port+0x380/0x450 [ 160.413259][ T1127] proc_sys_call_handler+0x3c6/0x5a0 [ 160.413259][ T1127] iter_file_splice_write+0x90f/0x10b0 [ 160.413259][ T1127] direct_splice_actor+0x18f/0x6c0 [ 160.413259][ T1127] splice_direct_to_actor+0x346/0xa40 [ 160.413259][ T1127] do_splice_direct+0x178/0x250 [ 160.413259][ T1127] do_sendfile+0xafb/0xe40 [ 160.413259][ T1127] __x64_sys_sendfile64+0x1da/0x220 [ 160.413259][ T1127] do_syscall_64+0xcd/0x250 [ 160.413259][ T1127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.413259][ T1127] [ 160.542567][ T1127] ------------[ cut here ]------------ [ 160.548442][ T1127] WARNING: CPU: 0 PID: 1127 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 160.558178][ T1127] Modules linked in: [ 160.562256][ T1127] CPU: 0 UID: 0 PID: 1127 Comm: kworker/u8:7 Tainted: G U 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 160.575099][ T1127] Tainted: [U]=USER [ 160.579003][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.589229][ T1127] Workqueue: netns cleanup_net [ 160.594049][ T1127] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 160.600201][ T1127] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 1b 14 c8 fc 48 8b 74 24 18 48 89 ef e8 2e db 65 06 90 <0f> 0b 90 e8 05 14 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 c4 [ 160.620486][ T1127] RSP: 0018:ffffc9000404fab0 EFLAGS: 00010246 [ 160.626930][ T1127] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 160.634934][ T1127] RDX: 0000000000000001 RSI: ffffffff8b6ceca0 RDI: 0000000000000001 [ 160.642982][ T1127] RBP: ffff88807885be60 R08: 0000000000000001 R09: fffffbfff2dd79bb [ 160.651051][ T1127] R10: ffffffff96ebcddf R11: 0000000000002ba2 R12: ffff88807885beb0 [ 160.659211][ T1127] R13: ffff88807885beb0 R14: ffff88807885beb0 R15: ffff88807885beb0 [ 160.667524][ T1127] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 160.670005][ T7382] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.676753][ T1127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.691119][ T1127] CR2: 00007f73e6cab378 CR3: 000000007f554000 CR4: 00000000003526f0 [ 160.695291][ T7382] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 160.699233][ T1127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.714397][ T1127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.722632][ T1127] Call Trace: [ 160.726212][ T1127] [ 160.729175][ T1127] ? __warn+0xea/0x3c0 [ 160.733285][ T1127] ? ref_tracker_dir_exit+0x3e3/0x680 [ 160.738909][ T1127] ? report_bug+0x3c0/0x580 [ 160.743451][ T1127] ? handle_bug+0x54/0xa0 [ 160.747940][ T1127] ? exc_invalid_op+0x17/0x50 [ 160.752669][ T1127] ? asm_exc_invalid_op+0x1a/0x20 [ 160.757829][ T1127] ? ref_tracker_dir_exit+0x3e3/0x680 [ 160.763254][ T1127] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 160.769197][ T1127] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 160.775194][ T1127] ? net_passive_dec+0x7d/0xd0 [ 160.780755][ T1127] net_passive_dec+0x89/0xd0 [ 160.785850][ T1127] cleanup_net+0x8ac/0xb30 [ 160.790306][ T1127] ? __pfx_cleanup_net+0x10/0x10 [ 160.795282][ T1127] ? lock_acquire+0x2f/0xb0 [ 160.799894][ T1127] ? process_one_work+0x921/0x1ba0 [ 160.805050][ T1127] process_one_work+0x9c5/0x1ba0 [ 160.810098][ T1127] ? __pfx_cleanup_net+0x10/0x10 [ 160.815084][ T1127] ? __pfx_process_one_work+0x10/0x10 [ 160.820881][ T1127] ? assign_work+0x1a0/0x250 [ 160.825867][ T1127] worker_thread+0x6c8/0xf00 [ 160.830531][ T1127] ? __pfx_worker_thread+0x10/0x10 [ 160.836031][ T1127] kthread+0x3af/0x750 [ 160.840155][ T1127] ? __pfx_kthread+0x10/0x10 [ 160.844786][ T1127] ? lock_acquire+0x2f/0xb0 [ 160.849458][ T1127] ? __pfx_kthread+0x10/0x10 [ 160.854097][ T1127] ret_from_fork+0x45/0x80 [ 160.858726][ T1127] ? __pfx_kthread+0x10/0x10 [ 160.863374][ T1127] ret_from_fork_asm+0x1a/0x30 [ 160.868416][ T1127] [ 160.871470][ T1127] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 160.878770][ T1127] CPU: 0 UID: 0 PID: 1127 Comm: kworker/u8:7 Tainted: G U 6.14.0-rc3-syzkaller-00180-ga3daad821514 #0 [ 160.891211][ T1127] Tainted: [U]=USER [ 160.895017][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.905079][ T1127] Workqueue: netns cleanup_net [ 160.909861][ T1127] Call Trace: [ 160.913137][ T1127] [ 160.916070][ T1127] dump_stack_lvl+0x3d/0x1f0 [ 160.920671][ T1127] panic+0x71d/0x800 [ 160.924581][ T1127] ? __pfx_panic+0x10/0x10 [ 160.929011][ T1127] ? show_trace_log_lvl+0x29d/0x3d0 [ 160.934259][ T1127] ? check_panic_on_warn+0x1f/0xb0 [ 160.939379][ T1127] ? ref_tracker_dir_exit+0x3e3/0x680 [ 160.944787][ T1127] check_panic_on_warn+0xab/0xb0 [ 160.949740][ T1127] __warn+0xf6/0x3c0 [ 160.953644][ T1127] ? ref_tracker_dir_exit+0x3e3/0x680 [ 160.959035][ T1127] report_bug+0x3c0/0x580 [ 160.963375][ T1127] handle_bug+0x54/0xa0 [ 160.967724][ T1127] exc_invalid_op+0x17/0x50 [ 160.972262][ T1127] asm_exc_invalid_op+0x1a/0x20 [ 160.977132][ T1127] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 160.983135][ T1127] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 1b 14 c8 fc 48 8b 74 24 18 48 89 ef e8 2e db 65 06 90 <0f> 0b 90 e8 05 14 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 c4 [ 161.002751][ T1127] RSP: 0018:ffffc9000404fab0 EFLAGS: 00010246 [ 161.008824][ T1127] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 161.016798][ T1127] RDX: 0000000000000001 RSI: ffffffff8b6ceca0 RDI: 0000000000000001 [ 161.024769][ T1127] RBP: ffff88807885be60 R08: 0000000000000001 R09: fffffbfff2dd79bb [ 161.032743][ T1127] R10: ffffffff96ebcddf R11: 0000000000002ba2 R12: ffff88807885beb0 [ 161.040722][ T1127] R13: ffff88807885beb0 R14: ffff88807885beb0 R15: ffff88807885beb0 [ 161.048718][ T1127] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 161.054456][ T1127] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 161.060263][ T1127] ? net_passive_dec+0x7d/0xd0 [ 161.065106][ T1127] net_passive_dec+0x89/0xd0 [ 161.069699][ T1127] cleanup_net+0x8ac/0xb30 [ 161.074119][ T1127] ? __pfx_cleanup_net+0x10/0x10 [ 161.079066][ T1127] ? lock_acquire+0x2f/0xb0 [ 161.083760][ T1127] ? process_one_work+0x921/0x1ba0 [ 161.088881][ T1127] process_one_work+0x9c5/0x1ba0 [ 161.093835][ T1127] ? __pfx_cleanup_net+0x10/0x10 [ 161.098774][ T1127] ? __pfx_process_one_work+0x10/0x10 [ 161.104251][ T1127] ? assign_work+0x1a0/0x250 [ 161.108860][ T1127] worker_thread+0x6c8/0xf00 [ 161.113499][ T1127] ? __pfx_worker_thread+0x10/0x10 [ 161.118619][ T1127] kthread+0x3af/0x750 [ 161.122694][ T1127] ? __pfx_kthread+0x10/0x10 [ 161.127288][ T1127] ? lock_acquire+0x2f/0xb0 [ 161.131809][ T1127] ? __pfx_kthread+0x10/0x10 [ 161.136410][ T1127] ret_from_fork+0x45/0x80 [ 161.140834][ T1127] ? __pfx_kthread+0x10/0x10 [ 161.145434][ T1127] ret_from_fork_asm+0x1a/0x30 [ 161.150215][ T1127] [ 161.153502][ T1127] Kernel Offset: disabled [ 161.157873][ T1127] Rebooting in 86400 seconds..