last executing test programs: 21.349682545s ago: executing program 2 (id=129): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sg1\x00', 0x800, 0x0) (async) r1 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xf9, &(0x7f0000000140)="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") (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x45) ioctl$auto_SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)="5d97aa0e4368173e7b5b545f05554beb116ad80d78e70eff820b6dfe12b24b22544808d534f6242e34183578e4e8909f5edbfdd531c715c9a2a3eb23694f1159f64ff49ef1c62e1903128a2b756b1dda6bc095ab24688d0f6a71c33705a78c855770d98fead1dacd186d241bcd396308f972970a5df79a9c15f02b36800dc618477c06ad5d3573527fec2f8bc1cb7e8d2e55c7ab3317c7f9dd78c1f2") (async) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) io_uring_setup$auto(0x6, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x5452, 0x0) (async) mmap$auto(0x0, 0x9, 0x10000df, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon11\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) 20.753783757s ago: executing program 2 (id=133): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) connect$auto(0x3, 0x0, 0x54) connect$auto(0x4, 0x0, 0x10) ioctl$auto_FIGETBSZ(r0, 0x2, 0x81) 20.195411591s ago: executing program 2 (id=135): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/rxrpc/peers\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) alarm$auto(0x2) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4000800) mmap$auto(0x0, 0x200, 0x1, 0x4000eb1, r0, 0x465) socket(0x9, 0x3, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/ata_device/dev1.1/id\x00', 0x230240, 0x0) read$auto(r2, &(0x7f0000000300)='/\x00OZ\xd0[\x02|2\xd7\xd0\x87\xc3XW\x18\xd1\xe8\xdc\xbd\xfd\xbf\xf4\xc2\x99\xc4\"\xb1.\xd7\x03I#o\xb3\xa0\xeao#\x18/]\x84_\x19=\xaejT,\xe5qY\xdb\x97!\xd5&e\x842W\x14\xf7d\xdd\xba#iG\x01\xe3\xcf(\x9e\xa4\xc7]\xb3Q', 0x100000001) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffffffffffff7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x5cb01, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8183, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x20c00, 0x0) pipe2$auto(&(0x7f0000000040), 0x7ff) mincore$auto(0x1000, 0x8001, 0x0) read$auto(0x3, 0x0, 0x80) 18.596129333s ago: executing program 2 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '.'}]}, 0x1c}, 0x1, 0x0, 0xe00, 0x801}, 0x4044820) 18.338134808s ago: executing program 2 (id=142): close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140)=@phonet={0x23, 0x1, 0x5, 0xe}, 0x54) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setresgid$auto(0x0, 0x6, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x2, 0x0) ioctl$auto_SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/queue/read_ahead_kb\x00', 0x22b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x4f64a1d2) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x59af01, 0x15e) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$auto(r5, 0x29, 0x30, 0x0, 0x20000) read$auto(r1, 0x0, 0x9) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000080)="043bff1c31954557c763fb751dfd0e95e5bceaa0a38fd1c518eef8899b21954297730d2f56bb95741fd44d3c194a113f0724906a37744e22468ce5b7a0f1850ac0b06d40c26dfb20631da0b9e2a4163b78bfffadbff256c0a964625479ef079643350014439928bd1e0005da043390d007539ceff1c6eff8fa72ddde3ba4da97262cd792f4a160aa18f292c7f3cf95ba1213ceb3b5a597b21aa5c9f276eac9dd35c0de") 17.538275981s ago: executing program 2 (id=145): mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) fsopen$auto(&(0x7f0000000000)='%\x00', 0x6) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 5.718249817s ago: executing program 1 (id=178): alarm$auto(0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x5, 0x4000000000cf, 0xeb4, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000000180)={0x0, 0x80001000}, 0x5, 0x3, 0x1000007, 0x4c) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) mmap$auto(0x0, 0x22009, 0x4000000000df, 0xeb1, 0x401, 0x1) socket(0xa, 0x3, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r3, &(0x7f0000000240)='/\x00', 0x100000001) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffffffffffff7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x48b41, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x20c00, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mincore$auto(0x1000, 0x8001, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) ptrace$auto(0x4206, 0x1, 0x0, 0x200005) 5.123515195s ago: executing program 3 (id=179): r0 = memfd_secret$auto(0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x7, 0x4, 0x8, 0x800, 0x0, 0x5, "d9579303f82e16e1456eb0a2b6cacece", 0x9, 0x8, 0x9, 0x2, 0x5, 0x0, 0xf}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/protocols\x00', 0x16b280, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x1) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x5408, r2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000240)="1c520b214b197e", 0x7) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000140)='./file0\x00', 0x40, 0xa2) mbind$auto(0x7fffffff, 0x2091d2, 0xffffffffffff0001, 0x0, 0x52c, 0x20005) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x40, 0x3, 0x2) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1, 0x7ff, 0xffffffffffffffff, 0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x30, r5, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x6}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x585) 4.796286232s ago: executing program 0 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000200), r0) sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="28020000", @ANYRES16=r1, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x4) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, 0x0, 0x800d0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) r4 = socket(0xa, 0x2, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r3, 0xc0085504, &(0x7f0000000400)={0x1, 0x5, 0x7, "a0d425e550533ff37a536ed5b5b90335ba8dccd0837dfbf62bd2947ee6016e8cb5bbde8f7f452ad05b81ac1487bbfe47e795a00778ff66a5efb961e952d8b24a0d431b3708eedcb573d389faf80451c9abb4fbc0ca482b32a35ee4b136fe69e94fe15ceff7d471844ab9818a74b29c6e8a918e65c5ff123cd015b6"}) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) setsockopt$auto(r4, 0x29, 0x4e, &(0x7f0000000040)='!\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4048051) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="00027200"/19, @ANYRES16=r6, @ANYBLOB="200067f6d0a652c062e00cde0000bb2cf00ed1fba2f37e972bea8a856fdb83949c6f9f0451146f61680854eee1cbd8d23d94a17739f5b87de1c6c56829e475c31941683a59176c1dd019e136eb6bbb19f75ef804e047b97e777f0a7e9a7a455dbf4dd680105d8908eff6da1b76e1da59824cd9c8eb2b02b170ea9885435fd517a60d6adc6e8f21343977ddc49c9bd09af65cda9c2c9606c4b050a6c5a0b13bc20639b8496da129ccf15a73c2f8c1935ca62e324d81922d2d6ed2409e63969b9746ff02c90273e432956cf3b6bb89d70f7344732dd5703e84ff4fd67f"], 0x14}, 0x1, 0x0, 0x0, 0x4008894}, 0x0) 4.727291922s ago: executing program 1 (id=182): r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x169481, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x1, 0x0, 0x80000000) r2 = bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0xffffffffffffffff, r1, 0xd, 0x89, 0x6, 0x4, r1, 0x80, 0x9}, 0x6f4) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) readv$auto(r1, 0x0, 0x401) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_PMK={0x9, 0xfe, "1cc4be6585"}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async, rerun: 64) getrandom$auto(0x0, 0x6000000, 0x3) (rerun: 64) ioctl$auto_SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000004040)) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x100000000002, 0x783, 0x3, 0x8000000008011, r5, 0x40) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) (async) close_range$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x20000800001, 0x3, 0x5, 0x3, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xf6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x9, 0x81) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) getsockopt$auto(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) (async) socket(0x21, 0xd, 0x9) writev$auto(r0, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) 3.75753201s ago: executing program 0 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '.'}]}, 0x1c}, 0x1, 0x0, 0x4000, 0x801}, 0x4044820) 3.724757378s ago: executing program 3 (id=184): memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x12b101, 0x0) shutdown$auto(r0, 0x3) 3.567801678s ago: executing program 0 (id=185): close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) umount2$auto(&(0x7f0000000200)='.\x00', 0xd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/ifb0/queues/tx-0/byte_queue_limits/limit_max\x00', 0xb02, 0x0) madvise$auto_MADV_MERGEABLE(0x8, 0x5, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x801, 0x84) sysfs$auto(0x2, 0x100000000000036, 0x0) getsockopt$auto(r2, 0x84, 0x7b, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_KEY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NFC_CMD_SE_IO(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1ff}, @NFC_ATTR_LLC_SDP={0x19, 0x13, 0x0, 0x1, [@generic="cb346a0caa4f84987d5f21dbde98fce43a26e764b5"]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x2c}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd7) 3.275953356s ago: executing program 3 (id=186): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/rxrpc/peers\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) alarm$auto(0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x4000800) mmap$auto(0x0, 0x200, 0x1, 0x4000eb1, r0, 0x465) socket(0x9, 0x3, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/ata_device/dev1.1/id\x00', 0x230240, 0x0) read$auto(r3, &(0x7f0000000300)='/\x00OZ\xd0[\x02|2\xd7\xd0\x87\xc3XW\x18\xd1\xe8\xdc\xbd\xfd\xbf\xf4\xc2\x99\xc4\"\xb1.\xd7\x03I#o\xb3\xa0\xeao#\x18/]\x84_\x19=\xaejT,\xe5qY\xdb\x97!\xd5&e\x842W\x14\xf7d\xdd\xba#iG\x01\xe3\xcf(\x9e\xa4\xc7]\xb3Q', 0x100000001) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffffffffffff7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x5cb01, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8183, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x20c00, 0x0) pipe2$auto(&(0x7f0000000040), 0x7ff) mincore$auto(0x1000, 0x8001, 0x0) read$auto(0x3, 0x0, 0x80) 3.25072066s ago: executing program 0 (id=187): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x4, 0x3a) mmap$auto(0x0, 0x810004, 0xffb, 0x13, 0x3, 0x8000) close_range$auto(r0, r1, 0x8) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c2300fd, 0x1, 0x9) socket(0x2b, 0x5, 0x7) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(0x3, 0x0, 0x7fffffff) socket(0x25, 0x80801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) prctl$auto(0x3b, 0x5, 0x0, 0xe, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0xfffffff8) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000008140)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x0, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.981834117s ago: executing program 1 (id=188): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) socket(0x2a, 0x4, 0x3a) mmap$auto(0x0, 0x810004, 0xffb, 0x13, 0x3, 0x8000) close_range$auto(r0, r1, 0x8) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c23054f, 0x1, 0x9) socket(0x2b, 0x5, 0x7) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(0x3, 0x0, 0x7fffffff) socket(0x25, 0x80801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) prctl$auto(0x3b, 0x5, 0x0, 0xe, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, 0xfffffff8) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000008140)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x0, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.121191307s ago: executing program 32 (id=145): mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) fsopen$auto(&(0x7f0000000000)='%\x00', 0x6) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 2.091358159s ago: executing program 3 (id=190): r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto_SO_COOKIE(r0, 0x6, 0x39, 0x0, &(0x7f0000000440)=0xa69) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC0D0c\x00', 0x20240, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x7, 0x7ffffeffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) r2 = getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0) socket(0x22, 0x6, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_START2(r1, 0x4142, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x7) r3 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) mmap$auto(0x0, 0x25, 0x6, 0x8012, 0x0, 0x800000000000) fallocate$auto(r3, 0x0, 0x7, 0xb) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff9, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x7, &(0x7f0000000000)="b07f0ab7c5c19b4729088a31a33b1be4b5dd304154c7fad7d7256396") openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x34d002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) r4 = setfsuid$auto(0xee00) r5 = setfsgid$auto(0xee01) r6 = socket(0x10, 0x2, 0x4) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r7], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) ioctl$auto_XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000200)={0xffffff7f, 0x25ff, r4, r5, 0x7fff, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) 1.616416108s ago: executing program 1 (id=191): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) socket(0x2, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:00.0/power/runtime_active_time\x00', 0x82000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000007ec0)=""/254, 0xfe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1cb702, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) r3 = gettid() ioperm$auto(0x7, 0x86, 0x9) rt_sigqueueinfo$auto(r3, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0xe280, 0x0) write$auto(0x3, 0x0, 0xfffffdef) cachestat$auto(r2, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001840)={&(0x7f0000000400)={0x1360, 0x0, 0x1, 0x70bd28, 0xe9d, {}, [@TIPC_NLA_NET={0x106e, 0x7, 0x0, 0x1, [@generic="8350a5daf2063f058cac0a13d7e799d736b1e5510f5795508721c8fb65cafc2b5565ecaac994aa62bd095929cf07022c5229546f979a315e683648d07e9ec6b832631b59da77b53985f30e155d30c071796446f8ce080a903af34539f7a3c5c271928073f2f2e8998cac", @generic="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"]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@generic="b37e27882c636bbd63f38d37e1be8ed3d24df945d79f9a70b04022314d80a77ce494cbc52a8389b867bba14a094f9044726b58e3705aca01b1f203", @typed={0x8, 0x10c, 0x0, 0x0, @uid}, @typed={0x8, 0x95, 0x0, 0x0, @pid}, @generic="250a0a6dbf9026588a7c1a1da372897b12b62e7e18447ded079c5eac10ec984fbff968e95a3097c68a044dbcb351678bb7b5c54515595058c2137e3621019a73a36c91d28bb33e3881ce6277fad86fc851eef090e4", @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@loopback}]}, @TIPC_NLA_MEDIA={0x223, 0x5, 0x0, 0x1, [@typed={0x4, 0x92}, @typed={0x8, 0x35, 0x0, 0x0, @uid}, @generic="9a93ab0566814dc66e707098cc315b30655398992bc0310c0fb1db9d265be493fa6c368b7cfd106c9f723678f40ac0e856524d778712546b7ae08a3e9de0a3301d72995cbe293d81832d1ab69236a376770efea0137ec66b695ba979462b772ee27000df7a36c2cc47584eda93bc3265384ca72dbc7db3a3ae783f2920a4d483938244de947aa0c7ed7d1abffef3e014b5d0627cbbe0f0a11af373548fa6fe2ed783aaf33eabea127ecce3ec26cd2a8ee66febf00cf6e5e6719957b7ebe5aaca7b3f7a5be02cead136d33e28cee89ede098401cd2fcc568da766c2c59f594b2b21e67ed87ff0ce256d04f6857299", @typed={0x8, 0xde, 0x0, 0x0, @fd}, @nested={0x51, 0x9f, 0x0, 0x1, [@nested={0x4, 0x151}, @typed={0x8, 0x82, 0x0, 0x0, @u32=0xc49b}, @generic="82f6cee4989c457df8fdce58f9f00200de4768971865e17b0ff5ed198fa3553ac4cdc960c30f23a7dbab98851643f364b5af7829dd814748ec9e61e6338e54c0db"]}, @generic="d2554c2d13fb75ee75c0d38e76231d2d41b48f056d824252d78fddb999809ab5d1874e0c908b846e0cfb38d1f451063cbce84fc08f335713e39fc9cf3805185f7136ec3da8863d6fe1e0cff9681e8bb51188a7d05a96e248d131d7e3eaeac5ad333116d930c21055ad249fe2b94161ff7365cf874151c88a3fcd901f3ea9fad16d385f075f2683c2b56b0cd262feba0054135c74fec7b350c03fc8eac5f8c741e27c0dafc881993b42cadffaa9115b201cd92f44c204a25c478aa25abb9d7f2cae", @typed={0x8, 0x103, 0x0, 0x0, @uid}]}]}, 0x1360}, 0x1, 0x0, 0x0, 0x24000000}, 0xc890) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000ec0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc094280}, 0xc, &(0x7f0000000e80)={&(0x7f0000000900)={0x560, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4f0, 0x1, 0x0, 0x1, [@typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x7904}, @typed={0x8, 0x103, 0x0, 0x0, @fd}, @nested={0x1ba, 0x111, 0x0, 0x1, [@generic="996925a8b745a562f7709aa8d94a98edab32ea1e23d5b974650f9650f560a7a1c757593607f94970d634d11389cedaa0357d9935a4375f211e8f476dcbf6fe1de233a4fb25fb6840b1a117431abceb5f79a1133fc26f7b32f95eecb95d8ab14c0273b0dc6b46d2e5143b48b8ad3a35ca250deb1b4203b430ab564c9b65bc0ea4be35a78e4a9d40bcd0cec7296e5a6cf6932a2a886acfa60f98a6e9fa642f9f1dbe0cc01b38f97eb18372be5060d1fe0b528d15b292f1fb1620540651e68d87055bfe39e5e6b1ad59f07c7dbb732d80a048621b0a482c9df472a5093048349ff7ffb64dbcdd", @nested={0x4, 0xbe}, @nested={0x4, 0x110}, @typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@private2}, @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x8}, @generic="e1edfa10cc5b0f1e864259df87f518c37cfe5e5819d1f42cc941cbe137d187239bcb52e3bb494300d3", @nested={0x4, 0x82}, @typed={0x72, 0x3e, 0x0, 0x0, @binary="cbc63d85368d9edfb0ce9f6337747b47003b1be1b782c77fcea1d8fff9c622ec0f17f03e8d76292bbeaffbc7fb00b67d99440d6e03a978b2156d3fd1f8933189b35f532dc4f06e688f8684cd27b6414e5c36a0d94d339379a5626e109c2c4bd6b0e8bf8b132851aa1bd1aaad6d24"}, @typed={0x8, 0xb1, 0x0, 0x0, @uid}]}, @typed={0x8, 0xc0, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@private2}, @generic="9cf221c2a9f7e9cd5549e30f7f73b9b4ff38a1e6ab3347cec25d10a845665259c1cc2bc34043d3a7f7b73666bb11e3764be476a30e60348e04d5d39591276b1ac4bbc8dfc8f991868149e63e21ffce90ab00efd429a639d082e57cbafbe8698fda8acb3c2409f75385b67079fad3e4042c79ddca17567a283bc9e4387336a7aff2c3ef5f8f4a1a5d04a75385d64f55d3ccfc39877afb07eabed1dc97f6f2621528845dc606171b999d1dfcdbfb836c4907a8bf9a568509c9704f839efc4e17c4ee9cb45d03825b718a2d5eb9129cc80cb645", @generic="9aba1134b95ba38700f1ff509f959b2efc1c85c692ad0cdeab221f3b51989fe3e7f2948cc8a316fba9337c73c0e366ea99a25bf8f6cecc325fc5d898da78575047d69a9bf4ac1b83fabbbaf01b1a596973b2166f9a5d096f68526271b10ab8396a6f9256f27f3266728f7cbb5852794d87134afb43a6cc28c3b01e7918e98ccf3661200c06160ef5634e2bc64bda3c07bc20de32f1f518e747bf1a789a16de6475b413242f63de9e3b773a303247812fd793278e76ef151063d0da0c01e5d9586ee269df132935955a3a3a8aa7a72e3ed8bf9c06a7cebaaef7b73a4e73ae50", @generic="7f248a90ca650175ff3f2012bc230243183a7c4219fd4925d16b218e0a05bb7dd27cdb64b60f2f1b0868fa9611972a19147047f887599b1f43a38222ef3bb014bd9f4489667d119743d5b86ad47cae5e638f40cc4d989ef672beb5a4d7c6c3cc9a04af6ddbfe15331ec283edb70242f54d9b5ff4b6f4becd5cf133304581c26f03f89a4137a46b07d8a82dd9a967cd23e2bed0e4454b", @generic="11246129bda9a1dda3843f642335954d119bda9383b904b76af0159582af174d64683285704f8be23c429a3b7e3aa180e6a45d5722381dabcb5b951eef81b1c21ea6d655e2646597fc610b813c7b7d9595d4e1aed2eaf564b2c6524b3464ebe53a797bd1d577a841818262caa3178792c519b0d35995581b3595038a9e4a05a2781dea2a139e2b7ee21fb4b550a5f917955b801d552018817ad0603b066502e804a182110c9e14d7e54cdeee79bcb048c8"]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @uid}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0x7}, @typed={0xc, 0x82, 0x0, 0x0, @str=',*}{u![\x00'}, @nested={0x8, 0x4a, 0x0, 0x1, [@nested={0x4, 0x13d}]}, @nested={0x2c, 0x141, 0x0, 0x1, [@nested={0x4, 0xea}, @generic="c9440f1cd094e00636d60fbc965e082832acc35345dada17ea180e7996f46bc99d25f23f"]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x560}, 0x1, 0x0, 0x0, 0x40000}, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000002c0)={r0, &(0x7f0000000100)="7838ada89c8161bcac57e1f1c5bfc656d1967d5031e75d3aea239bedc533cd268418f88a27483491a2b1cca88dd69c4209aa8551b6ba951acde865e99ca02bc8cc508feeac96502e45c744b11468961f854498da208423c6a76639b9b6a346a0322f5ea1f0da10cef9b9bc89b9bacc3ccc7ab5a19c7964084e6e0f44713d11f1f9aa413ff5e65139863bd9c204e47b81da9753bfd2d6951dab2c93f04ddba10e90b13b02a16d1bf986ee4aa6f02ec7ec9d88418e7a87e1f7339ce3ee7a352dca32d2a4bc25583fa2d8117c30575c9cc031ef72ee54d8da1614a0bb1e0dfc", 0x9, &(0x7f0000000200)="4d046a22f42a5f6cde1789d0a2cafdbf12", 0x80000001, &(0x7f0000000240)="362d58351c8c7d18693319606d191bf2b2af00f0056e85116eca5e427cfec3d7f807860786b044e5a9f0ea157611bfb4f29d", &(0x7f0000000280)=0x4}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000340), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000527bd7000fedbdf250200000008000600", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) setsockopt$auto_SO_NOFCS(0xffffffffffffffff, 0x4, 0x2b, 0x0, 0x3) r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0xa040, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r8, 0x7a9, 0x0) 1.610250168s ago: executing program 0 (id=198): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xeffffffffffffffe, 0x1, 0x9, 0x50b301a, 0x2c, 0x20, 0x0, 0xa}) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "87fe7b014077e08701ee88c6923077b8542c55f8c30ccb575540f50c0a515ca3", @raw=0x4}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) r3 = socket(0x2b, 0x1, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) setsockopt$auto(r3, 0x29, 0x36, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x20000000009, 0x1, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 920.635272ms ago: executing program 1 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000200), r0) sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="28020000", @ANYRES16=r1, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x4) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, 0x0, 0x800d0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) r4 = socket(0xa, 0x2, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r3, 0xc0085504, &(0x7f0000000400)={0x1, 0x5, 0x7, "a0d425e550533ff37a536ed5b5b90335ba8dccd0837dfbf62bd2947ee6016e8cb5bbde8f7f452ad05b81ac1487bbfe47e795a00778ff66a5efb961e952d8b24a0d431b3708eedcb573d389faf80451c9abb4fbc0ca482b32a35ee4b136fe69e94fe15ceff7d471844ab9818a74b29c6e8a918e65c5ff123cd015b6"}) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) setsockopt$auto(r4, 0x29, 0x4e, &(0x7f0000000040)='!\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4048051) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="00027200"/19, @ANYRES16=r6, @ANYBLOB="200067f6d0a652c062e00cde0000bb2cf00ed1fba2f37e972bea8a856fdb83949c6f9f0451146f61680854eee1cbd8d23d94a17739f5b87de1c6c56829e475c31941683a59176c1dd019e136eb6bbb19f75ef804e047b97e777f0a7e9a7a455dbf4dd680105d8908eff6da1b76e1da59824cd9c8eb2b02b170ea9885435fd517a60d6adc6e8f21343977ddc49c9bd09af65cda9c2c9606c4b050a6c5a0b13bc20639b8496da129ccf15a73c2f8c1935ca62e324d81922d2d6ed2409e63969b9746ff02c90273e432956cf3b6bb89d70f7344732dd5703e84ff4fd67f"], 0x14}, 0x1, 0x0, 0x0, 0x4008894}, 0x0) 920.386061ms ago: executing program 3 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '.'}]}, 0x1c}, 0x1, 0x0, 0x6000, 0x801}, 0x4044820) 836.899203ms ago: executing program 0 (id=194): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x800, 0x400008, 0xdd, 0x9b72, 0x2, 0x8003) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(r0, 0x64c8, 0x1e2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x84) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x80002, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0x15, 0x3, 0x2) mq_notify$auto(r0, &(0x7f0000000080)={@sival_int=0x3, @raw=0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) 550.088159ms ago: executing program 3 (id=195): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r0, 0x0, 0x2) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x5, 0x3, 0xffff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x408281, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) madvise$auto(0x0, 0x318, 0x8) kill$auto(0x0, 0x21) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x88b, 0x2000000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi21\x00', 0x149800, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x7, 0x3, 0x24) madvise$auto(0x0, 0x2003f0, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(r1, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket(0x28, 0x5, 0x0) 0s ago: executing program 1 (id=196): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x2, 0x801, 0x106) r1 = io_uring_setup$auto(0x6, 0x0) io_cancel$auto(0xfffffffffffffc00, &(0x7f0000000040)={0x9, 0x727, 0x7, 0x6, 0xb, r1, 0xffff, 0xbc, 0x10000, 0x0, 0x9ead, r0}, &(0x7f00000000c0)={0xfffffffffffffffd, 0x6, 0x6, 0x9}) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x20004088) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/card0\x00', 0xa02, 0x0) ioctl$auto(r4, 0x800064b9, 0x1e6) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r0) mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb1, 0x401, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 352.704191][ T5860] cgroup: Unknown subsys name 'net' [ 352.824146][ T5860] cgroup: Unknown subsys name 'cpuset' [ 352.834050][ T5860] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 354.748846][ T5860] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 357.146209][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.160110][ T5886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.169654][ T5886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.190781][ T5886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.208063][ T5886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.215225][ T5883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.221526][ T5885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.226096][ T5883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.237988][ T5883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.246401][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.250725][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.254957][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.268524][ T5883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.274249][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.276945][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.291556][ T5885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.299059][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.307286][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.326978][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.335658][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.921282][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 358.069293][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 358.083676][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 358.143855][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 358.273974][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.281284][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.288780][ T5871] bridge_slave_0: entered allmulticast mode [ 358.297079][ T5871] bridge_slave_0: entered promiscuous mode [ 358.357955][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.365353][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.372703][ T5871] bridge_slave_1: entered allmulticast mode [ 358.380833][ T5871] bridge_slave_1: entered promiscuous mode [ 358.465991][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.473996][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.481865][ T5869] bridge_slave_0: entered allmulticast mode [ 358.489768][ T5869] bridge_slave_0: entered promiscuous mode [ 358.507131][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.532445][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.540194][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.547416][ T5869] bridge_slave_1: entered allmulticast mode [ 358.555712][ T5869] bridge_slave_1: entered promiscuous mode [ 358.580706][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.650349][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.657585][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.665735][ T5870] bridge_slave_0: entered allmulticast mode [ 358.674828][ T5870] bridge_slave_0: entered promiscuous mode [ 358.684075][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.691427][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.698622][ T5870] bridge_slave_1: entered allmulticast mode [ 358.706230][ T5870] bridge_slave_1: entered promiscuous mode [ 358.727581][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.735177][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.742930][ T5881] bridge_slave_0: entered allmulticast mode [ 358.750960][ T5881] bridge_slave_0: entered promiscuous mode [ 358.778454][ T5871] team0: Port device team_slave_0 added [ 358.820225][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.830183][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.838507][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.846184][ T5881] bridge_slave_1: entered allmulticast mode [ 358.853770][ T5881] bridge_slave_1: entered promiscuous mode [ 358.863431][ T5871] team0: Port device team_slave_1 added [ 358.888602][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.900906][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.980694][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.010378][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.020841][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.027848][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.054673][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.087012][ T5869] team0: Port device team_slave_0 added [ 359.095806][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.105897][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.113021][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.139639][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.169356][ T5869] team0: Port device team_slave_1 added [ 359.220360][ T5870] team0: Port device team_slave_0 added [ 359.262490][ T5881] team0: Port device team_slave_0 added [ 359.272094][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.279187][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.305549][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.316886][ T5879] Bluetooth: hci0: command tx timeout [ 359.325446][ T5870] team0: Port device team_slave_1 added [ 359.364093][ T5881] team0: Port device team_slave_1 added [ 359.374480][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.381580][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.408385][ T5883] Bluetooth: hci1: command tx timeout [ 359.408499][ T5878] Bluetooth: hci2: command tx timeout [ 359.418196][ T5879] Bluetooth: hci3: command tx timeout [ 359.420136][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.452720][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.460207][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.486694][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.500843][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.507844][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.535221][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.621935][ T5871] hsr_slave_0: entered promiscuous mode [ 359.628644][ T5871] hsr_slave_1: entered promiscuous mode [ 359.636835][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.644019][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.670199][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.683985][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.691873][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.718295][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.825510][ T5870] hsr_slave_0: entered promiscuous mode [ 359.832650][ T5870] hsr_slave_1: entered promiscuous mode [ 359.839282][ T5870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.847268][ T5870] Cannot create hsr debugfs directory [ 359.881900][ T5869] hsr_slave_0: entered promiscuous mode [ 359.890659][ T5869] hsr_slave_1: entered promiscuous mode [ 359.897044][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.905273][ T5869] Cannot create hsr debugfs directory [ 360.078095][ T5881] hsr_slave_0: entered promiscuous mode [ 360.084722][ T5881] hsr_slave_1: entered promiscuous mode [ 360.091697][ T5881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.099415][ T5881] Cannot create hsr debugfs directory [ 360.519685][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.537865][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.552307][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.575506][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.631694][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.650750][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.673915][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.702264][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.791711][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.807511][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.823403][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.835390][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.939496][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.968705][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.985054][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.997134][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.132092][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.153998][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.208330][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.221952][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.255069][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.262454][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.273244][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.280438][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.306444][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.313683][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.334949][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.356024][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.363254][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.389203][ T5879] Bluetooth: hci0: command tx timeout [ 361.457903][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.470993][ T5879] Bluetooth: hci3: command tx timeout [ 361.471015][ T5878] Bluetooth: hci1: command tx timeout [ 361.471038][ T5883] Bluetooth: hci2: command tx timeout [ 361.506721][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.514033][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.555477][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.562871][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.597183][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.688219][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.771579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.778817][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.807935][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.815170][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.037483][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.176604][ T5870] veth0_vlan: entered promiscuous mode [ 362.237394][ T5870] veth1_vlan: entered promiscuous mode [ 362.335999][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.402362][ T5870] veth0_macvtap: entered promiscuous mode [ 362.436533][ T5870] veth1_macvtap: entered promiscuous mode [ 362.564635][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.580062][ T5871] veth0_vlan: entered promiscuous mode [ 362.603340][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.618124][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.631375][ T5870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.643812][ T5870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.653314][ T5870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.662809][ T5870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.683683][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.697121][ T5871] veth1_vlan: entered promiscuous mode [ 362.832974][ T5881] veth0_vlan: entered promiscuous mode [ 362.842767][ T5871] veth0_macvtap: entered promiscuous mode [ 362.863499][ T5881] veth1_vlan: entered promiscuous mode [ 362.873699][ T5871] veth1_macvtap: entered promiscuous mode [ 362.949511][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.957565][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.961396][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.982968][ T5869] veth0_vlan: entered promiscuous mode [ 363.006591][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.054117][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.063083][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.073119][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.082365][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.116985][ T5926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.125096][ T5869] veth1_vlan: entered promiscuous mode [ 363.133805][ T5926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.170226][ T5881] veth0_macvtap: entered promiscuous mode [ 363.196927][ T5881] veth1_macvtap: entered promiscuous mode [ 363.294968][ T5869] veth0_macvtap: entered promiscuous mode [ 363.311562][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 363.345944][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.357655][ T5869] veth1_macvtap: entered promiscuous mode [ 363.378667][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.391548][ T5926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.405625][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.423499][ T5881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.428944][ T5926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.438721][ T5881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.452776][ T5881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.475977][ T5879] Bluetooth: hci0: command tx timeout [ 363.551672][ T5879] Bluetooth: hci3: command tx timeout [ 363.552139][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.557216][ T5879] Bluetooth: hci2: command tx timeout [ 363.572150][ T5878] Bluetooth: hci1: command tx timeout [ 363.598825][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.624625][ T5912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.638400][ T5912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.674309][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.737881][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.750982][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.762381][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.905677][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.942866][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.155861][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.165408][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.284560][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.306416][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.599614][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.620813][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.259515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 365.268229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 365.322886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 365.549111][ T5878] Bluetooth: hci0: command tx timeout [ 365.590114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 365.598784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 365.629897][ T5878] Bluetooth: hci2: command tx timeout [ 365.630412][ T5879] Bluetooth: hci1: command tx timeout [ 365.635420][ T5878] Bluetooth: hci3: command tx timeout [ 366.000717][ T5961] mmap: syz.3.5 (5961) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 366.054701][ T5954] sp0: Synchronizing with TNC [ 366.248536][ T5958] ======================================================= [ 366.248536][ T5958] WARNING: The mand mount option has been deprecated and [ 366.248536][ T5958] and is ignored by this kernel. Remove the mand [ 366.248536][ T5958] option from the mount to silence this warning. [ 366.248536][ T5958] ======================================================= [ 366.367150][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 367.043152][ T5969] FAULT_INJECTION: forcing a failure. [ 367.043152][ T5969] name failslab, interval 1, probability 0, space 0, times 1 [ 367.079037][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.2.8 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 367.079081][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.079105][ T5969] Call Trace: [ 367.079115][ T5969] [ 367.079132][ T5969] dump_stack_lvl+0x16c/0x1f0 [ 367.079198][ T5969] should_fail_ex+0x512/0x640 [ 367.079247][ T5969] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 367.079292][ T5969] should_failslab+0xc2/0x120 [ 367.079334][ T5969] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 367.079372][ T5969] ? find_held_lock+0x2b/0x80 [ 367.079405][ T5969] ? __d_alloc+0x31/0xaa0 [ 367.079447][ T5969] __d_alloc+0x31/0xaa0 [ 367.079487][ T5969] d_alloc+0x4a/0x1e0 [ 367.079528][ T5969] d_alloc_parallel+0xe3/0x12e0 [ 367.079587][ T5969] ? register_lock_class+0x41/0x4c0 [ 367.079644][ T5969] ? __pfx_d_alloc_parallel+0x10/0x10 [ 367.079695][ T5969] ? lockdep_init_map_type+0x5c/0x280 [ 367.079744][ T5969] ? lockdep_init_map_type+0x5c/0x280 [ 367.079798][ T5969] __lookup_slow+0x193/0x460 [ 367.079842][ T5969] ? __pfx___lookup_slow+0x10/0x10 [ 367.079911][ T5969] ? lookup_fast+0x156/0x610 [ 367.079957][ T5969] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 367.080017][ T5969] walk_component+0x353/0x5b0 [ 367.080069][ T5969] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 367.080137][ T5969] path_openat+0x227/0x2d40 [ 367.080167][ T5969] ? __x64_sys_openat+0x174/0x210 [ 367.080232][ T5969] ? __pfx_path_openat+0x10/0x10 [ 367.080278][ T5969] do_filp_open+0x20b/0x470 [ 367.080313][ T5969] ? __pfx_do_filp_open+0x10/0x10 [ 367.080381][ T5969] ? alloc_fd+0x471/0x7d0 [ 367.080447][ T5969] do_sys_openat2+0x11b/0x1d0 [ 367.080494][ T5969] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.080559][ T5969] __x64_sys_openat+0x174/0x210 [ 367.080617][ T5969] ? __pfx___x64_sys_openat+0x10/0x10 [ 367.080667][ T5969] ? rcu_is_watching+0x12/0xc0 [ 367.080714][ T5969] do_syscall_64+0xcd/0x230 [ 367.080767][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.080800][ T5969] RIP: 0033:0x7f020238e969 [ 367.080827][ T5969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.080869][ T5969] RSP: 002b:00007f020326e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.080899][ T5969] RAX: ffffffffffffffda RBX: 00007f02025b5fa0 RCX: 00007f020238e969 [ 367.080920][ T5969] RDX: 00000000001a1842 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 367.080941][ T5969] RBP: 00007f0202410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 367.080960][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.080979][ T5969] R13: 0000000000000000 R14: 00007f02025b5fa0 R15: 00007fffaa125728 [ 367.081020][ T5969] [ 368.492753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 368.502550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 368.529409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 368.538297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 368.547364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 368.603512][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 368.784070][ T5979] can: request_module (can-proto-0) failed. [ 372.805945][ T6029] vhci_hcd: not connected 4 [ 373.811270][ T6040] HfR: entered promiscuous mode [ 374.018087][ T6049] netlink: 330 bytes leftover after parsing attributes in process `syz.2.23'. [ 374.106172][ T6049] : renamed from hsr0 (while UP) [ 374.204506][ T6030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.250876][ T6030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 374.288666][ T6030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 374.326225][ T6030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.361784][ T6030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 374.380904][ T6030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 374.418610][ T6030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.436048][ T6030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 374.466889][ T6030] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 374.507249][ T6030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 374.524360][ T6030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 374.568638][ T6030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 375.192462][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 375.333207][ T6058] vcan0: entered promiscuous mode [ 375.340792][ T6058] Zero length message leads to an empty skb [ 375.392661][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.579952][ T6055] FAULT_INJECTION: forcing a failure. [ 375.579952][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 375.617677][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.1.25 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 375.617722][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.617741][ T6055] Call Trace: [ 375.617751][ T6055] [ 375.617763][ T6055] dump_stack_lvl+0x16c/0x1f0 [ 375.617820][ T6055] should_fail_ex+0x512/0x640 [ 375.617868][ T6055] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 375.617905][ T6055] should_failslab+0xc2/0x120 [ 375.617956][ T6055] __kmalloc_cache_noprof+0x6a/0x3e0 [ 375.617990][ T6055] ? ieee80211_init_rate_ctrl_alg+0x175/0x6b0 [ 375.618031][ T6055] ieee80211_init_rate_ctrl_alg+0x175/0x6b0 [ 375.618067][ T6055] ieee80211_register_hw+0x2124/0x4140 [ 375.618111][ T6055] ? __debug_object_init+0x201/0x3d0 [ 375.618163][ T6055] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 375.618207][ T6055] ? find_held_lock+0x2b/0x80 [ 375.618242][ T6055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.618291][ T6055] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 375.618331][ T6055] ? __hrtimer_setup+0x176/0x280 [ 375.618386][ T6055] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 375.618468][ T6055] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 375.618535][ T6055] hwsim_new_radio_nl+0xb51/0x12c0 [ 375.618584][ T6055] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 375.618640][ T6055] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 375.618694][ T6055] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 375.618748][ T6055] genl_family_rcv_msg_doit+0x206/0x2f0 [ 375.618795][ T6055] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 375.618844][ T6055] ? trace_cap_capable+0x18d/0x200 [ 375.618889][ T6055] ? bpf_lsm_capable+0x9/0x10 [ 375.618923][ T6055] ? security_capable+0x7e/0x260 [ 375.618957][ T6055] ? ns_capable+0xd7/0x110 [ 375.618993][ T6055] genl_rcv_msg+0x55c/0x800 [ 375.619040][ T6055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.619081][ T6055] ? __pfx___dev_queue_xmit+0x10/0x10 [ 375.619109][ T6055] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 375.619163][ T6055] ? __lock_acquire+0xaa4/0x1ba0 [ 375.619207][ T6055] netlink_rcv_skb+0x16d/0x440 [ 375.619249][ T6055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.619294][ T6055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.619349][ T6055] ? __pfx_down_read+0x10/0x10 [ 375.619378][ T6055] ? netlink_deliver_tap+0x1ae/0xd30 [ 375.619436][ T6055] genl_rcv+0x28/0x40 [ 375.619475][ T6055] netlink_unicast+0x53a/0x7f0 [ 375.619518][ T6055] ? __pfx_netlink_unicast+0x10/0x10 [ 375.619553][ T6055] ? __lock_acquire+0xaa4/0x1ba0 [ 375.619600][ T6055] netlink_sendmsg+0x8d1/0xdd0 [ 375.619644][ T6055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.619696][ T6055] ____sys_sendmsg+0xa95/0xc70 [ 375.619745][ T6055] ? copy_msghdr_from_user+0x10a/0x160 [ 375.619780][ T6055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.619832][ T6055] ? try_to_wake_up+0xa2f/0x1680 [ 375.619866][ T6055] ___sys_sendmsg+0x134/0x1d0 [ 375.619905][ T6055] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.619983][ T6055] __sys_sendmsg+0x16d/0x220 [ 375.620018][ T6055] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.620056][ T6055] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 375.620095][ T6055] ? rcu_is_watching+0x12/0xc0 [ 375.620131][ T6055] do_syscall_64+0xcd/0x230 [ 375.620186][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.620215][ T6055] RIP: 0033:0x7f652838e969 [ 375.620237][ T6055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.620262][ T6055] RSP: 002b:00007f6529150038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.620288][ T6055] RAX: ffffffffffffffda RBX: 00007f65285b5fa0 RCX: 00007f652838e969 [ 375.620305][ T6055] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 375.620322][ T6055] RBP: 00007f6528410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 375.620338][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.620354][ T6055] R13: 0000000000000000 R14: 00007f65285b5fa0 R15: 00007ffe02765528 [ 375.620389][ T6055] [ 376.179394][ T6067] netlink: 326 bytes leftover after parsing attributes in process `syz.3.29'. [ 376.207240][ T6055] ieee80211 phy15: Failed to select rate control algorithm [ 376.349091][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 376.429131][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 376.509532][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.469086][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 377.737168][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 377.783494][ T6097] netlink: 338 bytes leftover after parsing attributes in process `syz.2.35'. [ 377.822700][ T6097] netlink: 338 bytes leftover after parsing attributes in process `syz.2.35'. [ 378.440082][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.519040][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.599015][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 378.659139][ T6104] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 378.754244][ T30] audit: type=1326 audit(1747634387.969:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.2.39" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f020238e969 code=0x0 [ 379.559099][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.509101][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 380.591837][ T5878] Bluetooth: hci1: command 0x0c1a tx timeout [ 380.679821][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 380.731483][ T6132] netlink: 186 bytes leftover after parsing attributes in process `syz.1.42'. [ 381.917883][ T6161] netlink: 326 bytes leftover after parsing attributes in process `syz.3.50'. [ 382.046690][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.733327][ T6189] random: crng reseeded on system resumption [ 386.261962][ T6202] process 'syz.1.56' launched '/dev/fd/4' with NULL argv: empty string added [ 388.926947][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.941089][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.590923][ T6247] sp0: Synchronizing with TNC [ 396.666593][ T6340] vivid-003: ================= START STATUS ================= [ 396.685219][ T6340] vivid-003: Radio HW Seek Mode: Bounded [ 396.729378][ T6340] vivid-003: Radio Programmable HW Seek: false [ 396.764804][ T6340] vivid-003: RDS Rx I/O Mode: Block I/O [ 396.791651][ T6340] vivid-003: Generate RBDS Instead of RDS: false [ 396.808311][ T6340] vivid-003: RDS Reception: true [ 396.826137][ T6340] vivid-003: RDS Program Type: 0 inactive [ 396.848474][ T6340] vivid-003: RDS PS Name: inactive [ 396.875433][ T6340] vivid-003: RDS Radio Text: inactive [ 396.895846][ T6340] vivid-003: RDS Traffic Announcement: false inactive [ 396.905925][ T6340] vivid-003: RDS Traffic Program: false inactive [ 396.926453][ T6340] vivid-003: RDS Music: false inactive [ 396.926690][ T6356] FAULT_INJECTION: forcing a failure. [ 396.926690][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 396.935190][ T6340] vivid-003: ================== END STATUS ================== [ 397.009049][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.0.79 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 397.009092][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.009111][ T6356] Call Trace: [ 397.009122][ T6356] [ 397.009134][ T6356] dump_stack_lvl+0x16c/0x1f0 [ 397.009200][ T6356] should_fail_ex+0x512/0x640 [ 397.009259][ T6356] ? __kmalloc_noprof+0xbf/0x510 [ 397.009302][ T6356] ? __netlink_kernel_create+0x17f/0x750 [ 397.009346][ T6356] should_failslab+0xc2/0x120 [ 397.009389][ T6356] __kmalloc_noprof+0xd2/0x510 [ 397.009431][ T6356] ? __netlink_create+0x208/0x2c0 [ 397.009471][ T6356] __netlink_kernel_create+0x17f/0x750 [ 397.009519][ T6356] ? __pfx___netlink_kernel_create+0x10/0x10 [ 397.009575][ T6356] ? __pfx_diag_net_init+0x10/0x10 [ 397.009609][ T6356] diag_net_init+0xbd/0x140 [ 397.009643][ T6356] ? __pfx_diag_net_init+0x10/0x10 [ 397.009675][ T6356] ? find_held_lock+0x2b/0x80 [ 397.009707][ T6356] ? __pfx_sock_diag_rcv+0x10/0x10 [ 397.009738][ T6356] ? __pfx_sock_diag_bind+0x10/0x10 [ 397.009773][ T6356] ? __raw_spin_lock_init+0x3a/0x110 [ 397.009825][ T6356] ? __pfx_cma_init_net+0x10/0x10 [ 397.009867][ T6356] ops_init+0x1e2/0x5f0 [ 397.009915][ T6356] setup_net+0x21e/0x850 [ 397.009971][ T6356] ? __pfx_setup_net+0x10/0x10 [ 397.010012][ T6356] ? lockdep_init_map_type+0x5c/0x280 [ 397.010058][ T6356] ? __pfx_down_read_killable+0x10/0x10 [ 397.010099][ T6356] ? debug_mutex_init+0x37/0x70 [ 397.010137][ T6356] copy_net_ns+0x2a6/0x5f0 [ 397.010188][ T6356] create_new_namespaces+0x3ea/0xad0 [ 397.010240][ T6356] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 397.010288][ T6356] ksys_unshare+0x45b/0xa40 [ 397.010333][ T6356] ? __pfx_ksys_unshare+0x10/0x10 [ 397.010374][ T6356] ? xfd_validate_state+0x5d/0x180 [ 397.010404][ T6356] ? rcu_is_watching+0x12/0xc0 [ 397.010443][ T6356] __x64_sys_unshare+0x31/0x40 [ 397.010485][ T6356] do_syscall_64+0xcd/0x230 [ 397.010536][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.010567][ T6356] RIP: 0033:0x7f7ad738e969 [ 397.010591][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.010620][ T6356] RSP: 002b:00007f7ad8205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 397.010649][ T6356] RAX: ffffffffffffffda RBX: 00007f7ad75b5fa0 RCX: 00007f7ad738e969 [ 397.010669][ T6356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 397.010687][ T6356] RBP: 00007f7ad7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 397.010705][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.010723][ T6356] R13: 0000000000000000 R14: 00007f7ad75b5fa0 R15: 00007ffea863e2e8 [ 397.010762][ T6356] [ 397.286504][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.411199][ T6363] syz.2.81 (6363) used greatest stack depth: 19912 bytes left [ 398.411475][ T6373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.449321][ T6373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.459295][ T6373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.476405][ T6373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 400.509133][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.516014][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.522220][ T5883] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.827499][ T6412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 400.909643][ T6412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 400.989429][ T6412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.051774][ T6412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.602840][ T6458] netlink: 342 bytes leftover after parsing attributes in process `syz.0.93'. [ 401.635016][ T6457] ima: policy update failed [ 401.658994][ T30] audit: type=1802 audit(1747634410.879:3): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.93" res=0 errno=0 [ 401.883133][ T6460] FAULT_INJECTION: forcing a failure. [ 401.883133][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 401.908979][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.0.94 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 401.909020][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.909037][ T6460] Call Trace: [ 401.909047][ T6460] [ 401.909059][ T6460] dump_stack_lvl+0x16c/0x1f0 [ 401.909113][ T6460] should_fail_ex+0x512/0x640 [ 401.909165][ T6460] should_failslab+0xc2/0x120 [ 401.909204][ T6460] __kmalloc_cache_noprof+0x6a/0x3e0 [ 401.909237][ T6460] ? cfctrl_create+0x9a/0x320 [ 401.909288][ T6460] cfctrl_create+0x9a/0x320 [ 401.909337][ T6460] ? __pfx_cfctrl_create+0x10/0x10 [ 401.909387][ T6460] ? __raw_spin_lock_init+0x3a/0x110 [ 401.909443][ T6460] cfcnfg_create+0xb2/0x500 [ 401.909488][ T6460] ? debug_mutex_init+0x37/0x70 [ 401.909520][ T6460] ? __pfx_caif_init_net+0x10/0x10 [ 401.909563][ T6460] caif_init_net+0x7d/0xe0 [ 401.909609][ T6460] ops_init+0x1e2/0x5f0 [ 401.909657][ T6460] setup_net+0x21e/0x850 [ 401.909704][ T6460] ? __pfx_setup_net+0x10/0x10 [ 401.909741][ T6460] ? lockdep_init_map_type+0x5c/0x280 [ 401.909787][ T6460] ? __pfx_down_read_killable+0x10/0x10 [ 401.909827][ T6460] ? debug_mutex_init+0x37/0x70 [ 401.909860][ T6460] copy_net_ns+0x2a6/0x5f0 [ 401.909910][ T6460] create_new_namespaces+0x3ea/0xad0 [ 401.909970][ T6460] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 401.910012][ T6460] ksys_unshare+0x45b/0xa40 [ 401.910058][ T6460] ? __pfx_ksys_unshare+0x10/0x10 [ 401.910101][ T6460] ? xfd_validate_state+0x5d/0x180 [ 401.910134][ T6460] ? rcu_is_watching+0x12/0xc0 [ 401.910174][ T6460] __x64_sys_unshare+0x31/0x40 [ 401.910221][ T6460] do_syscall_64+0xcd/0x230 [ 401.910273][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.910304][ T6460] RIP: 0033:0x7f7ad738e969 [ 401.910328][ T6460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.910357][ T6460] RSP: 002b:00007f7ad8205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 401.910385][ T6460] RAX: ffffffffffffffda RBX: 00007f7ad75b5fa0 RCX: 00007f7ad738e969 [ 401.910404][ T6460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 401.910422][ T6460] RBP: 00007f7ad7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 401.910441][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.910458][ T6460] R13: 0000000000000000 R14: 00007f7ad75b5fa0 R15: 00007ffea863e2e8 [ 401.910499][ T6460] [ 402.178136][ T5878] Bluetooth: hci0: command 0x0c1a tx timeout [ 402.989065][ T5878] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.069005][ T5878] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.070839][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.214836][ T6472] FAULT_INJECTION: forcing a failure. [ 403.214836][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 403.325806][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.3.95 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 403.325850][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.325868][ T6472] Call Trace: [ 403.325878][ T6472] [ 403.325891][ T6472] dump_stack_lvl+0x16c/0x1f0 [ 403.325946][ T6472] should_fail_ex+0x512/0x640 [ 403.326004][ T6472] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 403.326048][ T6472] should_failslab+0xc2/0x120 [ 403.326090][ T6472] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 403.326145][ T6472] ? __proc_create+0xc3/0x8c0 [ 403.326183][ T6472] ? __proc_create+0x2ce/0x8c0 [ 403.326227][ T6472] __proc_create+0x2ce/0x8c0 [ 403.326268][ T6472] ? __pfx___proc_create+0x10/0x10 [ 403.326315][ T6472] ? _raw_write_unlock+0x28/0x50 [ 403.326361][ T6472] ? proc_register+0x314/0x5f0 [ 403.326405][ T6472] proc_create_reg+0x7d/0x180 [ 403.326449][ T6472] proc_create_seq_private+0x8e/0x1d0 [ 403.326494][ T6472] ? __pfx_proc_create_seq_private+0x10/0x10 [ 403.326536][ T6472] ? __pfx_nl_fib_input+0x10/0x10 [ 403.326595][ T6472] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 403.326658][ T6472] ip_rt_do_proc_init+0xac/0x1b0 [ 403.326703][ T6472] ops_init+0x1e2/0x5f0 [ 403.326752][ T6472] setup_net+0x21e/0x850 [ 403.326803][ T6472] ? __pfx_setup_net+0x10/0x10 [ 403.326842][ T6472] ? lockdep_init_map_type+0x5c/0x280 [ 403.326887][ T6472] ? __pfx_down_read_killable+0x10/0x10 [ 403.326924][ T6472] ? debug_mutex_init+0x37/0x70 [ 403.326960][ T6472] copy_net_ns+0x2a6/0x5f0 [ 403.327019][ T6472] create_new_namespaces+0x3ea/0xad0 [ 403.327066][ T6472] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 403.327108][ T6472] ksys_unshare+0x45b/0xa40 [ 403.327153][ T6472] ? __pfx_ksys_unshare+0x10/0x10 [ 403.327195][ T6472] ? xfd_validate_state+0x5d/0x180 [ 403.327228][ T6472] ? rcu_is_watching+0x12/0xc0 [ 403.327267][ T6472] __x64_sys_unshare+0x31/0x40 [ 403.327311][ T6472] do_syscall_64+0xcd/0x230 [ 403.327362][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.327395][ T6472] RIP: 0033:0x7fb569b8e969 [ 403.327420][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.327449][ T6472] RSP: 002b:00007fb56a9b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 403.327478][ T6472] RAX: ffffffffffffffda RBX: 00007fb569db5fa0 RCX: 00007fb569b8e969 [ 403.327499][ T6472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 403.327518][ T6472] RBP: 00007fb569c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 403.327537][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.327555][ T6472] R13: 0000000000000000 R14: 00007fb569db5fa0 R15: 00007ffc1c4652f8 [ 403.327597][ T6472] [ 403.809120][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 404.814136][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 408.338697][ T6553] ubi0: attaching mtd0 [ 408.356984][ T6553] ubi0: scanning is finished [ 408.403295][ T6553] ubi0: empty MTD device detected [ 409.731135][ T6553] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 409.738715][ T6553] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 409.756744][ T6553] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 409.761801][ T6546] kernel read not supported for file /set_event_notrace_pid (pid: 6546 comm: syz.1.111) [ 409.875956][ T6553] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 409.877416][ T30] audit: type=1800 audit(6042601715.101:4): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="set_event_notrace_pid" dev="tracefs" ino=12 res=0 errno=0 [ 410.032265][ T6553] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 410.040645][ T6553] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 410.048791][ T6553] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3323480792 [ 410.060046][ T6553] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 410.080468][ T6575] ubi0: background thread "ubi_bgt0d" started, PID 6575 [ 415.844290][ T6664] Invalid ELF header magic: != ELF [ 415.913497][ T6663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 418.637522][ T6709] input: jJǸ-*9%vlQ J86 as /devices/virtual/input/input6 [ 421.595737][ T6752] tipc: Started in network mode [ 421.605678][ T6752] tipc: Node identity ee00, cluster identity 4711 [ 421.625229][ T6752] tipc: Node number set to 60928 [ 425.641953][ T6811] Setting dangerous option i915.mitigations - tainting kernel [ 427.763676][ T6834] sd 0:0:1:0: PR command failed: 1026 [ 427.769543][ T6834] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 427.779080][ T6834] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 428.772914][ T6856] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 429.823341][ T6885] FAULT_INJECTION: forcing a failure. [ 429.823341][ T6885] name failslab, interval 1, probability 0, space 0, times 0 [ 429.845990][ T6885] CPU: 1 UID: 0 PID: 6885 Comm: syz.1.175 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 429.846045][ T6885] Tainted: [U]=USER [ 429.846056][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.846074][ T6885] Call Trace: [ 429.846087][ T6885] [ 429.846100][ T6885] dump_stack_lvl+0x16c/0x1f0 [ 429.846157][ T6885] should_fail_ex+0x512/0x640 [ 429.846206][ T6885] ? __kmalloc_noprof+0xbf/0x510 [ 429.846253][ T6885] ? __netlink_kernel_create+0x17f/0x750 [ 429.846297][ T6885] should_failslab+0xc2/0x120 [ 429.846340][ T6885] __kmalloc_noprof+0xd2/0x510 [ 429.846382][ T6885] ? __netlink_create+0x208/0x2c0 [ 429.846426][ T6885] __netlink_kernel_create+0x17f/0x750 [ 429.846474][ T6885] ? __pfx___netlink_kernel_create+0x10/0x10 [ 429.846533][ T6885] rtnetlink_net_init+0xb9/0x140 [ 429.846569][ T6885] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 429.846614][ T6885] ? lockdep_init_map_type+0x5c/0x280 [ 429.846661][ T6885] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 429.846695][ T6885] ? __pfx_rtnetlink_bind+0x10/0x10 [ 429.846731][ T6885] ? lockdep_init_map_type+0x5c/0x280 [ 429.846778][ T6885] ? debug_mutex_init+0x37/0x70 [ 429.846813][ T6885] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 429.846847][ T6885] ops_init+0x1e2/0x5f0 [ 429.846897][ T6885] setup_net+0x21e/0x850 [ 429.846945][ T6885] ? __pfx_setup_net+0x10/0x10 [ 429.846986][ T6885] ? lockdep_init_map_type+0x5c/0x280 [ 429.847030][ T6885] ? __pfx_down_read_killable+0x10/0x10 [ 429.847068][ T6885] ? debug_mutex_init+0x37/0x70 [ 429.847105][ T6885] copy_net_ns+0x2a6/0x5f0 [ 429.847157][ T6885] create_new_namespaces+0x3ea/0xad0 [ 429.847207][ T6885] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 429.847250][ T6885] ksys_unshare+0x45b/0xa40 [ 429.847298][ T6885] ? __pfx_ksys_unshare+0x10/0x10 [ 429.847342][ T6885] ? xfd_validate_state+0x5d/0x180 [ 429.847377][ T6885] ? rcu_is_watching+0x12/0xc0 [ 429.847420][ T6885] __x64_sys_unshare+0x31/0x40 [ 429.847466][ T6885] do_syscall_64+0xcd/0x230 [ 429.847522][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.847557][ T6885] RIP: 0033:0x7f652838e969 [ 429.847583][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.847624][ T6885] RSP: 002b:00007f6529150038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 429.847656][ T6885] RAX: ffffffffffffffda RBX: 00007f65285b5fa0 RCX: 00007f652838e969 [ 429.847677][ T6885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 429.847696][ T6885] RBP: 00007f6528410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 429.847715][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.847734][ T6885] R13: 0000000000000000 R14: 00007f65285b5fa0 R15: 00007ffe02765528 [ 429.847777][ T6885] [ 431.308024][ T6894] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[6894] [ 434.332779][ T6943] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 434.357162][ T6943] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 434.408967][ T6943] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 435.217482][ T6451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.382153][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.407305][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.424108][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.436234][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.438769][ T6451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.476650][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.702231][ T6451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.888342][ T6451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.704660][ T6973] ------------[ cut here ]------------ [ 436.710504][ T6973] WARNING: CPU: 1 PID: 6973 at kernel/trace/trace.c:2431 tracing_start_tr.part.0+0x1fc/0x2a0 [ 436.720733][ T6973] Modules linked in: [ 436.724952][ T6973] CPU: 1 UID: 0 PID: 6973 Comm: syz.3.195 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 436.736749][ T6973] Tainted: [U]=USER [ 436.740596][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.750708][ T6973] RIP: 0010:tracing_start_tr.part.0+0x1fc/0x2a0 [ 436.757013][ T6973] Code: 00 0f 85 97 00 00 00 48 83 3d 0f c5 62 0c 00 74 78 e8 88 55 fb ff 4c 89 ff e8 b0 ea ac 09 90 e9 d9 fe ff ff e8 75 55 fb ff 90 <0f> 0b 90 c7 83 94 00 00 00 00 00 00 00 e9 c1 fe ff ff e8 fd db 5f [ 436.776663][ T6973] RSP: 0018:ffffc9001a6c7be8 EFLAGS: 00010087 [ 436.782767][ T6973] RAX: 000000000001dfb1 RBX: ffffffff8e443880 RCX: ffffc9000fdec000 [ 436.790766][ T6973] RDX: 0000000000080000 RSI: ffffffff81bf5a5b RDI: 0000000000000005 [ 436.798780][ T6973] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 436.806791][ T6973] R10: 00000000ffffffff R11: 0000000000000000 R12: 1ffff920034d8f7e [ 436.814789][ T6973] R13: 0000000000000287 R14: ffffffff8e443960 R15: ffffffff8e4438a0 [ 436.822875][ T6973] FS: 00007fb56a9566c0(0000) GS:ffff888124ae7000(0000) knlGS:0000000000000000 [ 436.831835][ T6973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.838444][ T6973] CR2: 00007ffe8f0f3000 CR3: 000000005faea000 CR4: 00000000003526f0 [ 436.846444][ T6973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.854534][ T6973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 436.862530][ T6973] Call Trace: [ 436.865831][ T6973] [ 436.868789][ T6973] ? __pfx_tracing_start_tr.part.0+0x10/0x10 [ 436.874822][ T6973] buffer_subbuf_size_write+0x226/0x280 [ 436.880411][ T6973] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 436.886527][ T6973] vfs_write+0x25f/0x1180 [ 436.890885][ T6973] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 436.897002][ T6973] ? __pfx___mutex_lock+0x10/0x10 [ 436.902091][ T6973] ? __pfx_vfs_write+0x10/0x10 [ 436.907018][ T6973] ? __fget_files+0x20e/0x3c0 [ 436.911743][ T6973] ksys_write+0x12a/0x240 [ 436.916107][ T6973] ? __pfx_ksys_write+0x10/0x10 [ 436.920986][ T6973] ? rcu_is_watching+0x12/0xc0 [ 436.925791][ T6973] do_syscall_64+0xcd/0x230 [ 436.930345][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.936271][ T6973] RIP: 0033:0x7fb569b8e969 [ 436.940712][ T6973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.960449][ T6973] RSP: 002b:00007fb56a956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.968895][ T6973] RAX: ffffffffffffffda RBX: 00007fb569db6240 RCX: 00007fb569b8e969 [ 436.976890][ T6973] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 436.984909][ T6973] RBP: 00007fb569c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 436.992908][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.000907][ T6973] R13: 0000000000000000 R14: 00007fb569db6240 R15: 00007ffc1c4652f8 [ 437.008930][ T6973] [ 437.011977][ T6973] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 437.019304][ T6973] CPU: 1 UID: 0 PID: 6973 Comm: syz.3.195 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 437.031096][ T6973] Tainted: [U]=USER [ 437.034916][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.044996][ T6973] Call Trace: [ 437.048318][ T6973] [ 437.051285][ T6973] dump_stack_lvl+0x3d/0x1f0 [ 437.055963][ T6973] panic+0x71c/0x800 [ 437.059913][ T6973] ? __pfx_panic+0x10/0x10 [ 437.064517][ T6973] ? show_trace_log_lvl+0x29b/0x3e0 [ 437.069773][ T6973] ? tracing_start_tr.part.0+0x1fc/0x2a0 [ 437.075446][ T6973] check_panic_on_warn+0xab/0xb0 [ 437.080433][ T6973] __warn+0xf6/0x3c0 [ 437.084370][ T6973] ? tracing_start_tr.part.0+0x1fc/0x2a0 [ 437.090034][ T6973] report_bug+0x3c3/0x580 [ 437.094411][ T6973] ? tracing_start_tr.part.0+0x1fc/0x2a0 [ 437.100099][ T6973] handle_bug+0x184/0x210 [ 437.104474][ T6973] exc_invalid_op+0x17/0x50 [ 437.109023][ T6973] asm_exc_invalid_op+0x1a/0x20 [ 437.113939][ T6973] RIP: 0010:tracing_start_tr.part.0+0x1fc/0x2a0 [ 437.120231][ T6973] Code: 00 0f 85 97 00 00 00 48 83 3d 0f c5 62 0c 00 74 78 e8 88 55 fb ff 4c 89 ff e8 b0 ea ac 09 90 e9 d9 fe ff ff e8 75 55 fb ff 90 <0f> 0b 90 c7 83 94 00 00 00 00 00 00 00 e9 c1 fe ff ff e8 fd db 5f [ 437.139889][ T6973] RSP: 0018:ffffc9001a6c7be8 EFLAGS: 00010087 [ 437.145994][ T6973] RAX: 000000000001dfb1 RBX: ffffffff8e443880 RCX: ffffc9000fdec000 [ 437.153989][ T6973] RDX: 0000000000080000 RSI: ffffffff81bf5a5b RDI: 0000000000000005 [ 437.161987][ T6973] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 437.169979][ T6973] R10: 00000000ffffffff R11: 0000000000000000 R12: 1ffff920034d8f7e [ 437.178058][ T6973] R13: 0000000000000287 R14: ffffffff8e443960 R15: ffffffff8e4438a0 [ 437.186068][ T6973] ? tracing_start_tr.part.0+0x1fb/0x2a0 [ 437.191749][ T6973] ? tracing_start_tr.part.0+0x1fb/0x2a0 [ 437.197422][ T6973] ? __pfx_tracing_start_tr.part.0+0x10/0x10 [ 437.203452][ T6973] buffer_subbuf_size_write+0x226/0x280 [ 437.209055][ T6973] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 437.215277][ T6973] vfs_write+0x25f/0x1180 [ 437.219644][ T6973] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 437.225849][ T6973] ? __pfx___mutex_lock+0x10/0x10 [ 437.231024][ T6973] ? __pfx_vfs_write+0x10/0x10 [ 437.235845][ T6973] ? __fget_files+0x20e/0x3c0 [ 437.240601][ T6973] ksys_write+0x12a/0x240 [ 437.244978][ T6973] ? __pfx_ksys_write+0x10/0x10 [ 437.249862][ T6973] ? rcu_is_watching+0x12/0xc0 [ 437.254665][ T6973] do_syscall_64+0xcd/0x230 [ 437.259218][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.265140][ T6973] RIP: 0033:0x7fb569b8e969 [ 437.269581][ T6973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.289228][ T6973] RSP: 002b:00007fb56a956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.297696][ T6973] RAX: ffffffffffffffda RBX: 00007fb569db6240 RCX: 00007fb569b8e969 [ 437.305697][ T6973] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 437.313784][ T6973] RBP: 00007fb569c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 437.321789][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.329796][ T6973] R13: 0000000000000000 R14: 00007fb569db6240 R15: 00007ffc1c4652f8 [ 437.337814][ T6973] [ 437.340998][ T6973] Kernel Offset: disabled [ 437.345345][ T6973] Rebooting in 86400 seconds..