last executing test programs: 12.209000502s ago: executing program 2 (id=92): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f00000000c0)='0\n\xf48\x97\xff*\x8a\xeb+l\\\x9e@\\}\x04|\x03\xcb\x12\xfa\b\x1c\vr\xc0\\\x17\xcb\xb4Q\xe1)@J}\x7fw\xc7\xe58,.\xf6p\x8d\xa0\x1f\xe3\xc5\xff\r\xde\xaf\x84\xd6P\b\xdf\xfe\x1f\xa1\xb4\x89\xa0\xac\x9a\xb8\x88\xca\x00\x15\x9d`>\xcd\xcb\xbe#k\xaf\xe9\x9a0\xb6\xe2#\xc1u\xfa\xe1\x19\x92qH\x80\xb9\xa4a\xba%\xc7\xc5\xb8\v\x00\xa5\xdd\xa2\x8c\xacBY\x9b\"\x14*\xfd\x87\x84~\x94\xb5\xfd/\xe2\xadz9\xbe!7\xf9\x88F\xe9@L\x1cD\xc2ia*\x81\x10L\x8d\xde\xdf\xc5)$\x03,\xb5\x88\a\xfe\x8c\xea\x16|\x11x\xdaE\x1c\xce\xe1\xdb\xc1\x86\xd9!.\xfb\xb7\xd4%\\\x1eJ\x175\x9c\xc0\x83\x89k+\x1bKk\xc4\x8f\xb01\x9a\x94_r\xa5W\xe0\x16A', 0x2) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) r2 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48e, 0x0, 0x9}]}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r3, r4, 0x0, 0x1) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x7, &(0x7f0000000000)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000040)=0x200) timer_settime$auto(0x0, 0x3b4, &(0x7f0000000040)={{0x0, 0xd3}, {0x200001005, 0x6}}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000080)={{0x5, 0x8}, {0x7f, 0x10000}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130026bd7000fddbdf2502000000050059000200000008000300", @ANYRES32=r8, @ANYBLOB="212c4c162cc8f147b6a2032b5a2c99a327fb917786946ebb12395e8402b0aeddc25ccf98"], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r5, 0x0) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r9, 0x28000) madvise$auto(0x0, 0xd, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 9.155594188s ago: executing program 2 (id=101): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x3, 0x40000c, 0x3aec000000, 0x9b78, 0x2, 0x7ffd) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0x6, 0x14, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) 7.25855051s ago: executing program 2 (id=111): write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000200)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0xaf, 0x3, 0x0, 0x1, [@generic="76db3f1b08c42c2d1f7881fd797842d0198851a5323769623aa6a9ad8625784e5b2e1440f4cbd4df95aae395474214f9d8e8830cd3e7461e4232ec5eaca49862c6052701b7e1453289e01ce6e430196cec703b551d90041eb00a5b9ef3da74583d460aa6db3d894e69ba0a6dca6fcf4218c84f072403f2abe77c94804f34230196bdafb7ea59c3b828af3433d79fdc76d62ceec48c9fc1f7ff8a60732967c6cc3f1fcfc9a17e131fdf0b51"]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL80211_CMD_JOIN_OCB(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x3e4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_FLAGS={0x3b9, 0x11, 0x0, 0x1, [@nested={0x18, 0xd8, 0x0, 0x1, [@nested={0x4, 0xcc}, @typed={0x8, 0x10b, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x119, 0x0, 0x0, @u32=0x4}]}, @nested={0x8b, 0xd5, 0x0, 0x1, [@nested={0x4, 0x12}, @generic="cefc7d36b83c71dda113ebcaaa6f543345926be7b86cb349bdde6048b1f33933aa5766508c755080cfeb4a068a8ca2a0f65fc28e5b2480b5dad329f5dc8ac57fcfade1a5070dbcbfbbce9bb3a25bf8c5ada77f8913eb637680f4826fa3075cd3021ea9e51d36f20bf3e8289438042330b32bfc823015d6c22f55047f9a03cc0dde73f0"]}, @nested={0x27, 0x150, 0x0, 0x1, [@generic="d0769b12d51375b3056d150c6f1e1f594f06c31bb8a8645d63551cb4796c06834f23aa"]}, @generic="3e62145a607a0ce2925d1990e10aa8cb996be24bc3f17877d44e5219c2cc9c9f17ac7d330a5173f36086ae48612c802900a1daeccc9803981ef76c0f37ce085eab902ff97b0768bd447da57b90", @typed={0xd, 0x11e, 0x0, 0x0, @str='!\\,*^$./\x00'}, @nested={0x2c, 0x84, 0x0, 0x1, [@generic="c76d836144a2789ecfc64ff0c814e9972b2f1ff22e8d8887717f9f4de99ebd37f8c76d57684aaac7"]}, @generic="0902364cfbc3e490bc69d43f1ef96b8157cd5208c362be2c91f28a103ed80c407e03f6ab4f7c1430a63bc8edd4fc1ae963db2091f98a2ee115e2d0665e32ccc41f63db6b0bfd3cfa129c9fbf79821f7c1968a93b7fd47f4653fc597b4447c50ab96e0335be28368c5c089f054860899a2b24c3f791f942535487eddffdf8fee2d0a61a22a28d1f4df86cf34b5b7c2cedbf977b0c7bce434573af9f41572e7f5923ba6dcca204f50f59c35beb444c6f974daf8c825e642812c5b62b929a02ce3fc2941173e48772af13f2d4239ff4edd56a848e3eca7b1d13d670d314f18d18ba6aa74ed8103649593565fed114167b6298b794a866d72e9f", @nested={0x166, 0xf7, 0x0, 0x1, [@generic="63ae26c31c9367a63fbe38a0dd2bb45a9d9c873934108b541f45a8850d214e2d15971e863ee26bc5b3051a62d2c04db0d750578ad1f0610964a1765812ae1083a01b0d75915895d752d5023a28982181845029342e060584c854b18643adcd93a6bdafe9560882525dfbdf4a921898e2f3c37ac720a09fc188998e5c55374ff43a92a4cf56c8088d5bf409681c0129f620e5be45c8b155cf48680ff598f342e69eb6f308ee623ffddea46b89dfd4309dff2abc95d61a018ef55727973289c62760d0b07eebde6156423e", @nested={0x4, 0xbf}, @generic="1bd5c47ae0ba6e6d1dad36378b55e1dece7ea5218794c1d2659356b6b1da7fbed84cffa9375dd0dac08d0d4d1aa8fa4743d4af9650eae114e475284fc3ceb9748c2a376b642363e5a496ac7d6189b193f83a65ce32a335e8bbb176dbc0feddb23214a4cd2e4b6aeb7dcfc97fe4125861e1a9b18b14164aa6d8f0f784581f59370c5eff7afa442bce6e7d4834baf097db45a3c2bf"]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x6}}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x143242, 0x164) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 6.875545407s ago: executing program 2 (id=113): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x1) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x89411, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x84, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x18, 0x5, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r2) sendmsg$auto_HANDSHAKE_CMD_DONE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4bb0000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x20040040) mprotect$auto(0x0, 0x806121, 0x8) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) 6.017492926s ago: executing program 3 (id=116): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x2000000000000, 0x0, 0x4}, 0x8880) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 5.192074101s ago: executing program 0 (id=117): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0\x00', 0x1090c1, 0x0) r0 = clone$auto(0x7, 0x9, &(0x7f0000000000)=0x80000000, &(0x7f0000000040)=0xb, 0x4) clone3$auto(0x0, 0x9) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000000)=""/65, 0x41) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000ef7bdff8d7405ad5cd407629ed98", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf256b00000015000d018223d208b7dd3463a3a936688073d724bb000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r8 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x800, 0x0) read$auto(r8, 0x0, 0x1) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r9, r10, 0x0, 0x2) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "fb7d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040004) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r5, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) ioctl$auto_HPET_DPI(0xffffffffffffffff, 0x6805, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000500)={0x0, 0x0, "a68a78cddb9af7ac4c80865002a0d2e3", '\x00', "04622c3aac2504ff5de7b81eefde747e7674da7f6154e6bcf81ec7dadaa3b485", "12f251f2492bb43c598ef0237d522cb86954c0763131c2f67eaa6356799443a9576c948fc3fb995daec2f1fc9170a7000000004f04809f3ca99cb9b4e9d3abb67d33f3d3fe57d0289938f4ce01d60bfd", "e9e7f824968ee78f73dc2749d12c7e05", "402beaf8e2dfaba5303a6efa74256963183267b80c0b5a1f09a2c919b4c43dc3817ea4719a3e48cdb8c3e9873ecfe260f627c94bc35f96d61597d52c380a5c79e1dfa060cdb00680f9562c947ed257fd", "5c84948d2c357792b0c4be9a3a15ecfee836d93ae475d2bc8193e8ac53c0494bf16e9a6d85fa65416177e39fac9de9d4869f6e9602c6f01a500ba2ba3d5fef158c908f502afdfe316cf3ac63f1f4842ec3c180d103084776592ff9e4a66125f8f285cabc67891f381c9bcc345f41ee4f2d7f4bffb05d58b0377a76a50de67bb8"}) r11 = socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) ioctl$auto_BLKTRACESETUP32(r11, 0xc0401273, &(0x7f0000000100)={"8c537e83c215b5d938c6494d6ddd500401beee535d24c8a6910745fc3afedc6f", 0xdc, 0x9, 0x12ee40ca, 0x3, 0x6, r0}) tkill$auto(r12, 0x7) 5.188876905s ago: executing program 3 (id=126): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x6) getsockopt$auto_SO_RCVTIMEO_NEW(r0, 0x3, 0x42, &(0x7f0000000040)='/dev/loop2\x00', &(0x7f00000000c0)=0xc) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000000002003) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x6, 0x1, 0x7) open(0x0, 0x78081, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket(0x2, 0x1, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x622601, 0x0) prctl$auto(0x3e, 0x6, 0x0, 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"6c00cf81000300ffffffffffffff291d00", 0x3f7, 0x408, 0xffc, 0x400004, 0x200000000040000b}) mprotect$auto(0x1ffffffff000, 0x100018, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.5/udc/dummy_udc.5/srp\x00', 0x60301, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, r2, 0x0, 0x800, 0x9) write$auto(0x6, 0x0, 0x100000001) lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) msync$auto(0x100000000, 0x5, 0x1ff) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 5.028263967s ago: executing program 1 (id=118): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14080000", @ANYRES16=0x0, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) mmap$auto(0x0, 0x5, 0x6, 0x15, r0, 0x300000000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r1 = socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000280)="f2ab8f1609f263143b1765755da7196e9a94a01380438356100e4932d0bce9e5149b7f3cd0367f14580963fc6b6d0122ffdeb1ef5ebda333b717cae8b9d4d9fef5bdb8d785b7065df6ac") writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_LINK={0x8, 0x1, 0x6551e4e0}, @GTPA_VERSION={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) 4.885166497s ago: executing program 1 (id=119): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000001140)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x8000000000000000, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0xb, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], "5cde27d22b6954bdbb7cf615d0373b7c7bc646d596ecc89527157b0fa70d213d226ec500ee033873d2d6914ddb263dd69471883d9a6e255e1c47b3b7319cc531e94ba28d0a0c75f3a9ece3ca36f0998f1e881b6c37c2820f79a236066be361fc9f70b993f7eeeaa8c4f99b14f3dfcda545b681494619d241e07141770e0f3c345a8d38d0cba788646d675fb24823bb81eeb639d391e13cbf37ec6c41b76b3acf9a687d31f28abcc84b579ab8820a5ae3e20e0c6d4adf5308988f8fb341546b9f"}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/total_time_ms\x00', 0x22400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/4091, 0xffb) r3 = getpid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r5, 0x0, 0x40002) getdents64$auto(r5, 0x0, 0x400) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001100), r5) sendfile$auto(r4, r4, 0x0, 0x5) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.47583109s ago: executing program 1 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x24000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) 4.432206712s ago: executing program 0 (id=122): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x1, 0xeb1, r0, 0xfffffffffffffffb) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) readahead$auto(r1, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x42800, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f00000001c0)="ff") syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0x1) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x129240, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x7ffffffffffffffe, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0x80000001}}, 0x3, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe66, 0x6) mmap$auto(0x0, 0x6, 0x20004000000000df, 0xeb1, r4, 0x8000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r5, 0x80dc5521, 0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@raw=0x3, 0x100110d, 0xffff, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x8}, 0x6, 0x0, 0x4, @inferred, @integer64={0x6, 0x4, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) 4.338318922s ago: executing program 1 (id=123): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x3, 0x40000c, 0x3aec000000, 0x9b78, 0x2, 0x7ffd) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0x6, 0x14, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) 3.485021541s ago: executing program 2 (id=124): keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) shmctl$auto_SHM_UNLOCK(0x8000, 0xc, &(0x7f0000000200)={{0x1, 0xee00, 0xee01, 0x4, 0x9, 0x9, 0x5}, 0x8, 0x85e, 0x0, 0x9, @raw=0xfffffe01, @inferred, 0x8, 0x0, &(0x7f00000000c0)="314fa02213454a48dd8cf87681370d97757059f3c9d58fcb6391ea07da3502bc4d6302dc8aa0598edfcb3b95c4849ca008f008aee25613fbebda0f6c7bf5ce04c3c6a3f3", &(0x7f0000000140)="897c6ccb5841cf43eda3e6621ab4ecb127e27ca4acb96684166b39ac11e31f68c88d000811141619f8b1b435b18244fa365920d26f5e0d675f2e6dfd27b351a84750c8f308cc871d0e15c548674043af6cead87e871fc620d9986a7a43bd14c2d0ed4037e922ee74e70d33524fa5a25342dfc7527a0b7ed7810df28c5756164a22f06c849289285b8d7db6c3ee246f2154d0dd2490a1665b986107b0594dae5febcc3d062934b9c567"}) shmctl$auto_SHM_UNLOCK(0x6, 0xc, &(0x7f00000003c0)={{0x4, 0xffffffffffffffff, 0x0, 0x40a, 0x2, 0xfffffff8, 0x1}, 0x6, 0xe2, 0x8, 0x2, @inferred, @raw=0xff, 0x2, 0x0, &(0x7f0000000280)="7d9b5c109502febd4883599c1a2e0d1898c07dbfd95a8cc512f457f780ed7c7b741d925f756bd49d643552c4763dffe41d33163aaebdae60a37a611dba07b716bce337cdc07acd46c878e4c56c1fce5fe6cc4a09a4c084852014d77ed5a1809a43b572af55e42745f1cb455c3ec60eb9bb35beaf0d218ee50fdb02d052ba7ead032e2d9f3ba1ce623cd3551c26b6f126bf9f578924bff1299f792fc71c75ebb78c881ddc08e70dba0f5f2d2eb491df9f13f65287f0218bb9bff78da8d28e44", &(0x7f0000000340)="2df5c5eb2a4274efa122bf100ab12a1542449c4fe67d60959ee417cbb44b01eeeda7731cdd8f1fc556c9231a80a6a33fbe6d293d088ef64ec6745350bec9793141f7feb51ec2a001b3a8a9f149e2f4d7f465e78121d9992f2116daef5f5f5db8bbd4c209213719be"}) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x101, r0, 0x0, r1, 0xffffffffffffffff) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x9) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x42}, 0x4) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r4 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy6/hwsim/group\x00', 0x214020, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r6 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d5") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r6, 0x8000) ioctl$auto_BCH_IOCTL_DISK_RESIZE_JOURNAL(r6, 0x4018bc0f, &(0x7f00000000c0)={0xb, 0x0, 0x1, 0x4}) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) mmap$auto(0x0, 0xfffffffffffffe01, 0xffffffffffff0000, 0x19b1, r4, 0xfffffffffffffca5) socket(0x26, 0x800, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) vmsplice$auto(r2, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) sysfs$auto(0x2, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.393266114s ago: executing program 0 (id=125): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x640002, 0x130) open(0x0, 0x40000, 0x31) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) listen$auto(0x3, 0x83) 2.393007418s ago: executing program 3 (id=127): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x400) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2710, 0xfffffffffffffffc, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000080), 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0) write$auto(0x3, 0x0, 0x4) 1.891354542s ago: executing program 1 (id=128): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x200000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x15, 0x5, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x2800c840) semctl$auto(0x7, 0x6, 0x13, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000080)={0x0, 0x4000000001}, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)=0xba) 1.719808576s ago: executing program 1 (id=129): mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r0, 0x9, &(0x7f0000000040)='{6y\xfa\xd6\bk\xf0\xe3\n', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) prctl$auto(0x4e, 0x2, 0x0, 0x100, 0x2) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0182, 0x0) readv$auto(r3, 0x0, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msync$auto(0x1ffff000, 0x1800000000000ff, 0x3) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f00000001c0)={{0x3, 0xee01, 0xee01, 0x2, 0x3ff, 0x8, 0x4}, &(0x7f00000000c0)=0xe, &(0x7f0000000100)=0x9, 0x3, 0x91b, 0x56304139, 0x8, 0xc, 0x6, 0x8b81, 0x5}) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000840)={0x780, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@typed={0x4, 0x140}, @nested={0x4, 0xde}, @generic="8ee7ba7eb76c1dc12c2b1b097663d62672a80cf968abc8c801f26b2a0674f852f87422664d6365a8eec3814afa7ece8003adaa5c6bd47e97eadb5ad4"]}, @TIPC_NLA_MEDIA={0x723, 0x5, 0x0, 0x1, [@generic="99041f82b8ef0dd698ecc535c74ad0523f48af4302e5ab0954c55b3765174cc3ea4196cf3ca80d5f6afa16e2a3ddc3c62a1d84774b980b0ead96864e5db12bf3503a1cf079bd3edb0b0612a812281a1aab5e0bb1e307080aab750f9fc2e2f9db2e765d4b4e678e6d8d4e40b1c0746e9709599151cfa2d8c741bb18c2bfcb116114dbc6f3f29ee8afe4b95ff02da971d0848c5b3b8417dcbbcafb99fcc7ae4cc486908dbfea97dcfb0ec6a674", @nested={0x3a4, 0xc, 0x0, 0x1, [@nested={0x39e, 0x3a, 0x0, 0x1, [@generic="ba8f8799197ca790487824130643a8788f4e88a67e49d596835b28317aa51f2165fe255fde6229cc308ab2c375c4ce26adddca39c096d77a5a2f7d868b264b6e5e540a31831116abca8709d2b9c4d611645a8ac1c381ac968d0c454a7186c3c438308ed3caf8514f0d50f14ffbb43d012c5f7c83a9cc9d22168cb0f019be35195dc346d3d3b54e5458e1473261b1fb4337d328aeb120894f0234c8cde267b7ce80513e1305c6588bcc74acc7bf640b7a5de7a4b50539183e206af35043f1c3acbb7a8c6a0bd446870192bde3dfb752b65ae0da3d57b5787e1678", @nested={0x1ec, 0xd3, 0x0, 0x1, [@nested={0x1de, 0x6d, 0x0, 0x1, [@nested={0x4, 0x14c}, @nested={0x4, 0xc1}, @generic="d295fc687675ef6d9f36b7f4a3a93bc93148004093f724b107facd8b090a68d6b9288d7c48c34e57d4a433b072a11fd6b81207c15b2a4b4aceedc10294691600a4031a7f569950392f74963fc9fa3379f0743e7cba4a41cba34edba773b0e59711ac41d1c99462b9d336d6ab9f6268ab790f7ccba0a729cf65c697e50be67969d2e219ebe8f7fc84fdab9c5c55b8efe2834658524b2f89c2da6efb84c8427096142b98a70d7df8e5ac736c5576a7b21ce8dba7ed5d2121e6c6aff565b0d2551a487e50bbaf8a078ea15053fcb65514a3f463f911e1508f2c3bc47124243663878a4423b103e4625b0be99c", @nested={0x4, 0xd7}, @typed={0x8, 0x59, 0x0, 0x0, @uid=r4}, @generic="3ddda3797d716290fc9d113f3a6400f4f82d88493d022e070fc14726ddc2c29c48", @generic="a6ba4b855c1a9112d588ba079bef5ddf3d0ccbafa5c5bc62c79802189c18a919bd9da58f934d177c3d82453407b4691872d0da61579ea854979c4704a65f3c49b5793dde5c4dc02659ff316af2fcf23254237661d141279e47f817f9c7d01f6c11a366000aa81416900f98232c930e672536c7e30f5b69195391cc94849e6bdaa875f3899c52478c337c285a72e78cddc1058e77942efc42dbdbc817868033af13fa527a07884332123a6d1ccd45d8728264725951e3", @typed={0x4, 0x33}]}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0xd1, 0xc3, 0x0, 0x0, @binary="c4c8405051ff327a563b08040f7884219a7631a29d4f8a425a56b236dbc4d7b4f7715d9960038e41f86d9967496cb8f242f6df028651651fcb7311129468b850428c036b267858fdf6a654284df29c6115f6ce85fdb3f461447a208d5df8ab6bd27753acdae0160296ef135d039a096f2a3ad0eace26b8ce5164e0f2a1b42e418ef86916f56f59e66baa571774e742996fb3d718370b11be2ef686308d9580bc69d5b0b8fbc0777defbb076d7e24eb71401d10771366024893153e8ebd94ab31610ecbe250fcae5f7af2753c7f"}]}]}, @nested={0x14d, 0x7e, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @ipv4=@local}, @generic="9ff5993d311ca0c3e4603a9e3fcf2fbbd0ce99a534324e3ff12e594cca15a899c6f0b47fdc953ca1b1799796299ca117869c1ccf415c35a7901d738320ab4b2e3ebf825d6bda902f1724f692bf4da671773dc19c9279cd624f6ea35d2f6f7892420fe6e12de63020b871f8353ee5bc6db56717e52b2dd7076e467be2c063b6a8a303b4e2e993d1618c9f7ac08cd5ada7542764e493c80005f3af6cff1b9a4f955557af6b0b1a08378689acda70893c9651ffc362ff042c710d82a7331d7c7af07b7b3d85f4eb27c9e50053554010fd5f3f56e01ed5ab4264d269d9989f8c587a9b42df9dcf17875d22567649d829e93986", @generic="8f8450f901d48483bc9e7239ea91aa3152dac76dbfa59038131fa2f3814f2339b889f1032dfbefd26657a1e5dc143a744a72fbade1b35393c16794404ff8e6fd0c64e7433606b5257ee41b58", @nested={0x4, 0x60}]}, @generic="8350d70597a31077ef07e2b4f3d4dde5af5f13c3c8e11defa70ad9cbe466c0a6d0bc87bb63961b50c8c50b915571d4e9d0d539046ff3347b432c91b6f6f05346b6c7949c2627e7d7e0d8d89998e9ebf7a18da0276b00099110ddde607ab2dacffa031629b6cd0cd70a8b9b7c8dd16ef03d1f3edf38781f2aba5c3797254e862c208dfcf5d33ff4", @typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@loopback}, @nested={0x53, 0x135, 0x0, 0x1, [@nested={0x4, 0x7}, @generic, @generic="1915ea773434b361c4b12c2d6ff7c546cc2e482e95916959a158e760e329830e0e0e", @generic="18a1bcc982fbb58604e6a806be1f43a97343b89ff19aeaf8deaeb6be379e85c26e8219e2ad53b5f73a"]}, @generic="d41b3f8266f9296ddc2eb27a65662218f28ea42b2c0be0948d67b89bee78bff4b572b0b29158c3b34a1d7a962e7e4a10d5aa87891a5b0376daa367c07f5570a38a98bcfce13337e127c64116f0480831f4e8541b6bf7464e7ef401eb1e13df3a29036815b45f5e8172bab52cebe6e141543a8134f687690b7f1e1236345ca379b983989fca48df6552c51588be5181dd"]}]}, 0x780}, 0x1, 0x0, 0x0, 0x4000054}, 0x20040040) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) 1.651498706s ago: executing program 2 (id=130): rseq$auto(&(0x7f0000000200)={0xe, 0x402, 0xfb82, 0x3, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) r0 = landlock_create_ruleset$auto(&(0x7f0000000080)={0x1584, 0xc, 0x1000000000000000}, 0x707fa16d, 0xf534) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000003c0), 0x143202, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/trace_pipe\x00', 0x109f00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) syz_clone3(&(0x7f0000000340)={0x20020600, &(0x7f00000000c0), 0x0, &(0x7f0000000180), {0x2a}, &(0x7f00000001c0)=""/180, 0xb4, 0x0, 0x0}, 0x58) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4000000000001fd, 0x20000000007, 0x2, 0x800, 0x7, 0x5, 0x2005, 0xd, 0x100, 0x3, 0x0, 0xfffffffffffffffe, 0x1000, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x34, r3, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f177904859082894f"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000012c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r4, 0x0, 0x4000810) readv$auto(r4, &(0x7f0000000440)={&(0x7f0000000380)="700c1815d3d99095118e97b4ed42d8677d8f6fca53d2442ef61ea7539a5c99639881b1a2730e4eb9899c586ea2cd4e970e590f7ad549d50c2b74a4a6fc24d46eef3d42d3", 0x8}, 0xf1) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) set_mempolicy$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x2000c, 0xdf, 0xd6, r0, 0x7ffd) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/state\x00', 0x202080, 0x0) lseek$auto(r6, 0x9, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)="50a54f6ba2ea381c3641084884", 0xfffffffffffffffe) bpf$auto(0xa, &(0x7f00000000c0)=@query={@target_ifindex, 0x4004, 0x0, 0x2, 0x3, @count=0x10000, 0x0, 0xd8, 0x0, 0x3, 0x1}, 0x91) 1.007095797s ago: executing program 3 (id=131): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000001140)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x8000000000000000, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0xb, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], "5cde27d22b6954bdbb7cf615d0373b7c7bc646d596ecc89527157b0fa70d213d226ec500ee033873d2d6914ddb263dd69471883d9a6e255e1c47b3b7319cc531e94ba28d0a0c75f3a9ece3ca36f0998f1e881b6c37c2820f79a236066be361fc9f70b993f7eeeaa8c4f99b14f3dfcda545b681494619d241e07141770e0f3c345a8d38d0cba788646d675fb24823bb81eeb639d391e13cbf37ec6c41b76b3acf9a687d31f28abcc84b579ab8820a5ae3e20e0c6d4adf5308988f8fb341546b9f"}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/total_time_ms\x00', 0x22400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/4091, 0xffb) r3 = getpid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r5, 0x0, 0x40002) getdents64$auto(r5, 0x0, 0x400) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001100), r5) sendfile$auto(r4, r4, 0x0, 0x5) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.006079084s ago: executing program 0 (id=139): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) writev$auto(r0, 0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x3f00000000000000, 0x0, 0x4}, 0x8880) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80900, 0x0) 386.49457ms ago: executing program 0 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x24000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) 230.910457ms ago: executing program 3 (id=133): keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe) keyctl$auto(0xe, 0x2, 0x76f, 0x9, 0xf13) symlink$auto(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x903080, 0x10) 111.032156ms ago: executing program 0 (id=134): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socket(0x2, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x100017d) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/35u\x00', 0x20100, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x2004c802) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x3}, 0x3, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_LINK={0x8, 0x1, 0x6551e4e0}, @GTPA_VERSION={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x800}, 0x2, 0x0, 0x7, 0xa505}, 0xa788}, 0x7, 0x8) 0s ago: executing program 3 (id=135): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/slab/kmalloc-64/slabs_cpu_partial\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/247, 0xe5) pidfd_getfd$auto(0x3, 0x1, 0x100000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x8, 0x8, 0x13, 0x3, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x1, 0x84) getsockopt$auto_SO_RCVBUF(r2, 0x0, 0x8, &(0x7f0000000180)='/sys/devices/platform/vkms/graphics/fb0/modes\x00', &(0x7f00000001c0)=0x2a2) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) sync_file_range$auto(0x3fe0000000000, 0x7, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r1, 0x5000aea5, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) signalfd$auto(r4, 0x0, 0xe9) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000080)=0x3, 0xfffffffb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 78.871643][ T5817] cgroup: Unknown subsys name 'net' [ 78.984950][ T5817] cgroup: Unknown subsys name 'cpuset' [ 78.993831][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.451353][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.133830][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.142640][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.161834][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.172073][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.179819][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.232200][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.240431][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.248655][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.256840][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.264552][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.294122][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.302321][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.310102][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.326490][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.341453][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.349420][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.358504][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.366140][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.385572][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.399290][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.768077][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 82.900172][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 82.938479][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 83.057760][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.066552][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.074241][ T5827] bridge_slave_0: entered allmulticast mode [ 83.082978][ T5827] bridge_slave_0: entered promiscuous mode [ 83.106560][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.113961][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.121207][ T5827] bridge_slave_1: entered allmulticast mode [ 83.128248][ T5827] bridge_slave_1: entered promiscuous mode [ 83.181032][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.228795][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.236042][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.243491][ T5833] bridge_slave_0: entered allmulticast mode [ 83.250530][ T5833] bridge_slave_0: entered promiscuous mode [ 83.261176][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.270561][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.278556][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.285958][ T5831] bridge_slave_0: entered allmulticast mode [ 83.293158][ T5831] bridge_slave_0: entered promiscuous mode [ 83.324228][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.331453][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.338619][ T5833] bridge_slave_1: entered allmulticast mode [ 83.345907][ T5833] bridge_slave_1: entered promiscuous mode [ 83.354726][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.375375][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.382780][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.389907][ T5831] bridge_slave_1: entered allmulticast mode [ 83.397189][ T5831] bridge_slave_1: entered promiscuous mode [ 83.464157][ T5827] team0: Port device team_slave_0 added [ 83.473188][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.499584][ T5827] team0: Port device team_slave_1 added [ 83.507051][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.518734][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.556368][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.604846][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.612187][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.619344][ T5837] bridge_slave_0: entered allmulticast mode [ 83.626607][ T5837] bridge_slave_0: entered promiscuous mode [ 83.635112][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.642400][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.669057][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.682691][ T5833] team0: Port device team_slave_0 added [ 83.697988][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.705380][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.712807][ T5837] bridge_slave_1: entered allmulticast mode [ 83.719762][ T5837] bridge_slave_1: entered promiscuous mode [ 83.727872][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.735026][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.761498][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.774403][ T5833] team0: Port device team_slave_1 added [ 83.782042][ T5831] team0: Port device team_slave_0 added [ 83.823439][ T5831] team0: Port device team_slave_1 added [ 83.841243][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.875911][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.885924][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.893234][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.919660][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.963071][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.970017][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.996242][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.007948][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.014927][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.041395][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.081762][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.088722][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.115056][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.133056][ T5827] hsr_slave_0: entered promiscuous mode [ 84.139470][ T5827] hsr_slave_1: entered promiscuous mode [ 84.147909][ T5837] team0: Port device team_slave_0 added [ 84.166214][ T5837] team0: Port device team_slave_1 added [ 84.248502][ T5833] hsr_slave_0: entered promiscuous mode [ 84.254797][ T5833] hsr_slave_1: entered promiscuous mode [ 84.260853][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 84.267238][ T5833] Cannot create hsr debugfs directory [ 84.267608][ T52] Bluetooth: hci0: command tx timeout [ 84.273605][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.285904][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.311941][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.345366][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.352404][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.378738][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.409178][ T5831] hsr_slave_0: entered promiscuous mode [ 84.415832][ T5831] hsr_slave_1: entered promiscuous mode [ 84.421723][ T52] Bluetooth: hci1: command tx timeout [ 84.421742][ T5151] Bluetooth: hci2: command tx timeout [ 84.422007][ T5835] Bluetooth: hci3: command tx timeout [ 84.439852][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 84.445841][ T5831] Cannot create hsr debugfs directory [ 84.587077][ T5837] hsr_slave_0: entered promiscuous mode [ 84.593461][ T5837] hsr_slave_1: entered promiscuous mode [ 84.599550][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 84.605443][ T5837] Cannot create hsr debugfs directory [ 84.907503][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.930810][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.947462][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.966330][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.021865][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.037798][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.052158][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.068031][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.156218][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.166711][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.185582][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.208676][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.297561][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.310074][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.327587][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.341778][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.415868][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.427582][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.475830][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.498616][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.524836][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.532078][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.556214][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.563619][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.576146][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.583266][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.613392][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.620486][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.643154][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.704031][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.740498][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.747644][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.764060][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.798749][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.806001][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.853052][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.903811][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.911039][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.948220][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.955468][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.103832][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.279181][ T5827] veth0_vlan: entered promiscuous mode [ 86.302552][ T5827] veth1_vlan: entered promiscuous mode [ 86.343513][ T5835] Bluetooth: hci0: command tx timeout [ 86.382637][ T5827] veth0_macvtap: entered promiscuous mode [ 86.433469][ T5827] veth1_macvtap: entered promiscuous mode [ 86.456313][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.474879][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.501090][ T5835] Bluetooth: hci3: command tx timeout [ 86.502985][ T52] Bluetooth: hci2: command tx timeout [ 86.506548][ T5835] Bluetooth: hci1: command tx timeout [ 86.532806][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.562246][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.594952][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.616826][ T1159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627182][ T1159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.645769][ T1159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.655291][ T1159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.673513][ T5833] veth0_vlan: entered promiscuous mode [ 86.711941][ T5831] veth0_vlan: entered promiscuous mode [ 86.724425][ T5833] veth1_vlan: entered promiscuous mode [ 86.767467][ T5831] veth1_vlan: entered promiscuous mode [ 86.818268][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.832066][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.880064][ T5831] veth0_macvtap: entered promiscuous mode [ 86.906654][ T5837] veth0_vlan: entered promiscuous mode [ 86.917241][ T5831] veth1_macvtap: entered promiscuous mode [ 86.924747][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.927455][ T5833] veth0_macvtap: entered promiscuous mode [ 86.934627][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.944282][ T5833] veth1_macvtap: entered promiscuous mode [ 86.976279][ T5837] veth1_vlan: entered promiscuous mode [ 87.020795][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.024051][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.053211][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.079273][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.098188][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.145229][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.168846][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.221918][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.273400][ T5837] veth0_macvtap: entered promiscuous mode [ 87.283708][ T1159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.293828][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.313701][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.342200][ T5837] veth1_macvtap: entered promiscuous mode [ 87.355889][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.372298][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.463954][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.505750][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.579253][ T3426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.610841][ T3426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.656462][ T3426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.689516][ T3426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.751717][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.759656][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.809668][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.818501][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.889046][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.899955][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.956501][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.977149][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.068557][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.082900][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.161137][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.168992][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.207957][ T9] cfg80211: failed to load regulatory.db [ 88.342758][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.382279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.397947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.409099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 88.431414][ T5835] Bluetooth: hci0: command tx timeout [ 88.436511][ T5922] ipvlan0: entered promiscuous mode [ 88.528531][ T5922] ipvlan0: entered allmulticast mode [ 88.583626][ T5151] Bluetooth: hci3: command tx timeout [ 88.583632][ T52] Bluetooth: hci1: command tx timeout [ 88.600026][ T5835] Bluetooth: hci2: command tx timeout [ 88.622751][ T5922] veth0_vlan: entered allmulticast mode [ 88.715977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.787348][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.931727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.011028][ T5925] Zero length message leads to an empty skb [ 89.861447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.231979][ T5948] netlink: 330 bytes leftover after parsing attributes in process `syz.3.6'. [ 90.246308][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.501666][ T5151] Bluetooth: hci0: command tx timeout [ 90.548261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.558376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.665858][ T5959] block nbd0: not configured, cannot reconfigure [ 90.667152][ T5151] Bluetooth: hci2: command tx timeout [ 90.672543][ T52] Bluetooth: hci1: command tx timeout [ 90.683766][ T5835] Bluetooth: hci3: command tx timeout [ 90.871383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.880140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.739584][ T52] block nbd0: Receive control failed (result -107) [ 92.834105][ T5985] nbd0: detected capacity change from 0 to 422212465065984 [ 92.862766][ T5821] block nbd0: Dead connection, failed to find a fallback [ 92.885297][ T5821] block nbd0: shutting down sockets [ 92.899540][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.937720][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.946050][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.956069][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.964282][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.975826][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.984910][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 92.995095][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.003248][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 93.053665][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.076632][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 93.076688][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.076768][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 93.076799][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.076855][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 93.076886][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.076923][ T5821] ldm_validate_partition_table(): Disk read failed. [ 93.076993][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 93.077025][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.077081][ T5821] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 93.077113][ T5821] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.077216][ T5821] Dev nbd0: unable to read RDB block 0 [ 93.077499][ T5821] nbd0: unable to read partition table [ 93.097712][ T5821] ldm_validate_partition_table(): Disk read failed. [ 93.097889][ T5821] Dev nbd0: unable to read RDB block 0 [ 93.098144][ T5821] nbd0: unable to read partition table [ 93.232971][ T52] block nbd1: Receive control failed (result -107) [ 93.799714][ T9] Process accounting resumed [ 93.867898][ T52] block nbd2: Receive control failed (result -107) [ 93.987319][ T6004] futex_wake_op: syz.0.15 tries to shift op by -1; fix this program [ 94.569244][ T6017] netlink: 330 bytes leftover after parsing attributes in process `syz.2.21'. [ 94.583310][ T6018] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.779011][ T6017] : renamed from bond_slave_0 (while UP) [ 95.089316][ T6027] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 95.226700][ T52] block nbd3: Receive control failed (result -107) [ 95.553238][ T52] block nbd4: Receive control failed (result -107) [ 97.104264][ T52] block nbd5: Receive control failed (result -107) [ 98.287836][ T52] block nbd6: Receive control failed (result -107) [ 98.935275][ T30] audit: type=1800 audit(1765717199.289:2): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="discovery_nqn" dev="configfs" ino=7911 res=0 errno=0 [ 98.982206][ T52] block nbd7: Receive control failed (result -107) [ 99.901934][ T6123] netlink: 330 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.607289][ T6152] futex_wake_op: syz.1.49 tries to shift op by -2048; fix this program [ 101.627835][ T6152] futex_wake_op: syz.1.49 tries to shift op by -2048; fix this program [ 101.720249][ T6153] 0x000000000001-0x000000020000 : "" [ 101.790656][ T6153] ftl_cs: FTL header corrupt! [ 101.796131][ T6156] vcan0: tx drop: invalid da for name 0x000000000000003f [ 101.929091][ T6156] nbd: couldn't find a device at index 35644 [ 102.256472][ T30] audit: type=1800 audit(1765717202.659:3): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.52" name="dbroot" dev="configfs" ino=8151 res=0 errno=0 [ 102.313023][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 102.374902][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 103.368466][ T6176] program syz.3.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.415375][ T52] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 103.415399][ T52] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 103.430191][ T52] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 103.448326][ T6176] syz.3.57 (6176) used greatest stack depth: 19688 bytes left [ 104.208708][ T6195] Console: switching to colour VGA+ 80x25 [ 104.668816][ T6195] Console: switching to colour frame buffer device 128x48 [ 105.415546][ T6207] netlink: 342 bytes leftover after parsing attributes in process `syz.0.64'. [ 106.143536][ T6227] hub 1-0:1.0: USB hub found [ 106.149147][ T6227] hub 1-0:1.0: 1 port detected [ 106.585294][ T6234] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 107.291344][ T6236] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 107.666420][ T52] block nbd8: Receive control failed (result -107) [ 109.353851][ T52] block nbd9: Receive control failed (result -107) [ 109.936655][ T52] block nbd10: Receive control failed (result -107) [ 110.269918][ T6273] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[6273] [ 112.047903][ T1159] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.124099][ T6292] futex_wake_op: syz.3.81 tries to shift op by -1; fix this program [ 112.322146][ T6299] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 113.588281][ T6323] vhci_hcd vhci_hcd.0: invalid port number 16 [ 113.721575][ T6327] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.945274][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 114.130325][ T6331] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 114.506726][ T6334] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 115.754136][ T6350] input: jJǸ-9% as /devices/virtual/input/input9 [ 116.389451][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 117.918393][ T30] audit: type=1804 audit(1765717218.319:4): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.96" name="/newroot/27/file0" dev="tmpfs" ino=158 res=1 errno=0 [ 117.969196][ T30] audit: type=1800 audit(1765717218.369:5): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.96" name="file0" dev="tmpfs" ino=158 res=0 errno=0 [ 119.763229][ T52] block nbd11: Receive control failed (result -107) [ 120.077933][ T6411] Invalid ELF header magic: != ELF [ 120.087519][ T52] block nbd12: Receive control failed (result -107) [ 120.373396][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.107'. [ 121.095073][ T30] audit: type=1804 audit(1765717221.499:6): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.109" name="/newroot/25/file0" dev="tmpfs" ino=148 res=1 errno=0 [ 122.339229][ T52] block nbd13: Receive control failed (result -107) [ 123.192088][ T6471] blktrace: Concurrent blktraces are not allowed on loop2 [ 123.265270][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'. [ 123.740679][ T6478] Invalid ELF header magic: != ELF [ 126.797518][ T6504] mmap: syz.1.129 (6504) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.099921][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 127.377726][ T52] block nbd14: Receive control failed (result -107) [ 128.071596][ T6523] [ 128.073938][ T6523] ====================================================== [ 128.080938][ T6523] WARNING: possible circular locking dependency detected [ 128.087959][ T6523] syzkaller #0 Tainted: G L [ 128.093919][ T6523] ------------------------------------------------------ [ 128.100921][ T6523] syz.0.134/6523 is trying to acquire lock: [ 128.106805][ T6523] ffff88805b9a94e8 (&resv_map->rw_sema){++++}-{4:4}, at: hugetlb_vma_lock_read+0xff/0x130 [ 128.116715][ T6523] [ 128.116715][ T6523] but task is already holding lock: [ 128.124066][ T6523] ffff88801f6a2578 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x2fa/0x1730 [ 128.134463][ T6523] [ 128.134463][ T6523] which lock already depends on the new lock. [ 128.134463][ T6523] [ 128.144873][ T6523] [ 128.144873][ T6523] the existing dependency chain (in reverse order) is: [ 128.153886][ T6523] [ 128.153886][ T6523] -> #8 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}: [ 128.162757][ T6523] __mutex_lock+0x1aa/0x1ca0 [ 128.167886][ T6523] hugetlb_fault+0x2fa/0x1730 [ 128.173088][ T6523] handle_mm_fault+0x95d/0xad0 [ 128.178377][ T6523] do_user_addr_fault+0x7a6/0x1370 [ 128.184017][ T6523] exc_page_fault+0x64/0xc0 [ 128.189054][ T6523] asm_exc_page_fault+0x26/0x30 [ 128.194425][ T6523] rep_movs_alternative+0x4a/0x90 [ 128.199973][ T6523] _copy_from_iter+0x355/0x16c0 [ 128.205363][ T6523] mptcp_sendmsg+0x1046/0x1ee0 [ 128.210654][ T6523] inet_sendmsg+0x11c/0x140 [ 128.215685][ T6523] sock_write_iter+0x509/0x610 [ 128.220998][ T6523] vfs_write+0x7d3/0x11d0 [ 128.225860][ T6523] ksys_write+0x1f8/0x250 [ 128.230720][ T6523] do_syscall_64+0xcd/0xf80 [ 128.235761][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.242176][ T6523] [ 128.242176][ T6523] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 128.249833][ T6523] lock_sock_nested+0x41/0xf0 [ 128.255038][ T6523] inet_shutdown+0x67/0x440 [ 128.260065][ T6523] nbd_mark_nsock_dead+0xae/0x5d0 [ 128.265612][ T6523] recv_work+0x66b/0xa70 [ 128.270387][ T6523] process_one_work+0x9ba/0x1b20 [ 128.275859][ T6523] worker_thread+0x6c8/0xf10 [ 128.280970][ T6523] kthread+0x3c5/0x780 [ 128.285557][ T6523] ret_from_fork+0x983/0xb10 [ 128.290669][ T6523] ret_from_fork_asm+0x1a/0x30 [ 128.295969][ T6523] [ 128.295969][ T6523] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 128.303619][ T6523] __mutex_lock+0x1aa/0x1ca0 [ 128.308751][ T6523] nbd_queue_rq+0x423/0x12d0 [ 128.313869][ T6523] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 128.319953][ T6523] __blk_mq_sched_dispatch_requests+0xcbd/0x15f0 [ 128.326812][ T6523] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 128.333315][ T6523] blk_mq_run_hw_queue+0x239/0x670 [ 128.338947][ T6523] blk_mq_dispatch_list+0x514/0x1300 [ 128.344758][ T6523] blk_mq_flush_plug_list+0x130/0x600 [ 128.350658][ T6523] __blk_flush_plug+0x2c4/0x4b0 [ 128.356032][ T6523] __submit_bio+0x542/0x690 [ 128.361055][ T6523] submit_bio_noacct_nocheck+0x53d/0xbe0 [ 128.367211][ T6523] submit_bio_noacct+0x5bd/0x1f40 [ 128.372760][ T6523] block_read_full_folio+0x4db/0x850 [ 128.378597][ T6523] filemap_read_folio+0xc8/0x2a0 [ 128.384063][ T6523] do_read_cache_folio+0x266/0x5c0 [ 128.389699][ T6523] read_part_sector+0xd4/0x370 [ 128.394985][ T6523] adfspart_check_ICS+0x93/0x940 [ 128.400449][ T6523] bdev_disk_changed+0x723/0x1520 [ 128.405993][ T6523] blkdev_get_whole+0x187/0x290 [ 128.411374][ T6523] bdev_open+0x2c7/0xe40 [ 128.416137][ T6523] blkdev_open+0x34e/0x4f0 [ 128.421089][ T6523] do_dentry_open+0x748/0x1590 [ 128.426382][ T6523] vfs_open+0x82/0x3f0 [ 128.430969][ T6523] path_openat+0x2078/0x3140 [ 128.436102][ T6523] do_filp_open+0x20b/0x470 [ 128.441136][ T6523] do_sys_openat2+0x121/0x290 [ 128.446344][ T6523] __x64_sys_openat+0x174/0x210 [ 128.451717][ T6523] do_syscall_64+0xcd/0xf80 [ 128.456754][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.463429][ T6523] [ 128.463429][ T6523] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 128.470663][ T6523] __mutex_lock+0x1aa/0x1ca0 [ 128.475789][ T6523] nbd_queue_rq+0xbd/0x12d0 [ 128.480822][ T6523] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 128.486892][ T6523] __blk_mq_sched_dispatch_requests+0xcbd/0x15f0 [ 128.493745][ T6523] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 128.500253][ T6523] blk_mq_run_hw_queue+0x239/0x670 [ 128.505891][ T6523] blk_mq_dispatch_list+0x514/0x1300 [ 128.511713][ T6523] blk_mq_flush_plug_list+0x130/0x600 [ 128.517626][ T6523] __blk_flush_plug+0x2c4/0x4b0 [ 128.523003][ T6523] __submit_bio+0x542/0x690 [ 128.528052][ T6523] submit_bio_noacct_nocheck+0x53d/0xbe0 [ 128.534212][ T6523] submit_bio_noacct+0x5bd/0x1f40 [ 128.539761][ T6523] block_read_full_folio+0x4db/0x850 [ 128.545577][ T6523] filemap_read_folio+0xc8/0x2a0 [ 128.551049][ T6523] do_read_cache_folio+0x266/0x5c0 [ 128.556700][ T6523] read_part_sector+0xd4/0x370 [ 128.561991][ T6523] adfspart_check_ICS+0x93/0x940 [ 128.567458][ T6523] bdev_disk_changed+0x723/0x1520 [ 128.573014][ T6523] blkdev_get_whole+0x187/0x290 [ 128.578390][ T6523] bdev_open+0x2c7/0xe40 [ 128.583155][ T6523] blkdev_open+0x34e/0x4f0 [ 128.588104][ T6523] do_dentry_open+0x748/0x1590 [ 128.593404][ T6523] vfs_open+0x82/0x3f0 [ 128.597997][ T6523] path_openat+0x2078/0x3140 [ 128.603117][ T6523] do_filp_open+0x20b/0x470 [ 128.608157][ T6523] do_sys_openat2+0x121/0x290 [ 128.613363][ T6523] __x64_sys_openat+0x174/0x210 [ 128.618742][ T6523] do_syscall_64+0xcd/0xf80 [ 128.623780][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.630196][ T6523] [ 128.630196][ T6523] -> #4 (set->srcu){.+.+}-{0:0}: [ 128.637342][ T6523] __synchronize_srcu+0xa2/0x250 [ 128.642824][ T6523] blk_mq_quiesce_queue+0x149/0x1b0 [ 128.648576][ T6523] elevator_switch+0x17d/0x7f0 [ 128.653880][ T6523] elevator_change+0x38b/0x570 [ 128.659176][ T6523] elevator_set_default+0x2d2/0x390 [ 128.664905][ T6523] blk_register_queue+0x384/0x4e0 [ 128.670466][ T6523] __add_disk+0x74a/0xf00 [ 128.675327][ T6523] add_disk_fwnode+0x13f/0x5d0 [ 128.680624][ T6523] nbd_dev_add+0x783/0xbb0 [ 128.685580][ T6523] nbd_init+0x181/0x320 [ 128.690267][ T6523] do_one_initcall+0x123/0x680 [ 128.695561][ T6523] kernel_init_freeable+0x5c8/0x920 [ 128.701279][ T6523] kernel_init+0x1c/0x2b0 [ 128.706138][ T6523] ret_from_fork+0x983/0xb10 [ 128.711252][ T6523] ret_from_fork_asm+0x1a/0x30 [ 128.716553][ T6523] [ 128.716553][ T6523] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 128.724379][ T6523] __mutex_lock+0x1aa/0x1ca0 [ 128.729509][ T6523] elevator_change+0x1ed/0x570 [ 128.734793][ T6523] elv_iosched_store+0x3e8/0x4a0 [ 128.740260][ T6523] queue_attr_store+0x26b/0x310 [ 128.745652][ T6523] sysfs_kf_write+0xf2/0x150 [ 128.750769][ T6523] kernfs_fop_write_iter+0x3af/0x570 [ 128.756761][ T6523] iter_file_splice_write+0xa24/0x12b0 [ 128.762755][ T6523] direct_splice_actor+0x192/0x6c0 [ 128.768401][ T6523] splice_direct_to_actor+0x345/0xa30 [ 128.774309][ T6523] do_splice_direct+0x174/0x240 [ 128.779702][ T6523] do_sendfile+0xb06/0xe50 [ 128.784647][ T6523] __x64_sys_sendfile64+0x1d8/0x220 [ 128.790371][ T6523] do_syscall_64+0xcd/0xf80 [ 128.795410][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.801824][ T6523] [ 128.801824][ T6523] -> #2 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 128.810442][ T6523] blk_alloc_queue+0x610/0x750 [ 128.815747][ T6523] blk_mq_alloc_queue+0x172/0x280 [ 128.821301][ T6523] __blk_mq_alloc_disk+0x29/0x120 [ 128.826856][ T6523] null_add_dev+0xf2e/0x1eb0 [ 128.831982][ T6523] null_init+0x2c9/0x610 [ 128.836760][ T6523] do_one_initcall+0x123/0x680 [ 128.842070][ T6523] kernel_init_freeable+0x5c8/0x920 [ 128.847798][ T6523] kernel_init+0x1c/0x2b0 [ 128.852657][ T6523] ret_from_fork+0x983/0xb10 [ 128.857785][ T6523] ret_from_fork_asm+0x1a/0x30 [ 128.863084][ T6523] [ 128.863084][ T6523] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 128.870311][ T6523] fs_reclaim_acquire+0x102/0x150 [ 128.875876][ T6523] kmem_cache_alloc_noprof+0x5b/0x770 [ 128.881776][ T6523] __anon_vma_prepare+0xae/0x5e0 [ 128.887235][ T6523] __vmf_anon_prepare+0x11c/0x240 [ 128.892797][ T6523] hugetlb_no_page+0x10ae/0x2140 [ 128.898259][ T6523] hugetlb_fault+0x5ed/0x1730 [ 128.903461][ T6523] handle_mm_fault+0x95d/0xad0 [ 128.908749][ T6523] do_user_addr_fault+0x7a6/0x1370 [ 128.914388][ T6523] exc_page_fault+0x64/0xc0 [ 128.919432][ T6523] asm_exc_page_fault+0x26/0x30 [ 128.924809][ T6523] rep_movs_alternative+0x4a/0x90 [ 128.930362][ T6523] _copy_from_user+0x98/0xd0 [ 128.935483][ T6523] do_pages_stat+0x240/0x7b0 [ 128.940610][ T6523] kernel_move_pages+0xfc8/0x12f0 [ 128.946160][ T6523] __x64_sys_move_pages+0xe0/0x1c0 [ 128.951795][ T6523] do_syscall_64+0xcd/0xf80 [ 128.956922][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.963343][ T6523] [ 128.963343][ T6523] -> #0 (&resv_map->rw_sema){++++}-{4:4}: [ 128.971274][ T6523] __lock_acquire+0x1669/0x2890 [ 128.976646][ T6523] lock_acquire+0x179/0x330 [ 128.981665][ T6523] down_read+0x9b/0x460 [ 128.986341][ T6523] hugetlb_vma_lock_read+0xff/0x130 [ 128.992068][ T6523] hugetlb_fault+0x302/0x1730 [ 128.997273][ T6523] handle_mm_fault+0x95d/0xad0 [ 129.002561][ T6523] do_user_addr_fault+0x7a6/0x1370 [ 129.008235][ T6523] exc_page_fault+0x64/0xc0 [ 129.013271][ T6523] asm_exc_page_fault+0x26/0x30 [ 129.018641][ T6523] rep_movs_alternative+0x30/0x90 [ 129.024192][ T6523] _copy_from_user+0x98/0xd0 [ 129.029339][ T6523] sctp_getsockopt+0x132c/0x7050 [ 129.034810][ T6523] do_sock_getsockopt+0x324/0x410 [ 129.040370][ T6523] __sys_getsockopt+0x123/0x1b0 [ 129.045756][ T6523] __x64_sys_getsockopt+0xbd/0x160 [ 129.051396][ T6523] do_syscall_64+0xcd/0xf80 [ 129.056441][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.062858][ T6523] [ 129.062858][ T6523] other info that might help us debug this: [ 129.062858][ T6523] [ 129.073078][ T6523] Chain exists of: [ 129.073078][ T6523] &resv_map->rw_sema --> sk_lock-AF_INET --> &hugetlb_fault_mutex_table[i] [ 129.073078][ T6523] [ 129.087606][ T6523] Possible unsafe locking scenario: [ 129.087606][ T6523] [ 129.095049][ T6523] CPU0 CPU1 [ 129.100410][ T6523] ---- ---- [ 129.105768][ T6523] lock(&hugetlb_fault_mutex_table[i]); [ 129.111404][ T6523] lock(sk_lock-AF_INET); [ 129.118343][ T6523] lock(&hugetlb_fault_mutex_table[i]); [ 129.126591][ T6523] rlock(&resv_map->rw_sema); [ 129.131354][ T6523] [ 129.131354][ T6523] *** DEADLOCK *** [ 129.131354][ T6523] [ 129.139490][ T6523] 3 locks held by syz.0.134/6523: [ 129.144513][ T6523] #0: ffff888029b28260 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_getsockopt+0x2d6/0x7050 [ 129.154284][ T6523] #1: ffff88807c681bc0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6e0 [ 129.164230][ T6523] #2: ffff88801f6a2578 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x2fa/0x1730 [ 129.175042][ T6523] [ 129.175042][ T6523] stack backtrace: [ 129.180943][ T6523] CPU: 0 UID: 0 PID: 6523 Comm: syz.0.134 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.180979][ T6523] Tainted: [L]=SOFTLOCKUP [ 129.180987][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.181007][ T6523] Call Trace: [ 129.181016][ T6523] [ 129.181025][ T6523] dump_stack_lvl+0x116/0x1f0 [ 129.181063][ T6523] print_circular_bug+0x275/0x340 [ 129.181104][ T6523] check_noncircular+0x146/0x160 [ 129.181145][ T6523] __lock_acquire+0x1669/0x2890 [ 129.181170][ T6523] ? trace_contention_end+0xdd/0x110 [ 129.181197][ T6523] lock_acquire+0x179/0x330 [ 129.181219][ T6523] ? hugetlb_vma_lock_read+0xff/0x130 [ 129.181252][ T6523] ? __pfx___might_resched+0x10/0x10 [ 129.181287][ T6523] ? __pfx___mutex_lock+0x10/0x10 [ 129.181326][ T6523] down_read+0x9b/0x460 [ 129.181348][ T6523] ? hugetlb_vma_lock_read+0xff/0x130 [ 129.181380][ T6523] ? __pfx_down_read+0x10/0x10 [ 129.181408][ T6523] ? mt_find+0x749/0xa20 [ 129.181431][ T6523] hugetlb_vma_lock_read+0xff/0x130 [ 129.181464][ T6523] hugetlb_fault+0x302/0x1730 [ 129.181490][ T6523] ? __pfx_hugetlb_fault+0x10/0x10 [ 129.181520][ T6523] ? find_vma+0xbf/0x140 [ 129.181553][ T6523] ? __pfx_find_vma+0x10/0x10 [ 129.181584][ T6523] ? lock_acquire+0x179/0x330 [ 129.181607][ T6523] handle_mm_fault+0x95d/0xad0 [ 129.181635][ T6523] do_user_addr_fault+0x7a6/0x1370 [ 129.181667][ T6523] ? rcu_is_watching+0x12/0xc0 [ 129.181703][ T6523] exc_page_fault+0x64/0xc0 [ 129.181737][ T6523] asm_exc_page_fault+0x26/0x30 [ 129.181761][ T6523] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 129.181791][ T6523] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 129.181814][ T6523] RSP: 0018:ffffc90018687a60 EFLAGS: 00050246 [ 129.181834][ T6523] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 129.181848][ T6523] RDX: fffff520030d0f94 RSI: 0000000000000000 RDI: ffffc90018687c98 [ 129.181865][ T6523] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520030d0f93 [ 129.181880][ T6523] R10: ffffc90018687c9f R11: ffff888030ff0b30 R12: 0000000000000000 [ 129.181896][ T6523] R13: ffffc90018687c98 R14: 0000000000000000 R15: 1ffff920030d0f5f [ 129.181920][ T6523] _copy_from_user+0x98/0xd0 [ 129.181946][ T6523] sctp_getsockopt+0x132c/0x7050 [ 129.181975][ T6523] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 129.182006][ T6523] ? futex_unqueue+0x13d/0x2c0 [ 129.182033][ T6523] ? __pfx_sctp_getsockopt+0x10/0x10 [ 129.182058][ T6523] ? __futex_wait+0x24b/0x2f0 [ 129.182091][ T6523] ? __pfx___futex_wait+0x10/0x10 [ 129.182130][ T6523] ? __lock_acquire+0x436/0x2890 [ 129.182161][ T6523] ? __might_fault+0xe3/0x190 [ 129.182188][ T6523] ? __might_fault+0x13b/0x190 [ 129.182219][ T6523] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 129.182256][ T6523] do_sock_getsockopt+0x324/0x410 [ 129.182294][ T6523] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 129.182329][ T6523] ? __fget_files+0x204/0x3c0 [ 129.182371][ T6523] __sys_getsockopt+0x123/0x1b0 [ 129.182407][ T6523] __x64_sys_getsockopt+0xbd/0x160 [ 129.182436][ T6523] ? do_syscall_64+0x91/0xf80 [ 129.182470][ T6523] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.182504][ T6523] do_syscall_64+0xcd/0xf80 [ 129.182540][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.182565][ T6523] RIP: 0033:0x7f809a98f7c9 [ 129.182588][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.182611][ T6523] RSP: 002b:00007f809b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 129.182633][ T6523] RAX: ffffffffffffffda RBX: 00007f809abe5fa0 RCX: 00007f809a98f7c9 [ 129.182649][ T6523] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 129.182664][ T6523] RBP: 00007f809aa13f91 R08: 0000200000000280 R09: 0000000000000000 [ 129.182680][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.182694][ T6523] R13: 00007f809abe6038 R14: 00007f809abe5fa0 R15: 00007ffd0112e738 [ 129.182718][ T6523] [ 129.822252][ T6523] netlink: 25 bytes leftover after parsing attributes in process `syz.0.134'. [ 129.843918][ T6523] netlink: 198 bytes leftover after parsing attributes in process `syz.0.134'.