last executing test programs: 1m17.740387829s ago: executing program 2 (id=82): openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r0 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffd, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) read$auto(r0, &(0x7f0000000080)='\xbb\x00', 0x3) ioperm$auto(0x6bd, 0x4, 0x80000001) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) (async) futex_waitv$auto(&(0x7f0000000000)={0xfffffffffffffffd, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) (async) read$auto(r0, &(0x7f0000000080)='\xbb\x00', 0x3) (async) ioperm$auto(0x6bd, 0x4, 0x80000001) (async) 1m17.392450809s ago: executing program 2 (id=84): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000001c0)="60676da9ab4a04bfcc40e76a46b81b99ed28a057c0c58df3216cdf6b7fd6a266767dbea2866b0de39c32e18ad47b9ea82ac6d1b6bd8ce54254bae5bd48b6e9114635e1c5d27312ac61431cedc5c9666b5b082bbfa870ef9495c967d336fc54e6fcac71f2d5030496858aabf91c77ad734990dfcfc0a8e118373ac37c943290292b69b71cb10fc750ccd47a7e", 0x852, &(0x7f0000000280)="06850a6aa70c44345afd11d3fe8a61c8134235e4f5cf098f24fba22f69cc05c1bd309090a6ab959d9b4f40a0a5c0c912d9ce5d298ae1f6d46719e10f8c93fe53e510e82cf9be31d0581e899d785c48c9320cafec72526e9296c8b5764e20755ce5db202b3acc607f9a3e8be9cf1b667a94f88aed007b", 0x79, &(0x7f0000000300)="0d6441167370160d645cac3b6f88a51572151c7ffddf5e5f42ca6796", &(0x7f0000000380)}) io_uring_setup$auto(0x5, &(0x7f0000000400)={0x8, 0x5, 0x401, 0x1, 0x2, 0x32, r0, [0x792, 0x800, 0x1], {0xffff553e, 0x8, 0xa1c, 0x5, 0x7fffffff, 0x80000000, 0x648b35d0, 0x800, 0x3}, {0x10, 0x9, 0x400, 0x7fff, 0x1, 0x7, 0x5, 0x1}}) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x81, 0x4, 0x6824, 0x7) mmap$auto(0x0, 0x20006, 0x7fffffff, 0xeb1, 0x401, 0x8000) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) r1 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, 0x0) write$auto_configfs_file_operations_configfs_internal(r1, &(0x7f00000002c0), 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) ioctl$auto_MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x7fff, 0xc9, 0x6, 0x5, 0x65, 0x5, 0x7, 0xa, 0x40, 0x100, 0x31a, 0x5, 0x3, @setup="9fef6bd13c8f6103", 0x6, 0x7, 0x6d}, 0x0, 0x9}) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="210026bd7000fedbdf25010000001400020077673000000000000000000000080000060006004e200000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x4000004}, 0x8041) modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r6 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0p\x00', 0x1a1280, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r6, 0x80044100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m16.328411634s ago: executing program 2 (id=89): prctl$auto_PR_SET_MM_START_DATA(0x80000001, 0x3, 0xffffffffffffffff, 0xa3, 0x1000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x4, 0x2, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) 1m15.945059411s ago: executing program 2 (id=91): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) r1 = prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, r1, &(0x7f0000000040)=0xfff, 0x7fffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) ioctl$auto(r0, 0x4b3b, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop9/queue/rotational\x00', 0x8c801, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x492d, 0xde, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x58, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon8\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r4, 0x0, 0x2f) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, 0x0) socket(0xa, 0x2, 0x73) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x80000000001ff) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x2140, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) 1m14.851705199s ago: executing program 2 (id=97): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) socketcall$auto_SYS_GETPEERNAME(0x7, &(0x7f0000000000)=0x4) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x5) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x3, 0x0) open(0x0, 0x22240, 0x55) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x55) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) 1m14.244232753s ago: executing program 2 (id=102): sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) r0 = socketpair$auto(0x0, 0x200, 0xc7, &(0x7f00000000c0)=0xff) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) (async) mmap$auto(0x10000000, 0xb991, 0x5, 0x1d, r0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) (async) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) (async) setsockopt$auto(r1, 0xfffffbff, 0xfffffffc, 0x0, 0x1) (async) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYRES8, @ANYRES16=r3, @ANYBLOB="000123bd7000fbdbdf250400000008000100ff0f000004000600", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8000000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) read$auto_proc_single_file_operations_base(r0, &(0x7f00000010c0)=""/204, 0xcc) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0xffffffffffffffff, 0x3, r4) (async) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0x81) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x7, 0xdf, 0x10, 0x2, 0x8001) (async) mlockall$auto(0x7) 58.786764306s ago: executing program 32 (id=102): sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24004054) r0 = socketpair$auto(0x0, 0x200, 0xc7, &(0x7f00000000c0)=0xff) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) (async) mmap$auto(0x10000000, 0xb991, 0x5, 0x1d, r0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) (async) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) (async) setsockopt$auto(r1, 0xfffffbff, 0xfffffffc, 0x0, 0x1) (async) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYRES8, @ANYRES16=r3, @ANYBLOB="000123bd7000fbdbdf250400000008000100ff0f000004000600", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8000000) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) read$auto_proc_single_file_operations_base(r0, &(0x7f00000010c0)=""/204, 0xcc) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0xffffffffffffffff, 0x3, r4) (async) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0x81) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mmap$auto(0x0, 0x7, 0xdf, 0x10, 0x2, 0x8001) (async) mlockall$auto(0x7) 3.690953673s ago: executing program 4 (id=334): socket(0x2d, 0x2, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x800, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mtd/mtd0/subpagesize\x00', 0x80000, 0x0) socket(0x2b, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x3, 0x9) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) select$auto(0xfffffc01, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x802, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usbhid/new_id\x00', 0x1e9842, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/devices/system/memory/memory0/state\x00', 0xea) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose14/carrier_changes\x00', 0x103000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x2a6) 3.411835666s ago: executing program 4 (id=335): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) (async) socket(0x10, 0x2, 0x0) (async) socket(0x2, 0x2, 0x1) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xb00) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x480000, 0x0) (async) r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffe, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x1, 0x105, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x9, 0x3, 0x76c5, 0x8, 0x100000000}}) open(0x0, 0x261c2, 0x84) readv$auto(0x3, 0x0, 0x400) (async) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40), 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2581, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi26\x00', 0x0, 0x0) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4a, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x642, 0x0) (async) madvise$auto(0x0, 0x20499d, 0x9) (async) setreuid$auto(0x0, 0xee00) (async) bpf$auto(0x0, 0x0, 0x6f1) timer_create$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) r3 = open(&(0x7f0000000100)='./cgroup/file0\x00', 0x141001, 0x30) getdents64$auto(r3, 0x0, 0x400) 3.171935423s ago: executing program 0 (id=336): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0x4e10c3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = fcntl$auto(r0, 0xfffffffc, r1) (async) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$auto_NCSI_CMD_PKG_INFO(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x19e8, r3, 0xad9d596093209f27, 0x70bd28, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x8}, @NCSI_ATTR_PACKAGE_LIST={0x11c8, 0x2, 0x0, 0x1, [@nested={0x190, 0x9d, 0x0, 0x1, [@nested={0x4, 0xcf}, @generic="d438fc73690fee9e86fc4b010159028c410b312b75e564bbc0fa490f5e7254e978864ea090578c95d59c46b6ef54485aa7ca963896f4f71b38084099b8701c819f7145b9d45b2e2baea252cd6a1831ceffc5a032fabac8f36714c5239cba92874a0860e44cb37fceecfc81d89a89bac6db606a6e4242abb399ee8993eae8eef08dabbbabf4d2e080e1117fb2f6b57bfcacb720a65ccae3ce77607c64", @typed={0x8, 0x5, 0x0, 0x0, @pid=r1}, @generic="15f2a20a54446391e3de5f13cb7aba4f794fee9689769ff780644bb6583b482f214059f464405f4e52ae5104bf1b6135611d4c00704a0f2ef829cd2486506e913e63958c84727da82b9d5bcef7fd0a57c5b5b463c3a13294f0950d2deb154860ed35f0ced4bd2e3f54266b43ecda9668eabb41e1f9c5fc34d25bd0b74fc41d8a5d27e9f1262a867a6c2c12658fca9d6b742162ae2bb0413bac98b1d7b466b3940907b993c50e10c907e0941b635bd0fbede0af0235f21ba49c3e59538e29cdf0cd8002a90d7bc78b78ef69d57eeb486b87e228ad", @nested={0x4, 0x50}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x9b1}, @nested={0x4, 0x149}]}, @generic="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", @nested={0xc, 0xe4, 0x0, 0x1, [@typed={0x8, 0x12d, 0x0, 0x0, @fd=r0}]}, @typed={0x28, 0x132, 0x0, 0x0, @str='/sys/devices/virtual/net/dummy0/mtu\x00'}]}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x4973}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x4}, @NCSI_ATTR_DATA={0x7e3, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x401}]}, 0x19e8}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r5 = open(0x0, 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) (async) r7 = socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r9, r8, 0x4, 0x401, r7, @relative_id=0x13, 0xe600}, 0xf) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) (async) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) r10 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r10, 0xc0104d08, r10) (async) sendfile$auto(r0, r0, 0x0, 0x2) 3.141960346s ago: executing program 3 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x1464, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1450, 0x7, 0x0, 0x1, [@nested={0x250, 0x10e, 0x0, 0x1, [@generic="1eb95798564dd96ea7afa224d597b91ae10387bd02d0256921c9ebf94e1f2daf4ddf7f1a0b972e8309ef64cf8c01c543689b8d40a950e9344ab0b154030b5a1b8cac35bb6bc9decac78023c108097842ced3fd57eed519dfd5148a86205a11f9e8cbcadae3fe757f48ad8cee6dcb4cba936aed2f3df768c07548d66be1eebcefa0d600d980f07d4972bd26d8273c4c41e54c1613dc013acaed58bd5d7f55a6e9a7adc3a16aedcf2bab20a91d496465aafd2271bba4aa52c05fa94d39d84ec785d26889755d5474a6e8e8d79ad04c420ded10d0600c7dd8231e37701c8ed7c2dda746ffa289", @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xb7}, @generic="9ffad02abdc5433171edf2413c807aebd55148bc644f0222c356e4a0e44f89bdb9340d5771ee0d7b18ed21a4f88f997f3ba7487dde354dee3d6ab58d9bf1b4c6f5bc9f525e48fbe8f2717ce2b7c99c42848ba00409942e04111d3b7377b53cde3c6fe8d26a7a61878c67045d0ad5af8891dbce0f33618f5c275efda06054c55a019c1395406dd516ce39a955230ac14260470efc92216a0e355c62a3e7e87813963171517c2559ea650458aee0324acc55d7ef64051fd532b3c2c522f652d444686842dc733b0abf2fabe3faf2ff0c6ff0acc9b0d0dfac1c83", @generic="c48c9ff53559b7fc84d48ceb969b2be02368573f2d4c01f83618a0749f5d9a4897f08f2d509b79b03c87b0eae104489a0932f96af7a549247de235f4fe4c7170910fbe0c0db0f9db730f3a32db50ea896436f0", @generic="2c0674314f4912a1c02158643bc20fdae9a553c7d6484024b85b947239d6fbdeb1857017a0933f", @nested={0x4, 0xdc}, @nested={0x4, 0xa9}]}, @generic="981f4af97b9224958766f9397f1492a11277cfefd005774831ea11051a5d0cf62f21eda390819718731da42d834b69bf51cb661ec1fd0a764279fb73fe34f1426a3a48ef33ce6479d8f78dbe383a2123aaf76f0d0470ab2a85973f2940255625317d4a3ce43f20282d6daf25e5972cf90b961df6c0f884a7bf411c4afd758affa0a332982d56846a578c4311758991b2abf559895b1949af5ba7403e", @nested={0x14, 0x9, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x109}, @typed={0x4, 0x97}]}, @generic, @typed={0x7, 0x123, 0x0, 0x0, @str='\xe5{\x00'}, @generic="6d1dc4ade59ccf7b9bd2c183ada7164f140830570c86cc34636d4b8bd95d992add39eb669f52600a1de9754b382ef1862ca5288c2c012c2b1c5b288ea8b92fe12ee7dc7cc5fd1dfe31af334b89d610674c78f5b7cbca8c3d1ede6ba5ae7b85a631497bd73b8d6440d12b306aed8e61fa4104f4b835beaa3603f6d0e9212fbeb53352e1f8ab0ea5a578e882fb2ad3d9398ff0d6b8dfe50731bc1a1d59842c7991f58e0a38bba0a866c28db06a2b8a8c44", @nested={0x1089, 0x41, 0x0, 0x1, [@nested={0x4, 0xe8}, @nested={0x4, 0x53}, @generic="ad75bd716d35add7e24b44f322ccdc5414b1eba6bca334459fe3f6cc84b72b324658d3530889eb8d5ea8fdb13d05df275c9248d3332ef55542c0193b11bdf0811668bf7128f65b4e88f235626de528908db28fc1d474da4ef49729e02b29d9e4e01c069a4cd619c0285eb5dded5d7aa262b581965763cc2681971f", @typed={0xffd, 0x3a, 0x0, 0x0, @binary="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"}, @generic="cb00"]}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x1464}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 2.972435243s ago: executing program 0 (id=338): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0x25, 0x1, 0x4) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x2, 0xf) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 2.9648223s ago: executing program 3 (id=339): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e400dfe288f288ff9afde56b99cda85e13419c907d1de1bebcb6c55de9766162fae9ccf3fcefce86de93639472e8ed01b9fdb350fb9c08ee0bcfdd4f22fd397f4e12f990eae48c73c56b5a", @ANYRES64=r0, @ANYBLOB="cb5b2cbd7000ffdb9f251f0000000500c242a35750254652f66e8c06000900000005000400000000000400018008000200040000106a9a69fd08bce0ffcd3d583848e7f258c579e30eaf4bae41792d5ecb3e8b88ccbdc43958401c99e0b7937e"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x82) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'bridge_slave_1\x00'}) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES16=r4, @ANYRESDEC=r2], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioperm$auto(0xffffffffffffd095, 0xda, 0x801c) mount$auto(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000006c0)='nfsd\x00\xee\x1a\x8fg;\x04\xad>\x96\x00\x10G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclj\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x91}\xd4KN\xc7I\xa4\x95\xfard?!\xef\xf1\xf6`', 0xa71, 0x0) mmap$auto(0x2000000000000000, 0x4, 0xe3, 0xeb1, 0x1, 0x8000) setreuid$auto(0x15, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000004c0)={{0x8, 0xffffffffffffffff, 0xee00, 0x8, 0x28, 0xf, 0x3}, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x1, 0x8000000008, 0x0, 0x100000001, 0x6, 0x7, 0x1ff, 0x8, 0x0, @raw=0x2, @raw=0x5ea}) keyctl$auto(0x0, r5, 0xffffffffffffffff, r6, 0x7) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x3, 0x1, 0x2) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/net/mcfilter\x00', 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000000300), r7) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r9, &(0x7f00000003c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r10, 0x4, 0x60bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c881) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x838ced2780023327, 0x0) pread64$auto(r8, &(0x7f0000000080)='batadv\x00', 0x4, 0x10) close_range$auto(0x2, 0x8, 0xfffffffa) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r11) 2.861553896s ago: executing program 1 (id=340): mmap$auto(0x100000000, 0x2020009, 0x8000, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r0, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket(0x2, 0x80802, 0x0) (async) r6 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x5, 0x0, 0x1f, 0x9}, 0x800009}, 0x3, 0x20000000) io_uring_setup$auto(0x6, 0x0) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x3, 0x2) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) bind$auto(0x3, 0x0, 0x6a) (async) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) (async) read$auto(0x3, 0x0, 0x80) (async, rerun: 64) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 64) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf252e0ac58108000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) (async) r7 = socket(0xa, 0x2, 0x88) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r8, 0x4, 0x1ff, r7, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="02002cbd7000fddbdf2511000000400001801400020076657468305f746f5f687372000000001400020076657468315f766c616e0000000000001400020074756e6c3000000000000000000000000c00018008000100", @ANYRES32=r2, @ANYBLOB="3c0001801400020076657468315f746f5f626174616476001400020076657468305f746f5f6261746164760008000100d437edbc4ce292a959ec93212cd5fa7fdaacf3eee1305df91c4fe42d25191cb7db533b77f17fc75805e15fe928564d804b2bee0197776822034dc2004fb87a6c1910ea05e8c0e95398cbfb", @ANYRES32=r5, @ANYBLOB="080003000900000004000180440001801400020070696d3672656730000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200726f736530000000000000000000000008000300010000000800030000000000180001801400020076657468315f746f5f7465616d000000280001801400020076657468305f766972745f7769666900080003000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x200040c0}, 0x8014) (async) close_range$auto(0x2, 0x8, 0x0) 2.70027805s ago: executing program 4 (id=341): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x10, 0x2, 0xf) (async, rerun: 32) socket(0xa, 0x3, 0xff) (async, rerun: 32) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) lseek$auto(0xffffffffffffffff, 0x8001, 0x4) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r0 = prctl$auto(0x6, 0xe, 0x0, 0x68, 0xee43) (async, rerun: 64) settimeofday$auto(0x0, &(0x7f0000000000)={0x0, 0x6001}) (async, rerun: 64) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0x13, 0xfffffffffffffffb, 0x9bf) (async) r1 = io_uring_setup$auto(0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000008300)='/sys/kernel/tracing/timestamp_mode\x00', 0x300, 0x0) read$auto_stat_fops_(r0, &(0x7f0000000080)=""/30, 0x1e) (async, rerun: 64) read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f0000008340)=""/88, 0x58) (async, rerun: 64) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, r1, 0x8000) (async) io_uring_setup$auto(0x3ff, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x5, 0x329, 0x10011, 0x2, 0x8) (rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0xb, 0x0, 0x0) mprotect$auto(0x0, 0x5, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) epoll_create$auto(0x4) (async, rerun: 32) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0) 2.585334728s ago: executing program 3 (id=342): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) mmap$auto(0x3, 0x200000000005, 0xdf, 0xeb5, 0x401, 0x8001) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0xe8, 0x400008, 0x80000000009, 0x9b76, 0x2, 0x4000040000008000) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x60800}, 0xc8841) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) ioctl$auto(0x3, 0x40246f4c, 0x38) sched_get_priority_min$auto(0x1) unshare$auto(0x40000080) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0xfff, 0x4800c000, 0x800c000}, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x84) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 2.449032101s ago: executing program 1 (id=343): membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x3, 0x10000000) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x9, 0x1000) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0xfbe, 0x1) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0xc0, 0x3) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x2b6, 0x7) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x9, 0x80) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x81, 0x1) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0xb18f, 0x5) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0xb32f, 0xffff000) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x6, 0x0) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x9, 0x0) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x7, 0x6) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0xffffffc1, 0x9) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x9, 0x3) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x1, 0x1) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0xc9, 0x5) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x101, 0x8) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x0, 0x81) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x3, 0x6) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0xffffff80, 0x62) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x5ee, 0x2) r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) read$auto_bm_status_operations_binfmt_misc(r0, &(0x7f0000000040)=""/38, 0x26) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x828, 0x800) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x5, 0xad9) r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x206802, 0x0) read$auto_transaction_log_fops_(r1, &(0x7f00000000c0)=""/106, 0x6a) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x61f5, 0x8) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x41, 0x8ab) membarrier$auto_MEMBARRIER_CMD_GET_REGISTRATIONS(0x200, 0x5, 0x45c5) 2.402580422s ago: executing program 0 (id=344): r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x800000000000001c, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cc7de00ffdbdf250f0000000c000780080003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) capget$auto(&(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x0, 0x0, 0x5}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) socket(0x23, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto_PR_MCE_KILL_GET(0x22, 0xb, 0x9, 0x8, 0x1) 2.328349294s ago: executing program 1 (id=345): r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x40, 0x0, 0x5f) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000003340)='/dev/sg0\x00', 0x202, 0x0) write$auto_sg_fops_sg(r1, &(0x7f0000003380)="b25b1a8c398ef400dbcbc7a996eea7f3804ca6c7591adef6578d2f5f520f687f316ba7329774c854d58309037c0ae2ae6eb53b1d", 0x34) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x250, 0x400, 0x10}]}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000008080003000000000008000100", @ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000002", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x8880}, 0x400c000) r6 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x1, 0x0, 0x80000000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) kill$auto(r6, 0x11) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)={0x6, 0x5}) set_robust_list$auto(&(0x7f0000000340)={{&(0x7f0000000280)={&(0x7f00000001c0)}}, 0x9, &(0x7f0000000300)}, 0x800) mremap$auto(0x100000001, 0x2, 0x1, 0x2, 0xfffffffffffffffd) 1.587621163s ago: executing program 0 (id=346): mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="28f157b2", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250000000008000200000000000800010050ae0000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r3 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x2e, &(0x7f0000000380), 0x7, 0x1083}, 0x5}, 0x2, 0x100) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x100) setsockopt$auto(r7, 0x6, 0x2, 0x0, 0xfb3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)="574a2b0b965899f007ef80dbadeeca7a64516dc3fa389f7afb8f4ff63de8685714422a49ce049730ca645163904398c1289eac833f28d8b05f279fcf0cad9eaa9afcad84f5eb8ba3da4189b70104e5fbc71ba89aa0ff3a8407e42f8605265cebac8c13d92db3a0788d219bc419c7fce42468b132bc78c156100c1d8e42f6a8d49b112f6588961f6a52dc1f53e7fa930ac1a4bac639fa3b54ce3218") mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xcb) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_USBDEVFS_FORBID_SUSPEND(r6, 0x5521, 0x0) 1.463202347s ago: executing program 1 (id=347): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) r0 = signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22100, 0x0) socket(0x2, 0x80002, 0x73) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8000}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x6}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x400}]}, 0x54}, 0x1, 0x0, 0x0, 0x14044014}, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x10b201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socket(0x1d, 0x2, 0x7) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x40384708, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 1.128332863s ago: executing program 4 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x1494, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x147f, 0x7, 0x0, 0x1, [@nested={0x250, 0x10e, 0x0, 0x1, [@generic="1eb95798564dd96ea7afa224d597b91ae10387bd02d0256921c9ebf94e1f2daf4ddf7f1a0b972e8309ef64cf8c01c543689b8d40a950e9344ab0b154030b5a1b8cac35bb6bc9decac78023c108097842ced3fd57eed519dfd5148a86205a11f9e8cbcadae3fe757f48ad8cee6dcb4cba936aed2f3df768c07548d66be1eebcefa0d600d980f07d4972bd26d8273c4c41e54c1613dc013acaed58bd5d7f55a6e9a7adc3a16aedcf2bab20a91d496465aafd2271bba4aa52c05fa94d39d84ec785d26889755d5474a6e8e8d79ad04c420ded10d0600c7dd8231e37701c8ed7c2dda746ffa289", @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xb7}, @generic="9ffad02abdc5433171edf2413c807aebd55148bc644f0222c356e4a0e44f89bdb9340d5771ee0d7b18ed21a4f88f997f3ba7487dde354dee3d6ab58d9bf1b4c6f5bc9f525e48fbe8f2717ce2b7c99c42848ba00409942e04111d3b7377b53cde3c6fe8d26a7a61878c67045d0ad5af8891dbce0f33618f5c275efda06054c55a019c1395406dd516ce39a955230ac14260470efc92216a0e355c62a3e7e87813963171517c2559ea650458aee0324acc55d7ef64051fd532b3c2c522f652d444686842dc733b0abf2fabe3faf2ff0c6ff0acc9b0d0dfac1c83", @generic="c48c9ff53559b7fc84d48ceb969b2be02368573f2d4c01f83618a0749f5d9a4897f08f2d509b79b03c87b0eae104489a0932f96af7a549247de235f4fe4c7170910fbe0c0db0f9db730f3a32db50ea896436f0", @generic="2c0674314f4912a1c02158643bc20fdae9a553c7d6484024b85b947239d6fbdeb1857017a0933f", @nested={0x4, 0xdc}, @nested={0x4, 0xa9}]}, @generic="981f4af97b9224958766f9397f1492a11277cfefd005774831ea11051a5d0cf62f21eda390819718731da42d834b69bf51cb661ec1fd0a764279fb73fe34f1426a3a48ef33ce6479d8f78dbe383a2123aaf76f0d0470ab2a85973f2940255625317d4a3ce43f20282d6daf25e5972cf90b961df6c0f884a7bf411c4afd758affa0a332982d56846a578c4311758991b2abf559895b1949af5ba7403e", @nested={0x14, 0x9, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x109}, @typed={0x4, 0x97}]}, @generic="7fd5c1939c4c41591559fc33f0be85be451660f890224cd8d0cc096e4ab44912813181866a0452411260d9a90ae82f", @typed={0x7, 0x123, 0x0, 0x0, @str='\xe5{\x00'}, @generic="6d1dc4ade59ccf7b9bd2c183ada7164f140830570c86cc34636d4b8bd95d992add39eb669f52600a1de9754b382ef1862ca5288c2c012c2b1c5b288ea8b92fe12ee7dc7cc5fd1dfe31af334b89d610674c78f5b7cbca8c3d1ede6ba5ae7b85a631497bd73b8d6440d12b306aed8e61fa4104f4b835beaa3603f6d0e9212fbeb53352e1f8ab0ea5a578e882fb2ad3d9398ff0d6b8dfe50731bc1a1d59842c7991f58e0a38bba0a866c28db06a2b8a8c44", @nested={0x1089, 0x41, 0x0, 0x1, [@nested={0x4, 0xe8}, @nested={0x4, 0x53}, @generic="ad75bd716d35add7e24b44f322ccdc5414b1eba6bca334459fe3f6cc84b72b324658d3530889eb8d5ea8fdb13d05df275c9248d3332ef55542c0193b11bdf0811668bf7128f65b4e88f235626de528908db28fc1d474da4ef49729e02b29d9e4e01c069a4cd619c0285eb5dded5d7aa262b581965763cc2681971f", @typed={0xffd, 0x3a, 0x0, 0x0, @binary="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"}, @generic="cb00"]}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x1494}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 897.681532ms ago: executing program 3 (id=349): r0 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=@query={@target_fd, 0x6, 0x80000000, 0x40, 0x6, @prog_cnt=0x1, 0x0, 0x7, 0x2, 0x6}, 0x4) mmap$auto(0x0, 0x400000000400008, 0xdf, 0x9b7e, r0, 0x8002) (async) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 879.338807ms ago: executing program 1 (id=350): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/gpio/drivers_probe\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x10, 0x3, 0xb) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getsockopt$auto(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x700) socket(0xa, 0x5, 0x0) ioctl$auto(0x1, 0x8941, 0x8) 825.00468ms ago: executing program 4 (id=351): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) write$auto(r0, 0x0, 0x9) ioctl$auto_MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) 700.585839ms ago: executing program 0 (id=352): openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/kvm/halt_wakeup\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_keepalive_probes\x00', 0x40100, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x50434903, 0x1) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2001, 0x0) r0 = socket(0x10, 0x2, 0x4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x39) socket(0x10, 0x3, 0x0) socket(0x2, 0x1, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 699.652627ms ago: executing program 3 (id=353): r0 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) msgctl$auto_MSG_INFO(0x7, 0xc, &(0x7f00000000c0)={{0x2d8, 0xee01, 0xffffffffffffffff, 0x401, 0xfffffff8}, &(0x7f0000000040)=0x62, &(0x7f0000000080)=0x6, 0x100000000, 0x9, 0x380000000, 0xc55b849, 0x2, 0x50f9, 0x5, 0x9, @raw=0x8001, @raw=0x7f}) quotactl_fd$auto(r0, 0x10000, r1, &(0x7f0000000140)="abcbd4e5fc50eddcfcb33133ea4c2988ea8fd6a6a9b7bae41dfd7b34f1a860393d6d621f51ecd70abd1018a7afd65354df8e16ba04df54d7ff2990fdf789c0cd030cb83d7e392775e26d5c04a7a001f29fd25e6f88799eb3418695c45040") (async) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x383b80, 0x0) r3 = bpf$auto(0x2, &(0x7f0000000200)=@iter_create={r2, 0x8}, 0x80000000) (async) semget$auto(0xfffffffe, 0x4, 0x0) (async) unshare$auto(0xffffffffffffffff) (async) semget$auto(0x7fff, 0xce, 0x383) prctl$auto_PR_SET_MM(0x23, 0x81, r0, 0x4, 0x7) r5 = clone$auto(0x5, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x3, 0x100000000) (async) mbind$auto(0xfffffffffffffff8, 0xffff, 0x6, &(0x7f0000000340)=0xffffffffffffffff, 0x10000, 0x2) close_range$auto(r2, r3, 0x8000) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000380), 0x240080, 0x0) (async) pread64$auto(r0, &(0x7f00000003c0)=':$}\'{|%*(}^]\x00', 0x0, 0x8) r7 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x400, 0x0) close_range$auto(r3, r7, 0x1) (async) r8 = ioctl$auto_NS_GET_USERNS(r4, 0xb701, 0x0) read$auto_rng_chrdev_ops_core(r8, &(0x7f0000000440)=""/237, 0xed) (async) pread64$auto(r2, &(0x7f0000000540)='&^#:[\x00', 0x6b, 0x7) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x1, 0x5, 0x2, 0x9, "3b888f975adf3ee3abf9e69863992bb8b4f615409d4fbffeba06ed10be9b2eeba0c1b09f8b7d3a1f4fa54456", @raw=0x1000}, 0x80, 0xdb, 0x9, @inferred=r5, @enumerated={0xffff, 0x0, "0c49d7c118771cdc73130442e974bbd4e45c22f69a394f511e95cc05dfa73373728e18e978f3f39acbcc5f82238a9d9bbd530a8197cdc33619b30f1aceaae5db", 0xd32a, 0xd16}, "6c226b17769d5dacb75f4534dfa5341ea7cbe4772db831e08d6180a173c76a980e170a91a413c7082e95bb64ece96adb7dbd05c3d0910c069091e7697c7e1163"}) setsockopt$auto_SO_TIMESTAMP_NEW(r7, 0xfffffffc, 0x3f, &(0x7f00000006c0)='&^#:[\x00', 0xffffffff) (async) close_range$auto(r6, r0, 0x7) (async) r10 = prctl$auto_PR_SCHED_CORE_GET(0x4e, 0x0, r9, 0x3, 0x6) (async) r11 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000700)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x80000, 0x0) ioctl$auto_EXT4_IOC_ALLOC_DA_BLKS(r11, 0x660c, 0x0) writev$auto(r10, &(0x7f0000000840)={&(0x7f0000000740)="997cfb7af4c097b9d754178c2edebee0b88fbe1f7cda3fef1186e459181b3ec4a1a69987d701ac6f4f8a62ade91cd660d0e83ef8f665de1d0a21bd1a2bab2403594a719bd78995b7e337169f7d502b68c25233f2431b48ebabc3e9c48b87c724541b7ab48e7b22147c4523f23f894abf40daa1cebb12fdb60239789d424b5051b779c6aa9cfb0ddafbe172cbc29afb81d08cf74a63dcddb3932d8bf082ee0483dce58ebee1f117c9c3beeccb67b735f752dc290dde843bc771d2c7c06b8a412d4fe970459654e77f75df7c03cfbc411c658ad1ec4190a5143a2174ec7817a64be8a5675d6c818f2fa31bd46b3fedcc8baee82e0d1a56152a8b", 0xb9}, 0x3) (async) r12 = signalfd$auto(r2, &(0x7f0000000880)={0x5}, 0x2) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000900), r12) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, r13, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x40}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x67, 0xbd, "3b37595d63294a5007719f3cbd2c8eda68550ce08176ef8670451a23f09035e51b1e16fcea343a96cb2d0562099885d01434e0a7c6f549b85b5a91c83a8dd8d53cc0e78b1bf8e938434f30e057e2dd5593a3093b6e41be296fe5189dac379942730ddd"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) setsockopt$auto_SO_INCOMING_CPU(0xffffffffffffffff, 0x5, 0x31, &(0x7f0000000ac0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x9) 601.001209ms ago: executing program 4 (id=354): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x101102, 0x0) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd1/sched/write1_next_rq\x00', 0x0, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000040)=""/124, 0x7c) write$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0) socket(0x2, 0x1, 0x0) mkdir$auto(0x0, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r2 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) pread64$auto(r4, 0x0, 0x8, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x9, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS0\x00', 0x448140, 0x0) open_by_handle_at$auto(r6, &(0x7f0000000180)={0x1, 0xe, '+'}, 0xfffffff8) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) 472.375268ms ago: executing program 3 (id=355): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x5, 0x6, 0xa, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c4b, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x0, 0x52, 0x5, 0x0, 0x42, 0x76c5, 0x200008, 0x100000000}}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x86, 0x0, 0x0) (async) setsockopt$auto(r1, 0x10f, 0x86, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ioctl$auto_SNDCTL_DSP_POST(r0, 0x5008, &(0x7f0000000040)="d83b76563491703ead93f2e4febb44004f459de144d79284abd3543af47c") openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x8) (async) ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x8) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000440)="0db1eb") openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x7ffffffa) 288.807265ms ago: executing program 0 (id=356): r0 = socket(0x2a, 0x800, 0x1) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, 0x0, 0x51) listen$auto(0x3, 0x83) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(0x3, 0x0, 0x81) r3 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r3, 0x0, 0x8) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x2, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0xa, 0x5, 0x94) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x8, 0xe2, 0xeb1, 0x69a5, 0xa800000000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) 0s ago: executing program 1 (id=357): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xae, 0x9, 0x1003, 0x8, 0x6, 0x1000005, 0x58, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x209, 0x3, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x1fe, 0x5bfc) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4a, 0x9) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) set_robust_list$auto(&(0x7f00000006c0)={{&(0x7f0000000600)={&(0x7f00000005c0)}}, 0x100000001, &(0x7f0000000680)={&(0x7f0000000640)}}, 0x4) r2 = bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)=@task_fd_query={0xffffffffffffffff, r0, 0x6, 0x5, 0x3, 0x3, r0, 0xea5, 0x8}, 0x5) ioctl$auto_TIOCGPTPEER(r2, 0x5441, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44810}, 0x40000) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x1b0, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x19c, 0x2, 0x0, 0x1, [@nested={0x12b, 0xb7, 0x0, 0x1, [@typed={0x14, 0x118, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xab}, @generic="0e40684a572ebe2559927f61f6df3eccdefec852fbc86b886737aab6f81df6dfcb1969f1d6cd228989675b72045de5439da5b2278cb979973e3b8844388185b964cdfc88c38a6114ef2fdc5b812d5fc79e8a15f78deea2bb39eb00989c49b88e264e3dd789910ec48c9ee568d9c497db01846a73ba201a5c72fd065c58928205a2d4d166fc3d0bc5553f48d72659bc6ee7e30ae80072ae040cf90211e8a0ab5a54f36a2a1bca89a47af6d913913f30a236af106cb45c68997bb25e43a5d889eb5748a72c00c43b936a0d935fa3a63b51539664e40824ab70bcfccfcb8913f8e5e0462bf05ee0a4f92e659be3c1e70f49cb480d774b45a6", @typed={0x8, 0x8b, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x5, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x61, 0xc0, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x11e, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x10a}, @typed={0x8, 0x9f, 0x0, 0x0, @fd=r2}, @generic="715f6b38f034ca39301d6fcd48bbe16421e3654d8aab79417ad9d8c912291678b5d44e7641077db491d7d1bf4635406fe8c720795b65ba1e40ec8cea8a"]}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x11) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 85.467015][ T5818] cgroup: Unknown subsys name 'net' [ 85.616153][ T5818] cgroup: Unknown subsys name 'cpuset' [ 85.625365][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.320389][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.413303][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.422177][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.429749][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.438014][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.445823][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.456566][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.464534][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.472045][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.480776][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.492176][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.500325][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.510308][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.520142][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.530694][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.533810][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.541870][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.553650][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.560981][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.563509][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.577420][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.061017][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.203192][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 90.224933][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.366292][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.389944][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.397651][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.405042][ T5827] bridge_slave_0: entered allmulticast mode [ 90.412553][ T5827] bridge_slave_0: entered promiscuous mode [ 90.458232][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.465424][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.472711][ T5827] bridge_slave_1: entered allmulticast mode [ 90.480036][ T5827] bridge_slave_1: entered promiscuous mode [ 90.583746][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.590896][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.598578][ T5828] bridge_slave_0: entered allmulticast mode [ 90.606124][ T5828] bridge_slave_0: entered promiscuous mode [ 90.616390][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.623548][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.630671][ T5836] bridge_slave_0: entered allmulticast mode [ 90.638587][ T5836] bridge_slave_0: entered promiscuous mode [ 90.675091][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.682453][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.689593][ T5828] bridge_slave_1: entered allmulticast mode [ 90.696882][ T5828] bridge_slave_1: entered promiscuous mode [ 90.716456][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.723746][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.730937][ T5836] bridge_slave_1: entered allmulticast mode [ 90.739456][ T5836] bridge_slave_1: entered promiscuous mode [ 90.750052][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.762980][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.846693][ T5827] team0: Port device team_slave_0 added [ 90.868315][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.893539][ T5827] team0: Port device team_slave_1 added [ 90.902700][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.912315][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.919509][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.927175][ T5837] bridge_slave_0: entered allmulticast mode [ 90.934503][ T5837] bridge_slave_0: entered promiscuous mode [ 90.942914][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.950107][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.957371][ T5837] bridge_slave_1: entered allmulticast mode [ 90.964880][ T5837] bridge_slave_1: entered promiscuous mode [ 90.974760][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.999681][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.105264][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.112338][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.139344][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.153654][ T5836] team0: Port device team_slave_0 added [ 91.160363][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.167373][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.193402][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.210705][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.230624][ T5828] team0: Port device team_slave_0 added [ 91.239379][ T5836] team0: Port device team_slave_1 added [ 91.247972][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.277009][ T5828] team0: Port device team_slave_1 added [ 91.313616][ T5837] team0: Port device team_slave_0 added [ 91.376260][ T5837] team0: Port device team_slave_1 added [ 91.387718][ T5827] hsr_slave_0: entered promiscuous mode [ 91.394803][ T5827] hsr_slave_1: entered promiscuous mode [ 91.414479][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.421444][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.447916][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.486275][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.493354][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.519733][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.530850][ T55] Bluetooth: hci0: command tx timeout [ 91.537704][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.545052][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.571337][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.602431][ T55] Bluetooth: hci2: command tx timeout [ 91.602463][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.608123][ T55] Bluetooth: hci3: command tx timeout [ 91.615028][ T5841] Bluetooth: hci1: command tx timeout [ 91.624999][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.652169][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.663869][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.670851][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.697914][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.731288][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.742236][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.768925][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.915212][ T5836] hsr_slave_0: entered promiscuous mode [ 91.923160][ T5836] hsr_slave_1: entered promiscuous mode [ 91.929638][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.937477][ T5836] Cannot create hsr debugfs directory [ 91.966254][ T5828] hsr_slave_0: entered promiscuous mode [ 91.973818][ T5828] hsr_slave_1: entered promiscuous mode [ 91.980050][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.987761][ T5828] Cannot create hsr debugfs directory [ 92.048806][ T5837] hsr_slave_0: entered promiscuous mode [ 92.055898][ T5837] hsr_slave_1: entered promiscuous mode [ 92.063582][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.071170][ T5837] Cannot create hsr debugfs directory [ 92.510657][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.527282][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.539014][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.558508][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.610435][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.625589][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.638949][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.649911][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.755165][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.782116][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.793931][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.833709][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.919279][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.931178][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.953343][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.969085][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.981445][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.001056][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.044707][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.055550][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.077065][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.084332][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.113336][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.120531][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.130238][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.137390][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.152774][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.159864][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.275803][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.353239][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.397175][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.404340][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.442157][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.476841][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.484122][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.500206][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.524966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.532144][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.579912][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.587128][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.605856][ T5841] Bluetooth: hci0: command tx timeout [ 93.650371][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.682460][ T5841] Bluetooth: hci3: command tx timeout [ 93.687910][ T5841] Bluetooth: hci1: command tx timeout [ 93.697333][ T5834] Bluetooth: hci2: command tx timeout [ 93.750324][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.772908][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.902637][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.933823][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.049992][ T5836] veth0_vlan: entered promiscuous mode [ 94.086146][ T5827] veth0_vlan: entered promiscuous mode [ 94.106417][ T5836] veth1_vlan: entered promiscuous mode [ 94.150584][ T5827] veth1_vlan: entered promiscuous mode [ 94.223304][ T5836] veth0_macvtap: entered promiscuous mode [ 94.233552][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.273707][ T5827] veth0_macvtap: entered promiscuous mode [ 94.286499][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.297336][ T5836] veth1_macvtap: entered promiscuous mode [ 94.318667][ T5827] veth1_macvtap: entered promiscuous mode [ 94.367950][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.401085][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.426924][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.436734][ T5828] veth0_vlan: entered promiscuous mode [ 94.453897][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.463869][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.472704][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.481409][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.503454][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.511056][ T5828] veth1_vlan: entered promiscuous mode [ 94.530902][ T5837] veth0_vlan: entered promiscuous mode [ 94.553879][ T5837] veth1_vlan: entered promiscuous mode [ 94.570813][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.580131][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.589011][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597855][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.686483][ T5837] veth0_macvtap: entered promiscuous mode [ 94.709473][ T5828] veth0_macvtap: entered promiscuous mode [ 94.750649][ T5837] veth1_macvtap: entered promiscuous mode [ 94.778760][ T5828] veth1_macvtap: entered promiscuous mode [ 94.792989][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.800948][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.816817][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.866841][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.875848][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.886307][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.900765][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.913742][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.922708][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.931423][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.942049][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.970798][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.981469][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.989092][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.029901][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.034867][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.041705][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.059945][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.066220][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.070180][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.176242][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.265346][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.311971][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.358802][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.403850][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.502928][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.510791][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.570325][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.583653][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.692535][ T5834] Bluetooth: hci0: command tx timeout [ 95.761819][ T5834] Bluetooth: hci2: command tx timeout [ 95.767285][ T5834] Bluetooth: hci1: command tx timeout [ 95.773077][ T5841] Bluetooth: hci3: command tx timeout [ 96.366156][ T5915] mmap: syz.1.2 (5915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.544328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.815240][ T978] cfg80211: failed to load regulatory.db [ 97.761831][ T5834] Bluetooth: hci0: command tx timeout [ 97.841862][ T5834] Bluetooth: hci2: command tx timeout [ 97.851945][ T5834] Bluetooth: hci1: command tx timeout [ 97.857378][ T5834] Bluetooth: hci3: command tx timeout [ 98.302013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.310807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.322272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.512272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.532018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.777124][ T5938] can: request_module (can-proto-3) failed. [ 99.206192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.214896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.397800][ T5953] Zero length message leads to an empty skb [ 99.432190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.440492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.296337][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 100.496726][ T5969] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 101.660735][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.771774][ T5985] capability: warning: `syz.3.17' uses 32-bit capabilities (legacy support in use) [ 102.576524][ T6002] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 102.599485][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 102.736335][ T6003] team0: Port device team_slave_0 removed [ 102.751467][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21'. [ 106.912275][ T6071] FAULT_INJECTION: forcing a failure. [ 106.912275][ T6071] name failslab, interval 1, probability 0, space 0, times 1 [ 107.033462][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.0.30 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 107.033504][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.033524][ T6071] Call Trace: [ 107.033533][ T6071] [ 107.033550][ T6071] dump_stack_lvl+0x16c/0x1f0 [ 107.033612][ T6071] should_fail_ex+0x512/0x640 [ 107.033660][ T6071] should_failslab+0xc2/0x120 [ 107.033696][ T6071] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 107.033731][ T6071] ? dst_alloc+0x99/0x1a0 [ 107.033765][ T6071] dst_alloc+0x99/0x1a0 [ 107.033797][ T6071] rt_dst_alloc+0x35/0x3a0 [ 107.033837][ T6071] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 107.033877][ T6071] ip_route_output_key_hash+0x137/0x2e0 [ 107.033904][ T6071] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 107.033950][ T6071] ip_route_output_flow+0x27/0x150 [ 107.033982][ T6071] sctp_v4_get_dst+0xcb6/0x1340 [ 107.034043][ T6071] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 107.034129][ T6071] ? __pfx_sctp_generate_proto_unreach_event+0x10/0x10 [ 107.034175][ T6071] ? lockdep_init_map_type+0x5c/0x280 [ 107.034224][ T6071] ? sctp_transport_route+0x132/0x350 [ 107.034261][ T6071] sctp_transport_route+0x132/0x350 [ 107.034305][ T6071] sctp_assoc_add_peer+0x741/0x1550 [ 107.034350][ T6071] sctp_connect_new_asoc+0x208/0x790 [ 107.034393][ T6071] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 107.034432][ T6071] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 107.034477][ T6071] __sctp_connect+0x3f3/0xc60 [ 107.034519][ T6071] ? do_raw_spin_lock+0x12c/0x2b0 [ 107.034568][ T6071] ? __pfx___sctp_connect+0x10/0x10 [ 107.034615][ T6071] ? __pfx_sctp_inet_connect+0x10/0x10 [ 107.034654][ T6071] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.034702][ T6071] ? __pfx_sctp_inet_connect+0x10/0x10 [ 107.034737][ T6071] sctp_inet_connect+0x15f/0x200 [ 107.034776][ T6071] __sys_connect_file+0x141/0x1a0 [ 107.034812][ T6071] __sys_connect+0x14d/0x170 [ 107.034843][ T6071] ? __pfx___sys_connect+0x10/0x10 [ 107.034890][ T6071] ? rcu_is_watching+0x12/0xc0 [ 107.034928][ T6071] __x64_sys_connect+0x72/0xb0 [ 107.034957][ T6071] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.035002][ T6071] do_syscall_64+0xcd/0x230 [ 107.035051][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.035081][ T6071] RIP: 0033:0x7fb520f8e969 [ 107.035104][ T6071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.035132][ T6071] RSP: 002b:00007fb521ece038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 107.035160][ T6071] RAX: ffffffffffffffda RBX: 00007fb5211b5fa0 RCX: 00007fb520f8e969 [ 107.035197][ T6071] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 107.035216][ T6071] RBP: 00007fb521010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 107.035235][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.035255][ T6071] R13: 0000000000000000 R14: 00007fb5211b5fa0 R15: 00007ffe33620a78 [ 107.035298][ T6071] [ 107.331344][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.295501][ T6077] Invalid ELF header magic: != ELF [ 108.372255][ T6081] netlink: 186 bytes leftover after parsing attributes in process `syz.1.34'. [ 108.397207][ T6081] netlink: 186 bytes leftover after parsing attributes in process `syz.1.34'. [ 109.731773][ T6105] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 110.304038][ T6119] netlink: 326 bytes leftover after parsing attributes in process `syz.1.43'. [ 111.867495][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.726080][ T6204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.797364][ T6204] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.914211][ T6204] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.952988][ T6204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.975082][ T6204] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.035341][ T6204] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.104566][ T6204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.122063][ T6204] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.187852][ T6204] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.275748][ T6204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.309690][ T6204] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.366616][ T6204] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.603636][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.001762][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.161718][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.321770][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.458752][ T6250] vivid-011: ================= START STATUS ================= [ 118.552040][ T6250] vivid-011: Enable Output Cropping: true [ 118.578168][ T6250] vivid-011: Enable Output Composing: true [ 118.600482][ T6250] vivid-011: Enable Output Scaler: true [ 118.686394][ T6250] vivid-011: Tx RGB Quantization Range: Automatic [ 118.831766][ T6250] vivid-011: Transmit Mode: HDMI [ 118.843518][ T6250] vivid-011: Hotplug Present: 0x00000000 [ 118.849243][ T6250] vivid-011: RxSense Present: 0x00000000 [ 118.864337][ T6250] vivid-011: EDID Present: 0x00000000 [ 119.076009][ T6250] vivid-011: ================== END STATUS ================== [ 119.684621][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.081744][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.241760][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.403347][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.991981][ T6310] Setting dangerous option i915.mitigations - tainting kernel [ 121.770363][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.165120][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.313448][ T6334] block2mtd: illegal erase size [ 122.327329][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.520794][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.580945][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.73'. [ 122.712620][ T6353] hsr_slave_0: left promiscuous mode [ 122.796420][ T6353] hsr_slave_1: left promiscuous mode [ 124.989177][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 127.038709][ T6451] tty tty12: ldisc open failed (-12), clearing slot 11 [ 127.955578][ T6473] syz.3.98 uses obsolete (PF_INET,SOCK_PACKET) [ 127.993073][ T6473] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 129.921846][ T30] audit: type=1800 audit(6042377982.834:2): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.104" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 132.002935][ T6541] bcache: register_bcache() error : failed to open device [ 132.249329][ T6551] vivid-007: ================= START STATUS ================= [ 132.269308][ T6551] vivid-007: Enable Output Cropping: true [ 132.289903][ T6551] vivid-007: Enable Output Composing: true [ 132.311738][ T6551] vivid-007: Enable Output Scaler: true [ 132.317383][ T6551] vivid-007: Tx RGB Quantization Range: Automatic [ 132.384955][ T6551] vivid-007: Transmit Mode: HDMI [ 132.390079][ T6551] vivid-007: Hotplug Present: 0x00000000 [ 132.432557][ T6551] vivid-007: RxSense Present: 0x00000000 [ 132.439486][ T6551] vivid-007: EDID Present: 0x00000000 [ 132.467326][ T6551] vivid-007: ================== END STATUS ================== [ 133.830536][ T6574] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 134.397973][ T6570] random: crng reseeded on system resumption [ 135.141828][ T6576] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 136.332913][ T6606] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.709399][ T6614] (6614): drop_caches: 0 [ 137.386684][ T6619] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 137.480381][ T6611] kexec: Could not allocate control_code_buffer [ 137.766922][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.781729][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.301402][ T6676] syz.0.141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.746082][ T6681] : Can't lookup blockdev [ 141.787183][ T6681] ubi0: attaching mtd0 [ 141.813756][ T6681] ubi0: scanning is finished [ 141.818413][ T6681] ubi0: empty MTD device detected [ 141.924983][ T6681] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 141.940708][ T6681] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 141.952043][ T6681] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 141.970330][ T6681] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 141.978203][ T6681] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 141.985268][ T6681] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 141.993576][ T6681] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3149398884 [ 142.003863][ T6681] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 142.006276][ T6685] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 142.031761][ T6684] ubi0: background thread "ubi_bgt0d" started, PID 6684 [ 143.249933][ T6702] process 'syz.1.148' launched ':,' with NULL argv: empty string added [ 144.605474][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.663080][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.681885][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.692953][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.701893][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.003671][ T6730] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 145.527393][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 146.169330][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.194632][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.219294][ T6727] bridge_slave_0: entered allmulticast mode [ 146.257579][ T6727] bridge_slave_0: entered promiscuous mode [ 146.336824][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.356944][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.371845][ T6727] bridge_slave_1: entered allmulticast mode [ 146.393527][ T6727] bridge_slave_1: entered promiscuous mode [ 146.567189][ T6772] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 146.802023][ T5841] Bluetooth: hci4: command tx timeout [ 146.829619][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.842698][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.138780][ T6727] team0: Port device team_slave_0 added [ 147.172770][ T6727] team0: Port device team_slave_1 added [ 147.497587][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.514916][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.595017][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.656634][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.674602][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.791713][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.982693][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 148.047482][ T6777] FAULT_INJECTION: forcing a failure. [ 148.047482][ T6777] name failslab, interval 1, probability 0, space 0, times 0 [ 148.073299][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.0.163 Tainted: G U 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 148.073345][ T6777] Tainted: [U]=USER [ 148.073355][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.073371][ T6777] Call Trace: [ 148.073380][ T6777] [ 148.073391][ T6777] dump_stack_lvl+0x16c/0x1f0 [ 148.073441][ T6777] should_fail_ex+0x512/0x640 [ 148.073483][ T6777] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 148.073521][ T6777] should_failslab+0xc2/0x120 [ 148.073558][ T6777] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 148.073592][ T6777] ? percpu_counter_add_batch+0xb8/0x1f0 [ 148.073630][ T6777] ? vm_area_dup+0x25/0x760 [ 148.073670][ T6777] vm_area_dup+0x25/0x760 [ 148.073706][ T6777] copy_process+0x7f67/0x91a0 [ 148.073771][ T6777] ? __pfx_copy_process+0x10/0x10 [ 148.073812][ T6777] ? try_to_wake_up+0xa2f/0x1680 [ 148.073847][ T6777] ? plist_check_head+0xa3/0x150 [ 148.073880][ T6777] ? find_held_lock+0x2b/0x80 [ 148.073914][ T6777] ? wake_up_q+0xb0/0x160 [ 148.073938][ T6777] ? do_raw_spin_unlock+0x172/0x230 [ 148.073989][ T6777] kernel_clone+0xfc/0x960 [ 148.074026][ T6777] ? __pfx_futex_wake+0x10/0x10 [ 148.074063][ T6777] ? __pfx_kernel_clone+0x10/0x10 [ 148.074123][ T6777] __do_sys_clone+0xce/0x120 [ 148.074160][ T6777] ? __pfx___do_sys_clone+0x10/0x10 [ 148.074196][ T6777] ? ksys_unshare+0x687/0xa40 [ 148.074254][ T6777] ? rcu_is_watching+0x12/0xc0 [ 148.074307][ T6777] do_syscall_64+0xcd/0x230 [ 148.074354][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.074384][ T6777] RIP: 0033:0x7fb520f8e969 [ 148.074407][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.074444][ T6777] RSP: 002b:00007fb521e8bfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 148.074470][ T6777] RAX: ffffffffffffffda RBX: 00007fb5211b6160 RCX: 00007fb520f8e969 [ 148.074489][ T6777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 148.074505][ T6777] RBP: 00007fb521010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 148.074523][ T6777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.074540][ T6777] R13: 0000000000000000 R14: 00007fb5211b6160 R15: 00007ffe33620a78 [ 148.074577][ T6777] [ 148.307790][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.347130][ T6727] hsr_slave_0: entered promiscuous mode [ 148.372220][ T6727] hsr_slave_1: entered promiscuous mode [ 148.378648][ T6727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.411656][ T6727] Cannot create hsr debugfs directory [ 148.883329][ T5841] Bluetooth: hci4: command tx timeout [ 149.189315][ T6811] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 149.246403][ T6809] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 149.295364][ T6809] netlink: 314 bytes leftover after parsing attributes in process `syz.1.172'. [ 149.850408][ T6727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.895611][ T6727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.946801][ T6727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.992816][ T6727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.264172][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.329135][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.360755][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.368622][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.456971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.464193][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.971884][ T5841] Bluetooth: hci4: command tx timeout [ 151.581161][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.907155][ T6856] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 152.243968][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.409516][ T6727] veth0_vlan: entered promiscuous mode [ 152.461967][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.586235][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.643588][ T6727] veth1_vlan: entered promiscuous mode [ 152.728519][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.871431][ T6727] veth0_macvtap: entered promiscuous mode [ 152.916409][ T6727] veth1_macvtap: entered promiscuous mode [ 152.961086][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.021796][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.041750][ T5841] Bluetooth: hci4: command tx timeout [ 153.052891][ T6727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.072290][ T6727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.081024][ T6727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.094729][ T6727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.344968][ T53] bridge_slave_1: left allmulticast mode [ 153.350940][ T53] bridge_slave_1: left promiscuous mode [ 153.373242][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.453014][ T53] bridge_slave_0: left allmulticast mode [ 153.462196][ T53] bridge_slave_0: left promiscuous mode [ 153.467976][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.960269][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.983038][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.034107][ T53] bond0 (unregistering): Released all slaves [ 155.261698][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.269570][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.441381][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.460633][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.843584][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.854918][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.868388][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.888785][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.917644][ T6912] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 155.970605][ T53] veth1_macvtap: left promiscuous mode [ 156.007562][ T53] veth0_macvtap: left promiscuous mode [ 156.015992][ T53] veth1_vlan: left promiscuous mode [ 156.021411][ T53] veth0_vlan: left promiscuous mode [ 156.200086][ T6920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.190'. [ 156.274776][ T6920] binder: 6915:6920 ioctl 400c620e 200000000140 returned -22 [ 156.274854][ T6922] binder: 6915:6922 ioctl 400c620e 200000000140 returned -22 [ 157.530159][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 157.550892][ T6943] netlink: 13 bytes leftover after parsing attributes in process `syz.3.195'. [ 157.690671][ T53] team0 (unregistering): Port device team_slave_1 removed [ 157.768774][ T53] team0 (unregistering): Port device team_slave_0 removed [ 159.092280][ T6962] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 160.170578][ T6986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.202'. [ 160.461759][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 161.713379][ T7017] netlink: zone id is out of range [ 161.731759][ T7017] netlink: zone id is out of range [ 161.741719][ T7017] netlink: zone id is out of range [ 161.761712][ T7017] netlink: zone id is out of range [ 161.766853][ T7017] netlink: zone id is out of range [ 161.800856][ T7017] netlink: zone id is out of range [ 161.821764][ T7017] netlink: zone id is out of range [ 161.831979][ T7017] netlink: zone id is out of range [ 161.858184][ T7017] netlink: zone id is out of range [ 161.868596][ T7017] netlink: zone id is out of range [ 162.109690][ T7023] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 163.925690][ T7073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.214'. [ 163.939330][ T7073] hsr_slave_0: left promiscuous mode [ 163.940244][ T7073] hsr_slave_1: left promiscuous mode [ 164.303477][ T7080] Invalid ELF header magic: != ELF [ 164.559425][ T7084] FAULT_INJECTION: forcing a failure. [ 164.559425][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 164.649645][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: syz.0.216 Tainted: G U 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 164.649693][ T7084] Tainted: [U]=USER [ 164.649702][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.649718][ T7084] Call Trace: [ 164.649727][ T7084] [ 164.649738][ T7084] dump_stack_lvl+0x16c/0x1f0 [ 164.649788][ T7084] should_fail_ex+0x512/0x640 [ 164.649830][ T7084] ? fs_reclaim_acquire+0xae/0x150 [ 164.649879][ T7084] should_failslab+0xc2/0x120 [ 164.649915][ T7084] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 164.649950][ T7084] ? security_inode_alloc+0x3b/0x2b0 [ 164.649991][ T7084] security_inode_alloc+0x3b/0x2b0 [ 164.650025][ T7084] inode_init_always_gfp+0xce4/0x1030 [ 164.650058][ T7084] alloc_inode+0x86/0x240 [ 164.650096][ T7084] sock_alloc+0x40/0x280 [ 164.650143][ T7084] __sock_create+0xc1/0x8d0 [ 164.650194][ T7084] inet_ctl_sock_create+0x94/0x230 [ 164.650238][ T7084] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 164.650278][ T7084] ? lockdep_init_map_type+0x5c/0x280 [ 164.650318][ T7084] ? do_init_timer+0xc9/0x110 [ 164.650351][ T7084] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 164.650393][ T7084] sctp_ctrlsock_init+0x40/0xf0 [ 164.650436][ T7084] ops_init+0x1e2/0x5f0 [ 164.650476][ T7084] setup_net+0x21e/0x850 [ 164.650517][ T7084] ? __pfx_setup_net+0x10/0x10 [ 164.650558][ T7084] ? lockdep_init_map_type+0x5c/0x280 [ 164.650599][ T7084] ? __pfx_down_read_killable+0x10/0x10 [ 164.650632][ T7084] ? debug_mutex_init+0x37/0x70 [ 164.650663][ T7084] copy_net_ns+0x2a6/0x5f0 [ 164.650706][ T7084] create_new_namespaces+0x3ea/0xad0 [ 164.650747][ T7084] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 164.650783][ T7084] ksys_unshare+0x45b/0xa40 [ 164.650823][ T7084] ? __pfx_ksys_unshare+0x10/0x10 [ 164.650860][ T7084] ? xfd_validate_state+0x5d/0x180 [ 164.650890][ T7084] ? rcu_is_watching+0x12/0xc0 [ 164.650925][ T7084] __x64_sys_unshare+0x31/0x40 [ 164.650964][ T7084] do_syscall_64+0xcd/0x230 [ 164.651010][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.651039][ T7084] RIP: 0033:0x7fb520f8e969 [ 164.651062][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.651089][ T7084] RSP: 002b:00007fb521ead038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 164.651116][ T7084] RAX: ffffffffffffffda RBX: 00007fb5211b6080 RCX: 00007fb520f8e969 [ 164.651134][ T7084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 164.651150][ T7084] RBP: 00007fb521010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 164.651166][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.651182][ T7084] R13: 0000000000000000 R14: 00007fb5211b6080 R15: 00007ffe33620a78 [ 164.651218][ T7084] [ 164.938548][ T7094] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 168.206773][ T7154] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 168.700904][ T7169] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 171.622063][ T7231] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 171.740968][ T7239] sctp: [Deprecated]: syz.0.240 (pid 7239) Use of int in max_burst socket option deprecated. [ 171.740968][ T7239] Use struct sctp_assoc_value instead [ 171.929419][ T7239] sctp: [Deprecated]: syz.0.240 (pid 7239) Use of int in max_burst socket option deprecated. [ 171.929419][ T7239] Use struct sctp_assoc_value instead [ 171.986373][ T7239] sctp: [Deprecated]: syz.0.240 (pid 7239) Use of int in max_burst socket option deprecated. [ 171.986373][ T7239] Use struct sctp_assoc_value instead [ 172.235744][ T7239] sctp: [Deprecated]: syz.0.240 (pid 7239) Use of int in max_burst socket option deprecated. [ 172.235744][ T7239] Use struct sctp_assoc_value instead [ 172.290719][ T7256] Invalid ELF header magic: != ELF [ 172.539685][ T7239] sctp: [Deprecated]: syz.0.240 (pid 7239) Use of int in max_burst socket option deprecated. [ 172.539685][ T7239] Use struct sctp_assoc_value instead [ 172.997307][ T7269] zero sized request [ 175.116728][ T7305] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 175.394897][ T30] audit: type=1804 audit(6042378028.304:3): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.251" name="/newroot/59/file0" dev="tmpfs" ino=329 res=1 errno=0 [ 175.459843][ T30] audit: type=1800 audit(6042378028.324:4): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file0" dev="tmpfs" ino=329 res=0 errno=0 [ 175.601416][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.252'. [ 175.628524][ T7316] hsr_slave_0: left promiscuous mode [ 175.650165][ T7316] hsr_slave_1: left promiscuous mode [ 176.986135][ T7354] bridge0: port 3(team0) entered blocking state [ 177.012270][ T7354] bridge0: port 3(team0) entered disabled state [ 177.025290][ T7354] team0: entered allmulticast mode [ 177.035291][ T7354] team_slave_0: entered allmulticast mode [ 177.081761][ T7354] team_slave_1: entered allmulticast mode [ 177.089574][ T7354] team0: entered promiscuous mode [ 177.094745][ T7354] team_slave_0: entered promiscuous mode [ 177.100692][ T7354] team_slave_1: entered promiscuous mode [ 177.113896][ T7354] bridge0: port 3(team0) entered blocking state [ 177.120300][ T7354] bridge0: port 3(team0) entered forwarding state [ 177.756533][ T7368] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 177.987413][ T7376] syz.4.260: vmalloc error: size 106496, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 178.059408][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.4.260 Tainted: G U 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 178.059474][ T7376] Tainted: [U]=USER [ 178.059488][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.059515][ T7376] Call Trace: [ 178.059529][ T7376] [ 178.059546][ T7376] dump_stack_lvl+0x16c/0x1f0 [ 178.059626][ T7376] warn_alloc+0x248/0x3a0 [ 178.059662][ T7376] ? __pfx_warn_alloc+0x10/0x10 [ 178.059696][ T7376] ? alloc_pages_mpol+0x25a/0x550 [ 178.059734][ T7376] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 178.059772][ T7376] ? trace_kmalloc+0x2b/0xd0 [ 178.059821][ T7376] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 178.059864][ T7376] ? dvb_dvr_open+0x442/0x6c0 [ 178.059916][ T7376] ? __pfx___mutex_lock+0x10/0x10 [ 178.059964][ T7376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.060024][ T7376] ? dvb_dvr_open+0x442/0x6c0 [ 178.060068][ T7376] vmalloc_noprof+0x6b/0x90 [ 178.060095][ T7376] ? dvb_dvr_open+0x442/0x6c0 [ 178.060139][ T7376] dvb_dvr_open+0x442/0x6c0 [ 178.060184][ T7376] ? __pfx_dvb_dvr_open+0x10/0x10 [ 178.060233][ T7376] dvb_device_open+0x26d/0x3b0 [ 178.060274][ T7376] ? __pfx_dvb_device_open+0x10/0x10 [ 178.060317][ T7376] chrdev_open+0x231/0x6a0 [ 178.060348][ T7376] ? __pfx_apparmor_file_open+0x10/0x10 [ 178.060387][ T7376] ? __pfx_chrdev_open+0x10/0x10 [ 178.060421][ T7376] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 178.060472][ T7376] do_dentry_open+0x741/0x1c10 [ 178.060504][ T7376] ? __pfx_chrdev_open+0x10/0x10 [ 178.060544][ T7376] vfs_open+0x82/0x3f0 [ 178.060587][ T7376] path_openat+0x1e5e/0x2d40 [ 178.060639][ T7376] ? __pfx_path_openat+0x10/0x10 [ 178.060680][ T7376] do_filp_open+0x20b/0x470 [ 178.060709][ T7376] ? __pfx_do_filp_open+0x10/0x10 [ 178.060768][ T7376] ? alloc_fd+0x471/0x7d0 [ 178.060806][ T7376] do_sys_openat2+0x11b/0x1d0 [ 178.060842][ T7376] ? __pfx_do_sys_openat2+0x10/0x10 [ 178.060898][ T7376] __x64_sys_openat+0x174/0x210 [ 178.060938][ T7376] ? __pfx___x64_sys_openat+0x10/0x10 [ 178.060980][ T7376] ? rcu_is_watching+0x12/0xc0 [ 178.061019][ T7376] do_syscall_64+0xcd/0x230 [ 178.061068][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.061096][ T7376] RIP: 0033:0x7f6b8fd8e969 [ 178.061118][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.061145][ T7376] RSP: 002b:00007f6b90bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.061172][ T7376] RAX: ffffffffffffffda RBX: 00007f6b8ffb5fa0 RCX: 00007f6b8fd8e969 [ 178.061191][ T7376] RDX: 0000000000040b00 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 178.061208][ T7376] RBP: 00007f6b8fe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 178.061225][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.061242][ T7376] R13: 0000000000000000 R14: 00007f6b8ffb5fa0 R15: 00007ffe86588068 [ 178.061280][ T7376] [ 178.061290][ T7376] Mem-Info: [ 178.400848][ T7376] active_anon:58122 inactive_anon:0 isolated_anon:0 [ 178.400848][ T7376] active_file:16406 inactive_file:40290 isolated_file:0 [ 178.400848][ T7376] unevictable:768 dirty:343 writeback:0 [ 178.400848][ T7376] slab_reclaimable:10478 slab_unreclaimable:95036 [ 178.400848][ T7376] mapped:33428 shmem:48834 pagetables:1075 [ 178.400848][ T7376] sec_pagetables:0 bounce:0 [ 178.400848][ T7376] kernel_misc_reclaimable:0 [ 178.400848][ T7376] free:1286188 free_pcp:2689 free_cma:0 [ 178.503590][ T7376] Node 0 active_anon:232388kB inactive_anon:0kB active_file:65624kB inactive_file:160960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133812kB dirty:1472kB writeback:0kB shmem:193500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11400kB pagetables:4400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.657137][ T7376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.725745][ T7376] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.793125][ T7392] FAULT_INJECTION: forcing a failure. [ 178.793125][ T7392] name failslab, interval 1, probability 0, space 0, times 0 [ 178.859702][ T7392] CPU: 1 UID: 0 PID: 7392 Comm: syz.1.263 Tainted: G U 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 178.859755][ T7392] Tainted: [U]=USER [ 178.859765][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.859783][ T7392] Call Trace: [ 178.859792][ T7392] [ 178.859803][ T7392] dump_stack_lvl+0x16c/0x1f0 [ 178.859875][ T7392] should_fail_ex+0x512/0x640 [ 178.859943][ T7392] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 178.859991][ T7392] should_failslab+0xc2/0x120 [ 178.860034][ T7392] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 178.860077][ T7392] ? __devinet_sysctl_register+0xbc/0x360 [ 178.860130][ T7392] kmemdup_noprof+0x29/0x60 [ 178.860172][ T7392] __devinet_sysctl_register+0xbc/0x360 [ 178.860224][ T7392] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 178.860268][ T7392] ? trace_kmalloc+0x2b/0xd0 [ 178.860315][ T7392] ? devinet_init_net+0xeb/0x910 [ 178.860363][ T7392] ? __asan_memcpy+0x3c/0x60 [ 178.860408][ T7392] devinet_init_net+0x315/0x910 [ 178.860457][ T7392] ? __pfx_devinet_init_net+0x10/0x10 [ 178.860501][ T7392] ops_init+0x1e2/0x5f0 [ 178.860548][ T7392] setup_net+0x21e/0x850 [ 178.860602][ T7392] ? __pfx_setup_net+0x10/0x10 [ 178.860642][ T7392] ? lockdep_init_map_type+0x5c/0x280 [ 178.860691][ T7392] ? __pfx_down_read_killable+0x10/0x10 [ 178.860730][ T7392] ? debug_mutex_init+0x37/0x70 [ 178.860767][ T7392] copy_net_ns+0x2a6/0x5f0 [ 178.860817][ T7392] create_new_namespaces+0x3ea/0xad0 [ 178.860865][ T7392] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 178.860907][ T7392] ksys_unshare+0x45b/0xa40 [ 178.860953][ T7392] ? __pfx_ksys_unshare+0x10/0x10 [ 178.860995][ T7392] ? xfd_validate_state+0x5d/0x180 [ 178.861029][ T7392] ? rcu_is_watching+0x12/0xc0 [ 178.861082][ T7392] __x64_sys_unshare+0x31/0x40 [ 178.861125][ T7392] do_syscall_64+0xcd/0x230 [ 178.861175][ T7392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.861205][ T7392] RIP: 0033:0x7f48aed8e969 [ 178.861229][ T7392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.861258][ T7392] RSP: 002b:00007f48afbdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 178.861286][ T7392] RAX: ffffffffffffffda RBX: 00007f48aefb5fa0 RCX: 00007f48aed8e969 [ 178.861306][ T7392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 178.861324][ T7392] RBP: 00007f48aee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 178.861341][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.861359][ T7392] R13: 0000000000000000 R14: 00007f48aefb5fa0 R15: 00007ffee6f25cf8 [ 178.861399][ T7392] [ 179.180646][ T7376] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 179.189191][ T7376] Node 0 DMA32 free:1225932kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:225880kB inactive_anon:0kB active_file:65624kB inactive_file:160128kB unevictable:1536kB writepending:1612kB present:3129332kB managed:2544152kB mlocked:0kB bounce:0kB free_pcp:10288kB local_pcp:9240kB free_cma:0kB [ 179.403126][ T7376] lowmem_reserve[]: 0 0 1 1 1 [ 179.470926][ T7376] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 179.515348][ T7376] lowmem_reserve[]: 0 0 0 0 0 [ 179.520270][ T7376] Node 1 Normal free:3898820kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8808kB local_pcp:7000kB free_cma:0kB [ 179.571041][ T7376] lowmem_reserve[]: 0 0 0 0 0 [ 179.575894][ T7376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.668224][ T7376] Node 0 DMA32: 247*4kB (UM) 393*8kB (UM) 473*16kB (UME) 138*32kB (UME) 499*64kB (UM) 103*128kB (UME) 47*256kB (UM) 26*512kB (UME) 15*1024kB (UM) 4*2048kB (UME) 268*4096kB (UM) = 1207860kB [ 179.766958][ T7376] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 179.889575][ T7376] Node 1 Normal: 246*4kB (UME) 76*8kB (UME) 60*16kB (UME) 240*32kB (UME) 104*64kB (UME) 44*128kB (UME) 16*256kB (UME) 11*512kB (UME) 4*1024kB (U) 2*2048kB (ME) 942*4096kB (M) = 3898872kB [ 179.941409][ T7376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.954656][ T7376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.983393][ T7376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.001438][ T7376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.042712][ T7376] 102930 total pagecache pages [ 180.054929][ T7376] 0 pages in swap cache [ 180.059242][ T7376] Free swap = 124996kB [ 180.069400][ T7376] Total swap = 124996kB [ 180.093304][ T7376] 2097051 pages RAM [ 180.097128][ T7376] 0 pages HighMem/MovableOnly [ 180.120593][ T7376] 428907 pages reserved [ 180.162071][ T7376] 0 pages cma reserved [ 181.664598][ T7440] mkiss: ax0: crc mode is auto. [ 182.586039][ T7449] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 183.128517][ T7461] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 183.289203][ T7461] CIFS mount error: No usable UNC path provided in device string! [ 183.289203][ T7461] [ 183.455834][ T7461] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 184.276766][ T7492] FAULT_INJECTION: forcing a failure. [ 184.276766][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 184.316813][ T7492] CPU: 1 UID: 0 PID: 7492 Comm: syz.4.279 Tainted: G U 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 184.316866][ T7492] Tainted: [U]=USER [ 184.316876][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.316891][ T7492] Call Trace: [ 184.316903][ T7492] [ 184.316918][ T7492] dump_stack_lvl+0x16c/0x1f0 [ 184.316966][ T7492] should_fail_ex+0x512/0x640 [ 184.317009][ T7492] ? __kmalloc_noprof+0xbf/0x510 [ 184.317045][ T7492] ? lsm_blob_alloc+0x68/0x90 [ 184.317069][ T7492] should_failslab+0xc2/0x120 [ 184.317106][ T7492] __kmalloc_noprof+0xd2/0x510 [ 184.317146][ T7492] lsm_blob_alloc+0x68/0x90 [ 184.317174][ T7492] security_sk_alloc+0x30/0x270 [ 184.317208][ T7492] sk_prot_alloc+0xfb/0x2a0 [ 184.317254][ T7492] sk_alloc+0x36/0xc20 [ 184.317287][ T7492] inet6_create+0x381/0x1300 [ 184.317322][ T7492] ? inet6_create+0x7f/0x1300 [ 184.317359][ T7492] __sock_create+0x338/0x8d0 [ 184.317411][ T7492] inet_ctl_sock_create+0x94/0x230 [ 184.317454][ T7492] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 184.317495][ T7492] ? lockdep_init_map_type+0x5c/0x280 [ 184.317536][ T7492] ? do_init_timer+0xc9/0x110 [ 184.317570][ T7492] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 184.317614][ T7492] sctp_ctrlsock_init+0x40/0xf0 [ 184.317657][ T7492] ops_init+0x1e2/0x5f0 [ 184.317711][ T7492] setup_net+0x21e/0x850 [ 184.317774][ T7492] ? __pfx_setup_net+0x10/0x10 [ 184.317813][ T7492] ? lockdep_init_map_type+0x5c/0x280 [ 184.317863][ T7492] ? __pfx_down_read_killable+0x10/0x10 [ 184.317900][ T7492] ? debug_mutex_init+0x37/0x70 [ 184.317934][ T7492] copy_net_ns+0x2a6/0x5f0 [ 184.317981][ T7492] create_new_namespaces+0x3ea/0xad0 [ 184.318031][ T7492] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 184.318090][ T7492] ksys_unshare+0x45b/0xa40 [ 184.318139][ T7492] ? __pfx_ksys_unshare+0x10/0x10 [ 184.318184][ T7492] ? xfd_validate_state+0x5d/0x180 [ 184.318219][ T7492] ? rcu_is_watching+0x12/0xc0 [ 184.318261][ T7492] __x64_sys_unshare+0x31/0x40 [ 184.318308][ T7492] do_syscall_64+0xcd/0x230 [ 184.318364][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.318397][ T7492] RIP: 0033:0x7f6b8fd8e969 [ 184.318422][ T7492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.318454][ T7492] RSP: 002b:00007f6b90bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 184.318484][ T7492] RAX: ffffffffffffffda RBX: 00007f6b8ffb6080 RCX: 00007f6b8fd8e969 [ 184.318506][ T7492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 184.318527][ T7492] RBP: 00007f6b8fe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 184.318547][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.318566][ T7492] R13: 0000000000000000 R14: 00007f6b8ffb6080 R15: 00007ffe86588068 [ 184.318610][ T7492] [ 185.959253][ T7522] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 186.090174][ T7531] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7f645c239 pfn:0x78000 [ 186.113357][ T7533] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 186.181510][ T7531] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 186.263980][ T7531] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 186.346423][ T7531] raw: 00000007f645c239 0000000000000000 0000000400000002 0000000000000000 [ 186.379560][ T7531] page dumped because: unmovable page [ 186.475521][ T7531] page_owner tracks the page as allocated [ 186.488099][ T7531] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5823, tgid 5823 (syz-executor), ts 88861029317, free_ts 88627563467 [ 186.563788][ T7531] post_alloc_hook+0x181/0x1b0 [ 186.568804][ T7531] get_page_from_freelist+0x135c/0x3920 [ 186.595450][ T7531] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 186.626837][ T7531] alloc_pages_mpol+0x1fb/0x550 [ 186.632530][ T7531] alloc_pages_noprof+0x131/0x390 [ 186.637694][ T7531] __vmalloc_node_range_noprof+0x732/0x1540 [ 186.644061][ T7531] vmalloc_user_noprof+0x6b/0x90 [ 186.649704][ T7531] kcov_ioctl+0x4c/0x730 [ 186.656992][ T7531] __x64_sys_ioctl+0x193/0x200 [ 186.662249][ T7531] do_syscall_64+0xcd/0x230 [ 186.666895][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.672987][ T7531] page last free pid 5818 tgid 5818 stack trace: [ 186.679400][ T7531] free_unref_folios+0x999/0x1630 [ 186.684544][ T7531] folios_put_refs+0x56f/0x740 [ 186.689433][ T7531] free_pages_and_swap_cache+0x245/0x4a0 [ 186.786463][ T7531] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 186.919892][ T7531] tlb_finish_mmu+0x168/0x7b0 [ 187.011118][ T7531] vms_clear_ptes+0x55e/0x770 [ 187.040765][ T7531] vms_complete_munmap_vmas+0x1ca/0x970 [ 187.082261][ T7531] do_vmi_align_munmap+0x43b/0x7d0 [ 187.087500][ T7531] do_vmi_munmap+0x208/0x3e0 [ 187.099364][ T7531] __vm_munmap+0x19a/0x390 [ 187.104434][ T7531] __x64_sys_munmap+0x59/0x80 [ 187.109306][ T7531] do_syscall_64+0xcd/0x230 [ 187.114164][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.274690][ T7553] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.281399][ T7553] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.322803][ T7553] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.328967][ T7553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.347767][ T7553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 187.525523][ T7553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.282234][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.282287][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.366398][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.366415][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.786646][ T7625] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 191.441762][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.473118][ T7681] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input30 [ 192.995851][ T7701] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 193.444300][ T7707] Setting dangerous option i915.mitigations - tainting kernel [ 193.521917][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.316582][ T7732] syz.0.311(7732): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 195.258854][ T7750] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 195.423995][ T7759] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 195.662445][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 196.478040][ T7781] lo: entered allmulticast mode [ 196.796492][ T7781] lo: left allmulticast mode [ 197.058212][ T7803] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 197.644989][ T7827] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input34 [ 197.967569][ T7832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.328'. [ 198.024924][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.087094][ T7832] bridge_slave_1 (unregistering): left allmulticast mode [ 198.108382][ T7832] bridge_slave_1 (unregistering): left promiscuous mode [ 198.125927][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.509492][ T5834] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 198.509727][ T5834] Bluetooth: hci4: connection err: -111 [ 198.536702][ T5834] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 198.537462][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 199.057222][ T7853] ima: policy update failed [ 199.083498][ T30] audit: type=1802 audit(6042378052.024:5): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.334" res=0 errno=0 [ 199.207699][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.214295][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.480443][ T7862] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 200.879533][ T7892] netlink: 'syz.0.344': attribute type 3 has an invalid length. [ 201.505354][ T7906] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input36 [ 202.052727][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 202.720727][ T7939] ================================================================== [ 202.728843][ T7939] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 202.736312][ T7939] Write of size 4 at addr ffff8881416a9cf8 by task syz.1.357/7939 [ 202.744151][ T7939] [ 202.746535][ T7939] CPU: 1 UID: 0 PID: 7939 Comm: syz.1.357 Tainted: G U 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 202.746579][ T7939] Tainted: [U]=USER [ 202.746589][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.746606][ T7939] Call Trace: [ 202.746615][ T7939] [ 202.746626][ T7939] dump_stack_lvl+0x116/0x1f0 [ 202.746673][ T7939] print_report+0xc3/0x670 [ 202.746706][ T7939] ? __virt_addr_valid+0x5e/0x590 [ 202.746745][ T7939] ? __phys_addr+0xc6/0x150 [ 202.746783][ T7939] ? try_module_get+0x4c/0xd0 [ 202.746811][ T7939] kasan_report+0xe0/0x110 [ 202.746846][ T7939] ? try_module_get+0x4c/0xd0 [ 202.746879][ T7939] kasan_check_range+0xef/0x1a0 [ 202.746920][ T7939] try_module_get+0x4c/0xd0 [ 202.746948][ T7939] dvb_device_open+0x124/0x3b0 [ 202.746993][ T7939] ? __pfx_dvb_device_open+0x10/0x10 [ 202.747035][ T7939] chrdev_open+0x231/0x6a0 [ 202.747066][ T7939] ? __pfx_apparmor_file_open+0x10/0x10 [ 202.747106][ T7939] ? __pfx_chrdev_open+0x10/0x10 [ 202.747139][ T7939] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 202.747188][ T7939] do_dentry_open+0x741/0x1c10 [ 202.747219][ T7939] ? __pfx_chrdev_open+0x10/0x10 [ 202.747253][ T7939] vfs_open+0x82/0x3f0 [ 202.747293][ T7939] path_openat+0x1e5e/0x2d40 [ 202.747327][ T7939] ? __pfx_path_openat+0x10/0x10 [ 202.747359][ T7939] do_filp_open+0x20b/0x470 [ 202.747387][ T7939] ? __pfx_do_filp_open+0x10/0x10 [ 202.747428][ T7939] ? alloc_fd+0x471/0x7d0 [ 202.747457][ T7939] do_sys_openat2+0x11b/0x1d0 [ 202.747502][ T7939] ? __pfx_do_sys_openat2+0x10/0x10 [ 202.747542][ T7939] ? find_held_lock+0x2b/0x80 [ 202.747575][ T7939] __x64_sys_openat+0x174/0x210 [ 202.747616][ T7939] ? __pfx___x64_sys_openat+0x10/0x10 [ 202.747658][ T7939] ? rcu_is_watching+0x12/0xc0 [ 202.747690][ T7939] do_syscall_64+0xcd/0x230 [ 202.747734][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.747763][ T7939] RIP: 0033:0x7f48aed8e969 [ 202.747786][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.747814][ T7939] RSP: 002b:00007f48afbdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 202.747840][ T7939] RAX: ffffffffffffffda RBX: 00007f48aefb5fa0 RCX: 00007f48aed8e969 [ 202.747859][ T7939] RDX: 0000000000000040 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 202.747878][ T7939] RBP: 00007f48aee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 202.747895][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.747912][ T7939] R13: 0000000000000000 R14: 00007f48aefb5fa0 R15: 00007ffee6f25cf8 [ 202.747939][ T7939] [ 202.747949][ T7939] [ 203.009481][ T7939] Allocated by task 1: [ 203.013550][ T7939] kasan_save_stack+0x33/0x60 [ 203.018244][ T7939] kasan_save_track+0x14/0x30 [ 203.022941][ T7939] __kasan_kmalloc+0xaa/0xb0 [ 203.027539][ T7939] dvb_register_device+0x1e4/0x2370 [ 203.032756][ T7939] dvb_dmxdev_init+0x33e/0x4e0 [ 203.037526][ T7939] vidtv_bridge_probe+0x75d/0xa90 [ 203.042569][ T7939] platform_probe+0xff/0x1f0 [ 203.047170][ T7939] really_probe+0x241/0xa90 [ 203.051685][ T7939] __driver_probe_device+0x1de/0x440 [ 203.056984][ T7939] driver_probe_device+0x4c/0x1b0 [ 203.062027][ T7939] __driver_attach+0x283/0x580 [ 203.066801][ T7939] bus_for_each_dev+0x13e/0x1d0 [ 203.071671][ T7939] bus_add_driver+0x2e9/0x690 [ 203.076359][ T7939] driver_register+0x15c/0x4b0 [ 203.081149][ T7939] vidtv_bridge_init+0x45/0x80 [ 203.085931][ T7939] do_one_initcall+0x120/0x6e0 [ 203.090709][ T7939] kernel_init_freeable+0x5c2/0x900 [ 203.095941][ T7939] kernel_init+0x1c/0x2b0 [ 203.100278][ T7939] ret_from_fork+0x48/0x80 [ 203.104699][ T7939] ret_from_fork_asm+0x1a/0x30 [ 203.109478][ T7939] [ 203.111805][ T7939] The buggy address belongs to the object at ffff8881416a9c00 [ 203.111805][ T7939] which belongs to the cache kmalloc-256 of size 256 [ 203.125863][ T7939] The buggy address is located 32 bytes to the right of [ 203.125863][ T7939] allocated 216-byte region [ffff8881416a9c00, ffff8881416a9cd8) [ 203.140448][ T7939] [ 203.142775][ T7939] The buggy address belongs to the physical page: [ 203.149192][ T7939] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1416a8 [ 203.158126][ T7939] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.166642][ T7939] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 203.174276][ T7939] page_type: f5(slab) [ 203.178274][ T7939] raw: 057ff00000000040 ffff88801b441b40 ffffea00015f2c80 0000000000000002 [ 203.186877][ T7939] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 203.195473][ T7939] head: 057ff00000000040 ffff88801b441b40 ffffea00015f2c80 0000000000000002 [ 203.204151][ T7939] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 203.212829][ T7939] head: 057ff00000000001 ffffea000505aa01 00000000ffffffff 00000000ffffffff [ 203.221511][ T7939] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 203.230183][ T7939] page dumped because: kasan: bad access detected [ 203.236593][ T7939] page_owner tracks the page as allocated [ 203.242304][ T7939] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23366561951, free_ts 0 [ 203.262040][ T7939] post_alloc_hook+0x181/0x1b0 [ 203.266826][ T7939] get_page_from_freelist+0x135c/0x3920 [ 203.272386][ T7939] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 203.278312][ T7939] alloc_pages_mpol+0x1fb/0x550 [ 203.283197][ T7939] new_slab+0x244/0x340 [ 203.287363][ T7939] ___slab_alloc+0xd9c/0x1940 [ 203.292056][ T7939] __slab_alloc.constprop.0+0x56/0xb0 [ 203.297455][ T7939] __kmalloc_cache_noprof+0xfb/0x3e0 [ 203.302750][ T7939] bus_add_driver+0x92/0x690 [ 203.307349][ T7939] driver_register+0x15c/0x4b0 [ 203.312126][ T7939] usb_register_driver+0x216/0x4d0 [ 203.317260][ T7939] do_one_initcall+0x120/0x6e0 [ 203.322042][ T7939] kernel_init_freeable+0x5c2/0x900 [ 203.327257][ T7939] kernel_init+0x1c/0x2b0 [ 203.331598][ T7939] ret_from_fork+0x48/0x80 [ 203.336037][ T7939] ret_from_fork_asm+0x1a/0x30 [ 203.340818][ T7939] page_owner free stack trace missing [ 203.346186][ T7939] [ 203.348519][ T7939] Memory state around the buggy address: [ 203.354156][ T7939] ffff8881416a9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.362231][ T7939] ffff8881416a9c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 203.370324][ T7939] >ffff8881416a9c80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 203.378391][ T7939] ^ [ 203.386374][ T7939] ffff8881416a9d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.394437][ T7939] ffff8881416a9d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.402500][ T7939] ================================================================== [ 203.482426][ T7939] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.489675][ T7939] CPU: 1 UID: 0 PID: 7939 Comm: syz.1.357 Tainted: G U 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 203.503162][ T7939] Tainted: [U]=USER [ 203.506988][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.517074][ T7939] Call Trace: [ 203.520376][ T7939] [ 203.523335][ T7939] dump_stack_lvl+0x3d/0x1f0 [ 203.527969][ T7939] panic+0x71c/0x800 [ 203.531883][ T7939] ? __pfx_panic+0x10/0x10 [ 203.536662][ T7939] ? irqentry_exit+0x3b/0x90 [ 203.541258][ T7939] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.546464][ T7939] ? preempt_schedule_thunk+0x16/0x30 [ 203.551856][ T7939] ? try_module_get+0x4c/0xd0 [ 203.556539][ T7939] ? preempt_schedule_common+0x44/0xc0 [ 203.562033][ T7939] ? try_module_get+0x4c/0xd0 [ 203.566737][ T7939] check_panic_on_warn+0xab/0xb0 [ 203.571698][ T7939] end_report+0x107/0x170 [ 203.576060][ T7939] kasan_report+0xee/0x110 [ 203.580492][ T7939] ? try_module_get+0x4c/0xd0 [ 203.585173][ T7939] kasan_check_range+0xef/0x1a0 [ 203.590033][ T7939] try_module_get+0x4c/0xd0 [ 203.594538][ T7939] dvb_device_open+0x124/0x3b0 [ 203.599325][ T7939] ? __pfx_dvb_device_open+0x10/0x10 [ 203.604621][ T7939] chrdev_open+0x231/0x6a0 [ 203.609044][ T7939] ? __pfx_apparmor_file_open+0x10/0x10 [ 203.614609][ T7939] ? __pfx_chrdev_open+0x10/0x10 [ 203.619573][ T7939] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 203.626349][ T7939] do_dentry_open+0x741/0x1c10 [ 203.631128][ T7939] ? __pfx_chrdev_open+0x10/0x10 [ 203.636473][ T7939] vfs_open+0x82/0x3f0 [ 203.640558][ T7939] path_openat+0x1e5e/0x2d40 [ 203.645155][ T7939] ? __pfx_path_openat+0x10/0x10 [ 203.650122][ T7939] do_filp_open+0x20b/0x470 [ 203.654636][ T7939] ? __pfx_do_filp_open+0x10/0x10 [ 203.659673][ T7939] ? alloc_fd+0x471/0x7d0 [ 203.664005][ T7939] do_sys_openat2+0x11b/0x1d0 [ 203.668696][ T7939] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.673915][ T7939] ? find_held_lock+0x2b/0x80 [ 203.678610][ T7939] __x64_sys_openat+0x174/0x210 [ 203.683571][ T7939] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.688956][ T7939] ? rcu_is_watching+0x12/0xc0 [ 203.693732][ T7939] do_syscall_64+0xcd/0x230 [ 203.698254][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.704170][ T7939] RIP: 0033:0x7f48aed8e969 [ 203.708589][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.728208][ T7939] RSP: 002b:00007f48afbdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.736647][ T7939] RAX: ffffffffffffffda RBX: 00007f48aefb5fa0 RCX: 00007f48aed8e969 [ 203.744636][ T7939] RDX: 0000000000000040 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 203.752613][ T7939] RBP: 00007f48aee10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 203.760591][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.768577][ T7939] R13: 0000000000000000 R14: 00007f48aefb5fa0 R15: 00007ffee6f25cf8 [ 203.776563][ T7939] [ 203.779936][ T7939] Kernel Offset: disabled [ 203.784276][ T7939] Rebooting in 86400 seconds..