last executing test programs: 12m32.575687327s ago: executing program 2 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) read$auto(r3, &(0x7f0000000000)='\x98g\x8cf\x8c', 0xc) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x14) r4 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) r5 = pipe$auto(&(0x7f0000000000)) ioctl$auto_TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000140)=0x81a) futimesat$auto(r5, 0x0, 0x0) write$auto_def_blk_fops_fs(r5, &(0x7f0000000100)="06a4db327516fb11e3ca850989ca82e68a86740e49cfd2abcd668655f247ccde", 0x20) write$auto(r5, &(0x7f0000000480)='0[.[\x00\xf8?~\xbc\x06\x0f\x81Iq=B\vr6\x19\xd3\xd4\xd6\xab\xd0\nl\x8cb\xe7@\xbb\x0f\xe43\xe2R\x91V\xc1N\xae\xd3B\xb8,\xd0\"W\x1c\x14\xda\xf3>\xe5]\x98\xd6KLyY\x02\xbdD\a\x06\x93\x9d\x0f\xb9\x0f\x8e\xb4*\x8a\xb9\xebo+\xa6\x15\x9b\x8f\xbd\xaf\xc4\x9aW+\xc5\x82\xe1\x95\xa1A\xe4\xca\xb1~H\x91\x1d\x95\xe5\xf7ZN\xb1\xaa:a\xf6\x1ed:\v}\xdd\xc4\xb0\xb2\x11\x81<|J\xce\xf7pU03#w\xcaZbj\xa1*4\xac\x8e\xcc\xb8=\xe3\x88\xffj\xde\xca\x1fk\x97\xefU\x92\x911\xd6v!Y@\xa3\x89\xc4s\x8a\x1aRz6[\x903\x8ck\a\xc6\xe4\xb7\xa7i\\\xa9i\x002*M\xb4$|\xe1,\xa7\x93y\x12\x15\xe9F9\xeaL\x98\xe9b\xbc\xd6^\x03\xda\x8e\xbbP12\xc1\xa8\xeeh\"\xc6D\xc2\xdcoP\xbe\xe7F\xaem\xb6\x12\xd9\t\xf4L4\x03u\xb7\xde\xc2F\xf0\xca\xb8[\xa1\xdcO\xa6\xc5\n\xb3\xd5|\x89\xb4g,L\x12\x1aK\xcc\xa6\xa9\x0e\xb3\xe4#:\xf6\xdf#\x11\f\xd93\xe3\xe0\xf3\x86\x06\xbd(\xbdb\x91e\xdb\x17#\xf0\x0f}\x99\xfd\xa0\x84w\xc0\xfbX\xb9c\xf6x\xc3Q\xdd\x83a\xacy\x1e\xab\x84X\xc1\xf7R\xa2\xee%\x0eLI\x93\x9a9ht\xa3\xd3(\x97\xd9\xdc:\xacR\xb0mp\xc1\xe9\xa8\x91A\x95\xba\\8\n>x\x8dx\x1d\xe8\xc2\xdc\x13\xf1\xd3C\\\x01\xf4\x90\xc4}Z4\x04\x04}\xbc\xdb\xf7\xa3\v\xc6\xfb\x87\xf2\xd2\xa7?r&\xf9C\x7f\xa2\xfd\xf6\xf5\x1f\xc0\x00-\xadl\xd4lK#\x1b\xab\x96\"\x06\x1eE\x11\xba3\a\xd0\xee\x87\'\x8a\a\xd0\xfe\x11}.\xef\xc0\xacG\xd2\xb7\x8at\xe7\xf4_', 0x109) unshare$auto(0x40000080) socket(0x11, 0x2, 0x2) read$auto_tracing_iter_fops_trace(r4, &(0x7f00000001c0)=""/215, 0xd7) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) wait4$auto(r6, 0x0, 0x0, &(0x7f0000000040)={{0xff, 0xffffffffffffffff}, {0x6, 0xffffffffffffffaf}, 0x4, 0x10, 0x3, 0xa5a5, 0x6, 0x1, 0x1, 0x2, 0x3ff, 0x7, 0x1, 0x0, 0x5, 0x8000000000000001}) getpgrp(r6) 12m28.102323691s ago: executing program 2 (id=278): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (async) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x30) fcntl$auto(r1, 0xfffffffd, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0x3) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf2502000000080003008000400008001d"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14f2f2bec5af00000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a00000a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x80001}) read$auto(r0, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x400000, 0x0) write$auto_tomoyo_operations_securityfs_if(r4, 0x0, 0x0) (async) unshare$auto(0x40000080) 12m26.191545124s ago: executing program 2 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)=ANY=[@ANYBLOB="010014bc", @ANYRES16=r1, @ANYBLOB="37072dbd7000fedbdf2513000000"], 0x14}, 0x1, 0x0, 0x0, 0x6000091}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/4087, 0xff7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/12, 0xc) setsockopt$auto(0x400000000000003, 0x20000029, 0x21b, 0x0, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r6, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x222241, 0x0) inotify_init1$auto(0x7f) mmap$auto(0x2007, 0x4002, 0x5, 0x8000000008014, r8, 0x0) 12m25.086914206s ago: executing program 2 (id=291): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, r0) ioctl$auto(0x3, 0xae41, 0x38) close_range$auto(0x2, 0x8, 0x0) mbind$auto(0x5, 0xfffffffffffffffc, 0x9, &(0x7f00000000c0)=0x4d5c, 0x10, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) write$auto(r1, 0x0, 0x271) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000280)=""/234, 0xea) read$auto(0x3, 0x0, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x83) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) 12m21.617664457s ago: executing program 2 (id=300): write$auto(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x33, 0xa, 0x4) ioperm$auto(0xd44, 0x6, 0x8) mmap$auto(0x2, 0x2000f, 0x4000000000df, 0xeb1, 0x404, 0x8000) setrlimit$auto(0xb, 0x0) timer_create$auto(0x3, 0x0, 0x0) tkill$auto(0x80000000000001, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800000008000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000100)=0x99) clock_settime$auto(0xfffffffb, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x3fd, 0x2020009, 0x9, 0x10, r0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='\x00', 0xa}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r1, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-touch2\x00', 0x41100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x183042, 0x0) read$auto(r4, 0x0, 0x9) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/bonding/bond0\x00', 0xb0400, 0x0) shutdown$auto(r5, 0xd7) ioctl$auto(r3, 0x40085618, r3) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 12m20.577495317s ago: executing program 2 (id=302): read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000180)="0a1b9a5c2a00006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf340", 0x2a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = prctl$auto(0x1b, 0x1, 0x0, 0x7, 0x1000000001) syz_clone3(&(0x7f0000000280)={0x21000680, &(0x7f0000000000), 0x0, 0x0, {0x37}, &(0x7f00000000c0)=""/191, 0xbf, &(0x7f0000000180)=""/139, &(0x7f0000000240)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x20000) mmap$auto(0x0, 0xe983, 0x8000000000000000, 0xeb1, 0xffffffffffffffff, 0x7ffb) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe987, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1e) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0xa, 0x5, 0x94) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) 12m20.152250468s ago: executing program 32 (id=302): read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000180)="0a1b9a5c2a00006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf340", 0x2a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = prctl$auto(0x1b, 0x1, 0x0, 0x7, 0x1000000001) syz_clone3(&(0x7f0000000280)={0x21000680, &(0x7f0000000000), 0x0, 0x0, {0x37}, &(0x7f00000000c0)=""/191, 0xbf, &(0x7f0000000180)=""/139, &(0x7f0000000240)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x20000) mmap$auto(0x0, 0xe983, 0x8000000000000000, 0xeb1, 0xffffffffffffffff, 0x7ffb) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe987, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1e) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0xa, 0x5, 0x94) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) 3m48.245629572s ago: executing program 4 (id=2066): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nodes_fops_netdebug(r1, 0x0, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0x4) r3 = socket(0xb, 0x2, 0x84) setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x10000) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0xc41, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xea6c, &(0x7f00000002c0)="3914044c7781e7c50ac3b99e79e71898fa47e05eaa96a3dfb641e8c0ed1440b9194f943e8d794800cd176198ced789875c2fa951bb407e7c588457a48d7673e2ed8a4e6564e2236b22da508003e878e49dcef8eda6fac24e5e412a655c6c334b08011049813fb21f9023f05abaa8d03065a6b7e7397b0e92e03a4adc347e47083a9ca7f062ad213158c37e10889c9d4d66b1f8a9ee5e3cabeef806b1bf6988489aab9d91943d9bcc7b1664959011aaeb79fe54e77e9b439069640813bfd6eb8a9e6f4cb2112910fafbfe386e4fd4d4605441ceaf416ecb3f84637c3c8af1d01633584b056f3dd89a623b490d9f72bfbb967c8b4d8956699a") get_robust_list$auto(r4, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x7ff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x109000, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0xdfb) madvise$auto(0x0, 0x200007, 0x9) socket(0xa, 0x1, 0x84) fanotify_init$auto(0x4000, 0x2000000000002) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) 3m47.05378487s ago: executing program 4 (id=2069): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m46.639575673s ago: executing program 4 (id=2072): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m46.194856254s ago: executing program 4 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="2f212cbde9cf3dd5715b2c78000008000300", @ANYRES32=r2], 0x28}}, 0x4000000) 3m45.595508445s ago: executing program 4 (id=2076): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/interrupts/gpe_all\x00', 0x103042, 0x0) sendfile$auto(r0, r0, 0x0, 0x1000000000001bf) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_checksums\x00', 0x40a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/19, 0x13) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1) sendmsg$auto_NFC_CMD_START_POLL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8000}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}, @NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4085) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) mmap$auto(0x0, 0x202000b, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x40000008000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) tkill$auto(0x1, 0x7) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/9/effective_affinity_list\x00', 0x101000, 0x0) 3m43.059449093s ago: executing program 4 (id=2086): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r0, 0x5509, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m42.677316078s ago: executing program 33 (id=2086): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r0, 0x5509, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m5.33736935s ago: executing program 1 (id=2212): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8400) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5385, r2) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r1, 0xc0884123, &(0x7f0000000280)={0x5, 0x0, @status={0x8, 0x0, {}, 0x82e, {}, {0xd812, 0x4d}, 0xffffff63, 0x0, {0xa, 0xff}}, @control={{}, 0x7, {}, {}, 0x9}}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x7, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0x1]}, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x48b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m4.162621875s ago: executing program 1 (id=2213): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6c8080, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r2, 0x0, 0x100000001) select$auto(0x5, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0x2, 0x3, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x60, 0x8000001f, 0x8, 0x6d3e, 0x5, 0xfffffffffffffffe, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x48b41, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000200)={{0x10b9, 0x0, @descriptor="bb9fe837a81278a3"}, '\x00', 0x9, 0x4, 0x6}) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) 3m2.161743794s ago: executing program 1 (id=2216): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xc3b, 0x10000, 0x16, 0x401, 0x8) syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0xc0102, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0_to_bridge/hop_limit\x00', 0x101000, 0x0) read$auto(r0, 0x0, 0x1ff) (async) read$auto(r0, 0x0, 0x1ff) bind$auto(0x3, 0x0, 0x6a) (async) bind$auto(0x3, 0x0, 0x6a) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf, 0x2, 0x8000, 0x3000}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x2a81, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x2a81, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)="12915f") recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m57.312986781s ago: executing program 1 (id=2223): mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) mbind$auto(0x0, 0xfa9d, 0x8001, 0x0, 0x400, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.8/usb25/bcdDevice\x00', 0x101142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)={0x1c, r2, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x4) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) read$auto(r0, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x8da) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x27) 2m55.757631239s ago: executing program 1 (id=2228): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/interrupts/gpe_all\x00', 0x103042, 0x0) sendfile$auto(r0, r0, 0x0, 0x1000000000001bf) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_checksums\x00', 0x40a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/19, 0x13) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1) sendmsg$auto_NFC_CMD_START_POLL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8000}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}, @NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4085) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) mmap$auto(0x0, 0x202000b, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x40000008000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) tkill$auto(0x1, 0x7) 2m54.337419945s ago: executing program 1 (id=2232): mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) mbind$auto(0x0, 0xfa9d, 0x8001, 0x0, 0x400, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.8/usb25/bcdDevice\x00', 0x101142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)={0x1c, r2, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x4) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) read$auto(r0, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x8da) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x27) open(0x0, 0x161342, 0x100) 2m53.458697082s ago: executing program 34 (id=2232): mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) mbind$auto(0x0, 0xfa9d, 0x8001, 0x0, 0x400, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.8/usb25/bcdDevice\x00', 0x101142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)={0x1c, r2, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x4) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) read$auto(r0, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x8da) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x27) open(0x0, 0x161342, 0x100) 2m36.207042326s ago: executing program 5 (id=2270): mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) mbind$auto(0x0, 0xfa9d, 0x8001, 0x0, 0x400, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.8/usb25/bcdDevice\x00', 0x101142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)={0x1c, r2, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x4) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) read$auto(r0, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x8da) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000004c0), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x27) open(0x0, 0x161342, 0x100) 2m34.495624961s ago: executing program 5 (id=2272): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x80, 0x0) sync_file_range$auto(0xffffffffffffffff, 0x0, 0x8000000000000000, 0x1) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0x10, 0x40000000000a5, 0x16a) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, r1, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0x80000000000e600}, 0xf) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) listmount$auto(&(0x7f0000000080)={0x2, @inferred=r2, 0x7fff, 0x0, 0x3}, &(0x7f0000000180)=0x8, 0xfffffffffffffffa, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x6, r3, 0x0, 0x3}, 0xc) readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22000, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) bpf$auto(0x5, 0x0, 0x4a) prctl$auto_PR_SME_SET_VL(0x3f, 0x8, 0x0, 0x7, 0x8) mmap$auto(0x2, 0x3, 0x6, 0x3f, 0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x13) 2m33.40413174s ago: executing program 5 (id=2275): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) shmget$auto(0x0, 0x2, 0x8) mmap$auto(0xa, 0xa00006, 0x2, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) (async) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) (async) r1 = socket(0x2, 0x1, 0x106) (async) socket(0x1f, 0x2, 0x106) (async) r2 = socket(0x2b, 0x807, 0x5) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x4000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) (async, rerun: 64) madvise$auto(0xffffffff7ffffffc, 0x10000, 0x12) (rerun: 64) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20008845}, 0x40) (async) socket(0x1d, 0x2, 0x2) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRESOCT=0x0, @ANYBLOB="02002abd7000fbdbdf25280000000400fa000400a680040073000800c900020000000800a4000000000004004801"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) (async) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0xd5b, 0xc, 0x9d9, 0x948a, 0x2, 0x15f4da0d, 0x2, 0x2, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0x2, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r5 = io_uring_setup$auto(0x6, 0x0) (rerun: 32) socket(0xa, 0x2, 0x88) (async) getsockopt$auto_SO_SNDBUF(r5, 0x8000, 0x7, &(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000040)=0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 2m32.89982259s ago: executing program 5 (id=2276): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) read$auto(0x3, 0x0, 0x18) acct$auto(&(0x7f0000000000)='/dev/snd/seq\x00') r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r2, &(0x7f0000004240)='\x01', 0x10000000004) ioctl$auto(0x3, 0xae41, 0x38) unshare$auto(0x40000080) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/001/001\x00', 0x1654c2, 0x0) mmap$auto(0x4000000000002000, 0x9, 0x9a, 0x8000000008011, r3, 0x8000000000) 2m31.863717627s ago: executing program 5 (id=2278): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/interrupts/gpe_all\x00', 0x103042, 0x0) sendfile$auto(r0, r0, 0x0, 0x1000000000001bf) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_checksums\x00', 0x40a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/19, 0x13) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1) mmap$auto(0x0, 0x202000b, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x40000008000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) tkill$auto(0x1, 0x7) 2m30.974597256s ago: executing program 5 (id=2282): mmap$auto(0x82, 0x800202000a, 0x2, 0xebd, 0xfffffffffffffffa, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0x7b3, 0x7ff, 0x6, 0x9, 0xe35, 0xffffffffffffffff}) capget$auto(&(0x7f0000000080)={0xdcd9}, 0x0) mmap$auto(0x0, 0xe49, 0x9, 0x8000000008011, 0x3, 0x3) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3f, 0x7ffe, 0x1, 0x7, 0x2, 0x4, 0x9, 0x3, 0x0, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x5a6e, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_STOP_NAN(r1, 0x0, 0x16) socket(0x26, 0x80805, 0x0) rt_sigaction$auto(0x36, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) getsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x2, 0x9, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) connect$auto(r2, 0x0, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0xa, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2m30.314087049s ago: executing program 35 (id=2282): mmap$auto(0x82, 0x800202000a, 0x2, 0xebd, 0xfffffffffffffffa, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0x7b3, 0x7ff, 0x6, 0x9, 0xe35, 0xffffffffffffffff}) capget$auto(&(0x7f0000000080)={0xdcd9}, 0x0) mmap$auto(0x0, 0xe49, 0x9, 0x8000000008011, 0x3, 0x3) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3f, 0x7ffe, 0x1, 0x7, 0x2, 0x4, 0x9, 0x3, 0x0, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x5a6e, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_STOP_NAN(r1, 0x0, 0x16) socket(0x26, 0x80805, 0x0) rt_sigaction$auto(0x36, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) getsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x2, 0x9, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) connect$auto(r2, 0x0, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0xa, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2m6.230948162s ago: executing program 7 (id=2328): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000400)={{0x5, 0x23, 0xa6, 0x84}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) read$auto(0x3, 0x0, 0x18) acct$auto(&(0x7f0000000000)='/dev/snd/seq\x00') r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r2, &(0x7f0000004240)='\x01', 0x10000000004) ioctl$auto(0x3, 0xae41, 0x38) unshare$auto(0x40000080) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/001/001\x00', 0x1654c2, 0x0) mmap$auto(0x4000000000002000, 0x9, 0x9a, 0x8000000008011, r3, 0x8000000000) 2m5.335240942s ago: executing program 7 (id=2332): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 2m3.964446429s ago: executing program 7 (id=2333): socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(&(0x7f0000000040)='\x00', 0x1000) setsockopt$auto(0x3, 0x6, 0xa, 0x0, 0xfb3) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x400041, 0x0) writev$auto(r0, &(0x7f0000000100)={0x0, 0x407114}, 0x8) 2m2.970600042s ago: executing program 7 (id=2334): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x4eb14fed, 0x444e96fd, 0xffffffffffffffff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) io_destroy$auto(0xfffffffffffffffa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x5b1, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x2, 0x7, 0x8080) faccessat2$auto(0x1, &(0x7f0000000000)='\x00', 0x2, 0x1000) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) getpid() rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0xfffffffffffffffc, 0x400005, 0xe3, 0x10, 0x2, 0x1) 2m1.543615453s ago: executing program 7 (id=2336): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/interrupts/gpe_all\x00', 0x103042, 0x0) sendfile$auto(r0, r0, 0x0, 0x1000000000001bf) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/supported_checksums\x00', 0x40a00, 0x0) mmap$auto(0x0, 0x202000b, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x40000008000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) tkill$auto(0x1, 0x7) 2m0.20255761s ago: executing program 7 (id=2339): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6c8080, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r2, 0x0, 0x100000001) select$auto(0x5, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0x2, 0x3, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x60, 0x8000001f, 0x8, 0x6d3e, 0x5, 0xfffffffffffffffe, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x48b41, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m59.672805249s ago: executing program 36 (id=2339): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6c8080, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) read$auto(r2, 0x0, 0x100000001) select$auto(0x5, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0x2, 0x3, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x60, 0x8000001f, 0x8, 0x6d3e, 0x5, 0xfffffffffffffffe, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x48b41, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.437980944s ago: executing program 3 (id=2585): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x6) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x0, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) rename$auto(&(0x7f0000000100)='./file1/file0\x00', &(0x7f00000004c0)='./file1\x00') sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) signalfd$auto(0xffffffff, 0x0, 0x8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000080) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r4 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x100) ppoll$auto(&(0x7f0000000180)={r4, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x2) bpf$auto(0x12, &(0x7f0000000240)=@link_detach={r4}, 0x26) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000002bc0)={0x3450, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x15, 0x5, 0x0, 0x1, [@generic="5f2f67bc63ee78f1b51accd50d4c42a4aa"]}, @TIPC_NLA_BEARER={0xa3, 0x1, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @ipv4=@loopback}, @generic="82332313f932fba545e725047b8cf2259f0762c0fa37627a43ecd07170041890aa9f8ef2f1156e826310a6104d4d746d43c9b574e982709af248b09761726126b7f84be6c9d33b76936268a90058123cc649a1c2ec12c0fb1d9556ba04252dd216d91f165c649f3c2f9101ca3ba7b6d9187e56893c09b0e6bc510402b76ce9485bee641fe193495b9ab7712aca057c07e775e6", @typed={0x4, 0xca}]}, @TIPC_NLA_BEARER={0x3ac, 0x1, 0x0, 0x1, [@nested={0x213, 0xa9, 0x0, 0x1, [@typed={0xc8, 0x11, 0x0, 0x0, @binary="592168bb457941a9125c1d9997d75ed54533d04cf3480a3d01e81878759d8d2ce22e33b9b324eec552c5eb2df9036945f9e268df67f72730ad623e10609a3badf85c3b2a12ec41b272c68003547536f075c30f0ed66215a51e433a0e3e1b2fb445fbefda5a9e6909b9a4ef4e0e4d65f30f159c812424a9d56f0b1ec51104b8749bc50b5f8260a7195efeaea3da92714a29c2e415304ed2bad1b8674a51277c69c88eb34a6caefa675a8c6d3f2dd18e5a865cad65811732fb59b5a892ccd5dd0a572c3931"}, @nested={0x4, 0x118}, @typed={0x32, 0xd5, 0x0, 0x0, @binary="77b5a06274098680e7b55118627e1e19a94de97838c27dedc4a014811335d7f0d36fba286c1db114829140194ab0"}, @typed={0x8, 0x111, 0x0, 0x0, @u32=0x9}, @generic="0c346332e49dbf5e7b420379cc00b3fc58010b8a8acc7fcef7b99217afc55d7f8519e0281e1dc5e7d8d8231fb15f8eaaeec8900cfa99703b655419cc8a2e0a0dfbcf7af89ee2490823807526ab8e3f70e7831d63f126fd4abf8cee77533f7d58e4139c9b8b89d8f4d25d475d1f43b75bfd8cdbb55386a2d17037aade364e26aea9b281f6cdcaeb62ef960fa26e441aa5700cb55d2755c4cfba70bd5ecbf660c6f52bb7c0ed4acb17142fe6841ba579ae9e148cbbee3c6dff82dec47c4eda4ff98750c8e51f83b80e0fcbfd9620b5f874b0d0cf22aaa163d95d9bb46f63520fa60ad8560ddbfc7921506468f29eab61df453530", @nested={0x4, 0x3d}, @typed={0x8, 0x6a, 0x0, 0x0, @uid}, @nested={0x4, 0x11f}, @nested={0x4, 0x9b}]}, @generic="a05fd33da8ab4bb0e14182adb73ca4fd30346268c3b17210b22ebd9f48055c92d84b38e7ec0fef4b6072b34eac5259cc8ab8f6828310fcaaf345f5e3ddce06f9613d0695ff62635f0b97b70df2c05b97873a8db0a400e23b622ac3c601830288e9fb80725d6e507f3cd35e3d65e19a32c850d86489e9bda0452ea2093f7a7071d8075f7f73e69a01684ac2312cd8adbd75fdc1fb8e9aa475ddb18b6598857b462f079ebfc39938140a79713914180898c9ddd1c7f2ca943db60d9a45358ef886a79e8600fe08ebb39c9c1db50c2c71969fa9412cfbbf80ef54e9bd7a6889357424698498a9cd67f1adfb4c2570bb90b0fa68e36a", @nested={0x96, 0xe4, 0x0, 0x1, [@generic="7bdb024f1db26a29e617bc36a954d48843820e7cef92bcb2970f2dc105cef9259b37501f4e3cf9e2b2ad2f6fd8ba1c298c047ab4501af422b476be720fc9aaa85fd80799addd42b6ad57", @nested={0x4, 0x25}, @typed={0x40, 0xb9, 0x0, 0x0, @str='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00'}, @nested={0x4, 0x127}]}, @typed={0x8, 0x38, 0x0, 0x0, @uid}]}, @TIPC_NLA_NODE={0xe1, 0x6, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @pid=r0}, @generic="0b6cb6721960fbb26b9493c1741ac13ba00b2b2d3df9b8a42a946062a3637b5895fc0121717c326f469ab1a2bed14d9de18fb2d7a9d7672f6e9deaae6a4f6cc5bb40b6ae5e140894579b2b8024a7bf1f4edf1364140bbf6ba6b8bd88623ea1a0eff715c4179418224e6afcc5573a9d7eabc95256a07bb9bc10121c23aab2901b1f1ca7aab6de336bf50ded241403b02385c1c1f677b2f0f909f28c3d8682c5f255b51e6105a9c5465e50db6197ca213ac3b3445fd7d0a5a3aeccc4043b150f0e8e35a792ceb4a1a8b0d0d4429c", @typed={0x8, 0x3, 0x0, 0x0, @pid=r0}]}, @TIPC_NLA_BEARER={0x1a, 0x1, 0x0, 0x1, [@generic="80eb0cf0395c5b23e17ea9cf2fae20888ddd", @typed={0x4, 0x111}]}, @TIPC_NLA_MEDIA={0x1232, 0x5, 0x0, 0x1, [@nested={0x19e, 0x39, 0x0, 0x1, [@generic="f08b68009c361d85c4c729b27bc80441539d474f148671e9b70b8aaa1d50c0847b901a216b0994071b5b5fab2c4bfb5f60b5945fe97aa11ad2e15a87c36783b987f31ddd8545d484af5187663306946b8435ccd2b1da4eb046f1a363dd3b9c86967deef2be31c5e882a8bbcdecde8bdba00bfb9473599bf42a81128e999b5af0edb26ff1c3d861b499a386a569ec4a4fa252233d0daf796ca8cbb764e6e7d4a4ec9a5b1c0e79f97737", @generic="b804a1ca41ccb7bf90b970a2d56c0c92bb8c76", @generic="9b7190dcfb484c1d621e414f3a5986a016d4dc6a74cca0530783ab2dc84fa7e6b4a7beb5aa79320bf0f3ef70c7ff8a12d70242916f88fb6d241cbfa4964c5ddfedba80fa5ac700afe3b6354989735fe833c57640d27f761e51923b5b05b7a93089e21c14af27a80292d2b4947206", @typed={0x6d, 0xf0, 0x0, 0x0, @binary="19fb76fa566715d2cef45b9ce536ae93567549fe078ee4b4301796296f69e411f5eae28c9b916ca5a748042120e861e9af75b17b1c2b396d26c65aed9f63d331130b39b199cb914e6a0f9d08b03620aba6b94eb9ea390451c67bb12f7e1a712205c44609dc42656769"}]}, @generic="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", @generic="c3ace9c4e4fcdf0a84063bde570e1f9929b749356afa8ed36f57b6ff18d3c6a5cdb1d120b1c8452452653de68465c3390f485a954c9aa1abb3e6c903d50c8bc89191b818b841907be0e9a3715b337d7f3a64f38a04e70552c5bad7c2a6867b53af3445959711c0c04d157917b3385e1c26c12b1d420b3fdd8b1a7ff15688", @typed={0x8, 0x12a, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @TIPC_NLA_MON={0x26f, 0x9, 0x0, 0x1, [@generic="f952fea9bfea152893e463fe50163eb01e0aa89f4bddb8dbd5856d8be22211aa5d33b2afc69312ce655f85971e5e23fcfb88943dcc6ff4dee1b07ff2960043887120b2e200cde1297e463c79dd66c7e92e7c2ef24131d795e962e9af0c5511fe39a7f1eaad4ea99d6686bc021af62d1ca3456395eea47db4ce3f7fd08523c7757a572c7fa628b74315c0813de041b61afec541f863f1e1e9a9ee613742f5", @typed={0x8, 0xef, 0x0, 0x0, @pid=r0}, @generic="03be9dd969cbc48ae2fcbf80137bf3eec96ada60a67ae1808e42c8a1996a5de0edd8953ed76c3c64d5d48420bb55525b0c562a0e1a9f75b05934d2455821d2b5d15a2fff5c39e74c7b5a743e03181427c30761aaa4624d458158eba130a297d015d0f3f384e2e1148400cab8279c580de5d4e1bc9a906b28eb67ce233b661186ffcebbb13274faeddb4f09d3429193d25963545f789bf6da132dc8ebe7", @nested={0x10b, 0xd7, 0x0, 0x1, [@generic="225bffdef50955648ac70731864abb6109d8959f95592eef3a9ade98d623850a033b66d6ca7de94b2a8710dbb01096085a52aca38084c366155624f5f2dc6d7ed03bfcc77adb8e4b6b967fba0dbea49dd11fbfd4b58638cc4c2f82c49c652ac0776adf01cbd26eb82bacd8237b8afad08526e12cc40e7a321f85f8df1e6712a78bdba9b3b775397337e98b530568aae1", @generic="e60b74c497bb89fa881922b56750c49385c53fd542345222f3be0e21e0f092b34d5abd5a18216bf177c65d349049bd5764c3ed58dc33d00ffd6006da89b28f4fdaa7e21e761c33790e0ea917", @generic="a81ba2803465e91524de1ebd832b986075af61", @typed={0x4, 0x139}, @nested={0x4, 0x113}, @generic, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x57}]}, @nested={0x1c, 0xec, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xe, 0x0, 0x0, @pid=r0}, @nested={0x4, 0x11}, @nested={0x4, 0xda}]}]}, @TIPC_NLA_SOCK={0xe8, 0x2, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xdb, 0x124, 0x0, 0x1, [@generic="71b52c4c3ab7c0c74bdd39b50e3adbe1ea9578ea805bcb7a871d9a46308983ddaeac0016add5bbcea2f46b85a216c497bbbe9c4d71050926d62ab41a38519b8397b4a00c74d2358afb4407e2abe7fe0d2c90bba92a68437c5cff35e65eecfdaf33c222fc71597931c12eb1749d73689ae472039e8cbc4817b4072a6dcd7a2122fd1f22ab0a3cc2ead83d775820c1885c347ad818009ef68820a58faf7063d3b090f88292aab6e3678b056806019e1acf5c557e22a5ad7a9aae6145e47d7cbfb674f34b1f33859aff2dbac0e0079b05424f0560f22ec8af"]}]}, @TIPC_NLA_PUBL={0x1945, 0x3, 0x0, 0x1, [@generic="c5db33c2edebccfb15f2b310ba557cc54e2a245e34db11cd23515da905eba50e38562def4c6378450844376debf1430735e65af95b5e986a9c0d6b9573a82d1a183c86e6868bf2f2fc9c1103f73c095b84239237d08c54c8d5974ab090f7b640b77c6cd918b1b1b1d467d2ae8a0fba813ff312dc7d179be490eded1fab95c8b68a44c24d1eaacc2192bbab9ec240e485e516bb807b592154e1ffcf5ace81bb50647b65eaf0d960725e8f31bbd2fe56cd2f1f0c10164b9c678d520003e0fe7867f4e626aab59d9c344eaa51f1973899a61c61b1683a", @typed={0xc, 0x130, 0x0, 0x0, @u64=0x6}, @nested={0x38, 0x97, 0x0, 0x1, [@typed={0x31, 0xa6, 0x0, 0x0, @binary="ce9c948213e589fcdd1281e8c5193f575144c352942f391693a06e927ab0c23f2b5aaa2e0d9638a891e877f521"}]}, @nested={0xe4, 0xf3, 0x0, 0x1, [@typed={0x8, 0xbb, 0x0, 0x0, @u32=0x7e}, @generic="ae8f7077b7a467af473a0eda906c1b56367b58cfd1c165ef4b0302a5f9d9cf41480a187bca5a508123bd2f6e66c47785fbc4e6cd7aaad3a4c8f5d49a9f28c900952b41a00ba08dc7a5c86767c3442f7b71ece49c92ec764e1d4e8cd9831593f1893f579dd6806f10c604158d96e0cd3f6ab3f6daa4f2429b128fa3493839fe110c8e34101f4f6926129dd21aac974fa0cbfbbca38ebb2a99fc3db260178bd1d4bc5b744c29745be874584df22c2457cf827919e9f33fa33e7eef5286ef5e1cde47606114deb07870e5bfce06c2a796022527bba93e5752f9"]}, @generic="c4fe69ecb6ca3695f18fd0102a1d7e7432dade367a415fcc149b2766e55a5f36fa57812ea9f7de7b8a2562508a768fafb2d35684554cab7991537b424f018da12671d3fcc983f330f6400018265302a2dfbae656426ea8baa7b4fa69c573a6d4af69c803facd287306313d3291e105349c712eaf437d27f12719ba97c50379c73c6c85cc70082ecabc03a2e523242334a68aa8c9f7d409af9920c278d87c5f446adcf9ebf2e9ec806f5936f620913757e594d9c31979d36c6d14f333308dc64a598f8450e0d25e0e3684bb501fb12f7259528f0cbfefb213653449e6b6dc23e8f7562550a839f60456eedbe57ca486f23e1b57af54483a88", @nested={0x1641, 0x93, 0x0, 0x1, [@typed={0xf5, 0x7, 0x0, 0x0, @binary="3043af66d0ad6f17886fdd085542b2556fd3532afa8cd11c1f7d22b471c676553481efe149e0e17d0cbc78c640a364b9a1cf39e144e10c6c17f5ba3df44116bb6eaaabbcafbda97b8db1fae951a52539181ec6270d21e9088288e845b452d874c15f68bb06d8b2ccb3ada8361df0dbf5648b2aad0d4b019e27fa218fa16e54c872556f941d73e7de9c42ca94b90706a48b1dfef375ee94c044c12f5a30bcddf1e73e41d7ca66a0e0b96d94bf25384e0b90bfba00587abf1b64251a603413dc5b9bf4d2f5c6cb7c69ec72bed55c53d2482aa3c6c363e292e7aa957021232c395f734dbcf02761091c2a4d2c389f687e7f2f"}, @nested={0x4, 0xab}, @nested={0x4, 0xd9}, @nested={0x14fc, 0xe7, 0x0, 0x1, [@nested={0x110a, 0x25, 0x0, 0x1, [@generic="a15e14bb0f624c98ed721b3c7bd8ff39f66d4ed86d4d0cac89bbb3440942e5a511dbd29227cd214cfc0617ce9c92d65f9f11670dc319dd0ec40592e005b8a3ace36dfa056a37d85aaa2bcde00d09fbddbe5d81ba27d3ca99c8d316c5496d3ab051dc6b84ef0120ceae25fd1714b5ced5326d62151e27183f958bcc73d306434071ac1817b69e80344de470fbdd6e31eb2784b001731d2a2f32cf22cc9c2e2b772523abc28d85d30876e1", @typed={0x27, 0x0, 0x0, 0x0, @str='/sys/kernel/tracing/buffer_size_kb\x00'}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xa49c}, @typed={0x8, 0x9, 0x0, 0x0, @fd}, @generic="fe8bcc57cf6c174301a2732551fcba1bb8b0ceb71cf7cea9", @generic="2b34303caff683dea3c4136c414e5be2ccf04bea0e75c620d78c501ca95c8d6d0105699bd6f3d4e1e1f05ecb67663ed8f873e920f3141895fe47d740f0cc36b342471deaa23d61dc44076124441d0a66b2435e4337e975a699249e995cab500b3df8fb5135b77d334d05e84be71969d2a4ff092370234cb923742cbdc06ac069d9a31fbcf53b6b0ddd3d6f52313c00260d93e4b35bbd66c92bbfc11c56bc0b8bbf0f899f3289b6781f0e101fcbc36f853997fe872d8e9039f4f946ac75bae9c755e63c98b34761ec3ad9baf1e477bffe0fb1c2aa49f2e71c4a4bcfdeb7b7b956faaea9b514140ce1a46f0898315ea2d05022af7188747ecc33c3c3a8f4c36572ca1024706efed56272801cef64aecaf2fb8dc3a3fe84b0a30b9c52d44aeeaaa0b9fbdec7c01ca0ecc33c1b630deaeff808afe64a36c7553fc2ce865223d9ec68db91ff00616e03c3365c5b934f5319cea0b4635a667b3c9ad2b1553a91922ab7f06df7a24d79cf1bb875f631c029cc9c074310caeec88ddcd35e6cf50e01f67896aa92ea2928c7f89d916f3228f7431b13057000cafe3748cb3abf297a050799eee0a9aafcc8f8171a072b450b58ddd93ae40ca1b3e7578cab8d70263ef3dbaf1ac463725a33d2d0aba1125d63143b1e153a56387621784d14bf8abc6401a1ee31ded48e47771e5f416ef6916c3c8bc2ccdc1b407cd76b3ecee32d0b767553a8e4695f06db5e36b8ae69689a27b351355916b634d863f7ad81c1f5d995b95e36f05eea3d68657fa3dc565a07a149851067191211f7e9033fd3c50a657ed6dd4e155106ff48c194ad0e2fe5ca53c54d12bad74c1ab8123cbae02e2b046cd29d4402d1f11350e959e05ee61e9788ec74f6a73b580518149aa6a80892a08e4e97cea270dfe6bdc3a96ecd312ad45b4ddaeeeb7fca86ff41bdc53f74d160ff5eab866330f0133d2bdb7c502d5e0447856bb9dd4c24e193726f913bb9a188f15b641ad236364258311ba49293d8583fa7c57faf24e8d495a7edf545d85fd2c8237d14c135f74b74e12f558a8412bbf96527ae8216912f4cae40491f038a4d4e78c74ad2567c4dc933508b4cde03f9cee6fa8c40e3f08c956b982bb1f416de54117ba71b95ae697c395032873cb2d95054b76de7b208332f4f81caeeac3511be5b9f80be11ce272503caa7aedc5d3bc320a72d71c4c28e73c68dc871d2d7da8eb8381722de47ba188d74af3bfd1d8fb336c498d1c674ef97008d657cb0ba6886338d2df286021922b8005de2c36ca08b7d46a07e89ba15ae13026c3c54844dad48b5b580eb7f2cf40205f4229b0721b3182c4c3ac78b568e79c6ae2ea667ef96713c5c27d4ef715b638d270732ea61b2bdf86b5de200250ae50eee03fe89e75a36205c2a410e11fd5c9f8b87b40b87c90c3f911a3235c14aab2afa904aae8cc000ff168f2bc08ef844c55b514b4896a62b51012fdef8303520bffb18bd0441ecaa961551a4554bc0673c44ccc45279f2902f90e172cd258bf48665f211f917dbf143e94cbc414fab4eaec338e53ea24e4a1e6c5dda514afe9142988bdce7d4b116c98c97d0cb9eedaa7e3c31d96dff8ddfee912dd9131f1e103af67030d6b349126cb4f6bc03dc5417a469bbd6b85cb10b43f5470597fa0225f7d423ec28ea7768cb5cf2848803d743c0119b221ed813fb5a708ccc05383e31bce5224da074f3505c2e1d2cdadb3fe85924944c3ef0dc0b68e49880da0786f509352f9ad378af4a8c9adc3cc9bde8b454db202dd2e53434250cdbf4c80d53ba22df0058150ae57492a3c20a4572ed26287b28ee4ef6122cbadc62b30c540067d60014f2d339f10a4523386621506150c5518ff11644e9b12a453a3a78eaf2ae5d811d2b961a9d6fa4f1c5d9be4107bb4a11ea04cdf27d029fc5ffdeec8dfdec98cdc6c3328c1a1695f0c3d9271a7d4f1c8f778ed5b6bbaca30a6f875c600986d5303147b7c11008860a26dc428f596e42c233230a260701805467feef332bd6e19315f1e877b8518c0207152cbdfdcdcda6b08028eb0b1e963c20b413fbca640b32e472fcad914b127c4fd4861ec5b2e0f7e240dd53aab7e82ef5911c72dccd4dd6d54fb5c4236a395b6a9a99fcbf8652ecf99b3a5ef5f6eb0a23975277d0ea219030a47b802deae9a5f75b20bc1059af457a0779c82212c1cd6a4d60d4ecb4d4562290dee5684e88e2b1522567b88e8edd33ff5486f7ea75a306388b2c366f3ec85018d8707a090d5487494c76479239e43628b25f26dc00be23fb9b09ed32b6da5b98918ef37c182ff1c06ce4d1c347e9180f59d8b86b17c4cfbb0a5c3b3d4b354d7cd0c16051c2f5afc4d31dc846cba1f483c1aa513f98687cf401ce84e0d434d42c3be5174beacc11a84e9b81da9a1a78549337c1d6bdeadc585f2a4e406659829755da02d4ab2d0cec5201a649a13d0b5171898c7fdc3f5662f4a42e00a95128b9f32766176cdfeaf86d7189803609ad8dab66d0675f806002959c22b75b75d92186b1c7c052dd8eac9a29bb91fbbcb24f7c8e7b875a7671fc935fedcc3ed2931a7c6d197f41def94428a0bc45d969a26080bbf0d13320628b59ab5cc1c4be77067704d1838552e0cff573e08a4b5ff522fd0da49f16e9494f579f316a71393c4b3298d4b880c3c9696d892f15aedec9aa8fa3bbae597be3fe156c4ca7c45bdcec494be2fe8f4f2bf00b6bad008eda2663c0b9738a97fd2f28afc6cb25c7e8cd8b9e5e19f6305e423b360989cef1be39a11fb8e7b711e9aafd364c8719a760ddaae1ad4d56c680c40473dd7a6acfdde8584d1187a6df1ab5694d5c877b7ad285c3138291138a031c99f14e1371c2dc7532dffb28e66bd4ddda2b99476a134cfa950463b85c6966958cbf9369ef5d0bf6010d91d05dfd7392a1a7658ec7c3e02faefc0dd98d04aa4bf71a5912cec42112716e272502ae367015b7046d091baeb85724a425292c9dbbfc871932afadbd5ab2646dfabc8da9e93247c65e021b7b0371a22bf88e440d456a0c67f8e0afec41b61454aa9685ea10293d593d036cd06ea88ff7f243900acd0866cdfada85f75a3173403658a29688b61c42dbecc8dff3ffd43bc281df1e467b9ef7580509fe1080ebc43b1ab55459dd44243b3fa94c56ca30133500e603aa16e2070fce03c07037839919651b953cce61af1ac5a01c5ab81aae624a9b8edf898615a2521d6f55466d65c12a7b07f81d67752ee7a69609b017f64612b37d7d2c75ad73e1858ba08dcdc639764646bff5b70ed3d049e0a34cdc10667b8b095fe5a24eae2f04cf31a138888db6cd5a0c409c495abb20ecda0598d53e92e1982ede874085a312c83c64bef40b84aa8ca05099aad18d2486dfe0632b2e4c9a1c55845c02585abfceca80ff1eb35304b60ad8c9f93437b24306bd232ed4eb747f2f39c9f99f166c0f31ef6380c82564f39527b4c38ebe98fdfdd23544c4bbab82657d2afdcd264bbe01f10c78dbd86a286d9d1bcf61c93e45494318c07dbbdd7ebdc766733ae91e73f7e66debc28e7bc901bf832eafd42ae0acb9826698a9b5468548390eafa99fc6801a718d39f947cab68f4f523a6a3beafaf4a4875cf288be422e27f14420a5df382869fead58fc5e7ab379fcc71b426236823b1a1c00f70b4a33d23178a3ad3138f15d64b646964173ac412ac9290189934423c99c17b9e9f3fd8eafba1c97951fb900c1bbaa66bf735a77ceab98f00c5e41c8775175eb3f1860e4039a2e991b88ed7133892bc02cbefde9eac91c3aee7cc78ed8acb8fd4fae2532dcc8f859c4b475e448308222e495e63e3603bbc52567559388aaf4c220f01d41e7723c7cf2af62402f01526594b5ac4488ffe8a24e2fa41c050620e6af937a0414af11b580fc5e98c35603a6eea8fa21a477a6ba8d1b86de5f2f539848d2678c7e0834cb85111ffab8bf3a3f3dfda28a14fa788892c55456340f18188d465486a75743684c6be5b8e0a21146e29b86536231ed6cfca9683c9efe945ba6755cbb88cbcadbb399b91c547f389533d9abe2edf618c007e9529fc0ae51d475caf9c2e47de69857d001aae5f3181fb1075b73bd9660b3a04636b047d36e27e3ece808ebb03024919a2c0702ed98bbaa35cf6eb7d3e30e3d6765fdd8af14352011604b981acdec6c90b4501b8f791309904a6e8c97e8e533ca4d4a23da121b51c21c26c3da15840189264a9e0d5481637189c7127497c35bd3138e6e7c9b6eba1911af9de2beb66dcf2fc2cf580bd6f0885d73384b6254bc3e208c6cafca83d52771f4c0bae4b5eb7c7f07a68494462d70872a1b3da131c9584664bf746abca5bb28a0573b45378a83d2cd310d7941862a6123e7719689b28f83a5369b809004a902fa8d4c506164e21754fe2d7a5e5c66f88b6a5cf6ab886d1c20b4fe347f1b7b12ba919796df40225ae0d9b9f51c8b04194cfc4eb8d1934b758906d77cd661e02f4db7dd3b3fecc9b0355e9fd0cca19665e5cf07f3935a13d5462402e4a306dd0801e75b8114472ec4c9b31e4555a8cd538b14c11c5780b1b37eec33486307071ff928a92f7d04edca0e06cd41d18eac3aebd25bca22e342519d9c13f89499c3558c61410eb24b484547179a3cc82cb702fc78ba1dad33345d076e88555b8416bb393b31a52709322269bdeed1af18bb65a8f77c80091c411007b19b47b4374bb16e9c57b994e12b98766511d9ff7252ffb1a03fdd94662ea0d7d451f329d5002e76d3f8271685102747fb3a416e38fecaa6713407dd7deac0778351c5c331c3f277949f287bbca867d5dfee3e727dbe0527b50a1f29a595788feff2d28263df8bc0a33fb6043c7804552b181e5f71e833917fa54a37e955054f34f3fa7742fe52edb09ae2a72c142f2ac65c97177cb1bff5f8001b89fe99ce847705f3bb1fa28f3708fb5a7327815b99720452fa6b637bdc90895dd0c43b9e11e275f425bd76b4269c027f5cbc0f4a548b34cfa2c969310d5f444f4b1ab1461df62cd05cda8d039b1646a6893de8847996e89b5febcf8447d02416d8f1577d4644cf0a227135e228830c008293438caf15061cab26c012c4e3341b1567f4b906f3017f941883029d945ff64b6395f1702fdf27e4b2327467c2354de454a69d93f6c6bd1796aaf28b6156e9f35afcf167fc1798f333b8ee0eb435d1f1d3030d27494aabe42da55e5d63fb41aaad7763a99c693358adc50372313ac96993c01e3bf1aba8220874e2c1decf07ae1a00a9047cae5156dd3a89bc4aa6456b144934e329fadbb3938f6c518c8edf5cab597aa73e6c227ec039ef8b86c1cdedbf9d0a6171eedab4db9ab033baccc9499a7470fcb0b34296bc225c842d9095da6f92556e566fd8d580d16b1968e159967ade7af93c3c81782a2e18185d329e263af16670acdf4ca2660ac9adf100a11bc6bc65831385a198ceac20b4844e2fe3c4e5e028c30d9ab66e7b4d7405f1e6675eac3bd1a130caac4c1b7f7a57b10c297fc19d60f8853aabfa6e6bb098675d5716770f5a82c875d5d2fb53e907e26006346a04a30343cccf3fe5268b656ec9b21d6b7a723823491d372d56fe9d418fa8d84d4e37fa8f930959dc3bd76b58504f79bb071a75331ae121d31b54f5e5ad8499da772d554271821ad0b11e5b732201147c1e14d1676d587198b7215bacb884f124e8699911ef855e4bf993cb3dc50965c4f236798f4d4c9c0f2c2fd80503b29fa0c3a4efab2a84950e100d1e1038c2ee9ebc1bcbee87558740c76319836a57304863f2ff2ff8a11b", @nested={0x4, 0xfd}]}, @nested={0x1c3, 0xc5, 0x0, 0x1, [@nested={0x4, 0x4a}, @generic="0f396b5d92b06420a089adb9543c0118a4c932fd718da5394fb696c1fd3b4a11043a344893e4267b7eb63cd4af404eae94bd532a8cebe70bb524d6f60864f44ac11a19a920eff29051a909bf818431a6d7726d74b8b762a139caea5e938cf33dcabd7e172273463bcd43fd0cb93ca5f5174ffee1334ab08c135f7daadfd807808b427345ee35a53a09de66532c65f50521a3685e7d4c9afed0f61b1c9c5765fc55ce84d3cd699c4b61be2bcd94a659c984ffe4e122b256c17ed00bffe0b31eb249a44052410208be1fca5bb3637b4c0c2382e516a7a11ae4f39154f2f8e015b0aaf0a25e21adb9da0a45ece2e0a46563b2f7", @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@loopback}, @generic="ebb6e0929e056e7feab7d3516713c85f24753c", @typed={0x8, 0x9b, 0x0, 0x0, @fd}, @nested={0x4, 0xf6}, @nested={0x4, 0xa0}, @generic="1e647a4faedb5b474469a4d69e2789d2c468a55f784640f31872a61e879c5d5c0ea86d6829b66644c47e9b6f85b81399eb3dd8f249c7267a75e05ee4b0b6f1a114154f6c81803c287fd636dec7333dea3b0a6244359a9527ddae6cc0f09099bac6eaf3d3036f8cc28035cecb1c8e83d9c79dfc789fa9efadbd0c8ac6308a529c118b4509303df3d81decea940bb2"]}, @nested={0x4, 0xac}, @typed={0x4, 0x4e}, @nested={0xe9, 0xba, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @fd}, @nested={0x4, 0x141}, @generic="0be12fe13aef6edf58921483916974992e78223abe91cfe529ded1078a461592e6d0cbffdcacf77b9fa74d7917af01cdaaecc96bba447d79cb08fc737709ee8f02eab04f648589bcc3ce9a97c6fd5942b7fdb41158d0c47fe4eaa4ef3f9743fef2b6892af4b6709b0655cbd182decbfce5bb7a2d504cb157595f0e23c56cdf88807d300d9ac7e0ac0be20ae25d36570fc31b9c3b740aee9f5a2f2ca17320811cd2897ec1bc8ff6ea27b80e99fb64b27b47c173d72ff831e67e327703b14b3b7c90bfe880862cdf768455ee7f776bb47537", @nested={0x4, 0x8d}, @nested={0x4, 0x13}]}, @generic, @nested={0x11e, 0xff, 0x0, 0x1, [@generic="02c64251e723459d4777ae284a780f2abd78a4c5b91b2a3c74676bccd98759a9086582c5c208d4482777bce515289961555b49aaf5e4ebcfa1a03473c3c8a03aa0ea33613c08871fba96d9f22fce6a371352d13484f91a5af36f35f36077893db32e5591d577af722ee72163df610636572a13f5f2f8868c3c147d78e77b551a6c8488bc654915188c0742808649b344a0e78cb6b48910adb9888f98fabf9826961a0a2f4263d0f501dab2c78e4b5c9e281730798ffad8ee414e00eba7213b222e94bb32", @nested={0x4, 0x14f}, @generic="b2b78562ce47ef3ba156c7655177dd8b6d4d9dc586a63ee4a5b255fda262b115483d3164ab81bf10b54d13047c74de61017f6a59b6cfaf9ba539108a6ba9bd4070a2", @typed={0xc, 0xc, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x6f}]}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="019aa26fba18aa5f45c447ec7922b54f579793f802eb576349e255fde1dcb8bdcf2095631388075cc39129325c7f40666bf43bdc8063cf56ebd273b3e31db1a4c9"]}, @typed={0x8, 0xd0, 0x0, 0x0, @fd=r3}]}]}, 0x3450}}, 0x40001) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) 9.766830763s ago: executing program 0 (id=2593): futex$auto(&(0x7f0000001680)=0x7, 0x5, 0x2800000, 0x0, &(0x7f0000001700), 0x7fffffff) r0 = socket(0x22, 0x2, 0x24) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200e983, 0xdf, 0xffffffff7fffffff, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) pselect6$auto(0x5, &(0x7f00000001c0)={[0xffffffffffffffd7, 0x2060, 0x6, 0x7, 0x40, 0x8, 0x99d5, 0x100, 0x100000001, 0x2, 0x0, 0x10000022, 0x8ce, 0x2, 0x4, 0xffffffffffffffa6]}, &(0x7f0000000240)={[0x86, 0x101, 0x0, 0x9, 0x1, 0x2, 0xc4, 0x7, 0xec, 0x0, 0x1, 0xa, 0x6b90, 0x5, 0x2, 0x8]}, 0x0, &(0x7f0000000340)={0x7fffffff, 0x79}, &(0x7f0000000380)="f04209965da7a6c6a45e79054c1b6a80145a99a5c61f9d272d7299e9fe1c8e875ecdd7822cce11321358812552a1afa736fd1d936ebb5a2d0bb28547a37646a74af1ee20057c69f9adbb650931171da132c30307076e8c2875a81cfa2af0d4e82aeb2d9b0ff2cb30772bcfcddeeec194e4ad67f5d6a04170787a356cedc2f7e153410c445cfd00d9a7c8d19cad50a91865582cb257410e9d96bb") ioctl$auto_RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000100)=0x5d1) r1 = socket(0xa, 0x5, 0x84) getsockopt$auto(r1, 0x82, 0x73, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyt2\x00', 0x600000, 0x0) ioctl$auto(0x3, 0x890b, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/hwdep\x00', 0x22040, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0xf7d, 0x4, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf25"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xa9, 0x6a3, 0x18) init_module$auto(&(0x7f0000000300)="9b21d0af03e23283a6c0648cda96faec8b18518d82e9bac6f8858883edf61443f8a9cab9e85659eb9d1014a342a8a85f91c5cec8036215fdb37b583fa0ef5615b324afcce9188ec8d8cb9e2f7786e4c5cee9a3055523e4dda48b14e46efa8872bdd61aa2906b1e903524e2a6228f9a1819c377fd35065eb0d35edfa028badaefca8c4a3a489f92bb473648329443aa70b20055fc6e4463504d417397afd7edaee8100d7a86c45de50be1a7b115c1ea921f6371", 0x10001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop13\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r2, 0x80044dff, 0x0) 9.332094551s ago: executing program 6 (id=2594): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x23, 0x80805, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/026/001\x00', 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/jfs/TxAnchor\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x3) open(0x0, 0x163340, 0x2f) socket(0x2b, 0x1, 0x1) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 8.3046754s ago: executing program 6 (id=2595): unshare$auto(0x40000080) ioperm$auto(0x7, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000380), 0x100, 0x8}, 0x1a}, 0x3, 0x6) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(r0, r0, 0x0, 0x7fff) 7.561218437s ago: executing program 0 (id=2596): close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) read$auto(0x3, 0x0, 0x18) acct$auto(&(0x7f0000000000)='/dev/snd/seq\x00') r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r1, &(0x7f0000004240)='\x01', 0x10000000004) ioctl$auto(0x3, 0xae41, 0x38) unshare$auto(0x40000080) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/001/001\x00', 0x1654c2, 0x0) mmap$auto(0x4000000000002000, 0x9, 0x9a, 0x8000000008011, r2, 0x8000000000) 5.985632866s ago: executing program 8 (id=2597): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010b03bd7000fcdbdf25050000997c4eca02901dfa55707096fb"], 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000080) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0x30280, 0x0) r5 = socket(0x10, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x202, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio1/id/type\x00', 0x440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/195, 0xc3) (async) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r7, 0x4004556b, 0xf) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010025df250a000000316705db227100d11fd288dec26d1692f56773fb5ac54e62babe9b005580fc12afc3a7cbc1a53cc7080fd855003b38114624d4177100001eafccee645b77058911b5bc1fafe27934c25408007aaa0788c51a1921f0beb6794138abb3e77003a1ccbd7e64f767a236"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRES64=r7], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.661729765s ago: executing program 6 (id=2598): socket(0x15, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000740)="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", 0x318) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x5, 0x100000000000009, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000004, 0xd, 0x6, 0x9}) r2 = socket(0x2, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setsockopt$auto(r2, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0xfffffffe, &(0x7f0000000000)=@query={@target_fd, 0x9, 0xfff, 0x7, 0x1, @count=0x10, 0x0, 0x8, 0x0, 0x3, 0x4}, 0x9f) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.523347274s ago: executing program 8 (id=2599): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x8000}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "6f14"}]}, 0x28}, 0x1, 0x0, 0x0, 0x48011}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe4, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}]}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x81}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24000080}, 0x45) (async) r3 = open(&(0x7f0000000340)='./file0\x00', 0x2100, 0x4) pwrite64$auto(r0, &(0x7f0000000380)='dvmrp1\x00', 0x5, 0x9) (async) ioctl$auto_BTRFS_IOC_FORGET_DEV(r3, 0x50009405, &(0x7f00000003c0)={@inferred=r3, "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"}) r5 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f00000013c0), 0x200, 0x0) (async) r6 = ioctl$auto_TUNSETPERSIST(r4, 0x400454cb, &(0x7f0000001400)=0x21a3) r7 = ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000001440)={0x6, 0x6, [{r5, 0x0, 0x3, 0x40}, {r3, 0x0, 0xf, 0xd6f1}, {r0}, {r6, 0x0, 0x100000000, 0xffffffffffffff00}]}) fcntl$auto_F_UNLCK(r9, 0x5, 0x2) (async) ioctl$auto_UDMABUF_CREATE(r9, 0x40187542, &(0x7f00000014c0)={r6, 0x1a19, 0x4, 0xfffffffffffffff0}) (async) r10 = signalfd$auto(r7, &(0x7f0000001500)={0x5}, 0x80000001) r11 = ioctl$auto_UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000001540)={0x6, 0x2, [{r3, 0x0, 0x100000000, 0x7}, {r10, 0x0, 0x4, 0x3}, {r6, 0x0, 0x8, 0x7}]}) (async) r15 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000015c0), 0x121001, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000001600)=@bpf_attr_4={0x2, r15, 0xf, r13}, 0x4) (async) r17 = ioctl$auto_TIOCGPTPEER2(r8, 0x5441, 0x0) bind$auto(r17, &(0x7f00000016c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x2}, 0x3}}, 0x0) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001700)='/sys/kernel/debug/block/nbd2/hctx0/tags\x00', 0x440, 0x0) (async) select$auto(0x6, &(0x7f0000001740)={[0x3, 0x1, 0x0, 0x10, 0x7, 0x9, 0x5, 0x7, 0x480000000000000, 0x1, 0xff, 0x2, 0x5, 0xa, 0x80000001, 0xb]}, &(0x7f00000017c0)={[0x5, 0xaa, 0x3ff, 0x2, 0x57, 0x0, 0x8, 0x4, 0x4, 0xffffffffffffff4e, 0x7f, 0xfffffffffffffff7, 0x401, 0x10, 0x40, 0x7]}, &(0x7f0000001840)={[0x0, 0x6, 0x100, 0x0, 0x6, 0x0, 0x1000, 0x6, 0xc, 0x1, 0x633, 0x7, 0xfffffffffffffffa, 0x2, 0x1ff, 0x6]}, &(0x7f00000018c0)={0x0, 0xcc7a}) pread64$auto(r4, &(0x7f0000001900)='+\x00', 0xab, 0x5) (async) openat$auto_ima_measurements_count_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001940), 0x8000, 0x0) (async) r18 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000019c0), r13) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r16, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r18, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001ac0), r12) (async) close_range$auto(r7, r14, 0x5) (async) ioctl$auto_EXT4_IOC_SHUTDOWN(r3, 0x8004587d, &(0x7f0000001b00)=0x7) connect$auto(r11, &(0x7f0000001b40)=@isdn={0x22, 0x3, 0x3, 0x2, 0x3}, 0x8) select$auto(0x9b6, &(0x7f0000001b80)={[0x0, 0xb60, 0x6, 0x2, 0x360, 0x8, 0x1, 0x9ad5, 0x9, 0x1, 0xffffffffffffff58, 0x8, 0x8, 0x7, 0x8, 0x80]}, &(0x7f0000001c00)={[0x7, 0x27d, 0x7, 0xbdd, 0xf86, 0x4, 0x2, 0x3, 0x6, 0x6bf, 0x7f, 0x19a3c4b5, 0x2, 0x5cc, 0x8, 0x9]}, &(0x7f0000001c80)={[0x7, 0xff, 0xe726, 0xd4fb, 0x3, 0x1, 0x8000, 0x6, 0x0, 0x7, 0x8, 0x9, 0x40, 0xffffffffffffffff, 0x4, 0x40]}, &(0x7f0000001d00)={0x49, 0x9}) 5.496833735s ago: executing program 3 (id=2600): r0 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) prctl$auto(0x21, 0x1, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_DISCOVERY={0x50, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x6}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x9, 0x3, "2a8f082130"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x2f, 0x3, "e08628d716661bf0daaa05f76ccc5a29a2abb8eeebf94e538e6443801769da40506625048ca31efb2ac620"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x9}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0xc800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r5) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010329bd7000fedbdf250c00000008000100", @ANYRES32, @ANYBLOB="f1ee7ef1ff663f60cc"], 0x1c}, 0x1, 0x1c00, 0x0, 0x80}, 0x8000) r7 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), r4) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB=')\t'], 0x28}, 0x1, 0x0, 0x0, 0x240008c5}, 0xc0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x132, 0x0, 0xfffffffffffffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}]}, 0x1c}}, 0x4044820) 5.335340569s ago: executing program 6 (id=2601): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.10/usb30/30-0:1.0/bAlternateSetting\x00', 0x480140, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, &(0x7f0000000080)={0x7ffeffff, 0xd, 0x800, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x8c48, 0x429f, 0x100, 0x7f, 0x125, 0x6, 0x2}, {0x1, 0x1, 0xe6, 0x5, 0x1, 0x0, 0x8, 0x8, 0xffffffff}}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_create$auto(0x4) socket(0x25, 0x1, 0x1) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8, 0x1, 0x1, 0x948b, 0x2, 0x15f4da0b, 0x6, 0x80000000080, 0x1fffe000000000, 0x80000001, 0x5, 0x6d3c, 0x401]}, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0xa) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x367, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x4, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) setxattrat$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, &(0x7f00000001c0)='ns/mnt\x00', 0x0, 0xb9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/veth0_virt_wifi/base_reachable_time\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) clone$auto(0xb74b, 0xfffffffe, &(0x7f00000003c0)=0x99, 0x0, 0xc) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/142, 0x8e) 5.253625992s ago: executing program 0 (id=2602): r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r0, 0x0, 0x400) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x5, 0x84) getrandom$auto(0x0, 0x6000000, 0x3) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f2, 0x24) 5.171602506s ago: executing program 8 (id=2603): add_key$auto_KEY_SPEC_USER_SESSION_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r0, 0x7fffffff, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x10) mmap$auto(0x8000000000002001, 0xe97f, 0xdf, 0xebe, 0x402, 0x8004) r1 = socket(0xa, 0x3, 0x2) getsockopt$auto(r1, 0xff, 0x7, 0x0, 0x0) r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) setsockopt$auto(r2, 0x9, 0x4, 0x0, 0x8) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18b042, 0x0) setsockopt$auto(r1, 0x9, 0x3ff, 0x0, 0x8000b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi0\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(r6, 0x7, 0x7ffffff8, 0x3, 0x0, 0x3) 4.412049981s ago: executing program 3 (id=2604): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 4.200292377s ago: executing program 6 (id=2605): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000300", @ANYBLOB="5e0027619b4e0635ec3417757c36720add70ab0343"], 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) read$auto(r0, &(0x7f00000000c0)='\x00', 0x2) 4.12926362s ago: executing program 3 (id=2606): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x7ff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0xa, 0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/auth.unix.ip/flush\x00', 0x2000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xc, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x7, 0x3, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_XFS_IOC_FREESP64(r2, 0x40305825, 0x0) prctl$auto(0x400, 0xfffffffffffffff9, 0x0, 0x10000, 0x100000000400007) madvise$auto(0x4, 0xfffffffffffff001, 0x19) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf2508000000"], 0xfffffffffffffcd1}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 2.969958444s ago: executing program 0 (id=2607): prctl$auto(0x2f, 0x4, 0xffffffffffffffff, 0x2, 0x0) socket(0x22, 0x3, 0xa) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket(0x2, 0x1, 0x0) r2 = epoll_create$auto(0x4) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r1) r3 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_GTP_CMD_GETPDP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x7}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) 2.80832443s ago: executing program 6 (id=2608): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x100) r1 = getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x4005) getsockopt$auto_SO_ERROR(r0, 0x8, 0x4, 0x0, 0x0) tgkill$auto(0x1, 0x1, 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4d0440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setuid$auto(0xe) io_uring_register$auto(0x2, 0x0, 0x0, 0x1000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x11, 0x80003, 0x304) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/packet\x00', 0x2840, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001080)=""/244, 0xf4) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) msync$auto(0x0, 0xe0, 0x6) ioctl$auto_VHOST_SET_BACKEND_FEATURES2(r1, 0x4008af25, &(0x7f0000000000)=0x7) socket(0x1, 0x2, 0x3a) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x5}, 0xa) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) pipe$auto(0x0) 2.794909059s ago: executing program 3 (id=2609): prctl$auto(0x2f, 0x4, 0xffffffffffffffff, 0x2, 0x0) socket(0x22, 0x3, 0xa) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) close_range$auto(0x2, 0xa, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket(0x2, 0x1, 0x0) r2 = epoll_create$auto(0x4) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r1) r3 = syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_GTP_CMD_GETPDP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0xfffffffffffffffb}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x7}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) 2.250335996s ago: executing program 8 (id=2610): close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) read$auto(0x3, 0x0, 0x18) acct$auto(&(0x7f0000000000)='/dev/snd/seq\x00') r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r1, &(0x7f0000004240)='\x01', 0x10000000004) ioctl$auto(0x3, 0xae41, 0x38) unshare$auto(0x40000080) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/001/001\x00', 0x1654c2, 0x0) mmap$auto(0x4000000000002000, 0x9, 0x9a, 0x8000000008011, r2, 0x8000000000) 1.756060571s ago: executing program 3 (id=2611): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x4eb14fed, 0x444e96fd, 0xffffffffffffffff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) r2 = getpid() rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0xfffffffffffffffc, 0x400005, 0xe3, 0x18, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) mincore$auto(0x5, 0xfffffffffffffffd, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x3f000000) 1.555464473s ago: executing program 0 (id=2612): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x8) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 1.112579775s ago: executing program 8 (id=2613): r0 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) prctl$auto(0x21, 0x1, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_DISCOVERY={0x50, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x6}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x9, 0x3, "2a8f082130"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x2f, 0x3, "e08628d716661bf0daaa05f76ccc5a29a2abb8eeebf94e538e6443801769da40506625048ca31efb2ac620"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x9}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0xc800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r5) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010329bd7000fedbdf250c00000008000100", @ANYRES32, @ANYBLOB="f1ee7ef1ff663f60cc"], 0x1c}, 0x1, 0x1c00, 0x0, 0x80}, 0x8000) r7 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), r4) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB=')\t'], 0x28}, 0x1, 0x0, 0x0, 0x240008c5}, 0xc0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x132, 0x0, 0xfffffffffffffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}]}, 0x1c}}, 0x4044820) 64.050289ms ago: executing program 0 (id=2614): r0 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) prctl$auto(0x21, 0x1, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_DISCOVERY={0x60, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x6}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1ff}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xa, 0x3, "2a8f08213066"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x2f, 0x3, "e08628d716661bf0daaa05f76ccc5a29a2abb8eeebf94e538e6443801769da40506625048ca31efb2ac620"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x9}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0xc800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r4) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r4, 0x0, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB=')\t'], 0x28}, 0x1, 0x0, 0x0, 0x240008c5}, 0xc0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x132, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}]}, 0x1c}}, 0x4044820) 0s ago: executing program 8 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) r1 = dup$auto(r0) ioctl$auto_USBDEVFS_CLEAR_HALT(r1, 0x80045515, 0x0) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x890) epoll_create$auto(0x3e) iopl$auto(0x3) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r2, 0x0, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/set_event\x00', 0x2000, 0x0) read$auto_ftrace_set_event_fops_trace_events(r3, &(0x7f00000004c0)=""/4087, 0xff7) (fail_nth: 2) kernel console output (not intermixed with test programs): me: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 728.949380][T14743] Call Trace: [ 728.949391][T14743] [ 728.949402][T14743] dump_stack_lvl+0x16c/0x1f0 [ 728.949447][T14743] should_fail_ex+0x512/0x640 [ 728.949490][T14743] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 728.949529][T14743] should_failslab+0xc2/0x120 [ 728.949566][T14743] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 728.949602][T14743] ? __alloc_skb+0x2b2/0x380 [ 728.949638][T14743] __alloc_skb+0x2b2/0x380 [ 728.949678][T14743] ? __pfx___alloc_skb+0x10/0x10 [ 728.949711][T14743] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 728.949746][T14743] ? __lock_acquire+0xaa4/0x1ba0 [ 728.949792][T14743] netlink_alloc_large_skb+0x69/0x130 [ 728.949832][T14743] netlink_sendmsg+0x6a1/0xdd0 [ 728.949875][T14743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.949928][T14743] ____sys_sendmsg+0xa95/0xc70 [ 728.949972][T14743] ? copy_msghdr_from_user+0x10a/0x160 [ 728.950004][T14743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.950064][T14743] ___sys_sendmsg+0x134/0x1d0 [ 728.950099][T14743] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.950182][T14743] __sys_sendmsg+0x16d/0x220 [ 728.950216][T14743] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.950260][T14743] ? rcu_is_watching+0x12/0xc0 [ 728.950300][T14743] do_syscall_64+0xcd/0x230 [ 728.950345][T14743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.950377][T14743] RIP: 0033:0x7fb3c678e969 [ 728.950401][T14743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.950428][T14743] RSP: 002b:00007fb3c7664038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.950457][T14743] RAX: ffffffffffffffda RBX: 00007fb3c69b5fa0 RCX: 00007fb3c678e969 [ 728.950478][T14743] RDX: 0000000000064810 RSI: 0000200000000180 RDI: 0000000000000003 [ 728.950496][T14743] RBP: 00007fb3c7664090 R08: 0000000000000000 R09: 0000000000000000 [ 728.950515][T14743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.950534][T14743] R13: 0000000000000000 R14: 00007fb3c69b5fa0 R15: 00007ffd6e2b8198 [ 728.950572][T14743] [ 729.336852][T14748] input: f¬ as /devices/virtual/input/input17 [ 739.112719][T14898] FAULT_INJECTION: forcing a failure. [ 739.112719][T14898] name failslab, interval 1, probability 0, space 0, times 0 [ 739.210421][T14898] CPU: 1 UID: 0 PID: 14898 Comm: syz.4.1921 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 739.210467][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 739.210484][T14898] Call Trace: [ 739.210494][T14898] [ 739.210505][T14898] dump_stack_lvl+0x16c/0x1f0 [ 739.210565][T14898] should_fail_ex+0x512/0x640 [ 739.210615][T14898] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 739.210653][T14898] should_failslab+0xc2/0x120 [ 739.210696][T14898] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 739.210728][T14898] ? __pfx___might_resched+0x10/0x10 [ 739.210760][T14898] ? __anon_vma_prepare+0x344/0x5e0 [ 739.210798][T14898] __anon_vma_prepare+0x344/0x5e0 [ 739.210827][T14898] ? __pfx___pte_alloc+0x10/0x10 [ 739.210871][T14898] __vmf_anon_prepare+0x11c/0x240 [ 739.210917][T14898] do_pte_missing+0x1194/0x3fb0 [ 739.210950][T14898] ? _raw_spin_unlock+0x28/0x50 [ 739.210983][T14898] ? __pmd_alloc+0x3c2/0x870 [ 739.211030][T14898] __handle_mm_fault+0x103d/0x2a40 [ 739.211089][T14898] ? __pfx___handle_mm_fault+0x10/0x10 [ 739.211159][T14898] handle_mm_fault+0x3fe/0xad0 [ 739.211199][T14898] __get_user_pages+0x771/0x36f0 [ 739.211260][T14898] ? __pfx_mt_find+0x10/0x10 [ 739.211309][T14898] ? __pfx___get_user_pages+0x10/0x10 [ 739.211376][T14898] populate_vma_page_range+0x278/0x3a0 [ 739.211411][T14898] ? __pfx_populate_vma_page_range+0x10/0x10 [ 739.211464][T14898] ? __pfx_find_vma_intersection+0x10/0x10 [ 739.211513][T14898] ? do_mmap+0x69c/0x11b0 [ 739.211565][T14898] __mm_populate+0x1d8/0x380 [ 739.211597][T14898] ? __pfx___mm_populate+0x10/0x10 [ 739.211630][T14898] ? up_write+0x1b2/0x520 [ 739.211689][T14898] vm_mmap_pgoff+0x362/0x450 [ 739.211742][T14898] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 739.211800][T14898] ? __x64_sys_futex+0x1e0/0x4c0 [ 739.211833][T14898] ? __x64_sys_futex+0x1e9/0x4c0 [ 739.211873][T14898] ksys_mmap_pgoff+0x7d/0x5c0 [ 739.211919][T14898] ? rcu_is_watching+0x12/0xc0 [ 739.211953][T14898] __x64_sys_mmap+0x125/0x190 [ 739.211990][T14898] do_syscall_64+0xcd/0x230 [ 739.212037][T14898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.212070][T14898] RIP: 0033:0x7fb194b8e969 [ 739.212103][T14898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.212136][T14898] RSP: 002b:00007fb195a3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 739.212167][T14898] RAX: ffffffffffffffda RBX: 00007fb194db6080 RCX: 00007fb194b8e969 [ 739.212201][T14898] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 739.212220][T14898] RBP: 00007fb194c10ab1 R08: 0000000000000002 R09: 0000000000008000 [ 739.212239][T14898] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 739.212258][T14898] R13: 0000000000000000 R14: 00007fb194db6080 R15: 00007ffeee965748 [ 739.212310][T14898] [ 740.066609][T14904] FAULT_INJECTION: forcing a failure. [ 740.066609][T14904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.117211][T14904] CPU: 1 UID: 0 PID: 14904 Comm: syz.0.1923 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 740.117258][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 740.117276][T14904] Call Trace: [ 740.117285][T14904] [ 740.117296][T14904] dump_stack_lvl+0x16c/0x1f0 [ 740.117341][T14904] should_fail_ex+0x512/0x640 [ 740.117388][T14904] strncpy_from_user+0x3b/0x2e0 [ 740.117430][T14904] getname_flags.part.0+0x8f/0x550 [ 740.117474][T14904] getname_flags+0x93/0xf0 [ 740.117518][T14904] do_sys_openat2+0xb8/0x1d0 [ 740.117557][T14904] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.117609][T14904] ? __pfx___might_resched+0x10/0x10 [ 740.117653][T14904] __x64_sys_openat+0x174/0x210 [ 740.117694][T14904] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.117737][T14904] ? rcu_is_watching+0x12/0xc0 [ 740.117776][T14904] do_syscall_64+0xcd/0x230 [ 740.117820][T14904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.117850][T14904] RIP: 0033:0x7fb3c678e969 [ 740.117874][T14904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.117902][T14904] RSP: 002b:00007fb3c7643038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 740.117929][T14904] RAX: ffffffffffffffda RBX: 00007fb3c69b6080 RCX: 00007fb3c678e969 [ 740.117948][T14904] RDX: 0000000000109041 RSI: 0000200000007380 RDI: ffffffffffffff9c [ 740.117968][T14904] RBP: 00007fb3c6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 740.117987][T14904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.118005][T14904] R13: 0000000000000000 R14: 00007fb3c69b6080 R15: 00007ffd6e2b8198 [ 740.118045][T14904] [ 741.169201][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1924'. [ 742.690218][T14919] input: f¬ as /devices/virtual/input/input18 [ 742.894866][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 743.826079][T14947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1932'. [ 744.085429][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1933'. [ 745.473278][T14974] FAULT_INJECTION: forcing a failure. [ 745.473278][T14974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.473323][T14974] CPU: 0 UID: 0 PID: 14974 Comm: syz.1.1939 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 745.473362][T14974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 745.473380][T14974] Call Trace: [ 745.473391][T14974] [ 745.473402][T14974] dump_stack_lvl+0x16c/0x1f0 [ 745.473447][T14974] should_fail_ex+0x512/0x640 [ 745.473497][T14974] _copy_from_user+0x2e/0xd0 [ 745.473544][T14974] move_addr_to_kernel+0x65/0x170 [ 745.473593][T14974] __sys_sendto+0x1be/0x510 [ 745.473623][T14974] ? __pfx___sys_sendto+0x10/0x10 [ 745.473684][T14974] ? xfd_validate_state+0x5d/0x180 [ 745.473737][T14974] ? rcu_is_watching+0x12/0xc0 [ 745.473770][T14974] __x64_sys_sendto+0xe0/0x1c0 [ 745.473797][T14974] ? do_syscall_64+0x91/0x230 [ 745.473837][T14974] ? lockdep_hardirqs_on+0x7c/0x110 [ 745.473876][T14974] do_syscall_64+0xcd/0x230 [ 745.473927][T14974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.473965][T14974] RIP: 0033:0x7f2d601907fc [ 745.473988][T14974] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 745.474039][T14974] RSP: 002b:00007f2d5dff4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 745.474076][T14974] RAX: ffffffffffffffda RBX: 00007f2d5dff4fc0 RCX: 00007f2d601907fc [ 745.474103][T14974] RDX: 0000000000000020 RSI: 00007f2d5dff5010 RDI: 0000000000000006 [ 745.474122][T14974] RBP: 0000000000000000 R08: 00007f2d5dff4f14 R09: 000000000000000c [ 745.474141][T14974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 745.474159][T14974] R13: 00007f2d5dff4f68 R14: 00007f2d5dff5010 R15: 0000000000000000 [ 745.474199][T14974] [ 745.714912][ T30] audit: type=1326 audit(4294967327.740:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14979 comm="syz.4.1940" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb194b8e969 code=0x0 [ 746.228069][T14992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1943'. [ 746.568063][T14997] input: f¬ as /devices/virtual/input/input20 [ 747.468933][ T30] audit: type=1804 audit(4294967329.500:117): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1950" name="file0" dev="tmpfs" ino=2866 res=1 errno=0 [ 747.490419][ T30] audit: type=1800 audit(4294967329.520:118): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1950" name="file0" dev="tmpfs" ino=2866 res=0 errno=0 [ 748.882068][T15048] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(8) [ 749.466251][T15055] input: f¬ as /devices/virtual/input/input21 [ 752.326943][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.333249][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.583780][T15117] input: f¬ as /devices/virtual/input/input22 [ 757.931999][T15164] input: f¬ as /devices/virtual/input/input23 [ 760.114481][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 764.449729][T15240] input: f¬ as /devices/virtual/input/input24 [ 766.954477][T15288] input: f¬ as /devices/virtual/input/input25 [ 768.394009][T15308] input: f¬ as /devices/virtual/input/input26 [ 769.466349][T15322] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(8) [ 770.099760][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2016'. [ 772.043702][T15374] netlink: 'syz.3.2023': attribute type 10 has an invalid length. [ 772.070755][T15374] netlink: 230 bytes leftover after parsing attributes in process `syz.3.2023'. [ 772.076094][T15369] Invalid ELF header magic: != ELF [ 773.121488][T15380] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2025'. [ 773.353840][T15372] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 773.353840][T15372] The task syz.1.2022 (15372) triggered the difference, watch for misbehavior. [ 776.677276][T15450] FAULT_INJECTION: forcing a failure. [ 776.677276][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 776.677319][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.1.2036 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 776.677354][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 776.677371][T15450] Call Trace: [ 776.677380][T15450] [ 776.677390][T15450] dump_stack_lvl+0x16c/0x1f0 [ 776.677431][T15450] should_fail_ex+0x512/0x640 [ 776.677471][T15450] ? fs_reclaim_acquire+0xae/0x150 [ 776.677515][T15450] ? tomoyo_encode2+0x100/0x3e0 [ 776.677551][T15450] should_failslab+0xc2/0x120 [ 776.677586][T15450] __kmalloc_noprof+0xd2/0x510 [ 776.677617][T15450] ? d_absolute_path+0x136/0x1a0 [ 776.677658][T15450] tomoyo_encode2+0x100/0x3e0 [ 776.677702][T15450] tomoyo_encode+0x29/0x50 [ 776.677740][T15450] tomoyo_realpath_from_path+0x18f/0x6e0 [ 776.677793][T15450] tomoyo_path_number_perm+0x245/0x580 [ 776.677825][T15450] ? tomoyo_path_number_perm+0x237/0x580 [ 776.677862][T15450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.677898][T15450] ? find_held_lock+0x2b/0x80 [ 776.677958][T15450] ? find_held_lock+0x2b/0x80 [ 776.677985][T15450] ? hook_file_ioctl_common+0x145/0x410 [ 776.678032][T15450] ? __fget_files+0x20e/0x3c0 [ 776.678084][T15450] security_file_ioctl+0x9b/0x240 [ 776.678121][T15450] __x64_sys_ioctl+0xb7/0x200 [ 776.678164][T15450] do_syscall_64+0xcd/0x230 [ 776.678204][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.678233][T15450] RIP: 0033:0x7f2d6018e969 [ 776.678255][T15450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.678282][T15450] RSP: 002b:00007f2d5dfb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.678309][T15450] RAX: ffffffffffffffda RBX: 00007f2d603b6160 RCX: 00007f2d6018e969 [ 776.678328][T15450] RDX: 0000000000000038 RSI: 00000000402c542b RDI: 0000000000000003 [ 776.678345][T15450] RBP: 00007f2d5dfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 776.678361][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.678377][T15450] R13: 0000000000000001 R14: 00007f2d603b6160 R15: 00007ffe0d2ace88 [ 776.678414][T15450] [ 776.678439][T15450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 777.299542][T15446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2037'. [ 777.303238][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.421290][T15446] bridge_slave_1 (unregistering): left allmulticast mode [ 777.421315][T15446] bridge_slave_1 (unregistering): left promiscuous mode [ 777.422411][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.428255][T15491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2048'. [ 780.477020][ T30] audit: type=1804 audit(4294967328.120:119): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2047" name="/newroot/432/file0" dev="tmpfs" ino=2354 res=1 errno=0 [ 780.556812][ T30] audit: type=1800 audit(4294967328.120:120): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2047" name="file0" dev="tmpfs" ino=2354 res=0 errno=0 [ 780.921555][T15499] FAULT_INJECTION: forcing a failure. [ 780.921555][T15499] name failslab, interval 1, probability 0, space 0, times 0 [ 780.963026][T15499] CPU: 1 UID: 0 PID: 15499 Comm: syz.0.2049 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 780.963075][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 780.963095][T15499] Call Trace: [ 780.963105][T15499] [ 780.963117][T15499] dump_stack_lvl+0x16c/0x1f0 [ 780.963167][T15499] should_fail_ex+0x512/0x640 [ 780.963212][T15499] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 780.963254][T15499] should_failslab+0xc2/0x120 [ 780.963294][T15499] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 780.963328][T15499] ? __proc_create+0xc3/0x8c0 [ 780.963375][T15499] ? __proc_create+0x2ce/0x8c0 [ 780.963416][T15499] __proc_create+0x2ce/0x8c0 [ 780.963455][T15499] ? __pfx___proc_create+0x10/0x10 [ 780.963496][T15499] ? proc_register+0x314/0x5f0 [ 780.963542][T15499] proc_create_reg+0x7d/0x180 [ 780.963580][T15499] ? __pfx_kcm_stats_seq_show+0x10/0x10 [ 780.963623][T15499] proc_create_net_single+0x86/0x170 [ 780.963662][T15499] ? __pfx_proc_create_net_single+0x10/0x10 [ 780.963710][T15499] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 780.963751][T15499] kcm_proc_init_net+0x52/0x120 [ 780.963792][T15499] ops_init+0x1df/0x5f0 [ 780.963834][T15499] setup_net+0x21e/0x850 [ 780.963876][T15499] ? __pfx_setup_net+0x10/0x10 [ 780.963911][T15499] ? lockdep_init_map_type+0x5c/0x280 [ 780.963953][T15499] ? __pfx_down_read_killable+0x10/0x10 [ 780.964009][T15499] ? debug_mutex_init+0x37/0x70 [ 780.964066][T15499] copy_net_ns+0x2a6/0x5f0 [ 780.964111][T15499] create_new_namespaces+0x3ea/0xad0 [ 780.964157][T15499] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 780.964198][T15499] ksys_unshare+0x45b/0xa40 [ 780.964242][T15499] ? __pfx_ksys_unshare+0x10/0x10 [ 780.964284][T15499] ? xfd_validate_state+0x5d/0x180 [ 780.964338][T15499] ? rcu_is_watching+0x12/0xc0 [ 780.964386][T15499] __x64_sys_unshare+0x31/0x40 [ 780.964431][T15499] do_syscall_64+0xcd/0x230 [ 780.964478][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.964512][T15499] RIP: 0033:0x7fb3c678e969 [ 780.964539][T15499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.964572][T15499] RSP: 002b:00007fb3c7664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 780.964602][T15499] RAX: ffffffffffffffda RBX: 00007fb3c69b5fa0 RCX: 00007fb3c678e969 [ 780.964625][T15499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 780.964645][T15499] RBP: 00007fb3c6810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 780.964665][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.964684][T15499] R13: 0000000000000000 R14: 00007fb3c69b5fa0 R15: 00007ffd6e2b8198 [ 780.964726][T15499] [ 784.909065][T15541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2059'. [ 786.034272][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 786.335301][T15563] Invalid ELF header magic: != ELF [ 786.346989][T15548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2060'. [ 789.113326][T15599] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x7f94193cd pfn:0x79400 [ 789.283793][T15599] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 789.306209][T15599] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 789.397826][T15599] raw: 00000007f94193cd 0000000000000000 0000000500000003 0000000000000000 [ 789.479357][T15599] page dumped because: unmovable page [ 789.519514][T15599] page_owner tracks the page as allocated [ 789.547170][T15599] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5825, tgid 5825 (syz-executor), ts 93425977662, free_ts 93212488006 [ 789.684618][T15599] post_alloc_hook+0x181/0x1b0 [ 789.689613][T15599] get_page_from_freelist+0x135c/0x3920 [ 789.695312][T15599] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 789.701778][T15599] alloc_pages_mpol+0x1fb/0x550 [ 789.707220][T15599] alloc_pages_noprof+0x131/0x390 [ 789.712476][T15599] __vmalloc_node_range_noprof+0x732/0x1540 [ 789.718608][T15599] vmalloc_user_noprof+0x6b/0x90 [ 789.723713][T15599] kcov_ioctl+0x4c/0x730 [ 789.728136][T15599] __x64_sys_ioctl+0x190/0x200 [ 789.734448][T15599] do_syscall_64+0xcd/0x230 [ 789.739179][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.745219][T15599] page last free pid 5816 tgid 5816 stack trace: [ 789.751726][T15599] free_unref_folios+0x999/0x1630 [ 789.760060][T15599] folios_put_refs+0x56f/0x740 [ 789.765243][T15599] free_pages_and_swap_cache+0x245/0x4a0 [ 789.771285][T15599] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 789.777809][T15599] tlb_finish_mmu+0x168/0x7b0 [ 789.782633][T15599] vms_clear_ptes+0x55e/0x770 [ 789.788476][T15599] vms_complete_munmap_vmas+0x1ca/0x970 [ 789.794250][T15599] do_vmi_align_munmap+0x43b/0x7d0 [ 789.799539][T15599] do_vmi_munmap+0x208/0x3e0 [ 789.804261][T15599] __vm_munmap+0x19a/0x390 [ 789.810001][T15599] __x64_sys_munmap+0x59/0x80 [ 789.814849][T15599] do_syscall_64+0xcd/0x230 [ 789.827831][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.387124][T15223] vlan1: left allmulticast mode [ 791.392052][T15223] veth0_vlan: left allmulticast mode [ 791.479416][T15223] vlan1: left promiscuous mode [ 791.485891][T15223] bridge0: port 3(vlan1) entered disabled state [ 791.595021][T15223] bridge_slave_1: left allmulticast mode [ 791.606670][T15223] bridge_slave_1: left promiscuous mode [ 791.626699][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.636343][T15223] bridge_slave_0: left allmulticast mode [ 791.646471][T15223] bridge_slave_0: left promiscuous mode [ 791.652213][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.317304][T15223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.449873][T15223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.473323][T15223] bond0 (unregistering): Released all slaves [ 793.658831][T15665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.669680][T15665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.680449][T15665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.691552][T15665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.699587][T15665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 794.035197][T15223] tipc: Left network mode [ 794.557160][T15674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2091'. [ 795.322873][T15664] chnl_net:caif_netlink_parms(): no params data found [ 795.441678][T15679] openvswitch: HfR: Dropping previously announced user features [ 795.461580][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 795.756543][ T55] Bluetooth: hci3: command tx timeout [ 795.808525][T15664] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.833148][T15664] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.860856][T15664] bridge_slave_0: entered allmulticast mode [ 795.886297][T15664] bridge_slave_0: entered promiscuous mode [ 795.922962][T15664] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.932191][T15664] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.944733][T15664] bridge_slave_1: entered allmulticast mode [ 795.955408][T15664] bridge_slave_1: entered promiscuous mode [ 796.285226][T15664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.354623][T15664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.520345][T15703] netlink: zone id is out of range [ 796.535221][T15664] team0: Port device team_slave_0 added [ 796.542908][T15703] netlink: zone id is out of range [ 796.633539][T15664] team0: Port device team_slave_1 added [ 796.862005][T15664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.879027][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.909705][T15664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.001799][T15664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.012771][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.046551][T15664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.264674][T15712] blkio.reset_stats is deprecated [ 797.288856][T15712] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2103'. [ 797.439890][T15664] hsr_slave_0: entered promiscuous mode [ 797.477814][T15664] hsr_slave_1: entered promiscuous mode [ 797.497334][T15664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 797.534496][T15664] Cannot create hsr debugfs directory [ 797.628412][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 797.846625][ T55] Bluetooth: hci3: command tx timeout [ 799.379456][T15664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 799.532269][T15664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 799.590285][T15664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 799.688981][T15664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 799.918873][ T55] Bluetooth: hci3: command tx timeout [ 800.138370][T15664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.225260][T15664] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.423803][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.431037][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.485918][T15224] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.493192][T15224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.064411][T15223] hsr_slave_0: left promiscuous mode [ 801.084196][T15223] hsr_slave_1: left promiscuous mode [ 801.097209][T15223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.104737][T15223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.116137][T15223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.126109][T15223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.191183][T15223] veth1_macvtap: left promiscuous mode [ 801.198444][T15223] veth1_vlan: left promiscuous mode [ 801.205370][T15223] veth0_vlan: left promiscuous mode [ 801.585493][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2119'. [ 802.001990][ T55] Bluetooth: hci3: command tx timeout [ 802.045523][T15223] team0 (unregistering): Port device team_slave_1 removed [ 802.118850][T15223] team0 (unregistering): Port device team_slave_0 removed [ 803.105963][T15664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.453471][T15794] input: f¬ as /devices/virtual/input/input27 [ 804.104311][ T30] audit: type=1804 audit(4294967351.778:121): pid=15805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2124" name="/newroot/511/file0" dev="tmpfs" ino=2748 res=1 errno=0 [ 804.126823][ T30] audit: type=1800 audit(4294967351.798:122): pid=15805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2124" name="file0" dev="tmpfs" ino=2748 res=0 errno=0 [ 804.180933][T15806] input: f¬ as /devices/virtual/input/input28 [ 804.302351][T15664] veth0_vlan: entered promiscuous mode [ 804.355082][T15664] veth1_vlan: entered promiscuous mode [ 804.776841][T15664] veth0_macvtap: entered promiscuous mode [ 804.831957][T15664] veth1_macvtap: entered promiscuous mode [ 804.913967][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.924686][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.939296][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.952202][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.963000][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.974051][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.000709][T15664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.089687][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.108446][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.125849][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.137561][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.158542][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.170372][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.185444][T15664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.268035][T15664] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.328622][T15664] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.339752][T15664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.349451][T15664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.623443][ T8252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.635568][ T8252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.843333][ T8252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.908434][ T8252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.920867][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 807.959864][T15871] usb usb11: usbfs: interface 0 claimed by hub while 'syz.5.2138' sets config #3 [ 809.226175][T15886] lo: entered allmulticast mode [ 809.330220][T15887] lo: left allmulticast mode [ 811.463077][T15929] input: f¬ as /devices/virtual/input/input29 [ 812.421663][T15936] svc: failed to register nfsdv3 RPC service (errno 111). [ 812.453621][T15936] svc: failed to register nfsaclv3 RPC service (errno 111). [ 813.781261][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.787763][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.033960][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2171'. [ 817.059775][T15996] veth0_macvtap: left promiscuous mode [ 817.080312][T15996] macvtap0: entered promiscuous mode [ 817.088102][T15996] macvtap0: entered allmulticast mode [ 817.902399][T16015] input: f¬ as /devices/virtual/input/input30 [ 820.738364][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'. [ 821.947658][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2187'. [ 823.243028][T15665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 823.253173][T15665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 823.261361][T15665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 823.278323][T15665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 823.287904][T15665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 824.111973][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 824.127254][T16108] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2197'. [ 824.354831][T15224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.626486][T15224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.760634][T15224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.033863][T15224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.448533][T15665] Bluetooth: hci4: command tx timeout [ 825.507682][T16091] chnl_net:caif_netlink_parms(): no params data found [ 825.978352][T15224] team0: left allmulticast mode [ 826.000859][T15224] team_slave_0: left allmulticast mode [ 826.024071][T15224] team_slave_1: left allmulticast mode [ 826.045305][T15224] team0: left promiscuous mode [ 826.063312][T15224] team_slave_0: left promiscuous mode [ 826.114222][T15224] team_slave_1: left promiscuous mode [ 826.120479][T15224] bridge0: port 3(team0) entered disabled state [ 826.142731][T15224] bridge_slave_0: left allmulticast mode [ 826.151832][T15224] bridge_slave_0: left promiscuous mode [ 826.163070][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.529678][T15665] Bluetooth: hci4: command tx timeout [ 827.754613][T15224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.870342][T15224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.888424][T15224] bond0 (unregistering): Released all slaves [ 828.293977][T15224] HfR: left promiscuous mode [ 828.632161][T16091] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.674491][T16091] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.704016][T16091] bridge_slave_0: entered allmulticast mode [ 828.722310][T16091] bridge_slave_0: entered promiscuous mode [ 829.043345][T16091] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.088812][T16091] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.106605][T16091] bridge_slave_1: entered allmulticast mode [ 829.150357][T16091] bridge_slave_1: entered promiscuous mode [ 829.619360][T15665] Bluetooth: hci4: command tx timeout [ 829.666094][T16091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.006187][T16091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.110867][T16192] input: f¬ as /devices/virtual/input/input31 [ 830.934850][T16091] team0: Port device team_slave_0 added [ 830.987904][T16091] team0: Port device team_slave_1 added [ 831.366717][T16091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.376226][T16091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.435423][T16091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.524810][T16091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.544067][T16091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.588509][T16091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.692086][T15665] Bluetooth: hci4: command tx timeout [ 831.820413][ T30] audit: type=1804 audit(4294967379.464:123): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2214" name="/newroot/22/file0" dev="tmpfs" ino=136 res=1 errno=0 [ 831.951778][ T30] audit: type=1800 audit(4294967379.464:124): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2214" name="file0" dev="tmpfs" ino=136 res=0 errno=0 [ 832.230579][T16091] hsr_slave_0: entered promiscuous mode [ 832.273329][T16091] hsr_slave_1: entered promiscuous mode [ 832.841015][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2215'. [ 833.743430][T16233] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input32 [ 838.726748][T16091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 838.779123][T16091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 838.906683][T16091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 839.022296][T16091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 839.767229][ T30] audit: type=1804 audit(4294967387.430:125): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2227" name="/newroot/29/file0" dev="tmpfs" ino=173 res=1 errno=0 [ 839.847729][ T30] audit: type=1800 audit(4294967387.430:126): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2227" name="file0" dev="tmpfs" ino=173 res=0 errno=0 [ 840.101736][T16091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.197512][T16091] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.482216][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.489477][ T8241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.563693][T15223] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.571026][T15223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.262052][T16091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.854632][T16091] veth0_vlan: entered promiscuous mode [ 843.017125][T16091] veth1_vlan: entered promiscuous mode [ 843.181563][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 843.200938][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 843.209349][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 843.226180][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 843.233955][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 843.329844][T16091] veth0_macvtap: entered promiscuous mode [ 843.438631][T16091] veth1_macvtap: entered promiscuous mode [ 843.580327][T16379] FAULT_INJECTION: forcing a failure. [ 843.580327][T16379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.641646][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.671592][T16379] CPU: 0 UID: 0 PID: 16379 Comm: syz.0.2236 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 843.671634][T16379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 843.671652][T16379] Call Trace: [ 843.671662][T16379] [ 843.671673][T16379] dump_stack_lvl+0x16c/0x1f0 [ 843.671718][T16379] should_fail_ex+0x512/0x640 [ 843.671767][T16379] _copy_from_user+0x2e/0xd0 [ 843.671814][T16379] __sys_bpf+0x21d/0x4d80 [ 843.671862][T16379] ? __pfx___sys_bpf+0x10/0x10 [ 843.671905][T16379] ? ksys_write+0x190/0x240 [ 843.671940][T16379] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 843.672004][T16379] ? fput+0x70/0xf0 [ 843.672040][T16379] ? ksys_write+0x1b9/0x240 [ 843.672068][T16379] ? __pfx_ksys_write+0x10/0x10 [ 843.672096][T16379] ? rcu_is_watching+0x12/0xc0 [ 843.672146][T16379] __x64_sys_bpf+0x78/0xc0 [ 843.672186][T16379] ? lockdep_hardirqs_on+0x7c/0x110 [ 843.672222][T16379] do_syscall_64+0xcd/0x230 [ 843.672264][T16379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.672293][T16379] RIP: 0033:0x7fb3c678e969 [ 843.672316][T16379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.672349][T16379] RSP: 002b:00007fb3c7664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 843.672376][T16379] RAX: ffffffffffffffda RBX: 00007fb3c69b5fa0 RCX: 00007fb3c678e969 [ 843.672395][T16379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 843.672410][T16379] RBP: 00007fb3c7664090 R08: 0000000000000000 R09: 0000000000000000 [ 843.672428][T16379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.672444][T16379] R13: 0000000000000000 R14: 00007fb3c69b5fa0 R15: 00007ffd6e2b8198 [ 843.672478][T16379] [ 843.672620][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.998004][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.008662][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.024535][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.035153][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.045139][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.097907][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.224372][T16091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.384524][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.411516][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.437900][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.455654][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.471937][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.488433][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.507923][T16091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.519562][T16091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.541029][T16091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.665510][T16091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.712770][T16091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.725334][T16091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.751179][T16091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.843293][T16390] FAULT_INJECTION: forcing a failure. [ 844.843293][T16390] name failslab, interval 1, probability 0, space 0, times 0 [ 845.048526][T16390] CPU: 0 UID: 0 PID: 16390 Comm: syz.0.2241 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 845.048562][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 845.048575][T16390] Call Trace: [ 845.048583][T16390] [ 845.048591][T16390] dump_stack_lvl+0x16c/0x1f0 [ 845.048627][T16390] should_fail_ex+0x512/0x640 [ 845.048659][T16390] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 845.048688][T16390] should_failslab+0xc2/0x120 [ 845.048717][T16390] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 845.048742][T16390] ? d_instantiate+0x77/0x90 [ 845.048765][T16390] ? alloc_empty_file+0x55/0x1e0 [ 845.048800][T16390] alloc_empty_file+0x55/0x1e0 [ 845.048834][T16390] alloc_file_pseudo+0x13a/0x230 [ 845.048865][T16390] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 845.048898][T16390] ? hugetlbfs_get_inode+0x31f/0x730 [ 845.048929][T16390] hugetlb_file_setup+0x4cd/0x620 [ 845.048963][T16390] ksys_mmap_pgoff+0x189/0x5c0 [ 845.049002][T16390] __x64_sys_mmap+0x125/0x190 [ 845.049029][T16390] do_syscall_64+0xcd/0x230 [ 845.049067][T16390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.049091][T16390] RIP: 0033:0x7fb3c678e969 [ 845.049120][T16390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.049145][T16390] RSP: 002b:00007fb3c7664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 845.049167][T16390] RAX: ffffffffffffffda RBX: 00007fb3c69b5fa0 RCX: 00007fb3c678e969 [ 845.049182][T16390] RDX: 00000000000000e4 RSI: 0000000000a00006 RDI: 0000000000000000 [ 845.049195][T16390] RBP: 00007fb3c7664090 R08: 0000000000000602 R09: 0000300000000000 [ 845.049210][T16390] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000001 [ 845.049224][T16390] R13: 0000000000000001 R14: 00007fb3c69b5fa0 R15: 00007ffd6e2b8198 [ 845.049262][T16390] [ 845.369529][T15665] Bluetooth: hci0: command tx timeout [ 845.737825][T15216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.789668][T15216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.834884][T16373] chnl_net:caif_netlink_parms(): no params data found [ 846.062636][ T8241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.080509][ T8241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.820362][T16373] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.832547][T16373] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.844521][T16373] bridge_slave_0: entered allmulticast mode [ 846.853312][T16373] bridge_slave_0: entered promiscuous mode [ 846.864222][T16373] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.871832][T16373] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.885528][T16373] bridge_slave_1: entered allmulticast mode [ 846.898592][T16373] bridge_slave_1: entered promiscuous mode [ 847.235440][T16373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.255112][T16373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.379898][T15665] Bluetooth: hci0: command tx timeout [ 847.643030][T15224] hsr_slave_0: left promiscuous mode [ 847.655472][T15224] hsr_slave_1: left promiscuous mode [ 847.672982][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.695965][T15224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.717259][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.725732][T15224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.764168][T15224] veth1_macvtap: left promiscuous mode [ 847.778111][T15224] veth1_vlan: left promiscuous mode [ 847.789067][T15224] veth0_vlan: left promiscuous mode [ 848.934301][T16433] FAULT_INJECTION: forcing a failure. [ 848.934301][T16433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.960262][T16433] CPU: 0 UID: 0 PID: 16433 Comm: syz.3.2251 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 848.960303][T16433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 848.960320][T16433] Call Trace: [ 848.960329][T16433] [ 848.960340][T16433] dump_stack_lvl+0x16c/0x1f0 [ 848.960382][T16433] should_fail_ex+0x512/0x640 [ 848.960426][T16433] _copy_to_user+0x32/0xd0 [ 848.960471][T16433] simple_read_from_buffer+0xcb/0x170 [ 848.960513][T16433] proc_fail_nth_read+0x197/0x270 [ 848.960554][T16433] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.960595][T16433] ? rw_verify_area+0xcf/0x680 [ 848.960635][T16433] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.960676][T16433] vfs_read+0x1de/0xc70 [ 848.960707][T16433] ? __pfx___mutex_lock+0x10/0x10 [ 848.960752][T16433] ? __pfx_vfs_read+0x10/0x10 [ 848.960789][T16433] ? __fget_files+0x20e/0x3c0 [ 848.960864][T16433] ksys_read+0x12a/0x240 [ 848.960891][T16433] ? __pfx_ksys_read+0x10/0x10 [ 848.960931][T16433] do_syscall_64+0xcd/0x230 [ 848.960976][T16433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.961005][T16433] RIP: 0033:0x7f661c58d37c [ 848.961029][T16433] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 848.961059][T16433] RSP: 002b:00007f661d3d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.961087][T16433] RAX: ffffffffffffffda RBX: 00007f661c7b5fa0 RCX: 00007f661c58d37c [ 848.961107][T16433] RDX: 000000000000000f RSI: 00007f661d3d90a0 RDI: 0000000000000004 [ 848.961144][T16433] RBP: 00007f661d3d9090 R08: 0000000000000000 R09: 0000000000000000 [ 848.961163][T16433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.961182][T16433] R13: 0000000000000000 R14: 00007f661c7b5fa0 R15: 00007ffdaa8814f8 [ 848.961224][T16433] [ 849.286094][T15224] team0 (unregistering): Port device team_slave_1 removed [ 849.331786][T15224] team0 (unregistering): Port device team_slave_0 removed [ 849.465094][T15665] Bluetooth: hci0: command tx timeout [ 849.768201][T16373] team0: Port device team_slave_0 added [ 849.779270][T16373] team0: Port device team_slave_1 added [ 849.942999][T16373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.950422][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.977005][T16373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.002474][T16373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.015471][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.091942][T16373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.334863][T16373] hsr_slave_0: entered promiscuous mode [ 850.342387][T16373] hsr_slave_1: entered promiscuous mode [ 850.348941][T16373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.357478][T16373] Cannot create hsr debugfs directory [ 850.923077][T15224] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.104258][T16447] FAULT_INJECTION: forcing a failure. [ 851.104258][T16447] name failslab, interval 1, probability 0, space 0, times 0 [ 851.121669][T16447] CPU: 1 UID: 0 PID: 16447 Comm: syz.5.2256 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 851.121716][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 851.121738][T16447] Call Trace: [ 851.121749][T16447] [ 851.121761][T16447] dump_stack_lvl+0x16c/0x1f0 [ 851.121810][T16447] should_fail_ex+0x512/0x640 [ 851.121856][T16447] ? __kvmalloc_node_noprof+0x122/0x600 [ 851.121893][T16447] should_failslab+0xc2/0x120 [ 851.121933][T16447] __kvmalloc_node_noprof+0x135/0x600 [ 851.121969][T16447] ? bucket_table_alloc.isra.0+0x83/0x460 [ 851.122019][T16447] ? bucket_table_alloc.isra.0+0x83/0x460 [ 851.122058][T16447] bucket_table_alloc.isra.0+0x83/0x460 [ 851.122103][T16447] rhashtable_init_noprof+0x41a/0x7e0 [ 851.122150][T16447] ipc_init_ids+0x92/0x280 [ 851.122192][T16447] msg_init_ns+0x13d/0x190 [ 851.122222][T16447] copy_ipcs+0x4bd/0x610 [ 851.122253][T16447] ? copy_utsname+0xab/0x470 [ 851.122296][T16447] create_new_namespaces+0x20a/0xad0 [ 851.122332][T16447] ? security_capable+0x7e/0x260 [ 851.122389][T16447] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 851.122427][T16447] ksys_unshare+0x45b/0xa40 [ 851.122468][T16447] ? __pfx_ksys_unshare+0x10/0x10 [ 851.122518][T16447] ? xfd_validate_state+0x5d/0x180 [ 851.122571][T16447] ? rcu_is_watching+0x12/0xc0 [ 851.122603][T16447] __x64_sys_unshare+0x31/0x40 [ 851.122645][T16447] do_syscall_64+0xcd/0x230 [ 851.122692][T16447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.122724][T16447] RIP: 0033:0x7fca4cf8e969 [ 851.122749][T16447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.122779][T16447] RSP: 002b:00007fca4de1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 851.122809][T16447] RAX: ffffffffffffffda RBX: 00007fca4d1b5fa0 RCX: 00007fca4cf8e969 [ 851.122830][T16447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 851.122850][T16447] RBP: 00007fca4d010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 851.122870][T16447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.122888][T16447] R13: 0000000000000000 R14: 00007fca4d1b5fa0 R15: 00007ffeef851dd8 [ 851.122928][T16447] [ 851.541541][T15665] Bluetooth: hci0: command tx timeout [ 851.550857][T15224] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.247852][T15224] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.583879][T15224] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.202550][T16373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 853.245085][T16373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 853.326042][T16373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 853.645091][T16373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 854.016604][T15224] team0: left allmulticast mode [ 854.021543][T15224] team_slave_0: left allmulticast mode [ 854.059919][T15224] team_slave_1: left allmulticast mode [ 854.075121][T15224] team0: left promiscuous mode [ 854.079950][T15224] team_slave_0: left promiscuous mode [ 854.089154][T15224] team_slave_1: left promiscuous mode [ 854.101604][T15224] bridge0: port 3(team0) entered disabled state [ 854.119518][T16487] FAULT_INJECTION: forcing a failure. [ 854.119518][T16487] name failslab, interval 1, probability 0, space 0, times 0 [ 854.142529][T16487] CPU: 1 UID: 0 PID: 16487 Comm: syz.3.2261 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 854.142574][T16487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 854.142593][T16487] Call Trace: [ 854.142603][T16487] [ 854.142613][T16487] dump_stack_lvl+0x16c/0x1f0 [ 854.142658][T16487] should_fail_ex+0x512/0x640 [ 854.142707][T16487] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 854.142759][T16487] should_failslab+0xc2/0x120 [ 854.142794][T16487] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 854.142846][T16487] ? copy_process+0x4bd/0x91a0 [ 854.142889][T16487] copy_process+0x4bd/0x91a0 [ 854.142925][T16487] ? _kstrtoull+0x145/0x200 [ 854.142957][T16487] ? __pfx__kstrtoull+0x10/0x10 [ 854.142997][T16487] ? find_held_lock+0x2b/0x80 [ 854.143035][T16487] ? __pfx_copy_process+0x10/0x10 [ 854.143088][T16487] ? find_held_lock+0x2b/0x80 [ 854.143135][T16487] kernel_clone+0xfc/0x960 [ 854.143178][T16487] ? __pfx_kernel_clone+0x10/0x10 [ 854.143232][T16487] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 854.143282][T16487] __do_sys_clone+0xce/0x120 [ 854.143321][T16487] ? __pfx___do_sys_clone+0x10/0x10 [ 854.143375][T16487] ? ksys_write+0x1b9/0x240 [ 854.143404][T16487] ? __pfx_ksys_write+0x10/0x10 [ 854.143447][T16487] do_syscall_64+0xcd/0x230 [ 854.143502][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.143534][T16487] RIP: 0033:0x7f661c58e969 [ 854.143558][T16487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.143586][T16487] RSP: 002b:00007f661d396fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 854.143615][T16487] RAX: ffffffffffffffda RBX: 00007f661c7b6160 RCX: 00007f661c58e969 [ 854.143636][T16487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 854.143653][T16487] RBP: 00007f661d397090 R08: 0000000000000000 R09: 0000000000000000 [ 854.143673][T16487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 854.143692][T16487] R13: 0000000000000001 R14: 00007f661c7b6160 R15: 00007ffdaa8814f8 [ 854.143732][T16487] [ 854.375897][T15224] bridge_slave_1: left allmulticast mode [ 854.381615][T15224] bridge_slave_1: left promiscuous mode [ 854.391127][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.402706][T15224] bridge_slave_0: left allmulticast mode [ 854.408611][T15224] bridge_slave_0: left promiscuous mode [ 854.414492][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.066912][T15224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.167732][T15224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.208243][T15224] bond0 (unregistering): Released all slaves [ 856.409496][T15224] HfR: left promiscuous mode [ 857.524978][T16373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.897298][T16373] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.336804][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.344020][ T8241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.393002][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.400255][ T8241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.875373][T16373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.313253][T16373] veth0_vlan: entered promiscuous mode [ 861.430771][T16373] veth1_vlan: entered promiscuous mode [ 861.569837][T16373] veth0_macvtap: entered promiscuous mode [ 861.609334][T16373] veth1_macvtap: entered promiscuous mode [ 861.722816][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.782201][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.813054][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.836359][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.853408][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.884416][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.903087][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.919895][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.969302][T16373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.226675][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.256970][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.267138][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.336893][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.371181][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.399131][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.409829][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.421644][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.475810][T16373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.703805][T16373] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.723515][T16373] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.737378][T16373] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.760082][T16373] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.178331][ T8252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.242895][ T8252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.465017][T16608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.540486][T16608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.019089][T16629] netlink: zone id is out of range [ 864.024279][T16629] netlink: zone id is out of range [ 864.067836][T16629] netlink: zone id is out of range [ 864.111529][T16629] netlink: zone id is out of range [ 864.116712][T16629] netlink: zone id is out of range [ 864.198703][T16629] netlink: zone id is out of range [ 864.237974][T16629] netlink: zone id is out of range [ 864.243154][T16629] netlink: zone id is out of range [ 864.263187][T16629] netlink: zone id is out of range [ 864.275812][T16629] netlink: zone id is out of range [ 864.503091][T16639] can0: slcan on pty215. [ 864.889364][T16628] can0 (unregistered): slcan off pty215. [ 866.396630][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 866.415231][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 866.426614][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 866.456456][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 866.464802][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 866.847585][T15224] hsr_slave_0: left promiscuous mode [ 866.858437][T15224] hsr_slave_1: left promiscuous mode [ 866.877706][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.889178][T15224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.902919][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.916827][T15224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.950653][T15224] veth1_macvtap: left promiscuous mode [ 867.434785][T15224] team0 (unregistering): Port device team_slave_1 removed [ 867.483620][T15224] team0 (unregistering): Port device team_slave_0 removed [ 868.540339][T15665] Bluetooth: hci2: command tx timeout [ 868.688904][T16682] chnl_net:caif_netlink_parms(): no params data found [ 869.463329][T16722] Invalid ELF header magic: != ELF [ 869.497020][T16682] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.524160][T16682] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.560998][T16682] bridge_slave_0: entered allmulticast mode [ 869.587144][T16682] bridge_slave_0: entered promiscuous mode [ 869.631917][T16682] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.682577][T16682] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.721813][T16682] bridge_slave_1: entered allmulticast mode [ 869.738242][T16682] bridge_slave_1: entered promiscuous mode [ 869.983541][T15224] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.015801][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 870.293347][T15224] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.385110][T16682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.457309][T16682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.598883][T15665] Bluetooth: hci2: command tx timeout [ 870.896389][T15224] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.118304][T16682] team0: Port device team_slave_0 added [ 871.150953][T16682] team0: Port device team_slave_1 added [ 871.323331][T15224] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.802226][T16682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.811588][T16682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.864802][T16682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.956072][T16682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.978925][T16682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.009401][T16682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.307005][T16682] hsr_slave_0: entered promiscuous mode [ 872.314778][T16682] hsr_slave_1: entered promiscuous mode [ 872.320939][T16682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.328583][T16682] Cannot create hsr debugfs directory [ 872.598096][T15224] bridge_slave_1: left allmulticast mode [ 872.609943][T15224] bridge_slave_1: left promiscuous mode [ 872.616050][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.638599][T15224] bridge_slave_0: left allmulticast mode [ 872.650672][T15224] bridge_slave_0: left promiscuous mode [ 872.657136][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.674149][T15665] Bluetooth: hci2: command tx timeout [ 873.286763][T15224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.305219][T15224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.331078][T15224] bond0 (unregistering): Released all slaves [ 874.042371][T16757] Invalid ELF header magic: != ELF [ 874.759126][T15665] Bluetooth: hci2: command tx timeout [ 874.845562][T16682] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 875.012604][T16682] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 875.099341][T16682] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 875.240981][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.248650][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.612004][T16682] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 876.539821][T15224] hsr_slave_0: left promiscuous mode [ 876.589823][T15224] hsr_slave_1: left promiscuous mode [ 876.628067][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.937845][T15224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.026241][T15224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.033802][T15224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.134272][T15224] veth1_macvtap: left promiscuous mode [ 877.140024][T15224] veth1_vlan: left promiscuous mode [ 877.187812][T15224] veth0_vlan: left promiscuous mode [ 877.958958][T15224] team0 (unregistering): Port device team_slave_1 removed [ 878.030846][T15224] team0 (unregistering): Port device team_slave_0 removed [ 878.909552][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 880.388350][T16682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.757563][T16682] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.862212][T16608] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.869473][T16608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.050506][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.057840][ T7536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.634434][T16866] blktrace: Concurrent blktraces are not allowed on sda1 [ 881.874955][T16682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.878757][T16682] veth0_vlan: entered promiscuous mode [ 882.941632][T16682] veth1_vlan: entered promiscuous mode [ 883.056651][T16682] veth0_macvtap: entered promiscuous mode [ 883.066922][T16682] veth1_macvtap: entered promiscuous mode [ 883.377171][T16682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.393843][T16682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.410329][T16682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.438240][T16682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.475447][T16682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.510704][T16682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.590913][T16682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.697412][T16682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.739067][T16682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.752922][T16682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.768321][T16682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.784935][T16682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.821556][T16682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.859965][T16682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.100425][T16682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.146565][T16682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.165844][T16682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.185181][T16682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.629451][T15218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.668020][T15218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.836887][T15224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.903742][T15224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.692980][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 888.965026][T16973] [U]  [ 888.968160][T16973] [U] [ 888.970915][T16973] [U] [ 888.973674][T16973] [U] [ 889.223645][T16973] [U] [ 889.226423][T16973] [U] [ 889.229179][T16973] [U] [ 889.231937][T16973] [U] [ 889.251916][T16973] [U] [ 889.254707][T16973] [U] [ 889.257481][T16973] [U] [ 889.260271][T16973] [U] [ 889.287622][T16973] [U] [ 889.290421][T16973] [U] [ 889.293166][T16973] [U] [ 889.295930][T16973] [U] [ 889.299454][T16973] [U] [ 889.302226][T16973] [U] [ 889.304984][T16973] [U] [ 889.307748][T16973] [U] [ 889.323482][T16973] [U] [ 889.326258][T16973] [U] [ 889.329021][T16973] [U] [ 889.331777][T16973] [U] [ 889.334676][T16973] [U] [ 889.725887][T16993] input: f¬ as /devices/virtual/input/input35 [ 890.214023][T16997] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079406000 pfn:0x79400 [ 890.391329][T16997] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 890.491472][T16997] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 890.500278][T16997] raw: ffff888079406000 0000000000000000 00000001ffffffff 0000000000000000 [ 890.509653][T16997] page dumped because: unmovable page [ 890.526622][T16997] page_owner tracks the page as allocated [ 890.538633][T16997] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 16353, tgid 16353 (syz-executor), ts 842646368829, free_ts 842642070528 [ 890.636205][T16997] post_alloc_hook+0x181/0x1b0 [ 890.658771][T16997] get_page_from_freelist+0x135c/0x3920 [ 890.729580][T16997] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 890.892203][T16997] alloc_pages_mpol+0x1fb/0x550 [ 890.904438][T17002] GUP no longer grows the stack in syz.3.2330 (17002): 14000-401000 (4000) [ 890.951275][T16997] alloc_pages_noprof+0x131/0x390 [ 890.996956][T16997] __vmalloc_node_range_noprof+0x732/0x1540 [ 891.034908][T17002] CPU: 1 UID: 0 PID: 17002 Comm: syz.3.2330 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 891.034945][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 891.034960][T17002] Call Trace: [ 891.034967][T17002] [ 891.034980][T17002] dump_stack_lvl+0x16c/0x1f0 [ 891.035017][T17002] gup_vma_lookup+0x1d2/0x220 [ 891.035054][T17002] __get_user_pages+0x234/0x36f0 [ 891.035100][T17002] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 891.035131][T17002] ? look_up_lock_class+0x59/0x150 [ 891.035161][T17002] ? __pfx___get_user_pages+0x10/0x10 [ 891.035198][T17002] ? process_vm_rw+0x216/0x2c0 [ 891.035224][T17002] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 891.035253][T17002] ? do_syscall_64+0xcd/0x230 [ 891.035305][T17002] __gup_longterm_locked+0x20d/0x1850 [ 891.035350][T17002] ? __pfx___gup_longterm_locked+0x10/0x10 [ 891.035401][T17002] pin_user_pages_remote+0xed/0x140 [ 891.035439][T17002] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 891.035476][T17002] ? mm_access+0x22d/0x2e0 [ 891.035513][T17002] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 891.035547][T17002] ? futex_wait_queue+0x14c/0x220 [ 891.035576][T17002] ? futex_unqueue+0xba/0x140 [ 891.035603][T17002] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 891.035635][T17002] ? iovec_from_user+0xbb/0x140 [ 891.035704][T17002] ? iovec_from_user+0xbb/0x140 [ 891.035758][T17002] process_vm_rw+0x216/0x2c0 [ 891.035802][T17002] ? __pfx_process_vm_rw+0x10/0x10 [ 891.035865][T17002] ? xfd_validate_state+0x5d/0x180 [ 891.035910][T17002] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 891.035941][T17002] ? do_syscall_64+0x91/0x230 [ 891.035971][T17002] ? lockdep_hardirqs_on+0x7c/0x110 [ 891.036000][T17002] do_syscall_64+0xcd/0x230 [ 891.036033][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.036056][T17002] RIP: 0033:0x7f661c58e969 [ 891.036073][T17002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.036096][T17002] RSP: 002b:00007f661d3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 891.036124][T17002] RAX: ffffffffffffffda RBX: 00007f661c7b6080 RCX: 00007f661c58e969 [ 891.036139][T17002] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000083 [ 891.036154][T17002] RBP: 00007f661c610ab1 R08: 0000000000000003 R09: 0000000000000000 [ 891.036168][T17002] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 891.036182][T17002] R13: 0000000000000000 R14: 00007f661c7b6080 R15: 00007ffdaa8814f8 [ 891.036211][T17002] [ 891.371687][T16997] vmalloc_user_noprof+0x6b/0x90 [ 891.376731][T16997] kcov_ioctl+0x4c/0x730 [ 891.381023][T16997] __x64_sys_ioctl+0x190/0x200 [ 891.551674][T16997] do_syscall_64+0xcd/0x230 [ 891.618809][T16997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.708660][T16997] page last free pid 16353 tgid 16353 stack trace: [ 891.851678][T16997] __free_frozen_pages+0x69d/0xff0 [ 891.918166][T16997] __put_partials+0x16d/0x1c0 [ 891.990023][T16997] qlist_free_all+0x4e/0x120 [ 892.068325][T16997] kasan_quarantine_reduce+0x195/0x1e0 [ 892.201960][T16997] __kasan_slab_alloc+0x69/0x90 [ 892.229740][T16997] __kmalloc_cache_node_noprof+0x217/0x420 [ 892.337130][T16997] __get_vm_area_node+0x101/0x300 [ 892.595960][T16997] __vmalloc_node_range_noprof+0x277/0x1540 [ 892.647949][T16997] __vmalloc_node_range_noprof+0xd91/0x1540 [ 892.752858][T16997] vmalloc_user_noprof+0x6b/0x90 [ 892.866181][T16997] kcov_ioctl+0x4c/0x730 [ 892.870526][T16997] __x64_sys_ioctl+0x190/0x200 [ 892.902701][T16997] do_syscall_64+0xcd/0x230 [ 892.907362][T16997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.124697][T17038] Ignoring unsupported numa_zonelist_order value: [ 894.124697][T17038] [ 896.319167][ T7536] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.837059][ T7536] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.200322][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 897.224822][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 897.234097][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 897.291084][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 897.334599][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 897.814047][ T7536] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.929550][T17090] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2344'. [ 898.800623][ T7536] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.492801][T15665] Bluetooth: hci2: command tx timeout [ 900.305947][T17077] chnl_net:caif_netlink_parms(): no params data found [ 900.331480][T17120] Ignoring unsupported numa_zonelist_order value: [ 900.331480][T17120] [ 900.494729][ T7536] bridge_slave_1: left allmulticast mode [ 900.516098][ T7536] bridge_slave_1: left promiscuous mode [ 900.522133][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.683055][ T7536] bridge_slave_0: left allmulticast mode [ 900.689504][ T7536] bridge_slave_0: left promiscuous mode [ 900.695234][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.576620][T15665] Bluetooth: hci2: command tx timeout [ 902.934032][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2351'. [ 903.433840][ T7536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.468771][ T7536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.504227][ T7536] bond0 (unregistering): Released all slaves [ 903.647639][T15665] Bluetooth: hci2: command tx timeout [ 904.087129][T17142] mac80211_hwsim hwsim129 wlan1: entered allmulticast mode [ 904.805096][T17077] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.828268][T17077] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.835632][T17077] bridge_slave_0: entered allmulticast mode [ 904.872594][T17077] bridge_slave_0: entered promiscuous mode [ 904.945106][T17077] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.980571][T17077] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.998738][T17077] bridge_slave_1: entered allmulticast mode [ 905.028233][T17077] bridge_slave_1: entered promiscuous mode [ 905.618090][T17165] FAULT_INJECTION: forcing a failure. [ 905.618090][T17165] name failslab, interval 1, probability 0, space 0, times 0 [ 905.728844][T15665] Bluetooth: hci2: command tx timeout [ 906.030772][T17165] CPU: 0 UID: 0 PID: 17165 Comm: syz.3.2354 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 906.030816][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 906.030836][T17165] Call Trace: [ 906.030846][T17165] [ 906.030858][T17165] dump_stack_lvl+0x16c/0x1f0 [ 906.030903][T17165] should_fail_ex+0x512/0x640 [ 906.030946][T17165] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 906.031002][T17165] should_failslab+0xc2/0x120 [ 906.031041][T17165] __kmalloc_cache_noprof+0x6a/0x3e0 [ 906.031092][T17165] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 906.031137][T17165] ? genl_start+0x1e8/0x980 [ 906.031193][T17165] genl_start+0x1e8/0x980 [ 906.031239][T17165] __netlink_dump_start+0x60b/0x990 [ 906.031283][T17165] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 906.031330][T17165] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 906.031374][T17165] ? genl_rcv_msg+0x577/0x800 [ 906.031423][T17165] ? __pfx_genl_get_cmd+0x10/0x10 [ 906.031460][T17165] ? __pfx_genl_start+0x10/0x10 [ 906.031497][T17165] ? __pfx_genl_dumpit+0x10/0x10 [ 906.031536][T17165] ? __pfx_genl_done+0x10/0x10 [ 906.031581][T17165] ? __local_bh_enable_ip+0xa4/0x120 [ 906.031614][T17165] ? __dev_queue_xmit+0x896/0x43e0 [ 906.031660][T17165] ? __radix_tree_lookup+0x21f/0x2c0 [ 906.031705][T17165] genl_rcv_msg+0x46e/0x800 [ 906.031754][T17165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.031794][T17165] ? __pfx___dev_queue_xmit+0x10/0x10 [ 906.031841][T17165] ? __pfx_smc_pnet_dump_start+0x10/0x10 [ 906.031877][T17165] ? __pfx_smc_pnet_dump+0x10/0x10 [ 906.031919][T17165] ? __lock_acquire+0xaa4/0x1ba0 [ 906.031968][T17165] netlink_rcv_skb+0x16a/0x440 [ 906.032006][T17165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.032050][T17165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 906.032110][T17165] ? __pfx_down_read+0x10/0x10 [ 906.032159][T17165] ? netlink_deliver_tap+0x1ae/0xd30 [ 906.032208][T17165] genl_rcv+0x28/0x40 [ 906.032246][T17165] netlink_unicast+0x53a/0x7f0 [ 906.032289][T17165] ? __pfx_netlink_unicast+0x10/0x10 [ 906.032324][T17165] ? __lock_acquire+0xaa4/0x1ba0 [ 906.032376][T17165] netlink_sendmsg+0x8d1/0xdd0 [ 906.032422][T17165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.032477][T17165] ____sys_sendmsg+0xa95/0xc70 [ 906.032524][T17165] ? copy_msghdr_from_user+0x10a/0x160 [ 906.032557][T17165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.032622][T17165] ___sys_sendmsg+0x134/0x1d0 [ 906.032658][T17165] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.032743][T17165] __sys_sendmsg+0x16d/0x220 [ 906.032778][T17165] ? __pfx___sys_sendmsg+0x10/0x10 [ 906.032826][T17165] ? rcu_is_watching+0x12/0xc0 [ 906.032868][T17165] do_syscall_64+0xcd/0x230 [ 906.032913][T17165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.032956][T17165] RIP: 0033:0x7f661c58e969 [ 906.032980][T17165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.033009][T17165] RSP: 002b:00007f661d3b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.033037][T17165] RAX: ffffffffffffffda RBX: 00007f661c7b6080 RCX: 00007f661c58e969 [ 906.033056][T17165] RDX: 0000000000004804 RSI: 0000200000000100 RDI: 0000000000000007 [ 906.033073][T17165] RBP: 00007f661d3b8090 R08: 0000000000000000 R09: 0000000000000000 [ 906.033090][T17165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.033106][T17165] R13: 0000000000000000 R14: 00007f661c7b6080 R15: 00007ffdaa8814f8 [ 906.033145][T17165] [ 906.925084][T17077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.981647][T17077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.024135][ T7536] hsr_slave_0: left promiscuous mode [ 908.153689][ T7536] hsr_slave_1: left promiscuous mode [ 908.165030][ T7536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.190983][ T7536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.266661][ T7536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.312089][ T7536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.465379][T17193] FAULT_INJECTION: forcing a failure. [ 908.465379][T17193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.534805][T17193] CPU: 1 UID: 0 PID: 17193 Comm: syz.6.2357 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 908.534842][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 908.534856][T17193] Call Trace: [ 908.534863][T17193] [ 908.534871][T17193] dump_stack_lvl+0x16c/0x1f0 [ 908.534905][T17193] should_fail_ex+0x512/0x640 [ 908.534939][T17193] _copy_from_iter+0x2a4/0x15b0 [ 908.534982][T17193] ? __alloc_skb+0x200/0x380 [ 908.535004][T17193] ? __pfx__copy_from_iter+0x10/0x10 [ 908.535040][T17193] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 908.535065][T17193] ? __lock_acquire+0xaa4/0x1ba0 [ 908.535101][T17193] netlink_sendmsg+0x829/0xdd0 [ 908.535131][T17193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.535168][T17193] ____sys_sendmsg+0xa95/0xc70 [ 908.535199][T17193] ? copy_msghdr_from_user+0x10a/0x160 [ 908.535224][T17193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.535259][T17193] ? irqentry_exit+0x3b/0x90 [ 908.535287][T17193] ? lockdep_hardirqs_on+0x7c/0x110 [ 908.535320][T17193] ___sys_sendmsg+0x134/0x1d0 [ 908.535344][T17193] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.535401][T17193] __sys_sendmsg+0x16d/0x220 [ 908.535426][T17193] ? __pfx___sys_sendmsg+0x10/0x10 [ 908.535457][T17193] ? rcu_is_watching+0x12/0xc0 [ 908.535485][T17193] do_syscall_64+0xcd/0x230 [ 908.535517][T17193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.535539][T17193] RIP: 0033:0x7f7149d8e969 [ 908.535556][T17193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.535577][T17193] RSP: 002b:00007f7147b72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.535599][T17193] RAX: ffffffffffffffda RBX: 00007f7149fb6320 RCX: 00007f7149d8e969 [ 908.535613][T17193] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 908.535627][T17193] RBP: 00007f7147b72090 R08: 0000000000000000 R09: 0000000000000000 [ 908.535641][T17193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.535654][T17193] R13: 0000000000000000 R14: 00007f7149fb6320 R15: 00007ffefcc52d98 [ 908.535681][T17193] [ 908.809145][ T7536] veth1_macvtap: left promiscuous mode [ 908.816661][ T7536] veth0_macvtap: left promiscuous mode [ 908.977839][ T7536] veth1_vlan: left promiscuous mode [ 909.083757][ T7536] veth0_vlan: left promiscuous mode [ 909.950353][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2358'. [ 912.045612][ T7536] team0 (unregistering): Port device team_slave_1 removed [ 912.283815][ T7536] team0 (unregistering): Port device team_slave_0 removed [ 913.884207][T17077] team0: Port device team_slave_0 added [ 913.984967][T17077] team0: Port device team_slave_1 added [ 914.197932][T17077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.218287][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.289491][T17077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.359299][T17077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.367458][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.413846][T17077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.886907][T17077] hsr_slave_0: entered promiscuous mode [ 914.924567][T17077] hsr_slave_1: entered promiscuous mode [ 914.931040][T17077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.991964][T17077] Cannot create hsr debugfs directory [ 916.234743][T17257] Ignoring unsupported numa_zonelist_order value: [ 916.234743][T17257] [ 916.518071][T17077] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 916.753885][T17077] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 916.901623][T17077] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 917.064431][T17077] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 917.921677][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.148223][T17077] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.237518][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.244804][ T8241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.290956][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.298231][ T8241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.547505][T17285] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2371'. [ 919.094050][T17077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.029289][T17077] veth0_vlan: entered promiscuous mode [ 920.084634][T17077] veth1_vlan: entered promiscuous mode [ 920.261326][T17077] veth0_macvtap: entered promiscuous mode [ 920.299335][T17077] veth1_macvtap: entered promiscuous mode [ 920.448344][T17077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.505911][T17077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.515801][T17077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.605949][T17077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.615816][T17077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.707491][T17077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.738695][T17077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.774221][T17077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.818787][T17077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.876093][T17077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.896091][T17077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.931778][T17077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.963602][T17077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.000152][T17077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.035988][T17077] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.069782][T17077] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.116419][T17077] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.161036][T17077] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.529147][ T7536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.564433][ T7536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.672519][T15226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.695389][T15226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.428475][T17392] Invalid ELF header magic: != ELF [ 925.301226][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2391'. [ 926.586684][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2396'. [ 929.400601][T17503] ptrace attach of "./syz-executor exec"[17077] was attempted by "./syz-executor exec"[17503] [ 931.005452][T17552] input: f¬ as /devices/virtual/input/input36 [ 931.844232][T17561] input: f¬ as /devices/virtual/input/input37 [ 933.552513][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2418'. [ 933.690153][T17595] HfR: entered promiscuous mode [ 934.573550][T17607] Ignoring unsupported numa_zonelist_order value: [ 934.573550][T17607] [ 935.274977][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'. [ 936.182561][T17642] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2426'. [ 936.595609][T17660] FAULT_INJECTION: forcing a failure. [ 936.595609][T17660] name failslab, interval 1, probability 0, space 0, times 0 [ 936.700287][T17660] CPU: 1 UID: 0 PID: 17660 Comm: syz.6.2430 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 936.700332][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 936.700350][T17660] Call Trace: [ 936.700360][T17660] [ 936.700371][T17660] dump_stack_lvl+0x16c/0x1f0 [ 936.700417][T17660] should_fail_ex+0x512/0x640 [ 936.700459][T17660] ? fs_reclaim_acquire+0xae/0x150 [ 936.700509][T17660] ? tomoyo_encode2+0x100/0x3e0 [ 936.700547][T17660] should_failslab+0xc2/0x120 [ 936.700583][T17660] __kmalloc_noprof+0xd2/0x510 [ 936.700628][T17660] tomoyo_encode2+0x100/0x3e0 [ 936.700676][T17660] tomoyo_encode+0x29/0x50 [ 936.700715][T17660] tomoyo_realpath_from_path+0x18f/0x6e0 [ 936.700765][T17660] ? tomoyo_profile+0x47/0x60 [ 936.700815][T17660] tomoyo_path_number_perm+0x245/0x580 [ 936.700841][T17660] ? tomoyo_path_number_perm+0x237/0x580 [ 936.700870][T17660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 936.700898][T17660] ? register_lock_class+0x41/0x4c0 [ 936.700938][T17660] ? __lock_acquire+0xaa4/0x1ba0 [ 936.700985][T17660] ? __pfx___might_resched+0x10/0x10 [ 936.701017][T17660] ? down_write+0x14d/0x200 [ 936.701051][T17660] ? __pfx_down_write+0x10/0x10 [ 936.701082][T17660] ? mnt_get_write_access+0x20c/0x300 [ 936.701115][T17660] security_path_chmod+0x121/0x2c0 [ 936.701143][T17660] chmod_common+0x16c/0x460 [ 936.701174][T17660] ? __pfx_chmod_common+0x10/0x10 [ 936.701214][T17660] ? find_held_lock+0x2b/0x80 [ 936.701236][T17660] ? __fget_files+0x204/0x3c0 [ 936.701289][T17660] __x64_sys_fchmod+0x110/0x1a0 [ 936.701318][T17660] do_syscall_64+0xcd/0x230 [ 936.701351][T17660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.701375][T17660] RIP: 0033:0x7f7149d8e969 [ 936.701393][T17660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.701416][T17660] RSP: 002b:00007f7147bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 936.701437][T17660] RAX: ffffffffffffffda RBX: 00007f7149fb5fa0 RCX: 00007f7149d8e969 [ 936.701454][T17660] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 936.701468][T17660] RBP: 00007f7147bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 936.701481][T17660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.701494][T17660] R13: 0000000000000000 R14: 00007f7149fb5fa0 R15: 00007ffefcc52d98 [ 936.701524][T17660] [ 936.701544][T17660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 936.788602][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.969764][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.009693][T17666] input: f¬ as /devices/virtual/input/input38 [ 939.039340][T17693] netlink: 'syz.8.2435': attribute type 1 has an invalid length. [ 939.331581][T17701] net_ratelimit: 20 callbacks suppressed [ 939.331609][T17701] netlink: zone id is out of range [ 939.358466][T17701] netlink: zone id is out of range [ 939.771988][T17711] Ignoring unsupported numa_zonelist_order value: [ 939.771988][T17711] [ 940.398012][T17720] FAULT_INJECTION: forcing a failure. [ 940.398012][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 940.470341][T17720] CPU: 1 UID: 0 PID: 17720 Comm: syz.6.2442 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 940.470387][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 940.470405][T17720] Call Trace: [ 940.470416][T17720] [ 940.470428][T17720] dump_stack_lvl+0x16c/0x1f0 [ 940.470476][T17720] should_fail_ex+0x512/0x640 [ 940.470520][T17720] ? __kmalloc_noprof+0xbf/0x510 [ 940.470558][T17720] ? lsm_blob_alloc+0x68/0x90 [ 940.470607][T17720] should_failslab+0xc2/0x120 [ 940.470646][T17720] __kmalloc_noprof+0xd2/0x510 [ 940.470690][T17720] lsm_blob_alloc+0x68/0x90 [ 940.470740][T17720] security_prepare_creds+0x30/0x270 [ 940.470790][T17720] prepare_creds+0x56f/0x7d0 [ 940.470914][T17720] keyctl_set_reqkey_keyring+0x8e/0x1c0 [ 940.470968][T17720] __do_sys_keyctl+0x6d/0x590 [ 940.471016][T17720] do_syscall_64+0xcd/0x230 [ 940.471077][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.471116][T17720] RIP: 0033:0x7f7149d8e969 [ 940.471144][T17720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.471179][T17720] RSP: 002b:00007f7147bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 940.471213][T17720] RAX: ffffffffffffffda RBX: 00007f7149fb5fa0 RCX: 00007f7149d8e969 [ 940.471238][T17720] RDX: 000000000000076f RSI: 0000000000000002 RDI: 000000000000000e [ 940.471261][T17720] RBP: 00007f7149e10ab1 R08: 0000000000000f13 R09: 0000000000000000 [ 940.471283][T17720] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 940.471305][T17720] R13: 0000000000000000 R14: 00007f7149fb5fa0 R15: 00007ffefcc52d98 [ 940.471351][T17720] [ 941.068875][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2445'. [ 941.413989][T17726] bridge0: port 4(gretap0) entered blocking state [ 941.445615][T17726] bridge0: port 4(gretap0) entered disabled state [ 941.496681][T17726] gretap0: entered allmulticast mode [ 941.527528][T17726] gretap0: entered promiscuous mode [ 941.554117][T17726] bridge0: port 4(gretap0) entered blocking state [ 941.560806][T17726] bridge0: port 4(gretap0) entered forwarding state [ 941.887440][T17764] sock: sock_timestamping_bind_phc: sock not bind to device [ 943.110084][T15665] Bluetooth: hci1: command 0x0406 tx timeout [ 943.119017][T17745] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 943.943789][T17745] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 943.950477][T17745] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 944.031659][T17745] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 944.119044][T17745] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 944.127448][T17745] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 944.196104][T17745] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 944.245614][T17745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 944.278939][T17745] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 944.358881][T17745] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 944.832315][T17809] openvswitch: netlink: Missing valid actions attribute. [ 944.862357][T17814] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 944.868932][T17814] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 945.188383][T15665] Bluetooth: hci4: command 0x0c1a tx timeout [ 946.149300][T15665] Bluetooth: hci0: command 0x0c1a tx timeout [ 946.310089][T15665] Bluetooth: hci2: command 0x0c1a tx timeout [ 946.661885][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.673842][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.682149][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.698741][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.706784][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.955997][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'. [ 947.269340][T15665] Bluetooth: hci4: command 0x0c1a tx timeout [ 948.215287][ T8241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.230909][T15665] Bluetooth: hci0: command 0x0c1a tx timeout [ 948.389887][T15665] Bluetooth: hci2: command 0x0c1a tx timeout [ 948.810176][T15665] Bluetooth: hci3: command tx timeout [ 948.858362][ T8241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.026070][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2461'. [ 949.153434][ T8241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.345111][T17846] chnl_net:caif_netlink_parms(): no params data found [ 949.352164][T15665] Bluetooth: hci4: command 0x0c1a tx timeout [ 949.775634][ T8241] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.311290][T15665] Bluetooth: hci0: command 0x0c1a tx timeout [ 950.471664][T15665] Bluetooth: hci2: command 0x0c1a tx timeout [ 950.479538][T17846] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.498555][T17846] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.505993][T17846] bridge_slave_0: entered allmulticast mode [ 950.514110][T17846] bridge_slave_0: entered promiscuous mode [ 950.523721][T17846] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.531155][T17846] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.538479][T17846] bridge_slave_1: entered allmulticast mode [ 950.546363][T17846] bridge_slave_1: entered promiscuous mode [ 950.742297][T17846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.818185][T17846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.871559][ T8241] gretap0: left allmulticast mode [ 950.871975][T15665] Bluetooth: hci3: command tx timeout [ 950.876715][ T8241] gretap0: left promiscuous mode [ 950.890675][ T8241] bridge0: port 4(gretap0) entered disabled state [ 950.903036][ T8241] dummy0: left allmulticast mode [ 950.908209][ T8241] dummy0: left promiscuous mode [ 950.914089][ T8241] bridge0: port 3(dummy0) entered disabled state [ 950.925099][ T8241] bridge_slave_1: left allmulticast mode [ 950.932943][ T8241] bridge_slave_1: left promiscuous mode [ 950.938887][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.953827][ T8241] bridge_slave_0: left allmulticast mode [ 950.959624][ T8241] bridge_slave_0: left promiscuous mode [ 950.966066][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.418715][ T8241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.430072][ T8241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.442209][ T8241] bond0 (unregistering): Released all slaves [ 951.470870][T17846] team0: Port device team_slave_0 added [ 951.562510][T17846] team0: Port device team_slave_1 added [ 951.679231][T17846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.717577][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.745534][T17846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.780277][T17846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.790615][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.826654][T17846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.087098][T17846] hsr_slave_0: entered promiscuous mode [ 952.113425][T17846] hsr_slave_1: entered promiscuous mode [ 952.130615][T17846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 952.157503][T17846] Cannot create hsr debugfs directory [ 952.952663][T15665] Bluetooth: hci3: command tx timeout [ 953.737980][T17934] input: f¬ as /devices/virtual/input/input39 [ 955.043235][T15665] Bluetooth: hci3: command tx timeout [ 956.628749][T17846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.673878][T17846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.800833][T17846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 957.097919][T17846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 958.147092][T18022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2478'. [ 958.507283][T17846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.711409][T17846] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.785052][T15226] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.792222][T15226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.919490][T15226] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.926850][T15226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.047005][T18051] input: f¬ as /devices/virtual/input/input40 [ 960.440924][T17846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.816988][ T30] audit: type=1800 audit(4294967301.430:127): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2487" name="members" dev="configfs" ino=67538 res=0 errno=0 [ 960.880792][T17846] veth0_vlan: entered promiscuous mode [ 960.957709][T18087] FAULT_INJECTION: forcing a failure. [ 960.957709][T18087] name failslab, interval 1, probability 0, space 0, times 0 [ 961.006748][T17846] veth1_vlan: entered promiscuous mode [ 961.028930][T18087] CPU: 1 UID: 0 PID: 18087 Comm: syz.8.2487 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 961.028970][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 961.028989][T18087] Call Trace: [ 961.029000][T18087] [ 961.029012][T18087] dump_stack_lvl+0x16c/0x1f0 [ 961.029066][T18087] should_fail_ex+0x512/0x640 [ 961.029109][T18087] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 961.029164][T18087] should_failslab+0xc2/0x120 [ 961.029200][T18087] __kmalloc_cache_noprof+0x6a/0x3e0 [ 961.029242][T18087] ? mark_held_locks+0x49/0x80 [ 961.029291][T18087] ? kobject_create_and_add+0x4a/0xf0 [ 961.029333][T18087] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.029370][T18087] kobject_create_and_add+0x4a/0xf0 [ 961.029413][T18087] add_disk_fwnode+0x83b/0x13a0 [ 961.029459][T18087] zram_add+0x494/0x6c0 [ 961.029495][T18087] ? __pfx_zram_add+0x10/0x10 [ 961.029553][T18087] ? find_held_lock+0x2b/0x80 [ 961.029584][T18087] ? __pfx_hot_add_show+0x10/0x10 [ 961.029618][T18087] ? __pfx_class_attr_show+0x10/0x10 [ 961.029651][T18087] hot_add_show+0x21/0x80 [ 961.029696][T18087] class_attr_show+0x6f/0xa0 [ 961.029747][T18087] sysfs_kf_seq_show+0x213/0x3e0 [ 961.029807][T18087] seq_read_iter+0x506/0x12c0 [ 961.029882][T18087] kernfs_fop_read_iter+0x40f/0x5a0 [ 961.029915][T18087] ? rw_verify_area+0xcf/0x680 [ 961.029959][T18087] vfs_read+0x8c8/0xc70 [ 961.029989][T18087] ? __pfx___mutex_lock+0x10/0x10 [ 961.030026][T18087] ? __pfx_vfs_read+0x10/0x10 [ 961.030080][T18087] ksys_read+0x12a/0x240 [ 961.030104][T18087] ? __pfx_ksys_read+0x10/0x10 [ 961.030126][T18087] ? rcu_is_watching+0x12/0xc0 [ 961.030161][T18087] do_syscall_64+0xcd/0x230 [ 961.030203][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.030230][T18087] RIP: 0033:0x7f2bea18e969 [ 961.030251][T18087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.030277][T18087] RSP: 002b:00007f2beafd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 961.030301][T18087] RAX: ffffffffffffffda RBX: 00007f2bea3b5fa0 RCX: 00007f2bea18e969 [ 961.030318][T18087] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000009 [ 961.030334][T18087] RBP: 00007f2bea210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 961.030350][T18087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.030366][T18087] R13: 0000000000000000 R14: 00007f2bea3b5fa0 R15: 00007fffbc0ae758 [ 961.030402][T18087] [ 961.726837][T17846] veth0_macvtap: entered promiscuous mode [ 961.737304][T17846] veth1_macvtap: entered promiscuous mode [ 961.756953][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.869206][T18096] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079406000 pfn:0x79400 [ 961.880046][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.904205][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.915574][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.920118][T18096] flags: 0xfff18000000004(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 961.926079][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.951533][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.968300][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.980891][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.993220][T17846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.003997][T18096] raw: 00fff18000000004 0000000000000000 dead000000000122 0000000000000000 [ 962.013005][T18096] raw: ffff888079406000 0000000000000000 00000001ffffffff 0000000000000000 [ 962.022571][T18096] page dumped because: unmovable page [ 962.028709][T18096] page_owner tracks the page as allocated [ 962.043944][T18096] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 16353, tgid 16353 (syz-executor), ts 842646368829, free_ts 842642070528 [ 962.148656][T18096] post_alloc_hook+0x181/0x1b0 [ 962.221796][T18096] get_page_from_freelist+0x135c/0x3920 [ 962.351666][T18096] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 962.393840][T18096] alloc_pages_mpol+0x1fb/0x550 [ 962.399702][T18096] alloc_pages_noprof+0x131/0x390 [ 962.406503][T18096] __vmalloc_node_range_noprof+0x732/0x1540 [ 962.412689][T18096] vmalloc_user_noprof+0x6b/0x90 [ 962.432335][T18096] kcov_ioctl+0x4c/0x730 [ 962.477096][T18096] __x64_sys_ioctl+0x190/0x200 [ 962.493968][T18096] do_syscall_64+0xcd/0x230 [ 962.512948][T18096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.520799][T18096] page last free pid 16353 tgid 16353 stack trace: [ 962.528908][T18096] __free_frozen_pages+0x69d/0xff0 [ 962.536409][T18096] __put_partials+0x16d/0x1c0 [ 962.541359][T18096] qlist_free_all+0x4e/0x120 [ 962.550500][T18096] kasan_quarantine_reduce+0x195/0x1e0 [ 962.559786][T18096] __kasan_slab_alloc+0x69/0x90 [ 962.568734][T18096] __kmalloc_cache_node_noprof+0x217/0x420 [ 962.585893][T18096] __get_vm_area_node+0x101/0x300 [ 962.599357][T18096] __vmalloc_node_range_noprof+0x277/0x1540 [ 962.614018][T18096] __vmalloc_node_range_noprof+0xd91/0x1540 [ 962.626947][T18096] vmalloc_user_noprof+0x6b/0x90 [ 962.636135][T18096] kcov_ioctl+0x4c/0x730 [ 962.658167][T18096] __x64_sys_ioctl+0x190/0x200 [ 962.681634][T18096] do_syscall_64+0xcd/0x230 [ 962.823820][T18096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.031349][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.083301][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.114120][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.155054][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.183156][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.231281][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.256882][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.268843][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.285634][T17846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.550733][T17846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.573953][T17846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.605133][T17846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.613963][T17846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.363937][T16609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.371846][T16609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.703621][T16609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.722698][T16609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.513651][ T30] audit: type=1804 audit(4294967307.130:128): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2501" name="/newroot/65/file0" dev="tmpfs" ino=364 res=1 errno=0 [ 966.591688][ T30] audit: type=1800 audit(4294967307.160:129): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2501" name="file0" dev="tmpfs" ino=364 res=0 errno=0 [ 966.758847][ T8241] hsr_slave_0: left promiscuous mode [ 966.865103][ T8241] hsr_slave_1: left promiscuous mode [ 966.894951][ T8241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.902446][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.974987][ T8241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.982462][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.149641][ T8241] veth1_macvtap: left promiscuous mode [ 967.173732][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 967.183071][ T8241] veth1_vlan: left promiscuous mode [ 967.191657][ T8241] veth0_vlan: left promiscuous mode [ 968.030537][T18140] input: isc as /devices/virtual/input/input41 [ 968.822444][T18213] input: f¬ as /devices/virtual/input/input42 [ 969.997850][ T8241] team0 (unregistering): Port device team_slave_1 removed [ 970.205438][ T8241] team0 (unregistering): Port device team_slave_0 removed [ 972.847809][T18251] FAULT_INJECTION: forcing a failure. [ 972.847809][T18251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.954206][T18251] CPU: 0 UID: 0 PID: 18251 Comm: syz.8.2516 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 972.954265][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 972.954290][T18251] Call Trace: [ 972.954304][T18251] [ 972.954329][T18251] dump_stack_lvl+0x16c/0x1f0 [ 972.954377][T18251] should_fail_ex+0x512/0x640 [ 972.954425][T18251] _copy_to_user+0x32/0xd0 [ 972.954473][T18251] pagemap_read+0x52c/0x890 [ 972.954527][T18251] ? __pfx_pagemap_read+0x10/0x10 [ 972.954581][T18251] ? rw_verify_area+0xcf/0x680 [ 972.954627][T18251] ? __pfx_pagemap_read+0x10/0x10 [ 972.954673][T18251] vfs_readv+0x6bc/0x8a0 [ 972.954725][T18251] ? get_pid_task+0x106/0x250 [ 972.954777][T18251] ? __pfx_vfs_readv+0x10/0x10 [ 972.954824][T18251] ? find_held_lock+0x2b/0x80 [ 972.954875][T18251] ? __fget_files+0x20e/0x3c0 [ 972.954933][T18251] ? do_preadv+0x1af/0x270 [ 972.954977][T18251] do_preadv+0x1af/0x270 [ 972.955024][T18251] ? __pfx_do_preadv+0x10/0x10 [ 972.955068][T18251] ? rcu_is_watching+0x12/0xc0 [ 972.955108][T18251] do_syscall_64+0xcd/0x230 [ 972.955152][T18251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.955182][T18251] RIP: 0033:0x7f2bea18e969 [ 972.955205][T18251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.955235][T18251] RSP: 002b:00007f2beafd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 972.955263][T18251] RAX: ffffffffffffffda RBX: 00007f2bea3b5fa0 RCX: 00007f2bea18e969 [ 972.955283][T18251] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0040000000000003 [ 972.955303][T18251] RBP: 00007f2beafd9090 R08: 0000000000000005 R09: 0000000000000000 [ 972.955322][T18251] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 972.955339][T18251] R13: 0000000000000000 R14: 00007f2bea3b5fa0 R15: 00007fffbc0ae758 [ 972.955378][T18251] [ 977.173869][T18335] FAULT_INJECTION: forcing a failure. [ 977.173869][T18335] name failslab, interval 1, probability 0, space 0, times 0 [ 977.237476][T18335] CPU: 1 UID: 0 PID: 18335 Comm: syz.3.2529 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 977.237519][T18335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 977.237536][T18335] Call Trace: [ 977.237546][T18335] [ 977.237557][T18335] dump_stack_lvl+0x16c/0x1f0 [ 977.237601][T18335] should_fail_ex+0x512/0x640 [ 977.237639][T18335] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 977.237675][T18335] should_failslab+0xc2/0x120 [ 977.237712][T18335] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 977.237747][T18335] ? security_file_alloc+0x34/0x2b0 [ 977.237803][T18335] security_file_alloc+0x34/0x2b0 [ 977.237839][T18335] init_file+0x93/0x4c0 [ 977.237874][T18335] alloc_empty_file+0x73/0x1e0 [ 977.237910][T18335] alloc_file_pseudo+0x13a/0x230 [ 977.237949][T18335] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 977.237988][T18335] ? hugetlbfs_get_inode+0x31f/0x730 [ 977.238027][T18335] hugetlb_file_setup+0x4cd/0x620 [ 977.238067][T18335] ksys_mmap_pgoff+0x189/0x5c0 [ 977.238131][T18335] __x64_sys_mmap+0x125/0x190 [ 977.238165][T18335] do_syscall_64+0xcd/0x230 [ 977.238210][T18335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.238239][T18335] RIP: 0033:0x7f661c58e969 [ 977.238270][T18335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.238299][T18335] RSP: 002b:00007f661d3d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 977.238327][T18335] RAX: ffffffffffffffda RBX: 00007f661c7b5fa0 RCX: 00007f661c58e969 [ 977.238347][T18335] RDX: 00000000000000e4 RSI: 0000000000a00006 RDI: 0000000000000000 [ 977.238365][T18335] RBP: 00007f661d3d9090 R08: 0000000000000602 R09: 0000300000000000 [ 977.238384][T18335] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000001 [ 977.238402][T18335] R13: 0000000000000001 R14: 00007f661c7b5fa0 R15: 00007ffdaa8814f8 [ 977.238441][T18335] [ 979.794775][T18359] vivid-003: ================= START STATUS ================= [ 979.804761][T18359] vivid-003: Radio HW Seek Mode: Bounded [ 979.811031][T18359] vivid-003: Radio Programmable HW Seek: false [ 979.817979][T18359] vivid-003: RDS Rx I/O Mode: Block I/O [ 979.823654][T18359] vivid-003: Generate RBDS Instead of RDS: false [ 979.830600][T18359] vivid-003: RDS Reception: true [ 979.836025][T18359] vivid-003: RDS Program Type: 0 inactive [ 979.843380][T18359] vivid-003: RDS PS Name: inactive [ 979.849026][T18359] vivid-003: RDS Radio Text: inactive [ 979.855779][T18359] vivid-003: RDS Traffic Announcement: false inactive [ 979.862748][T18359] vivid-003: RDS Traffic Program: false inactive [ 979.869325][T18359] vivid-003: RDS Music: false inactive [ 979.875157][T18359] vivid-003: ================== END STATUS ================== [ 980.443664][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 980.561239][T18379] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2537'. [ 982.772715][T18419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2542'. [ 983.310191][T18419] mac80211_hwsim hwsim154 wlan1: entered allmulticast mode [ 983.447454][T18425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2543'. [ 984.139574][T18425] mac80211_hwsim hwsim135 wlan1: entered allmulticast mode [ 984.521570][T18458] WARNING! power/level is deprecated; use power/control instead [ 984.556937][T18458] ICMPv6: process `syz.3.2548' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 989.393535][T18546] FAULT_INJECTION: forcing a failure. [ 989.393535][T18546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.465018][T18546] CPU: 0 UID: 0 PID: 18546 Comm: syz.0.2558 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 989.465057][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 989.465073][T18546] Call Trace: [ 989.465080][T18546] [ 989.465088][T18546] dump_stack_lvl+0x16c/0x1f0 [ 989.465128][T18546] should_fail_ex+0x512/0x640 [ 989.465169][T18546] _copy_from_user+0x2e/0xd0 [ 989.465209][T18546] core_sys_select+0x35a/0xbe0 [ 989.465256][T18546] ? __pfx_core_sys_select+0x10/0x10 [ 989.465302][T18546] ? proc_fail_nth_write+0x9f/0x250 [ 989.465377][T18546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 989.465421][T18546] kern_select+0x15d/0x1e0 [ 989.465460][T18546] ? __pfx_kern_select+0x10/0x10 [ 989.465505][T18546] ? __pfx_ksys_write+0x10/0x10 [ 989.465528][T18546] ? rcu_is_watching+0x12/0xc0 [ 989.465557][T18546] __x64_sys_select+0xbd/0x160 [ 989.465594][T18546] ? do_syscall_64+0x91/0x230 [ 989.465629][T18546] ? lockdep_hardirqs_on+0x7c/0x110 [ 989.465661][T18546] do_syscall_64+0xcd/0x230 [ 989.465698][T18546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.465725][T18546] RIP: 0033:0x7f0be978e969 [ 989.465746][T18546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.465772][T18546] RSP: 002b:00007f0bea5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 989.465796][T18546] RAX: ffffffffffffffda RBX: 00007f0be99b5fa0 RCX: 00007f0be978e969 [ 989.465814][T18546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 989.465829][T18546] RBP: 00007f0bea5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 989.465845][T18546] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 989.465860][T18546] R13: 0000000000000000 R14: 00007f0be99b5fa0 R15: 00007ffebb278fb8 [ 989.465892][T18546] [ 994.158254][T18612] input: f¬ as /devices/virtual/input/input43 [ 995.102170][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2567'. [ 998.172867][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.192642][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.194864][T18738] CIFS mount error: No usable UNC path provided in device string! [ 1002.194864][T18738] [ 1002.259554][T18738] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1002.732146][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 1003.312404][T18763] FAULT_INJECTION: forcing a failure. [ 1003.312404][T18763] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.349242][T18763] CPU: 1 UID: 0 PID: 18763 Comm: syz.0.2588 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 1003.349293][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1003.349317][T18763] Call Trace: [ 1003.349327][T18763] [ 1003.349339][T18763] dump_stack_lvl+0x16c/0x1f0 [ 1003.349386][T18763] should_fail_ex+0x512/0x640 [ 1003.349428][T18763] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1003.349474][T18763] should_failslab+0xc2/0x120 [ 1003.349512][T18763] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1003.349553][T18763] ? apply_subsystem_event_filter+0x3df/0x1450 [ 1003.349595][T18763] kstrdup+0x53/0x100 [ 1003.349635][T18763] apply_subsystem_event_filter+0x3df/0x1450 [ 1003.349682][T18763] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1003.349736][T18763] ? _copy_from_user+0x59/0xd0 [ 1003.349788][T18763] subsystem_filter_write+0x95/0x120 [ 1003.349826][T18763] vfs_write+0x25c/0x1180 [ 1003.349853][T18763] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1003.349894][T18763] ? __pfx___mutex_lock+0x10/0x10 [ 1003.349946][T18763] ? __pfx_vfs_write+0x10/0x10 [ 1003.349986][T18763] ? __fget_files+0x20e/0x3c0 [ 1003.350042][T18763] ksys_write+0x12a/0x240 [ 1003.350070][T18763] ? __pfx_ksys_write+0x10/0x10 [ 1003.350095][T18763] ? rcu_is_watching+0x12/0xc0 [ 1003.350133][T18763] do_syscall_64+0xcd/0x230 [ 1003.350196][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.350228][T18763] RIP: 0033:0x7f0be978e969 [ 1003.350253][T18763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.350283][T18763] RSP: 002b:00007f0bea58b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1003.350312][T18763] RAX: ffffffffffffffda RBX: 00007f0be99b6160 RCX: 00007f0be978e969 [ 1003.350333][T18763] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000b [ 1003.350351][T18763] RBP: 00007f0be9810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1003.350369][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.350388][T18763] R13: 0000000000000000 R14: 00007f0be99b6160 R15: 00007ffebb278fb8 [ 1003.350427][T18763] [ 1006.469399][T18804] ubi0: attaching mtd0 [ 1006.475898][T18804] ubi0: scanning is finished [ 1006.480561][T18804] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1006.920705][T18804] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1006.941045][T18812] Invalid ELF header magic: != ELF [ 1007.598006][T18812] Invalid ELF header magic: != ELF [ 1007.816503][T18802] delete_channel: no stack [ 1009.685015][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2597'. [ 1010.066553][T18828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2598'. [ 1015.576676][T18937] FAULT_INJECTION: forcing a failure. [ 1015.576676][T18937] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.613630][T18937] CPU: 0 UID: 0 PID: 18937 Comm: syz.8.2615 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 1015.613671][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1015.613688][T18937] Call Trace: [ 1015.613697][T18937] [ 1015.613707][T18937] dump_stack_lvl+0x16c/0x1f0 [ 1015.613755][T18937] should_fail_ex+0x512/0x640 [ 1015.613807][T18937] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1015.613861][T18937] should_failslab+0xc2/0x120 [ 1015.613896][T18937] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1015.613941][T18937] ? rcu_is_watching+0x12/0xc0 [ 1015.613968][T18937] ? s_start+0x7b/0x320 [ 1015.614008][T18937] s_start+0x7b/0x320 [ 1015.614048][T18937] seq_read_iter+0x2be/0x12c0 [ 1015.614093][T18937] ? register_lock_class+0x41/0x4c0 [ 1015.614146][T18937] seq_read+0x39e/0x4e0 [ 1015.614189][T18937] ? __pfx_seq_read+0x10/0x10 [ 1015.614231][T18937] ? get_pid_task+0xfc/0x250 [ 1015.614267][T18937] ? __mutex_trylock_common+0xe9/0x250 [ 1015.614306][T18937] ? rw_verify_area+0xcf/0x680 [ 1015.614338][T18937] ? __pfx_seq_read+0x10/0x10 [ 1015.614371][T18937] vfs_read+0x1de/0xc70 [ 1015.614394][T18937] ? __pfx___mutex_lock+0x10/0x10 [ 1015.614425][T18937] ? __pfx_vfs_read+0x10/0x10 [ 1015.614453][T18937] ? __fget_files+0x20e/0x3c0 [ 1015.614496][T18937] ksys_read+0x12a/0x240 [ 1015.614516][T18937] ? __pfx_ksys_read+0x10/0x10 [ 1015.614536][T18937] ? rcu_is_watching+0x12/0xc0 [ 1015.614564][T18937] do_syscall_64+0xcd/0x230 [ 1015.614597][T18937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.614619][T18937] RIP: 0033:0x7f2bea18e969 [ 1015.614637][T18937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.614658][T18937] RSP: 002b:00007f2beafd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.614678][T18937] RAX: ffffffffffffffda RBX: 00007f2bea3b5fa0 RCX: 00007f2bea18e969 [ 1015.614693][T18937] RDX: 0000000000000ff7 RSI: 00002000000004c0 RDI: 0000000000000007 [ 1015.614706][T18937] RBP: 00007f2beafd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.614720][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.614733][T18937] R13: 0000000000000000 R14: 00007f2bea3b5fa0 R15: 00007fffbc0ae758 [ 1015.614761][T18937] [ 1015.698296][T18938] ieee80211 phy162: Selected rate control algorithm 'minstrel_ht' [ 1015.742896][T18937] [ 1015.847994][T18937] ===================================== [ 1015.853532][T18937] WARNING: bad unlock balance detected! [ 1015.859090][T18937] 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 Not tainted [ 1015.866199][T18937] ------------------------------------- [ 1015.871735][T18937] syz.8.2615/18937 is trying to release lock (event_mutex) at: [ 1015.879303][T18937] [] seq_read_iter+0x60d/0x12c0 [ 1015.885765][T18937] but there are no more locks to release! [ 1015.891476][T18937] [ 1015.891476][T18937] other info that might help us debug this: [ 1015.899533][T18937] 2 locks held by syz.8.2615/18937: [ 1015.904736][T18937] #0: ffff8880535867f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1015.913826][T18937] #1: ffff888079ad5d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 1015.922824][T18937] [ 1015.922824][T18937] stack backtrace: [ 1015.928715][T18937] CPU: 0 UID: 0 PID: 18937 Comm: syz.8.2615 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 1015.928743][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1015.928760][T18937] Call Trace: [ 1015.928767][T18937] [ 1015.928775][T18937] dump_stack_lvl+0x116/0x1f0 [ 1015.928806][T18937] ? seq_read_iter+0x60d/0x12c0 [ 1015.928838][T18937] print_unlock_imbalance_bug+0x11b/0x130 [ 1015.928866][T18937] ? seq_read_iter+0x60d/0x12c0 [ 1015.928897][T18937] lock_release+0x242/0x2f0 [ 1015.928927][T18937] __mutex_unlock_slowpath+0xa2/0x6a0 [ 1015.928959][T18937] ? rcu_is_watching+0x12/0xc0 [ 1015.928980][T18937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1015.929012][T18937] ? rcu_is_watching+0x12/0xc0 [ 1015.929032][T18937] ? kfree+0x252/0x4d0 [ 1015.929066][T18937] ? __kasan_kmalloc+0x8a/0xb0 [ 1015.929092][T18937] seq_read_iter+0x60d/0x12c0 [ 1015.929124][T18937] ? register_lock_class+0x41/0x4c0 [ 1015.929158][T18937] seq_read+0x39e/0x4e0 [ 1015.929189][T18937] ? __pfx_seq_read+0x10/0x10 [ 1015.929220][T18937] ? get_pid_task+0xfc/0x250 [ 1015.929251][T18937] ? __mutex_trylock_common+0xe9/0x250 [ 1015.929287][T18937] ? rw_verify_area+0xcf/0x680 [ 1015.929319][T18937] ? __pfx_seq_read+0x10/0x10 [ 1015.929351][T18937] vfs_read+0x1de/0xc70 [ 1015.929372][T18937] ? __pfx___mutex_lock+0x10/0x10 [ 1015.929402][T18937] ? __pfx_vfs_read+0x10/0x10 [ 1015.929425][T18937] ? __fget_files+0x20e/0x3c0 [ 1015.929463][T18937] ksys_read+0x12a/0x240 [ 1015.929482][T18937] ? __pfx_ksys_read+0x10/0x10 [ 1015.929501][T18937] ? rcu_is_watching+0x12/0xc0 [ 1015.929524][T18937] do_syscall_64+0xcd/0x230 [ 1015.929556][T18937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.929580][T18937] RIP: 0033:0x7f2bea18e969 [ 1015.929597][T18937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.929620][T18937] RSP: 002b:00007f2beafd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.929641][T18937] RAX: ffffffffffffffda RBX: 00007f2bea3b5fa0 RCX: 00007f2bea18e969 [ 1015.929656][T18937] RDX: 0000000000000ff7 RSI: 00002000000004c0 RDI: 0000000000000007 [ 1015.929670][T18937] RBP: 00007f2beafd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.929684][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.929698][T18937] R13: 0000000000000000 R14: 00007f2bea3b5fa0 R15: 00007fffbc0ae758 [ 1015.929719][T18937] [ 1017.869021][T18859] caif:caif_disconnect_client(): nothing to disconnect