last executing test programs: 13.736697644s ago: executing program 3 (id=273): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r1 = socket(0xa, 0x3, 0x1a) setsockopt$auto(r1, 0x3a, 0x1, 0x0, 0x10000110) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000700)={{@raw=0x9, 0x7f, 0x2, 0x5, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer=@value=[0x4, 0x80, 0x1, 0x7a3, 0x3, 0xe0, 0xc1, 0x5, 0xd, 0x7f, 0x1, 0x922, 0x15, 0x8, 0x9, 0x25, 0xa, 0xe01, 0xb3b, 0x1, 0x5, 0xd85c, 0x8000000000000000, 0x5, 0xfffffffffffffbff, 0x3, 0xadd0, 0x7, 0x6c275d6c, 0x6, 0x5, 0x3, 0x3, 0x9, 0x7, 0x0, 0x6, 0x0, 0x5, 0x4, 0x4, 0x1000, 0x100000001, 0x0, 0xffff, 0x5, 0x3, 0x8, 0x2, 0x8, 0x7fffffffffffffff, 0x8, 0x6, 0x1000000000000, 0x2, 0x1, 0x0, 0x2, 0x3f, 0x4, 0x8, 0x7, 0x6, 0x2, 0x9, 0xc6b, 0x10001, 0x5, 0x8, 0x8000, 0x1, 0x0, 0x0, 0x5, 0x9cf8, 0xfffffffffffffffa, 0x1, 0x4, 0x3, 0xc6c4, 0x6, 0x3ff, 0xffffffffffffffff, 0xa0fa, 0x1, 0x5, 0x0, 0xffffffffffffffff, 0xd, 0x6, 0x100, 0x2, 0x8404, 0x3, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x7, 0x8, 0x439, 0x0, 0x4, 0x0, 0x8, 0xb4, 0x7ff, 0x1ff, 0x5, 0x9, 0x0, 0x0, 0x6, 0x0, 0x9, 0x1, 0x6, 0x800, 0x4, 0x4, 0x100, 0x2, 0x8, 0x100000001, 0x80, 0x0, 0x5, 0x7], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) ioctl$auto_TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x3) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy1\x00', 0x121882, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0xfffffff8) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x7bffffff, 0xeda, r4, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x1000000007, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r0, 0x2275, 0x38) 12.118505415s ago: executing program 3 (id=277): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040804) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x4000000000006, 0x76402f57, 0x0, 0x0, 0x0, 0x4, 0x28a, 0x400, 0x40000402, 0x5, 0x9, 0xffffffff7fffffff, 0x9, 0x2007, 0x20000010010b}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x3, 0x76c5, 0x8, 0x100000000}}) ioperm$auto(0xfb, 0x5, 0xe) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xffffffffffbffffe]}, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @local}, 0x52) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) r3 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x101001, 0x0) write$auto_trace_clock_fops_trace(r3, 0x0, 0x0) write$auto(r2, 0x0, 0xeffd) read$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000240)=""/88, 0x58) ioctl$auto_PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f00000003c0)={0xffffffffffffff6d, 0xffffffffffffffff}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = semctl$auto_GETVAL(0x8, 0x3, 0xc, 0x401) prctl$auto(0x1000000003b, 0x1, r4, 0x5, 0x80000001) r5 = gettid() tkill$auto(r5, 0x0) kill$auto(0xffffffffffffffff, 0x5b4) 6.838789124s ago: executing program 3 (id=296): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/logsyscall\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0x7c88, 0x7fff) setresuid$auto(0x909b, 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)="ba", 0x1) socket(0xa, 0x1, 0x84) chdir$auto(&(0x7f0000000040)='./cgroup\x00') rename$auto(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./file0\x00') openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x10500, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) ioperm$auto(0x6, 0x8, 0x4) socketpair$auto(0x800006, 0x5, 0x9d7, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) r4 = geteuid() sendmsg$auto_MACSEC_CMD_UPD_RXSC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r3, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x48010) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x7ffe, 0x1}, 0x8}, 0x1, 0x8000000d) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0xa042, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) 6.437666501s ago: executing program 2 (id=297): r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) close_range$auto(r0, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/hugetlb.1GB.rsvd.usage_in_bytes\x00', 0xe0244, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2$auto(&(0x7f00000000c0), 0x6) io_cancel$auto(0x8, 0xfffffffffffffffd, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) pread64$auto(r2, 0x0, 0x800000fff, 0x40008800000001) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/domainname\x00', 0x40000, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x4) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r4, 0xfffefffe, 0xd, 0xfffffffffffffffc, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000015c0)='./file0\x00', 0x800, 0x110) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) r6 = semctl$auto_IPC_STAT(0x6, 0x0, 0x2, 0x1) madvise$auto(0x0, 0x4, 0xffff44ad) syz_open_procfs$namespace(r6, 0x0) setpriority$auto(0x1, 0x0, 0x2) 6.26559552s ago: executing program 1 (id=299): ioctl$auto_SG_SET_RESERVED_SIZE2(0xffffffffffffffff, 0x2275, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x4, 0x0) write$auto_aoe_fops_aoechr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, 0x0, 0x2000c880) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0x8, 0x0) select$auto(0x804, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) socket(0xa, 0x3, 0x6) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) mq_timedreceive$auto(0x8, 0x0, 0xfffffffd, 0x0, 0x0) ioperm$auto(0x2, 0x6, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@typed={0xc, 0xd4, 0x0, 0x0, @u64=0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x892) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4611, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 5.471938239s ago: executing program 2 (id=300): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r1, 0x400, 0x1) (async) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x6, 0xffffffff, 0x6, 0x1, 0x8, 0x6, "fac66187d22fb718c775d49990d45a7f", 0x80, 0x4, 0x0, 0x1, 0x8, 0x4c, 0x9}) 5.124049909s ago: executing program 3 (id=302): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) sysfs$auto(0x401, 0x3, 0x5b61) socket(0x2, 0x80805, 0x0) socket(0x28, 0x5, 0x0) socket(0x2b, 0x1, 0x1) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x8) 5.047300926s ago: executing program 2 (id=303): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x82802, 0x0) ioctl$auto(r0, 0x6, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/snmp\x00', 0x0, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x9) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mprotect$auto(0x20001000, 0xeb, 0x6) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24000058) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r1) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) madvise$auto(0x0, 0x80000001, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) socketpair$auto(0xfffffff4, 0x3, 0x0, &(0x7f0000000040)=0x1ff) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d638802612, 0x0) 4.939262284s ago: executing program 1 (id=304): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x80800, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/anon_fault_alloc\x00', 0x0, 0x0) read$auto(r1, &(0x7f0000000280)='veth1_vlan\x00', 0x7) socket(0x10, 0x1, 0x0) mmap$auto(0x0, 0xfffffffffffff7f1, 0x1003, 0x14, r0, 0x35) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/kvm/insn_emulation\x00', 0x22002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu1/topology/core_id\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) write$auto(0x3, 0x0, 0x7fffffff) writev$auto(0x4, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xfffe, 0xb964, 0x0, 0x8, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x90, 0x0, 0x0, 0x0, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(0x0, 0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) 4.91112818s ago: executing program 0 (id=305): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x202000, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000040)=0x926e) r1 = getsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x6, 0x43, &(0x7f0000000080)='/dev/cuse\x00', &(0x7f00000000c0)=0x7) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)=0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-touch3\x00', 0x4800, 0x0) waitid$auto_P_ALL(0x0, r1, &(0x7f0000001180)={@siginfo_0_0={0x6, 0x6b, 0x3, @_timer={0x0, 0x8583, @sival_ptr=&(0x7f0000000180)="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"}}}, 0xdc9, &(0x7f0000001200)={{0x0, 0x8}, {0x1, 0x7}, 0x2, 0x10000, 0x81a, 0x6, 0xfff, 0x1, 0xd, 0x3, 0x959, 0x6, 0x8, 0x6, 0x7, 0x6}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000012c0)={@raw=0xfff, 0x1, 0x80, 0x3, "934ada4a9440778cb77db6350ceefc60a5c3192279c03a9d6b2fb9cce4dedf74f8d86272d49f5a55f6c22607", @inferred=r2}) mount_setattr$auto(r1, &(0x7f0000001300)='./file0\x00', 0x1, &(0x7f0000001340)={0x8, 0xffffffff, 0x6, @raw=0x3}, 0x7) acct$auto(&(0x7f0000001380)='/dev/v4l-touch3\x00') mincore$auto(0x401, 0x10, &(0x7f00000013c0)='/dev/v4l-touch3\x00') read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001400)=""/76, 0x4c) write$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffffff, &(0x7f0000001480)="d4d3eb9ca60dc4b96a09d9f005343f4bdf020f39a973a230f32c7a0a0ba9e1860364bffb77", 0x25) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001840)={{r1, &(0x7f00000014c0)="5d7ae2d7fa4b774adbbbb70fd04106fc2c7cfe9aace65100fcf00bd9b87750da8a86ab7b9c4b9c6ce5e1abb6f182a022709656749ec6f4c8dfe2bba81b39967acbe60ef8c1c55c8f5afe9fefb1c716a036949b3ec2e8f0b58f939cdb16aef133bee3329e0629e06fe592bdec3e8d1e15e1521c3179fba0edff16a976ab73828e0d0327df6ba9567bdec7932ffaa0a598fe78fdde9cb95dea15e0940eb4e303f6adae7393c138286bae899e2067387aa89d652e5fc962ae22b91a8d7d17062b50351d63a9cbe097892345855a42a6138a9b39378c1cccae730d628ff92297d79ecb75b6d74a5fbdacde467ec38813c062146698fdf441db8746", 0x2, &(0x7f00000015c0)="cc44a218044fdec8adb98944a72d5a18942f9168c661ba26a3e0f1b281b676adccc1f466686e7a48f71298667e1d07605fb9d6311fe8f41e53961198221c13cfca602013db2458247c88cedb912ca9aafc7a7553a39cb0acbce1d58e0a8d3e87f5550aacf030fb", 0x9, &(0x7f0000001640)="58b5a349cd06d8f1ba7c56304f292244812daad08eb5e6fa2671fe3255c2", &(0x7f0000001680)=0x7fff}, 0x401, &(0x7f0000001800)={0x7ff, 0x5, &(0x7f00000016c0)="533bd6fd60652410ac1e76369ca51bbaa1b609305340c956cf2648ec565edb92d0ae6ca12e71f8ecf8cbda743dbaecacd38a284ab622e2b57a8ab90e225ef333527a432e6025bf882ab9d544daabc2dc93b1995826312e49723c77aba1b0df7833c5761288fc18fc18612909e5aaa82b88dcbb7f4012387a9cc2a3dd93e4e9d39d4b77b3dd4f28c33b6636cbcd566ea2ba93d615a89f2790a99053e6503c2a92d5a456fbd09399628933", &(0x7f0000001780)="c559a9e18da5d9b2d5efa78c81f6c5ec9d7e5867bb8d22db8b37093d22a23b5baded20073afb8d01f107a403303f946973bdd2663348b2f04b93dbd7a14896837dc6dce119196cec3cab1934a043599385b331b9402c15d964adbcc8795164068012d3462e", 0xc1, 0x4bae}}) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001900), r1) sendmsg$auto_TIPC_NL_MON_PEER_GET(r4, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x13c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x20, 0x3, 0x0, 0x1, [@nested={0x1c, 0xc5, 0x0, 0x1, [@typed={0xa, 0x65, 0x0, 0x0, @str='+(1}\xa1\x00'}, @nested={0x4, 0x110}, @typed={0x8, 0x85, 0x0, 0x0, @fd=r4}]}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@typed={0xc, 0xcc, 0x0, 0x0, @u64=0x7}, @nested={0xee, 0x119, 0x0, 0x1, [@generic="80df2f073cbb135f8c4d58a5fc48ad3fa49202e4d5fe1608a4ca27351819d2610b1ef96803bd0670b35267db26fc44e1d40c5e63a637c15b71a7d6eb5869e8f5fe19e65616ae1596fc30355fed9a16ba2067a334b21e84fe54377b73155cdf68020decd9aa8c182c7809c70704a8dd1eb993ea4fc5428f552a876acff06e9d1cc057e4277da70e2ddbfcd2e92e8dc64940177b5bea2f6ff1f5acb7c7109e5e8f8c5667808c72f417b38801fc0184e46c129b259ebac0be5c3836563ba872530cef37c52a0239356bc48e1ba078d92dd584758028fc6a3701ce7f3a44c7a6c5ce344a04455750578c414a"]}, @typed={0x8, 0x8e, 0x0, 0x0, @fd=r1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000081) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/swradio9\x00', 0x100, 0x0) r6 = prctl$auto_PR_SET_MM_END_CODE(0x9, 0x2, r2, 0x2, 0x5) r7 = fcntl$auto_F_SETSIG(r0, 0xa, r3) ioctl$auto(r6, 0x9, r7) madvise$auto(0x8000000000000001, 0x8001, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r6) sendmsg$auto_NL80211_CMD_DEL_STATION(r8, &(0x7f0000001d80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x158, r9, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0xd9, 0xba, "3c937671077ffef661234d23b15daacbb2130b243e367989f61b33d534b7979f59044ba195289282025177c96e33d8013abd00245d425ba3fea31d24a5d1338223dda30e425302a6f5cdf72607b80003d25ec4d39c96d27c7e8da812ea98cbf7d17aadeaaf9a5568aad53689304c40149163792bac27910f1e74ad21aa2a0bf5a85024af36c2848c5f838606aa6ad050fda2525f93c68e60e5d90486b4c1d84a7eeb652e2fe6c523a87ef4faaf709fb76cf954dcc4eda7538fe8c37afaf5fc2dec6c004f8b2185e5c8ba6284493c46de6d5cfeaad3"}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_KEY_DATA={0xe, 0x7, "d40612022a7f2e30dac9"}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x4f, 0xba, "baa9ddbdb5d100d9a23fc287c8de57fdd2e8ee1b264015c40752228662593ae7aded7b955ad5ca255b0f8a0836e4de8c14eb463a226715d5c6c0847dda2faf2fd30b6519011f1f12cfae96"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001e40)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001e80)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001ec0)={'veth1_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001f00)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001f40)={'ipvlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000002340)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002300)={&(0x7f00000020c0)={0x1e8, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_TSINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_TSINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_TSINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbf}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_TSINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_TSINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9f0b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_TSINFO_HEADER={0x4}, @ETHTOOL_A_TSINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffff81}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x48000}, 0x90) 4.590119644s ago: executing program 0 (id=306): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) fanotify_init$auto(0x65, 0x2) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) io_uring_setup$auto(0x5, 0x0) (async) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0x100018) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x400, 0x0) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) statx$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4, 0x2, 0x0) (async) msgctl$auto_IPC_SET(0x9, 0x1, &(0x7f0000000180)={{0xf, 0xee01, 0xee00, 0x40ae, 0x7, 0x1, 0xfff}, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x40, 0x1, 0x8, 0xdb2, 0x0, 0x100000000, 0x67c0, 0x7, 0x6, @inferred=0xffffffffffffffff, @raw=0x9}) ioprio_set$auto(0x7ff, 0x0, 0x1) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mprotect$auto(0x0, 0x8000000000000001, 0x6) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002480)) unshare$auto(0x40000080) 3.973329965s ago: executing program 3 (id=307): madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x894b, 0x38) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) rt_sigprocmask$auto(0x0, 0x0, 0x0, 0x8) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000680)=""/227, 0xe3) madvise$auto(0x0, 0x20499d, 0x9) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25090000000810", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) 3.764524025s ago: executing program 0 (id=308): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = fcntl$auto_F_GETOWN(r1, 0x9, 0x0) ioctl$auto_VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000040)=r1) (async) mmap$auto(0x0, 0x8, 0xfff, 0xeb2, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x83, 0x0, 0x0) (async) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) 3.353837465s ago: executing program 2 (id=309): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) r0 = epoll_create$auto(0x7) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000140)={0x8, 0x1, 0x0, 0x0, 0x7fffffff, "69b182b5b02753a4a9364441"}) mknod$auto(0x0, 0x1001, 0x4) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44000) 2.900816957s ago: executing program 0 (id=310): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0xff) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000001c0)="0a1b9a5c4000006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12bdbcf3401910f91e000000000060000023b500000000f49b3989f338a7bbd6ee8b88ad6403b314a8ba6f959644c145171d9d2423ac19d5baa59b8ae49be41c88533a92c33de24ef161f9e4e0db36a0f7b2450a2bb4ffea85eb679d0c6fab01a4816ce76a1698e5d3d8cd70c7171af2c00685cb62e6e64f75a4365b52e586d8d2f71542177763f73670a2fd70e4de1323733315ec6b", 0xb7) madvise$auto(0x0, 0x200007, 0x19) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0xffffffffffffffff, 0x1000000000000002, 0x3004, 0x16, 0x403, 0x100000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x185b02, 0x0) lseek$auto(0x3, 0x2, 0x4) read$auto(0xffffffffffffffff, 0x0, 0x4000024) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x640002, 0x0) writev$auto(r1, &(0x7f0000001040)={0x0, 0xc}, 0xfe) mincore$auto(0xffffffffffffffff, 0xa0000, 0x0) mincore$auto(0x8, 0x921, &(0x7f0000000180)='{/)##,&%}(/(\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000280)=0x80550) 2.822844871s ago: executing program 2 (id=311): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x82002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x841, 0x0) write$auto(r1, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci4\x00', 0x1, 0x0) r2 = socket(0x23, 0x2, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000380), r2) fanotify_init$auto(0x5, 0x2000000000002) pipe$auto(0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f00000002c0)=""/182, 0xb6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bond0/queues/rx-7/rps_cpus\x00', 0x143680, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/86, 0x56) open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x12) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) r6 = socket(0x2, 0x3, 0xfffffff1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x6, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) close_range$auto(r0, r6, 0xfffffff7) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r6) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) 2.714630207s ago: executing program 1 (id=312): sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) unshare$auto(0x40000080) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x400000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x10001) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x4, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) landlock_create_ruleset$auto(0x0, 0x4dc, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x0, r0, 0xd, 0x89, 0x2, 0x4, r0, 0x81, 0x9}, 0x6f4) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, 0x0, 0x401) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x18, 0xa, 0x1) connect$auto(0x3, 0x0, 0x55) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x125900, 0x0) r3 = accept$auto(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000080)=0x9) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x82808800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="dc140000", @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0537bc1abd99798443002b000600000000000000f983667241aa6fd0b43382189381d77feda5ed83f96ee41f49171af5192ff893d9966aaf28cbdaacd34d2020dedb4200c57748b1ed4d4c6ef6988e0e86457675f620e38a794e3031d467f6574881848f901faebe637dac3176c1a92b558316e2226c0e1cc283f816e8de26bb706839ce003251417e787ff38f086f4fe32201be5edee0f2c32f1f97d53c591f2ead11938a945d0a8abeada5ecedce0eb9060638e8418e6c767454803ef3f58a1b1a2e917ef38208000000f819ff4d53c35c8904e2d708fffabedb6b9a78d1aa99b8cbd3b86bdd5e92847aa813565224bd6ddefce928822239387cac65ff6003dc55f314f331d66b346d8ba3d76aa493bb669a3f66354b91e8a0f715114a694c2daf5abbdf27d562c03e63c09446ec9ec05dd242ad8dd6d0bf47546b1f61785b147a073ccdfe21c66fd090c9d7434db78c037eb8080049003c2ff20000050008090000000005001801ac00800004001800700028016f4e200157cad38812c46cf231b1bb46438de0996cf98a5777673fa6d4474e72e7188259c3edf215a2bf28700ba2e2c3d4e7a428c08e533f9a6bbe743ea1c20080000088663c321e8e766f8d4af88a0adc5c"], 0x14dc}, 0x1, 0x0, 0x0, 0x20048010}, 0x8001) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="02002abd7000ffdbdf2502000000040002001c00048005bc48242d10b34cfb6a801306b44fd2162bb3596680cddf08000700001000000800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) bpf$auto(0x18, 0x0, 0x92) mmap$auto(0xffffffffffffffff, 0x2000a, 0x0, 0x10eb2, 0x401, 0x80000000008000) io_uring_setup$auto(0xa, 0x0) open(0x0, 0x101000, 0x15e) msync$auto(0x0, 0x2000000005, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.976836568s ago: executing program 2 (id=313): unshare$auto(0x40000080) unshare$auto(0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000001300)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xfffd}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) socketpair$auto(0x3ff, 0x4, 0x3c, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) madvise$auto(0xfffffffffffffff9, 0x0, 0xfffff281) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x24040004) write$auto(0x3, 0x0, 0x100082) bind$auto(0x3, 0x0, 0x68) shutdown$auto(0x200000003, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x1168}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x284c2, 0x0) read$auto_sg_fops_sg(r4, 0x0, 0x0) 734.900881ms ago: executing program 1 (id=314): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x10009b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff01, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) 661.728442ms ago: executing program 0 (id=315): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 499.650833ms ago: executing program 1 (id=316): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x5, 0x0) fallocate$auto(r0, 0x2, 0x401, 0x100000001) setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x4) 260.857298ms ago: executing program 0 (id=317): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) adjtimex$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket(0x15, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/dummy_hcd.0/usb1/interface_authorized_default\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) write$auto(0x3, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf254a0000000083a9"], 0x14}}, 0x4000000) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0x31, 0x6, "003e000000000086fbeacb5fb668bc9f94e48db6000000000000ff00c90be2c6baf4f4be8912d39260cbf4d70c"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8008000) 135.643673ms ago: executing program 3 (id=318): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0x5100, 0xffffffffffffffff) socket(0x2, 0x1, 0x106) madvise$auto(0x0, 0xffffffffffff0005, 0x19) signalfd$auto(0xffffffff, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) read$auto(0x3, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mremap$auto(0x4000, 0x7ff, 0x3fd6, 0x3, 0xfffff000) ioprio_get$auto(0x2000000002, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0xca, 0x0, 0x7e) socket(0xa, 0x2, 0x88) ioperm$auto(0x2, 0x3, 0x1) syslog$auto(0x9, 0x0, 0x3) 0s ago: executing program 1 (id=319): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002580), 0xffffffffffffffff) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x405, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) sendmmsg$auto(0x3, 0x0, 0x29a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) writev$auto(r0, 0x0, 0x7) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x22080, 0x0) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, 0x0, 0x454002, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x81) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRNcmyT\x04\xe9M\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\x85\x8a=\xbaKgn6\xa7\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\t\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9\x1d\xe1\xc6\x8b\xc0\xe8-\x94k\xef\x95\x1c\xcf_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/261, 0x5, 0x3d) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) socketpair$auto(0x4d2cf812, 0x5, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) syz_clone(0x82001400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x8b, 0xfffffffc, 0x10000000000df, 0xeb6, r1, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 83.431270][ T5827] cgroup: Unknown subsys name 'net' [ 83.530903][ T5827] cgroup: Unknown subsys name 'cpuset' [ 83.539850][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.294472][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.509117][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.518609][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.523533][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.526863][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.539126][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.541774][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.551166][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.557446][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.563300][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.576405][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.577802][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.584336][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.592628][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.606067][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.614775][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.622548][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.623503][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.641431][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.686972][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.695973][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.703830][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.711999][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.719848][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.727384][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.115631][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.161725][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.229644][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.251529][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 88.382440][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.390397][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.398464][ T5838] bridge_slave_0: entered allmulticast mode [ 88.405461][ T5838] bridge_slave_0: entered promiscuous mode [ 88.441388][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.448758][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.455941][ T5838] bridge_slave_1: entered allmulticast mode [ 88.463277][ T5838] bridge_slave_1: entered promiscuous mode [ 88.474976][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.482224][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.489467][ T5837] bridge_slave_0: entered allmulticast mode [ 88.496218][ T5837] bridge_slave_0: entered promiscuous mode [ 88.514257][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.521485][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.532923][ T5836] bridge_slave_0: entered allmulticast mode [ 88.539986][ T5836] bridge_slave_0: entered promiscuous mode [ 88.575620][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.582806][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.590196][ T5837] bridge_slave_1: entered allmulticast mode [ 88.597128][ T5837] bridge_slave_1: entered promiscuous mode [ 88.603736][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.615332][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.623516][ T5836] bridge_slave_1: entered allmulticast mode [ 88.634129][ T5836] bridge_slave_1: entered promiscuous mode [ 88.644269][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.657573][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.712834][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.721547][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.729118][ T5849] bridge_slave_0: entered allmulticast mode [ 88.735929][ T5849] bridge_slave_0: entered promiscuous mode [ 88.762526][ T5838] team0: Port device team_slave_0 added [ 88.769210][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.777561][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.784767][ T5849] bridge_slave_1: entered allmulticast mode [ 88.791795][ T5849] bridge_slave_1: entered promiscuous mode [ 88.801514][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.813006][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.825987][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.837665][ T5838] team0: Port device team_slave_1 added [ 88.862709][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.909172][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.916148][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.942747][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.978094][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.990854][ T5836] team0: Port device team_slave_0 added [ 88.999375][ T5836] team0: Port device team_slave_1 added [ 89.005621][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.014363][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.040626][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.061259][ T5837] team0: Port device team_slave_0 added [ 89.070121][ T5837] team0: Port device team_slave_1 added [ 89.078369][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.152396][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.159584][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.186077][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.209012][ T5849] team0: Port device team_slave_0 added [ 89.215779][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.223030][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.254725][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.275341][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.282407][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.309554][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.328240][ T5849] team0: Port device team_slave_1 added [ 89.335613][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.342907][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.369359][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.394498][ T5838] hsr_slave_0: entered promiscuous mode [ 89.400922][ T5838] hsr_slave_1: entered promiscuous mode [ 89.452962][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.460215][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.486866][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.535255][ T5836] hsr_slave_0: entered promiscuous mode [ 89.541977][ T5836] hsr_slave_1: entered promiscuous mode [ 89.548988][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.557390][ T5836] Cannot create hsr debugfs directory [ 89.563983][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.572847][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.599243][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.614011][ T5837] hsr_slave_0: entered promiscuous mode [ 89.620639][ T5837] hsr_slave_1: entered promiscuous mode [ 89.627114][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.634718][ T5837] Cannot create hsr debugfs directory [ 89.727533][ T5149] Bluetooth: hci2: command tx timeout [ 89.727577][ T5847] Bluetooth: hci0: command tx timeout [ 89.733532][ T5844] Bluetooth: hci1: command tx timeout [ 89.773661][ T5849] hsr_slave_0: entered promiscuous mode [ 89.780934][ T5849] hsr_slave_1: entered promiscuous mode [ 89.787599][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.795323][ T5849] Cannot create hsr debugfs directory [ 89.806656][ T5844] Bluetooth: hci3: command tx timeout [ 90.048434][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.062794][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.085466][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.105060][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.169568][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.183192][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.211252][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.234404][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.253942][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.266753][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.305375][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.317202][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.375761][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.394957][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.409876][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.429406][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.519643][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.557057][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.600290][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.607636][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.621900][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.629096][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.693126][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.719101][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.765794][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.791659][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.809862][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.817418][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.828987][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.836474][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.860071][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.901287][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.908517][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.950794][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.958008][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.975991][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.004616][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.017644][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.078372][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.085611][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.129394][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.140720][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.184125][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.191392][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.275547][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.374838][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.442337][ T5838] veth0_vlan: entered promiscuous mode [ 91.483444][ T5838] veth1_vlan: entered promiscuous mode [ 91.517922][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.554941][ T5837] veth0_vlan: entered promiscuous mode [ 91.609377][ T5837] veth1_vlan: entered promiscuous mode [ 91.627687][ T5838] veth0_macvtap: entered promiscuous mode [ 91.645349][ T5838] veth1_macvtap: entered promiscuous mode [ 91.701220][ T5837] veth0_macvtap: entered promiscuous mode [ 91.718981][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.728888][ T5837] veth1_macvtap: entered promiscuous mode [ 91.756014][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.777629][ T5836] veth0_vlan: entered promiscuous mode [ 91.785964][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.807469][ T5847] Bluetooth: hci2: command tx timeout [ 91.812978][ T5844] Bluetooth: hci1: command tx timeout [ 91.819851][ T5847] Bluetooth: hci0: command tx timeout [ 91.832106][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.842337][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.851971][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.861060][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.880082][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.891069][ T5844] Bluetooth: hci3: command tx timeout [ 91.898363][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.909552][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.949455][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.960956][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.974282][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.982891][ T5836] veth1_vlan: entered promiscuous mode [ 92.011027][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.021753][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.035230][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.045204][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.073158][ T5849] veth0_vlan: entered promiscuous mode [ 92.141433][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.154339][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.163850][ T5836] veth0_macvtap: entered promiscuous mode [ 92.182209][ T5836] veth1_macvtap: entered promiscuous mode [ 92.194767][ T5849] veth1_vlan: entered promiscuous mode [ 92.275438][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.292034][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.304325][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.321847][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.334002][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.386074][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.406455][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.414354][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.426821][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.442528][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.454874][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.472288][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.503672][ T5849] veth0_macvtap: entered promiscuous mode [ 92.531830][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.559131][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.575131][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592410][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.610147][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.623360][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.649664][ T5849] veth1_macvtap: entered promiscuous mode [ 92.732608][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.733901][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.757746][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.769357][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.776480][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.780473][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.797986][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.808788][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.821250][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.840971][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.889194][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.914924][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.934696][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.945626][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.955911][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.966787][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.979032][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.019941][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.048610][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.088073][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.106632][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.140574][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.168811][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.305437][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.321390][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.577123][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.628370][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.768699][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.782215][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.896449][ T5844] Bluetooth: hci1: command tx timeout [ 93.902161][ T5847] Bluetooth: hci0: command tx timeout [ 93.908049][ T5847] Bluetooth: hci2: command tx timeout [ 93.966451][ T5844] Bluetooth: hci3: command tx timeout [ 95.972436][ T5844] Bluetooth: hci1: command tx timeout [ 95.978037][ T5844] Bluetooth: hci0: command tx timeout [ 95.983471][ T5844] Bluetooth: hci2: command tx timeout [ 96.048429][ T5844] Bluetooth: hci3: command tx timeout [ 96.057761][ T5931] FAULT_INJECTION: forcing a failure. [ 96.057761][ T5931] name failslab, interval 1, probability 0, space 0, times 1 [ 96.057838][ T5931] CPU: 1 UID: 0 PID: 5931 Comm: syz.1.6 Not tainted 6.14.0-rc4-syzkaller #0 [ 96.057875][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.057898][ T5931] Call Trace: [ 96.057908][ T5931] [ 96.057924][ T5931] dump_stack_lvl+0x16c/0x1f0 [ 96.057973][ T5931] should_fail_ex+0x50a/0x650 [ 96.058026][ T5931] ? fs_reclaim_acquire+0xae/0x150 [ 96.058073][ T5931] should_failslab+0xc2/0x120 [ 96.058124][ T5931] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 96.058177][ T5931] ? __kernfs_new_node+0xd3/0x890 [ 96.058231][ T5931] __kernfs_new_node+0xd3/0x890 [ 96.058314][ T5931] ? __pfx___kernfs_new_node+0x10/0x10 [ 96.058360][ T5931] ? __pfx_lock_release+0x10/0x10 [ 96.058408][ T5931] ? kernfs_add_one+0x39d/0x520 [ 96.058471][ T5931] ? up_write+0x1b2/0x520 [ 96.058529][ T5931] kernfs_new_node+0x186/0x240 [ 96.058587][ T5931] __kernfs_create_file+0x53/0x350 [ 96.058628][ T5931] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 96.058684][ T5931] sysfs_merge_group+0x1b1/0x340 [ 96.058732][ T5931] ? __pfx_sysfs_merge_group+0x10/0x10 [ 96.058784][ T5931] ? __pfx_dev_add_physical_location+0x10/0x10 [ 96.058825][ T5931] ? bus_to_subsys+0x12d/0x160 [ 96.058880][ T5931] dpm_sysfs_add+0x237/0x280 [ 96.058924][ T5931] device_add+0x9a8/0x1a70 [ 96.058974][ T5931] ? __pfx_device_add+0x10/0x10 [ 96.059035][ T5931] device_create_groups_vargs+0x1f8/0x270 [ 96.059090][ T5931] device_create+0xe9/0x130 [ 96.059137][ T5931] ? __pfx_device_create+0x10/0x10 [ 96.059180][ T5931] ? __pfx_lock_release+0x10/0x10 [ 96.059230][ T5931] ? is_console_locked+0x9/0x20 [ 96.059270][ T5931] ? con_is_visible+0x65/0x150 [ 96.059308][ T5931] ? csi_J+0x547/0xad0 [ 96.059356][ T5931] vcs_make_sysfs+0x55/0x80 [ 96.059390][ T5931] vc_allocate+0x502/0x880 [ 96.059431][ T5931] ? __pfx_vc_allocate+0x10/0x10 [ 96.059473][ T5931] ? lock_acquire+0x2f/0xb0 [ 96.059514][ T5931] ? con_install+0x9a/0x600 [ 96.059562][ T5931] con_install+0xa2/0x600 [ 96.059606][ T5931] ? __pfx_con_install+0x10/0x10 [ 96.059653][ T5931] ? __pfx_con_install+0x10/0x10 [ 96.059695][ T5931] tty_init_dev.part.0+0x99/0x660 [ 96.059741][ T5931] tty_open+0xac1/0xf80 [ 96.059783][ T5931] ? chrdev_open+0x596/0x6a0 [ 96.059840][ T5931] ? __pfx_tty_open+0x10/0x10 [ 96.059879][ T5931] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.059911][ T5931] ? lock_acquire+0x2f/0xb0 [ 96.059954][ T5931] ? chrdev_open+0x36b/0x6a0 [ 96.060009][ T5931] ? __pfx_tty_open+0x10/0x10 [ 96.060051][ T5931] chrdev_open+0x237/0x6a0 [ 96.060103][ T5931] ? __pfx_chrdev_open+0x10/0x10 [ 96.060158][ T5931] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 96.060211][ T5931] do_dentry_open+0x735/0x1c40 [ 96.060259][ T5931] ? __pfx_chrdev_open+0x10/0x10 [ 96.060319][ T5931] ? inode_permission+0xdd/0x5f0 [ 96.060360][ T5931] vfs_open+0x82/0x3f0 [ 96.060391][ T5931] ? may_open+0x1f2/0x400 [ 96.060433][ T5931] path_openat+0x1e88/0x2d80 [ 96.060498][ T5931] ? __pfx_path_openat+0x10/0x10 [ 96.060547][ T5931] ? __pfx___lock_acquire+0x10/0x10 [ 96.060592][ T5931] ? lock_acquire.part.0+0x11b/0x380 [ 96.060639][ T5931] ? find_held_lock+0x2d/0x110 [ 96.060680][ T5931] do_filp_open+0x20c/0x470 [ 96.060730][ T5931] ? __pfx_do_filp_open+0x10/0x10 [ 96.060776][ T5931] ? find_held_lock+0x2d/0x110 [ 96.060843][ T5931] ? alloc_fd+0x41f/0x760 [ 96.060900][ T5931] do_sys_openat2+0x17a/0x1e0 [ 96.060935][ T5931] ? __pfx_do_sys_openat2+0x10/0x10 [ 96.060988][ T5931] __x64_sys_openat+0x175/0x210 [ 96.061024][ T5931] ? __pfx___x64_sys_openat+0x10/0x10 [ 96.061079][ T5931] do_syscall_64+0xcd/0x250 [ 96.061126][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.061172][ T5931] RIP: 0033:0x7f1e5618d169 [ 96.061199][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.061240][ T5931] RSP: 002b:00007f1e56f1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.061272][ T5931] RAX: ffffffffffffffda RBX: 00007f1e563a5fa0 RCX: 00007f1e5618d169 [ 96.061293][ T5931] RDX: 0000000000000800 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 96.061321][ T5931] RBP: 00007f1e5620e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.061341][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.061360][ T5931] R13: 0000000000000000 R14: 00007f1e563a5fa0 R15: 00007ffdb3a9ef18 [ 96.061404][ T5931] [ 96.172343][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.358847][ T25] cfg80211: failed to load regulatory.db [ 97.669576][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.002085][ T5931] tty tty12: ldisc open failed (-12), clearing slot 11 [ 98.845878][ T5972] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.182690][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 100.303167][ T5991] futex_wake_op: syz.0.20 tries to shift op by 64; fix this program [ 100.929793][ T5844] Bluetooth: hci0: Malformed Event: 0x13 [ 100.966439][ T5844] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 103.239822][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 109.205526][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 110.452021][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'. [ 117.966986][ T6223] Zero length message leads to an empty skb [ 119.287381][ T6257] mkiss: ax0: crc mode is auto. [ 120.465706][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 122.070394][ T6306] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 125.396180][ T6389] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 125.442392][ T6392] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [3]. [ 126.700370][ T6412] [U] [ 126.703456][ T6412] [U] [ 126.706226][ T6412] [U] [ 126.708976][ T6412] [U] [ 126.735100][ T6412] [U] [ 126.737930][ T6412] [U] [ 126.740762][ T6412] [U] [ 126.743493][ T6412] [U] [ 126.795990][ T6412] [U] [ 126.798800][ T6412] [U] [ 126.801571][ T6412] [U] [ 126.804333][ T6412] [U] [ 126.816821][ T6412] [U] [ 126.819623][ T6412] [U] [ 126.822398][ T6412] [U] [ 126.825177][ T6412] [U] [ 126.829952][ T6412] [U] [ 126.832741][ T6412] [U] [ 126.835507][ T6412] [U] [ 126.838274][ T6412] [U] [ 126.864095][ T6412] [U] [ 126.866929][ T6412] [U] [ 126.869695][ T6412] [U] [ 126.872511][ T6412] [U] [ 126.906952][ T6412] [U] [ 126.909757][ T6412] [U] [ 126.912519][ T6412] [U] [ 126.915292][ T6412] [U] [ 126.935263][ T6412] [U] [ 126.938075][ T6412] [U] [ 126.940843][ T6412] [U] [ 126.943609][ T6412] [U] [ 126.960217][ T6412] [U] [ 126.963037][ T6412] [U] [ 126.965810][ T6412] [U] [ 126.968563][ T6412] [U] [ 126.976190][ T6412] [U] [ 126.978970][ T6412] [U] [ 126.981705][ T6412] [U] [ 126.984436][ T6412] [U] [ 126.988533][ T6412] [U] [ 126.991324][ T6412] [U] [ 126.994087][ T6412] [U] [ 126.996844][ T6412] [U] [ 127.046910][ T6412] [U] [ 127.049706][ T6412] [U] [ 127.052443][ T6412] [U] [ 127.055172][ T6412] [U] [ 127.093935][ T6412] [U] [ 127.096742][ T6412] [U] [ 127.099478][ T6412] [U] [ 127.102203][ T6412] [U] [ 127.113817][ T6418] FAULT_INJECTION: forcing a failure. [ 127.113817][ T6418] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.146468][ T6418] CPU: 1 UID: 0 PID: 6418 Comm: syz.3.114 Not tainted 6.14.0-rc4-syzkaller #0 [ 127.146506][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.146523][ T6418] Call Trace: [ 127.146532][ T6418] [ 127.146544][ T6418] dump_stack_lvl+0x16c/0x1f0 [ 127.146588][ T6418] should_fail_ex+0x50a/0x650 [ 127.146645][ T6418] _copy_to_user+0x32/0xd0 [ 127.146679][ T6418] simple_read_from_buffer+0xd0/0x160 [ 127.146724][ T6418] proc_fail_nth_read+0x198/0x270 [ 127.146762][ T6418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.146803][ T6418] ? rw_verify_area+0xcf/0x680 [ 127.146838][ T6418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.146873][ T6418] vfs_read+0x1df/0xbf0 [ 127.146913][ T6418] ? __fget_files+0x1fc/0x3a0 [ 127.146955][ T6418] ? __pfx___mutex_lock+0x10/0x10 [ 127.146994][ T6418] ? __pfx_vfs_read+0x10/0x10 [ 127.147054][ T6418] ? __fget_files+0x206/0x3a0 [ 127.147123][ T6418] ksys_read+0x12b/0x250 [ 127.147163][ T6418] ? __pfx_ksys_read+0x10/0x10 [ 127.147214][ T6418] do_syscall_64+0xcd/0x250 [ 127.147258][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.147301][ T6418] RIP: 0033:0x7f201db8bb7c [ 127.147324][ T6418] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.147354][ T6418] RSP: 002b:00007f201e972030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.147380][ T6418] RAX: ffffffffffffffda RBX: 00007f201dda5fa0 RCX: 00007f201db8bb7c [ 127.147399][ T6418] RDX: 000000000000000f RSI: 00007f201e9720a0 RDI: 0000000000000004 [ 127.147416][ T6418] RBP: 00007f201e972090 R08: 0000000000000000 R09: 0000000000000000 [ 127.147434][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.147450][ T6418] R13: 0000000000000000 R14: 00007f201dda5fa0 R15: 00007fff903e9968 [ 127.147487][ T6418] [ 127.148831][ T6412] [U] [ 127.334895][ T6412] [U] [ 127.337637][ T6412] [U] [ 127.340362][ T6412] [U] [ 127.396801][ T6412] [U] [ 127.399604][ T6412] [U] [ 127.402351][ T6412] [U] [ 127.405079][ T6412] [U] [ 127.408914][ T6412] [U] [ 127.411689][ T6412] [U] [ 127.414449][ T6412] [U] [ 127.417188][ T6412] [U] [ 127.462164][ T6412] [U] [ 127.464942][ T6412] [U] [ 127.467686][ T6412] [U] [ 127.470416][ T6412] [U] [ 127.536510][ T6412] [U] [ 127.826495][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 129.819326][ T6443] netlink: 338 bytes leftover after parsing attributes in process `syz.2.118'. [ 129.847309][ T6443] netlink: 338 bytes leftover after parsing attributes in process `syz.2.118'. [ 129.889917][ T6443] netlink: 134 bytes leftover after parsing attributes in process `syz.2.118'. [ 131.344295][ T6470] zswap: compressor not available [ 132.566232][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 132.579108][ T6496] netlink: 354 bytes leftover after parsing attributes in process `syz.1.128'. [ 133.336860][ T6514] netlink: 338 bytes leftover after parsing attributes in process `syz.0.133'. [ 133.365343][ T6514] netlink: 338 bytes leftover after parsing attributes in process `syz.0.133'. [ 133.402195][ T6514] netlink: 134 bytes leftover after parsing attributes in process `syz.0.133'. [ 134.172190][ T6524] zswap: compressor not available [ 135.106512][ T6552] zswap: compressor not available [ 138.290661][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.298343][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.426836][ T6597] tipc: Started in network mode [ 138.431918][ T6597] tipc: Node identity ee00, cluster identity 4711 [ 138.450108][ T6597] tipc: Node number set to 60928 [ 138.486549][ T6609] mmap: syz.3.155 (6609) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.750184][ T6609] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 140.972829][ T5844] Bluetooth: hci1: SCO packet too small [ 142.330410][ T5880] smpboot: CPU 0 is now offline [ 143.976915][ T6669] WARNING! power/level is deprecated; use power/control instead [ 144.496553][ T5844] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 146.391033][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 149.795701][ T6741] ======================================================= [ 149.795701][ T6741] WARNING: The mand mount option has been deprecated and [ 149.795701][ T6741] and is ignored by this kernel. Remove the mand [ 149.795701][ T6741] option from the mount to silence this warning. [ 149.795701][ T6741] ======================================================= [ 150.430943][ T6753] FAULT_INJECTION: forcing a failure. [ 150.430943][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.514106][ T6753] CPU: 1 UID: 0 PID: 6753 Comm: syz.2.194 Not tainted 6.14.0-rc4-syzkaller #0 [ 150.514134][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.514148][ T6753] Call Trace: [ 150.514153][ T6753] [ 150.514161][ T6753] dump_stack_lvl+0x16c/0x1f0 [ 150.514193][ T6753] should_fail_ex+0x50a/0x650 [ 150.514231][ T6753] _copy_to_user+0x32/0xd0 [ 150.514274][ T6753] poll_select_finish+0x33b/0x6b0 [ 150.514322][ T6753] ? __pfx_poll_select_finish+0x10/0x10 [ 150.514356][ T6753] ? read_tsc+0x9/0x20 [ 150.514398][ T6753] ? ktime_get_ts64+0x256/0x400 [ 150.514435][ T6753] kern_select+0x16f/0x1e0 [ 150.514475][ T6753] ? __pfx_kern_select+0x10/0x10 [ 150.514508][ T6753] ? xfd_validate_state+0x5d/0x180 [ 150.514541][ T6753] ? rcu_is_watching+0x12/0xc0 [ 150.514570][ T6753] __x64_sys_select+0xbd/0x160 [ 150.514601][ T6753] ? do_syscall_64+0x91/0x250 [ 150.514630][ T6753] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.514662][ T6753] do_syscall_64+0xcd/0x250 [ 150.514694][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.514727][ T6753] RIP: 0033:0x7f69ea58d169 [ 150.514745][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.514767][ T6753] RSP: 002b:00007f69ea3f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 150.514789][ T6753] RAX: ffffffffffffffda RBX: 00007f69ea7a5fa0 RCX: 00007f69ea58d169 [ 150.514805][ T6753] RDX: 0000400000000180 RSI: 0000400000000100 RDI: 00000000000000be [ 150.514819][ T6753] RBP: 00007f69ea60e2a0 R08: 0000400000000040 R09: 0000000000000000 [ 150.514834][ T6753] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000000 [ 150.514848][ T6753] R13: 0000000000000000 R14: 00007f69ea7a5fa0 R15: 00007ffe56c48208 [ 150.514875][ T6753] [ 150.694002][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.356646][ T29] audit: type=1800 audit(4294967317.352:2): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.201" name="discovery_nqn" dev="configfs" ino=12485 res=0 errno=0 [ 153.377192][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.775770][ T6811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 154.852302][ T6811] veth0_macvtap: left promiscuous mode [ 154.868898][ T6811] macvtap0: entered allmulticast mode [ 155.311068][ T6817] HfR: entered promiscuous mode [ 156.433520][ T6827] FAULT_INJECTION: forcing a failure. [ 156.433520][ T6827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.497046][ T6827] CPU: 1 UID: 0 PID: 6827 Comm: syz.3.210 Not tainted 6.14.0-rc4-syzkaller #0 [ 156.497083][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.497097][ T6827] Call Trace: [ 156.497104][ T6827] [ 156.497113][ T6827] dump_stack_lvl+0x16c/0x1f0 [ 156.497147][ T6827] should_fail_ex+0x50a/0x650 [ 156.497189][ T6827] _copy_to_user+0x32/0xd0 [ 156.497214][ T6827] poll_select_finish+0x33b/0x6b0 [ 156.497248][ T6827] ? __pfx_poll_select_finish+0x10/0x10 [ 156.497283][ T6827] ? read_tsc+0x9/0x20 [ 156.497307][ T6827] ? ktime_get_ts64+0x256/0x400 [ 156.497343][ T6827] kern_select+0x16f/0x1e0 [ 156.497375][ T6827] ? __pfx_kern_select+0x10/0x10 [ 156.497408][ T6827] ? xfd_validate_state+0x5d/0x180 [ 156.497441][ T6827] ? rcu_is_watching+0x12/0xc0 [ 156.497469][ T6827] __x64_sys_select+0xbd/0x160 [ 156.497500][ T6827] ? do_syscall_64+0x91/0x250 [ 156.497529][ T6827] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.497557][ T6827] do_syscall_64+0xcd/0x250 [ 156.497588][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.497620][ T6827] RIP: 0033:0x7f201db8d169 [ 156.497637][ T6827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.497660][ T6827] RSP: 002b:00007f201e972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 156.497681][ T6827] RAX: ffffffffffffffda RBX: 00007f201dda5fa0 RCX: 00007f201db8d169 [ 156.497697][ T6827] RDX: 0000400000000180 RSI: 0000400000000100 RDI: 00000000000000be [ 156.497711][ T6827] RBP: 00007f201dc0e2a0 R08: 0000400000000040 R09: 0000000000000000 [ 156.497726][ T6827] R10: 0000400000000240 R11: 0000000000000246 R12: 0000000000000000 [ 156.497740][ T6827] R13: 0000000000000000 R14: 00007f201dda5fa0 R15: 00007fff903e9968 [ 156.497766][ T6827] [ 157.251521][ T29] audit: type=1800 audit(4294967321.262:3): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.214" name="discovery_nqn" dev="configfs" ino=13077 res=0 errno=0 [ 158.214075][ T6873] netlink: 342 bytes leftover after parsing attributes in process `syz.3.218'. [ 158.236816][ T6873] netlink: 326 bytes leftover after parsing attributes in process `syz.3.218'. [ 159.572259][ T6841] tty tty1: ldisc open failed (-12), clearing slot 0 [ 159.612084][ T6866] tty tty17: ldisc open failed (-12), clearing slot 16 [ 160.285889][ T6896] Console: switching to colour VGA+ 80x25 [ 160.857470][ T6905] delete_channel: no stack [ 161.188086][ T6911] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 161.274236][ T6916] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 161.397450][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 161.496958][ T6914] svc: failed to register nfsdv3 RPC service (errno 111). [ 161.574933][ T6914] svc: failed to register nfsaclv3 RPC service (errno 111). [ 162.229761][ T6931] netlink: 346 bytes leftover after parsing attributes in process `syz.0.232'. [ 163.729948][ T6958] can: request_module (can-proto-4) failed. [ 164.212170][ T6965] Invalid ELF header magic: != ELF [ 164.698518][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'. [ 165.076577][ T6981] FAULT_INJECTION: forcing a failure. [ 165.076577][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 165.246539][ T6981] CPU: 1 UID: 0 PID: 6981 Comm: syz.0.242 Not tainted 6.14.0-rc4-syzkaller #0 [ 165.246571][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.246585][ T6981] Call Trace: [ 165.246592][ T6981] [ 165.246601][ T6981] dump_stack_lvl+0x16c/0x1f0 [ 165.246636][ T6981] should_fail_ex+0x50a/0x650 [ 165.246673][ T6981] ? fs_reclaim_acquire+0xae/0x150 [ 165.246705][ T6981] ? sk_prot_alloc+0x1a8/0x2a0 [ 165.246728][ T6981] should_failslab+0xc2/0x120 [ 165.246750][ T6981] __kmalloc_noprof+0xcb/0x510 [ 165.246786][ T6981] ? __wake_up+0x3f/0x60 [ 165.246820][ T6981] sk_prot_alloc+0x1a8/0x2a0 [ 165.246844][ T6981] sk_alloc+0x36/0xb90 [ 165.246875][ T6981] ? __pfx_genl_release+0x10/0x10 [ 165.246910][ T6981] __netlink_create+0x5e/0x2c0 [ 165.246933][ T6981] ? __wake_up+0x3f/0x60 [ 165.246964][ T6981] netlink_create+0x3a4/0x630 [ 165.246991][ T6981] ? __pfx_genl_bind+0x10/0x10 [ 165.247023][ T6981] ? __pfx_genl_unbind+0x10/0x10 [ 165.247061][ T6981] __sock_create+0x335/0x8d0 [ 165.247091][ T6981] __sys_socket+0x14f/0x260 [ 165.247117][ T6981] ? __pfx___sys_socket+0x10/0x10 [ 165.247144][ T6981] ? rcu_is_watching+0x12/0xc0 [ 165.247173][ T6981] __x64_sys_socket+0x72/0xb0 [ 165.247203][ T6981] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.247232][ T6981] do_syscall_64+0xcd/0x250 [ 165.247263][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.247297][ T6981] RIP: 0033:0x7f44b6f8d169 [ 165.247316][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.247338][ T6981] RSP: 002b:00007f44b7da2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 165.247360][ T6981] RAX: ffffffffffffffda RBX: 00007f44b71a6080 RCX: 00007f44b6f8d169 [ 165.247376][ T6981] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 165.247390][ T6981] RBP: 00007f44b700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.247404][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.247426][ T6981] R13: 0000000000000000 R14: 00007f44b71a6080 R15: 00007ffee813d3a8 [ 165.247453][ T6981] [ 166.396065][ T6971] geneve1: entered allmulticast mode [ 167.962757][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 170.379042][ T7039] ptm ptm12: ldisc open failed (-12), clearing slot 12 [ 171.462698][ T7064] FAULT_INJECTION: forcing a failure. [ 171.462698][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 171.642390][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.2.263 Not tainted 6.14.0-rc4-syzkaller #0 [ 171.642423][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.642438][ T7064] Call Trace: [ 171.642444][ T7064] [ 171.642453][ T7064] dump_stack_lvl+0x16c/0x1f0 [ 171.642488][ T7064] should_fail_ex+0x50a/0x650 [ 171.642526][ T7064] ? fs_reclaim_acquire+0xae/0x150 [ 171.642559][ T7064] should_failslab+0xc2/0x120 [ 171.642582][ T7064] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 171.642619][ T7064] ? __kernfs_new_node+0xd3/0x890 [ 171.642657][ T7064] __kernfs_new_node+0xd3/0x890 [ 171.642692][ T7064] ? __pfx___kernfs_new_node+0x10/0x10 [ 171.642725][ T7064] ? __pfx_lock_release+0x10/0x10 [ 171.642758][ T7064] ? kernfs_add_one+0x39d/0x520 [ 171.642804][ T7064] ? up_write+0x1b2/0x520 [ 171.642844][ T7064] kernfs_new_node+0x186/0x240 [ 171.642886][ T7064] __kernfs_create_file+0x53/0x350 [ 171.642915][ T7064] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 171.642952][ T7064] internal_create_group+0x56c/0xf10 [ 171.642999][ T7064] ? __pfx_internal_create_group+0x10/0x10 [ 171.643037][ T7064] ? kernfs_create_link+0x1bd/0x240 [ 171.643067][ T7064] internal_create_groups+0x9d/0x150 [ 171.643103][ T7064] device_add+0x781/0x1a70 [ 171.643139][ T7064] ? __pfx_device_add+0x10/0x10 [ 171.643174][ T7064] ? __init_waitqueue_head+0xca/0x150 [ 171.643207][ T7064] netdev_register_kobject+0x183/0x3a0 [ 171.643258][ T7064] register_netdevice+0x147b/0x1eb0 [ 171.643298][ T7064] ? idr_alloc+0xde/0x130 [ 171.643323][ T7064] ? __pfx_register_netdevice+0x10/0x10 [ 171.643367][ T7064] ppp_dev_configure+0x99e/0xc80 [ 171.643400][ T7064] ppp_ioctl+0x17eb/0x2590 [ 171.643426][ T7064] ? __pfx_lock_release+0x10/0x10 [ 171.643462][ T7064] ? trace_lock_acquire+0x14e/0x1f0 [ 171.643489][ T7064] ? __pfx_ppp_ioctl+0x10/0x10 [ 171.643521][ T7064] ? __fget_files+0x206/0x3a0 [ 171.643558][ T7064] ? __pfx_ppp_ioctl+0x10/0x10 [ 171.643586][ T7064] __x64_sys_ioctl+0x190/0x200 [ 171.643615][ T7064] do_syscall_64+0xcd/0x250 [ 171.643647][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.643680][ T7064] RIP: 0033:0x7f69ea58d169 [ 171.643698][ T7064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.643720][ T7064] RSP: 002b:00007f69ea3f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.643741][ T7064] RAX: ffffffffffffffda RBX: 00007f69ea7a5fa0 RCX: 00007f69ea58d169 [ 171.643756][ T7064] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000a [ 171.643770][ T7064] RBP: 00007f69ea60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.643783][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.643797][ T7064] R13: 0000000000000000 R14: 00007f69ea7a5fa0 R15: 00007ffe56c48208 [ 171.643824][ T7064] [ 174.860524][ T7073] bridge0: port 3(bond0) entered blocking state [ 174.927967][ T7072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.934095][ T7072] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.972937][ T7073] bridge0: port 3(bond0) entered disabled state [ 175.006627][ T7073] bond0: entered allmulticast mode [ 175.046417][ T7073] bond_slave_0: entered allmulticast mode [ 175.099944][ T7073] bond_slave_1: entered allmulticast mode [ 175.152138][ T7072] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 175.182211][ T7073] bond0: entered promiscuous mode [ 175.254128][ T7073] bond_slave_0: entered promiscuous mode [ 175.319181][ T7073] bond_slave_1: entered promiscuous mode [ 175.379110][ T7072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.389109][ T7073] bridge0: port 3(bond0) entered blocking state [ 175.396402][ T7073] bridge0: port 3(bond0) entered forwarding state [ 175.446364][ T7072] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.620918][ T7072] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.782145][ T7072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.881449][ T7072] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.117039][ T7072] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.312668][ T7072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.405142][ T7072] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.894352][ T7072] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.951050][ T7072] CPU0 is offline. [ 177.006382][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.231405][ T7093] random: crng reseeded on system resumption [ 177.341480][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 177.406333][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.599335][ T7086] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 177.816356][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.370641][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.086392][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.486392][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.886493][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.446460][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.166463][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.566480][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.966378][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.526389][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.579830][ T7133] process 'syz.0.279' launched '/dev/fd/5' with NULL argv: empty string added [ 182.890393][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 184.337396][ T7130] bridge0: port 3(bond0) entered blocking state [ 184.343809][ T7130] bridge0: port 3(bond0) entered disabled state [ 184.461663][ T7130] bond0: entered allmulticast mode [ 184.603969][ T7130] bond_slave_0: entered allmulticast mode [ 184.736786][ T7130] bond_slave_1: entered allmulticast mode [ 184.743903][ T7130] bond0: entered promiscuous mode [ 185.080176][ T7130] bond_slave_0: entered promiscuous mode [ 185.147654][ T7130] bond_slave_1: entered promiscuous mode [ 185.254958][ T7130] bridge0: port 3(bond0) entered blocking state [ 185.261372][ T7130] bridge0: port 3(bond0) entered forwarding state [ 185.494872][ T7163] HfR: entered promiscuous mode [ 185.564433][ T7174] netlink: 294 bytes leftover after parsing attributes in process `syz.0.290'. [ 186.183675][ T7182] netlink: 342 bytes leftover after parsing attributes in process `syz.2.293'. [ 188.037025][ T7210] netlink: 342 bytes leftover after parsing attributes in process `syz.2.300'. [ 188.046067][ T7210] IPv6: Can't replace route, no match found [ 192.915234][ T7280] netlink: 342 bytes leftover after parsing attributes in process `syz.0.315'. [ 193.293472][ T7285] ================================================================== [ 193.293491][ T7285] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa15/0xc80 [ 193.293547][ T7285] Read of size 256 at addr ffff888033e96f60 by task syz.0.317/7285 [ 193.293567][ T7285] [ 193.293575][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.0.317 Not tainted 6.14.0-rc4-syzkaller #0 [ 193.293600][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.293619][ T7285] Call Trace: [ 193.293626][ T7285] [ 193.293634][ T7285] dump_stack_lvl+0x116/0x1f0 [ 193.293664][ T7285] print_report+0xc3/0x670 [ 193.293701][ T7285] ? __virt_addr_valid+0x5e/0x590 [ 193.293735][ T7285] ? __phys_addr+0xc6/0x150 [ 193.293775][ T7285] kasan_report+0xd9/0x110 [ 193.293794][ T7285] ? fbcon_prepare_logo+0xa15/0xc80 [ 193.293823][ T7285] ? fbcon_prepare_logo+0xa15/0xc80 [ 193.293854][ T7285] kasan_check_range+0xef/0x1a0 [ 193.293880][ T7285] __asan_memcpy+0x23/0x60 [ 193.293910][ T7285] fbcon_prepare_logo+0xa15/0xc80 [ 193.293943][ T7285] fbcon_init+0xd41/0x1890 [ 193.293971][ T7285] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 193.294008][ T7285] visual_init+0x31d/0x620 [ 193.294028][ T7285] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 193.294057][ T7285] store_bind+0x61d/0x760 [ 193.294084][ T7285] ? __pfx_store_bind+0x10/0x10 [ 193.294107][ T7285] dev_attr_store+0x55/0x80 [ 193.294134][ T7285] ? __pfx_dev_attr_store+0x10/0x10 [ 193.294161][ T7285] sysfs_kf_write+0x117/0x170 [ 193.294185][ T7285] kernfs_fop_write_iter+0x33d/0x500 [ 193.294206][ T7285] ? __pfx_sysfs_kf_write+0x10/0x10 [ 193.294231][ T7285] vfs_write+0x5ae/0x1150 [ 193.294260][ T7285] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 193.294283][ T7285] ? __pfx___mutex_lock+0x10/0x10 [ 193.294310][ T7285] ? __pfx_vfs_write+0x10/0x10 [ 193.294346][ T7285] ksys_write+0x12b/0x250 [ 193.294374][ T7285] ? __pfx_ksys_write+0x10/0x10 [ 193.294407][ T7285] do_syscall_64+0xcd/0x250 [ 193.294434][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.294466][ T7285] RIP: 0033:0x7f44b6f8d169 [ 193.294482][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.294502][ T7285] RSP: 002b:00007f44b7dc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.294522][ T7285] RAX: ffffffffffffffda RBX: 00007f44b71a5fa0 RCX: 00007f44b6f8d169 [ 193.294545][ T7285] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 193.294558][ T7285] RBP: 00007f44b700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.294571][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.294584][ T7285] R13: 0000000000000000 R14: 00007f44b71a5fa0 R15: 00007ffee813d3a8 [ 193.294603][ T7285] [ 193.294611][ T7285] [ 193.294616][ T7285] The buggy address belongs to the physical page: [ 193.294630][ T7285] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888033e94340 pfn:0x33e94 [ 193.294650][ T7285] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 193.294667][ T7285] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 193.294697][ T7285] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 193.294717][ T7285] raw: ffff888033e94340 0000000000000000 00000001ffffffff 0000000000000000 [ 193.294736][ T7285] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 193.294755][ T7285] head: ffff888033e94340 0000000000000000 00000001ffffffff 0000000000000000 [ 193.294775][ T7285] head: 00fff00000000002 ffffea0000cfa501 ffffffffffffffff 0000000000000000 [ 193.294794][ T7285] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 193.294806][ T7285] page dumped because: kasan: bad access detected [ 193.294819][ T7285] page_owner tracks the page as allocated [ 193.294826][ T7285] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 7285, tgid 7284 (syz.0.317), ts 193263994848, free_ts 193235941647 [ 193.294860][ T7285] post_alloc_hook+0x181/0x1b0 [ 193.294890][ T7285] get_page_from_freelist+0xfce/0x2f80 [ 193.294922][ T7285] __alloc_frozen_pages_noprof+0x221/0x2470 [ 193.294955][ T7285] __alloc_pages_noprof+0xb/0x1b0 [ 193.295006][ T7285] ___kmalloc_large_node+0x84/0x1b0 [ 193.295032][ T7285] __kmalloc_large_node_noprof+0x1c/0x70 [ 193.295059][ T7285] __kmalloc_noprof.cold+0xc/0x61 [ 193.295079][ T7285] vc_do_resize+0x1e3/0x10f0 [ 193.295102][ T7285] fbcon_init+0xd1d/0x1890 [ 193.295128][ T7285] visual_init+0x31d/0x620 [ 193.295146][ T7285] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 193.295172][ T7285] store_bind+0x61d/0x760 [ 193.295195][ T7285] dev_attr_store+0x55/0x80 [ 193.295221][ T7285] sysfs_kf_write+0x117/0x170 [ 193.295244][ T7285] kernfs_fop_write_iter+0x33d/0x500 [ 193.295265][ T7285] vfs_write+0x5ae/0x1150 [ 193.295294][ T7285] page last free pid 7285 tgid 7284 stack trace: [ 193.295305][ T7285] free_frozen_pages+0x6db/0xfb0 [ 193.295337][ T7285] __folio_put+0x32a/0x450 [ 193.295364][ T7285] vc_do_resize+0xe31/0x10f0 [ 193.295387][ T7285] fbcon_startup+0x406/0xb70 [ 193.295412][ T7285] do_bind_con_driver.isra.0+0x207/0xbf0 [ 193.295437][ T7285] store_bind+0x61d/0x760 [ 193.295460][ T7285] dev_attr_store+0x55/0x80 [ 193.295487][ T7285] sysfs_kf_write+0x117/0x170 [ 193.295509][ T7285] kernfs_fop_write_iter+0x33d/0x500 [ 193.295537][ T7285] vfs_write+0x5ae/0x1150 [ 193.295565][ T7285] ksys_write+0x12b/0x250 [ 193.295594][ T7285] do_syscall_64+0xcd/0x250 [ 193.295622][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.295664][ T7285] [ 193.295669][ T7285] Memory state around the buggy address: [ 193.295679][ T7285] ffff888033e96f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 193.295693][ T7285] ffff888033e96f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 193.295708][ T7285] >ffff888033e97000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 193.295720][ T7285] ^ [ 193.295748][ T7285] ffff888033e97080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 193.295764][ T7285] ffff888033e97100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 193.295776][ T7285] ================================================================== [ 193.384967][ T7285] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.384985][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.0.317 Not tainted 6.14.0-rc4-syzkaller #0 [ 193.385012][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.385026][ T7285] Call Trace: [ 193.385033][ T7285] [ 193.385042][ T7285] dump_stack_lvl+0x3d/0x1f0 [ 193.385094][ T7285] panic+0x71d/0x800 [ 193.385120][ T7285] ? __pfx_panic+0x10/0x10 [ 193.385148][ T7285] ? preempt_schedule_thunk+0x1a/0x30 [ 193.385180][ T7285] ? preempt_schedule_common+0x44/0xc0 [ 193.385212][ T7285] check_panic_on_warn+0xab/0xb0 [ 193.385240][ T7285] end_report+0x117/0x180 [ 193.385277][ T7285] kasan_report+0xe9/0x110 [ 193.385298][ T7285] ? fbcon_prepare_logo+0xa15/0xc80 [ 193.385329][ T7285] ? fbcon_prepare_logo+0xa15/0xc80 [ 193.385362][ T7285] kasan_check_range+0xef/0x1a0 [ 193.385389][ T7285] __asan_memcpy+0x23/0x60 [ 193.385420][ T7285] fbcon_prepare_logo+0xa15/0xc80 [ 193.385455][ T7285] fbcon_init+0xd41/0x1890 [ 193.385485][ T7285] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 193.385512][ T7285] visual_init+0x31d/0x620 [ 193.385544][ T7285] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 193.385576][ T7285] store_bind+0x61d/0x760 [ 193.385606][ T7285] ? __pfx_store_bind+0x10/0x10 [ 193.385633][ T7285] dev_attr_store+0x55/0x80 [ 193.385664][ T7285] ? __pfx_dev_attr_store+0x10/0x10 [ 193.385694][ T7285] sysfs_kf_write+0x117/0x170 [ 193.385721][ T7285] kernfs_fop_write_iter+0x33d/0x500 [ 193.385745][ T7285] ? __pfx_sysfs_kf_write+0x10/0x10 [ 193.385772][ T7285] vfs_write+0x5ae/0x1150 [ 193.385805][ T7285] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 193.385831][ T7285] ? __pfx___mutex_lock+0x10/0x10 [ 193.385861][ T7285] ? __pfx_vfs_write+0x10/0x10 [ 193.385901][ T7285] ksys_write+0x12b/0x250 [ 193.385933][ T7285] ? __pfx_ksys_write+0x10/0x10 [ 193.385970][ T7285] do_syscall_64+0xcd/0x250 [ 193.386001][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.386036][ T7285] RIP: 0033:0x7f44b6f8d169 [ 193.386053][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.386077][ T7285] RSP: 002b:00007f44b7dc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.386099][ T7285] RAX: ffffffffffffffda RBX: 00007f44b71a5fa0 RCX: 00007f44b6f8d169 [ 193.386115][ T7285] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 193.386130][ T7285] RBP: 00007f44b700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.386145][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.386159][ T7285] R13: 0000000000000000 R14: 00007f44b71a5fa0 R15: 00007ffee813d3a8 [ 193.386181][ T7285] [ 193.386239][ T7285] Kernel Offset: disabled