last executing test programs: 13.632926576s ago: executing program 1 (id=38): r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000100)='1', 0x1) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) pread64$auto(0xffffffffffffffff, 0x0, 0x5, 0x8) setsockopt$auto(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x52b) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') mmap$auto(0x0, 0x400007, 0x19dc, 0x13, 0x2, 0x7fff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0x400, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x0, 0x0, 0xff, 0x4, 0x6, 0x7, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x1, 0x4, 0x7, 0x16128f2c, 0x5, 0x200000000000, 0x100000000, 0xffffffffefffffff, 0x3, 0x0, 0x8000, 0x2, 0x8000000000003, 0x400000000005b8, 0xc, 0xffffffffffffffff, 0x8, 0x4, 0x6, 0x6, 0x890, 0x800000000000a, 0x3, 0x1000, 0xa38, 0x6, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x200000000008, 0x0, 0x100000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sysfs$auto(0x8, 0xcd, 0x6f3) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(r2, 0xffffffffffffffff, 0x6) fanotify_init$auto(0x5, 0x2000000000002) prctl$auto_PR_SET_UNALIGN(0x6, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xdc69) sendmmsg$auto(r2, 0x0, 0x7, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x11, 0x80003, 0x307) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0xbb0c, 0x329, 0x10011, 0x2, 0x8000) 6.385403739s ago: executing program 2 (id=59): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) mq_open$auto(&(0x7f0000000000)='/dev/sequencer2\x00', 0x5, 0x3, &(0x7f0000000040)={0xe7a2, 0x0, 0x1, 0xa}) sendmsg$auto_NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0x2000000000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000c00)={0x0, 0xff9e, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, r1, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) 5.924170711s ago: executing program 0 (id=60): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x3, 0x8000000000008, 0x10007ffffffffff, 0x12, 0xffffffffffffffff, 0x7ffe) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) poll$auto(0x0, 0x0, 0x7) getsockopt$auto_SO_MEMINFO(r0, 0x2, 0x37, 0x0, &(0x7f0000000100)=0x568) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, 0xffffffffffffffff, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x4801, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.888579941s ago: executing program 3 (id=61): rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) madvise$auto(0x405, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) sendmmsg$auto(0x4, 0x0, 0x10009a6, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf251f0000002a000e007cc94cdc0e692184223731c162994248da730bbd648b63002a22aa521189405061cee59cd5f9b8a5ba23b825461539b678d760f59a00000fbc34da6b7e880888016c43b5f865d4d348a6e4bb25173082e079457582ace3da6d174b30e31a080ec949ec1e35f4dcb441461d7056779e4df87518a61e1d8cb2b3739a63908ef95f9eb950ae401b5c8befdc02b275c57148d3000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20040054) writev$auto(r0, 0x0, 0x7) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, 0x0, 0x454002, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x7, 0x2020009, 0x3, 0xfb10, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd10\x00', 0x81440, 0x0) setresuid$auto(0x2, 0x7, 0x0) ioctl$auto_IOC_PR_RELEASE(r3, 0x401070ca, 0x0) mbind$auto(0x0, 0xfa9d, 0x8001, 0x0, 0x400, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) socketpair$auto(0x4d2cf812, 0x5, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r1) 4.756510172s ago: executing program 0 (id=62): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x143080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0xeda5, 0xc86) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES16=r1, @ANYBLOB="01002bbd700001dcdf251d00000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x880) gettimeofday$auto(&(0x7f0000000040)={0xb1c3, 0x401}, 0x0) 4.72540522s ago: executing program 2 (id=63): read$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000841) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0) write$auto_tty_fops_tty_io(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x5, 0x400008, 0x200, 0x14, 0x2, 0x8000) madvise$auto(0x0, 0x8001, 0xe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000011c0)}, 0x58) mmap$auto(0x2, 0xd5, 0x800000000000000, 0x9b72, 0x2, 0x8001) madvise$auto(0x1ffff000, 0x7, 0x100000000) 3.865184455s ago: executing program 3 (id=64): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/security/tomoyo/manager\x00', 0x70880, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/mpls/platform_labels\x00', 0x400202, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x2100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x466602, 0x22) bpf$auto(0x68, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x6, 0x5, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x632, 0x57d, 0x1ff, 0x8}, 0xa3) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x3, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r1, 0xc0844123, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200000, 0x100) r3 = socket(0x2, 0x801, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r6 = geteuid() sendmsg$auto_NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid=r6}]}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x80) ioprio_get$auto(0x360, r6) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000340)={{0x460, 0x0, 0x0, 0x1, 0xde, 0x9, 0x7}, 0x1, 0x4, 0x3bf1, 0x8000000000000001, @inferred, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)="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", &(0x7f0000000300)="5828bd5973ba63078e969a108387855a6e60d41232ffa7bec65d3d207128301f286f96c67fe3a752fb497e8adf"}) statx$auto(r2, &(0x7f0000000180)='./file0\x00', 0x9, 0x3, &(0x7f00000003c0)={0x9734c847, 0xf, 0x4, 0x7, r6, r7, 0xb5c8, 0x9f, 0x3, 0x8000000000000001, 0x9, 0x8, {0x3, 0x4}, {0x3, 0x2}, {0xa9b, 0x7}, {0x6, 0x5}, 0x4, 0x3d9, 0x69de, 0x42, 0x9, 0x927a, 0x2, 0x2, 0x5, 0x8, 0xfffffff7, 0xfe3, [0x3, 0x8001, 0x4, 0x0, 0x401, 0x2, 0x1ff, 0x0, 0x5]}) 3.693901899s ago: executing program 0 (id=65): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/sound/ctl-led/speaker/card1/power/control\x00', 0x151000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000002080)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r5, 0x4b41, 0x1) write$auto_tracing_mark_fops_trace(r1, &(0x7f0000000340)="e2ba820f864be25abc1e38047a404f0e734d75b73609749113188da98453a1f7a54ebc1d3b2b5138fe50a27ca96688c506812e2a50245183d5732b709d75673d0624a9543863e3cfd8485726561a6bed52197ab0b56f1b762435a1507044d2fab43ce0f79950cc358660c321020737ee0b0b7ef27d77273c5433edb825d37212bbda7bd3680542f1154fd4e2f1a1c2083d2f50340e020c20342017b8b71760452a3e7ae5dcd395000e9900032110c8e1743916a1d15de8a223f188cb82f2170d3ea1abe182ea306fa556f7f2404e0444b6d2af816fa4dbbc1298825b7168009ab278fc2ce00fffc3f8b935c098d0f6083f4b4b7981960c6600"/258, 0x102) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x4, 0x3e, 0xcc7f) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000038c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002a010000800000000000000008000900bae50000fdce1a93c7797f0ce7cda982ce33a6a6ef48984220c823be336ff8b1cec6d28eec16f93c69d41e36f621f46d75"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) 3.691867968s ago: executing program 1 (id=66): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db563610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000002, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0xc, 0x2, "4c6c8e85b194f29b6efd901e"}, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x302100d, 0x3, 0x40040000000eb2, 0xfffffffffffffffb, 0x8000) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x212040, 0x0) mq_timedreceive$auto(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffefec03f00"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub3/xrun_injection\x00', 0x100, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_FS_IOC_ZERO_RANGE(r3, 0x40305839, r5) writev$auto(r6, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_setup$auto(0x6, 0x0) r7 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r7) 3.503366013s ago: executing program 3 (id=67): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd9650200000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1) read$auto(r1, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="e00013"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.962206178s ago: executing program 2 (id=68): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x841, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xb) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, 0x0, 0x4c0bb3f9aa207097, 0x0) socket(0x2b, 0x1, 0x4) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fanotify_init$auto(0x5, 0x2000000000002) pipe$auto(0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x309001, 0x0) ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0) unshare$auto(0x5) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f00000002c0)=""/182, 0xb6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bond0/queues/rx-7/rps_cpus\x00', 0x143680, 0x0) mprotect$auto(0x4, 0x9, 0x10a9a0000000) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000001c0)={0x0, 0x55, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0xa, 0x802, 0x3a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/167, 0xa7) shmget$auto(0xa, 0x10563, 0x568d1af2) shmat$auto(0x0, 0x0, 0x873) mmap$auto(0x0, 0x2020009, 0x3, 0x20eb1, 0xffffffffffffffff, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/226, 0xe2) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) 2.845264175s ago: executing program 3 (id=69): mmap$auto(0x1, 0x2, 0xff, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x852, 0x1, 0x2, {0x2e40, 0x10000}, 0x200003, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa746, 0x5, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = socket(0x11, 0x2, 0x40000e) capset$auto(0x0, &(0x7f0000000000)={0xfffffffe, 0x40, 0x4a}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f00000002c0)="6f282e3002104a926c1cb08772e97bcc0e379d185cb90a1b26dfac2c351757e1d04486087c8e906e83a67fc86529468155cc2b553f5c112b0cf43ab016f687294e2a80a58ce7cf2a67c0bd341dce8c8e35d8db0cbc7e641d375129217e1614b76f093858346e2500dc8c181794fd55b17ce4caf8ebb6f04a74355c2d37f60f4af63153c2c652685cfead38d0efcef4b022b0205c4e71ba24e92d4debaed09b85725c8cbb4680e4ef522add26eb57e8f566ad94fe946d86c1099a50bc", 0x805aa, 0x0, 0x2e, 0x0, 0x7, 0x80001083}, 0x5}, 0xaf2, 0x100) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0xca, 0x0, 0x8) write$auto(r2, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x4dc881, 0x0) setfsuid$auto(0xee00) fstat$auto(r2, &(0x7f00000006c0)={0xfffffffffffffff8, 0x8, 0x40000000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x37, 0x3, 0x5, 0x10f7, 0xf, 0x6, 0x5, 0x3cc6}) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800040003808987714800000000000000000000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf3cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffb, 0x12, 0xfffffffffffffffa, 0x8000) msgget$auto(0xa, 0x77d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/speed\x00', 0x80000, 0x0) 2.711607305s ago: executing program 1 (id=70): ioctl$auto_MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000040)={0x170, 0x3, 0x80, 0x4, 0x9, 0xa, 0x81, 0xe, 0x7, 0xffffffff, 0x339, 0x0, 0xffffffff, @iso={0x2, 0x204}, 0x5, 0x0, 0x1, 0x10000}, 0x0, 0x100040000000000}) r0 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000004c0), 0x401, 0x0) connect$auto(r0, &(0x7f0000000500)=@sco, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x48, &(0x7f0000000340)='\x03\x00\xd7S1\x1ax\xd8\xe8\x05\xff\xcd9\xd5\xe1\xe70\x1b\xb5\xce(QZ\xbf2Zk\np\xd3\b\x00L\xb8\xbf\x89\xf9\xb6\xf9\xc2O\x90\x854\xb6gM|\x8c}\x8d\xf3\x12j\xe0\xff\xdf\x1f4h\x1f\xa5\x8b*\xe1BH\xcc\x98\xe7\x1e\xfa.\x02\xb00\x9e\x94&\xcc\xb2\xb5\x92\x86\xc8|\xcf0xffffffffffffffff, 0x0, 0x8, 0x80000000, 0x0, 0x8}, 0x1, 0x1, 0x1, 0xfffffffffffffffd, @raw=0x77e, @raw=0x80000001, 0x2, 0x0, &(0x7f0000000540)="ad18ccaf6e581ea38b833118babad478f86724ff3b26099e5a6153614e6d02d1d6f2c26a2e50c410a0e4d6ffc331b5dbf9f218750cb7f312647c35d0e811f791b67f5da17521dca3ecef44646ce3af4837539b46ee5f14f1689a46115bc990e9a5cccec35b2f909d8632e78d9186ce3dc1063375299c54c7118d33288309a598bc7d7eae90889dcb64da716db282f5774b48a3ca0e975406eb6c8f6b895d65c1a0f620b2d75f88c9bf8e12f87a6146650f5bd779ac6d3eefbcf24bdfd94e10aa2f90a7d6df8dd467caef9a2285af47c2d2", &(0x7f0000000640)="a676dea8d2cf489613e9b8f830d0bb76bd36f05f9cded54a84ec76e04ca483a6a37fe3f3451e7cf5036badeeef31a03cb9b4a9485fa7fce31df369d462dbfb026790a57f111e71dc5a5e98168902d4c0c7fd5feb3778aabb8255c4c9d10abc4bfb091fd93e99fd01e1455fa01dbfa6571bbd21af840a0e5df6a00ba1a661b33ef8764a3fa65348139b52cee6d1e43bad1ad1b6f18ee270f6d9263ddab63bc41c2a8aedc1be873c8e7ac50ec940f7e783cf739cf2c1c511991bf879aad442efc48a0f5f"}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, r3, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2.323976885s ago: executing program 1 (id=71): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) listen$auto(0x3, 0x83) listen$auto(0x3, 0x81) r2 = socket(0xd, 0x80000, 0x40000000) getsockopt$auto(r2, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x10009b) r3 = socket(0x2, 0x801, 0x100) getsockopt$auto_SO_PEERNAME(r3, 0x6, 0x1c, 0x0, &(0x7f0000000040)=0x5be) connect$auto(0x3, &(0x7f00000000c0), 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket(0x2, 0xa, 0x1) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r4, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffff9, 0x8000200008011, r5, 0x8000) mmap$auto(0x0, 0xe, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x7}, 0x7}, 0xd, 0x0) 2.268323982s ago: executing program 0 (id=72): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/sound/ctl-led/speaker/card1/power/control\x00', 0x151000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000002080)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r4, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r5, 0x4b41, 0x1) write$auto_tracing_mark_fops_trace(r1, &(0x7f0000000340)="e2ba820f864be25abc1e38047a404f0e734d75b73609749113188da98453a1f7a54ebc1d3b2b5138fe50a27ca96688c506812e2a50245183d5732b709d75673d0624a9543863e3cfd8485726561a6bed52197ab0b56f1b762435a1507044d2fab43ce0f79950cc358660c321020737ee0b0b7ef27d77273c5433edb825d37212bbda7bd3680542f1154fd4e2f1a1c2083d2f50340e020c20342017b8b71760452a3e7ae5dcd395000e9900032110c8e1743916a1d15de8a223f188cb82f2170d3ea1abe182ea306fa556f7f2404e0444b6d2af816fa4dbbc1298825b7168009ab278fc2ce00fffc3f8b935c098d0f6083f4b4b7981960c6600"/259, 0x103) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x4, 0x3e, 0xcc7f) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002a010000800000000000000008000900bae50000fdce1a93c7797f0ce7cda982ce33a6a6ef48984220c823be336ff8b1cec6d28eec16f93c69d41e36f621f46d75"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) 2.084395699s ago: executing program 2 (id=73): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x80, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000002, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x1333}) socket(0x2b, 0x1, 0x1) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x302100d, 0x3, 0x10010, 0xfffffffffffffffb, 0x8000) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x212040, 0x0) mq_timedreceive$auto(r1, 0x0, 0x3, 0x0, 0x0) r2 = socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto(0xffffffffffffffff, 0x0, 0xcc9c) r3 = getsockopt$auto_SO_RCVTIMEO_NEW(0xffffffffffffffff, 0x7, 0x42, &(0x7f0000000140)='/dev/snd/midiC2D1\x00', &(0x7f0000000180)=0xfb) write$auto_sg_fops_sg(r3, &(0x7f00000001c0)="19c67d0da93b412c75e40729641111dbbd1b7e590e33a99914e3d8f0cd2cfc311eae1672a233dfc491887a1b57f4d359f22a9fc11af17c7a126119ce084a760d10a4fb4d715197d478403fc808", 0x4d) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffefec03f00"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub3/xrun_injection\x00', 0x100, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_FS_IOC_ZERO_RANGE(r2, 0x40305839, r5) writev$auto(r6, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x1d, 0x2, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r7) getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0, 0x15b8}, 0x1, 0x0, 0x0, 0x40000}, 0x40400a1) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x0) 1.807102523s ago: executing program 3 (id=74): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0xe) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/nvme/parameters/write_queues\x00', 0x8502, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) socket(0x2a, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x55) mmap$auto(0x0, 0x7f, 0xdf, 0x9b70, 0x2, 0x8000) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r2, 0x0, 0x1001) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fb\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181040, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x2100, 0x0) socket(0x29, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8282, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) io_uring_setup$auto(0x400d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r4 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000040), 0x301080, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRESOCT=r4, @ANYRES32=r3], 0x18}}, 0x80) 1.52307579s ago: executing program 2 (id=75): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/security/tomoyo/manager\x00', 0x70880, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/mpls/platform_labels\x00', 0x400202, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x2100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x466602, 0x22) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x3, 0x4a}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r1, 0xc0844123, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200000, 0x100) r4 = socket(0x2, 0x801, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r7 = geteuid() sendmsg$auto_NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc, 0x25, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid=r7}]}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x80) ioprio_get$auto(0x360, r7) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000340)={{0x460, 0x0, 0x0, 0x1, 0xde, 0x9, 0x7}, 0x1, 0x4, 0x3bf1, 0x8000000000000001, @inferred, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)="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", &(0x7f0000000300)="5828bd5973ba63078e969a108387855a6e60d41232ffa7bec65d3d207128301f286f96c67fe3a752fb497e8adf"}) statx$auto(r3, &(0x7f0000000180)='./file0\x00', 0x9, 0x3, &(0x7f00000003c0)={0x9734c847, 0xf, 0x4, 0x7, r7, r8, 0xb5c8, 0x9f, 0x3, 0x8000000000000001, 0x9, 0x8, {0x3, 0x4}, {0x3, 0x2}, {0xa9b, 0x7}, {0x6, 0x5}, 0x4, 0x3d9, 0x69de, 0x42, 0x9, 0x927a, 0x2, 0x2, 0x5, 0x8, 0xfffffff7, 0xfe3, [0x3, 0x8001, 0x4, 0x0, 0x401, 0x2, 0x1ff, 0x0, 0x5]}) 1.522844654s ago: executing program 1 (id=76): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db563610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000002, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0xc, 0x2, "4c6c8e85b194f29b6efd901e"}, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x302100d, 0x3, 0x40040000000eb2, 0xfffffffffffffffb, 0x8000) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x212040, 0x0) mq_timedreceive$auto(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffefec03f00"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub3/xrun_injection\x00', 0x100, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_FS_IOC_ZERO_RANGE(r3, 0x40305839, r5) writev$auto(r6, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_setup$auto(0x6, 0x0) r7 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r7) 1.522666814s ago: executing program 3 (id=77): ioctl$auto(0xffffffffffffffff, 0x40046207, 0x9) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$auto_UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)=0x0) ioctl$auto_UI_DEV_DESTROY(r0, 0x5502, 0x0) socket(0x23, 0x6, 0x55) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/xfs/stats/stats_clear\x00', 0x20681, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0xfdef) setregid$auto(0x5, 0x6) ioctl$auto(0xffffffffffffffff, 0x8108551b, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = io_uring_setup$auto(0x100, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10d441, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioperm$auto(0xffff, 0xe, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xccb, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2, 0x800, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x18c]}, 0xfffff7fffffffffa, 0x81) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x3, 0x0, 0xfffffdef) 903.299569ms ago: executing program 2 (id=78): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db563610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000002, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) open_by_handle_at$auto(0xffffff9c, &(0x7f0000000040)={0xc, 0x2, "4c6c8e85b194f29b6efd901e"}, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x302100d, 0x3, 0x40040000000eb2, 0xfffffffffffffffb, 0x8000) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x212040, 0x0) mq_timedreceive$auto(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffefec03f00"}, 0x1c) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub3/xrun_injection\x00', 0x100, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_FS_IOC_ZERO_RANGE(r3, 0x40305839, r5) writev$auto(r6, &(0x7f00000000c0)={0x0, 0x7}, 0x3) io_uring_setup$auto(0x6, 0x0) r7 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r7) 862.908605ms ago: executing program 0 (id=79): ioctl$auto_MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000040)={0x170, 0x3, 0x80, 0x4, 0x9, 0xa, 0x81, 0xe, 0x7, 0xffffffff, 0x339, 0x0, 0xffffffff, @iso={0x2, 0x204}, 0x5, 0x0, 0x1, 0x10000}, 0x0, 0x100040000000000}) r0 = openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000004c0), 0x401, 0x0) connect$auto(r0, &(0x7f0000000500)=@sco, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x48, &(0x7f0000000340)='\x03\x00\xd7S1\x1ax\xd8\xe8\x05\xff\xcd9\xd5\xe1\xe70\x1b\xb5\xce(QZ\xbf2Zk\np\xd3\b\x00L\xb8\xbf\x89\xf9\xb6\xf9\xc2O\x90\x854\xb6gM|\x8c}\x8d\xf3\x12j\xe0\xff\xdf\x1f4h\x1f\xa5\x8b*\xe1BH\xcc\x98\xe7\x1e\xfa.\x02\xb00\x9e\x94&\xcc\xb2\xb5\x92\x86\xc8|\xcf0xffffffffffffffff, 0x0, 0x8, 0x80000000, 0x0, 0x8}, 0x1, 0x1, 0x1, 0xfffffffffffffffd, @raw=0x77e, @raw=0x80000001, 0x2, 0x0, &(0x7f0000000540)="ad18ccaf6e581ea38b833118babad478f86724ff3b26099e5a6153614e6d02d1d6f2c26a2e50c410a0e4d6ffc331b5dbf9f218750cb7f312647c35d0e811f791b67f5da17521dca3ecef44646ce3af4837539b46ee5f14f1689a46115bc990e9a5cccec35b2f909d8632e78d9186ce3dc1063375299c54c7118d33288309a598bc7d7eae90889dcb64da716db282f5774b48a3ca0e975406eb6c8f6b895d65c1a0f620b2d75f88c9bf8e12f87a6146650f5bd779ac6d3eefbcf24bdfd94e10aa2f90a7d6df8dd467caef9a2285af47c2d2", &(0x7f0000000640)="a676dea8d2cf489613e9b8f830d0bb76bd36f05f9cded54a84ec76e04ca483a6a37fe3f3451e7cf5036badeeef31a03cb9b4a9485fa7fce31df369d462dbfb026790a57f111e71dc5a5e98168902d4c0c7fd5feb3778aabb8255c4c9d10abc4bfb091fd93e99fd01e1455fa01dbfa6571bbd21af840a0e5df6a00ba1a661b33ef8764a3fa65348139b52cee6d1e43bad1ad1b6f18ee270f6d9263ddab63bc41c2a8aedc1be873c8e7ac50ec940f7e783cf739cf2c1c511991bf879aad442efc48a0f5f"}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, r3, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 297.320055ms ago: executing program 0 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (fail_nth: 9) 0s ago: executing program 1 (id=81): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x841, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xb) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, 0x0, 0x4c0bb3f9aa207097, 0x0) socket(0x2b, 0x1, 0x4) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fanotify_init$auto(0x5, 0x2000000000002) pipe$auto(0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x309001, 0x0) ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0) unshare$auto(0x5) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f00000002c0)=""/182, 0xb6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bond0/queues/rx-7/rps_cpus\x00', 0x143680, 0x0) mprotect$auto(0x4, 0x9, 0x10a9a0000000) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/86, 0x56) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000001c0)={0x0, 0x55, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0xa, 0x802, 0x3a) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/167, 0xa7) shmget$auto(0xa, 0x10563, 0x568d1af2) shmat$auto(0x0, 0x0, 0x873) mmap$auto(0x0, 0x2020009, 0x3, 0x20eb1, 0xffffffffffffffff, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/226, 0xe2) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 81.934823][ T5827] cgroup: Unknown subsys name 'net' [ 82.100956][ T5827] cgroup: Unknown subsys name 'cpuset' [ 82.110067][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.846318][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.955180][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.988741][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.996498][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.004903][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.014008][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.023668][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.031703][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.039456][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.058505][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.077688][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.094113][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.103675][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.107528][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.118996][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.121113][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.133633][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.135284][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.148098][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.148821][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.156607][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.172997][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.180549][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.188532][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.199472][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.419018][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.565790][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.573260][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.581552][ T5837] bridge_slave_0: entered allmulticast mode [ 86.589665][ T5837] bridge_slave_0: entered promiscuous mode [ 86.621993][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.629606][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.647351][ T5837] bridge_slave_1: entered allmulticast mode [ 86.654210][ T5837] bridge_slave_1: entered promiscuous mode [ 86.709939][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.719470][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.744622][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.842877][ T5837] team0: Port device team_slave_0 added [ 86.876616][ T5837] team0: Port device team_slave_1 added [ 86.910010][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.931431][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.939132][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.946444][ T5839] bridge_slave_0: entered allmulticast mode [ 86.953713][ T5839] bridge_slave_0: entered promiscuous mode [ 86.962999][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.970576][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.977959][ T5839] bridge_slave_1: entered allmulticast mode [ 86.984871][ T5839] bridge_slave_1: entered promiscuous mode [ 87.011245][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.018444][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.044508][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.092118][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.099209][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.125238][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.150117][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.177871][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.191145][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.226018][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.233381][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.241106][ T5838] bridge_slave_0: entered allmulticast mode [ 87.249294][ T5838] bridge_slave_0: entered promiscuous mode [ 87.289422][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.296635][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.304051][ T5838] bridge_slave_1: entered allmulticast mode [ 87.311068][ T5838] bridge_slave_1: entered promiscuous mode [ 87.355954][ T5837] hsr_slave_0: entered promiscuous mode [ 87.363495][ T5837] hsr_slave_1: entered promiscuous mode [ 87.390793][ T5839] team0: Port device team_slave_0 added [ 87.415200][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.426323][ T5839] team0: Port device team_slave_1 added [ 87.467798][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.499228][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.506254][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.532368][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.552118][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.563131][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.570941][ T5836] bridge_slave_0: entered allmulticast mode [ 87.581454][ T5836] bridge_slave_0: entered promiscuous mode [ 87.597430][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.604447][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.630600][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.653154][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.660624][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.668008][ T5836] bridge_slave_1: entered allmulticast mode [ 87.674849][ T5836] bridge_slave_1: entered promiscuous mode [ 87.722854][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.734299][ T5838] team0: Port device team_slave_0 added [ 87.758611][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.778401][ T5838] team0: Port device team_slave_1 added [ 87.822488][ T5836] team0: Port device team_slave_0 added [ 87.845496][ T5839] hsr_slave_0: entered promiscuous mode [ 87.853761][ T5839] hsr_slave_1: entered promiscuous mode [ 87.862646][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.870747][ T5839] Cannot create hsr debugfs directory [ 87.899310][ T5836] team0: Port device team_slave_1 added [ 87.906095][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.913486][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.940055][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.969128][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.976133][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.003306][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.064575][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.071922][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.098066][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.111017][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.118093][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.145128][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.149067][ T5846] Bluetooth: hci0: command tx timeout [ 88.207738][ T5846] Bluetooth: hci1: command tx timeout [ 88.207792][ T5851] Bluetooth: hci2: command tx timeout [ 88.230858][ T5838] hsr_slave_0: entered promiscuous mode [ 88.238150][ T5838] hsr_slave_1: entered promiscuous mode [ 88.244238][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.252341][ T5838] Cannot create hsr debugfs directory [ 88.287864][ T5851] Bluetooth: hci3: command tx timeout [ 88.304279][ T5836] hsr_slave_0: entered promiscuous mode [ 88.310834][ T5836] hsr_slave_1: entered promiscuous mode [ 88.316864][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.324901][ T5836] Cannot create hsr debugfs directory [ 88.451885][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.489521][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.503771][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.547913][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.634624][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.659302][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.671640][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.697176][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.778663][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.799829][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.822673][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.860895][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.913636][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.924217][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.946172][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.958447][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.000040][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.042130][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.070554][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.089911][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.097256][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.154300][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.171166][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.178356][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.206510][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.214237][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.235927][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.243098][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.260144][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.294539][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.350323][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.357517][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.383939][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.391127][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.404533][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.444673][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.514764][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.545346][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.552607][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.604532][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.611771][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.878348][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.950747][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.025324][ T5839] veth0_vlan: entered promiscuous mode [ 90.072354][ T5839] veth1_vlan: entered promiscuous mode [ 90.094752][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.125425][ T5837] veth0_vlan: entered promiscuous mode [ 90.161613][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.191328][ T5837] veth1_vlan: entered promiscuous mode [ 90.203695][ T5839] veth0_macvtap: entered promiscuous mode [ 90.210243][ T5851] Bluetooth: hci0: command tx timeout [ 90.236097][ T5839] veth1_macvtap: entered promiscuous mode [ 90.256625][ T5838] veth0_vlan: entered promiscuous mode [ 90.287586][ T5851] Bluetooth: hci1: command tx timeout [ 90.293133][ T5851] Bluetooth: hci2: command tx timeout [ 90.294924][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.324033][ T5838] veth1_vlan: entered promiscuous mode [ 90.338970][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.357697][ T5836] veth0_vlan: entered promiscuous mode [ 90.370436][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.379199][ T5851] Bluetooth: hci3: command tx timeout [ 90.388662][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.397923][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.406710][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.423869][ T5836] veth1_vlan: entered promiscuous mode [ 90.455381][ T5837] veth0_macvtap: entered promiscuous mode [ 90.465728][ T5837] veth1_macvtap: entered promiscuous mode [ 90.535046][ T5836] veth0_macvtap: entered promiscuous mode [ 90.543874][ T5838] veth0_macvtap: entered promiscuous mode [ 90.572708][ T5836] veth1_macvtap: entered promiscuous mode [ 90.591152][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.603697][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.619345][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.632959][ T5838] veth1_macvtap: entered promiscuous mode [ 90.668647][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.679349][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.692079][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.706744][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.718105][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.728352][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.739460][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.751511][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.767836][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.779287][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.789311][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.805756][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.815873][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.826687][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.838669][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.852144][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.861790][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.870801][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.880938][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.908323][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.917912][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.926669][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.939966][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.952587][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.963727][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.974960][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.985731][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.996122][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.007146][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.018686][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.054163][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.066098][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.066723][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.085664][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.097506][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.108253][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.118309][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.129762][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.141113][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.161601][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.171195][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.181080][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.190485][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.343708][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.361810][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.383680][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.425492][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.444215][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.469939][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.492087][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.594484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.633105][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.700383][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.710845][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.730465][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.742969][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.294833][ T5851] Bluetooth: hci0: command tx timeout [ 92.368752][ T5851] Bluetooth: hci2: command tx timeout [ 92.375772][ T5851] Bluetooth: hci1: command tx timeout [ 92.447118][ T5851] Bluetooth: hci3: command tx timeout [ 93.961195][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.367928][ T5851] Bluetooth: hci0: command tx timeout [ 94.448885][ T5851] Bluetooth: hci1: command tx timeout [ 94.454374][ T5846] Bluetooth: hci2: command tx timeout [ 94.527133][ T5851] Bluetooth: hci3: command tx timeout [ 95.293505][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.321609][ T5963] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 96.085935][ T5969] netlink: 172 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.415659][ T1207] cfg80211: failed to load regulatory.db [ 97.915121][ T6005] FAULT_INJECTION: forcing a failure. [ 97.915121][ T6005] name failslab, interval 1, probability 0, space 0, times 1 [ 98.157728][ T6005] CPU: 1 UID: 0 PID: 6005 Comm: syz.3.27 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 98.157774][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.157798][ T6005] Call Trace: [ 98.157812][ T6005] [ 98.157825][ T6005] dump_stack_lvl+0x16c/0x1f0 [ 98.157886][ T6005] should_fail_ex+0x50a/0x650 [ 98.157917][ T6005] ? fs_reclaim_acquire+0xae/0x150 [ 98.157965][ T6005] should_failslab+0xc2/0x120 [ 98.157997][ T6005] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 98.158066][ T6005] ? alloc_inode+0xbf/0x230 [ 98.158105][ T6005] alloc_inode+0xbf/0x230 [ 98.158138][ T6005] iget_locked+0x2ee/0x8a0 [ 98.158173][ T6005] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 98.158234][ T6005] ? __pfx_iget_locked+0x10/0x10 [ 98.158271][ T6005] ? kernfs_iop_lookup+0xa3/0x330 [ 98.158345][ T6005] kernfs_get_inode+0x48/0x460 [ 98.158393][ T6005] kernfs_iop_lookup+0x1ec/0x330 [ 98.158443][ T6005] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 98.158492][ T6005] lookup_open.isra.0+0x4d9/0x1580 [ 98.158546][ T6005] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 98.158599][ T6005] ? path_openat+0x88a/0x2d80 [ 98.158660][ T6005] ? mnt_get_write_access+0x20c/0x300 [ 98.158707][ T6005] path_openat+0x904/0x2d80 [ 98.158773][ T6005] ? __pfx_path_openat+0x10/0x10 [ 98.158824][ T6005] ? __pfx___lock_acquire+0x10/0x10 [ 98.158868][ T6005] ? lock_acquire.part.0+0x11b/0x380 [ 98.158916][ T6005] ? find_held_lock+0x2d/0x110 [ 98.158958][ T6005] do_filp_open+0x20c/0x470 [ 98.159008][ T6005] ? __pfx_do_filp_open+0x10/0x10 [ 98.159061][ T6005] ? find_held_lock+0x2d/0x110 [ 98.159129][ T6005] ? alloc_fd+0x41f/0x760 [ 98.159190][ T6005] do_sys_openat2+0x17a/0x1e0 [ 98.159225][ T6005] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.159259][ T6005] ? lock_acquire+0x2f/0xb0 [ 98.159322][ T6005] __x64_sys_openat+0x175/0x210 [ 98.159359][ T6005] ? __pfx___x64_sys_openat+0x10/0x10 [ 98.159413][ T6005] do_syscall_64+0xcd/0x250 [ 98.159468][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.159515][ T6005] RIP: 0033:0x7fa3ab58d169 [ 98.159542][ T6005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.159581][ T6005] RSP: 002b:00007fa3ac430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.159612][ T6005] RAX: ffffffffffffffda RBX: 00007fa3ab7a6080 RCX: 00007fa3ab58d169 [ 98.159633][ T6005] RDX: 0000000000124001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 98.159653][ T6005] RBP: 00007fa3ab60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.159672][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.159691][ T6005] R13: 0000000000000000 R14: 00007fa3ab7a6080 R15: 00007ffcd9001198 [ 98.159733][ T6005] [ 99.242641][ T6015] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 99.409506][ T5851] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 100.804056][ T6032] bridge0: port 3(team0) entered blocking state [ 100.828219][ T6032] bridge0: port 3(team0) entered disabled state [ 100.847536][ T6032] team0: entered allmulticast mode [ 100.853356][ T6032] team_slave_0: entered allmulticast mode [ 100.897100][ T6032] team_slave_1: entered allmulticast mode [ 100.929884][ T6032] team0: entered promiscuous mode [ 100.944047][ T6032] team_slave_0: entered promiscuous mode [ 100.956321][ T6032] team_slave_1: entered promiscuous mode [ 101.034294][ T6032] bridge0: port 3(team0) entered blocking state [ 101.041792][ T6032] bridge0: port 3(team0) entered forwarding state [ 101.964009][ T6046] program syz.1.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.035821][ T5851] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 102.162336][ T6049] bridge0: port 3(team0) entered blocking state [ 102.176294][ T6049] bridge0: port 3(team0) entered disabled state [ 102.183981][ T6049] team0: entered allmulticast mode [ 102.197844][ T6049] team_slave_0: entered allmulticast mode [ 102.203649][ T6049] team_slave_1: entered allmulticast mode [ 102.213729][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'. [ 102.285394][ T6049] team0: entered promiscuous mode [ 102.338662][ T6049] team_slave_0: entered promiscuous mode [ 102.383193][ T6049] team_slave_1: entered promiscuous mode [ 102.433172][ T6055] FAULT_INJECTION: forcing a failure. [ 102.433172][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 102.490842][ T6049] bridge0: port 3(team0) entered blocking state [ 102.497296][ T6049] bridge0: port 3(team0) entered forwarding state [ 102.507960][ T6055] CPU: 0 UID: 0 PID: 6055 Comm: syz.2.40 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 102.508005][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.508025][ T6055] Call Trace: [ 102.508034][ T6055] [ 102.508047][ T6055] dump_stack_lvl+0x16c/0x1f0 [ 102.508102][ T6055] should_fail_ex+0x50a/0x650 [ 102.508135][ T6055] ? fs_reclaim_acquire+0xae/0x150 [ 102.508181][ T6055] ? can_pernet_init+0xb7/0x370 [ 102.508218][ T6055] should_failslab+0xc2/0x120 [ 102.508249][ T6055] __kmalloc_cache_noprof+0x68/0x410 [ 102.508297][ T6055] ? rcu_is_watching+0x12/0xc0 [ 102.508333][ T6055] ? trace_kmalloc+0x2d/0xd0 [ 102.508369][ T6055] ? __pfx_can_pernet_init+0x10/0x10 [ 102.508410][ T6055] can_pernet_init+0xb7/0x370 [ 102.508450][ T6055] ? __pfx_can_pernet_init+0x10/0x10 [ 102.508487][ T6055] ops_init+0x1df/0x5f0 [ 102.508525][ T6055] setup_net+0x21f/0x860 [ 102.508562][ T6055] ? __pfx_setup_net+0x10/0x10 [ 102.508594][ T6055] ? down_read_killable+0xcc/0x380 [ 102.508626][ T6055] ? __pfx_down_read_killable+0x10/0x10 [ 102.508665][ T6055] ? __raw_spin_lock_init+0x3a/0x110 [ 102.508700][ T6055] ? debug_mutex_init+0x37/0x70 [ 102.508741][ T6055] copy_net_ns+0x2a6/0x5f0 [ 102.508784][ T6055] create_new_namespaces+0x3ea/0xad0 [ 102.508850][ T6055] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 102.508910][ T6055] ksys_unshare+0x45d/0xa40 [ 102.508952][ T6055] ? __pfx_ksys_unshare+0x10/0x10 [ 102.508986][ T6055] ? xfd_validate_state+0x5d/0x180 [ 102.509048][ T6055] __x64_sys_unshare+0x31/0x40 [ 102.509082][ T6055] do_syscall_64+0xcd/0x250 [ 102.509136][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.509182][ T6055] RIP: 0033:0x7fd2fa98d169 [ 102.509207][ T6055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.509239][ T6055] RSP: 002b:00007fd2fb848038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.509269][ T6055] RAX: ffffffffffffffda RBX: 00007fd2faba6080 RCX: 00007fd2fa98d169 [ 102.509291][ T6055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 102.509310][ T6055] RBP: 00007fd2faa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.509329][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.509347][ T6055] R13: 0000000000000000 R14: 00007fd2faba6080 R15: 00007ffceee22ce8 [ 102.509387][ T6055] [ 102.852938][ T6046] hsr_slave_0: left promiscuous mode [ 102.898760][ T6046] hsr_slave_1: left promiscuous mode [ 102.965716][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 103.024317][ T6049] netlink: 342 bytes leftover after parsing attributes in process `syz.0.39'. [ 103.038840][ T6049] Zero length message leads to an empty skb [ 103.467862][ T6064] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 104.256103][ T6069] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 105.027381][ T6073] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 106.455282][ T6088] can: request_module (can-proto-0) failed. [ 107.791669][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 109.149938][ T6139] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 110.808976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.818194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.362301][ T6159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.377370][ T6159] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.387564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.428649][ T6159] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.457927][ T6159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.487089][ T6159] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.506135][ T6159] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.536197][ T6159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.548244][ T6159] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.627061][ T6159] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.668162][ T6159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.695078][ T6159] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.809673][ T6159] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.870378][ T6171] netlink: 342 bytes leftover after parsing attributes in process `syz.3.67'. [ 111.925070][ T6171] netlink: 342 bytes leftover after parsing attributes in process `syz.3.67'. [ 111.994831][ T6171] netlink: 'syz.3.67': attribute type 19 has an invalid length. [ 112.035726][ T6171] netlink: 'syz.3.67': attribute type 27 has an invalid length. [ 112.077189][ T6171] netlink: 'syz.3.67': attribute type 28 has an invalid length. [ 112.117580][ T6171] netlink: 'syz.3.67': attribute type 29 has an invalid length. [ 112.168427][ T6171] netlink: 38 bytes leftover after parsing attributes in process `syz.3.67'. [ 112.495631][ T6177] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 112.878758][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 112.932248][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.487091][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.495561][ T6194] can: request_module (can-proto-0) failed. [ 113.568708][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.727201][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.007137][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.051427][ T6226] FAULT_INJECTION: forcing a failure. [ 115.051427][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 115.137587][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.0.80 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 115.137629][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.137646][ T6226] Call Trace: [ 115.137655][ T6226] [ 115.137667][ T6226] dump_stack_lvl+0x16c/0x1f0 [ 115.137721][ T6226] should_fail_ex+0x50a/0x650 [ 115.137752][ T6226] ? fs_reclaim_acquire+0xae/0x150 [ 115.137797][ T6226] ? rfkill_alloc+0xac/0x330 [ 115.137845][ T6226] should_failslab+0xc2/0x120 [ 115.137876][ T6226] __kmalloc_noprof+0xcb/0x510 [ 115.137936][ T6226] rfkill_alloc+0xac/0x330 [ 115.137992][ T6226] wiphy_new_nm+0x1217/0x2160 [ 115.138044][ T6226] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 115.138097][ T6226] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 115.138150][ T6226] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 115.138200][ T6226] ? __local_bh_enable_ip+0xa4/0x120 [ 115.138257][ T6226] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 115.138326][ T6226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.138383][ T6226] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 115.138448][ T6226] hwsim_new_radio_nl+0xb42/0x12b0 [ 115.138512][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 115.138576][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 115.138612][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 115.138658][ T6226] genl_family_rcv_msg_doit+0x202/0x2f0 [ 115.138696][ T6226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.138730][ T6226] ? trace_cap_capable+0x1a2/0x210 [ 115.138777][ T6226] ? bpf_lsm_capable+0x9/0x10 [ 115.138810][ T6226] ? security_capable+0x7e/0x260 [ 115.138845][ T6226] ? ns_capable+0xd7/0x110 [ 115.138897][ T6226] genl_rcv_msg+0x565/0x800 [ 115.138936][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.138972][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 115.139038][ T6226] netlink_rcv_skb+0x16b/0x440 [ 115.139089][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.139125][ T6226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.139196][ T6226] ? down_read+0xc9/0x330 [ 115.139247][ T6226] ? __pfx_down_read+0x10/0x10 [ 115.139300][ T6226] ? netlink_deliver_tap+0x1ae/0xd30 [ 115.139356][ T6226] genl_rcv+0x28/0x40 [ 115.139384][ T6226] netlink_unicast+0x53c/0x7f0 [ 115.139439][ T6226] ? __pfx_netlink_unicast+0x10/0x10 [ 115.139496][ T6226] ? __phys_addr_symbol+0x30/0x80 [ 115.139529][ T6226] ? __check_object_size+0x488/0x710 [ 115.139567][ T6226] netlink_sendmsg+0x8b8/0xd70 [ 115.139625][ T6226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.139694][ T6226] ____sys_sendmsg+0xaaf/0xc90 [ 115.139735][ T6226] ? copy_msghdr_from_user+0x10b/0x160 [ 115.139787][ T6226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.139848][ T6226] ___sys_sendmsg+0x135/0x1e0 [ 115.139905][ T6226] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.139976][ T6226] ? __pfx_lock_release+0x10/0x10 [ 115.140021][ T6226] ? trace_lock_acquire+0x14e/0x1f0 [ 115.140075][ T6226] ? __fget_files+0x206/0x3a0 [ 115.140134][ T6226] __sys_sendmsg+0x16e/0x220 [ 115.140166][ T6226] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.140224][ T6226] do_syscall_64+0xcd/0x250 [ 115.140277][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.140324][ T6226] RIP: 0033:0x7f818258d169 [ 115.140349][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.140378][ T6226] RSP: 002b:00007f818330c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.140407][ T6226] RAX: ffffffffffffffda RBX: 00007f81827a5fa0 RCX: 00007f818258d169 [ 115.140427][ T6226] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000003 [ 115.140444][ T6226] RBP: 00007f818330c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.140471][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.140490][ T6226] R13: 0000000000000000 R14: 00007f81827a5fa0 R15: 00007ffeef4ccb08 [ 115.140529][ T6226] [ 115.140547][ T6226] INFO: trying to register non-static key. [ 115.523000][ T6226] The code is fine but needs lockdep annotation, or maybe [ 115.530113][ T6226] you didn't initialize this object before use? [ 115.536352][ T6226] turning off the locking correctness validator. [ 115.542713][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.0.80 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 115.542744][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.542759][ T6226] Call Trace: [ 115.542767][ T6226] [ 115.542776][ T6226] dump_stack_lvl+0x116/0x1f0 [ 115.542819][ T6226] register_lock_class+0xc39/0x1240 [ 115.542858][ T6226] ? irq_work_queue+0x2a/0x80 [ 115.542898][ T6226] ? __wake_up_klogd.part.0+0x99/0xf0 [ 115.542937][ T6226] ? vprintk_emit+0x39e/0x6f0 [ 115.542963][ T6226] ? __pfx_register_lock_class+0x10/0x10 [ 115.543005][ T6226] __lock_acquire+0x135/0x3c40 [ 115.543040][ T6226] ? mark_lock+0xb5/0xc60 [ 115.543074][ T6226] ? lock_acquire+0x2f/0xb0 [ 115.543108][ T6226] ? is_bpf_text_address+0x30/0x1a0 [ 115.543142][ T6226] ? __pfx_mark_lock+0x10/0x10 [ 115.543177][ T6226] ? __pfx___lock_acquire+0x10/0x10 [ 115.543214][ T6226] ? show_trace_log_lvl+0x29d/0x3d0 [ 115.543252][ T6226] lock_acquire.part.0+0x11b/0x380 [ 115.543288][ T6226] ? cfg80211_dev_free+0x30/0x3d0 [ 115.543314][ T6226] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 115.543352][ T6226] ? rcu_is_watching+0x12/0xc0 [ 115.543378][ T6226] ? trace_lock_acquire+0x14e/0x1f0 [ 115.543406][ T6226] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.543448][ T6226] ? cfg80211_dev_free+0x30/0x3d0 [ 115.543472][ T6226] ? lock_acquire+0x2f/0xb0 [ 115.543505][ T6226] ? cfg80211_dev_free+0x30/0x3d0 [ 115.543531][ T6226] _raw_spin_lock_irqsave+0x3a/0x60 [ 115.543563][ T6226] ? cfg80211_dev_free+0x30/0x3d0 [ 115.543586][ T6226] cfg80211_dev_free+0x30/0x3d0 [ 115.543611][ T6226] ? __pfx_wiphy_dev_release+0x10/0x10 [ 115.543637][ T6226] device_release+0xa1/0x240 [ 115.543661][ T6226] kobject_put+0x1e4/0x5a0 [ 115.543704][ T6226] put_device+0x1f/0x30 [ 115.543726][ T6226] wiphy_new_nm+0x1c1f/0x2160 [ 115.543765][ T6226] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 115.543808][ T6226] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 115.543849][ T6226] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 115.543887][ T6226] ? __local_bh_enable_ip+0xa4/0x120 [ 115.543929][ T6226] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 115.543975][ T6226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.544017][ T6226] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 115.544061][ T6226] hwsim_new_radio_nl+0xb42/0x12b0 [ 115.544101][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 115.544144][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 115.544174][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 115.544207][ T6226] genl_family_rcv_msg_doit+0x202/0x2f0 [ 115.544235][ T6226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.544261][ T6226] ? trace_cap_capable+0x1a2/0x210 [ 115.544293][ T6226] ? bpf_lsm_capable+0x9/0x10 [ 115.544320][ T6226] ? security_capable+0x7e/0x260 [ 115.544345][ T6226] ? ns_capable+0xd7/0x110 [ 115.544382][ T6226] genl_rcv_msg+0x565/0x800 [ 115.544409][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.544440][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 115.544483][ T6226] netlink_rcv_skb+0x16b/0x440 [ 115.544523][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.544549][ T6226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.544594][ T6226] ? down_read+0xc9/0x330 [ 115.544634][ T6226] ? __pfx_down_read+0x10/0x10 [ 115.544673][ T6226] ? netlink_deliver_tap+0x1ae/0xd30 [ 115.544715][ T6226] genl_rcv+0x28/0x40 [ 115.544737][ T6226] netlink_unicast+0x53c/0x7f0 [ 115.544777][ T6226] ? __pfx_netlink_unicast+0x10/0x10 [ 115.544816][ T6226] ? __phys_addr_symbol+0x30/0x80 [ 115.544842][ T6226] ? __check_object_size+0x488/0x710 [ 115.544868][ T6226] netlink_sendmsg+0x8b8/0xd70 [ 115.544909][ T6226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.544953][ T6226] ____sys_sendmsg+0xaaf/0xc90 [ 115.544985][ T6226] ? copy_msghdr_from_user+0x10b/0x160 [ 115.545026][ T6226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.545064][ T6226] ___sys_sendmsg+0x135/0x1e0 [ 115.545105][ T6226] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.545151][ T6226] ? __pfx_lock_release+0x10/0x10 [ 115.545186][ T6226] ? trace_lock_acquire+0x14e/0x1f0 [ 115.545219][ T6226] ? __fget_files+0x206/0x3a0 [ 115.545260][ T6226] __sys_sendmsg+0x16e/0x220 [ 115.545283][ T6226] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.545314][ T6226] do_syscall_64+0xcd/0x250 [ 115.545353][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.545390][ T6226] RIP: 0033:0x7f818258d169 [ 115.545410][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.545439][ T6226] RSP: 002b:00007f818330c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.545462][ T6226] RAX: ffffffffffffffda RBX: 00007f81827a5fa0 RCX: 00007f818258d169 [ 115.545478][ T6226] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000003 [ 115.545493][ T6226] RBP: 00007f818330c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.545508][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.545522][ T6226] R13: 0000000000000000 R14: 00007f81827a5fa0 R15: 00007ffeef4ccb08 [ 115.545545][ T6226] [ 115.546704][ T6226] ------------[ cut here ]------------ [ 116.039413][ T6226] WARNING: CPU: 1 PID: 6226 at net/wireless/core.c:1197 cfg80211_dev_free+0x2e7/0x3d0 [ 116.048991][ T6226] Modules linked in: [ 116.052900][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.0.80 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 116.063419][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.073489][ T6226] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 116.079235][ T6226] Code: 00 00 49 8b bd e0 08 00 00 e8 d5 a1 6a f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 bf a1 6a f7 e8 0a 17 13 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 99 55 75 f7 e9 aa fe ff ff 4c [ 116.098868][ T6226] RSP: 0018:ffffc90004aef1b8 EFLAGS: 00010093 [ 116.104951][ T6226] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 116.112955][ T6226] RDX: ffff888028083c00 RSI: ffffffff8aa6d8c6 RDI: ffffc90004aef128 [ 116.120944][ T6226] RBP: ffff8880786686a8 R08: 0000000000000001 R09: fffff5200095de25 [ 116.128933][ T6226] R10: 0000000000000003 R11: 0000000000000001 R12: ffff8880786686b8 [ 116.136924][ T6226] R13: ffff888078668000 R14: ffff888028a4a200 R15: 0000000000000000 [ 116.144919][ T6226] FS: 00007f818330c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 116.153871][ T6226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.160473][ T6226] CR2: 00007fe65e779ef8 CR3: 00000000314f4000 CR4: 00000000003526f0 [ 116.168493][ T6226] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.176480][ T6226] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.184467][ T6226] Call Trace: [ 116.187756][ T6226] [ 116.190696][ T6226] ? __warn+0xea/0x3c0 [ 116.194790][ T6226] ? cfg80211_dev_free+0x2e7/0x3d0 [ 116.199920][ T6226] ? report_bug+0x3c0/0x580 [ 116.204451][ T6226] ? handle_bug+0x54/0xa0 [ 116.208799][ T6226] ? exc_invalid_op+0x17/0x50 [ 116.213500][ T6226] ? asm_exc_invalid_op+0x1a/0x20 [ 116.218558][ T6226] ? do_raw_spin_lock+0x12d/0x2c0 [ 116.223597][ T6226] ? cfg80211_dev_free+0x2e6/0x3d0 [ 116.228734][ T6226] ? cfg80211_dev_free+0x2e7/0x3d0 [ 116.233864][ T6226] ? cfg80211_dev_free+0x2e6/0x3d0 [ 116.238993][ T6226] ? __pfx_wiphy_dev_release+0x10/0x10 [ 116.244473][ T6226] device_release+0xa1/0x240 [ 116.249111][ T6226] kobject_put+0x1e4/0x5a0 [ 116.253565][ T6226] put_device+0x1f/0x30 [ 116.257741][ T6226] wiphy_new_nm+0x1c1f/0x2160 [ 116.262451][ T6226] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 116.268986][ T6226] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 116.275783][ T6226] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 116.281274][ T6226] ? __local_bh_enable_ip+0xa4/0x120 [ 116.286595][ T6226] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 116.292294][ T6226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.298313][ T6226] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 116.304419][ T6226] hwsim_new_radio_nl+0xb42/0x12b0 [ 116.309566][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.315154][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 116.322550][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 116.329955][ T6226] genl_family_rcv_msg_doit+0x202/0x2f0 [ 116.335528][ T6226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.341626][ T6226] ? trace_cap_capable+0x1a2/0x210 [ 116.346768][ T6226] ? bpf_lsm_capable+0x9/0x10 [ 116.351470][ T6226] ? security_capable+0x7e/0x260 [ 116.356433][ T6226] ? ns_capable+0xd7/0x110 [ 116.360885][ T6226] genl_rcv_msg+0x565/0x800 [ 116.365414][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.370462][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.376059][ T6226] netlink_rcv_skb+0x16b/0x440 [ 116.380860][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.386430][ T6226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.391759][ T6226] ? down_read+0xc9/0x330 [ 116.396120][ T6226] ? __pfx_down_read+0x10/0x10 [ 116.400920][ T6226] ? netlink_deliver_tap+0x1ae/0xd30 [ 116.406236][ T6226] genl_rcv+0x28/0x40 [ 116.410236][ T6226] netlink_unicast+0x53c/0x7f0 [ 116.415035][ T6226] ? __pfx_netlink_unicast+0x10/0x10 [ 116.420358][ T6226] ? __phys_addr_symbol+0x30/0x80 [ 116.425419][ T6226] ? __check_object_size+0x488/0x710 [ 116.430725][ T6226] netlink_sendmsg+0x8b8/0xd70 [ 116.435525][ T6226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.440854][ T6226] ____sys_sendmsg+0xaaf/0xc90 [ 116.445643][ T6226] ? copy_msghdr_from_user+0x10b/0x160 [ 116.451140][ T6226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.456456][ T6226] ___sys_sendmsg+0x135/0x1e0 [ 116.461175][ T6226] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.466414][ T6226] ? __pfx_lock_release+0x10/0x10 [ 116.471468][ T6226] ? trace_lock_acquire+0x14e/0x1f0 [ 116.476805][ T6226] ? __fget_files+0x206/0x3a0 [ 116.481532][ T6226] __sys_sendmsg+0x16e/0x220 [ 116.486152][ T6226] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.491377][ T6226] do_syscall_64+0xcd/0x250 [ 116.495913][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.501836][ T6226] RIP: 0033:0x7f818258d169 [ 116.506268][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.525897][ T6226] RSP: 002b:00007f818330c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.534331][ T6226] RAX: ffffffffffffffda RBX: 00007f81827a5fa0 RCX: 00007f818258d169 [ 116.542321][ T6226] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000003 [ 116.550316][ T6226] RBP: 00007f818330c090 R08: 0000000000000000 R09: 0000000000000000 [ 116.558393][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.566405][ T6226] R13: 0000000000000000 R14: 00007f81827a5fa0 R15: 00007ffeef4ccb08 [ 116.574404][ T6226] [ 116.577438][ T6226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.584729][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.0.80 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 116.595249][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.605320][ T6226] Call Trace: [ 116.608623][ T6226] [ 116.611571][ T6226] dump_stack_lvl+0x3d/0x1f0 [ 116.616229][ T6226] panic+0x71d/0x800 [ 116.620152][ T6226] ? __pfx_panic+0x10/0x10 [ 116.624597][ T6226] ? show_trace_log_lvl+0x29d/0x3d0 [ 116.629833][ T6226] ? check_panic_on_warn+0x1f/0xb0 [ 116.635006][ T6226] ? cfg80211_dev_free+0x2e7/0x3d0 [ 116.640139][ T6226] check_panic_on_warn+0xab/0xb0 [ 116.645108][ T6226] __warn+0xf6/0x3c0 [ 116.649029][ T6226] ? cfg80211_dev_free+0x2e7/0x3d0 [ 116.654189][ T6226] report_bug+0x3c0/0x580 [ 116.658554][ T6226] handle_bug+0x54/0xa0 [ 116.662735][ T6226] exc_invalid_op+0x17/0x50 [ 116.667270][ T6226] asm_exc_invalid_op+0x1a/0x20 [ 116.672154][ T6226] RIP: 0010:cfg80211_dev_free+0x2e7/0x3d0 [ 116.677894][ T6226] Code: 00 00 49 8b bd e0 08 00 00 e8 d5 a1 6a f7 4c 89 ef 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 bf a1 6a f7 e8 0a 17 13 f7 90 <0f> 0b 90 e9 6f fd ff ff 4c 89 f7 e8 99 55 75 f7 e9 aa fe ff ff 4c [ 116.697525][ T6226] RSP: 0018:ffffc90004aef1b8 EFLAGS: 00010093 [ 116.703621][ T6226] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff81972ccd [ 116.711619][ T6226] RDX: ffff888028083c00 RSI: ffffffff8aa6d8c6 RDI: ffffc90004aef128 [ 116.719610][ T6226] RBP: ffff8880786686a8 R08: 0000000000000001 R09: fffff5200095de25 [ 116.727622][ T6226] R10: 0000000000000003 R11: 0000000000000001 R12: ffff8880786686b8 [ 116.735617][ T6226] R13: ffff888078668000 R14: ffff888028a4a200 R15: 0000000000000000 [ 116.743638][ T6226] ? do_raw_spin_lock+0x12d/0x2c0 [ 116.748695][ T6226] ? cfg80211_dev_free+0x2e6/0x3d0 [ 116.753830][ T6226] ? cfg80211_dev_free+0x2e6/0x3d0 [ 116.758964][ T6226] ? __pfx_wiphy_dev_release+0x10/0x10 [ 116.764445][ T6226] device_release+0xa1/0x240 [ 116.769058][ T6226] kobject_put+0x1e4/0x5a0 [ 116.773517][ T6226] put_device+0x1f/0x30 [ 116.777703][ T6226] wiphy_new_nm+0x1c1f/0x2160 [ 116.782427][ T6226] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 116.788964][ T6226] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 116.795766][ T6226] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 116.801259][ T6226] ? __local_bh_enable_ip+0xa4/0x120 [ 116.806583][ T6226] mac80211_hwsim_new_radio+0x1d6/0x54e0 [ 116.812257][ T6226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.818205][ T6226] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 116.824312][ T6226] hwsim_new_radio_nl+0xb42/0x12b0 [ 116.829474][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.835065][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 116.842547][ T6226] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 116.849944][ T6226] genl_family_rcv_msg_doit+0x202/0x2f0 [ 116.855518][ T6226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.861608][ T6226] ? trace_cap_capable+0x1a2/0x210 [ 116.866748][ T6226] ? bpf_lsm_capable+0x9/0x10 [ 116.871449][ T6226] ? security_capable+0x7e/0x260 [ 116.876427][ T6226] ? ns_capable+0xd7/0x110 [ 116.880879][ T6226] genl_rcv_msg+0x565/0x800 [ 116.885493][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.890548][ T6226] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 116.896137][ T6226] netlink_rcv_skb+0x16b/0x440 [ 116.900940][ T6226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.905986][ T6226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.911312][ T6226] ? down_read+0xc9/0x330 [ 116.915678][ T6226] ? __pfx_down_read+0x10/0x10 [ 116.920477][ T6226] ? netlink_deliver_tap+0x1ae/0xd30 [ 116.925804][ T6226] genl_rcv+0x28/0x40 [ 116.929806][ T6226] netlink_unicast+0x53c/0x7f0 [ 116.934608][ T6226] ? __pfx_netlink_unicast+0x10/0x10 [ 116.939931][ T6226] ? __phys_addr_symbol+0x30/0x80 [ 116.944980][ T6226] ? __check_object_size+0x488/0x710 [ 116.950296][ T6226] netlink_sendmsg+0x8b8/0xd70 [ 116.955111][ T6226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.960440][ T6226] ____sys_sendmsg+0xaaf/0xc90 [ 116.965238][ T6226] ? copy_msghdr_from_user+0x10b/0x160 [ 116.970735][ T6226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.976054][ T6226] ___sys_sendmsg+0x135/0x1e0 [ 116.980767][ T6226] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.986005][ T6226] ? __pfx_lock_release+0x10/0x10 [ 116.991058][ T6226] ? trace_lock_acquire+0x14e/0x1f0 [ 116.996286][ T6226] ? __fget_files+0x206/0x3a0 [ 117.001010][ T6226] __sys_sendmsg+0x16e/0x220 [ 117.005618][ T6226] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.010756][ T6226] do_syscall_64+0xcd/0x250 [ 117.015298][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.021227][ T6226] RIP: 0033:0x7f818258d169 [ 117.025677][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.045413][ T6226] RSP: 002b:00007f818330c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.053874][ T6226] RAX: ffffffffffffffda RBX: 00007f81827a5fa0 RCX: 00007f818258d169 [ 117.061868][ T6226] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000003 [ 117.069854][ T6226] RBP: 00007f818330c090 R08: 0000000000000000 R09: 0000000000000000 [ 117.077837][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.085821][ T6226] R13: 0000000000000000 R14: 00007f81827a5fa0 R15: 00007ffeef4ccb08 [ 117.093817][ T6226] [ 117.097229][ T6226] Kernel Offset: disabled [ 117.101564][ T6226] Rebooting in 86400 seconds..