last executing test programs: 3m47.611485832s ago: executing program 3 (id=420): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r0 = socket(0x2, 0x3, 0xa) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x80882, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast2}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) readv$auto(r0, 0x0, 0x1) write$auto(r0, 0x0, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0xb, 0x5, 0xeb1, 0x3ff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_uring_setup$auto(0x6, 0x0) semctl$auto(0x1fd, 0x4c, 0x13, 0x4) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socketpair$auto(0xfffffffe, 0x3, 0x0, 0x0) setsockopt$auto(r1, 0x83, 0x2, 0x0, 0xe) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x806a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) 3m46.785471156s ago: executing program 3 (id=424): r0 = socket(0x26, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x10d, 0xf, 0x0, 0x17) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) connect$auto(0x3, 0x0, 0x54) clone$auto(0x8, 0xfffffffffffffff7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x9) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000040)={{0x2496, 0x7fffffff}, {0x8, 0x9}}, &(0x7f0000000080)={{0x3ff, 0x9d4}, {0x0, 0xd}}) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xffff, 0x9, 0x8, &(0x7f0000000000)=0x80) madvise$auto(0x0, 0x7, 0x2099) 3m46.08234912s ago: executing program 3 (id=427): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) (fail_nth: 4) 3m45.103411887s ago: executing program 3 (id=429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) readv$auto(0x3, 0x0, 0x2) write$auto(0x3, 0x0, 0x800) ioctl$auto(0xffffffffffffffff, 0x2283, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) 3m44.807575721s ago: executing program 3 (id=430): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x4) 3m44.462683718s ago: executing program 3 (id=432): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xa}, 0x5, 0x106) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(r1, r1, 0x401) memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, 0x0, 0x6a) socket$auto(0x2, 0x8, 0xfffffff8) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x9, 0x0, 0x9, 0x0, 0x22, 0x7}, 0x6}, 0x5, 0x20000000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose12/statistics/tx_heartbeat_errors\x00', 0xcae80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/228, 0xe4) write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="110000001265843a", 0x8) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(r1, 0x8, 0x0, 0x0, &(0x7f0000000100)=0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r5 = socket(0xa, 0x2, 0x3a) statx$auto(r4, 0x0, 0x1000, 0x7, 0x0) setsockopt$auto(r5, 0x8, 0x0, 0x0, 0x1000056b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/nvme-wq/power/runtime_status\x00', 0x319000, 0x0) mmap$auto(0x80000005, 0x63d36ab7, 0x15f, 0x40eb1, 0x602, 0x300000000000) bpf$auto(0x0, 0x0, 0xf) sendmmsg$auto(r5, 0x0, 0x0, 0x85) write$auto(r0, 0x0, 0xab) 3m29.364405338s ago: executing program 32 (id=432): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xa}, 0x5, 0x106) mmap$auto(0x0, 0x8, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(r1, r1, 0x401) memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0x40045569, 0xffffffffffffffff) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, 0x0, 0x6a) socket$auto(0x2, 0x8, 0xfffffff8) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x9, 0x0, 0x9, 0x0, 0x22, 0x7}, 0x6}, 0x5, 0x20000000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose12/statistics/tx_heartbeat_errors\x00', 0xcae80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/228, 0xe4) write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="110000001265843a", 0x8) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(r1, 0x8, 0x0, 0x0, &(0x7f0000000100)=0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r5 = socket(0xa, 0x2, 0x3a) statx$auto(r4, 0x0, 0x1000, 0x7, 0x0) setsockopt$auto(r5, 0x8, 0x0, 0x0, 0x1000056b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/nvme-wq/power/runtime_status\x00', 0x319000, 0x0) mmap$auto(0x80000005, 0x63d36ab7, 0x15f, 0x40eb1, 0x602, 0x300000000000) bpf$auto(0x0, 0x0, 0xf) sendmmsg$auto(r5, 0x0, 0x0, 0x85) write$auto(r0, 0x0, 0xab) 2m55.926370197s ago: executing program 4 (id=559): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x0, 0x3d0, 0x3fd6, 0x3, 0x20000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vbi17\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, 0x0, 0x13, 0x70bd26, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x230, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xc}, @NL80211_ATTR_STA_WME={0x44, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c8, 0x25, 0x0, 0x1, [@nested={0x97, 0x71, 0x0, 0x1, [@generic="6f2f0080c247508d490d5232eb498647221797069dd0c2517296b4d390a315b49f21ba18226d79691abe43e7b4ec35cdb26650878742e76c7811db6776b3dc5636c16943fefb79f4462746b3a428f4e35f3dc229b6fa94bb6fd144d1ec197c73b68f7bbf87e5fd8777f5eb49f1a4dd68e4b71396", @generic="905af1e0cfaca95da2c9e862d68a2322476f70b79f77386f6c95773086f414"]}, @nested={0x2f, 0x11, 0x0, 0x1, [@typed={0x7, 0x132, 0x0, 0x0, @str='^+\x00'}, @nested={0x4, 0x9a}, @generic="05776de5f9881ab0dd69f4", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0xee, 0x0, 0x0, @u64=0xffffffffffffff01}]}, @typed={0xaf, 0x3b, 0x0, 0x0, @binary="6ea9c6eefba2e4bc92a419a14944de2708f7349e62fd44ec58c15af65fa09497391cfdcf262d3afb9fa685dce17193d6e612c6fdbed223bf1d6137c7d144aed9d2fa44ffddfe59b170da3ced9c71ee81e526f51105cadf09ce37a531ce4e26eb112bf39979c544502815b256535c7948d1e4ccdec7bf2572805db0b47531bb49995cedbce8932f274965a95a26a12b1a8b0c7c8e88f3d83fd95efeb71ebf319704097b2aef5e4e66c2f402"}, @typed={0x49, 0x92, 0x0, 0x0, @binary="eb3a695d40a8f6ed554bc48de9cd041e242517670f730d7a47582a29f6ceee4f1f3851a1593924dcccba32ade2dfa2d2a982dd060c5826ce4d2c0851c9382ef9cbe21279b6"}]}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x230}, 0x1, 0x0, 0x0, 0x40040}, 0x20000040) r5 = socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram2/queue/fua\x00', 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) sendto$auto(r5, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r8}, 0x36) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x48840, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m55.595038121s ago: executing program 4 (id=562): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) read$auto(0x3, 0x0, 0xfffffdef) socket(0x2, 0x6, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) landlock_create_ruleset$auto(0x0, 0xfe9, 0x0) read$auto(0x4, 0x0, 0x7d) select$auto(0x804, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x2, 0x0) getcpu$auto(&(0x7f0000004100)=0x375b, 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/radio13\x00', 0x802, 0x0) mmap$auto(0x0, 0x20a0009, 0x3, 0x12, r1, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x100000) msgsnd$auto(0x0, &(0x7f00000026c0)={0x6, 0x4}, 0x7ff, 0xfb89) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) setregid$auto(0xee00, 0x0) mprotect$auto(0x1ffff000, 0x1003, 0x8) mq_getsetattr$auto(0x0, &(0x7f0000000000)={0x0, 0x2, 0x7fff}, 0x0) clone$auto(0x5, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x100, 0x100000000000006) socket(0xa, 0x3, 0x3a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0xf, 0x5, 0x40000091) 2m54.53956386s ago: executing program 4 (id=567): socket(0xa, 0x2, 0x3a) unshare$auto(0x40000080) r0 = socket(0x22, 0x6, 0x8) r1 = accept$auto(r0, &(0x7f0000000040)=@llc={0x1a, 0x30f, 0x1, 0x8, 0x7, 0x0, @multicast}, &(0x7f0000000080)=0x6) mmap$auto(0x401, 0xfffffffffffffffb, 0x100000000, 0x1e, r1, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x8000000000000, 0x400008, 0xdf, 0x12, 0x1fe, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x161802, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r3, 0x0, 0xc3) ioctl$auto(r2, 0x40046210, 0x9) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) 2m52.612630283s ago: executing program 4 (id=573): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) (async) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0xf, 0x3, 0x2) setuid$auto(0x333d) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x6, 0xd, 0x0, 0xc) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r2) (async) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r2) semctl$auto_GETZCNT(0x4, 0x80000000, 0xf, 0x3495) (async) r5 = semctl$auto_GETZCNT(0x4, 0x80000000, 0xf, 0x3495) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="72030300", @ANYRES16=r4, @ANYBLOB="000426bd7000fbdbdf2506000000650115802800c4800b001b006d616373656300000400d7800800fb007f0000010400b58005000000000000004ab8caa2823ed0b869030d4a7237df290ed6fa0c7914002e00fe8000000000000000000000000000aa0f014f80a00028003e18e59a0bf6de03a23a7221bd5fe4dfb7a40f9fb7074a4440d1e1a282fbc03421b2d919e02176303630c396678eda3c581ca830cb9a1f169f2ac0d9c64952d180200c2b8824d66a65d4a9cdd947dae7a05c57115f964247716e18524b159c110187802c97f6d33a92cb6eca8ffb547e3cda6c79b2ccacbd2452ca0f73bf49f00b5cf196fbeda9484a48876dbd1d7d129a9731c100e757de70608df1388456890334885683ab73f263ed4e744edf098307a9da58e2f8b3c4d157c701399e48e399dfe85c19e8c6fc7df520e1ef4ef92ebbd7a8004a96c1c2b0e9ddc60a28ffd3cf43b2eb7167fda284c52d5b98d6ac246cb7ca54c7a9e1ef11950c3df93a7464e43d42ef3fc2980000000008001800020000000800030009000000080012000900000008001200f2ffffffbf01058008008700", @ANYRES32=r5, @ANYBLOB="8f26d9b66942b777251d7ed571b35a0defa93009fe294919599551cee71ff6950f8fce23a134cd819195691e43fabee97b861bbef603f7449ee27431ad13eba408ff763526d551bf4bf2bf255cf757480b5cf76ad5a25d2e4719ddd79bda10285a50c3e7b2bc5aacde0b0023006d616373656300004e55cb0b4e8be8c6937e5bbb9727cd649302963e2ab6cbb50d240539934964beddad3f2525d40021854dd99b64a7d39fc6851b1c79d3cf927a87ecb69add6e81bc5af7a006f817758f779dadec1767753c3a74a885c78a11513c2e97cf8a7594d19f22e1644aa93bd28d69e95f6f295e08262e81c9c64bd214e2da4572260523faa502097b647cfd24d860b225380c71b3c60d0ffbca6309472d23fba9139919a8183e0992653327cfcaa73a355a0cafc0242c0b403c9ec5db2aed39405e8d5a57dfbcf0c31aca1503abf2295cd7a01277294f184e6f95b97d9843691297075c375e7fd774a353cba5686eccf8d7143156d7b57da10c1d6fa4d70f25bb5178b7c4d5d7bf50b09e69223a65cf0b936bd3dea5e6bcaac67ad6392bf7b4be919d67d61796ee500c972839c1eacc0f31cf102c739a23e02b08558275bc89cc5300"], 0x35c}, 0x1, 0x0, 0x0, 0x4884}, 0x1) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2m52.279403828s ago: executing program 4 (id=575): tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x48, 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76158c045ff86707a23e18496d5d7129a8e340b7ebcd1806c7b26420ea05cab20eabc25b6240b084785dac9ddeceedcf0c288633b6a40eb3c9a9a00a8140c1a5d3f4418e6820622dc5e8f300f88254e3b7a4052254f9c40b62b89841b2", 0x7b) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a00"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r2 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) r3 = socket(0x1e, 0x1, 0x0) bind$auto(r3, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) close_range$auto(0x2, 0x8, 0x0) 2m50.525213282s ago: executing program 4 (id=584): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r1, 0x40045506, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b32, 0x9) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) shmctl$auto_SHM_STAT(0x8001, 0xd, &(0x7f00000002c0)={{0x2, 0xee01, 0x0, 0x4, 0x6, 0x4, 0x7}, 0xac93, 0xb8e5, 0xfff, 0x7, @raw=0x3bf, @raw=0x7, 0x3, 0x0, &(0x7f00000000c0)="f0abd853f1834259a7d6", 0x0}) write$auto(r3, &(0x7f00000000c0)='\x01\x00\x00\x00\x00\x00', 0x7138) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x10002}, 0x401) close_range$auto(0x2, 0xa, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9d, 0x8, 0x13, 0x0, 0x47, 0x80000000c, 0xf, 0x0, 0x0, 0xb, 0x4, 0x5, 0xff, 0x0, 0x3]}, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/sra_exceeded_retry_limit\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003800)=""/168, 0xa8) mbind$auto(0x4, 0x88, 0x74, &(0x7f0000000000)=0x20000000000, 0x10, 0x2) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) 2m50.075146291s ago: executing program 33 (id=584): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r1, 0x40045506, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b32, 0x9) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) shmctl$auto_SHM_STAT(0x8001, 0xd, &(0x7f00000002c0)={{0x2, 0xee01, 0x0, 0x4, 0x6, 0x4, 0x7}, 0xac93, 0xb8e5, 0xfff, 0x7, @raw=0x3bf, @raw=0x7, 0x3, 0x0, &(0x7f00000000c0)="f0abd853f1834259a7d6", 0x0}) write$auto(r3, &(0x7f00000000c0)='\x01\x00\x00\x00\x00\x00', 0x7138) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x10002}, 0x401) close_range$auto(0x2, 0xa, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9d, 0x8, 0x13, 0x0, 0x47, 0x80000000c, 0xf, 0x0, 0x0, 0xb, 0x4, 0x5, 0xff, 0x0, 0x3]}, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/sra_exceeded_retry_limit\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003800)=""/168, 0xa8) mbind$auto(0x4, 0x88, 0x74, &(0x7f0000000000)=0x20000000000, 0x10, 0x2) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) 30.930523895s ago: executing program 2 (id=1250): openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000140), 0x125041, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0xc2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x525000, 0x0) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) eventfd$auto(0x7) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1aa57c94, 0x95, 0x5, 0x100000003, 0x8475, 0x6, 0x1, 0x9, 0xec, 0x2, 0x8, 0x8, 0x200, 0x7]}, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/43, 0x2b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/cluster_stack\x00', 0x4a080, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7fffefff) openat$auto_comedi_fops_comedi_fops(0xffffffffffffff9c, &(0x7f0000000140), 0x125041, 0x0) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0xc2002, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000) (async) write$auto(0x3, 0x0, 0x100082) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x163340, 0x2a) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x525000, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) eventfd$auto(0x7) (async) select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1aa57c94, 0x95, 0x5, 0x100000003, 0x8475, 0x6, 0x1, 0x9, 0xec, 0x2, 0x8, 0x8, 0x200, 0x7]}, 0x0) (async) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/43, 0x2b) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/cluster_stack\x00', 0x4a080, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7fffefff) (async) 30.016415049s ago: executing program 2 (id=1259): openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) mount$auto(0x0, &(0x7f0000000040)=':,\x00', 0x0, 0xaa6, &(0x7f00000000c0)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_mr_vif\x00', 0x100, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) (async) mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0) mount$auto(0x0, &(0x7f0000000040)=':,\x00', 0x0, 0x40000aa9, 0x0) 29.894745521s ago: executing program 2 (id=1261): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0xff, &(0x7f0000000080)={[0x9, 0xfffffffffffffffc, 0x4, 0xe, 0xc, 0x13, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa654, 0x203, 0x9, 0x1]}, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mknod$auto(&(0x7f0000000100)=':,\x00', 0xc9, 0xfffefffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xc, 0x0) fsopen$auto(0x0, 0x1) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', 0x0) 29.757290732s ago: executing program 2 (id=1262): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/nr_hugepages\x00', 0x1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000080)='X\xb5[h\xcd\xaf\x06\x01\x00') acct$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf7c, 0xffffffffffffffff, 0x8000) acct$auto(&(0x7f0000000100)='/proc/sys/vm/nr_hugepages\x00') openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x400000, 0x0) read$auto(0x3, 0x0, 0x1f40) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty29\x00', 0x0, 0x0) 29.679291662s ago: executing program 2 (id=1263): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x1, 0x8, 0x0, 0x269) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) (async) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x1a, 0x4}, 0x7) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, r0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw2\x00', 0x400440, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r2 = getpid() (async) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000001c0)) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f0000000100)={{0x7fffffff, 0x0, 0x0, 0xc0ab, 0xa6, 0x3ff, 0x7}, &(0x7f0000000000)=0xf2, &(0x7f00000000c0)=0xfe, 0x4, 0x9, 0xffffffffffffffff, 0x5, 0x8, 0x7, 0x0, 0x7fff, @raw=0x4}) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x5, 0xffff0001, 0xfffffffe, @_timer={r2, 0x49b5, @sival_int=0xe, 0xbe5422}}}) 29.079589193s ago: executing program 2 (id=1269): r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r0, 0x0, 0x400000, 0x9) r1 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) mmap$auto(0x3, 0x6, 0x3, 0x11, r1, 0x2b) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r2 = getpgrp(0xffffffffffffffff) sched_setattr$auto(r2, 0x0, 0xf) gettid() getsockopt$auto(r1, 0x40000000029, 0x3b, 0xfffffffffffffffe, 0x0) 28.888323137s ago: executing program 34 (id=1269): r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r0, 0x0, 0x400000, 0x9) r1 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) mmap$auto(0x3, 0x6, 0x3, 0x11, r1, 0x2b) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) r2 = getpgrp(0xffffffffffffffff) sched_setattr$auto(r2, 0x0, 0xf) gettid() getsockopt$auto(r1, 0x40000000029, 0x3b, 0xfffffffffffffffe, 0x0) 2.656884186s ago: executing program 5 (id=1447): socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x28) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x1ff}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10000}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_AGE={0x8, 0x3, 0xe2}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @multicast}, @HSR_A_IF1_AGE={0x8, 0x3, 0x5}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon2\x00', 0x4c0000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ef}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.54114003s ago: executing program 5 (id=1448): sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8880) (async, rerun: 64) unshare$auto(0x40000080) (rerun: 64) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) epoll_pwait$auto(0x3, 0x0, 0x1, 0xffff0102, 0x0, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) (async) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) (async) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async) write$auto(0xffffffffffffffff, 0x0, 0x1) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) 2.231755244s ago: executing program 1 (id=1453): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xd0042, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) getrandom$auto(&(0x7f0000000000)='\x00', 0x101, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv6/conf/default/mtu\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x80) r0 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x31e789c}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x7ffd}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r3 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto_tracing_err_log_fops_trace(r3, 0x0, 0x0) writev$auto(r0, &(0x7f00000035c0)={0x0, 0x4}, 0x9) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x1d, 0x0, 0x4) 2.210505446s ago: executing program 6 (id=1454): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x400, 0x8000) ioctl$auto_BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000200)={0x6c0, 0x699f, [{0xc8a, 0x9}, {0x10001, 0x7, 0x9}, {0x0, 0x3, 0x9}, {0x7, 0x1, 0x7}]}) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a001}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async, rerun: 64) recvmmsg$auto(r0, &(0x7f00000001c0)={{0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x0, 0x5, 0x8}, 0x1}, 0x3ff, 0x5, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) fsopen$auto(0x0, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async, rerun: 32) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) (async) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64) modify_ldt$auto(0x1, 0x0, 0x10) 1.888395735s ago: executing program 1 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x21, 0xd7e, 0x3, 0xeb1, r0, 0xc32) r1 = io_uring_setup$auto(0x9, 0x0) (async, rerun: 32) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) (rerun: 32) ioctl$auto_MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000080)={0x0, 0x0}) read$auto_mon_fops_binary_mon_bin(r2, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x10, 0x80002, 0x0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x240000c4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x3cf180, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/logsyscall\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)="ba", 0x1) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24008050) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 32) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async, rerun: 64) socket(0xa, 0x1, 0x84) (async, rerun: 64) fcntl$auto_F_SETLEASE(r1, 0x400, 0x0) (async) bind$auto(r2, &(0x7f0000000100)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x8) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0xffd8) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.8334016s ago: executing program 0 (id=1456): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x10400, 0x0) cachestat$auto(r0, &(0x7f0000000040)={0x8}, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x4, 0x5}, 0xe148) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) (async) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, 0x38) (async) clone3$auto(&(0x7f0000000080)={0x80000001, 0x9, 0x2, 0x3, 0x5, 0x2, 0x7, 0x6, 0x80, 0x6, 0x75a}, 0x1) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x2040, 0x0) (async) setfsuid$auto(0xee01) setuid$auto(0x0) (async) getpid() (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x6, 0x2) r2 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 1.439519126s ago: executing program 1 (id=1457): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8004) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = gettid() r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') getdents64$auto(r1, 0x0, 0x18) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x801c581f, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x3) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x40, 0x0) fchown$auto(r2, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x180) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x100082) chown$auto(&(0x7f00000000c0)='./file0\x00', 0xee00, 0xee01) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) close_range$auto(0x2, 0x8000, 0x0) 1.407313936s ago: executing program 1 (id=1458): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) madvise$auto(0x0, 0x53, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x3fff, 0x7fff, 0x13fd4, 0x3, 0xfffff000) pselect6$auto(0x101, &(0x7f0000000080)={[0x6, 0x7, 0xffffffffffffffff, 0x3, 0x1, 0x6, 0x9, 0x7, 0x1, 0x4, 0x9, 0x4, 0x4, 0x7, 0xcb2a, 0x9]}, &(0x7f0000000100)={[0xffff, 0x3, 0xfffffffffffff31a, 0x7, 0x590, 0x8, 0x1d4, 0x4, 0x6, 0x7, 0x4000000000005, 0x7, 0x80, 0x8, 0x0, 0x1]}, &(0x7f0000000180)={[0xa9, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcbd0, 0x200000001, 0x1f, 0xfffffffffffffffd, 0x7ff, 0x8000000000000001, 0x4, 0x7f, 0x91, 0x7]}, &(0x7f0000000000)={0x899, 0x5}, &(0x7f0000000200)) mremap$auto(0x0, 0xfee0, 0x3fd8, 0x3, 0xfffff000) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x6, 0x109}, 0x21f, &(0x7f0000000200)={0x8100000200000001, 0x8001}, &(0x7f0000000300)={0x7ef}, 0x8) r1 = syz_clone(0xdaa42ebf20ec8c24, 0x0, 0x5b, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) r2 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00T\x00'/40, 0x9) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0xe0000, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0x11, r3, 0x8008) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffa, 0x2020009, 0x800000001, 0x19, r0, 0x63e) socket(0x2b, 0x1, 0x0) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000020008001c0001801800108014000c00fc0200000000ff04000800"], 0x38}, 0x1, 0x0, 0x0, 0x1398a0584259c607}, 0x800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r2, 0x2, 0x7f80000000000008, 0x871) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0x54) sendmmsg$auto(0x3, 0x0, 0x10001, 0x800) 1.203368538s ago: executing program 5 (id=1459): open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mprotect$auto(0x110c238000, 0x1, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x80000, 0x67fe) (async) socket(0x2, 0x80000, 0x67fe) socket(0x11, 0x80003, 0x300) (async) socket(0x11, 0x80003, 0x300) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x141401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) (async) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6bc, 0x5) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) munmap$auto(0x1000000, 0x2000000c) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto(0x4, &(0x7f0000000000)={{0x1ff, 0x10001}, {0x200000000004, 0x6}}, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) (async) bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) kexec_load$auto(0x98, 0x8, 0x0, 0x3) setuid$auto(0x800000000008) (async) setuid$auto(0x800000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/manufacturer\x00', 0xa2040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001540)=""/104, 0x68) landlock_restrict_self$auto(0x5, 0x1b7) madvise$auto(0x0, 0xffffffffffff0001, 0x9) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) 1.051480283s ago: executing program 5 (id=1460): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x6, 0x2020009, 0x800000003, 0x7fffffff, r0, 0x10008000) mlockall$auto(0x7) socket(0xa, 0x2, 0x73) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap$auto(0x6, 0x2020009, 0x800000003, 0x7fffffff, r0, 0x10008000) (async) mlockall$auto(0x7) (async) socket(0xa, 0x2, 0x73) (async) fcntl$auto(0x0, 0x407, 0x100000) (async) mlockall$auto(0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 899.054703ms ago: executing program 0 (id=1461): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/dynamic_events\x00', 0x2080, 0x0) read$auto(0x3, 0x0, 0x7) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x89c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_DATA={0x127, 0x5, "56d41974a6588da7cd02ae6191e6ea95b64e37167b7c662cdcfc7bdd2cdc170cda5392639d713236d57b24c141a4864607ff089f2974ebc801cd4c8edecddd1a53e25ad8d0b13caa1d47003ec9b1d636a6db0860d82593842f50dcda136a175fbe412519e14ccef48d23ae1cae613660eb23d150158d09ebcaabf79eca8a5374ef18141c88c1c122ea156b3eb1837dc7333feda290c987c6fe56c0d315a7a1c6f29ee31928d42648d0ad7e1ddf221bf5a3298b7f81058fd5316186284626eb5e6fee26fbdbfd70593aae6094ebe8b6fa44da556faba7d13eee756ef43649d05665936f28586fa2e1a5461545e47287e10e6a9017b7ef7596ac554f81601316c76f8794eba25edc3bafcd52a476e84b366b9c7eff9b2caad1672ea430391e123378b5c2"}, @IOAM6_ATTR_SC_DATA={0x182, 0x5, "814681503c20daa593e79ed1b169b661fd74ab66ff282bf7f910b53be257b1151cd7e57feee82c893de9b41d9ae83870b3ce5daf6d9f576f2163c45393f8dd6b6e937e3b3d2a677218aa14f70e4adf1054dfbf175fab111dd25a8e0f44cdb16f8deba5ee1446fb2723fa88ab9537c29cea637b0348b71080898921387cffdc01d0f95a6d5bea4ed8b43c0fe0f55c416ead4e14cd8f0063681fb947a70db2a26c9b88a44e51484d6fe4c9552e13cce628611fbe8229e8cb32ca815d853c995fe5e0fd805c002a73a7c481faad66554b96f2e9e6839592f89fd4e6da892b9fbfba44af7c475dc5491a8f74bdcded7c73fa32af1e2cff1a7cb25844db1953f154466e7304fc2e52e6916574a09e2f2fa22d715d992ad16c22ed623d49efdd632630c6d2dd8e450523359961819d5f6a680489962d671b44bc45fde44142c567eae7d144b4474523ee8e869ce02b7f6ff458489b6f9547177dfad5b61c462de4c503d29684455e67aa19bdfbcf7ad8459afefd6cb98309682956fff4acc455b2"}, @IOAM6_ATTR_SC_DATA={0x357, 0x5, "ee9218e162aeb5bdab4fb9dce36372cd1a2b74f19688ded48380ef8a5baf4b2e7a2335b935475193d85d990b6512f8c24160628b6c8a1750fee1526613a33c495c27b8d55b4be44c3bef1fb8f6a52123f2c956c1ed5520f53602c9b3d10b027939bb831f56ec695e5d0046e28ad667a6ccb470156a722d27272bd38e1e97d42643f4d12103ebad584166c23aa5bdd45293e655b9bee4427fd575b87356d0200ce0d6b3041a2cbe858ab876b127e5f355b48cb8203bbf5ed80e37baa9ff7e789e87e13b459910ec142d968e170b62c77abdd8b023c2d793a3f205769fcaebacb622bc10e17487ceb0e345c3777efd846e8a5fa3297237b2d1895bb6d5e3eca76b35f1663fb41246ad8d223191376382f2915db47ca5b541ad9b16be4c5a1ea09c358c431f058d9728b394d5cf49730ff63f98f59047458b1e4547eb85b154263ebe68835d1417204e139acbb5e216ebf359ddb141f693c7e4293cbf191364010b72cb7e92d1cd4b7d37a5b018c89e9b02dca2db3d67fdfa1b01ca9bce87d927b0f43c98396b9985fa0d508cf24da0c1bdf276bf537f882846b72647c0bb01bdffc53babd6b36b4a98ca6b67a15ad966b2047fab99dfa3585d4545fd262d6f43b99fcf1c2cdd09acda4b096a6ac72c7e921a3a397f20b363de687305021c08911a604e3e25c46007c2462076d438f4bd18d80f1f4d2a636532d7130c95550c428992c0f804ab0f961c398ee44d034a08ec287bef4a81f7d7ae9874f476467fa8a6e020e3515cd135b1a2f35f59bcef66b71a2f62fa3c4cbb7bedb7666b538fd277a15855f15fc21dd0b84345573e345d8f6715677709d96cd2cdd6747fcb3451da8672be13efab517234e219a37c85321b37e7bc141bafa2cefd262f0cc814cd1626125b1084b890d2799bd601e17f9b681057c704c483e983dc5fb69f9689ea1de5aa4b1a9e64d56336d6df3d65dd25b0c91cfd982cd461819b941f38ad5c529f6e889f01864802b55e8b2888fc9516106d0fe5879e0b30d4061e9788029c52c287ec5c3d6bcd0ba5452baeaac0f15b2401b608fc0906e0dc38fe94cca459009def8b14397ae9e9efeb4ec5347b4961f7164ae034c40ae8a454f437e4cb7be98fce63c0895b6e0b0545278c00d90dfa657f9044a628f07428b61893294568a688742a11d6810bfd9fc1b12fe469d7fe5cd64482"}, @IOAM6_ATTR_SC_DATA={0x182, 0x5, "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"}, @IOAM6_ATTR_SC_DATA={0xfe, 0x5, "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"}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xaa24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket(0xa, 0x2, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) (async) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/dynamic_events\x00', 0x2080, 0x0) (async) read$auto(0x3, 0x0, 0x7) (async) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x89c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_DATA={0x127, 0x5, "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"}, @IOAM6_ATTR_SC_DATA={0x182, 0x5, "814681503c20daa593e79ed1b169b661fd74ab66ff282bf7f910b53be257b1151cd7e57feee82c893de9b41d9ae83870b3ce5daf6d9f576f2163c45393f8dd6b6e937e3b3d2a677218aa14f70e4adf1054dfbf175fab111dd25a8e0f44cdb16f8deba5ee1446fb2723fa88ab9537c29cea637b0348b71080898921387cffdc01d0f95a6d5bea4ed8b43c0fe0f55c416ead4e14cd8f0063681fb947a70db2a26c9b88a44e51484d6fe4c9552e13cce628611fbe8229e8cb32ca815d853c995fe5e0fd805c002a73a7c481faad66554b96f2e9e6839592f89fd4e6da892b9fbfba44af7c475dc5491a8f74bdcded7c73fa32af1e2cff1a7cb25844db1953f154466e7304fc2e52e6916574a09e2f2fa22d715d992ad16c22ed623d49efdd632630c6d2dd8e450523359961819d5f6a680489962d671b44bc45fde44142c567eae7d144b4474523ee8e869ce02b7f6ff458489b6f9547177dfad5b61c462de4c503d29684455e67aa19bdfbcf7ad8459afefd6cb98309682956fff4acc455b2"}, @IOAM6_ATTR_SC_DATA={0x357, 0x5, "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"}, @IOAM6_ATTR_SC_DATA={0x182, 0x5, "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"}, @IOAM6_ATTR_SC_DATA={0xfe, 0x5, "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"}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xaa24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) (async) 744.610416ms ago: executing program 6 (id=1462): ioctl$auto(0x3, 0xc0105502, 0x1) pselect6$auto(0xbf41, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x4e, 0xfffffffffffffffc}, 0x0) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x1000000000000) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000034, 0x0) fsopen$auto(0x0, 0x1) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffdb, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3ff, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x4, 0xd) read$auto_snd_ctl_f_ops_control(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x18, 0x5, 0x1) statmount$auto(0x0, &(0x7f0000000580)={0xc, 0x1, 0xfffffffffffffff9, 0x7352, 0x3a, 0x694b, 0x1ffda, 0x7, 0x0, 0x80001000, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x20004, 0x0, 0x80, 0x7, 0x0, 0x8a6, 0x0, 0x200, 0x0, 0x84, [0x0, 0x0, 0x1, 0x8, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffdfffffffc, 0x1, 0x0, 0x1, 0x2, 0x3b37, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, 0x5, 0x400000000005b8, 0x4, 0x5, 0x1000, 0x1, 0x7, 0xffffffffffffffff, 0x1, 0xa00000000000b, 0xc8, 0xf42c, 0x4, 0x0, 0x7, 0x0, 0x2, 0x6, 0x5], "ad842ea73e0c769a3a2dd031335e177a339d3b962ed0942a284ca141c7a29bc693e44edb1b583592899106d15ac50c82140580ee959ab1968bb0c85a50ba75006699100abc62fc308959f8b6b36647b76de99cd17032141131e6f5892b87df92c1fe6a2e26f203cdd14835f032656d94236804030a4e021412fa7eb92a67d1bc66aa419504ca603b"}, 0x4, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0x2000040080000004, 0xe) capset$auto(&(0x7f0000000000)={0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) 560.864685ms ago: executing program 0 (id=1463): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port7/early_stop\x00', 0x0, 0x0) write$auto(r0, &(0x7f0000000180)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x8eJ\x94F\x8cOe~\x88\xca\xe3\xcc\xea\x92\xfd67&r:\xd4E\xf7O\x19<\x03\xcf\xe4Y[\x88\xbe\xb8&-\xf5\xc1\xcad\x1d\xe0\xda\xf7B#\xff\xd4\xc8\xfeD\xd3\xc9\x05o\xbf\x8dU\xcc\x9cz\xf7\xa67\x02\xcd\xae_Wl\xff*\x80\'\xceMe\xd3r=\x8e\xad\x06\xd5QL\xa1j\xd1,\xdf\xe8\x9a\xa2\x9d\xab\x9bS\xef\x82_T\x98{\n\x03\x12s9\x83\xa9\xbeL9\xa8/\xd6\f\x96\f\xbe`\x98\xb0\xc5\xa8\x14 \xd6N\xbc\n\xee\xf2\x96c\xa0\x89lO\x99\x9b\xca\xfe\xdb\xf4\x84}\x8c\xf9A\xafA\xdff\xaa\xc9\x1d\xe5\xfd\xf9\xd4\xbbZ-\x85\xf4\t\xf8\xdaq\x84Mv\xeb\x87\xbd\xad\xb6\x80\x13j\x04o]\xb1A\x16!\xeaXSl@^o\xccF3DQ\xf3\xf9\xd2', 0x83) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001880)={&(0x7f0000000800)={0x1060, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '[-'}, @NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_RF_MODE={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xfffffff3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8000}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}]}, 0x1060}, 0x1, 0x0, 0x0, 0x42001}, 0x24040010) ptrace$auto(0xd, r1, 0xfffffffffffffffd, 0x3) capset$auto(&(0x7f00000002c0)={0x10001, 0xffffffffffffffff}, &(0x7f0000000300)={0xf, 0x48000000, 0x6}) r4 = getsockopt$auto_SO_NO_CHECK(r0, 0x45, 0xb, &(0x7f0000000440)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port7/early_stop\x00', &(0x7f00000004c0)=0x3) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000740)={@config_section=&(0x7f00000006c0)={"8b40b8e80093ef15c88043afd7a344f1136d7d2e27e0be8322bb62bab2b213e0f98de27d1eb9aef2c344d7de9ff1237d4866d41bacba4a873f75ab2c2af6e0fd", @params=&(0x7f0000000500)={"e0b0530377d016c29d42d247dca4f142b08c49a6818cd9587d51a013ee7052b1d2768bdc3200dabfae65a20ace3ab07e47bf660325e3ffaf7125dc8430acc3e3", "0be9443450ec6527d04cf1eadf2812c248d1348a2f73518a58b387582667130428e3b6a03f58010d3f74f5ba29c6425419cfd1a5ba4af7f745b9f0785e67d6f2", @padding3}, @next=&(0x7f0000000640)={"91756f1ec8a11496b6a42d179c49d662cdc8b910fce71f2b5a9dfea3c367895399705f90e989c19f0687d357ce6a4779cda8a8d10450269c8c43de413905b6cf", @padding1, @next=&(0x7f00000005c0)={"20aee444a55db65a2c8bf1d2ba77b2a62b6bbc7f00911e2cd69048beedc4aaab04000000000000bc966b005b4dd216c1940ab100", @padding1, @padding3}}}, 0x4}) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000440)="110000000500"/17, 0x11) mremap$auto(0xa3, 0x9, 0xc, 0x8, 0x2) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x888000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x1c}, &(0x7f0000000140)=""/56, 0x38, &(0x7f0000000280)=""/57, &(0x7f0000000340)=[r1, r3], 0x2, {r6}}, 0x58) 505.686305ms ago: executing program 6 (id=1464): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000011080)={&(0x7f000000e000)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 391.5173ms ago: executing program 5 (id=1465): futex_waitv$auto(&(0x7f0000000000)={0x3ff, 0x5dd8, 0x2, 0xfff}, 0x3, 0x0, 0x0, 0x623d) r0 = socket(0x28, 0x3, 0x4086) futex_waitv$auto(&(0x7f00000000c0)={0x101, 0x9, 0x9}, 0x101, 0x1cb8, &(0x7f0000000100)={0x3, 0x1}, 0x80000000) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa}, 0xa3) 385.911043ms ago: executing program 6 (id=1466): r0 = creat$auto(&(0x7f0000000040)='./file0\x00', 0x3) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) ioctl$auto(r1, 0x540b, 0x2) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x10, 0x11, '{@.\'],^@!]--'}, @HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000880) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) 362.671239ms ago: executing program 0 (id=1467): mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000003, 0x1, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0x8000fd3, 0x2, 0xef, 0x4, 0x80040000081, 0x8, 0x2, 0xfffffffffffffff8, 0x63}) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_clock\x00', 0x28801, 0x0) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 297.523167ms ago: executing program 5 (id=1468): mmap$auto(0x2, 0x5, 0xe1, 0xebf, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) utime$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xa36}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0xb01, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) userfaultfd$auto(0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) madvise$auto(0xffffffffffffffff, 0xffffffffffff0005, 0x1b) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 174.645255ms ago: executing program 1 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_DEBUG(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)='\x00', 0xa78d) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = getpid() r2 = gettid() r3 = getpid() r4 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) write$auto_ftrace_event_filter_fops_trace_events(r4, &(0x7f0000000040)="73a673bf8106e507c9dafec4df7b42f8fe32cf961aa4ff4c9004dd4de6f07ea917b31e8477413ad1f9c9be7dd1a53b17e9ddc8103e06c46f8ad1bb9d4b0a18892be77981a70b536db97428", 0x4b) rt_tgsigqueueinfo$auto(r3, r2, 0x21, &(0x7f0000000600)={@_si_pad}) rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000040)={@_si_pad}) io_pgetevents$auto(0x8, 0xfffffffffffff800, 0x2, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x9}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/bonding/bond0\x00', 0xc0000, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) pipe$auto(0x0) pipe$auto(0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 165.402083ms ago: executing program 6 (id=1470): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xf, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0x2000, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="55372cbd7000fbdbdf250700000008000b000000000005001f0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c040) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000040)={0x7, @inferred=r4, @raw=0x300, 0x81, 0x2, '\x00', {0x100, 0x7fff, 0x1, 0xee00, 0x0, 0xff, 0x6, 0x0, {0xffffffff, 0x3aa8}, {0x7380000000000000, 0x30fe}, {0x10, 0x4}, 0x0, 0x59, 0xce, 0xfffffffc, 0x1, 0x5, 0xe, 0x1, 0x8, 0x0, '\x00', 0x80, 0x18000, 0xabe, 0xc221}}) r8 = semctl$auto_IPC_STAT(0x8, 0xb097, 0x2, 0x1ff) r9 = semctl$auto_IPC_SET(0xe, 0x0, 0x1, 0x1) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000002900)={0x2734, r6, 0x400, 0x80000000, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x2}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}, @NL802154_ATTR_SEC_LEVEL={0x140, 0x2d, 0x0, 0x1, [@nested={0x117, 0xb1, 0x0, 0x1, [@generic="f9693664c439ccb6b235c6dffdaf4a748992e5559bcdef76a7a70ef854b002d5b42a01aad6164577d7328cab5513d43c761db9cd83a648b7f4", @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x5e}, @generic="e5e640bce1c9e8fdbeffccc39c71499090cabf58dc9937a27ea5d95ac7970f9d976b0f5e6dc6bdf1d1ad39e9bbd87a57474b10c24fec9e5b483f1202f693485a5d22d8d13b23c074aa275f3d2615ab49c9", @nested={0x4, 0xa}, @generic="9c1cda84cf69c4973217e7af214e705ae3af9640cb576d3f2f5971a49ce40a5ec8864f205887ee2355506f30af79fa2388a43c160eb5afa18d2d1e43fb5f1672714a317ca1a67ec4c05abe645212609d29f5736b1d2a44b9c3d233d9f1bdeee9a53526a137", @nested={0x4, 0x101}, @nested={0x4, 0x3c}]}, @typed={0x8, 0x31, 0x0, 0x0, @uid=r7}, @generic="b10f105cfcb30c6eeed638035dd026567c528ffb96439b62f9288749"]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xff}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_SEC_LEVEL={0x25a6, 0x2d, 0x0, 0x1, [@nested={0x106c, 0x68, 0x0, 0x1, [@typed={0x40, 0x127, 0x0, 0x0, @binary="4e2d8c8f491a13919e923bfdfaa95469697c5ceb4acd369e9fa783cc3891bd5692e8f8930c7fb3c1a92c11cecc98080c781f4c1910e709640fbced2e"}, @generic="a96a477602c9223c2cbb7bf8c3955f0872afc9fd150fdc5e0e3124a986ee803a49d65b289ce92058a7c4ca93c1cdd41d8e764d7f1a722e60c1ffb8406909f55b614aa3b0cf3245971b4b7dce15a5b27a2f42d779b06fbed28fb3d9aea7e84759a967d40411c1612e6f5d3cffb19f386125e3060cb3e326f80c1d027dc8d185ce4428289396acac019f3328a6c1c1afd7694e48f70306cca4e2ede1cf63902f0134262295e6bed8665c85f2dcd1dd3c4e3ba23a7f7b137c7b8edc7cc93b1024b964f0465ee3c4f22a1d127ce3ff4a7274cec377f308deef2df92ba3e90e079a8eb3dcfc4420b18831d92fa27c3f9f39c6c5e148e9ebfac2d45810e44db27c6c731bd186f6e5e34e6aedca079840e33eebaa1432648b021fcb9c08206eba98e453fd8fe391e89191fdc08aa903643b5a68f2b4b5e15cab4121a099841f16f119dcc27b0a2550dd761488cb6cdd013431f5d1afc850f9b526f88c7cbd2d47dd5a807a4559285542ba5285efa9376423da411b9a6140808f0f5d61f3827267c0cf40e7e70ba68ddabb6ad8d230c42813718185569b12991bc500ea24ee6f366220b58b228b0c8e76585968e44b00fecaa4319fd250895bc5bd7718cfd2f6f8577d4fec83bfeb8e8b70782f9b4a6aa0741481898a46c3b172bf886eb974760c87936834d7a328703c8f2e95ce6aab74d326b2fc99212ef067ca12c49f8e0e6e5c5e3a59c6989b0aa8234c3ec1aecc7cf775408f35fa8716dc276f29e2e0acd58e10cb7bf32f46f52a955ac996b175d82415413f485c1930873915caf91c6659f72353fbff3468a305d853ef6c318d2c8f1165f5d363138a609a63429b7058563c92db5f1826ca1a1bf252b4087481c3a7e5cc3043426e3731a0c984a9982f25e55e231777c3fe29a0e8b7212c8743403bde5db735672519bb3a7c6991139ace1d6fd2cc29076a44dfb2e04c67f30314e9dc50f7639b3b7b4c48e70c4193f3e946244e9874d7614bbcf42cd555ce849630b8a232f29072ceb5847d963119123c264359a9b11edd6f5d735fbb965f3638bb5efdb77dcea62f3ce0721b779dce3ba3d45ad91f2e07edc8cd2798b77c5febaaab99dd944613af8624b228ba8beadca0b0da30d594dd4b08074481a6c5dff74702df8ff3e73724e5588e856c80bf7c73b3c91d3c8c7dcab8b913446c765b0693bee83543e81f6266da3163d4bae30a99022d367bc948f7d8ca872e4a34b03b95283df0927db2cd39e78e5ad4772f1aa7fae35b13d52a00c92f61542eadfd6a804d50d8cd591faa6bc28850a64c9e355a18a1d8c15ab8028fcfc348d66e15ceff134082947a00206ad83f5d09953be06e695795508cf17e369fcdd7b579f816c3873fe8fab557f15a1a552057c736456571a08a3d991e4d891f5c50c6f64126ada7c9af45c3b7f8345e5e83a90596985970e91f42895c1c8896485767789c99e0d4742d2aa88acdaa40e6f76bad75b768fa971d9c7fd59f20ff534e72252b5ef1223a647798454f0b9175fef61dd2668bb037b6321c5774b413ee5df018f492a226b0633f6a7de495cb7db3d37ae5b864cd18afcddff3c786b218f312a036db7fd992633003e0251f48f4690ef6093f4c60a4301fd872dc6294b0250b494f5430e83a2bb82d05b23adef95b719507f58ed4484f0c36fd2582beb1f58134782d47bf0d743bd5e5189df3125fb92ec55261da7359a95f941c12bc8c47d18b58e2c63b9a9ad8bfc3231f00237770e59edd74e79fb7acf9dff8d9113c82a79a087223c228d6f263b3da880689ee6460c45f958074f2b7b00797aa15aac577ad1a7f75aa684dbb7e05a9656fa28aea5a61e3bd2f6de9048bf447c1d7153bc6f043a6700b2d8aae0f4e8a239d958567856151a14acceb835408a2c36a4c0b5d2c568dc58868b485d94b9455262f65fbbe549767fd00cf91465845b2bc63343033659064feaaacf5e18e7aeb39dad27efc7dd78c5a0968f70e4fe82c64c99b2feeed51422bef971857fd5835f0191da5cbc5c307f90676b835f7bd6c4d2366d1cd9b9ab377098c382c9963ffb42286af653e113074f6893d84cdbee324215c94696a5a7b9ecb05d75c2ccd03a11760be00a5ffdda996ad6f03c08d52815552246d501f2bc5bf6d10cba44aba6262e3ce46d0638ac49bea31aa6642a94c4f5f5d792ec473d603086cb7d0726fea72b45ab28d88e9cc40b9d9acfd3c4833475803e271256bfd17689e5b7c4f6117f76c03fc35a91711966b24cc5cd8a980ed5b7ba9ac0ff96afa11ae3b4d3c0121eef610f3c5affeaea8ab3ee1f6d32a9e7d97dd9758346cdb2a2a781b13028698b3cfe2a5eace8afc1c462bca80ae793f874df7aa5b6ef9c6bf81013c5e5a79a162c0b80155780279e222b470cbb16c234e0a359a5e68e9b75d45e1351a8d88e901f6e1b7850068cc26d76b2bf3201517a73527e640beeac2d7278d1da9ec06d78d30539da9b6bb1fcfeade49388e61b4c622a90e54d5e717d54fdb75b6fa6c4cdcc6e72c63def37415cca30df026096c58e317467317239838d7bf16c30336bcab088e22cb8f9fe630ad6800d4e32ffb31443fb29453c3836718799dcf1c3d6caab73ea2bfe60c0ab4c4617d5456619e999f070c6f586c40e789ced7a6e4de336e51bc400941906d5cb1c2b6d2f852abe765a32a733b5967fc6329448b5c43cd2867f23f7b1563d9c42eb56c63d5da9cd47abf264b5bdab886ca557a55a34c0ec4efd359fcfcb8c6b142d509df21c5c6acc0ec0e8f1a016a2e67fc000420d79b8849c88931c565ea87ee8b397bcd4aec1e31294647eafe12781cb8faa5df59f0ea2531a4bdcd18f42ace35dc06d650cf72bd1f41efebe2abb7e741dba26e7f7bd16cee6fd15ccfed8d8d84d33222478fb3ae9482c61755fc004df83c71f0db2cf308485558a48c1921765c8cd4a62758193f72f87d472e6aec070994ced784465cf045e4b272fd5a31d71c392a229d92becf258ec2ebabcc78c58f05c70eb8c38167e5d86ff91c082a1833341950312e92cbcbea047c189376c969932842e2c55f421831b35c089921d5102781d38f8b262c496364e6127b41628a32bbc4ecd108d776f5cf636c7023aa97b252ff243a6a40987f68f567b2d7607d2345e043b3bcbdb4b2be8ec9a9166d49f2d42fbe543266e020be9ea19014ff0a9f3b0266febb00d61415d1e61b59a4e738a91e1ee13ee2d08c13b793d7752b0b94368077b3902bbf74b9f165c4cd6b570c8c0e91cd8606064dd7bb142c336ec39f60bb0c488694651a832ee37cd36c78ec5c870782611aee891443676341ae940579da7db5896cdd1bae3866fd54ca514223308b4b6906fe9ab9998ad2a90c4cd233966f7a59a5fb896cb55fc0991bd3802cd17b10a698ae58ef929155dfea2ef737500cdd3620ed977aa3624840dec93d76573d13099ff5ad8577e06fb29a72df43be3f394364cf094971f1c73fa3dfde881c62857010e3e64d3ca454f9f1823d973132928c2680a2c1f863c4649a164f1b988c2a1960e727ed18f6c50d3fb2d44e18fde7bc24a55c36227765beca6b6d74159e3a787b27226fef896ce5af1e3cdcf52de3d0113ccc89cc7d45194b35ebb6fc4623737c3a4e8ebb5c942bca6c5c2d64a91a164e9038133da59b1abfa83f6caaa72a7ab0dbad0481415c988c661eccb678f2a892bfac562c379132778b9adbcaaaf072a8adcd0690e31ee596a5f3b0a2ac5db75776d0f6888717602edf7ff57b262229ed28c1a0c2b1600e9258447107fd6e18efee07fd7cacb3cb3b77039d5fa8261ca8196bdea90d4e504a739815fb9d9a044e83a71f82d21246ced39d02e150fe0968f391f5f53d698ccfa8a7ed41e0e4ed55e852df6a44cf6c2d269b8dc85fc45d5711851ed98cda8dcd2d3f91fd5dec6d31919b84f5b1179a1d6633a7dea3231306880942499db9c848fd273261e7a711ef70f686dc60ad177c62703b002f97246990a4c1f07e55a5976e7bcbf9b002e1272ff8dd5764720174bc408bebb9dc80f76f4fd6b4cdba9b255ee341d3a8632b51c4f07eea9d9b007fc5103deb97b6d4781fd263ea04adbd3e0bc21a537d3a1b311c67be6b55b18a3da3320142703264bda44d8b0bb5ba8624ce403a01c4adb78f08abf0843e85cc877fb5cb798a5e890678024a64dfed626041f0dd1b153192fac3c7a445a66219a18c96c8a14606a002e83d41a9557c1e93a00734725caaa304f2604654b6d7856050d5786851867c9caed8e571c024b99b255eec9aa595e54bee8c288022cdb9570aa497cf11668b62de1712656564b10cfdaaf1e717e688e310d17b3310dd5da827864495e658b7f5d5be332a305a9f99baf9a16d92bbbea50b519d25b5e2efbce689135724c963c84f1d10d31d71b2b4490b5889d275012553a6714e1a8c840793d3f9e00d20df527333e00857824b1ebca1066ace68c81144a89ee12f1ef8f329c1be6177f1b75580ab221bff817bf699d096ab5c8781f5f6b78b31a7cf792f633aeae12c3e5d923c0c2d32e0d61233a54b6c436b32f048b3cf2f82f51264edfb1dbb870c87d940c7ca5888638cf9be953c3975fefd5e16d3dfc6c9c1b5aafe1296825a948598ccc69222f8b5c469dda4c1dd75d76a756aa3ab5491258c60319ec3be94c0c23efeb6cd3536cf72172cef209f356a15b50f09fe9ae577ac3285a9ff8b42e5204f7c7405c7b89c9dad054f14c72479d4aea048b52977f99c88c53548c20032f013cf2a292b2a0042b01dfc7887714391fbf564d313c2ebb78f19e7f0e9fbace67c892f95ef0f08e2d5812ec634e1871f0f5049f90f41b56fffad8ff8a23502f3d158b506991d36d5b5666ef5bb6e635818e64e5e02878e01f6383625bc5088dc7ef144cc6c59eb42f5d813a50e9345578f2183bbf6cacee156d744e23603fa40aa101b17b9332fb35170b0167039c228b9f6a78636ae39eec99cf1977eaaa763bb03645fea7b8348da783e4c9747074b15a078b717617e824ce893703b67d46071ee6ced0f347e88eca1227bdfd3c653bd02c65a12dc99e814a4c3b8c1e53c0b189e4c4ba7ef61963fd38cdd71e8ed892541dcbb5a7d9022fdfedbc87c19abf6705c782d26e99bb338ae2422e36796173c025c53aa4ef7b999bbc1934798d8cff3da0c773878269dc48cc4d9d801e235c98c5baac900ed658bfc07735b1b393e15e50e7c24409c5508b9a7306535f1c098ddaa532c4e0026929bf0814ddf38c72167045e321ff841b63f448fae8fc68902d297b51b86e5704988ac0d851bb324aa035563c44e4d19ff13794a4d056cc251efb9b9f8e85127a77a316e77e72a797e3aa1caa2362fb5e4626d8843db312858b1baf090914bfd773db3292ec38565de52aca5e9f83890b6f234ffb4a69ac4a824bd9c700547e376e7bfdd03eb5ba09484cc1fe2766892a7a9e1fd2dc0e39a22eb7d131469a50b9452690f38066d8556ebd4ffb40f42f900a1c0b93e538321601308ccbe4c75fbe4d671e3b6a42ad416f3cf918a7ac00fe689db60c8b1ad8ddefdd8a65cb02459226e8c501cbe2231b13e912263669d9b6bdb10cf98d5efe7df5d9a38f41ddc241b3e02693198260590c207d67e2c91b0438e1477f3917134bc853b17211dd7875a9e302e8a5b764212316887c52369bbf2784fe0ee0c3bc374f3fc65a57abd4dc78f0b1c804ff83d1b07f553d72fbd068e156fecdcdb3f4360cc98a451303825ee1b882ad8cbb7b01a9c7e26497cd441d68ae3c1bc731b1586610da370b7d98e68", @typed={0x8, 0xda, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x137}, @generic="64312f98405fa7d5239f9d874a678e98b17f84d39e015640528325ce"]}, @nested={0x31c, 0x2d, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x8, 0x0}}, @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@remote}, @generic="6207ec16b22476e52a6b05225b0fcb60650ec8fc748f47bb9b141e7708306d9040cf6edc3187b289f4b7f9ebaafc284b50a8837021a541cfc6076ebf70517110901bc55b21a1d75550a27f97bdcc15a260ab642bcac44a71ee6432aa36b99e54b982b15199ad2fec1dca829768dd7097c618dbc4d2f1bdd1d9a2e14422706f7039348e7d345f21c7601285947417413f924e3806ad39fdd248949d21833bd9fd7b505877dbf9da9529bd38fccdc5dc", @generic="d2748ce498c348801693c6a2bbd75c18cd69711d48214b495ce4563c111e8c6ba3fc3058d6b60a7e94a76f5d2a9fdfb0a93e5de93cc9dab696bf8504a68e9e33488daefbe2ed883c5a00e2e16b652c734c24480d978bb5eb44221789fb9cc655d77ea02ce585ccb44766eb0dbd593e63e76f5824b4a1dd0aa06e94c6529e427e60904097254df4d0c8c88480eb0f2aad43bb643e8266ea0409d8f1087777a153229cd94e338899deb6f68a4e3e495ee6e67b4ce89bd2cc8c946035912fe167ebeb3917bd16eade951962867519340bb915416a4caf", @typed={0xc, 0x108, 0x0, 0x0, @u64=0x401}, @generic="72714f57849f5ee7dc58de7122c0641cc7f94ff28a1718ce7fc157cd1b6bb3a0fab940e0f12c91e375e444bd272b42558197748a00ac2054443911d7e07571468cfb1c5025b5c877a6c94dbc08e6a3bff44f4481c93d66fb11cdf59bbc4dae559715c65729b46cd534ede18d71d01b4f5521f4955f75fa75652586e2f929bc3e94d9", @generic="72a3a3b9ebc48fba3976f6e4acf0ca828469ab6806166a18ce8d569ea79d0e9a12d0794d30341fc0e73b7356b1c84c4b54823804dcf40f97392a65eea9b9b8da7e8d6ad4c04f335ef39f01120655aea35726e25b0b94a337e6eb049d91a2226fb0d5c81cc0c9460ba2d881c45faec16add8e2a36e6ab1b751207281e4f3682f9c9519c4c832cb96dcbd50d3f3f86f1b82f0389b1a0a2506087f20f538198a3ac0cc96a682cf043ebe5ee4b09d82ad7a6090856b567a21597c90d8678f107e5c3353b9d88a35ad838f3fa06bba43c5be274edcf24dfc71f059c83c4432f2942fd1a95"]}, @generic="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", @generic="4b7a2d3ad3940851483d6d71dc711b3e79feb6e544e499cb4714bebdccddf2249e310e0f10895df1e468839957da3a37b607e625dfbf4d402b5590572d810573ef908074519c59fe034b6c76bce3142eb5eb734681a07cd8c3261f58ccd44f14cd6839bc8c92dc1f0fad68833082058c9093224ee6bc97f1c4d2", @generic="984d654e181d1f013abdd73097d870715c0128e439053229fa3f5b2d64096a69f7e7bc5433a39322efb3df2aba86ff94d1642494d0ca8a251a006fa5fa8cd361c2cd737b0611c144c0076dd22dce5126f1f0d6817c1ebff444125b6a6e18ca37bd99a30a5f613252b0e0de67b8c0eed3a92fbf5079590aacfe466ba3e75ffa84f99118d64fb0bbf781a2cc79d0c82db9eb02289165fbdb761c90c9e654d5fdda3a3d1009d02b6974f7cb01bf33229eef8a31144a01c67d4a8634dfefca6f453e612b1029911cf92c39d71841264859e512168a8b44cbb1c45ddf0048cfa646ab81f7a8b81c011bcc", @generic="fe0c81fc68abaf50f857780ea9c403c3f2d5167ce4318ae811e798b273b336124aca7dedabb9e02d4e34e12b9dcc803de372e054058c7796bbe29f5d05dae3c607d0c5bf7012fd2b86a5711791efdff511b367144a10eed2d268fd8cef930763c4", @typed={0x8, 0x26, 0x0, 0x0, @pid}, @generic="ea52d5e416cb19dc68641107c7c338060368631fac0da253de208bbf0165f065a2f5b6e5ba5a6d377a74230c925dd848311597de5a7261de422a6a75e667cac02201270c114a2924096472a3dd0e0d"]}]}, 0x2734}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) setregid$auto(0xffffffffffffffff, 0xfffe) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002800)={0x30, r3, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x84) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 84.588727ms ago: executing program 0 (id=1471): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) socket(0x1d, 0x2, 0x6) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x121080, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x54302, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/rotational\x00', 0x103400, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40d40, 0x1a0) (async) socket(0x10, 0x2, 0x14) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyaf\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) connect$auto(0x3, 0x0, 0x55) 24.008415ms ago: executing program 1 (id=1472): r0 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy11/hwsim/dfs_simulate_radar\x00', 0x10000, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) r1 = bpf$auto(0x0, 0x0, 0x6f4) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r1) (async) rt_sigsuspend$auto(0x0, 0x4) (async) writev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000040)="f74bed5f3a447f7902", 0x8}, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = syz_clone3(&(0x7f0000000200)={0x20400, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x21) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) prctl$auto_PR_SET_MM_END_DATA(0x6b, 0x4, r2, 0x1, 0x765) (async) mmap$auto(0x9, 0x8, 0x2, 0x9b7e, r0, 0x8000) fadvise64$auto_POSIX_FADV_RANDOM(r0, 0x10001, 0x100000, 0x1) (async) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000000c0)={0x5, 0x4}) (async) mmap$auto(0x3, 0x2, 0xfffffffbfffffffb, 0x3b2, 0xfffffffffffffffa, 0x8001) (async) r3 = socket(0xa, 0x801, 0x100) r4 = getsockopt$auto(r3, 0x40000000029, 0x10, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x25, 0x1, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) recvmmsg$auto(0x4, 0x0, 0x409, 0x2254, 0x0) (async) mmap$auto(0x9, 0x1, 0x2, 0x75f0, r0, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x400, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/1:3/min_ratio\x00', 0x183400, 0x0) read$auto(r5, 0x0, 0x20) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x401, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="300027bd7000fcdbdf25130000000500070008136b00"], 0x1c}}, 0x20000010) kcmp$auto(0x1, 0x1, 0x7, 0x4, 0xe) 1.615712ms ago: executing program 0 (id=1473): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) semctl$auto(0x1ff, 0x2, 0x13, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) readv$auto(r0, &(0x7f0000000200)={0x0, 0x2}, 0x6) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz9\x00', 0x60041, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0xfffc, @private=0xa010102}, 0x55) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/002/001\x00', 0xa901, 0x0) 0s ago: executing program 6 (id=1474): r0 = socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0xf, 0xf456, 0xfffffffffffffffa, 0x7fffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyc7/dev\x00', 0x4000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() process_vm_readv$auto(r1, &(0x7f00000010c0)={0x0, 0x5}, 0x800000001, &(0x7f0000001100)={&(0x7f0000000080), 0x1ffffffff}, 0x4, 0x1000000) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) mmap$auto(0x4, 0x1, 0x2, 0x10, r0, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xb2, 0x12, 0xffb, 0x8000000008015, r2, 0x8000) write$auto(r2, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x20499d, 0x9) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x200, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000000c0)={@inferred=r2, "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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) mmap$auto(0x9, 0xff, 0x8770, 0x7f, r4, 0x8) madvise$auto(0x108000, 0x800034, 0x200000b) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r5 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x88f42, 0x0) write$auto_force_wakeup_fops_hci_vhci(r5, &(0x7f0000001780)='T', 0x1) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0xffffffffffff7fff) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye8\x00', 0x149201, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            syzkaller syzkaller login: [ 301.091339][ T9535] Process accounting resumed [ 301.252514][ T9555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.259875][ T9555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 301.267809][ T9555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.275384][ T9555] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.329190][ T9556] Process accounting resumed [ 301.509740][ T9574] FAULT_INJECTION: forcing a failure. [ 301.509740][ T9574] name failslab, interval 1, probability 0, space 0, times 0 [ 301.572258][ T9574] CPU: 1 UID: 0 PID: 9574 Comm: syz.2.762 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 301.572292][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 301.572306][ T9574] Call Trace: [ 301.572313][ T9574] [ 301.572322][ T9574] dump_stack_lvl+0x16c/0x1f0 [ 301.572358][ T9574] should_fail_ex+0x497/0x5b0 [ 301.572382][ T9574] ? fs_reclaim_acquire+0xae/0x150 [ 301.572430][ T9574] should_failslab+0xc2/0x120 [ 301.572465][ T9574] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 301.572502][ T9574] ? lock_acquire+0x2f/0xb0 [ 301.572536][ T9574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.572567][ T9574] ? vm_area_dup+0x53/0x300 [ 301.572598][ T9574] vm_area_dup+0x53/0x300 [ 301.572626][ T9574] __split_vma+0x181/0x1210 [ 301.572653][ T9574] ? __pfx___split_vma+0x10/0x10 [ 301.572683][ T9574] vms_gather_munmap_vmas+0x38b/0x1730 [ 301.572717][ T9574] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 301.572744][ T9574] ? mas_walk+0x6a6/0x910 [ 301.572772][ T9574] __mmap_region+0x32c/0x2760 [ 301.572799][ T9574] ? __pfx___mmap_region+0x10/0x10 [ 301.572829][ T9574] ? __pfx___schedule+0x10/0x10 [ 301.572852][ T9574] ? lock_release+0x4e2/0x6f0 [ 301.572873][ T9574] ? schedule+0x298/0x350 [ 301.572896][ T9574] ? __pfx_lock_release+0x10/0x10 [ 301.572923][ T9574] ? plist_check_prev_next+0x12a/0x1a0 [ 301.572945][ T9574] ? schedule+0x1fd/0x350 [ 301.572969][ T9574] ? lock_acquire+0x2f/0xb0 [ 301.572994][ T9574] ? schedule+0x1fd/0x350 [ 301.573035][ T9574] ? cap_capable+0xb3/0x250 [ 301.573066][ T9574] mmap_region+0x127/0x320 [ 301.573089][ T9574] do_mmap+0xa09/0x1050 [ 301.573117][ T9574] vm_mmap_pgoff+0x203/0x3a0 [ 301.573143][ T9574] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 301.573169][ T9574] ? __x64_sys_futex+0x1e1/0x4c0 [ 301.573193][ T9574] ? __x64_sys_futex+0x1ea/0x4c0 [ 301.573218][ T9574] ksys_mmap_pgoff+0x7d/0x5c0 [ 301.573254][ T9574] ? rcu_is_watching+0x12/0xc0 [ 301.573288][ T9574] __x64_sys_mmap+0x125/0x190 [ 301.573320][ T9574] do_syscall_64+0xcd/0x250 [ 301.573350][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.573382][ T9574] RIP: 0033:0x7f9382d8cd29 [ 301.573400][ T9574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.573424][ T9574] RSP: 002b:00007f9383b30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 301.573445][ T9574] RAX: ffffffffffffffda RBX: 00007f9382fa5fa0 RCX: 00007f9382d8cd29 [ 301.573461][ T9574] RDX: 00004000000000df RSI: 0000000000000001 RDI: 0000000000000000 [ 301.573483][ T9574] RBP: 00007f9382e0e2a0 R08: 0000000000000401 R09: 0000000000008000 [ 301.573498][ T9574] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 301.573513][ T9574] R13: 0000000000000000 R14: 00007f9382fa5fa0 R15: 00007fff3d4b8998 [ 301.573536][ T9574] [ 302.224710][ T9583] vivid-003: ================= START STATUS ================= [ 302.234054][ T9583] vivid-003: Radio HW Seek Mode: Bounded [ 302.240919][ T9583] vivid-003: Radio Programmable HW Seek: false [ 302.248431][ T9583] vivid-003: RDS Rx I/O Mode: Block I/O [ 302.256799][ T9583] vivid-003: Generate RBDS Instead of RDS: false [ 302.264569][ T9583] vivid-003: RDS Reception: true [ 302.270581][ T9583] vivid-003: RDS Program Type: 0 inactive [ 302.279517][ T9583] vivid-003: RDS PS Name: inactive [ 302.290210][ T9583] vivid-003: RDS Radio Text: inactive [ 302.314927][ T9583] vivid-003: RDS Traffic Announcement: false inactive [ 302.362307][ T9583] vivid-003: RDS Traffic Program: false inactive [ 302.369965][ T9583] vivid-003: RDS Music: false inactive [ 302.428451][ T9583] vivid-003: ================== END STATUS ================== [ 302.662284][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.985594][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.770'. [ 303.006596][ T9610] tc_dump_action: action bad kind [ 303.302241][ T5846] Bluetooth: hci3: command 0x040f tx timeout [ 303.309590][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.309605][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.056077][ T9635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'. [ 304.067135][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.076650][ T9635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.110330][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.124361][ T9635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.692480][ T9654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.699692][ T9654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.742897][ T9654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.750185][ T9654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 306.743743][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.751009][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 306.822929][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 306.830516][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 308.034077][ T9688] netlink: 330 bytes leftover after parsing attributes in process `syz.0.785'. [ 308.553130][ T9701] netlink: 338 bytes leftover after parsing attributes in process `syz.1.788'. [ 308.569746][ T9703] netlink: 338 bytes leftover after parsing attributes in process `syz.1.788'. [ 308.629351][ T9701] netlink: 210 bytes leftover after parsing attributes in process `syz.1.788'. [ 310.787900][ T9749] Invalid ELF header magic: != ELF [ 312.430126][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.807'. [ 312.459421][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.807'. [ 312.561746][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'. [ 312.609873][ T9777] snd_virmidi snd_virmidi.0: control 5:131081:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 313.747875][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 316.244662][ T9825] openvswitch: netlink: Message has 4 unknown bytes. [ 317.465712][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.474584][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.270938][ T29] audit: type=1800 audit(4294967345.752:12): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.831" name="features" dev="configfs" ino=28700 res=0 errno=0 [ 318.786834][ T9867] netlink: 330 bytes leftover after parsing attributes in process `syz.5.832'. [ 319.118258][ T9877] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 321.467410][ T9903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 321.490847][ T9903] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 321.960683][ T9910] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 321.978136][ T9910] ieee80211 !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]: Selected rate control algorithm 'minstrel_ht' [ 325.039022][T10011] Process accounting resumed [ 325.069725][T10008] FAULT_INJECTION: forcing a failure. [ 325.069725][T10008] name failslab, interval 1, probability 0, space 0, times 0 [ 325.236208][T10008] CPU: 1 UID: 0 PID: 10008 Comm: syz.0.858 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 325.236244][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 325.236259][T10008] Call Trace: [ 325.236265][T10008] [ 325.236274][T10008] dump_stack_lvl+0x16c/0x1f0 [ 325.236309][T10008] should_fail_ex+0x497/0x5b0 [ 325.236332][T10008] ? fs_reclaim_acquire+0xae/0x150 [ 325.236364][T10008] should_failslab+0xc2/0x120 [ 325.236390][T10008] __kmalloc_noprof+0xce/0x4f0 [ 325.236412][T10008] ? kobject_get_path+0xcb/0x230 [ 325.236440][T10008] kobject_get_path+0xcb/0x230 [ 325.236467][T10008] kobject_uevent_env+0x289/0x1670 [ 325.236497][T10008] ? __pfx_dev_uevent_name+0x10/0x10 [ 325.236528][T10008] ? trace_irq_enable.constprop.0+0xea/0x140 [ 325.236556][T10008] ? bus_to_subsys+0x12d/0x160 [ 325.236584][T10008] driver_bound+0x164/0x230 [ 325.236616][T10008] device_bind_driver+0x3a/0x70 [ 325.236648][T10008] mac80211_hwsim_new_radio+0x45d/0x56c0 [ 325.236677][T10008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.236715][T10008] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 325.236760][T10008] hwsim_new_radio_nl+0xb42/0x12b0 [ 325.236790][T10008] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.236823][T10008] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 325.236854][T10008] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 325.236886][T10008] genl_family_rcv_msg_doit+0x202/0x2f0 [ 325.236915][T10008] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 325.236943][T10008] ? trace_cap_capable+0x1a2/0x210 [ 325.236974][T10008] ? bpf_lsm_capable+0x9/0x10 [ 325.237003][T10008] ? security_capable+0x7e/0x260 [ 325.237024][T10008] ? ns_capable+0xd7/0x110 [ 325.237047][T10008] genl_rcv_msg+0x565/0x800 [ 325.237075][T10008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.237103][T10008] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 325.237143][T10008] netlink_rcv_skb+0x165/0x410 [ 325.237170][T10008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.237200][T10008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.237231][T10008] ? down_read+0xc9/0x330 [ 325.237260][T10008] ? __pfx_down_read+0x10/0x10 [ 325.237290][T10008] ? netlink_deliver_tap+0x1ae/0xca0 [ 325.237315][T10008] genl_rcv+0x28/0x40 [ 325.237341][T10008] netlink_unicast+0x53c/0x7f0 [ 325.237367][T10008] ? __pfx_netlink_unicast+0x10/0x10 [ 325.237393][T10008] ? __phys_addr_symbol+0x30/0x80 [ 325.237428][T10008] ? __check_object_size+0x488/0x710 [ 325.237455][T10008] netlink_sendmsg+0x8b8/0xd70 [ 325.237481][T10008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.237511][T10008] ____sys_sendmsg+0x9ae/0xb40 [ 325.237534][T10008] ? copy_msghdr_from_user+0x10b/0x160 [ 325.237563][T10008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.237592][T10008] ___sys_sendmsg+0x135/0x1e0 [ 325.237622][T10008] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.237650][T10008] ? __pfx_aa_sk_perm+0x10/0x10 [ 325.237690][T10008] ? do_futex+0x123/0x350 [ 325.237713][T10008] __sys_sendmsg+0x16e/0x220 [ 325.237758][T10008] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.237787][T10008] ? __x64_sys_futex+0x1e1/0x4c0 [ 325.237813][T10008] ? rcu_is_watching+0x12/0xc0 [ 325.237844][T10008] ? rcu_is_watching+0x12/0xc0 [ 325.237875][T10008] do_syscall_64+0xcd/0x250 [ 325.237904][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.237935][T10008] RIP: 0033:0x7f4e4fb8cd29 [ 325.237953][T10008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.237975][T10008] RSP: 002b:00007f4e509a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.237995][T10008] RAX: ffffffffffffffda RBX: 00007f4e4fda5fa0 RCX: 00007f4e4fb8cd29 [ 325.238011][T10008] RDX: 00000000040000c0 RSI: 0000000020000300 RDI: 0000000000000001 [ 325.238024][T10008] RBP: 00007f4e4fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.238038][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.238050][T10008] R13: 0000000000000000 R14: 00007f4e4fda5fa0 R15: 00007ffe8b13f3a8 [ 325.238072][T10008] [ 325.705092][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.794380][T10008] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' ÿ[ 327.911339][T10034] FAULT_INJECTION: forcing a failure. [ 327.911339][T10034] name failslab, interval 1, probability 0, space 0, times 0 [ 327.974644][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.5.863 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 327.974676][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 327.974689][T10034] Call Trace: [ 327.974696][T10034] [ 327.974705][T10034] dump_stack_lvl+0x16c/0x1f0 [ 327.974743][T10034] should_fail_ex+0x497/0x5b0 [ 327.974766][T10034] ? fs_reclaim_acquire+0xae/0x150 [ 327.974801][T10034] should_failslab+0xc2/0x120 [ 327.974829][T10034] __kmalloc_node_noprof+0xd1/0x520 [ 327.974854][T10034] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 327.974877][T10034] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 327.974904][T10034] ? n_tty_open+0x1a/0x170 [ 327.974939][T10034] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 327.974974][T10034] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 327.974997][T10034] ? lock_release+0x4e2/0x6f0 [ 327.975024][T10034] ? __pfx_lock_release+0x10/0x10 [ 327.975049][T10034] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.975088][T10034] ? n_tty_open+0x1a/0x170 [ 327.975122][T10034] vzalloc_noprof+0x6b/0x90 [ 327.975144][T10034] ? n_tty_open+0x1a/0x170 [ 327.975175][T10034] ? __pfx_n_tty_open+0x10/0x10 [ 327.975204][T10034] n_tty_open+0x1a/0x170 [ 327.975234][T10034] ? __pfx_n_tty_open+0x10/0x10 [ 327.975263][T10034] tty_ldisc_open+0x9c/0x120 [ 327.975288][T10034] tty_ldisc_setup+0x40/0x100 [ 327.975314][T10034] tty_init_dev.part.0+0x1e7/0x660 [ 327.975344][T10034] tty_open+0xac1/0xf80 [ 327.975372][T10034] ? chrdev_open+0x10e/0x6a0 [ 327.975396][T10034] ? __pfx_tty_open+0x10/0x10 [ 327.975425][T10034] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.975456][T10034] ? lock_acquire+0x2f/0xb0 [ 327.975480][T10034] ? chrdev_open+0x80/0x6a0 [ 327.975504][T10034] ? __pfx_tty_open+0x10/0x10 [ 327.975532][T10034] chrdev_open+0x237/0x6a0 [ 327.975553][T10034] ? __pfx_apparmor_file_open+0x10/0x10 [ 327.975586][T10034] ? __pfx_chrdev_open+0x10/0x10 [ 327.975620][T10034] ? file_set_fsnotify_mode+0x163/0x5d0 [ 327.975655][T10034] do_dentry_open+0x735/0x1c40 [ 327.975689][T10034] ? __pfx_chrdev_open+0x10/0x10 [ 327.975713][T10034] ? inode_permission+0xdd/0x5f0 [ 327.975742][T10034] vfs_open+0x82/0x3f0 [ 327.975766][T10034] ? may_open+0x1f2/0x400 [ 327.975794][T10034] path_openat+0x1e88/0x2d80 [ 327.975820][T10034] ? __pfx_path_openat+0x10/0x10 [ 327.975845][T10034] do_filp_open+0x20c/0x470 [ 327.975865][T10034] ? __pfx_do_filp_open+0x10/0x10 [ 327.975893][T10034] ? alloc_fd+0x41f/0x760 [ 327.975925][T10034] do_sys_openat2+0x17a/0x1e0 [ 327.975948][T10034] ? __pfx_do_sys_openat2+0x10/0x10 [ 327.975975][T10034] ? do_raw_spin_unlock+0x172/0x230 [ 327.976009][T10034] __x64_sys_openat+0x175/0x210 [ 327.976037][T10034] ? __pfx___x64_sys_openat+0x10/0x10 [ 327.976066][T10034] ? rcu_is_watching+0x12/0xc0 [ 327.976099][T10034] ? rcu_is_watching+0x12/0xc0 [ 327.976132][T10034] do_syscall_64+0xcd/0x250 [ 327.976161][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.976192][T10034] RIP: 0033:0x7f4c0838cd29 [ 327.976210][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.976234][T10034] RSP: 002b:00007f4c0924e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 327.976256][T10034] RAX: ffffffffffffffda RBX: 00007f4c085a5fa0 RCX: 00007f4c0838cd29 [ 327.976272][T10034] RDX: 0000000000101e81 RSI: 0000000020000400 RDI: ffffffffffffff9c [ 327.976287][T10034] RBP: 00007f4c0840e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.976301][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.976314][T10034] R13: 0000000000000000 R14: 00007f4c085a5fa0 R15: 00007ffedd6dfbf8 [ 327.976336][T10034] [ 327.976393][T10034] syz.5.863: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 327.983786][T10036] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 328.038792][T10034] ,cpuset= [ 328.224803][T10036] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 328.264700][T10034] /,mems_allowed=0-1 [ 328.521928][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.5.863 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 328.521959][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.521974][T10034] Call Trace: [ 328.521981][T10034] [ 328.521990][T10034] dump_stack_lvl+0x16c/0x1f0 [ 328.522024][T10034] warn_alloc+0x24d/0x3a0 [ 328.522051][T10034] ? __pfx_warn_alloc+0x10/0x10 [ 328.522075][T10034] ? dump_stack_lvl+0x1a1/0x1f0 [ 328.522108][T10034] ? rcu_is_watching+0x12/0xc0 [ 328.522138][T10034] ? trace_kmalloc+0x2d/0xd0 [ 328.522165][T10034] ? __kmalloc_node_noprof+0x23d/0x520 [ 328.522193][T10034] __vmalloc_node_range_noprof+0x1105/0x1530 [ 328.522221][T10034] ? n_tty_open+0x1a/0x170 [ 328.522253][T10034] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 328.522288][T10034] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.522312][T10034] ? lock_release+0x4e2/0x6f0 [ 328.522339][T10034] ? __pfx_lock_release+0x10/0x10 [ 328.522365][T10034] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.522398][T10034] ? n_tty_open+0x1a/0x170 [ 328.522430][T10034] vzalloc_noprof+0x6b/0x90 [ 328.522451][T10034] ? n_tty_open+0x1a/0x170 [ 328.522482][T10034] ? __pfx_n_tty_open+0x10/0x10 [ 328.522512][T10034] n_tty_open+0x1a/0x170 [ 328.522549][T10034] ? __pfx_n_tty_open+0x10/0x10 [ 328.522580][T10034] tty_ldisc_open+0x9c/0x120 [ 328.522606][T10034] tty_ldisc_setup+0x40/0x100 [ 328.522632][T10034] tty_init_dev.part.0+0x1e7/0x660 [ 328.522664][T10034] tty_open+0xac1/0xf80 [ 328.522693][T10034] ? chrdev_open+0x10e/0x6a0 [ 328.522719][T10034] ? __pfx_tty_open+0x10/0x10 [ 328.522748][T10034] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.522779][T10034] ? lock_acquire+0x2f/0xb0 [ 328.522805][T10034] ? chrdev_open+0x80/0x6a0 [ 328.522829][T10034] ? __pfx_tty_open+0x10/0x10 [ 328.522859][T10034] chrdev_open+0x237/0x6a0 [ 328.522882][T10034] ? __pfx_apparmor_file_open+0x10/0x10 [ 328.522916][T10034] ? __pfx_chrdev_open+0x10/0x10 [ 328.522941][T10034] ? file_set_fsnotify_mode+0x163/0x5d0 [ 328.522975][T10034] do_dentry_open+0x735/0x1c40 [ 328.523009][T10034] ? __pfx_chrdev_open+0x10/0x10 [ 328.523034][T10034] ? inode_permission+0xdd/0x5f0 [ 328.523063][T10034] vfs_open+0x82/0x3f0 [ 328.523088][T10034] ? may_open+0x1f2/0x400 [ 328.523118][T10034] path_openat+0x1e88/0x2d80 [ 328.523144][T10034] ? __pfx_path_openat+0x10/0x10 [ 328.523170][T10034] do_filp_open+0x20c/0x470 [ 328.523191][T10034] ? __pfx_do_filp_open+0x10/0x10 [ 328.523224][T10034] ? alloc_fd+0x41f/0x760 [ 328.523262][T10034] do_sys_openat2+0x17a/0x1e0 [ 328.523289][T10034] ? __pfx_do_sys_openat2+0x10/0x10 [ 328.523317][T10034] ? do_raw_spin_unlock+0x172/0x230 [ 328.523352][T10034] __x64_sys_openat+0x175/0x210 [ 328.523380][T10034] ? __pfx___x64_sys_openat+0x10/0x10 [ 328.523410][T10034] ? rcu_is_watching+0x12/0xc0 [ 328.523443][T10034] ? rcu_is_watching+0x12/0xc0 [ 328.523477][T10034] do_syscall_64+0xcd/0x250 [ 328.523505][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.523542][T10034] RIP: 0033:0x7f4c0838cd29 [ 328.523559][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.523580][T10034] RSP: 002b:00007f4c0924e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 328.523602][T10034] RAX: ffffffffffffffda RBX: 00007f4c085a5fa0 RCX: 00007f4c0838cd29 [ 328.523616][T10034] RDX: 0000000000101e81 RSI: 0000000020000400 RDI: ffffffffffffff9c [ 328.523632][T10034] RBP: 00007f4c0840e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.523647][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.523661][T10034] R13: 0000000000000000 R14: 00007f4c085a5fa0 R15: 00007ffedd6dfbf8 [ 328.523683][T10034] [ 328.958862][T10034] Mem-Info: [ 328.962939][T10034] active_anon:53955 inactive_anon:45615 isolated_anon:0 [ 328.962939][T10034] active_file:5197 inactive_file:50673 isolated_file:0 [ 328.962939][T10034] unevictable:3815 dirty:498 writeback:0 [ 328.962939][T10034] slab_reclaimable:10939 slab_unreclaimable:100792 [ 328.962939][T10034] mapped:26540 shmem:75444 pagetables:871 [ 328.962939][T10034] sec_pagetables:0 bounce:0 [ 328.962939][T10034] kernel_misc_reclaimable:0 [ 328.962939][T10034] free:1211566 free_pcp:12870 free_cma:0 [ 329.017864][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.048094][T10034] Node 0 active_anon:216120kB inactive_anon:182260kB active_file:20788kB inactive_file:202688kB unevictable:13724kB isolated(anon):0kB isolated(file):0kB mapped:110160kB dirty:1992kB writeback:0kB shmem:300240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11812kB pagetables:3484kB sec_pagetables:0kB all_unreclaimable? no [ 329.087873][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.142871][T10034] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 329.178924][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.225245][T10034] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.257779][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.319689][T10034] lowmem_reserve[]: 0 2490 2491 0 0 [ 329.331787][T10034] Node 0 DMA32 free:970648kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:217816kB inactive_anon:181036kB active_file:20788kB inactive_file:202376kB unevictable:13724kB writepending:1992kB present:3129332kB managed:2550660kB mlocked:12188kB bounce:0kB free_pcp:4736kB local_pcp:4108kB free_cma:0kB [ 329.369382][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.405887][T10034] lowmem_reserve[]: 0 0 0 0 0 [ 329.411583][T10034] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 329.458949][T10034] lowmem_reserve[]: 0 0 0 0 0 [ 329.464703][T10034] Node 1 Normal free:3868356kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:38156kB local_pcp:12672kB free_cma:0kB [ 329.535574][T10034] lowmem_reserve[]: 0 0 0 0 0 [ 329.541292][T10034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.603087][T10034] Node 0 DMA32: 182*4kB (UE) 1746*8kB (UME) 1233*16kB (UME) 826*32kB (UME) 315*64kB (UME) 173*128kB (UME) 157*256kB (ME) 149*512kB (UME) 58*1024kB (UME) 3*2048kB (UME) 168*4096kB (UM) = 973304kB [ 329.626178][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.657645][T10034] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 329.672887][T10034] Node 1 Normal: 173*4kB (UM) 8*8kB (UME) 28*16kB (UM) 194*32kB (UME) 93*64kB (UME) 36*128kB (UME) 17*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 7*2048kB (UME) 934*4096kB (M) = 3868468kB [ 329.702956][T10034] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.724928][T10034] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 329.743244][T10034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.764654][T10034] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 329.783493][T10034] 133659 total pagecache pages [ 329.789343][T10034] 638 pages in swap cache [ 329.798526][T10034] Free swap = 12448kB [ 329.812896][T10034] Total swap = 124996kB [ 329.818521][T10034] 2097051 pages RAM [ 329.824182][T10034] 0 pages HighMem/MovableOnly [ 329.834137][T10034] 427664 pages reserved [ 329.843454][T10034] 0 pages cma reserved [ 329.848369][T10034] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 329.864222][T10042] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 330.148754][T10052] Invalid ELF header magic: != ELF [ 330.640335][T10047] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 335.589877][ T8997] syz.0.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 335.589915][ T8997] CPU: 1 UID: 0 PID: 8997 Comm: syz.0.653 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 335.589941][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 335.589954][ T8997] Call Trace: [ 335.589961][ T8997] [ 335.589969][ T8997] dump_stack_lvl+0x16c/0x1f0 [ 335.590002][ T8997] dump_header+0x101/0x900 [ 335.590036][ T8997] oom_kill_process+0x270/0xa60 [ 335.590067][ T8997] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 335.590099][ T8997] out_of_memory+0x351/0x1700 [ 335.590134][ T8997] ? __pfx_out_of_memory+0x10/0x10 [ 335.590165][ T8997] ? rcu_read_unlock+0x17/0x60 [ 335.590190][ T8997] ? __pfx_lock_release+0x10/0x10 [ 335.590218][ T8997] mem_cgroup_out_of_memory+0x207/0x270 [ 335.590248][ T8997] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 335.590281][ T8997] ? do_raw_spin_unlock+0x172/0x230 [ 335.590313][ T8997] try_charge_memcg+0x54c/0xaf0 [ 335.590339][ T8997] ? __pfx_try_charge_memcg+0x10/0x10 [ 335.590363][ T8997] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 335.590402][ T8997] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 335.590435][ T8997] ? get_mem_cgroup_from_mm+0x129/0x5f0 [ 335.590469][ T8997] __mem_cgroup_charge+0x9b/0x280 [ 335.590496][ T8997] shmem_alloc_and_add_folio+0x507/0xc00 [ 335.590529][ T8997] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 335.590560][ T8997] ? shmem_allowable_huge_orders+0xd0/0x410 [ 335.590594][ T8997] shmem_get_folio_gfp+0x689/0x1530 [ 335.590627][ T8997] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 335.590656][ T8997] ? lock_release+0x4e2/0x6f0 [ 335.590680][ T8997] ? follow_page_pte+0x374/0x1b20 [ 335.590703][ T8997] ? rcu_is_watching+0x12/0xc0 [ 335.590735][ T8997] shmem_write_begin+0x161/0x300 [ 335.590767][ T8997] ? __pfx_shmem_write_begin+0x10/0x10 [ 335.590796][ T8997] ? timestamp_truncate+0x21f/0x2e0 [ 335.590819][ T8997] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 335.590850][ T8997] generic_perform_write+0x2ba/0x920 [ 335.590884][ T8997] ? __pfx_generic_perform_write+0x10/0x10 [ 335.590914][ T8997] ? inode_needs_update_time.part.0+0x191/0x270 [ 335.590943][ T8997] shmem_file_write_iter+0x10e/0x140 [ 335.590966][ T8997] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 335.590988][ T8997] __kernel_write_iter+0x318/0xa90 [ 335.591022][ T8997] ? __pfx___kernel_write_iter+0x10/0x10 [ 335.591054][ T8997] ? get_dump_page+0x15b/0x230 [ 335.591080][ T8997] ? __pfx___might_resched+0x10/0x10 [ 335.591110][ T8997] dump_user_range+0x389/0x8c0 [ 335.591141][ T8997] ? __pfx_dump_user_range+0x10/0x10 [ 335.591169][ T8997] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 335.591202][ T8997] ? __pfx_writenote+0x10/0x10 [ 335.591235][ T8997] elf_core_dump+0x2787/0x3880 [ 335.591263][ T8997] ? __pfx_sched_clock_cpu+0x10/0x10 [ 335.591289][ T8997] ? psi_task_change+0x1a2/0x2d0 [ 335.591315][ T8997] ? __pfx_elf_core_dump+0x10/0x10 [ 335.591345][ T8997] ? rcu_is_watching+0x12/0xc0 [ 335.591376][ T8997] ? lock_release+0x4e2/0x6f0 [ 335.591405][ T8997] ? lock_release+0x4e2/0x6f0 [ 335.591429][ T8997] ? try_to_wake_up+0x949/0x1490 [ 335.591455][ T8997] ? __pfx_lock_release+0x10/0x10 [ 335.591483][ T8997] ? trace_irq_enable.constprop.0+0xea/0x140 [ 335.591515][ T8997] ? rwsem_wake.isra.0+0xbe/0x120 [ 335.591553][ T8997] ? rcu_is_watching+0x12/0xc0 [ 335.591584][ T8997] ? trace_lock_acquire+0x14e/0x1f0 [ 335.591604][ T8997] ? __pfx_sort+0x10/0x10 [ 335.591628][ T8997] ? get_signal+0x23f3/0x2610 [ 335.591659][ T8997] ? do_coredump+0x304f/0x45d0 [ 335.591684][ T8997] do_coredump+0x304f/0x45d0 [ 335.591716][ T8997] ? __pfx_do_coredump+0x10/0x10 [ 335.591742][ T8997] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 335.591794][ T8997] ? rcu_is_watching+0x12/0xc0 [ 335.591826][ T8997] get_signal+0x23f3/0x2610 [ 335.591859][ T8997] ? __pfx_get_signal+0x10/0x10 [ 335.591887][ T8997] ? rcu_is_watching+0x12/0xc0 [ 335.591918][ T8997] ? trace_irq_disable.constprop.0+0xea/0x140 [ 335.591947][ T8997] arch_do_signal_or_restart+0x90/0x7e0 [ 335.591971][ T8997] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.591999][ T8997] ? do_user_addr_fault+0xa4b/0x13f0 [ 335.592027][ T8997] ? rcu_is_watching+0x12/0xc0 [ 335.592060][ T8997] irqentry_exit_to_user_mode+0x13f/0x280 [ 335.592091][ T8997] asm_exc_page_fault+0x26/0x30 [ 335.592117][ T8997] RIP: 0033:0x7f4e4fda5fa0 [ 335.592133][ T8997] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 11 03 60 4f 4e 7f [ 335.592153][ T8997] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 335.592171][ T8997] RAX: 0000000000000000 RBX: 00007f4e4fda5fa0 RCX: 00007f4e4fb8cd29 [ 335.592185][ T8997] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 335.592198][ T8997] RBP: 00007f4e4fc0e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 335.592211][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.592224][ T8997] R13: 0000000000000000 R14: 00007f4e4fda5fa0 R15: 00007ffe8b13f3a8 [ 335.592245][ T8997] [ 335.875158][ T8997] memory: usage 307200kB, limit 307200kB, failcnt 34353 [ 336.524494][ T8997] memory+swap: usage 429576kB, limit 9007199254740988kB, failcnt 0 [ 336.629922][ T8997] kmem: usage 3856kB, limit 9007199254740988kB, failcnt 0 [ 336.653837][ T8997] Memory cgroup stats for /syz0: [ 336.653997][ T8997] cache 307552256 [ 336.673752][ T8997] rss 389120 [ 336.677731][ T8997] rss_huge 0 [ 336.681638][ T8997] shmem 303321088 [ 336.688918][ T8997] mapped_file 8433664 [ 336.694563][ T8997] dirty 0 [ 336.698193][ T8997] writeback 0 [ 336.707296][ T8997] workingset_refault_anon 2426 [ 336.732172][ T8997] workingset_refault_file 2688 [ 336.784417][ T8997] swap 125313024 [ 336.792219][ T8997] swapcached 2682880 [ 336.809872][ T8997] pgpgin 416355 [ 336.815833][ T8997] pgpgout 340519 [ 336.820372][ T8997] pgfault 94557 [ 336.827786][ T8997] pgmajfault 419 [ 336.833253][ T8997] inactive_anon 42790912 [ 336.838647][ T8997] active_anon 259239936 [ 336.845742][ T8997] inactive_file 0 [ 336.906377][ T8997] active_file 0 [ 336.920707][ T8997] unevictable 8593408 [ 336.935084][ T8997] hierarchical_memory_limit 314572800 [ 336.973306][ T8997] hierarchical_memsw_limit 9223372036854771712 [ 337.049288][ T8997] total_cache 307552256 [ 337.079041][ T8997] total_rss 389120 [ 337.089258][ T8997] total_rss_huge 0 [ 337.112176][ T8997] total_shmem 303321088 [ 337.117199][ T8997] total_mapped_file 8433664 [ 337.180082][ T8997] total_dirty 0 [ 337.187391][ T8997] total_writeback 0 [ 337.193721][ T8997] total_workingset_refault_anon 2426 [ 337.200168][ T8997] total_workingset_refault_file 2688 [ 337.208304][ T8997] total_swap 125313024 [ 337.214716][ T8997] total_swapcached 2682880 [ 337.220237][ T8997] total_pgpgin 416355 [ 337.226295][ T8997] total_pgpgout 340519 [ 337.231236][ T8997] total_pgfault 94557 [ 337.280473][ T8997] total_pgmajfault 419 [ 337.286941][ T8997] total_inactive_anon 42790912 [ 337.293278][ T8997] total_active_anon 259239936 [ 337.293291][ T8997] total_inactive_file 0 [ 337.293299][ T8997] total_active_file 0 [ 337.293506][ T8997] total_unevictable 8593408 [ 337.322187][ T8997] anon_cost 0 [ 337.331641][ T8997] file_cost 0 [ 337.346982][ T8997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.653,pid=9015,uid=0 [ 337.422822][ T8997] Memory cgroup out of memory: Killed process 9015 (syz.0.653) total-vm:131760kB, anon-rss:972kB, file-rss:27360kB, shmem-rss:3968kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 337.963731][T10171] can: request_module (can-proto-4) failed. [ 338.295719][T10171] [U] [ 338.299005][T10171] [U] [ 338.302248][T10171] [U] [ 338.305483][T10171] [U] [ 338.309400][T10171] [U] [ 338.312660][T10171] [U] [ 338.315899][T10171] [U] [ 338.319144][T10171] [U] [ 338.353435][T10171] [U] [ 338.356729][T10171] [U] [ 338.359973][T10171] [U] [ 338.363215][T10171] [U] [ 338.445835][T10171] [U] [ 338.449127][T10171] [U] [ 338.452367][T10171] [U] [ 338.455605][T10171] [U] [ 338.465212][T10184] vivid-003: ================= START STATUS ================= [ 338.492571][T10184] vivid-003: Radio HW Seek Mode: Bounded [ 338.499384][T10184] vivid-003: Radio Programmable HW Seek: false [ 338.507890][T10173] [U] [ 338.551722][T10184] vivid-003: RDS Rx I/O Mode: Block I/O [ 338.582147][T10184] vivid-003: Generate RBDS Instead of RDS: false [ 338.589817][T10184] vivid-003: RDS Reception: true [ 338.622135][T10184] vivid-003: RDS Program Type: 0 inactive [ 338.632180][T10184] vivid-003: RDS PS Name: inactive [ 338.638486][T10184] vivid-003: RDS Radio Text: inactive [ 338.673228][T10184] vivid-003: RDS Traffic Announcement: false inactive [ 338.696456][T10184] vivid-003: RDS Traffic Program: false inactive [ 338.752591][T10184] vivid-003: RDS Music: false inactive [ 338.759204][T10184] vivid-003: ================== END STATUS ================== [ 339.580042][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 339.707776][ T31] oom_reaper: reaped process 9015 (syz.0.653), now anon-rss:0kB, file-rss:24776kB, shmem-rss:3968kB [ 341.026472][T10228] misc userio: No port type given on /dev/userio [ 342.483866][T10272] vivid-003: ================= START STATUS ================= [ 342.512514][T10272] vivid-003: Radio HW Seek Mode: Bounded [ 342.543476][T10272] vivid-003: Radio Programmable HW Seek: false [ 342.563816][T10272] vivid-003: RDS Rx I/O Mode: Block I/O [ 342.588078][T10272] vivid-003: Generate RBDS Instead of RDS: false [ 342.612393][T10272] vivid-003: RDS Reception: true [ 342.618376][T10272] vivid-003: RDS Program Type: 0 inactive [ 342.661588][T10272] vivid-003: RDS PS Name: inactive [ 342.710934][T10272] vivid-003: RDS Radio Text: inactive [ 342.733121][T10272] vivid-003: RDS Traffic Announcement: false inactive [ 342.787611][T10272] vivid-003: RDS Traffic Program: false inactive [ 342.847870][T10272] vivid-003: RDS Music: false inactive [ 342.880783][T10272] vivid-003: ================== END STATUS ================== [ 343.225218][T10287] netlink: 'syz.5.923': attribute type 1 has an invalid length. [ 343.723507][T10302] FAULT_INJECTION: forcing a failure. [ 343.723507][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 343.772700][T10302] CPU: 0 UID: 0 PID: 10302 Comm: syz.5.929 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 343.772735][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.772747][T10302] Call Trace: [ 343.772754][T10302] [ 343.772762][T10302] dump_stack_lvl+0x16c/0x1f0 [ 343.772797][T10302] should_fail_ex+0x497/0x5b0 [ 343.772821][T10302] ? rwsem_read_trylock+0x12d/0x250 [ 343.772852][T10302] should_failslab+0xc2/0x120 [ 343.772879][T10302] __kmalloc_cache_noprof+0x68/0x420 [ 343.772923][T10302] ? lock_acquire+0x2f/0xb0 [ 343.772950][T10302] ? blocking_notifier_call_chain+0x53/0xa0 [ 343.772997][T10302] nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 343.773030][T10302] notifier_call_chain+0xb7/0x410 [ 343.773064][T10302] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 343.773096][T10302] blocking_notifier_call_chain+0x69/0xa0 [ 343.773128][T10302] netlink_release+0x195e/0x2130 [ 343.773157][T10302] ? netlink_release+0x1df/0x2130 [ 343.773180][T10302] ? __pfx_netlink_release+0x10/0x10 [ 343.773202][T10302] ? __pfx_locks_remove_file+0x10/0x10 [ 343.773232][T10302] __sock_release+0xb0/0x270 [ 343.773261][T10302] ? __pfx_sock_close+0x10/0x10 [ 343.773291][T10302] sock_close+0x1c/0x30 [ 343.773319][T10302] __fput+0x3ff/0xb70 [ 343.773344][T10302] ? trace_irq_enable.constprop.0+0xea/0x140 [ 343.773375][T10302] task_work_run+0x14e/0x250 [ 343.773410][T10302] ? __pfx_task_work_run+0x10/0x10 [ 343.773435][T10302] ? __pfx___do_sys_close_range+0x10/0x10 [ 343.773461][T10302] ? rcu_is_watching+0x12/0xc0 [ 343.773493][T10302] syscall_exit_to_user_mode+0x27b/0x2a0 [ 343.773521][T10302] do_syscall_64+0xda/0x250 [ 343.773550][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.773581][T10302] RIP: 0033:0x7f4c0838cd29 [ 343.773599][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.773622][T10302] RSP: 002b:00007f4c0924e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 343.773644][T10302] RAX: 0000000000000000 RBX: 00007f4c085a5fa0 RCX: 00007f4c0838cd29 [ 343.773657][T10302] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 343.773670][T10302] RBP: 00007f4c0840e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 343.773684][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.773696][T10302] R13: 0000000000000000 R14: 00007f4c085a5fa0 R15: 00007ffedd6dfbf8 [ 343.773716][T10302] [ 345.344784][T10333] vivid-003: ================= START STATUS ================= [ 345.366624][T10333] vivid-003: Radio HW Seek Mode: Bounded [ 345.366794][T10327] binder: 10326:10327 ioctl 80286f4e 38 returned -22 [ 345.383105][T10333] vivid-003: Radio Programmable HW Seek: false [ 345.408125][T10333] vivid-003: RDS Rx I/O Mode: Block I/O [ 345.412029][T10328] binder: 10326:10328 ioctl 5 4 returned -22 [ 345.435548][T10327] binder: 10326:10327 ioctl 5 4 returned -22 [ 345.485185][T10333] vivid-003: Generate RBDS Instead of RDS: false [ 345.524668][T10333] vivid-003: RDS Reception: true [ 345.530649][T10333] vivid-003: RDS Program Type: 0 inactive [ 345.538078][T10333] vivid-003: RDS PS Name: inactive [ 345.548562][T10333] vivid-003: RDS Radio Text: inactive [ 345.591035][T10333] vivid-003: RDS Traffic Announcement: false inactive [ 345.623047][T10333] vivid-003: RDS Traffic Program: false inactive [ 345.630706][T10333] vivid-003: RDS Music: false inactive [ 345.711833][T10333] vivid-003: ================== END STATUS ================== [ 346.464228][T10358] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 346.836365][T10367] syz.1.941: vmalloc error: size 24576, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.898368][T10367] CPU: 0 UID: 0 PID: 10367 Comm: syz.1.941 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 346.898399][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 346.898413][T10367] Call Trace: [ 346.898419][T10367] [ 346.898428][T10367] dump_stack_lvl+0x16c/0x1f0 [ 346.898462][T10367] warn_alloc+0x24d/0x3a0 [ 346.898486][T10367] ? __pfx_warn_alloc+0x10/0x10 [ 346.898507][T10367] ? policy_nodemask+0xea/0x4e0 [ 346.898529][T10367] ? alloc_pages_mpol_noprof+0x327/0x620 [ 346.898558][T10367] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 346.898587][T10367] ? rcu_is_watching+0x12/0xc0 [ 346.898617][T10367] ? __pfx___might_resched+0x10/0x10 [ 346.898647][T10367] __vmalloc_node_range_noprof+0x12c0/0x1530 [ 346.898675][T10367] ? __snd_dma_alloc_pages+0x50/0x90 [ 346.898707][T10367] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.898729][T10367] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 346.898759][T10367] ? __snd_dma_alloc_pages+0x50/0x90 [ 346.898792][T10367] vmalloc_noprof+0x6b/0x90 [ 346.898813][T10367] ? __snd_dma_alloc_pages+0x50/0x90 [ 346.898842][T10367] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 346.898872][T10367] __snd_dma_alloc_pages+0x50/0x90 [ 346.898903][T10367] snd_dma_alloc_dir_pages+0x151/0x240 [ 346.898933][T10367] do_alloc_pages+0x115/0x270 [ 346.898962][T10367] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 346.898992][T10367] snd_pcm_hw_params+0x15e6/0x1b20 [ 346.899033][T10367] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 346.899065][T10367] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 346.899097][T10367] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 346.899122][T10367] ? kfree+0x14f/0x4b0 [ 346.899143][T10367] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 346.899172][T10367] snd_pcm_oss_change_params_locked+0x1410/0x3a50 [ 346.899204][T10367] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 346.899229][T10367] ? __pfx___mutex_lock+0x10/0x10 [ 346.899261][T10367] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 346.899284][T10367] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 346.899309][T10367] snd_pcm_oss_sync+0x1d7/0x7f0 [ 346.899335][T10367] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 346.899359][T10367] snd_pcm_oss_release+0x28b/0x310 [ 346.899383][T10367] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 346.899406][T10367] __fput+0x3ff/0xb70 [ 346.899433][T10367] task_work_run+0x14e/0x250 [ 346.899460][T10367] ? __pfx_task_work_run+0x10/0x10 [ 346.899486][T10367] ? __pfx___do_sys_close_range+0x10/0x10 [ 346.899512][T10367] ? rcu_is_watching+0x12/0xc0 [ 346.899546][T10367] syscall_exit_to_user_mode+0x27b/0x2a0 [ 346.899574][T10367] do_syscall_64+0xda/0x250 [ 346.899603][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.899632][T10367] RIP: 0033:0x7f510178cd29 [ 346.899650][T10367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.899674][T10367] RSP: 002b:00007f5102678038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 346.899695][T10367] RAX: 0000000000000000 RBX: 00007f51019a6080 RCX: 00007f510178cd29 [ 346.899709][T10367] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 346.899722][T10367] RBP: 00007f510180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 346.899734][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.899745][T10367] R13: 0000000000000000 R14: 00007f51019a6080 R15: 00007ffc925f83e8 [ 346.899764][T10367] [ 346.899779][T10367] Mem-Info: [ 347.311693][T10367] active_anon:45060 inactive_anon:3 isolated_anon:0 [ 347.311693][T10367] active_file:3211 inactive_file:49671 isolated_file:0 [ 347.311693][T10367] unevictable:6274 dirty:578 writeback:0 [ 347.311693][T10367] slab_reclaimable:11377 slab_unreclaimable:98604 [ 347.311693][T10367] mapped:32644 shmem:19069 pagetables:931 [ 347.311693][T10367] sec_pagetables:0 bounce:0 [ 347.311693][T10367] kernel_misc_reclaimable:0 [ 347.311693][T10367] free:1284108 free_pcp:10827 free_cma:0 [ 347.469398][T10367] Node 0 active_anon:188340kB inactive_anon:12kB active_file:12744kB inactive_file:197280kB unevictable:25060kB isolated(anon):0kB isolated(file):0kB mapped:133876kB dirty:2312kB writeback:0kB shmem:82940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3624kB sec_pagetables:0kB all_unreclaimable? no [ 347.529361][T10367] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 347.577003][T10385] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 347.653716][T10367] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.730001][T10367] lowmem_reserve[]: 0 2490 2491 0 0 [ 347.757899][T10367] Node 0 DMA32 free:1217640kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:212604kB inactive_anon:12kB active_file:12744kB inactive_file:192568kB unevictable:29560kB writepending:2312kB present:3129332kB managed:2550660kB mlocked:28024kB bounce:0kB free_pcp:8660kB local_pcp:5688kB free_cma:0kB [ 347.856417][T10367] lowmem_reserve[]: 0 0 0 0 0 [ 347.913303][T10367] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 347.945454][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.012504][T10367] lowmem_reserve[]: 0 0 0 0 0 [ 348.071294][T10367] Node 1 Normal free:3871188kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:35388kB local_pcp:11412kB free_cma:0kB [ 348.178188][T10402] vivid-003: ================= START STATUS ================= [ 348.223065][T10402] vivid-003: Radio HW Seek Mode: Bounded [ 348.233152][T10402] vivid-003: Radio Programmable HW Seek: false [ 348.236751][T10367] lowmem_reserve[]: [ 348.240584][T10402] vivid-003: RDS Rx I/O Mode: Block I/O [ 348.250334][T10367] 0 [ 348.265052][T10402] vivid-003: Generate RBDS Instead of RDS: false [ 348.300295][T10402] vivid-003: RDS Reception: true [ 348.307317][T10402] vivid-003: RDS Program Type: 0 inactive [ 348.324089][T10402] vivid-003: RDS PS Name: inactive [ 348.350638][T10402] vivid-003: RDS Radio Text: inactive [ 348.389637][T10402] vivid-003: RDS Traffic Announcement: false inactive [ 348.392842][T10367] 0 0 0 0 [ 348.419150][T10402] vivid-003: RDS Traffic Program: false inactive [ 348.440524][T10367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 348.444606][T10402] vivid-003: RDS Music: false inactive [ 348.519511][T10367] Node 0 DMA32: 5627*4kB (UM) 3716*8kB (UME) 901*16kB (UME) 1789*32kB (UME) 1430*64kB (UME) 693*128kB (UM) 318*256kB (UM) 125*512kB (UM) 58*1024kB (UME) 3*2048kB (UME) 167*4096kB (UM) = 1199100kB [ 348.523564][T10402] vivid-003: ================== END STATUS ================== [ 348.641464][T10367] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 348.690358][T10367] Node 1 Normal: 175*4kB (UM) 7*8kB (UME) 29*16kB (UM) 192*32kB (UME) 93*64kB (UME) 36*128kB (UME) 17*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 7*2048kB (UME) 934*4096kB (M) = 3871492kB [ 348.713094][T10367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 348.903796][T10367] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 348.944638][T10416] Invalid ELF header magic: != ELF [ 348.990727][T10367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.046408][T10367] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 349.072175][T10367] 85712 total pagecache pages [ 349.086044][T10367] 27 pages in swap cache [ 349.182204][T10418] netlink: 28 bytes leftover after parsing attributes in process `syz.5.957'. [ 349.193105][T10367] Free swap = 124292kB [ 349.218345][T10367] Total swap = 124996kB [ 349.273766][T10367] 2097051 pages RAM [ 349.282444][T10418] geneve1: entered allmulticast mode [ 349.282640][T10367] 0 pages HighMem/MovableOnly [ 349.316501][T10367] 427664 pages reserved [ 349.380024][T10367] 0 pages cma reserved [ 349.470749][T10423] ip_vti0: entered allmulticast mode [ 350.703843][T10457] vivid-003: ================= START STATUS ================= [ 350.727977][T10457] vivid-003: Radio HW Seek Mode: Bounded [ 350.749576][T10457] vivid-003: Radio Programmable HW Seek: false [ 350.777541][T10457] vivid-003: RDS Rx I/O Mode: Block I/O [ 350.802147][T10457] vivid-003: Generate RBDS Instead of RDS: false [ 350.811756][T10457] vivid-003: RDS Reception: true [ 350.819962][T10457] vivid-003: RDS Program Type: 0 inactive [ 350.830080][T10457] vivid-003: RDS PS Name: inactive [ 350.860589][T10457] vivid-003: RDS Radio Text: inactive [ 350.882182][T10457] vivid-003: RDS Traffic Announcement: false inactive [ 350.890380][T10457] vivid-003: RDS Traffic Program: false inactive [ 350.947234][T10457] vivid-003: RDS Music: false inactive [ 350.983074][T10457] vivid-003: ================== END STATUS ================== [ 351.458894][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.5.970'. [ 351.615034][T10480] netlink: 326 bytes leftover after parsing attributes in process `syz.5.971'. [ 351.770291][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.972'. [ 351.809325][T10484] team0 (unregistering): Port device team_slave_0 removed [ 351.843170][T10484] team0 (unregistering): Port device team_slave_1 removed [ 351.850271][T10487] Process accounting resumed [ 352.220875][T10497] netlink: 56 bytes leftover after parsing attributes in process `syz.5.976'. [ 352.298828][T10497] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 352.648994][T10497] netlink: 56 bytes leftover after parsing attributes in process `syz.5.976'. [ 352.686926][T10497] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 352.777513][T10497] netlink: 56 bytes leftover after parsing attributes in process `syz.5.976'. [ 352.844434][T10497] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 352.973385][T10497] netlink: 56 bytes leftover after parsing attributes in process `syz.5.976'. [ 353.016905][T10497] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 353.418900][T10516] caif:caif_disconnect_client(): nothing to disconnect ÿ[ 353.628411][T10541] FAULT_INJECTION: forcing a failure. [ 353.628411][T10541] name failslab, interval 1, probability 0, space 0, times 0 [ 353.656230][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.0.988 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 353.656268][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 353.656284][T10541] Call Trace: [ 353.656291][T10541] [ 353.656300][T10541] dump_stack_lvl+0x16c/0x1f0 [ 353.656335][T10541] should_fail_ex+0x497/0x5b0 [ 353.656360][T10541] ? fs_reclaim_acquire+0xae/0x150 [ 353.656395][T10541] should_failslab+0xc2/0x120 [ 353.656423][T10541] __kmalloc_node_noprof+0xd1/0x520 [ 353.656453][T10541] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 353.656479][T10541] __kvmalloc_node_noprof+0xad/0x1a0 [ 353.656504][T10541] io_uring_setup+0x734/0x3370 [ 353.656542][T10541] ? __pfx_io_uring_setup+0x10/0x10 [ 353.656570][T10541] ? do_futex+0x123/0x350 [ 353.656595][T10541] ? __pfx_do_futex+0x10/0x10 [ 353.656617][T10541] ? __pfx_find_vma_intersection+0x10/0x10 [ 353.656653][T10541] ? lock_release+0x4e2/0x6f0 [ 353.656680][T10541] ? __do_sys_mlockall+0x331/0x5c0 [ 353.656714][T10541] ? rcu_is_watching+0x12/0xc0 [ 353.656747][T10541] ? rcu_is_watching+0x12/0xc0 [ 353.656783][T10541] __x64_sys_io_uring_setup+0x98/0x140 [ 353.656812][T10541] do_syscall_64+0xcd/0x250 [ 353.656843][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.656875][T10541] RIP: 0033:0x7f4e4fb8cd29 [ 353.656893][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.656916][T10541] RSP: 002b:00007f4e509a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 353.656940][T10541] RAX: ffffffffffffffda RBX: 00007f4e4fda5fa0 RCX: 00007f4e4fb8cd29 [ 353.656956][T10541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 353.656970][T10541] RBP: 00007f4e4fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.656984][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.656998][T10541] R13: 0000000000000000 R14: 00007f4e4fda5fa0 R15: 00007ffe8b13f3a8 [ 353.657020][T10541] [ 353.897520][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.117668][T10549] svc: failed to register nfsdv3 RPC service (errno 101). [ 354.175829][T10549] svc: failed to register nfsaclv3 RPC service (errno 101). [ 354.811471][T10580] netlink: del zone limit has 8 unknown bytes [ 355.110923][T10591] netlink: zone id is out of range [ 355.563031][T10606] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 358.295297][T10663] Process accounting resumed [ 359.393816][T10695] Process accounting resumed [ 361.541548][T10737] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1029'. [ 361.864193][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 363.106141][T10750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 363.117729][T10750] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 363.970827][T10775] vivid-003: ================= START STATUS ================= [ 364.053044][T10775] vivid-003: Radio HW Seek Mode: Bounded [ 364.107712][T10775] vivid-003: Radio Programmable HW Seek: false [ 364.152322][T10775] vivid-003: RDS Rx I/O Mode: Block I/O [ 364.189584][T10775] vivid-003: Generate RBDS Instead of RDS: false [ 364.246113][T10775] vivid-003: RDS Reception: true [ 364.314970][T10775] vivid-003: RDS Program Type: 0 inactive [ 364.477247][T10775] vivid-003: RDS PS Name: inactive [ 364.484629][T10775] vivid-003: RDS Radio Text: inactive [ 364.522186][T10775] vivid-003: RDS Traffic Announcement: false inactive [ 364.540785][T10775] vivid-003: RDS Traffic Program: false inactive [ 364.581970][T10775] vivid-003: RDS Music: false inactive [ 364.596316][T10775] vivid-003: ================== END STATUS ================== [ 365.678315][T10833] openvswitch: netlink: Key type 53 is out of range max 32 [ 365.700375][T10838] openvswitch: netlink: Key type 53 is out of range max 32 [ 366.446088][T10831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.493368][T10831] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.534454][T10831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.552716][T10831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.713269][T10857] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1057'. [ 366.756631][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 366.941482][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1059'. [ 367.017079][T10864] bridge_slave_1: left allmulticast mode [ 367.024056][T10864] bridge_slave_1: left promiscuous mode [ 367.041854][T10864] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.092723][T10864] bridge_slave_0: left allmulticast mode [ 367.099590][T10864] bridge_slave_0: left promiscuous mode [ 367.120605][T10864] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.777307][T10878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1063'. [ 367.810583][T10878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.861841][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.869444][T10878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.884322][T10878] bond0 (unregistering): Released all slaves [ 368.383497][T10896] vhci_hcd: not connected 4 [ 368.501710][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.541779][T10900] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 368.581474][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.588850][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 368.903584][T10907] vivid-003: ================= START STATUS ================= [ 368.961331][T10907] vivid-003: Radio HW Seek Mode: Bounded [ 368.968148][T10907] vivid-003: Radio Programmable HW Seek: false [ 369.009125][T10907] vivid-003: RDS Rx I/O Mode: Block I/O [ 369.041295][T10907] vivid-003: Generate RBDS Instead of RDS: false [ 369.137465][T10907] vivid-003: RDS Reception: true [ 369.196944][T10907] vivid-003: RDS Program Type: 0 inactive [ 369.261170][T10907] vivid-003: RDS PS Name: inactive [ 369.301835][T10907] vivid-003: RDS Radio Text: inactive [ 369.333598][T10907] vivid-003: RDS Traffic Announcement: false inactive [ 369.371727][T10907] vivid-003: RDS Traffic Program: false inactive [ 369.415929][T10907] vivid-003: RDS Music: false inactive [ 369.445378][T10907] vivid-003: ================== END STATUS ================== [ 370.307138][T10934] Invalid ELF header magic: != ELF [ 370.389890][T10938] rtc_cmos 00:00: Alarms can be up to one day in the future [ 373.018405][T10964] caif:caif_disconnect_client(): nothing to disconnect [ 373.543146][T11003] sctp: [Deprecated]: syz.2.1094 (pid 11003) Use of int in maxseg socket option. [ 373.543146][T11003] Use struct sctp_assoc_value instead [ 373.718372][T11021] Invalid ELF header magic: != ELF [ 373.742510][T11019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1098'. [ 373.766336][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1099'. [ 373.806958][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1099'. [ 373.842580][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1099'. [ 374.043007][T11024] Process accounting resumed [ 374.329617][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1102'. [ 374.789509][T11051] WARNING! power/level is deprecated; use power/control instead [ 375.571687][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1113'. [ 375.653085][T11079] bond0: (slave bond_slave_1): Releasing backup interface [ 377.210645][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 377.827477][T11152] vivid-003: ================= START STATUS ================= [ 377.873389][T11152] vivid-003: Radio HW Seek Mode: Bounded [ 377.907477][T11152] vivid-003: Radio Programmable HW Seek: false [ 377.915286][T11152] vivid-003: RDS Rx I/O Mode: Block I/O [ 377.934082][T11152] vivid-003: Generate RBDS Instead of RDS: false [ 377.955770][T11152] vivid-003: RDS Reception: true [ 377.976831][T11152] vivid-003: RDS Program Type: 0 inactive [ 377.988860][T11152] vivid-003: RDS PS Name: inactive [ 378.007372][T11152] vivid-003: RDS Radio Text: inactive [ 378.036418][T11152] vivid-003: RDS Traffic Announcement: false inactive [ 378.046507][T11152] vivid-003: RDS Traffic Program: false inactive [ 378.058085][T11152] vivid-003: RDS Music: false inactive [ 378.064705][T11152] vivid-003: ================== END STATUS ================== [ 378.222784][T11168] Invalid ELF header magic: != ELF [ 378.403850][ T29] audit: type=1326 audit(4294967405.867:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.5.1134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c0838cd29 code=0x0 [ 378.937000][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.944654][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.563082][T11269] openvswitch: netlink: Message has 4 unknown bytes. [ 383.817470][ T29] audit: type=1800 audit(8277292036.210:14): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1165" name="discovery_nqn" dev="configfs" ino=35339 res=0 errno=0 [ 383.909387][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 384.343895][T11309] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 384.375123][T11309] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 384.376249][T11311] Invalid ELF header magic: != ELF [ 384.849918][T11314] FAULT_INJECTION: forcing a failure. [ 384.849918][T11314] name failslab, interval 1, probability 0, space 0, times 0 [ 384.981131][T11314] CPU: 0 UID: 0 PID: 11314 Comm: syz.5.1172 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 384.981168][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 384.981184][T11314] Call Trace: [ 384.981191][T11314] [ 384.981200][T11314] dump_stack_lvl+0x16c/0x1f0 [ 384.981236][T11314] should_fail_ex+0x497/0x5b0 [ 384.981262][T11314] ? fs_reclaim_acquire+0xae/0x150 [ 384.981299][T11314] should_failslab+0xc2/0x120 [ 384.981326][T11314] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 384.981354][T11314] ? is_module_address+0x2a/0x50 [ 384.981381][T11314] ? register_net_sysctl_sz+0x228/0x3e0 [ 384.981409][T11314] ? __devinet_sysctl_register+0xbc/0x360 [ 384.981434][T11314] kmemdup_noprof+0x29/0x60 [ 384.981467][T11314] __devinet_sysctl_register+0xbc/0x360 [ 384.981491][T11314] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 384.981518][T11314] ? inetdev_init+0x24b/0x5a0 [ 384.981540][T11314] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 384.981578][T11314] ? copy_net_ns+0x2b4/0x6c0 [ 384.981611][T11314] ? create_new_namespaces+0x3ea/0xad0 [ 384.981642][T11314] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 384.981673][T11314] ? ksys_unshare+0x45d/0xa40 [ 384.981707][T11314] ? __x64_sys_unshare+0x31/0x40 [ 384.981740][T11314] ? do_syscall_64+0xcd/0x250 [ 384.981774][T11314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.981811][T11314] devinet_sysctl_register+0x17b/0x200 [ 384.981835][T11314] inetdev_init+0x2be/0x5a0 [ 384.981858][T11314] inetdev_event+0xb17/0x16b0 [ 384.981880][T11314] ? __pfx_inetdev_event+0x10/0x10 [ 384.981901][T11314] ? __pfx_ib_netdevice_event+0x10/0x10 [ 384.981926][T11314] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 384.981954][T11314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 384.981986][T11314] notifier_call_chain+0xb7/0x410 [ 384.982020][T11314] ? __pfx_inetdev_event+0x10/0x10 [ 384.982044][T11314] call_netdevice_notifiers_info+0xbe/0x140 [ 384.982082][T11314] register_netdevice+0x174a/0x1e50 [ 384.982117][T11314] ? __pfx_register_netdevice+0x10/0x10 [ 384.982149][T11314] ? net_generic+0x30/0x2a0 [ 384.982178][T11314] ? lock_acquire+0x2f/0xb0 [ 384.982205][T11314] ? __pfx_vti6_init_net+0x10/0x10 [ 384.982234][T11314] register_netdev+0x34/0x50 [ 384.982264][T11314] vti6_init_net+0x25e/0x3d0 [ 384.982293][T11314] ops_init+0x1df/0x5f0 [ 384.982338][T11314] setup_net+0x21f/0x860 [ 384.982371][T11314] ? __pfx_setup_net+0x10/0x10 [ 384.982400][T11314] ? down_read_killable+0xcc/0x380 [ 384.982433][T11314] ? __pfx_down_read_killable+0x10/0x10 [ 384.982466][T11314] ? debug_mutex_init+0x37/0x70 [ 384.982501][T11314] copy_net_ns+0x2b4/0x6c0 [ 384.982534][T11314] create_new_namespaces+0x3ea/0xad0 [ 384.982568][T11314] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 384.982602][T11314] ksys_unshare+0x45d/0xa40 [ 384.982636][T11314] ? __pfx_ksys_unshare+0x10/0x10 [ 384.982667][T11314] ? xfd_validate_state+0x5d/0x180 [ 384.982697][T11314] ? rcu_is_watching+0x12/0xc0 [ 384.982731][T11314] __x64_sys_unshare+0x31/0x40 [ 384.982770][T11314] do_syscall_64+0xcd/0x250 [ 384.982801][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.982833][T11314] RIP: 0033:0x7f4c0838cd29 [ 384.982851][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.982875][T11314] RSP: 002b:00007f4c0924e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 384.982898][T11314] RAX: ffffffffffffffda RBX: 00007f4c085a5fa0 RCX: 00007f4c0838cd29 [ 384.982915][T11314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 384.982930][T11314] RBP: 00007f4c0840e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 384.982945][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.982960][T11314] R13: 0000000000000000 R14: 00007f4c085a5fa0 R15: 00007ffedd6dfbf8 [ 384.982983][T11314] [ 385.280523][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 385.686998][T11345] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 386.699192][T11378] Process accounting resumed [ 387.559628][T11403] caif:caif_disconnect_client(): nothing to disconnect [ 387.747872][T11367] kexec: Could not allocate control_code_buffer [ 388.169642][T11418] netlink: zone id is out of range [ 388.183155][T11422] netlink: zone id is out of range [ 388.383722][T11427] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(6.0.0), cmd(3) [ 388.516354][T11414] FAULT_INJECTION: forcing a failure. [ 388.516354][T11414] name failslab, interval 1, probability 0, space 0, times 0 [ 388.634839][T11414] CPU: 1 UID: 0 PID: 11414 Comm: syz.2.1200 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 388.634877][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 388.634891][T11414] Call Trace: [ 388.634899][T11414] [ 388.634907][T11414] dump_stack_lvl+0x16c/0x1f0 [ 388.634944][T11414] should_fail_ex+0x497/0x5b0 [ 388.634968][T11414] ? fs_reclaim_acquire+0xae/0x150 [ 388.635004][T11414] should_failslab+0xc2/0x120 [ 388.635029][T11414] __kmalloc_cache_noprof+0x68/0x420 [ 388.635065][T11414] ? net_generic+0xea/0x2a0 [ 388.635096][T11414] ipv6_add_dev+0xfe/0x13e0 [ 388.635124][T11414] addrconf_notify+0x53e/0x19c0 [ 388.635157][T11414] ? ip6mr_device_event+0x1bc/0x230 [ 388.635192][T11414] notifier_call_chain+0xb7/0x410 [ 388.635226][T11414] ? __pfx_addrconf_notify+0x10/0x10 [ 388.635259][T11414] call_netdevice_notifiers_info+0xbe/0x140 [ 388.635295][T11414] register_netdevice+0x174a/0x1e50 [ 388.635338][T11414] ? __pfx_register_netdevice+0x10/0x10 [ 388.635371][T11414] ? net_generic+0x30/0x2a0 [ 388.635402][T11414] ? lock_acquire+0x2f/0xb0 [ 388.635431][T11414] ? __pfx_vti6_init_net+0x10/0x10 [ 388.635462][T11414] register_netdev+0x34/0x50 [ 388.635493][T11414] vti6_init_net+0x25e/0x3d0 [ 388.635523][T11414] ops_init+0x1df/0x5f0 [ 388.635556][T11414] setup_net+0x21f/0x860 [ 388.635588][T11414] ? __pfx_setup_net+0x10/0x10 [ 388.635618][T11414] ? down_read_killable+0xcc/0x380 [ 388.635649][T11414] ? __pfx_down_read_killable+0x10/0x10 [ 388.635682][T11414] ? debug_mutex_init+0x37/0x70 [ 388.635716][T11414] copy_net_ns+0x2b4/0x6c0 [ 388.635750][T11414] create_new_namespaces+0x3ea/0xad0 [ 388.635784][T11414] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 388.635816][T11414] ksys_unshare+0x45d/0xa40 [ 388.635850][T11414] ? __pfx_ksys_unshare+0x10/0x10 [ 388.635887][T11414] ? xfd_validate_state+0x5d/0x180 [ 388.635918][T11414] ? rcu_is_watching+0x12/0xc0 [ 388.635952][T11414] __x64_sys_unshare+0x31/0x40 [ 388.635986][T11414] do_syscall_64+0xcd/0x250 [ 388.636017][T11414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.636048][T11414] RIP: 0033:0x7f9382d8cd29 [ 388.636066][T11414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.636090][T11414] RSP: 002b:00007f9383b30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 388.636113][T11414] RAX: ffffffffffffffda RBX: 00007f9382fa5fa0 RCX: 00007f9382d8cd29 [ 388.636129][T11414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 388.636144][T11414] RBP: 00007f9382e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.636158][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.636172][T11414] R13: 0000000000000000 R14: 00007f9382fa5fa0 R15: 00007fff3d4b8998 [ 388.636194][T11414] [ 388.968630][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.030803][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1211'. [ 391.321648][T11497] netlink: zone id is out of range [ 391.408598][T11497] netlink: zone id is out of range [ 391.438115][T11497] netlink: zone id is out of range [ 391.579929][T11497] netlink: zone id is out of range [ 391.689867][T11497] netlink: zone id is out of range [ 391.779857][T11497] netlink: zone id is out of range [ 391.796348][T11497] netlink: zone id is out of range [ 391.806603][T11497] netlink: zone id is out of range [ 391.836706][T11497] netlink: zone id is out of range [ 391.863845][T11497] netlink: zone id is out of range [ 392.220734][T11519] Invalid ELF header magic: != ELF [ 392.458518][T11533] caif:caif_disconnect_client(): nothing to disconnect [ 393.166721][T11543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.229417][ T29] audit: type=1107 audit(8277292046.625:15): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 395.705026][T11624] ovs_: entered promiscuous mode [ 397.248472][T11697] ======================================================= [ 397.248472][T11697] WARNING: The mand mount option has been deprecated and [ 397.248472][T11697] and is ignored by this kernel. Remove the mand [ 397.248472][T11697] option from the mount to silence this warning. [ 397.248472][T11697] ======================================================= [ 397.290272][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.542407][T11705] Process accounting resumed [ 397.983787][T11718] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 398.696516][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.705189][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.714329][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.723373][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.732715][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 398.741607][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.258978][T11744] chnl_net:caif_netlink_parms(): no params data found [ 399.361582][T11744] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.371491][T11744] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.380148][T11744] bridge_slave_0: entered allmulticast mode [ 399.388886][T11744] bridge_slave_0: entered promiscuous mode [ 399.397478][T11744] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.426140][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.444945][T11744] bridge_slave_1: entered allmulticast mode [ 399.456886][T11744] bridge_slave_1: entered promiscuous mode [ 399.530280][T11744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.555250][T11756] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 399.578605][T11744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.639086][T11744] team0: Port device team_slave_0 added [ 399.657900][T11744] team0: Port device team_slave_1 added [ 399.773604][T11744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.787206][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.818306][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.885754][T11744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.929220][T11744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.965945][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.997017][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.099483][T11744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.305043][T11744] hsr_slave_0: entered promiscuous mode [ 400.318408][T11744] hsr_slave_1: entered promiscuous mode [ 400.330211][T11744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.345580][T11744] Cannot create hsr debugfs directory [ 400.805914][ T5846] Bluetooth: hci4: command tx timeout [ 401.022525][T11744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 401.054527][T11744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 401.082191][T11744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 401.154977][T11744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 401.351476][T11775] ptrace attach of "./syz-executor exec"[5836] was attempted by ""[11775] [ 401.352293][T11744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.440989][T11744] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.468193][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.476730][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.497699][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.506244][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.787156][ T29] audit: type=1800 audit(8277292054.179:16): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1283" name="discovery_nqn" dev="configfs" ino=37456 res=0 errno=0 [ 401.936185][T11744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.290343][T11744] veth0_vlan: entered promiscuous mode [ 402.301310][T11744] veth1_vlan: entered promiscuous mode [ 402.358747][T11744] veth0_macvtap: entered promiscuous mode [ 402.405301][T11744] veth1_macvtap: entered promiscuous mode [ 402.445759][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.484497][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.506534][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.544786][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.563358][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.585166][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.605702][T11744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.628033][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.649126][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.667332][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.694415][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.718677][T11744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.731908][T11744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.749701][T11744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.772099][T11744] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.790702][T11744] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.811436][T11744] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.829994][T11744] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.887703][ T5846] Bluetooth: hci4: command tx timeout [ 402.973764][T11818] kafs: addr_prefs: Invalid Command [ 403.088646][T11744] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 403.142498][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.143398][T11744] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 403.184187][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.290874][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.305840][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.595711][ T29] audit: type=1800 audit(8277292056.000:17): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1289" name="lu_gp_id" dev="configfs" ino=37733 res=0 errno=0 [ 404.742022][T11870] FAULT_INJECTION: forcing a failure. [ 404.742022][T11870] name failslab, interval 1, probability 0, space 0, times 0 [ 404.823312][T11870] CPU: 0 UID: 0 PID: 11870 Comm: syz.6.1296 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 404.823349][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 404.823365][T11870] Call Trace: [ 404.823371][T11870] [ 404.823380][T11870] dump_stack_lvl+0x16c/0x1f0 [ 404.823414][T11870] should_fail_ex+0x497/0x5b0 [ 404.823439][T11870] ? fs_reclaim_acquire+0xae/0x150 [ 404.823472][T11870] should_failslab+0xc2/0x120 [ 404.823498][T11870] __kmalloc_noprof+0xce/0x4f0 [ 404.823519][T11870] ? lsm_blob_alloc+0x68/0x90 [ 404.823544][T11870] lsm_blob_alloc+0x68/0x90 [ 404.823569][T11870] security_sk_alloc+0x30/0x270 [ 404.823597][T11870] sk_prot_alloc+0x1c7/0x2a0 [ 404.823621][T11870] sk_alloc+0x36/0xb90 [ 404.823651][T11870] __netlink_create+0x5e/0x2c0 [ 404.823682][T11870] __netlink_kernel_create+0xee/0x750 [ 404.823706][T11870] ? __pfx___netlink_kernel_create+0x10/0x10 [ 404.823733][T11870] uevent_net_init+0xf9/0x360 [ 404.823763][T11870] ? __pfx_uevent_net_init+0x10/0x10 [ 404.823792][T11870] ? __pfx_uevent_net_rcv+0x10/0x10 [ 404.823824][T11870] ? __pfx_genl_release+0x10/0x10 [ 404.823848][T11870] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 404.823869][T11870] ? ops_init+0x77/0x5f0 [ 404.823898][T11870] ? __pfx_uevent_net_init+0x10/0x10 [ 404.823928][T11870] ops_init+0x1df/0x5f0 [ 404.823959][T11870] setup_net+0x21f/0x860 [ 404.823990][T11870] ? __pfx_setup_net+0x10/0x10 [ 404.824018][T11870] ? down_read_killable+0xcc/0x380 [ 404.824049][T11870] ? __pfx_down_read_killable+0x10/0x10 [ 404.824081][T11870] ? debug_mutex_init+0x37/0x70 [ 404.824126][T11870] copy_net_ns+0x2b4/0x6c0 [ 404.824161][T11870] create_new_namespaces+0x3ea/0xad0 [ 404.824196][T11870] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 404.824228][T11870] ksys_unshare+0x45d/0xa40 [ 404.824260][T11870] ? __pfx_ksys_unshare+0x10/0x10 [ 404.824291][T11870] ? xfd_validate_state+0x5d/0x180 [ 404.824321][T11870] ? rcu_is_watching+0x12/0xc0 [ 404.824355][T11870] __x64_sys_unshare+0x31/0x40 [ 404.824387][T11870] do_syscall_64+0xcd/0x250 [ 404.824417][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.824448][T11870] RIP: 0033:0x7fa1e758cd29 [ 404.824467][T11870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.824488][T11870] RSP: 002b:00007fa1e843a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 404.824510][T11870] RAX: ffffffffffffffda RBX: 00007fa1e77a5fa0 RCX: 00007fa1e758cd29 [ 404.824526][T11870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 404.824539][T11870] RBP: 00007fa1e760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 404.824553][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.824566][T11870] R13: 0000000000000000 R14: 00007fa1e77a5fa0 R15: 00007ffca94188a8 [ 404.824586][T11870] [ 404.824637][T11870] kobject_uevent: unable to create netlink socket! [ 404.997818][ T5846] Bluetooth: hci4: command tx timeout [ 406.560124][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1310'. [ 406.703912][T11931] size and base must be multiples of 4 kiB [ 406.742537][T11931] CPU: 1 UID: 0 PID: 11931 Comm: syz.5.1310 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 406.742573][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 406.742588][T11931] Call Trace: [ 406.742595][T11931] [ 406.742604][T11931] dump_stack_lvl+0x16c/0x1f0 [ 406.742639][T11931] mtrr_add+0xdf/0x110 [ 406.742665][T11931] mtrr_ioctl+0x7cd/0xcd0 [ 406.742692][T11931] ? __pfx_mtrr_ioctl+0x10/0x10 [ 406.742721][T11931] ? __pfx_lock_release+0x10/0x10 [ 406.742750][T11931] ? ksys_semctl.constprop.0+0x150/0x2e0 [ 406.742785][T11931] ? __fget_files+0x206/0x3a0 [ 406.742807][T11931] ? __pfx_mtrr_ioctl+0x10/0x10 [ 406.742834][T11931] proc_reg_unlocked_ioctl+0x226/0x320 [ 406.742858][T11931] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 406.742882][T11931] __x64_sys_ioctl+0x190/0x200 [ 406.742911][T11931] do_syscall_64+0xcd/0x250 [ 406.742943][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.742977][T11931] RIP: 0033:0x7f4c0838cd29 [ 406.742995][T11931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.743018][T11931] RSP: 002b:00007f4c0922d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.743040][T11931] RAX: ffffffffffffffda RBX: 00007f4c085a6080 RCX: 00007f4c0838cd29 [ 406.743055][T11931] RDX: 0000000000000007 RSI: 00000000400c4d01 RDI: 0000000000000003 [ 406.743069][T11931] RBP: 00007f4c0840e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 406.743083][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.743098][T11931] R13: 0000000000000000 R14: 00007f4c085a6080 R15: 00007ffedd6dfbf8 [ 406.743121][T11931] [ 407.232239][ T5840] Bluetooth: hci4: command tx timeout [ 407.723117][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'. [ 408.535500][T11992] netlink: 'syz.6.1324': attribute type 1 has an invalid length. [ 412.350987][ T29] audit: type=1804 audit(8277292064.744:18): pid=12102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1347" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=1250 res=1 errno=0 [ 412.569244][T12104] FAULT_INJECTION: forcing a failure. [ 412.569244][T12104] name failslab, interval 1, probability 0, space 0, times 0 [ 412.585024][T12104] CPU: 1 UID: 0 PID: 12104 Comm: syz.0.1348 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 412.585053][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 412.585061][T12104] Call Trace: [ 412.585065][T12104] [ 412.585076][T12104] dump_stack_lvl+0x16c/0x1f0 [ 412.585098][T12104] should_fail_ex+0x497/0x5b0 [ 412.585112][T12104] ? fs_reclaim_acquire+0xae/0x150 [ 412.585132][T12104] should_failslab+0xc2/0x120 [ 412.585147][T12104] __kmalloc_cache_noprof+0x68/0x420 [ 412.585168][T12104] kobject_create_and_add+0x4a/0xf0 [ 412.585190][T12104] add_disk_fwnode+0x875/0x1320 [ 412.585208][T12104] zram_add+0x486/0x6b0 [ 412.585223][T12104] ? __pfx_zram_add+0x10/0x10 [ 412.585239][T12104] ? __pfx___mutex_lock+0x10/0x10 [ 412.585256][T12104] ? rcu_is_watching+0x12/0xc0 [ 412.585275][T12104] ? __pfx_hot_add_show+0x10/0x10 [ 412.585288][T12104] hot_add_show+0x21/0x80 [ 412.585301][T12104] class_attr_show+0x6f/0xa0 [ 412.585314][T12104] ? __pfx_class_attr_show+0x10/0x10 [ 412.585326][T12104] sysfs_kf_seq_show+0x223/0x3e0 [ 412.585343][T12104] seq_read_iter+0x4f4/0x12b0 [ 412.585363][T12104] kernfs_fop_read_iter+0x414/0x580 [ 412.585376][T12104] ? rw_verify_area+0xcf/0x680 [ 412.585393][T12104] vfs_read+0x886/0xbf0 [ 412.585411][T12104] ? __pfx_vfs_read+0x10/0x10 [ 412.585441][T12104] ksys_read+0x12b/0x250 [ 412.585460][T12104] ? __pfx_ksys_read+0x10/0x10 [ 412.585479][T12104] ? rcu_is_watching+0x12/0xc0 [ 412.585497][T12104] ? rcu_is_watching+0x12/0xc0 [ 412.585516][T12104] do_syscall_64+0xcd/0x250 [ 412.585532][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.585549][T12104] RIP: 0033:0x7f4e4fb8cd29 [ 412.585560][T12104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.585572][T12104] RSP: 002b:00007f4e509a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.585584][T12104] RAX: ffffffffffffffda RBX: 00007f4e4fda5fa0 RCX: 00007f4e4fb8cd29 [ 412.585592][T12104] RDX: 0000000000001000 RSI: 0000000020000ec0 RDI: 0000000000000007 [ 412.585600][T12104] RBP: 00007f4e4fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 412.585607][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.585614][T12104] R13: 0000000000000000 R14: 00007f4e4fda5fa0 R15: 00007ffe8b13f3a8 [ 412.585625][T12104] [ 413.368098][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 413.610837][T12125] block nbd2: Unsupported socket: shutdown callout must be supported. [ 414.407267][T12127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 414.417236][T12127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.438241][T12127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.490007][T12127] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 414.516966][T12127] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 414.620082][T12127] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 414.812747][T12161] Invalid ELF header magic: != ELF [ 414.938958][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1360'. [ 415.028701][T12161] bond0: entered allmulticast mode [ 415.068234][T12161] bond_slave_0: entered allmulticast mode [ 415.329726][T12185] FAULT_INJECTION: forcing a failure. [ 415.329726][T12185] name failslab, interval 1, probability 0, space 0, times 0 [ 415.394289][T12185] CPU: 1 UID: 0 PID: 12185 Comm: syz.5.1365 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 415.394322][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 415.394335][T12185] Call Trace: [ 415.394342][T12185] [ 415.394350][T12185] dump_stack_lvl+0x16c/0x1f0 [ 415.394382][T12185] should_fail_ex+0x497/0x5b0 [ 415.394403][T12185] ? fs_reclaim_acquire+0xae/0x150 [ 415.394438][T12185] should_failslab+0xc2/0x120 [ 415.394464][T12185] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 415.394489][T12185] ? getname_flags.part.0+0x4c/0x550 [ 415.394518][T12185] getname_flags.part.0+0x4c/0x550 [ 415.394546][T12185] getname+0x8d/0xe0 [ 415.394577][T12185] do_sys_openat2+0x104/0x1e0 [ 415.394603][T12185] ? __pfx_do_sys_openat2+0x10/0x10 [ 415.394632][T12185] __x64_sys_openat+0x175/0x210 [ 415.394660][T12185] ? __pfx___x64_sys_openat+0x10/0x10 [ 415.394690][T12185] ? rcu_is_watching+0x12/0xc0 [ 415.394724][T12185] ? rcu_is_watching+0x12/0xc0 [ 415.394757][T12185] do_syscall_64+0xcd/0x250 [ 415.394784][T12185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.394816][T12185] RIP: 0033:0x7f4c0838cd29 [ 415.394845][T12185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.394869][T12185] RSP: 002b:00007f4c0924e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 415.394890][T12185] RAX: ffffffffffffffda RBX: 00007f4c085a5fa0 RCX: 00007f4c0838cd29 [ 415.394904][T12185] RDX: 0000000000048041 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 415.394918][T12185] RBP: 00007f4c0840e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 415.394930][T12185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.394942][T12185] R13: 0000000000000000 R14: 00007f4c085a5fa0 R15: 00007ffedd6dfbf8 [ 415.394960][T12185] [ 415.918751][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 416.229749][T12219] Invalid ELF header magic: != ELF [ 416.477706][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 416.477832][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 416.567474][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 417.102451][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'. [ 418.585220][T12335] IPVS: length: 24 != 25171704 [ 418.636388][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 419.392826][T12362] Invalid ELF header magic: != ELF [ 420.130157][T12427] Process accounting resumed [ 420.725505][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 422.130551][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1419'. [ 423.675805][T12541] raw_sendmsg: syz.5.1432 forgot to set AF_INET. Fix it! [ 423.829893][T12535] bonding: no command found in bonding_masters - use +ifname or -ifname [ 424.516698][T12600] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1446'. [ 424.540015][T12601] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1446'. [ 426.464045][T12672] nbd2: detected capacity change from 0 to 68719476736 [ 426.495051][T10563] block nbd2: Send control failed (result -22) [ 426.523960][T10563] block nbd2: Request send failed, requeueing [ 426.539941][ T54] block nbd2: Receive control failed (result -32) [ 426.540042][ T98] block nbd2: Dead connection, failed to find a fallback [ 426.557976][ T98] block nbd2: shutting down sockets [ 426.566547][ T98] blk_print_req_error: 24 callbacks suppressed [ 426.566564][ T98] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.589443][ T98] buffer_io_error: 23 callbacks suppressed [ 426.589459][ T98] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.610871][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.622098][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.633628][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.645498][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.655857][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.668308][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.679504][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.692139][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.706579][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.718742][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.728539][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.740177][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.752886][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.774047][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.812603][T10563] ldm_validate_partition_table(): Disk read failed. [ 426.848531][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.891462][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.925737][T10563] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.962384][T10563] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.996629][T10563] Dev nbd2: unable to read RDB block 0 [ 427.012123][T10563] nbd2: unable to read partition table [ 427.038263][T10563] ldm_validate_partition_table(): Disk read failed. [ 427.050530][T10563] Dev nbd2: unable to read RDB block 0 [ 427.077410][T10563] nbd2: unable to read partition table [ 427.277141][T12716] ================================================================== [ 427.286849][T12716] BUG: KASAN: slab-use-after-free in force_wakeup_write+0x14d/0x170 [ 427.296444][T12716] Read of size 1 at addr ffff8880267b1231 by task syz.6.1474/12716 [ 427.305913][T12716] [ 427.308701][T12716] CPU: 0 UID: 0 PID: 12716 Comm: syz.6.1474 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 427.308730][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 427.308745][T12716] Call Trace: [ 427.308759][T12716] [ 427.308768][T12716] dump_stack_lvl+0x116/0x1f0 [ 427.308803][T12716] print_report+0xc3/0x620 [ 427.308830][T12716] ? __virt_addr_valid+0x5e/0x590 [ 427.308867][T12716] ? __phys_addr+0xc6/0x150 [ 427.308902][T12716] kasan_report+0xd9/0x110 [ 427.308928][T12716] ? force_wakeup_write+0x14d/0x170 [ 427.308963][T12716] ? force_wakeup_write+0x14d/0x170 [ 427.308999][T12716] force_wakeup_write+0x14d/0x170 [ 427.309033][T12716] ? __pfx_force_wakeup_write+0x10/0x10 [ 427.309067][T12716] ? rcu_watching_snap_stopped_since+0xf1/0x110 [ 427.309104][T12716] ? trace_lock_acquire+0x14e/0x1f0 [ 427.309129][T12716] full_proxy_write+0xfd/0x1b0 [ 427.309162][T12716] ? __pfx_full_proxy_write+0x10/0x10 [ 427.309192][T12716] vfs_write+0x24c/0x1150 [ 427.309226][T12716] ? __fget_files+0x1fc/0x3a0 [ 427.309247][T12716] ? __pfx___mutex_lock+0x10/0x10 [ 427.309277][T12716] ? __pfx_vfs_write+0x10/0x10 [ 427.309314][T12716] ? __fget_files+0x206/0x3a0 [ 427.309338][T12716] ksys_write+0x12b/0x250 [ 427.309372][T12716] ? __pfx_ksys_write+0x10/0x10 [ 427.309406][T12716] ? rcu_is_watching+0x12/0xc0 [ 427.309440][T12716] ? rcu_is_watching+0x12/0xc0 [ 427.309474][T12716] do_syscall_64+0xcd/0x250 [ 427.309505][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.309538][T12716] RIP: 0033:0x7fa1e758cd29 [ 427.309557][T12716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.309581][T12716] RSP: 002b:00007fa1e843a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.309604][T12716] RAX: ffffffffffffffda RBX: 00007fa1e77a5fa0 RCX: 00007fa1e758cd29 [ 427.309621][T12716] RDX: 0000000000000001 RSI: 0000000020001780 RDI: 0000000000000006 [ 427.309636][T12716] RBP: 00007fa1e760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 427.309651][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.309665][T12716] R13: 0000000000000000 R14: 00007fa1e77a5fa0 R15: 00007ffca94188a8 [ 427.309688][T12716] [ 427.309696][T12716] [ 427.575672][T12716] Allocated by task 12612: [ 427.580963][T12716] kasan_save_stack+0x33/0x60 [ 427.586579][T12716] kasan_save_track+0x14/0x30 [ 427.592191][T12716] __kasan_kmalloc+0xaa/0xb0 [ 427.597700][T12716] tipc_link_create+0x187/0xf50 [ 427.603541][T12716] tipc_link_bc_create+0x114/0x3c0 [ 427.609683][T12716] tipc_bcast_init+0x1c7/0x370 [ 427.615411][T12716] tipc_init_net+0x36b/0x430 [ 427.620925][T12716] ops_init+0x1df/0x5f0 [ 427.625924][T12716] setup_net+0x21f/0x860 [ 427.631027][T12716] copy_net_ns+0x2b4/0x6c0 [ 427.636339][T12716] create_new_namespaces+0x3ea/0xad0 [ 427.642687][T12716] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 427.649465][T12716] ksys_unshare+0x45d/0xa40 [ 427.654880][T12716] __x64_sys_unshare+0x31/0x40 [ 427.660607][T12716] do_syscall_64+0xcd/0x250 [ 427.666016][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.673097][T12716] [ 427.675876][T12716] Freed by task 12070: [ 427.680742][T12716] kasan_save_stack+0x33/0x60 [ 427.686354][T12716] kasan_save_track+0x14/0x30 [ 427.691971][T12716] kasan_save_free_info+0x3b/0x60 [ 427.698015][T12716] __kasan_slab_free+0x51/0x70 [ 427.703734][T12716] kfree+0x14f/0x4b0 [ 427.703785][T12724] caif:caif_disconnect_client(): nothing to disconnect [ 427.708393][T12716] tipc_exit_net+0x5e/0x110 [ 427.708424][T12716] ops_exit_list+0xb0/0x180 [ 427.727389][T12716] cleanup_net+0x5c6/0xbf0 [ 427.732710][T12716] process_one_work+0x958/0x1b30 [ 427.738647][T12716] worker_thread+0x6c8/0xf00 [ 427.744153][T12716] kthread+0x3af/0x750 [ 427.746784][T12730] Process accounting resumed [ 427.749025][T12716] ret_from_fork+0x45/0x80 [ 427.749057][T12716] ret_from_fork_asm+0x1a/0x30 [ 427.765521][T12716] [ 427.768301][T12716] The buggy address belongs to the object at ffff8880267b1000 [ 427.768301][T12716] which belongs to the cache kmalloc-1k of size 1024 [ 427.785162][T12716] The buggy address is located 561 bytes inside of [ 427.785162][T12716] freed 1024-byte region [ffff8880267b1000, ffff8880267b1400) [ 427.801820][T12716] [ 427.804590][T12716] The buggy address belongs to the physical page: [ 427.812287][T12716] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x267b0 [ 427.822801][T12716] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 427.832996][T12716] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 427.842562][T12716] page_type: f5(slab) [ 427.847317][T12716] raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 427.857623][T12716] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 427.867920][T12716] head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 427.878297][T12716] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 427.888681][T12716] head: 00fff00000000003 ffffea000099ec01 ffffffffffffffff 0000000000000000 [ 427.899060][T12716] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 427.909435][T12716] page dumped because: kasan: bad access detected [ 427.917108][T12716] page_owner tracks the page as allocated [ 427.923938][T12716] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8937971511, free_ts 0 [ 427.947457][T12716] post_alloc_hook+0x2d1/0x350 [ 427.953152][T12716] get_page_from_freelist+0xfce/0x2f80 [ 427.959677][T12716] __alloc_pages_noprof+0x221/0x2470 [ 427.965995][T12716] alloc_pages_mpol_noprof+0x2c8/0x620 [ 427.972533][T12716] new_slab+0x2c9/0x410 [ 427.977525][T12716] ___slab_alloc+0xbcd/0x1590 [ 427.983119][T12716] __slab_alloc.constprop.0+0x56/0xb0 [ 427.989544][T12716] __kmalloc_cache_noprof+0xf6/0x420 [ 427.995866][T12716] class_register+0xb5/0x460 [ 428.001349][T12716] init_sg+0xae/0x270 [ 428.006098][T12716] do_one_initcall+0x128/0x630 [ 428.011796][T12716] kernel_init_freeable+0x58f/0x8b0 [ 428.018012][T12716] kernel_init+0x1c/0x2b0 [ 428.023288][T12716] ret_from_fork+0x45/0x80 [ 428.028611][T12716] ret_from_fork_asm+0x1a/0x30 [ 428.034302][T12716] page_owner free stack trace missing [ 428.040716][T12716] [ 428.043477][T12716] Memory state around the buggy address: [ 428.050202][T12716] ffff8880267b1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.059848][T12716] ffff8880267b1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.069499][T12716] >ffff8880267b1200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.079146][T12716] ^ [ 428.085875][T12716] ffff8880267b1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.095521][T12716] ffff8880267b1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 428.105178][T12716] ================================================================== [ 428.118011][T12716] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 428.126646][T12716] CPU: 0 UID: 0 PID: 12716 Comm: syz.6.1474 Not tainted 6.13.0-syzkaller-07259-g0f8e26b38d7a #0 [ 428.139127][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 428.151176][T12716] Call Trace: [ 428.155097][T12716] [ 428.158596][T12716] dump_stack_lvl+0x3d/0x1f0 [ 428.164101][T12716] panic+0x71d/0x800 [ 428.168761][T12716] ? __pfx_panic+0x10/0x10 [ 428.174040][T12716] ? rcu_is_watching+0x12/0xc0 [ 428.179752][T12716] ? preempt_schedule_thunk+0x1a/0x30 [ 428.186196][T12716] ? preempt_schedule_common+0x44/0xc0 [ 428.192738][T12716] check_panic_on_warn+0xab/0xb0 [ 428.198643][T12716] end_report+0x117/0x180 [ 428.203833][T12716] kasan_report+0xe9/0x110 [ 428.209116][T12716] ? force_wakeup_write+0x14d/0x170 [ 428.215347][T12716] ? force_wakeup_write+0x14d/0x170 [ 428.221581][T12716] force_wakeup_write+0x14d/0x170 [ 428.227611][T12716] ? __pfx_force_wakeup_write+0x10/0x10 [ 428.234263][T12716] ? rcu_watching_snap_stopped_since+0xf1/0x110 [ 428.241748][T12716] ? trace_lock_acquire+0x14e/0x1f0 [ 428.247972][T12716] full_proxy_write+0xfd/0x1b0 [ 428.253683][T12716] ? __pfx_full_proxy_write+0x10/0x10 [ 428.260121][T12716] vfs_write+0x24c/0x1150 [ 428.265311][T12716] ? __fget_files+0x1fc/0x3a0 [ 428.270904][T12716] ? __pfx___mutex_lock+0x10/0x10 [ 428.276923][T12716] ? __pfx_vfs_write+0x10/0x10 [ 428.282635][T12716] ? __fget_files+0x206/0x3a0 [ 428.288245][T12716] ksys_write+0x12b/0x250 [ 428.293435][T12716] ? __pfx_ksys_write+0x10/0x10 [ 428.299246][T12716] ? rcu_is_watching+0x12/0xc0 [ 428.304953][T12716] ? rcu_is_watching+0x12/0xc0 [ 428.310663][T12716] do_syscall_64+0xcd/0x250 [ 428.316055][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.323120][T12716] RIP: 0033:0x7fa1e758cd29 [ 428.328397][T12716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.351911][T12716] RSP: 002b:00007fa1e843a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.361989][T12716] RAX: ffffffffffffffda RBX: 00007fa1e77a5fa0 RCX: 00007fa1e758cd29 [ 428.371539][T12716] RDX: 0000000000000001 RSI: 0000000020001780 RDI: 0000000000000006 [ 428.381084][T12716] RBP: 00007fa1e760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 428.390635][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.400181][T12716] R13: 0000000000000000 R14: 00007fa1e77a5fa0 R15: 00007ffca94188a8 [ 428.409732][T12716] [ 428.413592][T12716] Kernel Offset: disabled [ 428.418773][T12716] Rebooting in 86400 seconds..