last executing test programs: 10m54.580074004s ago: executing program 1 (id=314): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = clone$auto(0x20003b4b, 0x7ffffffffffffffc, 0x0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000000), 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) prctl$auto(0x1000000003b, 0x1, r0, 0x28f, 0x7) 10m53.842503857s ago: executing program 1 (id=316): sendmsg$auto_IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="020026bd7000ffdbdf2501000000050035000d00000008001400030000000500190003000000", @ANYBLOB="2c00f500ef33ca11ee3beef68ae30cc7f46b7d9ef249e3b4b34b8cd9d45e776abbb2cd4be8af21042580cd5d8f8dea2a6c24b659174bd84602bdbd536affffffffffffff7f6058f978c3f427f9890e47c3887e46a42c0cc65dcc9ceb083cb4b663642f19f52f667856430c7abc1d8606260509fdf0722ad2233cf0c5ed07123d4bd9baba4c74f2907badd8de240967773d8c6af5bc0681fad33342276903390a5c42537c2fd9c05ce737a32d1a"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x20002880) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x800, 0x73) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4e21, @multicast2}, 0x55) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x83f, 0x3) r1 = socket(0xa, 0x5, 0x84) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/42, 0x2a) mmap$auto(0x0, 0x128009, 0x2000000000000005, 0x19, r2, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) sendto$auto(r1, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000001c0), 0xffffffffffffffff) setxattrat$auto(r0, &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000140)='netdev\x00', &(0x7f0000000300)={0xfffffffffffffffa, 0xe168, 0x7}, 0x7bf) io_uring_setup$auto(0x1, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) 10m52.651706947s ago: executing program 1 (id=322): unshare$auto(0x9) r0 = syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi7\x00', 0x400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setgroups$auto(0x6, &(0x7f0000000000)=0x1ff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getpgid(0x0) prctl$auto(0x1000, 0x100, r0, 0x9, 0x7) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8080, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/resource_alignment\x00', 0x500, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x1a9382, 0x0) write$auto(r2, 0x0, 0x5) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) madvise$auto(0x7fffffff, 0x5, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1178}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) getgroups$auto(0xc5f1, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x40085618, 0x38) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec31\x00', 0x200, 0x0) 10m51.512788894s ago: executing program 1 (id=327): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x7ffe) r0 = socket(0xa, 0x3, 0x5) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) read$auto(0x3, 0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB='\nG'], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, 0x0, 0x8, 0x80000000}, 0x5}, 0x3b8b, 0xa) 10m50.373929364s ago: executing program 1 (id=331): mmap$auto(0x0, 0x20009, 0xfe2, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x5, 0x9b71, 0x7, 0x28040) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) eventfd$auto(0x6e) socket(0xa, 0x2, 0x88) 10m47.533693956s ago: executing program 1 (id=341): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880) process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0) socket(0xb, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x0) memfd_create$auto(0x0, 0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81) 10m47.430999279s ago: executing program 32 (id=341): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8880) process_vm_readv$auto(0xbd4, &(0x7f0000000040)={0x0}, 0x3ff, 0x0, 0x46, 0x0) socket(0xb, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x0) memfd_create$auto(0x0, 0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0x81) 9m45.162156791s ago: executing program 3 (id=563): setresuid$auto(0x2, 0xffffffffffffffff, 0x200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xc8, 0x400454d1, 0x5c8d) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@isdn={0x22, 0xe, 0x8, 0x8, 0x5}, 0x67) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) rseq$auto(0x0, 0x8000, 0x0, 0x6) geteuid() prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 9m44.227994762s ago: executing program 3 (id=566): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000004140)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x6, 0x0, 0x2000, 0x80000001}, 0x7}, 0x3, 0x0) 9m43.943536412s ago: executing program 3 (id=568): mmap$auto(0x0, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) vmsplice$auto(0x1, 0x0, 0x6, 0x8) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) acct$auto(&(0x7f0000000100)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00') acct$auto(0x0) acct$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x2, 0xffffffffffffffff) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x9, 0x4, 0x0) r0 = socket(0x10, 0x2, 0x9) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) sendmsg$auto_NET_DM_CMD_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00011bbd0700000000000000111d"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xf7072642a6ab562, 0x0) mmap$auto(0x68, 0x4, 0xffffffffffffffff, 0x11, r1, 0x6) sethostname$auto(&(0x7f0000000000)='#(}%\\\x00', 0x800) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x3ff, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfec) 9m43.125810476s ago: executing program 3 (id=572): r0 = socket(0x23, 0x2, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0xeaff, 0x0, 0x1080020}, 0x1a, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd}, 0x28}, 0x1, 0x0, 0x0, 0x4048800}, 0x40) 9m43.045962044s ago: executing program 3 (id=574): clock_gettime$auto(0x80000000, 0x0) mmap$auto(0x1, 0x20009, 0x7ff, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) socket(0xa, 0x5, 0x84) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) sendto$auto(r0, 0x0, 0x9, 0xfffffffc, &(0x7f0000000000)=@phonet={0x23, 0xdb, 0x7, 0x5}, 0x7ff) (async) tkill$auto(0x1, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) clock_settime$auto(0x9, &(0x7f0000000040)={0x41258a3a, 0xb}) (async) socket(0xa, 0x3, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = eventfd$auto(0x3) r4 = getpgid$auto(0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000013c0)=ANY=[@ANYBLOB="f8080000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf2560000000140004006261746164763000000000000000000017085a80f806d380f20626800400620008006e00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\b\x00h\x00', @ANYRES32=0x0, @ANYBLOB="d95a175003ef2cd710361e165cad8bc7b1c66f8dc8ea13ff519c1a33524dec06d816895910538ff813f9e2d1836d6819211d09cd978560edbe5eb4effc07180bdf4439bee8708b988c86b80513a9f03ce7c8cd874b885d2a1f8734ab999630fff8f5e988c3b1c52191bfbdf504fa3957f8163d5dd9f1d574b476ca9cfc10c1541b8b278f1c4581ea8328f23fe51cdc60302f60ba606b850c77207d3ae1201733cee16d7a5197b0a208004100", @ANYRES32, @ANYBLOB="0c0004007ea4000000000000ce70c1a6e32a45be0d8fe1c9e4617a8e3489a3a16f5b1782a009ead7f30a17ee25da2a84b1ff1bf20270e24e39514aed5d0ddfbb4791b36b3ad328a4e2a86920745809efc978b7a100a15bb1de5f70790f9d280463f3ff461dc2bffe6d6acb5041f136da57cb2d7f4a7910cf1bab795e8930062a4ce9bd681a743175a6cf2ab6ad08b7c090153bf4a6fce146154035ad41cbf6b1d94e5ea872a832cc9a3f3322b1f16830b6a856771787889921ebfb25a9738fbe0f8d1800488009008a00aaaaaaaaaa0000000400c98004005980004cda9d0afab7821045c41259ca822768821b9d95a4faf83daa0bfbd767a212752f87c5ba3c964d1fc858a6760ed7a63a9bf8b1213d4db1138ca9faaae86d0800f200", @ANYRES32=r2, @ANYBLOB="14003c00fe80000000000200090000000000a2178731389b96c9c79d", @ANYRES32=r4, @ANYBLOB="0800df00", @ANYRES32, @ANYBLOB="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"], 0x8f8}, 0x1, 0x0, 0x0, 0x10}, 0x4001) (async) eventfd$auto(0x0) (async) pipe$auto(0x0) (async) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_TCFLSH2(r5, 0x540b, 0x0) connect$auto(r1, &(0x7f0000000000)=@ethernet={0x306, @remote}, 0x3) 9m42.501921965s ago: executing program 3 (id=575): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) memfd_secret$auto(0x0) socket(0xf, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x84, 0x0, &(0x7f00000000c0)=0x10000) 9m42.172651758s ago: executing program 33 (id=575): sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) memfd_secret$auto(0x0) socket(0xf, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x84, 0x0, &(0x7f00000000c0)=0x10000) 8m2.681830385s ago: executing program 0 (id=1091): setreuid$auto(0x3, 0x7) mq_open$auto(&(0x7f0000000080)='!\x00', 0x76d0, 0x101, &(0x7f0000000100)={0x7, 0x8, 0x7fffffffffffffff, 0x5b}) mount$auto(0x0, &(0x7f0000000280)=':,\x00', 0x0, 0x1000, 0x0) mknod$auto(0x0, 0xcb, 0xfffffffa) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x40002, 0x0) write$auto_vhost_net_fops_net(r0, 0x0, 0x0) execve$auto(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000009400)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000450}, 0x4000) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r4, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002300)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x300, 0x0, 0x408d1}, 0x0) 8m2.221512943s ago: executing program 0 (id=1095): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40088d0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000100), 0x1) 8m1.547150451s ago: executing program 0 (id=1099): r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x11c, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000005c0)={&(0x7f0000000540), 0x200}, 0x6) 8m0.697891782s ago: executing program 0 (id=1101): r0 = socket(0x23, 0x2, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0x0, 0x0, 0x1080020}, 0x1a, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd}, 0x28}, 0x1, 0x0, 0x3f000000, 0x4048800}, 0x40) 8m0.293787752s ago: executing program 0 (id=1103): mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_I2C_TENBIT(r1, 0x704, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) mremap$auto(0x200000, 0x3, 0x3fd6, 0x3, 0x20000000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0xffffffffffffffff, 0xc9, 0x1000, 0x9, 0xe1, 0xffffffffffffffff, 0x20010000000803, 0x2}, 0x6f2) mprotect$auto(0x1ffff000, 0x401003, 0x8) shmctl$auto(0x0, 0xc, &(0x7f0000000180)={{0x7, 0x0, 0xee01, 0x4, 0xa, 0x100, 0xfff9}, 0x0, 0x80d, 0x3fc, 0x6, @raw=0x9, @inferred, 0x4, 0x0, 0x0, 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x8, 0x4, 0x4, 0xb9, 0x8, 0xc, 0xffffffffffffffff, 0x2, 0x7ff}, 0x6f4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7m59.613942925s ago: executing program 0 (id=1107): mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1, 0x8, 0x0, 0x60, 0x5, 0x80, 0xcf, 0x6c35, 0xe}) (async) timer_settime$auto(0x8, 0x3, &(0x7f0000000140)={{0x2, 0xdd}, {0x1, 0xfffffffffffffff9}}, &(0x7f00000001c0)={{0x2, 0xfffffffffffffffc}, {0x3, 0x26165f4c}}) (async, rerun: 32) poll$auto(&(0x7f0000000100)={r0, 0xffa5, 0x80}, 0x8, 0x7) (async, rerun: 32) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r1, 0x2202, 0x0) ustat$auto(0x801, 0x0) (async) mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) (rerun: 32) read$auto(r2, 0x0, 0x1) (async) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="6a0bc7164ef947dbb20b173db5e6002c0930654ed025c154bcf8343e3ce0b5e21a69cae8a4925195d1d0eea2abe15fe46f69c31447d8baf3787293a600340f9649c7be35a74d8b60cf2c52e1c5770ccc1e2396d6823ebb3136d8b29b66ae75572e0b70044201287f60921c063e61656611e1d4a84f406da99d3a1c143b3d85cf8f6d754ffb1a6222fbd84e6b02", 0x8d) io_uring_setup$auto(0x6, 0x0) (async) mincore$auto(0x4, 0x1, &(0x7f0000000000)='\\\xf7\x00') 7m57.798724871s ago: executing program 2 (id=1113): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) sync_file_range$auto(0x3fe0000000000, 0x7, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x81, 0x7fd, 0x3, 0x9, 0x7, 0x7ff, 0x0, 0x4000000f}, 0x6f4) epoll_create$auto(0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) close_range$auto(0x2, 0x8, 0x0) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) unshare$auto(0x40000080) 7m57.041836656s ago: executing program 2 (id=1115): r0 = socket(0x2a, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xfffffffffffffffd, 0x9, 0x2) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x1, 0x77bd, 0x3) mmap$auto(0x4, 0xe986, 0x5, 0x13, 0xffffffffffffffff, 0x8040) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x1b, 0x0, 0x56b) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r5 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000580), 0x101000, 0x0) close_range$auto(r4, r5, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1p/sub0/info\x00', 0x101c00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0xb, 0xdf, 0x9b72, r2, 0x40008000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/ep_81/type\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x71d) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05bed8f5", @ANYRES16=r6, @ANYRESDEC=r7], 0x1c}}, 0x4044820) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x40000, 0x0) connect$auto(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x55) close_range$auto(0x2, 0x8000, 0x0) 7m55.872519408s ago: executing program 2 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x1d0}}, 0x4000000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cb5b2cbd7000ffdbdf251f000000050006000900000005000400000000000800030009000000080002007f"], 0x34}}, 0x82) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) read$auto_tracing_pipe_fops_trace(r2, &(0x7f0000000100)=""/70, 0x46) (async) r3 = semctl$auto(0xff, 0x7fff, 0x3c, 0x4) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/pid_for_children\x00') mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) 7m55.5253314s ago: executing program 2 (id=1123): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = socket(0x10, 0x2, 0x6) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000140)=0x33) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x6b) socket(0x11, 0x80003, 0x300) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/devspec\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) shutdown$auto(0x200000003, 0x2) (async) write$auto(0x3, 0x0, 0x10001) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002c00)=""/181, 0xb5) (async) socket(0x29, 0x5, 0x0) (async) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) open_by_handle_at$auto(r3, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/netdevsim2/accept_ra_rtr_pref\x00', 0x189302, 0x0) sendfile$auto(r1, r4, 0x0, 0x3) 7m55.31393159s ago: executing program 2 (id=1124): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/channel\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)='+).+/\x00', 0x5, 0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) tkill$auto(0x1, 0x7) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 7m54.353443353s ago: executing program 2 (id=1125): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYBLOB="11032cbd700001dcdf25150000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00'}) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x18, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_GROUPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008880}, 0x0) statmount$auto(&(0x7f0000000080)={0x3a764348, @inferred=r0, 0x29, 0xfffffffffffeffff, 0xeb}, &(0x7f00000000c0)={0xa, 0xc, 0x2, 0xeab, 0x3, 0xc, 0x1, 0x353, 0x2, 0xb, 0x3, 0x2, 0x383caf6, 0x5, 0x1, 0x0, 0x5, 0x2, 0x8, 0x5, 0x7, 0x4, 0x9, 0x4, 0x401, 0xfffffff7, [0x200, 0x776, 0x0, 0xd, 0x7fffffff, 0x4d57, 0x8000000000000000, 0x3, 0x5, 0x0, 0x7fffffffffffffff, 0x7, 0xf, 0xefa, 0x9, 0x1, 0x1, 0x81, 0x2, 0x3, 0x0, 0x7fffffffffffffff, 0x6, 0x1, 0x5, 0x2cdb, 0x5, 0x0, 0x6, 0x3, 0x1, 0xf, 0x7, 0x1, 0x5, 0x1, 0x3, 0x5, 0x0, 0x2, 0x3, 0x3ac2, 0x10, 0x5, 0x5530, 0x80]}, 0x80, 0x6) socket(0xa, 0x6, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x5425, 0x5) r4 = socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) ustat$auto(0x801, 0x0) r5 = open(0x0, 0x149443, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x40305829, 0x0) connect$auto(r4, &(0x7f0000000000), 0x55) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x5, 0x0) r6 = socket(0x2, 0x1, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r7 = socket(0x2, 0x1, 0x106) setsockopt$auto(r7, 0x1, 0x20, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x6, 0x20000000) setuid$auto(0xe) 7m54.076411872s ago: executing program 34 (id=1125): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card1\x00', 0x2000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop15/queue/scheduler\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00', @ANYBLOB="11032cbd700001dcdf25150000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00'}) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x18, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_GROUPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008880}, 0x0) statmount$auto(&(0x7f0000000080)={0x3a764348, @inferred=r0, 0x29, 0xfffffffffffeffff, 0xeb}, &(0x7f00000000c0)={0xa, 0xc, 0x2, 0xeab, 0x3, 0xc, 0x1, 0x353, 0x2, 0xb, 0x3, 0x2, 0x383caf6, 0x5, 0x1, 0x0, 0x5, 0x2, 0x8, 0x5, 0x7, 0x4, 0x9, 0x4, 0x401, 0xfffffff7, [0x200, 0x776, 0x0, 0xd, 0x7fffffff, 0x4d57, 0x8000000000000000, 0x3, 0x5, 0x0, 0x7fffffffffffffff, 0x7, 0xf, 0xefa, 0x9, 0x1, 0x1, 0x81, 0x2, 0x3, 0x0, 0x7fffffffffffffff, 0x6, 0x1, 0x5, 0x2cdb, 0x5, 0x0, 0x6, 0x3, 0x1, 0xf, 0x7, 0x1, 0x5, 0x1, 0x3, 0x5, 0x0, 0x2, 0x3, 0x3ac2, 0x10, 0x5, 0x5530, 0x80]}, 0x80, 0x6) socket(0xa, 0x6, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x5425, 0x5) r4 = socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) ustat$auto(0x801, 0x0) r5 = open(0x0, 0x149443, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x40305829, 0x0) connect$auto(r4, &(0x7f0000000000), 0x55) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x5, 0x0) r6 = socket(0x2, 0x1, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r7 = socket(0x2, 0x1, 0x106) setsockopt$auto(r7, 0x1, 0x20, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x6, 0x20000000) setuid$auto(0xe) 7m44.193385252s ago: executing program 35 (id=1107): mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x1, 0x8, 0x0, 0x60, 0x5, 0x80, 0xcf, 0x6c35, 0xe}) (async) timer_settime$auto(0x8, 0x3, &(0x7f0000000140)={{0x2, 0xdd}, {0x1, 0xfffffffffffffff9}}, &(0x7f00000001c0)={{0x2, 0xfffffffffffffffc}, {0x3, 0x26165f4c}}) (async, rerun: 32) poll$auto(&(0x7f0000000100)={r0, 0xffa5, 0x80}, 0x8, 0x7) (async, rerun: 32) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r1, 0x2202, 0x0) ustat$auto(0x801, 0x0) (async) mincore$auto(0x1000, 0x8001, 0x0) (async, rerun: 32) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) (rerun: 32) read$auto(r2, 0x0, 0x1) (async) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="6a0bc7164ef947dbb20b173db5e6002c0930654ed025c154bcf8343e3ce0b5e21a69cae8a4925195d1d0eea2abe15fe46f69c31447d8baf3787293a600340f9649c7be35a74d8b60cf2c52e1c5770ccc1e2396d6823ebb3136d8b29b66ae75572e0b70044201287f60921c063e61656611e1d4a84f406da99d3a1c143b3d85cf8f6d754ffb1a6222fbd84e6b02", 0x8d) io_uring_setup$auto(0x6, 0x0) (async) mincore$auto(0x4, 0x1, &(0x7f0000000000)='\\\xf7\x00') 4m24.409226418s ago: executing program 5 (id=1891): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000001740)={0x2, &(0x7f0000001700)={0x400, 0x6, 0x3a}}) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)={0x18, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket(0x2, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) clone$auto(0x9, 0x80000001, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x5, 0x80000001) pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x30, 0x80000006, 0x4) statmount$auto(0x0, 0x0, 0x1fe, 0x8000000d) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) 4m22.837805754s ago: executing program 5 (id=1896): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000180)=""/210, 0xd2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x10201, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x80000001, 0xfffffffffffffffa, 0x80000000) sysfs$auto(0x2, 0x44, 0x0) r3 = fsopen$auto(0x0, 0x1) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') getdents64$auto(r4, 0x0, 0x489) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0xff, r2, r2, 0x1}) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) r6 = socket(0x2, 0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) listen$auto(0x3, 0x9) setsockopt$auto(r6, 0x10d, 0xb, 0x0, 0x17) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x2, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) writev$auto(r7, &(0x7f0000000000)={&(0x7f0000000100), 0x394d}, 0xc) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) 4m22.218025117s ago: executing program 5 (id=1899): io_uring_setup$auto(0x2, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x806, 0x6, 0x8c48, 0x29f, 0x100, 0x7f, 0x7, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x0, 0x76c5, 0x8, 0x100000000}}) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd14/queue/max_sectors_kb\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) (async) r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x80000, 0x0) readv$auto(r1, &(0x7f0000000040)={0x0, 0x2}, 0x5) 4m21.880903569s ago: executing program 5 (id=1900): socket(0x2, 0x6, 0x8000) socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x20200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/4087, 0xff7) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) r2 = pipe2$auto(&(0x7f0000000040)=r1, 0xffffffff) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf25280000005241cae46ce5e23495167e6cae9de2ea993bc5a07d9bf190d32e96a85a7db268fc7bee451b8a76de66bd44c0eed2e5ef6a2916abb05ba037560728f3ebf6f2ca0127efbd0ee1c986eadc7ae75ac6ee0745954108a9a632e8b0d28a2bcbd3e7bbbf178e705c94d7bee773698656be51039092176c1f9d93aeac6e203c01a02670d40e384b891fbe17045c5e1c122439c7b25b48fbdc675825496d0ab16134e4e4827d2b2054ad67cb7e1289e7a4199c"], 0x14}}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0xffffffffffffffff, 0xfffffffd, 0x14, 0x0, 0x4) r4 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/tracing/printk_formats\x00', 0x90200, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x6) socket(0xa, 0x3, 0x6) r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r9, r8, 0x4, 0x1ff, r7, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) write$auto(r4, &(0x7f00000011c0)='\'@\x87#\x00', 0x1) r10 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/ieee80211/phy6/statistics/dot11ACKFailureCount\x00', 0x0, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r10, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0xe620000000000000]}, 0x0) 4m20.872564683s ago: executing program 5 (id=1906): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x604c837}, 0x4010) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video3\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x490840, 0x0) write$auto_dvb_dvr_fops_dmxdev(r1, &(0x7f0000000040)="01e62d29f0371d5b20bd8745e9ebbd9da6bf0eb87a60acbf0a7e9cffe6767b004f38aa5b80db16d8de546fb06cf3fb230c4395c47350bc62cd2013b5ab36f3e28e9958182647dd0a", 0x48) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x1, 0x4, 0x93d, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x401c, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x8, 0x7, 0x0, 0x6, 0x0, 0x0, 0x1fffffff, 0x0, [0x0, 0x8000000, 0x0, 0x7, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) prctl$auto(0x25, 0x8000, 0x5, 0x7, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) sendmsg$auto_TIPC_NL_NET_GET(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) ioctl$auto(0x1, 0x894c, 0x8) eventfd$auto(0x0) socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) socket(0xa, 0x2, 0x88) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB='\nG'], 0x18}, 0x1, 0x0, 0x0, 0x64048001}, 0x80) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 4m18.914341501s ago: executing program 5 (id=1917): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x10000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0xe2400, 0x0) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdc01, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008081}, 0x24000004) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/name\x00', 0x18b081, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto(r2, 0x4, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) futex_wait$auto(&(0x7f0000000340)="ece966adcfbb4e5b5d0589b80cd6c2a7f21caed9bc4a5a97c0a07da8d5086bd46b230814fb4b266bc420ea6ef7ef8b7b085171b9d967ff1be249a32f68f8d0c5a639bd1da4f40aa8683f339caf4c29bdbc", 0x0, 0x2, 0xffff, &(0x7f0000000000)={0x4}, 0x100) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200842, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0x40345410, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x88100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/cpu/1/cpuid\x00', 0x2000, 0x0) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0xd, 0x0, 0x8000) connect$auto(r6, &(0x7f0000000080)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, 0x9) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a9e127bd7000ffdbdf25010000004b5a32eba3ac4a9f080003000100010007000400eb96e1000500050003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x20100, 0x0) 4m3.644839532s ago: executing program 36 (id=1917): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x10000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0xe2400, 0x0) unshare$auto(0x40000080) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdc01, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008081}, 0x24000004) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/name\x00', 0x18b081, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto(r2, 0x4, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) futex_wait$auto(&(0x7f0000000340)="ece966adcfbb4e5b5d0589b80cd6c2a7f21caed9bc4a5a97c0a07da8d5086bd46b230814fb4b266bc420ea6ef7ef8b7b085171b9d967ff1be249a32f68f8d0c5a639bd1da4f40aa8683f339caf4c29bdbc", 0x0, 0x2, 0xffff, &(0x7f0000000000)={0x4}, 0x100) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200842, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0x40345410, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x88100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/cpu/1/cpuid\x00', 0x2000, 0x0) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0xd, 0x0, 0x8000) connect$auto(r6, &(0x7f0000000080)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, 0x9) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a9e127bd7000ffdbdf25010000004b5a32eba3ac4a9f080003000100010007000400eb96e1000500050003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x20100, 0x0) 1m30.276973066s ago: executing program 8 (id=2853): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/force_devcoredump\x00', 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffe, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) 1m30.166645733s ago: executing program 8 (id=2854): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd}, 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 1m29.081433621s ago: executing program 8 (id=2857): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/ifb1/statistics/rx_errors\x00', 0x4a002, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)=""/197, 0xc5) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/mtdblock0/sched/read2_fifo_list\x00', 0x8080, 0x0) pread64$auto(r2, 0x0, 0x800, 0x4) sendfile$auto(r0, r0, 0x0, 0x3) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7d, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="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", 0x1000) 1m28.423895764s ago: executing program 8 (id=2864): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40080, 0x0) ioctl$auto(r0, 0x80045105, 0x3) 1m27.669891742s ago: executing program 8 (id=2867): r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x301, 0x5) close_range$auto(r0, r1, 0x5) 1m27.320197274s ago: executing program 8 (id=2868): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x8, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r1 = socket(0x21, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='r\x02', 0x2fb) r2 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2) mmap$auto(0x0, 0x20000a, 0x2, 0x15, 0x602, 0x300000000000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) move_pages$auto(0xffffffffffffffff, 0x8000001002, 0x0, 0x0, 0x0, 0x5) socketpair$auto(0x1d, 0x2, 0xf, 0x0) mmap$auto(0x0, 0xa00000000000, 0xdf, 0x1e, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, r2, 0x0) pipe$auto(0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0xffd8) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x118) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto(r3, 0x6, 0x17, 0x0, 0xfb3) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) ioperm$auto(0x527a, 0xab7, 0x7000) chmod$auto(&(0x7f0000000040)='./file0\x00', 0xf4b7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003480)=""/247, 0xf7) 1m27.188232758s ago: executing program 37 (id=2868): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x8, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r1 = socket(0x21, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r1, &(0x7f0000000000)='r\x02', 0x2fb) r2 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2) mmap$auto(0x0, 0x20000a, 0x2, 0x15, 0x602, 0x300000000000) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) move_pages$auto(0xffffffffffffffff, 0x8000001002, 0x0, 0x0, 0x0, 0x5) socketpair$auto(0x1d, 0x2, 0xf, 0x0) mmap$auto(0x0, 0xa00000000000, 0xdf, 0x1e, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, r2, 0x0) pipe$auto(0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0xffd8) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x118) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto(r3, 0x6, 0x17, 0x0, 0xfb3) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) ioperm$auto(0x527a, 0xab7, 0x7000) chmod$auto(&(0x7f0000000040)='./file0\x00', 0xf4b7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003480)=""/247, 0xf7) 5.10980625s ago: executing program 4 (id=3314): mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async, rerun: 64) sysfs$auto(0x2, 0x4, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6f, 0x0, 0x0) (async, rerun: 64) mlockall$auto(0x7) (rerun: 64) clone3$auto(0x0, 0x40) (async, rerun: 64) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x181c00, 0x0) close_range$auto(r1, 0xa, 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x1e, 0x805, 0x0) (async, rerun: 64) sysfs$auto(0x2, 0x2000000020, 0x0) (async) fsopen$auto(0x0, 0x1) (async) fsconfig$auto(r2, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) 4.562758127s ago: executing program 4 (id=3316): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/force_devcoredump\x00', 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffe, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) 4.115680588s ago: executing program 4 (id=3321): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF2_AGE={0x8, 0x4, 0xb7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd7800fddbdf2521000000f5009c0003ceb1763d93d1f6e365ca67a4206962cde3805651fc6f1e3df8b8d064d9ee325d0d24c32525120f6f4921ebe935eb52554bda9f71b86113b629bcf7e67c065cb8d77366f939b126eb1e062494cd3598151209d151712eb5f2a39a01b020a4f157df90f9e1c258302d4a906b31e1118aedd4a794b4f8c08c6a3361e057a8438d9c383b442b9a18345df7f85de1ee69bdbef83571240f08f31786bd9f26974cb6fc42b9519b64ab4baaeed43ae272daa1b80aea44c8bf92acf95f7c812cd8da555911f463ae5157d79abdf0917247fe095101"], 0xffffffffffffff13}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000480)={0x4, 0x4, 0x8000, 0x3800, 0x0, 0xee00, 0x0, 0x54979f0c, 0x5, 0xffffffffffffffff, 0x5, 0x2, 0x7, 0x9b, 0x8000000000000000, 0x6, 0xc884}) socket(0x2a, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(0x0, 0xffff14bb) ioctl$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) 4.029885808s ago: executing program 7 (id=3322): socket(0x2b, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x20200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_tid_address$auto(&(0x7f0000000040)) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') fremovexattr$auto(r0, &(0x7f00000000c0)='nl802154\x00') sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, 0x0, 0xc, &(0x7f0000000380)="1c374b41ab2111e4d22e3ae902968f22fc780331", 0x10000002c0f32de, 0x1000}, 0x80000001}, 0x2, 0x100) socket(0x2b, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0xd47]}, 0x0) 3.351685069s ago: executing program 6 (id=3324): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF2_AGE={0x8, 0x4, 0xb7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd7800fddbdf2521000000f5009c0003ceb1763d93d1f6e365ca67a4206962cde3805651fc6f1e3df8b8d064d9ee325d0d24c32525120f6f4921ebe935eb52554bda9f71b86113b629bcf7e67c065cb8d77366f939b126eb1e062494cd3598151209d151712eb5f2a39a01b020a4f157df90f9e1c258302d4a906b31e1118aedd4a794b4f8c08c6a3361e057a8438d9c383b442b9a18345df7f85de1ee69bdbef83571240f08f31786bd9f26974cb6fc42b9519b64ab4baaeed43ae272daa1b80aea44c8bf92acf95f7c812cd8da555911f463ae5157d79abdf0917247fe095101"], 0xffffffffffffff13}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000480)={0x4, 0x4, 0x8000, 0x3800, 0x0, 0xee00, 0x0, 0x54979f0c, 0x5, 0xffffffffffffffff, 0x5, 0x2, 0x7, 0x9b, 0x8000000000000000, 0x6, 0xc884}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.193228373s ago: executing program 4 (id=3325): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}, @HSR_A_IF2_AGE={0x8, 0x4, 0xb7}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd7800fddbdf2521000000f5009c0003ceb1763d93d1f6e365ca67a4206962cde3805651fc6f1e3df8b8d064d9ee325d0d24c32525120f6f4921ebe935eb52554bda9f71b86113b629bcf7e67c065cb8d77366f939b126eb1e062494cd3598151209d151712eb5f2a39a01b020a4f157df90f9e1c258302d4a906b31e1118aedd4a794b4f8c08c6a3361e057a8438d9c383b442b9a18345df7f85de1ee69bdbef83571240f08f31786bd9f26974cb6fc42b9519b64ab4baaeed43ae272daa1b80aea44c8bf92acf95f7c812cd8da555911f463ae5157d79abdf0917247fe095101"], 0xffffffffffffff13}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000480)={0x4, 0x4, 0x8000, 0x3800, 0x0, 0xee00, 0x0, 0x54979f0c, 0x5, 0xffffffffffffffff, 0x5, 0x2, 0x7, 0x9b, 0x8000000000000000, 0x6, 0xc884}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.033413264s ago: executing program 7 (id=3326): socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd}, 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 2.607170887s ago: executing program 6 (id=3327): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto_ucma_fops_ucma(r0, &(0x7f00000001c0)="160000003e47a70f", 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x121102, 0x0) write$auto(r1, &(0x7f0000000080)='[#FQ:\x00', 0x83) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0xc0045405, 0x3) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f0000000080)={r0, 0x4}) close_range$auto(r2, r0, 0xb6e) add_key$auto(0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xdf) socket(0x11, 0x6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x100000004, 0x3, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x9, 0x400, 0xfffffffffffffffb, 0x9, 0xffffffff80000000, 0x1, 0x65, 0x103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket(0x10, 0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)={0x3, 0x7, 0x6, 0x1, 0x80000000, "da91f980fcc46ec38c4be8c2"}) ioctl$auto_def_blk_fops_fs(r3, 0xff, &(0x7f00000000c0)) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r6 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r6) setsockopt$auto(0x3, 0x6, 0x16, 0x0, 0x7ffffc) 1.735037286s ago: executing program 4 (id=3328): io_submit$auto(0x8, 0x8000000000000001, &(0x7f0000000040)=&(0x7f0000000000)={0x80, 0x7ff, 0x5, 0x5, 0x5, 0xffffffffffffffff, 0x92, 0xbd6, 0x1, 0x0, 0x7}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0xc0045103, 0x3) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f00000001c0)="2a1d264add69b6440800ac8caf4bdecc30b530ac6ebbff950e1a647d6a08a1b55dde5a409b3d", 0x26) getuid() openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x60400, 0x0) syz_clone3(&(0x7f0000004000)={0x30000, &(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000002e40), {0x6}, &(0x7f0000002f00)=""/141, 0x8d, &(0x7f0000002fc0)=""/4096, &(0x7f0000003fc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) timer_create$auto(0x9, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r3, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) unshare$auto(0x40000080) read$auto(0xc8, 0x0, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = fsopen$auto(&(0x7f0000000000)='\x00', 0x400) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4008000) 1.73181694s ago: executing program 7 (id=3336): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4008000) 1.645730317s ago: executing program 6 (id=3329): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/force_devcoredump\x00', 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffe, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) 1.458079908s ago: executing program 6 (id=3331): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge_slave_0/gc_stale_time\x00', 0x169282, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES8], 0x18}}, 0x200080c0) 1.340832248s ago: executing program 9 (id=3332): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000001c0)="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", 0xb2, &(0x7f00000003c0)={&(0x7f0000000300)="691a5b5ab99d2d8d40f1452b41a9598ff2ba22e1ec018c30906cf2aefcc507a9bce4d5e692c0f45f32208d1fc4e15c99c4a2cda78ec4c152bf2d1a1db1cece87ee7980d22a5418d8496e9ca4ae8ad9a94bcf6da3637d1ddc9b9419175c8ecfd9c156af4f0f83e5c1b78eed77976a1893c2d6092324d92511c13c99963ff520afe9954d25d419b89f1809c4de1dc295e9961b988549cc4abc98e3c3e0d367349eac32b5ba1b9b4b7244a3066575e7640d360441a1", 0x7}, 0x8, &(0x7f0000000400)="475a1988fcf2e05a7764e0888e18b8ff2dd3d69c1b5268b6f13561c4e649585dd212fc2e33e8d27fc587c5f68575fd451dc9a946287a8b1ea43c99f80057a7f729900ca53b52b06655a3dd35fc2f9b173e712940efbff0bc664e86f8e8e5bd5e031436fd839a92446846edb218c0", 0x800000, 0x6}, 0x9f}, 0x2, 0x1) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250f00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{@inferred=0xffffffffffffffff, 0x110d, 0x10000, 0x6, "e927783f467a46cbb766439daa1ee1aa00000000e18000000000000004000400ff0f0e0766c200"}, 0x99, 0x181, 0x6, @raw=0x2, @reserved="294fa6128731696b50822ae271fbb969a526bf24151b811972feed1d2e3cd5d51f764e53d99a7c72599be3c615f6c693b01da8e7b66b3d8f450ba2b1f81028f94747b01c1f3b6de28666d3676277d84f090e19d63c56024114e337f6221fe4fe284e451b5fec7dd45be2a56a30e8825057fadb99f58e7c0fae00", "a4698330a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460a667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) 1.254937274s ago: executing program 6 (id=3333): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x1, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xd) fspick$auto(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', 0x3) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xf}, 0x6, 0x0) syz_clone3(0x0, 0x0) gettid() getpid() capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setresuid$auto(0x0, 0x0, 0x4) open(0x0, 0x22240, 0x155) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) getsockopt$auto(r3, 0xffeffbfc, 0x24, 0x0, 0x0) fcntl$getown(r0, 0x9) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x4000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x183800, 0x0) r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$auto(r4, 0x0, 0x45c) 1.013730543s ago: executing program 9 (id=3334): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) pipe$auto(&(0x7f0000000040)=r0) write$auto_proc_pid_set_comm_operations_base(r1, &(0x7f0000000080), 0x0) mmap$auto(0x0, 0x2, 0xdb, 0x9b72, 0x6, 0x100000000) ioperm$auto(0x7, 0x6, 0x1) timerfd_gettime$auto(0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/kvm/mmu_cache_miss\x00', 0x80000, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) ftruncate$auto(0x3, 0x700) r3 = io_uring_setup$auto(0x6, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) sysfs$auto(0x1, 0x0, 0x4) ioctl$auto_CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000080)={0x4, 0x7, 0x101, 0x1, 0x5, 0x2, "0b18a9cad153a029bddec9b4647bc4b4", 0x6, 0x4, 0xf7, 0xe4, 0x2, 0x7, 0x1}) ioctl$auto(0x3, 0x4020565a, 0x34) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) (async) pipe$auto(&(0x7f0000000040)=r0) (async) write$auto_proc_pid_set_comm_operations_base(r1, &(0x7f0000000080), 0x0) (async) mmap$auto(0x0, 0x2, 0xdb, 0x9b72, 0x6, 0x100000000) (async) ioperm$auto(0x7, 0x6, 0x1) (async) timerfd_gettime$auto(0x9, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x100000000000030, 0x0) (async) memfd_secret$auto(0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/kvm/mmu_cache_miss\x00', 0x80000, 0x0) (async) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) (async) ftruncate$auto(0x3, 0x700) (async) io_uring_setup$auto(0x6, 0x0) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (async) sysfs$auto(0x1, 0x0, 0x4) (async) ioctl$auto_CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000080)={0x4, 0x7, 0x101, 0x1, 0x5, 0x2, "0b18a9cad153a029bddec9b4647bc4b4", 0x6, 0x4, 0xf7, 0xe4, 0x2, 0x7, 0x1}) (async) ioctl$auto(0x3, 0x4020565a, 0x34) (async) 879.724089ms ago: executing program 9 (id=3335): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5523, r0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x20001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.2/driver_override\x00', 0xc4202, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0x81) 716.045472ms ago: executing program 7 (id=3337): r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x490840, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) ioctl$auto(0x1, 0x894c, 0x8) eventfd$auto(0x0) mmap$auto(0xfffffffffffffffe, 0xd, 0x5, 0xeb4, r0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = fanotify_init$auto(0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9b596cf41c7a632e, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b4a, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x5fffffa, 0x99d) bpf$auto(0x3, &(0x7f00000001c0)=@token_create={0x4, r3}, 0xc) socket(0x9, 0x2bd2b1fa4e77cdc, 0x303) r4 = openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/rts_threshold\x00', 0x0, 0x0) read$auto_rts_threshold_ops_(r4, 0x0, 0x0) pipe2$auto(&(0x7f0000000140)=0x2, 0x800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r5, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7ff, 0x0, 0x808) 614.991729ms ago: executing program 4 (id=3338): socket(0x2b, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x20200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0xe620000000000000, 0x300000000000000]}, 0x0) 565.800091ms ago: executing program 6 (id=3339): r0 = socket(0x2a, 0x2, 0x1) mmap$auto(0xfffffffffffffffc, 0x40000002000a, 0x10000000000df, 0xeb2, r0, 0x8001) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="2f5b212abd7800fddbdf2521ddfa37503b1b908c82ce202a95f60080"], 0x14}}, 0x4000000) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) userfaultfd$auto(0x1) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x1) write$auto(0x3, 0x0, 0x5c8) socket$nl_generic(0x10, 0x3, 0x10) setreuid$auto(0x3, 0x7) setreuid$auto(0x3, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 426.124961ms ago: executing program 9 (id=3340): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/force_devcoredump\x00', 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffe, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c004}, 0x40080c0) 218.734912ms ago: executing program 7 (id=3341): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge_slave_0/gc_stale_time\x00', 0x169282, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r0], 0x18}}, 0x200080c0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) 173.237893ms ago: executing program 9 (id=3342): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/bridge_slave_0/gc_stale_time\x00', 0x169282, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES8], 0x18}}, 0x200080c0) 59.987423ms ago: executing program 9 (id=3343): socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x14, 0x0, 0xd0d58b333228212f, 0x78bd2a, 0x25dfdbfd}, 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 0s ago: executing program 7 (id=3344): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ramdisk_pages/ram11\x00', 0x743142, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/disksize\x00', 0x121102, 0x0) write$auto(r1, &(0x7f0000000000)='/\x00', 0x1) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)=0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r4, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram3/queue/stable_writes\x00', 0x182, 0x0) sendfile$auto(r8, r8, 0x0, 0x6) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socket(0x1d, 0x3, 0x1) fchmod$auto(r3, 0xd9) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r9, 0x0, 0x3}, 0xc) readv$auto(r7, &(0x7f0000000080)={0x0, 0x3}, 0x200000ffffffff) kernel console output (not intermixed with test programs): ing later): interface not active [ 574.954156][T14990] hsr_slave_0: entered promiscuous mode [ 574.993931][T14990] hsr_slave_1: entered promiscuous mode [ 575.003985][T14990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.028689][T14990] Cannot create hsr debugfs directory [ 575.535543][T14990] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 575.575614][T14990] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 575.606718][T14990] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 575.640352][T14990] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 575.788391][T15033] netlink: 'syz.4.1952': attribute type 4 has an invalid length. [ 575.797894][ T5841] Bluetooth: hci2: command tx timeout [ 575.916550][T14990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.021607][T14990] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.077991][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.085153][ T8624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.175019][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.182215][ T8624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.545101][T14990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.139116][T14990] veth0_vlan: entered promiscuous mode [ 577.181172][T14990] veth1_vlan: entered promiscuous mode [ 577.262646][T14990] veth0_macvtap: entered promiscuous mode [ 577.296990][T14990] veth1_macvtap: entered promiscuous mode [ 577.354626][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.396874][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.429392][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.462344][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.473097][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.494319][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.504523][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.515369][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.525595][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.547238][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.569280][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.593880][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.615452][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.636978][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.673355][T14990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.707644][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.772209][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.803483][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.828307][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.862169][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.873103][ T5841] Bluetooth: hci2: command tx timeout [ 577.894346][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.904468][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.914990][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.924936][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.935471][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.945509][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.956076][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.966432][T14990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.977475][T14990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.988505][T14990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.103260][T14990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.130710][T14990] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.182833][T14990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.191584][T14990] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.578721][T12726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.612738][T12726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.697233][ T8624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.710186][ T8624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.939338][T15095] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1943'. [ 578.981988][T15099] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1968'. [ 579.032485][T15107] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1943'. [ 579.080984][T15095] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1943'. [ 579.253479][T15095] netlink: 338 bytes leftover after parsing attributes in process `syz.8.1943'. [ 579.812762][T15126] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 579.952991][ T5841] Bluetooth: hci2: command tx timeout [ 582.024749][T15186] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1992'. [ 582.044094][ T5841] Bluetooth: hci2: command tx timeout [ 582.194498][T15189] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1992'. [ 582.204485][T15186] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1992'. [ 583.132628][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2001'. [ 586.151790][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2013'. [ 586.303699][T15262] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2013'. [ 586.328565][T15262] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2013'. [ 586.387934][T15262] netlink: 134 bytes leftover after parsing attributes in process `syz.6.2013'. [ 586.575888][T15272] FAULT_INJECTION: forcing a failure. [ 586.575888][T15272] name failslab, interval 1, probability 0, space 0, times 0 [ 586.632885][T15272] CPU: 0 UID: 0 PID: 15272 Comm: syz.6.2017 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 586.643706][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 586.653787][T15272] Call Trace: [ 586.657081][T15272] [ 586.660030][T15272] dump_stack_lvl+0x16c/0x1f0 [ 586.664745][T15272] should_fail_ex+0x497/0x5b0 [ 586.669457][T15272] ? fs_reclaim_acquire+0xae/0x150 [ 586.674603][T15272] should_failslab+0xc2/0x120 [ 586.679321][T15272] __kmalloc_node_noprof+0xd1/0x520 [ 586.684565][T15272] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 586.690060][T15272] __kvmalloc_node_noprof+0xad/0x1a0 [ 586.695377][T15272] seq_read_iter+0x82a/0x12b0 [ 586.700081][T15272] ? __mutex_trylock_common+0xea/0x250 [ 586.705583][T15272] kernfs_fop_read_iter+0x414/0x580 [ 586.710818][T15272] ? rw_verify_area+0xd0/0x700 [ 586.715619][T15272] vfs_read+0x87f/0xbe0 [ 586.719813][T15272] ? __pfx_vfs_read+0x10/0x10 [ 586.724550][T15272] ksys_read+0x12b/0x250 [ 586.728818][T15272] ? __pfx_ksys_read+0x10/0x10 [ 586.733601][T15272] do_syscall_64+0xcd/0x250 [ 586.738118][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.744018][T15272] RIP: 0033:0x7f044af85d29 [ 586.748435][T15272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.768050][T15272] RSP: 002b:00007f044bd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.776470][T15272] RAX: ffffffffffffffda RBX: 00007f044b175fa0 RCX: 00007f044af85d29 [ 586.784446][T15272] RDX: 00000000000000f7 RSI: 0000000020003480 RDI: 0000000000000003 [ 586.792420][T15272] RBP: 00007f044bd71090 R08: 0000000000000000 R09: 0000000000000000 [ 586.800391][T15272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.808365][T15272] R13: 0000000000000000 R14: 00007f044b175fa0 R15: 00007ffd7ccffde8 [ 586.816352][T15272] [ 588.511042][T15308] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2026'. [ 588.696224][T15315] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2026'. [ 588.772209][T15308] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2026'. [ 588.807686][T15308] netlink: 134 bytes leftover after parsing attributes in process `syz.7.2026'. [ 589.520717][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2031'. [ 589.670707][T15326] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 591.175470][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2040'. [ 591.410048][T15366] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2040'. [ 591.420396][T15362] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2040'. [ 591.706155][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2044'. [ 592.943750][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2052'. [ 593.053253][T15399] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2052'. [ 593.064894][T15399] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2052'. [ 593.108560][T15399] netlink: 134 bytes leftover after parsing attributes in process `syz.8.2052'. [ 593.228020][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2055'. [ 594.479319][T15434] FAULT_INJECTION: forcing a failure. [ 594.479319][T15434] name failslab, interval 1, probability 0, space 0, times 0 [ 594.526549][T15434] CPU: 0 UID: 0 PID: 15434 Comm: syz.7.2063 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 594.537385][T15434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 594.547467][T15434] Call Trace: [ 594.550766][T15434] [ 594.553716][T15434] dump_stack_lvl+0x16c/0x1f0 [ 594.558433][T15434] should_fail_ex+0x497/0x5b0 [ 594.563145][T15434] ? fs_reclaim_acquire+0xae/0x150 [ 594.568289][T15434] should_failslab+0xc2/0x120 [ 594.573003][T15434] __kmalloc_noprof+0xce/0x4f0 [ 594.577808][T15434] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 594.583479][T15434] ? tomoyo_realpath_from_path+0xbf/0x710 [ 594.589238][T15434] tomoyo_realpath_from_path+0xbf/0x710 [ 594.594819][T15434] ? tomoyo_path_number_perm+0x235/0x5b0 [ 594.600498][T15434] tomoyo_path_number_perm+0x248/0x5b0 [ 594.605987][T15434] ? tomoyo_path_number_perm+0x235/0x5b0 [ 594.611640][T15434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 594.617653][T15434] ? __pfx_lock_release+0x10/0x10 [ 594.622682][T15434] ? trace_lock_acquire+0x14e/0x1f0 [ 594.627890][T15434] ? lock_acquire+0x2f/0xb0 [ 594.632392][T15434] ? __fget_files+0x40/0x3a0 [ 594.636992][T15434] ? __fget_files+0x206/0x3a0 [ 594.641678][T15434] security_file_ioctl+0x9b/0x240 [ 594.646706][T15434] __x64_sys_ioctl+0xb7/0x200 [ 594.651390][T15434] do_syscall_64+0xcd/0x250 [ 594.655907][T15434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.661813][T15434] RIP: 0033:0x7f3001585d29 [ 594.666238][T15434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.685849][T15434] RSP: 002b:00007f30023d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.694269][T15434] RAX: ffffffffffffffda RBX: 00007f3001775fa0 RCX: 00007f3001585d29 [ 594.702243][T15434] RDX: 0000000000000004 RSI: 00000000c1205531 RDI: 0000000000000004 [ 594.710217][T15434] RBP: 00007f30023d4090 R08: 0000000000000000 R09: 0000000000000000 [ 594.718190][T15434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.726161][T15434] R13: 0000000000000000 R14: 00007f3001775fa0 R15: 00007fffdf8f3268 [ 594.734146][T15434] [ 594.763062][T15434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 594.820754][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2065'. [ 596.234566][T15478] __nla_validate_parse: 5 callbacks suppressed [ 596.234591][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2080'. [ 596.380829][T15478] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2080'. [ 596.632484][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2081'. [ 597.874710][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2090'. [ 597.964174][T15513] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2090'. [ 598.239082][T15518] FAULT_INJECTION: forcing a failure. [ 598.239082][T15518] name failslab, interval 1, probability 0, space 0, times 0 [ 598.292212][T15518] CPU: 0 UID: 0 PID: 15518 Comm: syz.6.2091 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 598.303026][T15518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 598.313105][T15518] Call Trace: [ 598.316407][T15518] [ 598.319372][T15518] dump_stack_lvl+0x16c/0x1f0 [ 598.324092][T15518] should_fail_ex+0x497/0x5b0 [ 598.328803][T15518] ? fs_reclaim_acquire+0xae/0x150 [ 598.333950][T15518] should_failslab+0xc2/0x120 [ 598.338669][T15518] __kmalloc_noprof+0xce/0x4f0 [ 598.343469][T15518] ? d_absolute_path+0x137/0x1b0 [ 598.348454][T15518] ? tomoyo_encode2+0x100/0x3e0 [ 598.353344][T15518] tomoyo_encode2+0x100/0x3e0 [ 598.358066][T15518] tomoyo_realpath_from_path+0x1a7/0x710 [ 598.363747][T15518] tomoyo_path_number_perm+0x248/0x5b0 [ 598.369255][T15518] ? tomoyo_path_number_perm+0x235/0x5b0 [ 598.374949][T15518] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 598.381003][T15518] ? __pfx_lock_release+0x10/0x10 [ 598.386060][T15518] ? trace_lock_acquire+0x14e/0x1f0 [ 598.391300][T15518] ? lock_acquire+0x2f/0xb0 [ 598.395831][T15518] ? __fget_files+0x40/0x3a0 [ 598.400459][T15518] ? __fget_files+0x206/0x3a0 [ 598.405179][T15518] security_file_ioctl+0x9b/0x240 [ 598.410237][T15518] __x64_sys_ioctl+0xb7/0x200 [ 598.414947][T15518] do_syscall_64+0xcd/0x250 [ 598.419487][T15518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.425420][T15518] RIP: 0033:0x7f044af85d29 [ 598.429863][T15518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.449501][T15518] RSP: 002b:00007f044bd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.457948][T15518] RAX: ffffffffffffffda RBX: 00007f044b175fa0 RCX: 00007f044af85d29 [ 598.465947][T15518] RDX: 0000000000000004 RSI: 00000000c1205531 RDI: 0000000000000004 [ 598.474639][T15518] RBP: 00007f044bd71090 R08: 0000000000000000 R09: 0000000000000000 [ 598.482636][T15518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.490631][T15518] R13: 0000000000000000 R14: 00007f044b175fa0 R15: 00007ffd7ccffde8 [ 598.498651][T15518] [ 598.542222][T15518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.937815][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2094'. [ 599.571901][T15547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2100'. [ 599.654895][T15549] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2100'. [ 601.112587][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2105'. [ 602.796801][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 603.175097][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2114'. [ 604.193786][T15621] netlink: 74 bytes leftover after parsing attributes in process `syz.4.2119'. [ 604.761192][T15634] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2134'. [ 604.860342][T15639] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2134'. [ 604.879937][T15634] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2134'. [ 605.233367][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2128'. [ 605.270100][T15646] lo: entered promiscuous mode [ 606.047016][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2131'. [ 606.174243][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2138'. [ 606.429472][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2140'. [ 607.874779][T15704] __nla_validate_parse: 3 callbacks suppressed [ 607.874799][T15704] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2150'. [ 607.929207][T15707] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2150'. [ 608.344058][T15716] sp0: Synchronizing with TNC [ 608.359652][T15718] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2152'. [ 608.385986][T15715] [U] è [ 609.512830][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2155'. [ 610.745462][T15740] HfR: entered promiscuous mode [ 610.764973][T15740] openvswitch: HfR: Dropping previously announced user features [ 611.900871][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2177'. [ 613.257095][T15787] HfR: entered promiscuous mode [ 613.274438][T15787] openvswitch: HfR: Dropping previously announced user features [ 615.422878][T15816] syz.7.2182: vmalloc error: size 2166784, failed to allocated page array size 4232, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 615.441904][T15816] CPU: 1 UID: 0 PID: 15816 Comm: syz.7.2182 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 615.452714][T15816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 615.462794][T15816] Call Trace: [ 615.466088][T15816] [ 615.469031][T15816] dump_stack_lvl+0x16c/0x1f0 [ 615.473737][T15816] warn_alloc+0x24d/0x3a0 [ 615.478096][T15816] ? __pfx_warn_alloc+0x10/0x10 [ 615.482981][T15816] ? __get_vm_area_node+0x1b0/0x2f0 [ 615.488194][T15816] ? __get_vm_area_node+0x1dc/0x2f0 [ 615.493411][T15816] __vmalloc_node_range_noprof+0x1105/0x1530 [ 615.499416][T15816] ? ip_set_sockfn_get+0x185/0xc50 [ 615.504552][T15816] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.510897][T15816] ? __get_vm_area_node+0x1b0/0x2f0 [ 615.516111][T15816] ? __get_vm_area_node+0x1dc/0x2f0 [ 615.521326][T15816] __vmalloc_node_range_noprof+0xd85/0x1530 [ 615.527248][T15816] ? ip_set_sockfn_get+0x185/0xc50 [ 615.532382][T15816] ? __pfx___lock_acquire+0x10/0x10 [ 615.537605][T15816] ? ip_set_sockfn_get+0x185/0xc50 [ 615.542732][T15816] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.549080][T15816] ? apparmor_capable+0x114/0x1d0 [ 615.554125][T15816] ? ip_set_sockfn_get+0x185/0xc50 [ 615.559256][T15816] vmalloc_noprof+0x6b/0x90 [ 615.563771][T15816] ? ip_set_sockfn_get+0x185/0xc50 [ 615.568891][T15816] ip_set_sockfn_get+0x185/0xc50 [ 615.573835][T15816] ? __pfx_lock_release+0x10/0x10 [ 615.578875][T15816] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 615.584352][T15816] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 615.590352][T15816] nf_getsockopt+0x79/0xe0 [ 615.594788][T15816] ip_getsockopt+0x18e/0x1e0 [ 615.599384][T15816] ? __pfx_ip_getsockopt+0x10/0x10 [ 615.604499][T15816] ? __schedule+0xe60/0x5ad0 [ 615.609099][T15816] ? __pfx___lock_acquire+0x10/0x10 [ 615.614308][T15816] ipv6_getsockopt+0x230/0x280 [ 615.619086][T15816] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 615.624379][T15816] ? __pfx_mark_lock+0x10/0x10 [ 615.629163][T15816] sctp_getsockopt+0x1d2/0x7ae0 [ 615.634032][T15816] ? hlock_class+0x4e/0x130 [ 615.638546][T15816] ? mark_lock+0xb5/0xc60 [ 615.642888][T15816] ? aa_label_sk_perm+0x19d/0x5a0 [ 615.647935][T15816] ? __pfx_sctp_getsockopt+0x10/0x10 [ 615.653236][T15816] ? __lock_acquire+0x15a9/0x3c40 [ 615.658278][T15816] ? __pfx___lock_acquire+0x10/0x10 [ 615.663484][T15816] ? find_held_lock+0x2d/0x110 [ 615.668260][T15816] ? __might_fault+0x13b/0x190 [ 615.673035][T15816] ? __pfx_lock_release+0x10/0x10 [ 615.678059][T15816] ? trace_lock_acquire+0x14e/0x1f0 [ 615.683273][T15816] ? lock_acquire+0x2f/0xb0 [ 615.687785][T15816] ? __might_fault+0xe3/0x190 [ 615.692481][T15816] ? __might_fault+0xe3/0x190 [ 615.697172][T15816] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 615.703075][T15816] ? do_sock_getsockopt+0x3fe/0x870 [ 615.708290][T15816] do_sock_getsockopt+0x3fe/0x870 [ 615.713323][T15816] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 615.718870][T15816] ? lock_acquire+0x2f/0xb0 [ 615.723375][T15816] ? __fget_files+0x40/0x3a0 [ 615.727976][T15816] ? __fget_files+0x206/0x3a0 [ 615.732669][T15816] __sys_getsockopt+0x12f/0x260 [ 615.737535][T15816] __x64_sys_getsockopt+0xbd/0x160 [ 615.742655][T15816] ? do_syscall_64+0x91/0x250 [ 615.747343][T15816] ? lockdep_hardirqs_on+0x7c/0x110 [ 615.752550][T15816] do_syscall_64+0xcd/0x250 [ 615.757065][T15816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.762969][T15816] RIP: 0033:0x7f3001585d29 [ 615.767387][T15816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.787004][T15816] RSP: 002b:00007f30023b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 615.795427][T15816] RAX: ffffffffffffffda RBX: 00007f3001776080 RCX: 00007f3001585d29 [ 615.803403][T15816] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000008 [ 615.811373][T15816] RBP: 00007f3001601b08 R08: 0000000020000040 R09: 0000000000000000 [ 615.819343][T15816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.827313][T15816] R13: 0000000000000000 R14: 00007f3001776080 R15: 00007fffdf8f3268 [ 615.835315][T15816] [ 615.871586][T15816] Mem-Info: [ 615.874947][T15816] active_anon:20858 inactive_anon:0 isolated_anon:0 [ 615.874947][T15816] active_file:7292 inactive_file:54716 isolated_file:0 [ 615.874947][T15816] unevictable:768 dirty:424 writeback:0 [ 615.874947][T15816] slab_reclaimable:11581 slab_unreclaimable:109271 [ 615.874947][T15816] mapped:25620 shmem:2133 pagetables:970 [ 615.874947][T15816] sec_pagetables:0 bounce:0 [ 615.874947][T15816] kernel_misc_reclaimable:0 [ 615.874947][T15816] free:1263615 free_pcp:4077 free_cma:0 [ 615.973947][T15816] Node 0 active_anon:85332kB inactive_anon:0kB active_file:29168kB inactive_file:218792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104180kB dirty:1696kB writeback:0kB shmem:8796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13308kB pagetables:3880kB sec_pagetables:0kB all_unreclaimable? no [ 616.009995][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2185'. [ 616.077765][T15816] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 616.223938][T15816] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.335526][T15816] lowmem_reserve[]: 0 2491 2492 0 0 [ 616.340847][T15816] Node 0 DMA32 free:1148376kB boost:38912kB min:73112kB low:81660kB high:90208kB reserved_highatomic:0KB active_anon:87324kB inactive_anon:0kB active_file:29168kB inactive_file:217960kB unevictable:1536kB writepending:1812kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:1748kB local_pcp:1192kB free_cma:0kB [ 616.377841][T15816] lowmem_reserve[]: 0 0 0 0 0 [ 616.382750][T15816] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 616.409720][T15816] lowmem_reserve[]: 0 0 0 0 0 [ 616.414570][T15816] Node 1 Normal free:3888660kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12440kB local_pcp:2048kB free_cma:0kB [ 616.445383][T15816] lowmem_reserve[]: 0 0 0 0 0 [ 616.450377][T15816] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 616.463349][T15816] Node 0 DMA32: 872*4kB (UME) 1924*8kB (ME) 1370*16kB (ME) 1176*32kB (ME) 844*64kB (ME) 473*128kB (UME) 233*256kB (UM) 88*512kB (UME) 62*1024kB (UME) 28*2048kB (UME) 178*4096kB (UM) = 1147616kB [ 616.484323][T15816] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 616.496008][T15816] Node 1 Normal: 157*4kB (UM) 64*8kB (UME) 52*16kB (UME) 241*32kB (UME) 95*64kB (UM) 41*128kB (UME) 22*256kB (UME) 7*512kB (UM) 8*1024kB (UME) 4*2048kB (UME) 938*4096kB (UM) = 3888660kB [ 616.572262][T15816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.581866][T15816] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.584063][T15843] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2192'. [ 616.623092][T15816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.642289][T15816] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.672222][T15816] 65626 total pagecache pages [ 616.681399][T15816] 0 pages in swap cache [ 616.691561][T15816] Free swap = 124340kB [ 616.714138][T15816] Total swap = 124996kB [ 616.742214][T15816] 2097051 pages RAM [ 616.746057][T15816] 0 pages HighMem/MovableOnly [ 616.750752][T15816] 427367 pages reserved [ 616.769631][T15816] 0 pages cma reserved [ 616.779267][T15845] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2192'. [ 616.804274][T15843] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2192'. [ 616.917812][T15845] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2192'. [ 618.075247][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 618.156279][T15857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2195'. [ 619.463981][T15880] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2201'. [ 619.521015][T15882] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2201'. [ 619.560281][T15882] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2201'. [ 621.434986][T15908] __nla_validate_parse: 2 callbacks suppressed [ 621.435009][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2206'. [ 624.659642][T15960] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2224'. [ 624.757656][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.772189][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.398357][T15974] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2229'. [ 625.463364][T15976] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2229'. [ 625.483312][T15974] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2229'. [ 625.682448][T15974] netlink: 98 bytes leftover after parsing attributes in process `syz.8.2229'. [ 626.831389][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2231'. [ 627.519085][T15998] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2235'. [ 629.080605][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2239'. [ 629.121966][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2239'. [ 631.340983][T16030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2245'. [ 631.403430][T16030] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2245'. [ 632.574625][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2250'. [ 632.648139][T16046] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2250'. [ 633.902586][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2256'. [ 634.092822][T16066] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2256'. [ 634.165174][T16062] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2256'. [ 634.247467][T16064] netlink: 134 bytes leftover after parsing attributes in process `syz.7.2256'. [ 635.691258][ T29] audit: type=1807 audit(4294967452.650:18): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 635.697697][T16088] ima: policy update failed [ 635.728226][ T29] audit: type=1802 audit(4294967452.650:19): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.2262" res=0 errno=0 [ 635.786501][ T29] audit: type=1802 audit(4294967452.690:20): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2262" res=0 errno=0 [ 637.412239][T16102] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2265'. [ 637.446634][T16102] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2265'. [ 637.615718][T16105] Invalid ELF header magic: != ELF [ 638.710951][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2269'. [ 638.765597][T16120] vcan0: entered promiscuous mode [ 639.211856][ T29] audit: type=1807 audit(4294967456.170:21): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 639.231179][T16131] ima: policy update failed [ 639.243827][ T29] audit: type=1802 audit(4294967456.190:22): pid=16131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.2274" res=0 errno=0 [ 639.290273][ T29] audit: type=1802 audit(4294967456.210:23): pid=16131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2274" res=0 errno=0 [ 639.300584][T16133] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2276'. [ 639.323038][T16133] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2276'. [ 639.333557][T16133] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2276'. [ 639.357490][T16133] netlink: 98 bytes leftover after parsing attributes in process `syz.7.2276'. [ 640.802851][T16164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2282'. [ 641.072132][T16168] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2282'. [ 641.114682][T16164] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2282'. [ 641.118731][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2285'. [ 641.256112][T16174] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2285'. [ 641.906757][T16183] vivid-007: ================= START STATUS ================= [ 641.914885][T16183] vivid-007: Generate PTS: true [ 641.920020][T16183] vivid-007: Generate SCR: true [ 641.925203][T16183] tpg source WxH: 640x360 (Y'CbCr) [ 641.930348][T16183] tpg field: 1 [ 641.933832][T16183] tpg crop: 640x360@0x0 [ 641.938078][T16183] tpg compose: 640x360@0x0 [ 641.942858][T16183] tpg colorspace: 8 [ 641.946692][T16183] tpg transfer function: 0/0 [ 641.953025][T16183] tpg Y'CbCr encoding: 0/0 [ 641.958767][T16183] tpg quantization: 0/0 [ 641.963654][T16183] tpg RGB range: 0/2 [ 641.967816][T16183] vivid-007: ================== END STATUS ================== [ 644.594300][T16240] __nla_validate_parse: 9 callbacks suppressed [ 644.594319][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2307'. [ 644.610830][T16240] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2307'. [ 644.620448][T16240] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2307'. [ 644.810897][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2310'. [ 645.984761][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2317'. [ 646.005489][T16280] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2317'. [ 646.040106][T16280] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2317'. [ 646.585541][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2325'. [ 647.663885][T16314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2330'. [ 647.691671][T16314] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2330'. [ 649.936838][T16348] __nla_validate_parse: 3 callbacks suppressed [ 649.936860][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2340'. [ 649.990303][T16349] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2340'. [ 650.265078][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2341'. [ 650.303292][T16351] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2341'. [ 650.361437][T16351] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2341'. [ 650.435947][T16351] netlink: 134 bytes leftover after parsing attributes in process `syz.6.2341'. [ 651.040465][T16355] Invalid ELF header magic: != ELF [ 652.877417][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2350'. [ 653.183146][T16389] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2353'. [ 653.212344][T16389] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2353'. [ 653.268027][T16389] netlink: 98 bytes leftover after parsing attributes in process `syz.6.2353'. [ 654.397075][T16408] raw_sendmsg: syz.6.2358 forgot to set AF_INET. Fix it! [ 655.135695][T16420] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 655.144355][T16420] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 655.169096][T16420] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 655.186111][T16420] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 655.196252][T16420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 655.221155][T16420] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 655.250009][T16420] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 655.264917][T16420] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 655.281166][T16420] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 655.300404][T16420] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 655.306421][T16441] sp0: Synchronizing with TNC [ 655.941480][T16458] __nla_validate_parse: 4 callbacks suppressed [ 655.941500][T16458] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2376'. [ 655.958434][T16458] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2376'. [ 655.971290][T16458] netlink: 138 bytes leftover after parsing attributes in process `syz.8.2376'. [ 656.612016][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 657.155238][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.183852][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2385'. [ 657.292192][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.312285][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.426820][T16498] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2389'. [ 657.446573][T16498] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2389'. [ 657.468271][T16498] netlink: 282 bytes leftover after parsing attributes in process `syz.4.2389'. [ 658.652017][T16531] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2399'. [ 658.693350][T16531] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2399'. [ 658.731450][T16531] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2399'. [ 659.232482][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 659.325960][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 659.392839][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 661.334759][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 661.400687][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 661.475655][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 661.596693][T16613] __nla_validate_parse: 10 callbacks suppressed [ 661.596715][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2426'. [ 662.503085][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2429'. [ 663.046966][T16644] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2437'. [ 664.272361][T16674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2449'. [ 665.743501][T16716] netlink: 'syz.4.2461': attribute type 1 has an invalid length. [ 667.003964][T16732] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2477'. [ 667.058957][T16732] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2477'. [ 667.123054][T16732] netlink: 250 bytes leftover after parsing attributes in process `syz.7.2477'. [ 667.583949][T16755] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2479'. [ 667.594672][T16755] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2479'. [ 669.598914][T16808] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2496'. [ 669.609819][T16808] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2496'. [ 669.725763][T16808] netlink: 210 bytes leftover after parsing attributes in process `syz.6.2496'. [ 669.860749][T16809] netlink: 'syz.8.2495': attribute type 1 has an invalid length. [ 671.732577][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2506'. [ 672.074392][T16846] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 672.197402][T16855] FAULT_INJECTION: forcing a failure. [ 672.197402][T16855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.210802][T16855] CPU: 0 UID: 0 PID: 16855 Comm: syz.6.2511 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 672.221596][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 672.231683][T16855] Call Trace: [ 672.234986][T16855] [ 672.237944][T16855] dump_stack_lvl+0x16c/0x1f0 [ 672.242656][T16855] should_fail_ex+0x497/0x5b0 [ 672.247387][T16855] _copy_from_iter+0x29b/0x1400 [ 672.252282][T16855] ? trace_lock_acquire+0x14e/0x1f0 [ 672.257518][T16855] ? __alloc_skb+0x200/0x380 [ 672.262146][T16855] ? __pfx__copy_from_iter+0x10/0x10 [ 672.267468][T16855] ? __virt_addr_valid+0x1a4/0x590 [ 672.272617][T16855] ? __virt_addr_valid+0x5e/0x590 [ 672.277695][T16855] ? __phys_addr_symbol+0x30/0x80 [ 672.282764][T16855] ? __check_object_size+0x488/0x710 [ 672.288097][T16855] netlink_sendmsg+0x813/0xd70 [ 672.292903][T16855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.298234][T16855] ____sys_sendmsg+0x9ae/0xb40 [ 672.303031][T16855] ? copy_msghdr_from_user+0x10b/0x160 [ 672.308530][T16855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.313860][T16855] ___sys_sendmsg+0x135/0x1e0 [ 672.318577][T16855] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.323827][T16855] ? __pfx_lock_release+0x10/0x10 [ 672.328878][T16855] ? trace_lock_acquire+0x14e/0x1f0 [ 672.334123][T16855] ? __fget_files+0x206/0x3a0 [ 672.338842][T16855] __sys_sendmsg+0x16e/0x220 [ 672.343470][T16855] ? __pfx___sys_sendmsg+0x10/0x10 [ 672.348645][T16855] do_syscall_64+0xcd/0x250 [ 672.353193][T16855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.359123][T16855] RIP: 0033:0x7f044af85d29 [ 672.363562][T16855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.383198][T16855] RSP: 002b:00007f044bd71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.391641][T16855] RAX: ffffffffffffffda RBX: 00007f044b175fa0 RCX: 00007f044af85d29 [ 672.399641][T16855] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000003 [ 672.407639][T16855] RBP: 00007f044bd71090 R08: 0000000000000000 R09: 0000000000000000 [ 672.415647][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.423650][T16855] R13: 0000000000000000 R14: 00007f044b175fa0 R15: 00007ffd7ccffde8 [ 672.431667][T16855] [ 672.434772][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.696939][T16867] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2513'. [ 672.787891][T16867] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2513'. [ 672.798074][T16867] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2513'. [ 672.830681][T16867] netlink: 174 bytes leftover after parsing attributes in process `syz.8.2513'. [ 674.143736][T16909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2524'. [ 674.163411][T16909] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2524'. [ 674.763082][T16926] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2530'. [ 674.773443][T16926] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2530'. [ 674.803998][T16926] netlink: 290 bytes leftover after parsing attributes in process `syz.7.2530'. [ 675.068641][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2532'. [ 676.181932][ T29] audit: type=1800 audit(4294967304.370:24): pid=16960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2543" name="discovery_nqn" dev="configfs" ino=58497 res=0 errno=0 [ 677.832228][ T29] audit: type=1800 audit(4294967306.020:25): pid=16997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2556" name="discovery_nqn" dev="configfs" ino=58068 res=0 errno=0 [ 678.378857][T17013] __nla_validate_parse: 12 callbacks suppressed [ 678.378878][T17013] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2562'. [ 679.407777][T17038] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2571'. [ 679.418960][T17038] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2571'. [ 679.429691][T17038] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2571'. [ 679.449962][T17038] netlink: 250 bytes leftover after parsing attributes in process `syz.8.2571'. [ 679.789259][T17044] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2573'. [ 680.902393][T17072] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2582'. [ 682.352579][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2597'. [ 682.383821][T17114] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2597'. [ 682.406522][T17114] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2597'. [ 684.646974][T17179] snd_aloop snd_aloop.0: control 4365:65536:6:é'x?F¢é/èìzFË·fCªáª:2097156 is already present [ 685.842606][T17184] __nla_validate_parse: 1 callbacks suppressed [ 685.842629][T17184] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2619'. [ 686.195230][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.202666][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.041451][T17237] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2636'. [ 687.082645][T17237] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2636'. [ 687.112404][T17237] netlink: 282 bytes leftover after parsing attributes in process `syz.6.2636'. [ 687.263328][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 688.443351][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2637'. [ 688.468331][T17274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2649'. [ 688.503887][T17274] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2649'. [ 688.519565][T17274] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2649'. [ 688.559334][T17274] netlink: 282 bytes leftover after parsing attributes in process `syz.6.2649'. [ 691.361856][T17344] __nla_validate_parse: 9 callbacks suppressed [ 691.361877][T17344] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2671'. [ 693.353180][T17385] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2682'. [ 693.403238][T17385] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2682'. [ 693.721272][T17385] netlink: 282 bytes leftover after parsing attributes in process `syz.8.2682'. [ 693.768354][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 693.902457][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 694.635810][T17394] syz.4.2686 (17394) used greatest stack depth: 20416 bytes left [ 694.748979][T17406] FAULT_INJECTION: forcing a failure. [ 694.748979][T17406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.820939][T17406] CPU: 1 UID: 0 PID: 17406 Comm: syz.8.2689 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 694.831764][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 694.841847][T17406] Call Trace: [ 694.845146][T17406] [ 694.848098][T17406] dump_stack_lvl+0x16c/0x1f0 [ 694.852815][T17406] should_fail_ex+0x497/0x5b0 [ 694.857529][T17406] _copy_from_user+0x2e/0xd0 [ 694.862168][T17406] do_sys_poll+0x1d6/0xde0 [ 694.866613][T17406] ? __pfx_mark_lock+0x10/0x10 [ 694.871430][T17406] ? __pfx_do_sys_poll+0x10/0x10 [ 694.876392][T17406] ? __pfx___lock_acquire+0x10/0x10 [ 694.881658][T17406] ? __pfx_timespec64_add_safe+0x10/0x10 [ 694.887296][T17406] ? ktime_get_ts64+0x2d4/0x400 [ 694.892164][T17406] ? read_tsc+0x9/0x20 [ 694.896247][T17406] ? ktime_get_ts64+0x256/0x400 [ 694.901115][T17406] __x64_sys_poll+0x1a8/0x450 [ 694.905799][T17406] ? __pfx___x64_sys_poll+0x10/0x10 [ 694.911006][T17406] do_syscall_64+0xcd/0x250 [ 694.915520][T17406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.921428][T17406] RIP: 0033:0x7fb186385d29 [ 694.925845][T17406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.945457][T17406] RSP: 002b:00007fb18724e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 694.953875][T17406] RAX: ffffffffffffffda RBX: 00007fb186575fa0 RCX: 00007fb186385d29 [ 694.961847][T17406] RDX: 0000000000000108 RSI: 0000000000000005 RDI: 0000000020000040 [ 694.969819][T17406] RBP: 00007fb18724e090 R08: 0000000000000000 R09: 0000000000000000 [ 694.977789][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.985758][T17406] R13: 0000000000000000 R14: 00007fb186575fa0 R15: 00007ffdcea734c8 [ 694.993744][T17406] [ 695.480123][T17428] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2696'. [ 696.261485][T17450] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 697.046908][T17460] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2706'. [ 699.603841][T17507] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2719'. [ 699.641865][T17507] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2719'. [ 699.678095][T17507] netlink: 294 bytes leftover after parsing attributes in process `syz.7.2719'. [ 700.870229][T17537] ptrace attach of "./syz-executor exec"[7471] was attempted by "./syz-executor exec"[17537] [ 701.902823][T17559] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2732'. [ 702.248625][T17569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2736'. [ 702.261365][T17567] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2735'. [ 703.541970][T17591] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2743'. [ 704.507799][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2751'. [ 705.015196][T17632] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2754'. [ 705.420320][T17642] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2765'. [ 707.103892][T17674] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2767'. [ 709.118620][T17714] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2776'. [ 709.152834][T17714] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2776'. [ 709.218603][T17714] netlink: 294 bytes leftover after parsing attributes in process `syz.4.2776'. [ 710.989330][T17747] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2787'. [ 711.155717][T17758] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2791'. [ 711.671703][ T7471] bridge0: port 3(syz_tun) entered disabled state [ 711.691537][ T7471] syz_tun (unregistering): left allmulticast mode [ 711.700333][ T7471] syz_tun (unregistering): left promiscuous mode [ 711.732680][ T7471] bridge0: port 3(syz_tun) entered disabled state [ 712.230387][T12705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.636685][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.645791][T12705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.646984][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.666895][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.746680][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.756375][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 712.763993][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.835828][T12705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.960126][T12705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.995985][T17794] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2804'. [ 713.535279][T17779] chnl_net:caif_netlink_parms(): no params data found [ 713.735638][T17805] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 713.803946][T17811] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 713.860960][T12705] bridge_slave_1: left allmulticast mode [ 713.885347][T12705] bridge_slave_1: left promiscuous mode [ 713.892902][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.903255][T12705] bridge_slave_0: left allmulticast mode [ 713.908929][T12705] bridge_slave_0: left promiscuous mode [ 713.915179][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.832204][ T5841] Bluetooth: hci0: command tx timeout [ 715.619251][T12705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.636461][T12705] bond0 (unregistering): Released all slaves [ 715.753534][T12705] HSR: left promiscuous mode [ 715.948317][T17779] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.965964][T17779] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.982380][T17779] bridge_slave_0: entered allmulticast mode [ 715.999960][T17779] bridge_slave_0: entered promiscuous mode [ 716.020107][T17779] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.032319][T17779] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.042330][T17779] bridge_slave_1: entered allmulticast mode [ 716.049040][T17779] bridge_slave_1: entered promiscuous mode [ 716.177189][T17779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.222884][T17779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.913096][ T5841] Bluetooth: hci0: command tx timeout [ 716.997166][T17779] team0: Port device team_slave_0 added [ 717.071740][T17847] MTRR 1 not used [ 717.108966][T17779] team0: Port device team_slave_1 added [ 717.205289][T17850] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 717.263575][T17851] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 717.274711][T17779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.320854][T17779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.336797][T17853] Process accounting resumed [ 717.349132][T17779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.531463][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.539758][T12705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.551891][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.560250][T12705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.587583][T12705] veth1_vlan: left promiscuous mode [ 717.671237][T12705] veth0_vlan: left promiscuous mode [ 718.908607][T12705] team0 (unregistering): Port device team_slave_1 removed [ 718.965047][T12705] team0 (unregistering): Port device team_slave_0 removed [ 718.994318][ T5841] Bluetooth: hci0: command tx timeout [ 719.358693][T17779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.365899][T17779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.396929][T17779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.420296][T17875] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 719.434621][T17872] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2823'. [ 719.473867][T17876] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 719.607901][T17880] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 719.654443][T17883] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 719.896057][T17779] hsr_slave_0: entered promiscuous mode [ 719.923111][T17779] hsr_slave_1: entered promiscuous mode [ 719.932748][T17779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.940352][T17779] Cannot create hsr debugfs directory [ 719.963478][T17881] misc userio: Invalid payload size [ 720.057020][T17888] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 721.072433][ T5841] Bluetooth: hci0: command tx timeout [ 721.213403][T17904] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 721.246144][T17905] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 721.412858][T17779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 721.424499][T17907] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 721.443002][T17779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 721.458220][T17779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 721.486097][T17779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 721.569785][T17910] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 721.624409][T17911] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 721.669390][T17779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.711070][T17779] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.788653][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.795872][T12701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.834145][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.841325][T12701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.883144][T17921] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2833'. [ 722.395031][T17779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.814321][T17947] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2838'. [ 722.862350][T17947] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2838'. [ 722.961497][T17779] veth0_vlan: entered promiscuous mode [ 723.026546][T17779] veth1_vlan: entered promiscuous mode [ 723.067810][T17779] veth0_macvtap: entered promiscuous mode [ 723.100365][T17779] veth1_macvtap: entered promiscuous mode [ 723.139864][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.174208][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.194500][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.207113][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.217069][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.227677][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.237713][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.248183][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.258692][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.269946][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.280049][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.290578][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.300468][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.311297][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.323504][T17779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.358415][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.369343][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.379750][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.392181][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.427891][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.454298][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.482580][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.502102][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.522116][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.542595][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.562179][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.592202][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.611022][T17779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.632453][T17779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.653246][T17779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.683924][T17779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.703266][T17779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.722113][T17779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.730857][T17779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.779942][T17961] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2842'. [ 723.919065][T12709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.964105][T12709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.030349][T12701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.052399][T12701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.664741][T17986] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2850'. [ 727.598125][T18016] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2861'. [ 727.620791][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2860'. [ 727.647746][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2860'. [ 729.242509][T18048] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2870'. [ 729.520619][T18052] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2878'. [ 729.773975][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.830752][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.839526][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 729.849046][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 729.880180][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 729.887763][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 730.335360][T12709] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.607022][T12709] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.802845][T12709] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.086425][T12709] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.562372][T12709] bridge_slave_1: left allmulticast mode [ 731.568350][T12709] bridge_slave_1: left promiscuous mode [ 731.583236][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.593313][T12709] bridge_slave_0: left allmulticast mode [ 731.599493][T12709] bridge_slave_0: left promiscuous mode [ 731.617081][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.955128][ T5143] Bluetooth: hci2: command tx timeout [ 732.090607][T12709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.104784][T12709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.115051][T12709] bond0 (unregistering): Released all slaves [ 732.172655][T18059] chnl_net:caif_netlink_parms(): no params data found [ 732.225870][T12709] HfR: left promiscuous mode [ 732.371559][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 732.393835][T18102] EXT4-fs error: 5 callbacks suppressed [ 732.393852][T18102] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 732.417667][T18098] bond0: no command found in slaves file - use +ifname or -ifname [ 732.483846][T18105] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 732.523696][T18059] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.530929][T18059] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.553143][T18059] bridge_slave_0: entered allmulticast mode [ 732.560388][T18059] bridge_slave_0: entered promiscuous mode [ 732.634763][T18059] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.641891][T18059] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.661585][T18059] bridge_slave_1: entered allmulticast mode [ 732.673891][T18059] bridge_slave_1: entered promiscuous mode [ 732.740735][T18059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.769220][T18059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.933293][T18059] team0: Port device team_slave_0 added [ 732.955922][T18116] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 733.008785][T18117] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 733.068190][T18059] team0: Port device team_slave_1 added [ 733.204402][T18059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.218425][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.296234][T18059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.331395][T18121] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 733.355533][T12709] hsr_slave_0: left promiscuous mode [ 733.390316][T12709] hsr_slave_1: left promiscuous mode [ 733.397588][T12709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.416900][T12709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.453006][T12709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.460556][T12709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.615317][T12709] veth1_macvtap: left promiscuous mode [ 733.651537][T12709] veth0_macvtap: left promiscuous mode [ 733.694439][T12709] veth1_vlan: left promiscuous mode [ 733.708074][T12709] veth0_vlan: left promiscuous mode [ 734.082773][ T5143] Bluetooth: hci2: command tx timeout [ 734.397812][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 734.407137][T18137] FAULT_INJECTION: forcing a failure. [ 734.407137][T18137] name failslab, interval 1, probability 0, space 0, times 0 [ 734.434399][T18137] CPU: 0 UID: 0 PID: 18137 Comm: syz.4.2892 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 734.445234][T18137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 734.455318][T18137] Call Trace: [ 734.458614][T18137] [ 734.461553][T18137] dump_stack_lvl+0x16c/0x1f0 [ 734.466266][T18137] should_fail_ex+0x497/0x5b0 [ 734.470975][T18137] should_failslab+0xc2/0x120 [ 734.475669][T18137] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 734.481057][T18137] ? skb_clone+0x190/0x3f0 [ 734.485493][T18137] skb_clone+0x190/0x3f0 [ 734.490270][T18137] netlink_deliver_tap+0xafd/0xca0 [ 734.495395][T18137] netlink_dump+0xb60/0xd00 [ 734.499909][T18137] ? __pfx_netlink_dump+0x10/0x10 [ 734.504951][T18137] ? nf_tables_dump_sets_start+0x3e/0xa0 [ 734.510595][T18137] ? kmemdup_noprof+0x49/0x60 [ 734.515283][T18137] __netlink_dump_start+0x6d9/0x980 [ 734.520512][T18137] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 734.526355][T18137] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 734.532005][T18137] nf_tables_getset+0x79f/0x960 [ 734.536891][T18137] ? __pfx_nf_tables_getset+0x10/0x10 [ 734.542368][T18137] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 734.548561][T18137] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 734.554252][T18137] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 734.560339][T18137] ? net_generic+0xea/0x2a0 [ 734.564851][T18137] ? __pfx_lock_release+0x10/0x10 [ 734.569981][T18137] ? __nla_parse+0x40/0x60 [ 734.574430][T18137] ? __pfx_nf_tables_getset+0x10/0x10 [ 734.579814][T18137] nfnetlink_rcv_msg+0x560/0x11e0 [ 734.584859][T18137] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 734.590331][T18137] ? find_held_lock+0x2d/0x110 [ 734.595150][T18137] netlink_rcv_skb+0x165/0x410 [ 734.599931][T18137] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 734.605408][T18137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 734.610706][T18137] ? __pfx_aa_get_newest_label+0x10/0x10 [ 734.616368][T18137] ? bpf_lsm_capable+0x9/0x10 [ 734.621053][T18137] ? security_capable+0x7e/0x260 [ 734.626003][T18137] ? ns_capable+0xd7/0x110 [ 734.630440][T18137] nfnetlink_rcv+0x1b4/0x430 [ 734.635045][T18137] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 734.640164][T18137] ? netlink_deliver_tap+0x1ae/0xca0 [ 734.645462][T18137] netlink_unicast+0x53c/0x7f0 [ 734.650247][T18137] ? __pfx_netlink_unicast+0x10/0x10 [ 734.655634][T18137] ? __phys_addr_symbol+0x30/0x80 [ 734.660673][T18137] ? __check_object_size+0x488/0x710 [ 734.665989][T18137] netlink_sendmsg+0x8b8/0xd70 [ 734.670766][T18137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.676067][T18137] ____sys_sendmsg+0x9ae/0xb40 [ 734.680909][T18137] ? copy_msghdr_from_user+0x10b/0x160 [ 734.686384][T18137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.691682][T18137] ? get_pid_task+0xfc/0x250 [ 734.696296][T18137] ___sys_sendmsg+0x135/0x1e0 [ 734.701006][T18137] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.706247][T18137] ? __pfx_vfs_write+0x10/0x10 [ 734.711027][T18137] ? do_sys_openat2+0xb1/0x1e0 [ 734.715809][T18137] __sys_sendmsg+0x16e/0x220 [ 734.720410][T18137] ? __pfx___sys_sendmsg+0x10/0x10 [ 734.725549][T18137] do_syscall_64+0xcd/0x250 [ 734.730069][T18137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.735973][T18137] RIP: 0033:0x7f9cba985d29 [ 734.740416][T18137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.760293][T18137] RSP: 002b:00007f9cbb794038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.768712][T18137] RAX: ffffffffffffffda RBX: 00007f9cbab75fa0 RCX: 00007f9cba985d29 [ 734.776688][T18137] RDX: 0000000004000000 RSI: 0000000020000180 RDI: 000000000000000a [ 734.784681][T18137] RBP: 00007f9cbb794090 R08: 0000000000000000 R09: 0000000000000000 [ 734.792653][T18137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 734.800624][T18137] R13: 0000000000000000 R14: 00007f9cbab75fa0 R15: 00007ffc210c5008 [ 734.808612][T18137] [ 735.413839][T12709] team0 (unregistering): Port device team_slave_1 removed [ 735.508349][T12709] team0 (unregistering): Port device team_slave_0 removed [ 735.555389][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 736.121894][ T5143] Bluetooth: hci2: command tx timeout [ 736.683770][T18059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.712171][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.749191][T18059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.974595][T18059] hsr_slave_0: entered promiscuous mode [ 737.011858][T18059] hsr_slave_1: entered promiscuous mode [ 737.029602][T18059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.047800][T18059] Cannot create hsr debugfs directory [ 737.480312][T18151] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 737.574183][T18153] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 737.701337][T18156] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2895'. [ 737.740742][T18059] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 737.792786][T18059] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 737.876303][T18059] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 737.927740][T18059] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 738.169548][T18168] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 738.192679][ T5143] Bluetooth: hci2: command tx timeout [ 738.203902][T18170] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 738.534521][T18059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.588095][T18173] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 738.607286][T18059] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.632715][T18174] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 738.644928][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.654336][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.678987][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.686166][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.764732][T18175] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 739.015732][T18180] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 739.159526][T18184] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 739.626638][T18189] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 739.762725][T18059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.161534][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2902'. [ 740.308783][T18059] veth0_vlan: entered promiscuous mode [ 740.361155][T18059] veth1_vlan: entered promiscuous mode [ 740.485839][T18059] veth0_macvtap: entered promiscuous mode [ 740.619483][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2902'. [ 740.700741][T18059] veth1_macvtap: entered promiscuous mode [ 740.731337][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.759629][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.802767][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.834472][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.868300][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.908526][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.929362][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.950878][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.970578][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.000632][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.020792][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.042231][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.057836][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.079490][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.105150][T18059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.147437][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.201169][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.227306][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.270096][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.290775][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.304223][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.325899][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.346828][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.362446][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.384127][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.422544][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.442288][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.460699][T18059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.471438][T18059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.496160][T18059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.538277][T18059] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.549655][T18059] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.558674][T18059] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.567804][T18059] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.665022][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.682249][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.765236][T11394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.782232][T11394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.236251][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2869'. [ 742.284085][T18253] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2909'. [ 742.465133][T18257] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2909'. [ 743.421562][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2918'. [ 743.829833][T18292] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2923'. [ 743.845569][T18292] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2923'. [ 743.978578][T18292] netlink: 134 bytes leftover after parsing attributes in process `syz.9.2923'. [ 745.064141][T18317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2930'. [ 745.088540][T18317] FAULT_INJECTION: forcing a failure. [ 745.088540][T18317] name failslab, interval 1, probability 0, space 0, times 0 [ 745.101679][T18317] CPU: 0 UID: 0 PID: 18317 Comm: syz.6.2930 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 745.112455][T18317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 745.122515][T18317] Call Trace: [ 745.125795][T18317] [ 745.128725][T18317] dump_stack_lvl+0x16c/0x1f0 [ 745.133418][T18317] should_fail_ex+0x497/0x5b0 [ 745.138104][T18317] should_failslab+0xc2/0x120 [ 745.142792][T18317] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 745.148172][T18317] ? trace_lock_acquire+0x14e/0x1f0 [ 745.153381][T18317] ? skb_clone+0x190/0x3f0 [ 745.157813][T18317] skb_clone+0x190/0x3f0 [ 745.162072][T18317] dev_queue_xmit_nit+0x38f/0xbc0 [ 745.167125][T18317] dev_hard_start_xmit+0x283/0x7b0 [ 745.172250][T18317] __dev_queue_xmit+0x7f0/0x43e0 [ 745.177202][T18317] ? __pfx___dev_queue_xmit+0x10/0x10 [ 745.182605][T18317] ? rcu_is_watching+0x12/0xc0 [ 745.187379][T18317] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 745.192763][T18317] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 745.198409][T18317] ? __copy_skb_header+0x2e8/0x5b0 [ 745.203529][T18317] ? __skb_clone+0x570/0x760 [ 745.208137][T18317] netlink_deliver_tap+0xa61/0xca0 [ 745.213258][T18317] netlink_dump+0xb60/0xd00 [ 745.217766][T18317] ? __pfx_netlink_dump+0x10/0x10 [ 745.222807][T18317] ? nf_tables_dump_sets_start+0x3e/0xa0 [ 745.228448][T18317] ? kmemdup_noprof+0x49/0x60 [ 745.233134][T18317] __netlink_dump_start+0x6d9/0x980 [ 745.238352][T18317] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 745.244185][T18317] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 745.249840][T18317] nf_tables_getset+0x79f/0x960 [ 745.254717][T18317] ? __pfx_nf_tables_getset+0x10/0x10 [ 745.260109][T18317] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 745.266274][T18317] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 745.271920][T18317] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 745.277999][T18317] ? net_generic+0xea/0x2a0 [ 745.282513][T18317] ? __pfx_lock_release+0x10/0x10 [ 745.287566][T18317] ? __nla_parse+0x40/0x60 [ 745.292001][T18317] ? __pfx_nf_tables_getset+0x10/0x10 [ 745.297388][T18317] nfnetlink_rcv_msg+0x560/0x11e0 [ 745.302443][T18317] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 745.307914][T18317] ? find_held_lock+0x2d/0x110 [ 745.312721][T18317] netlink_rcv_skb+0x165/0x410 [ 745.317493][T18317] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 745.323050][T18317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.328340][T18317] ? __pfx_aa_get_newest_label+0x10/0x10 [ 745.334004][T18317] ? bpf_lsm_capable+0x9/0x10 [ 745.338686][T18317] ? security_capable+0x7e/0x260 [ 745.343644][T18317] ? ns_capable+0xd7/0x110 [ 745.348070][T18317] nfnetlink_rcv+0x1b4/0x430 [ 745.352666][T18317] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 745.357805][T18317] ? netlink_deliver_tap+0x1ae/0xca0 [ 745.363114][T18317] netlink_unicast+0x53c/0x7f0 [ 745.367908][T18317] ? __pfx_netlink_unicast+0x10/0x10 [ 745.373210][T18317] ? __phys_addr_symbol+0x30/0x80 [ 745.378247][T18317] ? __check_object_size+0x488/0x710 [ 745.383553][T18317] netlink_sendmsg+0x8b8/0xd70 [ 745.388336][T18317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.393652][T18317] ____sys_sendmsg+0x9ae/0xb40 [ 745.398434][T18317] ? copy_msghdr_from_user+0x10b/0x160 [ 745.403911][T18317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.409220][T18317] ? get_pid_task+0xfc/0x250 [ 745.413830][T18317] ___sys_sendmsg+0x135/0x1e0 [ 745.418531][T18317] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.423778][T18317] ? __pfx_vfs_write+0x10/0x10 [ 745.428574][T18317] ? do_sys_openat2+0xb1/0x1e0 [ 745.433373][T18317] __sys_sendmsg+0x16e/0x220 [ 745.437986][T18317] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.443132][T18317] do_syscall_64+0xcd/0x250 [ 745.447686][T18317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.453599][T18317] RIP: 0033:0x7f044af85d29 [ 745.458018][T18317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.477643][T18317] RSP: 002b:00007f044bd71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.486071][T18317] RAX: ffffffffffffffda RBX: 00007f044b175fa0 RCX: 00007f044af85d29 [ 745.494052][T18317] RDX: 0000000004000000 RSI: 0000000020000180 RDI: 000000000000000a [ 745.502027][T18317] RBP: 00007f044bd71090 R08: 0000000000000000 R09: 0000000000000000 [ 745.510005][T18317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.517976][T18317] R13: 0000000000000000 R14: 00007f044b175fa0 R15: 00007ffd7ccffde8 [ 745.525966][T18317] [ 745.875691][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'. [ 746.945317][T18353] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2940'. [ 746.955454][T18353] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2940'. [ 746.967684][T18353] netlink: 134 bytes leftover after parsing attributes in process `syz.9.2940'. [ 746.969753][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2938'. [ 747.332421][T18362] QAT: failed to copy from user cfg_data. [ 747.640153][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.647004][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.199295][T18384] EXT4-fs error: 9 callbacks suppressed [ 748.199314][T18384] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 749.199567][T18411] __nla_validate_parse: 2 callbacks suppressed [ 749.199590][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2957'. [ 749.918261][T18422] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2960'. [ 749.995334][T18422] vcan0: entered promiscuous mode [ 750.026035][T18430] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2961'. [ 750.097546][T18427] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2961'. [ 750.119727][T18427] netlink: 98 bytes leftover after parsing attributes in process `syz.9.2961'. [ 750.791422][T18445] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 751.003548][T18448] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 751.054101][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 751.135789][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2967'. [ 751.184353][T18453] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 751.278662][T18454] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 751.543917][T18459] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 751.893960][T18468] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 752.103482][T18479] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2973'. [ 752.162749][T18473] netlink: 338 bytes leftover after parsing attributes in process `syz.9.2973'. [ 752.190817][T18473] netlink: 174 bytes leftover after parsing attributes in process `syz.9.2973'. [ 752.450711][T18489] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 752.900090][ T29] audit: type=1400 audit(4294967352.950:26): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18492 comm="syz.6.2978" [ 753.997188][T18520] FAULT_INJECTION: forcing a failure. [ 753.997188][T18520] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.011671][T18520] CPU: 1 UID: 0 PID: 18520 Comm: syz.4.2985 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 754.022496][T18520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 754.032582][T18520] Call Trace: [ 754.035883][T18520] [ 754.038836][T18520] dump_stack_lvl+0x16c/0x1f0 [ 754.043553][T18520] should_fail_ex+0x497/0x5b0 [ 754.048260][T18520] ? fs_reclaim_acquire+0xae/0x150 [ 754.053402][T18520] should_fail_alloc_page+0xe7/0x130 [ 754.058730][T18520] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 754.064925][T18520] __alloc_pages_noprof+0x190/0x25b0 [ 754.070261][T18520] ? __pfx___lock_acquire+0x10/0x10 [ 754.075490][T18520] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 754.081263][T18520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 754.086935][T18520] ? __pfx___lock_acquire+0x10/0x10 [ 754.092165][T18520] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 754.098096][T18520] ? policy_nodemask+0xea/0x4e0 [ 754.102994][T18520] alloc_pages_mpol_noprof+0x2c9/0x610 [ 754.108486][T18520] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 754.114490][T18520] ? __fget_files+0x1fc/0x3a0 [ 754.119178][T18520] ? __pfx_lock_release+0x10/0x10 [ 754.124208][T18520] ? trace_lock_acquire+0x14e/0x1f0 [ 754.129422][T18520] get_free_pages_noprof+0xc/0x40 [ 754.134454][T18520] __pollwait+0x291/0x4c0 [ 754.138802][T18520] snd_rawmidi_poll+0x248/0x700 [ 754.143666][T18520] ? __pfx___pollwait+0x10/0x10 [ 754.148528][T18520] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 754.153912][T18520] do_select+0xd88/0x17e0 [ 754.158266][T18520] ? __pfx_do_select+0x10/0x10 [ 754.163039][T18520] ? __pfx_mark_lock+0x10/0x10 [ 754.167816][T18520] ? mark_lock+0xb5/0xc60 [ 754.172155][T18520] ? __pfx___pollwait+0x10/0x10 [ 754.177015][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.181701][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.186395][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.191079][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.195767][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.200453][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.205137][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.209821][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.214508][T18520] ? __pfx_pollwake+0x10/0x10 [ 754.219189][T18520] ? trace_lock_acquire+0x14e/0x1f0 [ 754.224403][T18520] ? lock_acquire+0x2f/0xb0 [ 754.228910][T18520] ? __might_fault+0xe3/0x190 [ 754.233602][T18520] ? __might_fault+0xe3/0x190 [ 754.238296][T18520] ? core_sys_select+0x3a6/0xa10 [ 754.243241][T18520] core_sys_select+0x3a6/0xa10 [ 754.248021][T18520] ? __pfx_core_sys_select+0x10/0x10 [ 754.253313][T18520] ? find_held_lock+0x2d/0x110 [ 754.258103][T18520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 754.264111][T18520] kern_select+0x15e/0x1e0 [ 754.268549][T18520] ? __pfx_kern_select+0x10/0x10 [ 754.273513][T18520] ? __pfx_ksys_write+0x10/0x10 [ 754.278391][T18520] __x64_sys_select+0xbd/0x160 [ 754.283253][T18520] ? do_syscall_64+0x91/0x250 [ 754.287942][T18520] ? lockdep_hardirqs_on+0x7c/0x110 [ 754.293148][T18520] do_syscall_64+0xcd/0x250 [ 754.297666][T18520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.303570][T18520] RIP: 0033:0x7f9cba985d29 [ 754.307986][T18520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.327610][T18520] RSP: 002b:00007f9cbb794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 754.336033][T18520] RAX: ffffffffffffffda RBX: 00007f9cbab75fa0 RCX: 00007f9cba985d29 [ 754.344011][T18520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 754.351981][T18520] RBP: 00007f9cbb794090 R08: 0000000000000000 R09: 0000000000000000 [ 754.359965][T18520] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 754.367939][T18520] R13: 0000000000000000 R14: 00007f9cbab75fa0 R15: 00007ffc210c5008 [ 754.375926][T18520] [ 754.753577][T18532] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2987'. [ 754.755436][T18533] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2986'. [ 754.784794][T18528] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2987'. [ 754.820484][T18529] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2986'. [ 754.829160][T18528] netlink: 134 bytes leftover after parsing attributes in process `syz.4.2987'. [ 754.862521][T18529] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2986'. [ 755.769008][T18562] FAULT_INJECTION: forcing a failure. [ 755.769008][T18562] name failslab, interval 1, probability 0, space 0, times 0 [ 755.788493][T18562] CPU: 0 UID: 0 PID: 18562 Comm: syz.9.2995 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 755.799322][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 755.809413][T18562] Call Trace: [ 755.812719][T18562] [ 755.815670][T18562] dump_stack_lvl+0x16c/0x1f0 [ 755.820382][T18562] should_fail_ex+0x497/0x5b0 [ 755.825097][T18562] ? fs_reclaim_acquire+0xae/0x150 [ 755.830244][T18562] should_failslab+0xc2/0x120 [ 755.834959][T18562] __kmalloc_noprof+0xce/0x4f0 [ 755.839762][T18562] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 755.845415][T18562] ? tomoyo_realpath_from_path+0xbf/0x710 [ 755.851150][T18562] tomoyo_realpath_from_path+0xbf/0x710 [ 755.856705][T18562] ? tomoyo_path_number_perm+0x235/0x5b0 [ 755.862366][T18562] tomoyo_path_number_perm+0x248/0x5b0 [ 755.867849][T18562] ? tomoyo_path_number_perm+0x235/0x5b0 [ 755.873501][T18562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 755.879575][T18562] ? __pfx_lock_release+0x10/0x10 [ 755.884610][T18562] ? trace_lock_acquire+0x14e/0x1f0 [ 755.889827][T18562] ? lock_acquire+0x2f/0xb0 [ 755.894338][T18562] ? __fget_files+0x40/0x3a0 [ 755.898943][T18562] ? __fget_files+0x206/0x3a0 [ 755.903632][T18562] security_file_ioctl+0x9b/0x240 [ 755.908663][T18562] __x64_sys_ioctl+0xb7/0x200 [ 755.913351][T18562] do_syscall_64+0xcd/0x250 [ 755.917865][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.923769][T18562] RIP: 0033:0x7f7b39985d29 [ 755.928188][T18562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.947814][T18562] RSP: 002b:00007f7b377f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.956242][T18562] RAX: ffffffffffffffda RBX: 00007f7b39b75fa0 RCX: 00007f7b39985d29 [ 755.964218][T18562] RDX: 0000000000000005 RSI: 0000000000000301 RDI: 0000000000000003 [ 755.972198][T18562] RBP: 00007f7b377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 755.980168][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.988140][T18562] R13: 0000000000000000 R14: 00007f7b39b75fa0 R15: 00007ffe9ba31728 [ 755.996128][T18562] [ 756.089577][T18562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 756.180837][T18570] program syz.7.2997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 756.382351][T18572] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2998'. [ 756.709922][T18585] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3001'. [ 756.836752][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3003'. [ 757.298214][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3005'. [ 759.231434][T18642] Process accounting resumed [ 759.510822][T18639] FAULT_INJECTION: forcing a failure. [ 759.510822][T18639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.525571][T18639] CPU: 1 UID: 0 PID: 18639 Comm: syz.7.3021 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 759.536377][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 759.546462][T18639] Call Trace: [ 759.549763][T18639] [ 759.552716][T18639] dump_stack_lvl+0x16c/0x1f0 [ 759.557433][T18639] should_fail_ex+0x497/0x5b0 [ 759.562157][T18639] core_sys_select+0x420/0xa10 [ 759.566965][T18639] ? __pfx_core_sys_select+0x10/0x10 [ 759.572300][T18639] ? find_held_lock+0x2d/0x110 [ 759.577122][T18639] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 759.583153][T18639] kern_select+0x15e/0x1e0 [ 759.587606][T18639] ? __pfx_kern_select+0x10/0x10 [ 759.592578][T18639] ? __pfx_ksys_write+0x10/0x10 [ 759.597467][T18639] __x64_sys_select+0xbd/0x160 [ 759.602269][T18639] ? do_syscall_64+0x91/0x250 [ 759.606979][T18639] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.612214][T18639] do_syscall_64+0xcd/0x250 [ 759.616770][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.622704][T18639] RIP: 0033:0x7f3001585d29 [ 759.627142][T18639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.646782][T18639] RSP: 002b:00007f30023d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 759.655239][T18639] RAX: ffffffffffffffda RBX: 00007f3001775fa0 RCX: 00007f3001585d29 [ 759.663245][T18639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 759.671256][T18639] RBP: 00007f30023d4090 R08: 0000000000000000 R09: 0000000000000000 [ 759.679263][T18639] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 759.687269][T18639] R13: 0000000000000000 R14: 00007f3001775fa0 R15: 00007fffdf8f3268 [ 759.695289][T18639] [ 759.881688][T18670] __nla_validate_parse: 7 callbacks suppressed [ 759.881712][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3025'. [ 760.956288][ T29] audit: type=1807 audit(4294967361.010:27): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 760.970188][T18697] ima: policy update failed [ 760.981076][ T29] audit: type=1802 audit(4294967361.010:28): pid=18697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.3033" res=0 errno=0 [ 761.051163][ T29] audit: type=1802 audit(4294967361.040:29): pid=18697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3033" res=0 errno=0 [ 761.385967][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3034'. [ 761.532608][T18709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3043'. [ 761.677001][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3036'. [ 762.484839][T18740] FAULT_INJECTION: forcing a failure. [ 762.484839][T18740] name failslab, interval 1, probability 0, space 0, times 0 [ 762.498729][T18740] CPU: 1 UID: 0 PID: 18740 Comm: syz.4.3044 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 762.509540][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 762.519634][T18740] Call Trace: [ 762.522944][T18740] [ 762.525921][T18740] dump_stack_lvl+0x16c/0x1f0 [ 762.530642][T18740] should_fail_ex+0x497/0x5b0 [ 762.535351][T18740] ? fs_reclaim_acquire+0xae/0x150 [ 762.540503][T18740] should_failslab+0xc2/0x120 [ 762.545222][T18740] __kmalloc_node_noprof+0xd1/0x520 [ 762.550453][T18740] ? trace_contention_end+0xee/0x140 [ 762.555768][T18740] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 762.561263][T18740] ? find_held_lock+0x2d/0x110 [ 762.566064][T18740] __kvmalloc_node_noprof+0xad/0x1a0 [ 762.571392][T18740] traverse.part.0.constprop.0+0x392/0x640 [ 762.577227][T18740] ? trace_lock_acquire+0x14e/0x1f0 [ 762.582468][T18740] seq_lseek+0x2b4/0x440 [ 762.586742][T18740] full_proxy_llseek+0xe9/0x1a0 [ 762.591633][T18740] ksys_lseek+0xf0/0x1b0 [ 762.595917][T18740] do_syscall_64+0xcd/0x250 [ 762.600457][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.606383][T18740] RIP: 0033:0x7f9cba985d29 [ 762.610818][T18740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.630456][T18740] RSP: 002b:00007f9cbb794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 762.638915][T18740] RAX: ffffffffffffffda RBX: 00007f9cbab75fa0 RCX: 00007f9cba985d29 [ 762.646922][T18740] RDX: 0000000000000001 RSI: 7fffffdfffffffff RDI: 0000000000000003 [ 762.654925][T18740] RBP: 00007f9cbb794090 R08: 0000000000000000 R09: 0000000000000000 [ 762.662927][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.670925][T18740] R13: 0000000000000000 R14: 00007f9cbab75fa0 R15: 00007ffc210c5008 [ 762.678943][T18740] [ 762.857545][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3046'. [ 763.168953][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3049'. [ 763.193519][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3049'. [ 764.658412][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3058'. [ 764.663462][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'. [ 764.689903][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3061'. [ 766.816885][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3070'. [ 766.841087][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3070'. [ 767.104242][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3071'. [ 770.690930][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3092'. [ 770.869310][T18896] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 771.965308][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3101'. [ 772.640758][T18936] FAULT_INJECTION: forcing a failure. [ 772.640758][T18936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.699198][T18936] CPU: 0 UID: 0 PID: 18936 Comm: syz.4.3103 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 772.710026][T18936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 772.720106][T18936] Call Trace: [ 772.723401][T18936] [ 772.726347][T18936] dump_stack_lvl+0x16c/0x1f0 [ 772.731065][T18936] should_fail_ex+0x497/0x5b0 [ 772.735783][T18936] _copy_to_user+0x32/0xd0 [ 772.740238][T18936] blkdev_ioctl+0x577/0x670 [ 772.744779][T18936] ? __pfx_blkdev_ioctl+0x10/0x10 [ 772.749842][T18936] ? __fget_files+0x206/0x3a0 [ 772.754558][T18936] ? __pfx_blkdev_ioctl+0x10/0x10 [ 772.759623][T18936] __x64_sys_ioctl+0x190/0x200 [ 772.764423][T18936] do_syscall_64+0xcd/0x250 [ 772.768963][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.774894][T18936] RIP: 0033:0x7f9cba985d29 [ 772.779317][T18936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.798927][T18936] RSP: 002b:00007f9cbb794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.807347][T18936] RAX: ffffffffffffffda RBX: 00007f9cbab75fa0 RCX: 00007f9cba985d29 [ 772.815320][T18936] RDX: 0000000000000005 RSI: 0000000000000301 RDI: 0000000000000003 [ 772.823291][T18936] RBP: 00007f9cbb794090 R08: 0000000000000000 R09: 0000000000000000 [ 772.831266][T18936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.839242][T18936] R13: 0000000000000000 R14: 00007f9cbab75fa0 R15: 00007ffc210c5008 [ 772.847231][T18936] [ 774.322452][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3110'. [ 776.118920][T18990] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 776.485844][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 777.434877][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3125'. [ 778.464005][T19038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'. [ 778.761643][T19042] FAULT_INJECTION: forcing a failure. [ 778.761643][T19042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.784674][T19042] CPU: 1 UID: 0 PID: 19042 Comm: syz.4.3132 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 778.795497][T19042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 778.805577][T19042] Call Trace: [ 778.808864][T19042] [ 778.811800][T19042] dump_stack_lvl+0x16c/0x1f0 [ 778.816493][T19042] should_fail_ex+0x497/0x5b0 [ 778.821185][T19042] _copy_to_user+0x32/0xd0 [ 778.825616][T19042] simple_read_from_buffer+0xd0/0x160 [ 778.830994][T19042] proc_fail_nth_read+0x198/0x270 [ 778.836035][T19042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.841599][T19042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.847162][T19042] vfs_read+0x1df/0xbe0 [ 778.851330][T19042] ? __fget_files+0x1fc/0x3a0 [ 778.856025][T19042] ? __pfx___mutex_lock+0x10/0x10 [ 778.861062][T19042] ? __pfx_vfs_read+0x10/0x10 [ 778.865926][T19042] ? __fget_files+0x206/0x3a0 [ 778.870620][T19042] ksys_read+0x12b/0x250 [ 778.874872][T19042] ? __pfx_ksys_read+0x10/0x10 [ 778.879652][T19042] do_syscall_64+0xcd/0x250 [ 778.884170][T19042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.890073][T19042] RIP: 0033:0x7f9cba98473c [ 778.894491][T19042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 778.914105][T19042] RSP: 002b:00007f9cbb794030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.922525][T19042] RAX: ffffffffffffffda RBX: 00007f9cbab75fa0 RCX: 00007f9cba98473c [ 778.930500][T19042] RDX: 000000000000000f RSI: 00007f9cbb7940a0 RDI: 0000000000000004 [ 778.938475][T19042] RBP: 00007f9cbb794090 R08: 0000000000000000 R09: 0000000000000000 [ 778.946449][T19042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.954423][T19042] R13: 0000000000000000 R14: 00007f9cbab75fa0 R15: 00007ffc210c5008 [ 778.962424][T19042] [ 780.734677][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'. [ 781.261998][T19078] netlink: 'syz.4.3143': attribute type 19 has an invalid length. [ 781.277158][T19078] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3143'. [ 781.797909][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3151'. [ 781.833603][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3151'. [ 783.740230][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3160'. [ 783.765442][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3160'. [ 784.329729][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3164'. [ 785.567105][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3171'. [ 785.593292][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3171'. [ 786.543360][T19203] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3180'. [ 786.585070][T19203] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3180'. [ 787.611629][T19227] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3187'. [ 787.753040][T19224] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3187'. [ 787.992987][T19238] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3190'. [ 789.011489][T19251] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3192: iget: checksum invalid [ 789.065874][T19251] platform regulatory.0: loading /lib/firmware/updates/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 789.115124][T19251] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3192: iget: checksum invalid [ 789.126948][T19251] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 789.138448][T19251] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3192: iget: checksum invalid [ 789.151512][T19251] platform regulatory.0: loading /lib/firmware/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 789.165008][T19251] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3192: iget: checksum invalid [ 789.176870][T19251] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 789.186406][T19251] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 789.195689][T19255] __nla_validate_parse: 1 callbacks suppressed [ 789.195708][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3194'. [ 789.196206][T19251] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 789.268564][T19255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3194'. [ 790.117835][T19266] kAFS: Invalid Command on /proc/fs/afs/cells file [ 790.289946][T19268] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3199'. [ 791.141029][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 791.211111][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 791.460795][T19289] sctp: [Deprecated]: syz.9.3206 (pid 19289) Use of int in maxseg socket option. [ 791.460795][T19289] Use struct sctp_assoc_value instead [ 791.540326][T19306] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3209'. [ 792.103796][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3213'. [ 792.698869][T19334] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3218'. [ 792.746550][T19334] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3218'. [ 793.181680][T19343] FAULT_INJECTION: forcing a failure. [ 793.181680][T19343] name failslab, interval 1, probability 0, space 0, times 0 [ 793.256207][T19343] CPU: 1 UID: 0 PID: 19343 Comm: syz.7.3222 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 793.267039][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 793.277128][T19343] Call Trace: [ 793.280445][T19343] [ 793.283403][T19343] dump_stack_lvl+0x16c/0x1f0 [ 793.288120][T19343] should_fail_ex+0x497/0x5b0 [ 793.292833][T19343] ? fs_reclaim_acquire+0xae/0x150 [ 793.298056][T19343] should_failslab+0xc2/0x120 [ 793.302786][T19343] __kmalloc_noprof+0xce/0x4f0 [ 793.307595][T19343] ? tomoyo_encode2+0x100/0x3e0 [ 793.312489][T19343] tomoyo_encode2+0x100/0x3e0 [ 793.317208][T19343] tomoyo_realpath_from_path+0x1a7/0x710 [ 793.322890][T19343] ? tomoyo_path_number_perm+0x235/0x5b0 [ 793.328585][T19343] tomoyo_path_number_perm+0x248/0x5b0 [ 793.334088][T19343] ? tomoyo_path_number_perm+0x235/0x5b0 [ 793.339813][T19343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 793.345844][T19343] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 793.351580][T19343] security_file_ioctl+0x9b/0x240 [ 793.356650][T19343] __x64_sys_ioctl+0xb7/0x200 [ 793.361368][T19343] do_syscall_64+0xcd/0x250 [ 793.365917][T19343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.371854][T19343] RIP: 0033:0x7f3001585d29 [ 793.376300][T19343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.395946][T19343] RSP: 002b:00007f30023d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.404392][T19343] RAX: ffffffffffffffda RBX: 00007f3001775fa0 RCX: 00007f3001585d29 [ 793.412398][T19343] RDX: 0000000000000008 RSI: 000000000000890b RDI: 0000000000000001 [ 793.420401][T19343] RBP: 00007f30023d4090 R08: 0000000000000000 R09: 0000000000000000 [ 793.428578][T19343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.436583][T19343] R13: 0000000000000000 R14: 00007f3001775fa0 R15: 00007fffdf8f3268 [ 793.444586][T19343] [ 793.504592][T19343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 793.846695][T19352] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 793.899772][T19360] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.4.3224: iget: checksum invalid [ 793.936834][T19360] platform regulatory.0: loading /lib/firmware/updates/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 793.978008][T19362] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3228'. [ 794.055919][T19360] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.4.3224: iget: checksum invalid [ 794.130911][T19360] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 794.142312][T19360] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.4.3224: iget: checksum invalid [ 794.154333][T19360] platform regulatory.0: loading /lib/firmware/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 794.170401][T19360] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.4.3224: iget: checksum invalid [ 794.183408][T19360] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 794.195297][T19360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 794.219971][T19360] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 794.327047][T19374] __nla_validate_parse: 1 callbacks suppressed [ 794.327070][T19374] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3237'. [ 795.798113][T19406] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3239'. [ 796.013629][T19402] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3239'. [ 796.648019][T19419] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3240'. [ 796.754950][T19421] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3240'. [ 800.306325][T19458] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 801.431967][T19476] FAULT_INJECTION: forcing a failure. [ 801.431967][T19476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.479929][T19476] CPU: 1 UID: 0 PID: 19476 Comm: syz.9.3257 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 801.490761][T19476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 801.500842][T19476] Call Trace: [ 801.504138][T19476] [ 801.507104][T19476] dump_stack_lvl+0x16c/0x1f0 [ 801.511816][T19476] should_fail_ex+0x497/0x5b0 [ 801.516539][T19476] _copy_from_user+0x2e/0xd0 [ 801.521167][T19476] inet_ioctl+0x31f/0x3f0 [ 801.525540][T19476] ? __pfx_inet_ioctl+0x10/0x10 [ 801.530433][T19476] ? __pfx_lock_release+0x10/0x10 [ 801.535487][T19476] ? tomoyo_path_number_perm+0x190/0x5b0 [ 801.541153][T19476] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 801.547156][T19476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 801.553061][T19476] sock_do_ioctl+0x116/0x280 [ 801.557655][T19476] ? __pfx_sock_do_ioctl+0x10/0x10 [ 801.562782][T19476] sock_ioctl+0x228/0x6c0 [ 801.567119][T19476] ? __pfx_sock_ioctl+0x10/0x10 [ 801.571987][T19476] ? __pfx_sock_ioctl+0x10/0x10 [ 801.576844][T19476] __x64_sys_ioctl+0x190/0x200 [ 801.581617][T19476] do_syscall_64+0xcd/0x250 [ 801.586132][T19476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.592033][T19476] RIP: 0033:0x7f7b39985d29 [ 801.596456][T19476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.616334][T19476] RSP: 002b:00007f7b377f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 801.624750][T19476] RAX: ffffffffffffffda RBX: 00007f7b39b75fa0 RCX: 00007f7b39985d29 [ 801.632724][T19476] RDX: 0000000000000008 RSI: 000000000000890b RDI: 0000000000000001 [ 801.640702][T19476] RBP: 00007f7b377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 801.648681][T19476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.656662][T19476] R13: 0000000000000000 R14: 00007f7b39b75fa0 R15: 00007ffe9ba31728 [ 801.664649][T19476] [ 801.929047][T19485] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3258: iget: checksum invalid [ 801.984228][T19485] platform regulatory.0: loading /lib/firmware/updates/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 802.071449][T19485] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3258: iget: checksum invalid [ 802.084259][T19485] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 802.094670][T19485] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3258: iget: checksum invalid [ 802.106323][T19485] platform regulatory.0: loading /lib/firmware/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 802.120190][T19485] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3258: iget: checksum invalid [ 802.131790][T19485] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 802.132588][T19488] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3259'. [ 802.141676][T19485] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 802.160164][T19485] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 802.261681][T19488] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3259'. [ 802.643013][T19500] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.9.3262: iget: checksum invalid [ 802.702436][T19500] platform regulatory.0: loading /lib/firmware/updates/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 802.746920][T19500] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.9.3262: iget: checksum invalid [ 802.822820][T19500] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 802.870392][T19500] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.9.3262: iget: checksum invalid [ 802.980709][T19500] platform regulatory.0: loading /lib/firmware/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 802.994104][T19500] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.9.3262: iget: checksum invalid [ 803.005412][T19500] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 803.014971][T19500] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 803.024752][T19500] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 805.075006][T19548] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3277: iget: checksum invalid [ 805.088977][T19548] platform regulatory.0: loading /lib/firmware/updates/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 805.122527][T19548] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3277: iget: checksum invalid [ 805.149931][T19548] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 805.161706][T19548] platform regulatory.0: loading /lib/firmware/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 805.202917][T19548] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 805.242692][T19548] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 805.271717][T19548] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 806.082844][T19564] FAULT_INJECTION: forcing a failure. [ 806.082844][T19564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.115213][T19564] CPU: 0 UID: 0 PID: 19564 Comm: syz.7.3284 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 806.126063][T19564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 806.126082][T19564] Call Trace: [ 806.126846][T19566] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3283'. [ 806.136142][T19564] [ 806.136158][T19564] dump_stack_lvl+0x16c/0x1f0 [ 806.136192][T19564] should_fail_ex+0x497/0x5b0 [ 806.136224][T19564] _copy_to_user+0x32/0xd0 [ 806.136257][T19564] simple_read_from_buffer+0xd0/0x160 [ 806.136284][T19564] proc_fail_nth_read+0x198/0x270 [ 806.136321][T19564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 806.136359][T19564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 806.186784][T19564] vfs_read+0x1df/0xbe0 [ 806.186821][T19564] ? __pfx_vfs_read+0x10/0x10 [ 806.186847][T19564] ? sock_ioctl+0x3ae/0x6c0 [ 806.186872][T19564] ? __pfx_sock_ioctl+0x10/0x10 [ 806.186901][T19564] ksys_read+0x12b/0x250 [ 806.186923][T19564] ? __pfx_ksys_read+0x10/0x10 [ 806.186952][T19564] do_syscall_64+0xcd/0x250 [ 806.186980][T19564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.187007][T19564] RIP: 0033:0x7f300158473c [ 806.187025][T19564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 806.187050][T19564] RSP: 002b:00007f30023d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 806.187072][T19564] RAX: ffffffffffffffda RBX: 00007f3001775fa0 RCX: 00007f300158473c [ 806.187087][T19564] RDX: 000000000000000f RSI: 00007f30023d40a0 RDI: 0000000000000002 [ 806.187100][T19564] RBP: 00007f30023d4090 R08: 0000000000000000 R09: 0000000000000000 [ 806.187114][T19564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.187127][T19564] R13: 0000000000000000 R14: 00007f3001775fa0 R15: 00007fffdf8f3268 [ 806.187152][T19564] [ 806.280389][T19566] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3283'. [ 806.419899][T19567] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3283'. [ 808.282750][T19605] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3295'. [ 808.313036][T19605] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3295'. [ 808.335038][T19605] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3295'. [ 809.075953][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.089963][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.350691][T19625] CIFS: VFS: Invalid SecurityFlags: [ 809.447790][T19623] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3300'. [ 809.814070][T19634] dyndbg: expected <4096 bytes into control [ 810.341505][T19640] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3305'. [ 810.405367][T19640] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3305'. [ 810.966540][T19659] EXT4-fs error: 2 callbacks suppressed [ 810.966560][T19659] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3309: iget: checksum invalid [ 811.011297][T19659] platform regulatory.0: loading /lib/firmware/updates/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 811.221687][T19659] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3309: iget: checksum invalid [ 811.408807][T19659] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 811.523151][T19659] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3309: iget: checksum invalid [ 811.632665][T19659] platform regulatory.0: loading /lib/firmware/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 811.683002][T19659] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3309: iget: checksum invalid [ 811.732614][T19659] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 811.755697][T19659] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 811.792566][T19659] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 811.809531][T19678] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3316'. [ 811.852993][T19678] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3316'. [ 812.772626][T19697] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 814.579994][T19715] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3336: iget: checksum invalid [ 814.606506][T19715] platform regulatory.0: loading /lib/firmware/updates/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 814.630711][T19718] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3329'. [ 814.650801][T19715] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3336: iget: checksum invalid [ 814.672031][T19715] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 814.732639][T19715] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3336: iget: checksum invalid [ 814.763237][T19715] platform regulatory.0: loading /lib/firmware/6.13.0-rc6-syzkaller-00046-g0b7958fa05d5/regulatory.db failed with error -74 [ 814.784669][T19715] EXT4-fs error (device sda1): ext4_lookup:1813: inode #248: comm syz.7.3336: iget: checksum invalid [ 814.801485][T19715] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 814.821920][T19715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 814.831992][T19715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 815.848557][T19751] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3340'. [ 815.860127][T19751] netlink: 338 bytes leftover after parsing attributes in process `syz.9.3340'. [ 816.352535][T19759] [ 816.354907][T19759] ====================================================== [ 816.362016][T19759] WARNING: possible circular locking dependency detected [ 816.369045][T19759] 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 Not tainted [ 816.376163][T19759] ------------------------------------------------------ [ 816.383193][T19759] syz.7.3344/19759 is trying to acquire lock: [ 816.389270][T19759] ffff888142f9a330 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0xe2/0x170 [ 816.398464][T19759] [ 816.398464][T19759] but task is already holding lock: [ 816.405852][T19759] ffff888142f99e00 (&q->q_usage_counter(io)#4){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 816.416003][T19759] [ 816.416003][T19759] which lock already depends on the new lock. [ 816.416003][T19759] [ 816.426416][T19759] [ 816.426416][T19759] the existing dependency chain (in reverse order) is: [ 816.435445][T19759] [ 816.435445][T19759] -> #4 (&q->q_usage_counter(io)#4){++++}-{0:0}: [ 816.444003][T19759] __submit_bio+0x49c/0x540 [ 816.449071][T19759] submit_bio_noacct_nocheck+0x892/0xd70 [ 816.455269][T19759] submit_bio_noacct+0x93a/0x1e20 [ 816.460868][T19759] mpage_readahead+0x41d/0x590 [ 816.466203][T19759] read_pages+0x1a8/0xdc0 [ 816.471093][T19759] page_cache_ra_unbounded+0x3dc/0x750 [ 816.477182][T19759] page_cache_ra_order+0x8f2/0xc80 [ 816.482842][T19759] filemap_fault+0x14a5/0x2820 [ 816.488160][T19759] __do_fault+0x10a/0x490 [ 816.493031][T19759] do_pte_missing+0xebd/0x3e00 [ 816.498345][T19759] __handle_mm_fault+0x103c/0x2a40 [ 816.504006][T19759] handle_mm_fault+0x3fa/0xaa0 [ 816.509319][T19759] __get_user_pages+0x8d9/0x3b50 [ 816.514801][T19759] populate_vma_page_range+0x27f/0x3a0 [ 816.520805][T19759] __mm_populate+0x1d6/0x380 [ 816.525956][T19759] vm_mmap_pgoff+0x293/0x360 [ 816.531108][T19759] ksys_mmap_pgoff+0x32c/0x5c0 [ 816.536421][T19759] __x64_sys_mmap+0x125/0x190 [ 816.541647][T19759] do_syscall_64+0xcd/0x250 [ 816.546699][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.553143][T19759] [ 816.553143][T19759] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 816.561703][T19759] down_read+0x9a/0x330 [ 816.566414][T19759] filemap_fault+0x2e0/0x2820 [ 816.571642][T19759] __do_fault+0x10a/0x490 [ 816.576510][T19759] do_pte_missing+0xebd/0x3e00 [ 816.581827][T19759] __handle_mm_fault+0x103c/0x2a40 [ 816.587482][T19759] handle_mm_fault+0x3fa/0xaa0 [ 816.592797][T19759] __get_user_pages+0x8d9/0x3b50 [ 816.598272][T19759] populate_vma_page_range+0x27f/0x3a0 [ 816.604243][T19759] __mm_populate+0x1d6/0x380 [ 816.609370][T19759] vm_mmap_pgoff+0x293/0x360 [ 816.614474][T19759] ksys_mmap_pgoff+0x32c/0x5c0 [ 816.619744][T19759] __x64_sys_mmap+0x125/0x190 [ 816.624933][T19759] do_syscall_64+0xcd/0x250 [ 816.629948][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.636356][T19759] [ 816.636356][T19759] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 816.643900][T19759] __might_fault+0x11b/0x190 [ 816.649005][T19759] _copy_from_user+0x29/0xd0 [ 816.654112][T19759] __blk_trace_setup+0xa8/0x180 [ 816.659482][T19759] blk_trace_setup+0x47/0x70 [ 816.664588][T19759] sg_ioctl+0x7a3/0x26b0 [ 816.669347][T19759] __x64_sys_ioctl+0x190/0x200 [ 816.674624][T19759] do_syscall_64+0xcd/0x250 [ 816.679653][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.686061][T19759] [ 816.686061][T19759] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 816.693868][T19759] __mutex_lock+0x19b/0xa60 [ 816.698883][T19759] blk_register_queue+0x13c/0x4f0 [ 816.704419][T19759] add_disk_fwnode+0x785/0x1300 [ 816.709777][T19759] brd_alloc.isra.0+0x50a/0x7c0 [ 816.715143][T19759] brd_init+0x12b/0x1d0 [ 816.719810][T19759] do_one_initcall+0x128/0x630 [ 816.725090][T19759] kernel_init_freeable+0x58f/0x8b0 [ 816.730805][T19759] kernel_init+0x1c/0x2b0 [ 816.735647][T19759] ret_from_fork+0x45/0x80 [ 816.740569][T19759] ret_from_fork_asm+0x1a/0x30 [ 816.745847][T19759] [ 816.745847][T19759] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 816.753390][T19759] __lock_acquire+0x249e/0x3c40 [ 816.758746][T19759] lock_acquire.part.0+0x11b/0x380 [ 816.764366][T19759] __mutex_lock+0x19b/0xa60 [ 816.769392][T19759] queue_attr_store+0xe2/0x170 [ 816.774669][T19759] sysfs_kf_write+0x117/0x170 [ 816.779877][T19759] kernfs_fop_write_iter+0x33d/0x500 [ 816.785674][T19759] iter_file_splice_write+0x90f/0x10b0 [ 816.791641][T19759] direct_splice_actor+0x18f/0x6c0 [ 816.797259][T19759] splice_direct_to_actor+0x346/0xa40 [ 816.803141][T19759] do_splice_direct+0x178/0x250 [ 816.808497][T19759] do_sendfile+0xaed/0xe30 [ 816.813420][T19759] __x64_sys_sendfile64+0x1da/0x220 [ 816.819129][T19759] do_syscall_64+0xcd/0x250 [ 816.824145][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.830548][T19759] [ 816.830548][T19759] other info that might help us debug this: [ 816.830548][T19759] [ 816.840758][T19759] Chain exists of: [ 816.840758][T19759] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#4 [ 816.840758][T19759] [ 816.855455][T19759] Possible unsafe locking scenario: [ 816.855455][T19759] [ 816.862902][T19759] CPU0 CPU1 [ 816.868272][T19759] ---- ---- [ 816.873631][T19759] lock(&q->q_usage_counter(io)#4); [ 816.878908][T19759] lock(mapping.invalidate_lock#2); [ 816.886701][T19759] lock(&q->q_usage_counter(io)#4); [ 816.894515][T19759] lock(&q->sysfs_lock); [ 816.898838][T19759] [ 816.898838][T19759] *** DEADLOCK *** [ 816.898838][T19759] [ 816.906966][T19759] 5 locks held by syz.7.3344/19759: [ 816.912154][T19759] #0: ffff88802fed4420 (sb_writers#8){.+.+}-{0:0}, at: splice_direct_to_actor+0x346/0xa40 [ 816.922215][T19759] #1: ffff888044749c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 816.932001][T19759] #2: ffff888024f245a8 (kn->active#185){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 816.942111][T19759] #3: ffff888142f99e00 (&q->q_usage_counter(io)#4){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 816.952678][T19759] #4: ffff888142f99e38 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 816.963545][T19759] [ 816.963545][T19759] stack backtrace: [ 816.969427][T19759] CPU: 0 UID: 0 PID: 19759 Comm: syz.7.3344 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 816.980174][T19759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 816.990306][T19759] Call Trace: [ 816.993576][T19759] [ 816.996493][T19759] dump_stack_lvl+0x116/0x1f0 [ 817.001172][T19759] print_circular_bug+0x41c/0x610 [ 817.006197][T19759] check_noncircular+0x31a/0x400 [ 817.011137][T19759] ? __pfx_check_noncircular+0x10/0x10 [ 817.016593][T19759] ? save_trace+0x42/0xa10 [ 817.021000][T19759] ? add_lock_to_list+0x17d/0x390 [ 817.026026][T19759] __lock_acquire+0x249e/0x3c40 [ 817.030893][T19759] ? __pfx___lock_acquire+0x10/0x10 [ 817.036078][T19759] ? __pfx___lock_acquire+0x10/0x10 [ 817.041268][T19759] lock_acquire.part.0+0x11b/0x380 [ 817.046367][T19759] ? queue_attr_store+0xe2/0x170 [ 817.051296][T19759] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 817.056913][T19759] ? rcu_is_watching+0x12/0xc0 [ 817.061666][T19759] ? trace_lock_acquire+0x14e/0x1f0 [ 817.066870][T19759] ? find_held_lock+0x2d/0x110 [ 817.071672][T19759] ? queue_attr_store+0xe2/0x170 [ 817.076622][T19759] ? lock_acquire+0x2f/0xb0 [ 817.081113][T19759] ? queue_attr_store+0xe2/0x170 [ 817.086040][T19759] __mutex_lock+0x19b/0xa60 [ 817.090534][T19759] ? queue_attr_store+0xe2/0x170 [ 817.095459][T19759] ? mark_held_locks+0x9f/0xe0 [ 817.100214][T19759] ? queue_attr_store+0xe2/0x170 [ 817.105143][T19759] ? __pfx___mutex_lock+0x10/0x10 [ 817.110163][T19759] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 817.115957][T19759] ? blk_mq_freeze_queue_wait+0xaf/0x190 [ 817.121574][T19759] ? __pfx_autoremove_wake_function+0x10/0x10 [ 817.127637][T19759] ? queue_attr_store+0xd8/0x170 [ 817.132562][T19759] ? queue_attr_store+0xe2/0x170 [ 817.137485][T19759] queue_attr_store+0xe2/0x170 [ 817.142250][T19759] ? __pfx_queue_attr_store+0x10/0x10 [ 817.147634][T19759] sysfs_kf_write+0x117/0x170 [ 817.152317][T19759] kernfs_fop_write_iter+0x33d/0x500 [ 817.157616][T19759] ? __pfx_sysfs_kf_write+0x10/0x10 [ 817.162815][T19759] iter_file_splice_write+0x90f/0x10b0 [ 817.168263][T19759] ? __pfx_iter_file_splice_write+0x10/0x10 [ 817.174152][T19759] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 817.179775][T19759] ? splice_direct_to_actor+0x346/0xa40 [ 817.185314][T19759] ? __pfx_iter_file_splice_write+0x10/0x10 [ 817.191197][T19759] direct_splice_actor+0x18f/0x6c0 [ 817.196298][T19759] splice_direct_to_actor+0x346/0xa40 [ 817.201654][T19759] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.207275][T19759] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.213159][T19759] ? __fget_files+0x1fc/0x3a0 [ 817.217824][T19759] do_splice_direct+0x178/0x250 [ 817.222671][T19759] ? __pfx_do_splice_direct+0x10/0x10 [ 817.228048][T19759] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.233942][T19759] do_sendfile+0xaed/0xe30 [ 817.238454][T19759] ? __pfx_do_sendfile+0x10/0x10 [ 817.243391][T19759] ? __x64_sys_futex+0x1e1/0x4c0 [ 817.248329][T19759] ? __x64_sys_futex+0x1ea/0x4c0 [ 817.253268][T19759] __x64_sys_sendfile64+0x1da/0x220 [ 817.258460][T19759] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 817.264175][T19759] do_syscall_64+0xcd/0x250 [ 817.268672][T19759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.274573][T19759] RIP: 0033:0x7f3001585d29 [ 817.278982][T19759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.298583][T19759] RSP: 002b:00007f30023d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.307003][T19759] RAX: ffffffffffffffda RBX: 00007f3001775fa0 RCX: 00007f3001585d29 [ 817.314998][T19759] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 817.322964][T19759] RBP: 00007f3001601b08 R08: 0000000000000000 R09: 0000000000000000 [ 817.330928][T19759] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 817.338907][T19759] R13: 0000000000000000 R14: 00007f3001775fa0 R15: 00007fffdf8f3268 [ 817.346873][T19759]