last executing test programs:

15m53.494984497s ago: executing program 2 (id=820):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000006880), 0x140, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x5, 0xdc, 0x9b72, 0x7, 0x28000)
ioctl$auto(r1, 0x2275, 0x38)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
connect$auto(0x3, 0x0, 0x55)
mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, 0x8, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r0, 0xc0383e04, 0x0)

15m53.141391783s ago: executing program 2 (id=821):
waitid$auto(0x100000001, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x6, 0x0)
memfd_create$auto(0x0, 0xe)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfdf3)
read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_generic(0xffffffffffffff9c, 0x0, 0xa0101, 0x0)
mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x1000000004)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x806, 0x0)
socketpair$auto(0x21, 0x7, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x3, 0x3b)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0x0, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
write$auto(0x3, 0x0, 0xfffffdef)
sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x2000c041)
bind$auto(0x3, 0x0, 0x6b)

15m52.947613534s ago: executing program 0 (id=822):
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000)
shmdt$auto(&(0x7f0000000100)='/dev/ubi_ctrl\x00')
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x6, 0x8, 0xdf, 0x9b72, 0x2, 0x224)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r0, 0x301, &(0x7f0000000200)="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")
getsockopt$auto(0x3, 0x8, 0x4a, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4604, 0x0)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r2, 0x80104592, 0x0)

15m52.456052333s ago: executing program 2 (id=824):
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0x2003ed, 0x19)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
sysfs$auto(0x2, 0x5, 0x0)
fsopen$auto(0x0, 0x2000)
fsconfig$auto(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x60742, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
poll$auto(&(0x7f0000000040)={r0, 0x504, 0xa}, 0x5, 0x108)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x1cdd81, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0)

15m52.389185422s ago: executing program 0 (id=833):
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x2, 0x8000)
shmdt$auto(&(0x7f0000000100)='/dev/ubi_ctrl\x00')
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x6, 0x8, 0xdf, 0x9b72, 0x2, 0x224)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto_def_blk_fops_fs(r0, 0x301, &(0x7f0000000200)="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")
getsockopt$auto(0x3, 0x8, 0x4a, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4604, 0x0)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r2, 0x80104592, 0x0)

15m51.87117645s ago: executing program 0 (id=826):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r0 = getsockopt$auto(0x6, 0x11b, 0x7, 0xfffffffffffffffe, 0x0)
epoll_ctl$auto(0xffffffffffffffff, 0x2, r0, &(0x7f0000000140)={0x3, 0x9}) (async)
unshare$auto(0x40000080) (async)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x119e41, 0x0) (async)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000034c0), 0x500, 0x0)
ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
madvise$auto(0x0, 0x8000000000000000, 0x15) (async, rerun: 64)
sync_file_range$auto(0xffffffffffffffff, 0xe, 0xe, 0x3) (rerun: 64)
madvise$auto(0x81, 0x5, 0x3) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x9)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x189000, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x28000040}, 0x10) (async)
acct$auto(&(0x7f0000000040)='/dev/ptmx\x00') (async)
read$auto_dev_fops_plock(r2, &(0x7f0000000240)=""/192, 0xc0)
ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0)
bind$auto(0x3, 0x0, 0x6a)
openat$auto_u32_array_fops_file(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async)
open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x200) (async)
r5 = io_uring_setup$auto(0x6, 0x0)
fanotify_init$auto(0x400, 0xf) (async)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd2/hctx0/cpu0/default_rq_list\x00', 0x100, 0x0) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), r5) (rerun: 32)
sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x290}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0xffffffff}, @IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x20040004) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)

15m51.549230943s ago: executing program 2 (id=828):
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
fanotify_init$auto(0x5, 0x800)
r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
poll$auto(&(0x7f0000000080)={<r1=>r0, 0x9, 0x9816}, 0x7f, 0x3)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2, 0x3, 0xa)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x10001)
ioctl$auto(0x1, 0xaf01, 0x4)

15m51.202141326s ago: executing program 2 (id=829):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/maps\x00', 0x200, 0x0)
ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000001600)={0x81, 0x3b, 0x26, 0xffffff7f00000000, 0x714, 0x8001, 0x7d6, 0x6, 0x5, 0xbfaf, 0x2, 0x800, 0xd97, 0x2, 0x5})

15m50.734959594s ago: executing program 0 (id=831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0)
inotify_add_watch$auto(r0, 0x0, 0x2)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x1cdd81, 0x0)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'macvtap0\x00'})
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x2b, 0x1, 0x0)
sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, 0x0, 0x55)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x4)
sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r1, 0xf01, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0xc050)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0)
sendfile$auto(r5, r5, 0x0, 0x3)
r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x800}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x1)
mmap$auto(0x0, 0x2020009, 0x11, 0xf8, r6, 0x8000)
ioctl$auto(r2, 0x40084d89, 0x38)

15m50.33685033s ago: executing program 2 (id=835):
mmap$auto(0x0, 0x20000003, 0xdf, 0x9b72, 0x1, 0x7ff)
rename$auto(0x0, &(0x7f0000000040)='#(\x00')
madvise$auto(0x0, 0x1fffe0000000, 0xe)
r0 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, 0x0, 0x50000, 0x0)
r1 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x22041, 0x0)
close_range$auto(r1, r0, 0x1c06)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0)
poll$auto(&(0x7f0000000480)={<r3=>r2, 0xffff, 0x29}, 0x6, 0x8)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r5 = socket(0x11, 0x80003, 0x300)
getsockname$auto(r5, &(0x7f0000000140)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55)
poll$auto(&(0x7f0000000000)={r6, 0x200, 0x3}, 0x1, 0x4)
ioctl$auto(0x3, 0xae41, r4)
write$auto_fops_blob_file(r3, &(0x7f0000000180)="353d0bb3c73bd8c1facc7278da5c04200bc21864040e742aacae7cbffec900dbfd25047e1dee4a3c1c108c1e33acf142be502e7f87f42b4c69b16dc9b8ff58eabd9f9b7fe0b759cf0fd7d1aff25684f06ef5f6130bcd8309a050bde53e943cb88c89ad0de9b1d783c83ecce37831c11ed99004b1a64458d92dc10ae76cd55bfe3c18462c93003c3098207b6f4e5a0f54bb49e2981a6c8d631cc491b62296d21529188fe063268eafa013313add0e0a74ace3c5de1db5028986856bb93ae97ec7e81a48f528ac47d455d972e6fb795a0f3af333c69c21308881e9aec59b28b784140bda19ef39243e36f28a2e8a5bda815faa8aa13cf0", 0xf6)
close_range$auto(0x2, 0x8000, 0x0)

15m49.636477916s ago: executing program 0 (id=836):
r0 = openat$auto_fops_x64_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x240140, 0x0)
mmap$auto(0x10000, 0x20008, 0x4, 0x16, r0, 0x3ff)
socket(0x23, 0x2, 0x0)
ioctl$auto(0x3, 0x80000541b, 0x38)

15m49.115750037s ago: executing program 0 (id=837):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x100082)
recvfrom$auto(0x4, 0x0, 0xee1c, 0x3ffffd, 0x0, 0x0)
bpf$auto(0x9, &(0x7f00000000c0)=@query={@target_fd, 0x5, 0x7, 0x3, 0x5, @prog_cnt, 0x0, 0x1771, 0x3, 0x8, 0x63f}, 0x9)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video61\x00', 0x8a240, 0x0)
ioctl$auto(r1, 0x5646, r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x2, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0xffff, @local}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x7}, 0x80005, 0x20000000)
select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
ioctl$auto(0x3, 0x1269, 0x38)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000080)=""/27, 0x1b)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x18, 0x4, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/001/001\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mremap$auto(0xb3, 0xffffffffffffffff, 0x3fd9, 0x3, 0x1)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
mprotect$auto(0x1ffff000, 0x401003, 0x8)

15m34.089902237s ago: executing program 32 (id=835):
mmap$auto(0x0, 0x20000003, 0xdf, 0x9b72, 0x1, 0x7ff)
rename$auto(0x0, &(0x7f0000000040)='#(\x00')
madvise$auto(0x0, 0x1fffe0000000, 0xe)
r0 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, 0x0, 0x50000, 0x0)
r1 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0x22041, 0x0)
close_range$auto(r1, r0, 0x1c06)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0)
poll$auto(&(0x7f0000000480)={<r3=>r2, 0xffff, 0x29}, 0x6, 0x8)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r5 = socket(0x11, 0x80003, 0x300)
getsockname$auto(r5, &(0x7f0000000140)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55)
poll$auto(&(0x7f0000000000)={r6, 0x200, 0x3}, 0x1, 0x4)
ioctl$auto(0x3, 0xae41, r4)
write$auto_fops_blob_file(r3, &(0x7f0000000180)="353d0bb3c73bd8c1facc7278da5c04200bc21864040e742aacae7cbffec900dbfd25047e1dee4a3c1c108c1e33acf142be502e7f87f42b4c69b16dc9b8ff58eabd9f9b7fe0b759cf0fd7d1aff25684f06ef5f6130bcd8309a050bde53e943cb88c89ad0de9b1d783c83ecce37831c11ed99004b1a64458d92dc10ae76cd55bfe3c18462c93003c3098207b6f4e5a0f54bb49e2981a6c8d631cc491b62296d21529188fe063268eafa013313add0e0a74ace3c5de1db5028986856bb93ae97ec7e81a48f528ac47d455d972e6fb795a0f3af333c69c21308881e9aec59b28b784140bda19ef39243e36f28a2e8a5bda815faa8aa13cf0", 0xf6)
close_range$auto(0x2, 0x8000, 0x0)

15m33.774045621s ago: executing program 33 (id=837):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x100082)
recvfrom$auto(0x4, 0x0, 0xee1c, 0x3ffffd, 0x0, 0x0)
bpf$auto(0x9, &(0x7f00000000c0)=@query={@target_fd, 0x5, 0x7, 0x3, 0x5, @prog_cnt, 0x0, 0x1771, 0x3, 0x8, 0x63f}, 0x9)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video61\x00', 0x8a240, 0x0)
ioctl$auto(r1, 0x5646, r1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x2, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0xffff, @local}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x7}, 0x80005, 0x20000000)
select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8})
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
ioctl$auto(0x3, 0x1269, 0x38)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000080)=""/27, 0x1b)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x18, 0x4, 0x1)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/001/001\x00', 0x8000, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mremap$auto(0xb3, 0xffffffffffffffff, 0x3fd9, 0x3, 0x1)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
mprotect$auto(0x1ffff000, 0x401003, 0x8)

2m35.332723996s ago: executing program 4 (id=4161):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00')
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0x18bf00, 0x0) (async)
r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace\x00', 0x40400, 0x0)
ioctl$auto(r0, 0xb704, r1) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x4) (async, rerun: 64)
r2 = socket(0x23, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
r3 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x803, 0x10008, 0xd, 0x1000049, 0xffffffffffffffff, 0x20000000000807, 0x3}, 0x6f3)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="e4a02411179fab956cb672c8a758a186993ec322676aab3800f8ffff7bdaf5819c50f68f36da024862970fda", @ANYRES16=r3, @ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/pppoe\x00', 0x80100, 0x0)
pread64$auto(r4, 0x0, 0xd, 0x80000000000b)

2m33.959057646s ago: executing program 4 (id=4168):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0603d0f, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x10040, 0x130)

2m32.751840601s ago: executing program 4 (id=4174):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0xffffffff)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/snapshot\x00', 0x8)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x48abc1, 0x0)
mmap$auto(0x0, 0x7, 0x8000e0d5, 0xeb1, r0, 0x8000)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x6, 0x8000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0)
ioctl$auto(0xffffffffffffffff, 0xaa59, r1)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
setfsgid$auto(0x9)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r3 = socket(0x11, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x890d, 0x0)

2m31.744934235s ago: executing program 4 (id=4181):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd14/queue/max_sectors_kb\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, 0xfffffffffffffffe)
r2 = getpid()
capget$auto(&(0x7f0000000080)={0x1, r2}, &(0x7f0000000140)={0x7, 0x9, 0x7b7a})
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40841, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/262, 0x106)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003680)={'wlan0\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_NEW_KEY(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd700002dcdf25090000000400070008000300", @ANYRES32=r8, @ANYBLOB="270006"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x890)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

2m31.265581336s ago: executing program 4 (id=4185):
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2m30.225854768s ago: executing program 4 (id=4192):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0)
writev$auto(r1, &(0x7f0000000000)={0x0, 0x710d}, 0x8000000000000001)
pread64$auto(r0, 0x0, 0x3f, 0x7fff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40400c5)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x80000000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clock_gettime$auto(0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fstat$auto(r3, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x80, 0x0)
sync_file_range$auto(r4, 0x0, 0x8000000000000000, 0x2)
ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x4)
keyctl$auto(0x4, 0xffffffffffffffff, 0x5, 0x800, 0xa)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000001700)=""/4096, 0x1000)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x3, 0x0, 0x12, 0xffffffffffffffff, 0x0)

2m14.971120571s ago: executing program 34 (id=4192):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x200, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80091, 0x0)
writev$auto(r1, &(0x7f0000000000)={0x0, 0x710d}, 0x8000000000000001)
pread64$auto(r0, 0x0, 0x3f, 0x7fff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40400c5)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
read$auto(0x3, 0x0, 0x80)
write$auto(0x3, 0x0, 0xfffffdef)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x80000000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
clock_gettime$auto(0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fstat$auto(r3, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x80, 0x0)
sync_file_range$auto(r4, 0x0, 0x8000000000000000, 0x2)
ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x4)
keyctl$auto(0x4, 0xffffffffffffffff, 0x5, 0x800, 0xa)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000001700)=""/4096, 0x1000)
socket(0xa, 0x2, 0x0)
setsockopt$auto(0x3, 0x0, 0x12, 0xffffffffffffffff, 0x0)

2m11.487503239s ago: executing program 5 (id=4247):
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}}, 0x840)
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x22, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x80044942, 0x0)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010025bd700002dcdf2503000000040008001c0001801800108014000b0005"], 0x34}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800)
mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd)
r2 = socket(0x2, 0x80002, 0x73)
sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000000), 0x8001, 0x0, 0x4, 0x0, 0xcf, 0x7fff}, 0xbb9}, 0x3, 0xfeb)
r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1e4, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1d0, 0x2, 0x0, 0x1, [@nested={0x140, 0xa9, 0x0, 0x1, [@generic="8d035aa5ae949cb3cf68b2de57bebc0729535c9cb4710ebb3d5246b578cea3034a87245ccb26dba40728b63645c49a3601b5055659ea986789456a595022543a6d900aec003537409498d3a0b299ff72d95c98a1ecdf396529c6279853aa6ef075cb9983a6b795aa16265e", @typed={0xc, 0x52, 0x0, 0x0, @u64=0x8}, @generic="466c487d15dc088d149011a049f7e606b59c2bdb3190a9e0548ea52720556a33dcb52d56c6272f58e6f477401a9109e2b1eedcf9dfd4211424fcd3ebbcd04fc210bdf61c5fbba1df5f51fcadf6ad6f020545e476b27bcfca770e90258f34c56f9b9cbe7954f8fc847e452531ddbe3a25", @generic="607dcf7303fabbf729a5860f366d537600aa43acd20c68f85884894e9617eeb2455b4d492493c37821990e226b68cff0f7b3cb7075708adb59bc1de2e0158a44e5b3117ce795f20f746a6d309dd8a9e1b2", @typed={0x4, 0x51}]}, @generic="686d371c76d7e559193d48cce70e9ce12a2062a6d32c3aa3b954bdb14a98e45bd82540428738b4e2389c5677af0dc44d1d88e7315c801ec9f55df06fece8458195dafb1c190e839e63ed12e914e38ae24f038444146cf1c8b07be3b5a38d343c74d52086b9c0f7442716385cb13af6a3d9b9435e9187241a585b594155e22d5c5381fd27e1443de27757f37a", @generic]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x814}, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x840)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, 0x0, 0xe, 0x8}, 0x8}, 0x10a, 0x8, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r7, 0x41015500, &(0x7f0000000300)={"5adef7dee7f7018957844cff29ed32b5e06502a30816a7b0342aecf5f00ba22f9f22c23d86776e7d6063852dc51b297d7b2b2c3f6165dd465564daa9a2cca3b9b9c39d9bbb61b295c05520b6fe0b8472ba8186c035fd2688b67c36b68ceca32e2224537de625d65efabc41094dbaf17f9de8de04b004d05ab550d26bfed7346e", "6a1bad4244cddabc5ab8d84a2115e0e70d0facb940aa64b6d9eaff2acebd7c5dcfe4787051ec26364b7ae8d7baeeb9e4889b7d58e1d448845d4af2ae37e050ae070000000000000052e042e71a82d23e1948a0361be893b768934ff405d41b80790ac47f793c6e9bf2a139c3504753c3fc1f121a0e28e4b321ca105318fe4dea", 0x1})
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
fsmount$auto(0x4, 0x0, 0x200003)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0x3, 0x6f2d, 0x10000000000402)

2m7.684977958s ago: executing program 5 (id=4246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

2m7.315007791s ago: executing program 5 (id=4248):
mmap$auto(0x3, 0xc10b, 0x2, 0x9b72, 0x0, 0x100000000008000)
write$auto(0x800000000000c8, 0x0, 0x9)
mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001)
ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10a, 0x8, 0x0)
socket(0x6, 0x80000, 0x8)
write$auto(r0, 0x0, 0x7)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop14\x00', 0x60742, 0x0)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x40009, 0x20e1, 0x29b72, 0xffffffffffffffff, 0x28000)
mremap$auto(0x4000, 0xf828, 0x6, 0x74c37ea, 0x4)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r1 = fanotify_init$auto(0x6, 0xdffffc01)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
mmap$auto(0x9, 0x8, 0xdb, 0x111, 0xffffffffffffffff, 0x28001)
write$auto(0x3, 0x0, 0x7fffffff)
r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x20100, 0x0)
r3 = socket(0x10, 0x2, 0x0)
msgctl$auto(0x6, 0xa, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x9f6, 0x320}, 0x0, 0x0, 0x2, 0xffffffffffffa9ee, 0x0, 0x6, 0x80000000005, 0x2d, 0x9, 0x2, @inferred, @raw=0x8})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
read$auto_msr_fops_msr(r2, &(0x7f0000000080)=""/49, 0x31)

2m3.887299488s ago: executing program 5 (id=4257):
set_tid_address$auto(&(0x7f00000000c0)=0xfff)
setfsuid$auto(0x0)
openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/short_retry_limit\x00', 0xb500ca90e1f0f4c1, 0x0)
geteuid()
fcntl$getown(0xffffffffffffffff, 0x9)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4060)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev7\x00', 0x181782, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r2, 0x40345410, 0x0)

2m3.549994295s ago: executing program 5 (id=4258):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x1dd5c1, 0x0)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5)
r1 = fsopen$auto(&(0x7f00000000c0)='-\x00', 0x4)
mmap$auto(0x0, 0x400008, 0x8, 0x9b72, r1, 0x8000)
r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
io_uring_setup$auto(0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x4604, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e010600020000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
r5 = gettid()
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
process_vm_writev$auto(r5, &(0x7f0000000000)={0x0, 0x7ff}, 0x3, &(0x7f0000000080)={0x0, 0x800007}, 0x4, 0x0)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
clone$auto(0x2003b46, 0x5c8a, 0xfffffffffffffffc, 0x0, 0x9)
unshare$auto(0x28)
mmap$auto(0x0, 0x2020009, 0x81, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x80, 0x0)
ioctl$auto_evdev_fops_evdev(r6, 0x80104592, 0x0)
close_range$auto(0x2, 0x8, 0x0)

2m2.564722897s ago: executing program 5 (id=4260):
eventfd2$auto(0x3, 0x9)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x8000, 0x0)
mmap$auto(0x5, 0x4, 0x0, 0x40eb0, r0, 0x2ffffffffffb)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
mprotect$auto(0x1ffff000, 0x810002, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x7, &(0x7f0000000000)="4d82c87e75b10c1b15c522429c92f2214d5ba73c946a6f5572e2ba631c10dd6da32b483c165b5f62e878c97181e646860f55e6fe2645fdefcb5c4fc2f16575f6cdb4700e1cecd22d251c0a43e1e67e7dd4784498ebc61fe9bcc5c2380c4c5d2f669ce283d1ebde5dca63f4341d7d2adbcad29f01a4bbc38f29b5769c0b5eaf0135113f4837a511e7aa62a7ab12bef13ec4f2ed16f27faee08a9d29efe70a1db65478e3e8d764b4e07a79c6495c573c563c10c3f62da4da2f074000dae5dbf42e2e5a2acc45988ce9be669a1c7c8291898c7c370b916ba9b33a89aa334e543ea4a571ea7371bc30db1f9658855b9793d4e8db", 0x34c40000)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000fc0), r2)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1000}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x95a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000021}, 0x4c840)
setitimer$auto(0x8, &(0x7f0000000300)={{0x1ff, 0x2}, {0x200000000000, 0x6}}, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0x22240, 0x155)
open(0x0, 0xa240, 0x1de)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0x3, 0xae03, 0x10000000000402)
select$auto(0xfff, &(0x7f0000000140)={[0xb73f, 0xffffffffffffffff, 0x4, 0xa7, 0xffff, 0x8000000000000000, 0x4, 0x9, 0x8, 0xfb33, 0x6, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x3]}, &(0x7f00000001c0)={[0x88c9, 0x51f0, 0xfffffffffffff000, 0x5, 0x9, 0x7, 0x6, 0x2bc7a921, 0xb3e5, 0x10, 0x10, 0x100, 0xcc4, 0x5, 0x2ca3, 0x1189]}, &(0x7f0000000240)={[0x8000000000000000, 0x5, 0x5, 0x800, 0x1c0000, 0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x8, 0x557, 0x8, 0xc99, 0x5d, 0x2, 0x6c2, 0x10000]}, &(0x7f00000002c0)={0x8, 0x6})

1m46.844760917s ago: executing program 35 (id=4260):
eventfd2$auto(0x3, 0x9)
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x8000, 0x0)
mmap$auto(0x5, 0x4, 0x0, 0x40eb0, r0, 0x2ffffffffffb)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
mprotect$auto(0x1ffff000, 0x810002, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x7, &(0x7f0000000000)="4d82c87e75b10c1b15c522429c92f2214d5ba73c946a6f5572e2ba631c10dd6da32b483c165b5f62e878c97181e646860f55e6fe2645fdefcb5c4fc2f16575f6cdb4700e1cecd22d251c0a43e1e67e7dd4784498ebc61fe9bcc5c2380c4c5d2f669ce283d1ebde5dca63f4341d7d2adbcad29f01a4bbc38f29b5769c0b5eaf0135113f4837a511e7aa62a7ab12bef13ec4f2ed16f27faee08a9d29efe70a1db65478e3e8d764b4e07a79c6495c573c563c10c3f62da4da2f074000dae5dbf42e2e5a2acc45988ce9be669a1c7c8291898c7c370b916ba9b33a89aa334e543ea4a571ea7371bc30db1f9658855b9793d4e8db", 0x34c40000)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000fc0), r2)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x1000}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x95a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000021}, 0x4c840)
setitimer$auto(0x8, &(0x7f0000000300)={{0x1ff, 0x2}, {0x200000000000, 0x6}}, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0x22240, 0x155)
open(0x0, 0xa240, 0x1de)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0x3, 0xae03, 0x10000000000402)
select$auto(0xfff, &(0x7f0000000140)={[0xb73f, 0xffffffffffffffff, 0x4, 0xa7, 0xffff, 0x8000000000000000, 0x4, 0x9, 0x8, 0xfb33, 0x6, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x3]}, &(0x7f00000001c0)={[0x88c9, 0x51f0, 0xfffffffffffff000, 0x5, 0x9, 0x7, 0x6, 0x2bc7a921, 0xb3e5, 0x10, 0x10, 0x100, 0xcc4, 0x5, 0x2ca3, 0x1189]}, &(0x7f0000000240)={[0x8000000000000000, 0x5, 0x5, 0x800, 0x1c0000, 0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x8, 0x557, 0x8, 0xc99, 0x5d, 0x2, 0x6c2, 0x10000]}, &(0x7f00000002c0)={0x8, 0x6})

1m20.460308847s ago: executing program 7 (id=4465):
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
r1 = fanotify_init$auto(0x200, 0x2010000000000)
fanotify_mark$auto(0x400000000000, 0x101, 0x9, r1, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={<r2=>0x8, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x3, 0xf1, 0xb0, @raw=0x7}})
r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/devices\x00', 0x800, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000200)={0x4, 0x9, 0x9, @raw}})
lsm_get_self_attr$auto(0xfc, &(0x7f0000000180)={0x7, 0xa19, 0x3}, &(0x7f0000000280)=0x8, 0x1)
ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x0, &(0x7f0000000100)={0x400, 0x5, 0x7a, @raw=0x4}})
mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r4, 0x7, 0x3)
io_uring_setup$auto(0x6, 0x0)
fcntl$auto(0x8000000000000001, 0x26, 0x8)
io_uring_setup$auto(0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000013c0), 0xffffffffffffffff)
sendmsg$auto_HSR_C_GET_NODE_LIST(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x813}, 0x20008000)
fcntl$auto(0x8000000000000001, 0x24, 0x4)
read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000001100)=""/4096, 0x1000)

1m20.004560746s ago: executing program 7 (id=4468):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m19.750694579s ago: executing program 7 (id=4471):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
readv$auto(0x3, &(0x7f0000003100)={0x0, 0x36}, 0x1)
write$auto(0x3, 0x0, 0xfdef)
close_range$auto(0x2, 0x8, 0x0)

1m19.390125239s ago: executing program 7 (id=4473):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
readv$auto(0x3, &(0x7f0000003100)={0x0, 0x36}, 0x1)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5452, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x575480, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x800, 0x0)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x0)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x81000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x4, 0x0, 0x1, 0x5}, 0xed7138c}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)

1m18.367137351s ago: executing program 7 (id=4480):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000006880), 0x140, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, r0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r1, 0x3a, 0x4, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
readv$auto(r2, &(0x7f00000002c0)={&(0x7f00000001c0)="2475d8d2d002857d7b1461a4e18b0d36bb291d96f0ea107977c084010ea0664ee09d85a4ad593e4e488462591f9092f4df7d6007b256753e161c3507157f5a22f827d13d75cc3b0c0799e3e163f3c518a80b85155d28e3a651c9be9796a40f678a9007224d9e64a705dcd886470d1a20f1791647a0abc05503a6b356314d7205af3fdc47b9be28e7782982bd8bdfc4b6d6b1b117aef2210b7636d7200b2432c74b1b8b213796e3bab705fd83d26af307c93af5f7f1dc11870bafd67ae5590840de496cefb2b9b427d707", 0x7}, 0x1fc)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mmap$auto(0x0, 0x5, 0xdc, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r4, 0x400c4d00, 0xffffffffffffffff)
ioctl$auto(r3, 0x2275, 0x38)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
execve$auto(&(0x7f0000000140)=':,/file0\x00', 0x0, 0x0)
connect$auto(0x3, 0x0, 0x55)
mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r0, 0xc0383e04, 0x0)

1m17.22496372s ago: executing program 7 (id=4485):
setreuid$auto(0x1, 0x3) (async)
setreuid$auto(0x1, 0x3)
r0 = socket(0x10, 0x2, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x60000004}, 0xc800)
r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0)
read$auto_tracing_stats_fops_trace(r1, 0x0, 0x0) (async)
read$auto_tracing_stats_fops_trace(r1, 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) (async)
mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5)
sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006001}, 0x20048000) (async)
sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006001}, 0x20048000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1)
madvise$auto(0x0, 0x20499d, 0x9) (async)
madvise$auto(0x0, 0x20499d, 0x9)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) (async)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}})
madvise$auto(0x1, 0xa93, 0x2)
madvise$auto(0x108000, 0x800034, 0x9)
bpf$auto(0xb, 0x0, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0)
write$auto(r3, 0x0, 0x6)

1m1.873511072s ago: executing program 36 (id=4485):
setreuid$auto(0x1, 0x3) (async)
setreuid$auto(0x1, 0x3)
r0 = socket(0x10, 0x2, 0x15)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x60000004}, 0xc800)
r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0)
read$auto_tracing_stats_fops_trace(r1, 0x0, 0x0) (async)
read$auto_tracing_stats_fops_trace(r1, 0x0, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5) (async)
mprotect$auto(0x1ffff000, 0x8000000000000002, 0x5)
sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006001}, 0x20048000) (async)
sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006001}, 0x20048000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1)
madvise$auto(0x0, 0x20499d, 0x9) (async)
madvise$auto(0x0, 0x20499d, 0x9)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) (async)
io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0xfffffffc, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}})
madvise$auto(0x1, 0xa93, 0x2)
madvise$auto(0x108000, 0x800034, 0x9)
bpf$auto(0xb, 0x0, 0x3)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0)
write$auto(r3, 0x0, 0x6)

10.043793275s ago: executing program 6 (id=4764):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/channel\x00', 0x48041, 0x0) (async)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.export/channel\x00', 0x48041, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x26, 0x5, 0x7)
r1 = socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4e, 0x7}})
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='p'], 0x1ac}}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='p'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
getsockopt$auto(r1, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) (async)
getsockopt$auto(r1, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
write$auto(0x3, 0x0, 0xffd8) (async)
write$auto(0x3, 0x0, 0xffd8)
write$auto(r0, 0x0, 0x6)
close_range$auto(0x2, 0x8, 0x0)

9.695018914s ago: executing program 6 (id=4766):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

9.464324195s ago: executing program 6 (id=4770):
setgroups$auto(0x9, &(0x7f0000000140)=0x1)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop12/queue/discard_granularity\x00', 0x80000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/213, 0xd5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x15)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
timerfd_create$auto(0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x48e00, 0x0)
sysfs$auto(0x2, 0x4, 0x4)
mincore$auto(0x1000, 0x8001, 0x0)
io_uring_setup$auto(0x2, 0x0)
io_uring_enter$auto(r1, 0x1, 0xcd00, 0x7, 0x0, 0xffffff7f00000000)
r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x4281, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r2, 0x40045201, &(0x7f0000000280)=0x3)

8.907989065s ago: executing program 6 (id=4774):
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
mount$auto(&(0x7f0000000000)='pimreg\x00', &(0x7f0000000040)='\x00', 0x0, 0x10dfd057, 0x0)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0)
mount$auto(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x7ffffffd, 0x0)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000001040)={0x7ff, 0x8d, 0x7, 0x1, 0x200, "bac7ac7a01572ff1aa375b8c"})
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
r2 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x880, 0x0)
close_range$auto(r0, r2, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xa4300, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
mlock$auto(0xfbe8, 0x4)
mlock$auto(0x81, 0xffff)
mmap$auto(0x0, 0xa5, 0xdf, 0x9b72, 0x1ff, 0x28000)
readv$auto(0x3, &(0x7f0000001140)={0x0, 0x7fffffffefff}, 0x7)
msync$auto(0x1ffff000, 0x40, 0x400000004)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/misc/vga_arbiter/power/runtime_active_time\x00', 0x8041, 0x0)

6.358949361s ago: executing program 8 (id=4784):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0x10, 0x2, 0x4)
ppoll$auto(&(0x7f0000000280)={r0, 0x8, 0x1f09}, 0x6, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x81)
recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffa, 0x0, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x6, 0x15, 0xffd, 0xfffffffe, 0x4, 0xf, 0x0, 0x0, 0xe, 0x3, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sigaltstack$auto(&(0x7f0000000000)={&(0x7f0000000100)="81cab0212aff3f4dd42f9e5692b7a13a14fdae7179c3735820e836c419fab9df4c15525d0168507d821f530d2c460612fde4db812b2c129c13d51ee31e98244d9624555d18b369ca572678547511e0a2b6eac0668b8faf6ca8fcb066791f701533c379f9e77373c453968b23fe99d742503747b6e32d82f1db", 0x1, 0x7f}, &(0x7f0000000180)={&(0x7f0000000280)="820a4c355dd36a23b176e4082a529d1a7b28b343df26d1d67c882073d602abd20b02da914f95dc32f6ce6c1dbd2b7f023e7f579f6d069243251487bd26538ca469cffea3b4968225383c98519495f27b7ae2d994bf5235144104e1eb284555729276fe8628649b9e64120e523ab302c1a6013b1a0956dbc0579840ae8941e1324eea1aa81af9be71787652d6f9ed5876685c06e2ec5e3b026debda", 0x8, 0x9})
r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
shmctl$auto(0x0, 0x5, &(0x7f0000000440)={{0x5, <r6=>0xee01, 0x0, 0x29a1, 0x7, 0x8}, 0x0, 0x0, 0xb, 0xc4d, @raw=0xad6, @inferred, 0x8, 0x0, &(0x7f0000000340)="11962813083f9c3d4c", &(0x7f0000000380)="4317506c4490c1dd551e7ae7e4d8b45acb8320b65f839c5d801201ed23b57c2c5c0fded740ef5bd0d76f55cc68b16bf2bf71dfbb9ef99978b6c19ffd23d6954c8b72228a2dc04ead82419c485f45df0bf16f29d9a7dac72a1ebb9359f3e5311a42c76c80821028f875a043417558544865215dbdafe881d14ed8dd23d2deae8c94d2edfd2ac1ffb7e75a"})
r7 = gettid()
kill$auto(r7, 0x11)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000600)={0x3f8, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_SA_CONFIG={0x2e0, 0x3, 0x0, 0x1, [@nested={0xc1, 0xad, 0x0, 0x1, [@generic="b1f60470ca0c94017b0243b2439c61e0c90d59e8f94c3dfe854386a2de3d279e10c0d5d23ae4bcbffa91c5156028a78bd65444ffc71deed692e83844813e6bc5da7f7db19da8119dc68521ad9fa227b11e212a26cd101d4ab2f32cde4fc9a43655d4f596dabe05bd1dfba7bf6323cc35647b1b33d9ed2f09991761550c47184c473507e981fb84e4f3c23c6591bbfa07ddfcd1", @generic="68554fe71c6540c1c6f94ffa80c52105f3f5be92d06e81d011d158577c1adbd108f01a291ad6f4964221"]}, @generic="0aef9e3744e743a3ccb54265de8c8593b447f25068db6d44bf94de880d0d557e009ff505659d7e43b49f29cdce1ff7a76124ed8546bb480b2f92b6a936755a0a9f30dc3c907ebe7f167fb28abb086d8ca5a5acd386baef2306b7c9554be47285a372f59817c1a707814573d7c3925848f5b57c008792bc7b861086eb32ae828d77e32583857cc7676899d57e1584a39435e5abb1566e2aeda731b8ebb57be570b644f579e0a72f396305af5f46436b502581ef1d96c23eb2a173556e694fb654b7126ef3ce49993760ac6a2758ba9b4d1ece74b26d4ddcdd55262010cc634044445e1a361c4f2a0bb4c2bea1030391", @generic="ebe3f1c76304b46f64dccf39daed69df7aa0f9a48e2f024a2cb88b773a14532e7281af17ad5bfdba26f9d3da45d21df3aaa9dde55139fc01ff5e421050e5791079f09ae527debcea1a388b1d23b30d71e14623b4333aaafb890fb899d99626757c650d35a6f364b14fc896d71aad21045ac6b073be1696fb", @nested={0x7f, 0x5b, 0x0, 0x1, [@generic="937dddd644ff2c28598642c58aabc0a0239b633712152df0016f538290e443da2bfb1a8fd9efe0903796b0e7ee64990b8bcd713f11d3aec7236f3c887b1bbee556d774c684328128270f1f13b433f6eae63d78c8996d306da42a4afba7384f8704fd3b2be8d9f563adebe553955f0cef038f74484b3699735d8ff7"]}, @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="1ea717334cfb8023631644da37a3", @generic="b638b01541975366ee2ca3289afb1c174b765ba5ae87d16288e386"]}, @MACSEC_ATTR_SA_CONFIG={0xfe, 0x3, 0x0, 0x1, [@generic="a6de7080533bb92379850064ce7a031b938e5875b6264a7a9b0ffce0454ab9440856a4bbcd996be88af6fc601db8716e4ce5ff0ed1b4737b36c5ce503f280219460c417740a1ae1ade5dfd312d4c027b6f7b01ba416755e544e6499219dcd52bccdccc69af0117eb5d4edfe3fb7ce9aa10561b17b3a19a0c7901a44a20efb31a44d5ca2a321352526b4d7778e511ba8f6d1258ba0696a9d6dc9f64f583b65cedacaacce5620677321cf4c465d6e53ff6753de6616f32941963d1e11efd19a63aed417fce56182e5ccb82fd57504122c596fcf184f394e479d82f8bb14bace0ed6ce8", @typed={0x8, 0x79, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x124, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0xbb, 0x0, 0x0, @pid=r7}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
open(&(0x7f00000001c0)='./cgroup\x00', 0x30480, 0xb5d1af1605322d56)

5.782964532s ago: executing program 6 (id=4787):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

5.324985879s ago: executing program 8 (id=4791):
r0 = prctl$auto(0x1000000001c, 0x5, 0x4, 0x8, 0x80002)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "0903fe2cb6bf"}, @HWSIM_ATTR_FRAME={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
recvfrom$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0x4020940c, 0x5)
fstat$auto(r0, &(0x7f0000000200)={0x0, 0x8001, 0x5, 0x1, <r3=>0xee01, 0xffffffffffffffff, 0x0, 0x7f, 0xffffffff, 0x9, 0x8, 0x9, 0x8000000000000000, 0x5, 0x10000})
sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401208}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NCSI_ATTR_PACKAGE_LIST={0x2c, 0x2, 0x0, 0x1, [@nested={0x28, 0xfa, 0x0, 0x1, [@typed={0xc, 0x108, 0x0, 0x0, @str='\xa2-:\\,-[*'}, @nested={0x4, 0x8f}, @typed={0x8, 0x60, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x72, 0x0, 0x0, @u64=0x7}]}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x9}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x5}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
open(0x0, 0x22240, 0x155)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r6=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r4}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0xf5, 0x8000, 0x67)

4.600651868s ago: executing program 8 (id=4793):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/trace\x00', 0x80800, 0x0)
read$auto(0x3, 0x0, 0x400000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
madvise$auto(0x0, 0x2003f0, 0x15)
socket(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r1 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80)

4.010873008s ago: executing program 6 (id=4795):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0x10, 0x2, 0x4)
ppoll$auto(&(0x7f0000000280)={r0, 0x8, 0x1f09}, 0x6, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x81)
recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffa, 0x0, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x6, 0x15, 0xffd, 0xfffffffe, 0x4, 0xf, 0x0, 0x0, 0xe, 0x3, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sigaltstack$auto(&(0x7f0000000000)={&(0x7f0000000100)="81cab0212aff3f4dd42f9e5692b7a13a14fdae7179c3735820e836c419fab9df4c15525d0168507d821f530d2c460612fde4db812b2c129c13d51ee31e98244d9624555d18b369ca572678547511e0a2b6eac0668b8faf6ca8fcb066791f701533c379f9e77373c453968b23fe99d742503747b6e32d82f1db", 0x1, 0x7f}, &(0x7f0000000180)={&(0x7f0000000280)="820a4c355dd36a23b176e4082a529d1a7b28b343df26d1d67c882073d602abd20b02da914f95dc32f6ce6c1dbd2b7f023e7f579f6d069243251487bd26538ca469cffea3b4968225383c98519495f27b7ae2d994bf5235144104e1eb284555729276fe8628649b9e64120e523ab302c1a6013b1a0956dbc0579840ae8941e1324eea1aa81af9be71787652d6f9ed5876685c06e2ec5e3b026debda", 0x8, 0x9})
r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
shmctl$auto(0x0, 0x5, &(0x7f0000000440)={{0x5, <r6=>0xee01, 0x0, 0x29a1, 0x7, 0x8}, 0x0, 0x0, 0xb, 0xc4d, @raw=0xad6, @inferred, 0x8, 0x0, &(0x7f0000000340)="11962813083f9c3d4c", &(0x7f0000000380)="4317506c4490c1dd551e7ae7e4d8b45acb8320b65f839c5d801201ed23b57c2c5c0fded740ef5bd0d76f55cc68b16bf2bf71dfbb9ef99978b6c19ffd23d6954c8b72228a2dc04ead82419c485f45df0bf16f29d9a7dac72a1ebb9359f3e5311a42c76c80821028f875a043417558544865215dbdafe881d14ed8dd23d2deae8c94d2edfd2ac1ffb7e75a"})
r7 = gettid()
kill$auto(r7, 0x11)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000600)={0x3f8, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_SA_CONFIG={0x2e0, 0x3, 0x0, 0x1, [@nested={0xc1, 0xad, 0x0, 0x1, [@generic="b1f60470ca0c94017b0243b2439c61e0c90d59e8f94c3dfe854386a2de3d279e10c0d5d23ae4bcbffa91c5156028a78bd65444ffc71deed692e83844813e6bc5da7f7db19da8119dc68521ad9fa227b11e212a26cd101d4ab2f32cde4fc9a43655d4f596dabe05bd1dfba7bf6323cc35647b1b33d9ed2f09991761550c47184c473507e981fb84e4f3c23c6591bbfa07ddfcd1", @generic="68554fe71c6540c1c6f94ffa80c52105f3f5be92d06e81d011d158577c1adbd108f01a291ad6f4964221"]}, @generic="0aef9e3744e743a3ccb54265de8c8593b447f25068db6d44bf94de880d0d557e009ff505659d7e43b49f29cdce1ff7a76124ed8546bb480b2f92b6a936755a0a9f30dc3c907ebe7f167fb28abb086d8ca5a5acd386baef2306b7c9554be47285a372f59817c1a707814573d7c3925848f5b57c008792bc7b861086eb32ae828d77e32583857cc7676899d57e1584a39435e5abb1566e2aeda731b8ebb57be570b644f579e0a72f396305af5f46436b502581ef1d96c23eb2a173556e694fb654b7126ef3ce49993760ac6a2758ba9b4d1ece74b26d4ddcdd55262010cc634044445e1a361c4f2a0bb4c2bea1030391", @generic="ebe3f1c76304b46f64dccf39daed69df7aa0f9a48e2f024a2cb88b773a14532e7281af17ad5bfdba26f9d3da45d21df3aaa9dde55139fc01ff5e421050e5791079f09ae527debcea1a388b1d23b30d71e14623b4333aaafb890fb899d99626757c650d35a6f364b14fc896d71aad21045ac6b073be1696fb", @nested={0x7f, 0x5b, 0x0, 0x1, [@generic="937dddd644ff2c28598642c58aabc0a0239b633712152df0016f538290e443da2bfb1a8fd9efe0903796b0e7ee64990b8bcd713f11d3aec7236f3c887b1bbee556d774c684328128270f1f13b433f6eae63d78c8996d306da42a4afba7384f8704fd3b2be8d9f563adebe553955f0cef038f74484b3699735d8ff7"]}, @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="1ea717334cfb8023631644da37a3", @generic="b638b01541975366ee2ca3289afb1c174b765ba5ae87d16288e386"]}, @MACSEC_ATTR_SA_CONFIG={0xfe, 0x3, 0x0, 0x1, [@generic="a6de7080533bb92379850064ce7a031b938e5875b6264a7a9b0ffce0454ab9440856a4bbcd996be88af6fc601db8716e4ce5ff0ed1b4737b36c5ce503f280219460c417740a1ae1ade5dfd312d4c027b6f7b01ba416755e544e6499219dcd52bccdccc69af0117eb5d4edfe3fb7ce9aa10561b17b3a19a0c7901a44a20efb31a44d5ca2a321352526b4d7778e511ba8f6d1258ba0696a9d6dc9f64f583b65cedacaacce5620677321cf4c465d6e53ff6753de6616f32941963d1e11efd19a63aed417fce56182e5ccb82fd57504122c596fcf184f394e479d82f8bb14bace0ed6ce8", @typed={0x8, 0x79, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x124, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0xbb, 0x0, 0x0, @pid=r7}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
open(&(0x7f00000001c0)='./cgroup\x00', 0x30480, 0xb5d1af1605322d56)

3.523758326s ago: executing program 37 (id=4795):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000)
socket(0x10, 0x2, 0x4)
ppoll$auto(&(0x7f0000000280)={r0, 0x8, 0x1f09}, 0x6, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
write$auto(0x3, 0x0, 0x81)
recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffa, 0x0, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x6, 0x15, 0xffd, 0xfffffffe, 0x4, 0xf, 0x0, 0x0, 0xe, 0x3, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sigaltstack$auto(&(0x7f0000000000)={&(0x7f0000000100)="81cab0212aff3f4dd42f9e5692b7a13a14fdae7179c3735820e836c419fab9df4c15525d0168507d821f530d2c460612fde4db812b2c129c13d51ee31e98244d9624555d18b369ca572678547511e0a2b6eac0668b8faf6ca8fcb066791f701533c379f9e77373c453968b23fe99d742503747b6e32d82f1db", 0x1, 0x7f}, &(0x7f0000000180)={&(0x7f0000000280)="820a4c355dd36a23b176e4082a529d1a7b28b343df26d1d67c882073d602abd20b02da914f95dc32f6ce6c1dbd2b7f023e7f579f6d069243251487bd26538ca469cffea3b4968225383c98519495f27b7ae2d994bf5235144104e1eb284555729276fe8628649b9e64120e523ab302c1a6013b1a0956dbc0579840ae8941e1324eea1aa81af9be71787652d6f9ed5876685c06e2ec5e3b026debda", 0x8, 0x9})
r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
shmctl$auto(0x0, 0x5, &(0x7f0000000440)={{0x5, <r6=>0xee01, 0x0, 0x29a1, 0x7, 0x8}, 0x0, 0x0, 0xb, 0xc4d, @raw=0xad6, @inferred, 0x8, 0x0, &(0x7f0000000340)="11962813083f9c3d4c", &(0x7f0000000380)="4317506c4490c1dd551e7ae7e4d8b45acb8320b65f839c5d801201ed23b57c2c5c0fded740ef5bd0d76f55cc68b16bf2bf71dfbb9ef99978b6c19ffd23d6954c8b72228a2dc04ead82419c485f45df0bf16f29d9a7dac72a1ebb9359f3e5311a42c76c80821028f875a043417558544865215dbdafe881d14ed8dd23d2deae8c94d2edfd2ac1ffb7e75a"})
r7 = gettid()
kill$auto(r7, 0x11)
sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000600)={0x3f8, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_SA_CONFIG={0x2e0, 0x3, 0x0, 0x1, [@nested={0xc1, 0xad, 0x0, 0x1, [@generic="b1f60470ca0c94017b0243b2439c61e0c90d59e8f94c3dfe854386a2de3d279e10c0d5d23ae4bcbffa91c5156028a78bd65444ffc71deed692e83844813e6bc5da7f7db19da8119dc68521ad9fa227b11e212a26cd101d4ab2f32cde4fc9a43655d4f596dabe05bd1dfba7bf6323cc35647b1b33d9ed2f09991761550c47184c473507e981fb84e4f3c23c6591bbfa07ddfcd1", @generic="68554fe71c6540c1c6f94ffa80c52105f3f5be92d06e81d011d158577c1adbd108f01a291ad6f4964221"]}, @generic="0aef9e3744e743a3ccb54265de8c8593b447f25068db6d44bf94de880d0d557e009ff505659d7e43b49f29cdce1ff7a76124ed8546bb480b2f92b6a936755a0a9f30dc3c907ebe7f167fb28abb086d8ca5a5acd386baef2306b7c9554be47285a372f59817c1a707814573d7c3925848f5b57c008792bc7b861086eb32ae828d77e32583857cc7676899d57e1584a39435e5abb1566e2aeda731b8ebb57be570b644f579e0a72f396305af5f46436b502581ef1d96c23eb2a173556e694fb654b7126ef3ce49993760ac6a2758ba9b4d1ece74b26d4ddcdd55262010cc634044445e1a361c4f2a0bb4c2bea1030391", @generic="ebe3f1c76304b46f64dccf39daed69df7aa0f9a48e2f024a2cb88b773a14532e7281af17ad5bfdba26f9d3da45d21df3aaa9dde55139fc01ff5e421050e5791079f09ae527debcea1a388b1d23b30d71e14623b4333aaafb890fb899d99626757c650d35a6f364b14fc896d71aad21045ac6b073be1696fb", @nested={0x7f, 0x5b, 0x0, 0x1, [@generic="937dddd644ff2c28598642c58aabc0a0239b633712152df0016f538290e443da2bfb1a8fd9efe0903796b0e7ee64990b8bcd713f11d3aec7236f3c887b1bbee556d774c684328128270f1f13b433f6eae63d78c8996d306da42a4afba7384f8704fd3b2be8d9f563adebe553955f0cef038f74484b3699735d8ff7"]}, @typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="1ea717334cfb8023631644da37a3", @generic="b638b01541975366ee2ca3289afb1c174b765ba5ae87d16288e386"]}, @MACSEC_ATTR_SA_CONFIG={0xfe, 0x3, 0x0, 0x1, [@generic="a6de7080533bb92379850064ce7a031b938e5875b6264a7a9b0ffce0454ab9440856a4bbcd996be88af6fc601db8716e4ce5ff0ed1b4737b36c5ce503f280219460c417740a1ae1ade5dfd312d4c027b6f7b01ba416755e544e6499219dcd52bccdccc69af0117eb5d4edfe3fb7ce9aa10561b17b3a19a0c7901a44a20efb31a44d5ca2a321352526b4d7778e511ba8f6d1258ba0696a9d6dc9f64f583b65cedacaacce5620677321cf4c465d6e53ff6753de6616f32941963d1e11efd19a63aed417fce56182e5ccb82fd57504122c596fcf184f394e479d82f8bb14bace0ed6ce8", @typed={0x8, 0x79, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x124, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0xbb, 0x0, 0x0, @pid=r7}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x40b4ff743f26f506}, 0x0)
open(&(0x7f00000001c0)='./cgroup\x00', 0x30480, 0xb5d1af1605322d56)

3.514067077s ago: executing program 8 (id=4797):
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async)
open(0x0, 0x22040, 0x75) (async)
sched_setaffinity$auto(0x0, 0x80, &(0x7f0000000000)=0x3) (async, rerun: 32)
r0 = socket(0x10, 0x2, 0x4) (rerun: 32)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3.194806032s ago: executing program 8 (id=4799):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf4644d6050008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x20000084)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="080025bd7000fddbdf256d000000dc0180001e62744075f95435e1eec20198d137ebbc7b5fd067c265c9cacad0d2ea0e569fd06cc333266d4bbe60a346313a61334baae574936dc530012d50d556daac1416ce35f7b5d7cbf5cc457c7f81f601de20e4acf6e45aed986830eab2cf7a87ad0db7f87b5b761a11f3755215f6187fe6ea9d6066c7fb7b07edc969df90077fffa24503f8fadd055e58e7b334b6a5649e3b25a7c638c09dd041d1486cf47792162e140f8e3f3c40339e590b3fa3994fdf5b29df5f6d4d3441017f000000000000000f86943cf467ed3a40c9b62bb07cee5922996240ae17fd38d2846c6b0de850ca7c6a0d7524443732da4b40e655742376cc684dc093ae974c859870664e159d887c4e63b65059cbdeb94fd0bf89965671925283e00e60440ed9230162f1a9ae25ad70cda036c11bc271a7be0605d06a0353f280a17a514e84f545378fb5456f11a3f66175ce7b44054a239573b87292c2cd3b16fe85d25a51d0b4197d8c86d68ec2692fac059cfba37b0d4d57e4ee8646f52cbe5b804bafb939ea1478472c9f809130c9bce66fa9b68e096725cd5889d78f0d3b0cd28e05184ef38eb2d76a97d5a000874068896a983998b03181ec79cd597e72ec0385a4124f6e57619378f3a94055b4fde665a07500000000000000000000000000000000a8fd74916059f8bc75da6517ef0e4d289d41fcc2e93655b04f019f7982ff94036600b14ec17685487cf24a6450fd98274d896eba81f10271e95afc8d0b0418ca0e4faf061d8e741736d66f23b026f30c252e45f05e4f3e2c0c7ec1ea9c251ba187048be326a7fa859c560000b600c8004729bfd49508d008479a2de6e48953f417e7b95e6bc3fc8d272b7d18a379107dde19f3367c90e3ac576a08a1776db867842fcabd0c4fe1864ecdf2ea847a09a79d3c5859a28878e774c6df25d494a84574c1635114209aa79368561f732eaea040fe463d500ad8edc83814d7b000baf50bda7d21c4333764dbe07a2fc9ccc8f7c767c58d74e7b72a69635dc34964deb0154c21f0dfa3cae42bd59e79186b334f3417c522e159968c2f6cc1f2a9103b0dc1930000"], 0x161}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4c004)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
r3 = socket(0x18, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004)
r4 = socket(0x10, 0x2, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x40000009, 0xffffffffffffffff, [0x100, 0x9, 0x47f], {0x2, 0x7, 0x3036, 0x6, 0xf, 0x5, 0x5, 0x720, 0x1000005}, {0x3, 0xfc, 0x6, 0x1, 0x0, 0xf89, 0x9, 0x837, 0x8}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0)
socket(0x10, 0x2, 0x0)
capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc)
epoll_create$auto(0x4)
write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0xffffff4b)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
setgroups$auto(0xe32, &(0x7f0000000040)=0x9)

3.024903452s ago: executing program 1 (id=4800):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x2, 0x88)
mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b4a, 0x9)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x400000)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
write$auto(0x3, 0x0, 0xffd8)
sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000026c0)={0x138c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_STATS={0x1335, 0x1e, 0x0, 0x1, [@typed={0x10, 0xda, 0x0, 0x0, @str='-\\!\xd6@[/%\xd6#{\x00'}, @generic="50f5e9794b79e4b419d41e2bd7e067face56b8c8e8213db6ed9403d0f6092b8330fe2fab4b17b160914aca3771821945911764c9a1a56254cb8f3a834b816c33bfb9c4aa30ce819408d9fd1ee2ec28606ed677b33d20edbcb87600d9e5627abdaf7969548ac533dd3c14baa5130e5a759844eb3d5ede3daa82b76ee23bbb35e3ee8e8dfb44b6915f863583d1c984e7073db734d9c62a4049336defcb6097f3e08f21cf76eeeaed21fb6aa50dd4c3f7ac02e86dd783089f6caef11b9261deee35fba761", @generic="953dfd0a6684b479013b6d24d14b1024fbcd0ca34f0c0d229991e9ecaf56dd9c0283806bc9cda7e3143f123818893f30b2180fdab5c7f81b24b00b1680220d9caa0d342aa7328526bf5d631cf9b80cc14d45be3a5094bc67f4c37d289e42af12571d240cf8b4dae24b39d88a169760ca8a5585f0b328c32b28cfb9b970", @typed={0x11, 0x57, 0x0, 0x0, @str='-*{&*&-@.,(+\x00'}, @generic="ff9c70529688741d0cc7489b1eb35cc522ddaa9b19a8b6c1bf6f004e84df42ab9da1de36d324ed8e8547f393e9748e4f3c7cadea0669dab651944b81c7ea5a9546bf322c00257e51fd626b437bc3e7af4246c1a023d268492760499006258957e4c75b6f76023b7f80415bf6eed5cebc83", @generic="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", @nested={0x15a, 0xe4, 0x0, 0x1, [@nested={0x4, 0x14b}, @generic, @typed={0x8, 0x10e, 0x0, 0x0, @fd}, @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r0}, @generic="ec3a9d18a6caaff617a87787ed78292a455c39453220c713020ccd7f0735aa0cc32808b64e3cb3274bfceca369280588e7d7a677c3fdeb6b3a7ca2d6a52842478fc86d674a5ff6857cb9ff99acf31ded5ef0055939c24deb8b90a16b366aa0a493b8b913f41f54a0ebb19e5531b3d9ac0272841b3999ce5eb5fe12f99cecaabeeee971706c3fb7", @generic="f65fbf1af920cd128c199f4650133794b3b5ba639c3fec1f19e2003d8ecd6bcfde1bd32178c54b9d3bfd37eaef75d6558b0882295454bfc086516984eb72711543bc469438a860fbff3f551df72fcf99d18862336ecf5794e6424c13525eacc1d9c44e11b80aa4fe3bf534b71357794869e60482af2cb4d7e7a879e042d2000d740b88fb4031b7ac17e0e12f3895e9a5eefbeaf4bcf43e35db6e94466db694cc69ce8bad6dae0a2eedc624efe65897b0abe51f"]}]}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x138c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(0x0, 0x0, 0x408)
fchown$auto(0x0, 0x8000000000000000, 0x0)
getdents64$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x2, 0x1}, 0x100400)
sched_setaffinity$auto(0x0, 0x80000000, &(0x7f0000000040)=0x1b26a056)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x2010000000000)
r1 = open(&(0x7f0000000000)='./file1\x00', 0x10677d, 0x37e5c9853cd1b999)
fanotify_mark$auto(0x400000000000, 0x101, 0x8040, r1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
clone3$auto(0x0, 0x1000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd)

2.021845352s ago: executing program 1 (id=4801):
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x28, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$auto_macsec(0x0, r0)
sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="962ff7ba07000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000600), r0)
io_uring_register$auto(0x7ff, 0x80000000, 0x0, 0x2)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
uname$auto(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
socket(0x2, 0x3, 0x100)
sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="29012cbd70f70000002517db", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x14)
r4 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/f2fs/status\x00', 0x141000, 0x0)
r5 = geteuid()
msgctl$auto(0x7, 0xf67d, &(0x7f0000000440)={{0x5, r5, 0xee00, 0x8001, 0x2d, 0x0, 0x776e}, &(0x7f00000003c0)=0xf, &(0x7f0000000400)=0x8, 0x5, 0x9, 0x3, 0xc, 0x0, 0x8, 0x6, 0xfffe, @raw})
setreuid$auto(r5, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf252100000008002700070000002000a68004008880", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008804}, 0x2040084)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000380)=ANY=[@ANYBLOB='8:\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf2503000000040001801f3a01"], 0x3a38}, 0x1, 0x0, 0x0, 0x4}, 0x40082)

1.684232635s ago: executing program 1 (id=4802):
r0 = prctl$auto(0x1000000001c, 0x5, 0x4, 0x8, 0x80002)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "0903fe2cb6bf"}, @HWSIM_ATTR_FRAME={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
recvfrom$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0)
ioctl$auto(0x3, 0x4020940c, 0x5)
fstat$auto(r0, &(0x7f0000000200)={0x0, 0x8001, 0x5, 0x1, <r3=>0xee01, 0xffffffffffffffff, 0x0, 0x7f, 0xffffffff, 0x9, 0x8, 0x9, 0x8000000000000000, 0x5, 0x10000})
sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401208}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NCSI_ATTR_PACKAGE_LIST={0x2c, 0x2, 0x0, 0x1, [@nested={0x28, 0xfa, 0x0, 0x1, [@typed={0xc, 0x108, 0x0, 0x0, @str='\xa2-:\\,-[*'}, @nested={0x4, 0x8f}, @typed={0x8, 0x60, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x72, 0x0, 0x0, @u64=0x7}]}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x9}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x5}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
open(0x0, 0x22240, 0x155)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan1\x00', <r6=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r4}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0xf5, 0x8000, 0x67)

1.68406353s ago: executing program 3 (id=4803):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.439297842s ago: executing program 3 (id=4804):
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
close_range$auto(0x2, 0x8, 0xfffd)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x2b, 0x1, 0x0)
socket(0x2, 0x3, 0xa)
socket(0x2, 0x5, 0x0)
uname$auto(&(0x7f0000000100)={"f9389bb354eeb2fb2c9d2aa09970adefe84e2f5e1f9b407527ad37ac7df158df7bd7d49faa92789da24abeb26dc7be6dda078845f0ccad63b61faf5d9f0e1abb97", "0b2f4b68f9ff6ff765f4c17c9aed24d5c5ffd7b727286cc8efeb3378f0ad4a6a877031237cf1c6044f25c1c6294a8495da04ef217a24d18073ea37505d1912b5b1", "a5778c62439f766504b0bbf6c57d20a9fd03709e414a35b16e8d1af0708d726da400cd5f1d67c7723ef4e12672ce96b44bd495df89ec288b929a62bb1442c31d05", "7379a63042186c1feb558f88595c6872138b89b9d9fa738c4394fe57ee73395b85f827b385d678638fe7bcc393d5bc62b38fbad7779f9dc609d3d1900ce0e5b0bb", "01fe20258ce84ec2ed52a58f0f8d0f1bea9842900a229269c35b64b42825080b69678c6c6f8812dee237f638334a40ee774d248bab3c743a781c1edcfa2b1a51e9", "0e35470fd57051ad628e5d2adab726a7b6151d5cb433b2a1041a8d231d6813712feb864da7ad029f35c75fde2bbf2bd579ca37a9d9c164273476c5002056394eae"})
getsockopt$auto(0x6, 0x84, 0x10, 0x0, &(0x7f00000000c0)=0x10000)

1.27873038s ago: executing program 8 (id=4806):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf4644d6050008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x20000084)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a8312b69", @ANYRESOCT=r2, @ANYBLOB="080025bd7000fddbdf256d000000dc0180001e62744075f95435e1eec20198d137ebbc7b5fd067c265c9cacad0d2ea0e569fd06cc333266d4bbe60a346313a61334baae574936dc530012d50d556daac1416ce35f7b5d7cbf5cc457c7f81f601de20e4acf6e45aed986830eab2cf7a87ad0db7f87b5b761a11f3755215f6187fe6ea9d6066c7fb7b07edc969df90077fffa24503f8fadd055e58e7b334b6a5649e3b25a7c638c09dd041d1486cf47792162e140f8e3f3c40339e590b3fa3994fdf5b29df5f6d4d3441017f000000000000000f86943cf467ed3a40c9b62bb07cee5922996240ae17fd38d2846c6b0de850ca7c6a0d7524443732da4b40e655742376cc684dc093ae974c859870664e159d887c4e63b65059cbdeb94fd0bf89965671925283e00e60440ed9230162f1a9ae25ad70cda036c11bc271a7be0605d06a0353f280a17a514e84f545378fb5456f11a3f66175ce7b44054a239573b87292c2cd3b16fe85d25a51d0b4197d8c86d68ec2692fac059cfba37b0d4d57e4ee8646f52cbe5b804bafb939ea1478472c9f809130c9bce66fa9b68e096725cd5889d78f0d3b0cd28e05184ef38eb2d76a97d5a000874068896a983998b03181ec79cd597e72ec0385a4124f6e57619378f3a94055b4fde665a07500000000000000000000000000000000a8fd74916059f8bc75da6517ef0e4d289d41fcc2e93655b04f019f7982ff94036600b14ec17685487cf24a6450fd98274d896eba81f10271e95afc8d0b0418ca0e4faf061d8e741736d66f23b026f30c252e45f05e4f3e2c0c7ec1ea9c251ba187048be326a7fa859c560000b600c8004729bfd49508d008479a2de6e48953f417e7b95e6bc3fc8d272b7d18a379107dde19f3367c90e3ac576a08a1776db867842fcabd0c4fe1864ecdf2ea847a09a79d3c5859a28878e774c6df25d494a84574c1635114209aa79368561f732eaea040fe463d500ad8edc83814d7b000baf50bda7d21c4333764dbe07a2fc9ccc8f7c767c58d74e7b72a69635dc34964deb0154c21f0dfa3cae42bd59e79186b334f3417c522e159968c2f6cc1f2a9103b0dc1930000"], 0x161}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4c004)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2)
r3 = socket(0x18, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004)
r4 = socket(0x10, 0x2, 0x4)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x40000009, 0xffffffffffffffff, [0x100, 0x9, 0x47f], {0x2, 0x7, 0x3036, 0x6, 0xf, 0x5, 0x5, 0x720, 0x1000005}, {0x3, 0xfc, 0x6, 0x1, 0x0, 0xf89, 0x9, 0x837, 0x8}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0)
socket(0x10, 0x2, 0x0)
capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc)
epoll_create$auto(0x4)
write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, 0x0, 0xffffff4b)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb)
setgroups$auto(0xe32, &(0x7f0000000040)=0x9)

1.153953368s ago: executing program 3 (id=4807):
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r0, 0x405c5503, 0x81)

1.01921405s ago: executing program 1 (id=4808):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setreuid$auto(0x4, 0x8)
prctl$auto(0x2f, 0x2, 0x8, 0x0, 0x0)
socket(0x2, 0x3, 0xa)
open(0x0, 0x0, 0x6f)
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000)
open(0x0, 0x261c2, 0x84)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
read$auto(0x3, 0x0, 0x80)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a)
mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000)
io_submit$auto(0x7, 0x8003, &(0x7f0000000100)=&(0x7f00000000c0)={0xfffffffffffffffe, 0x8, 0x216a40, 0x202, 0xfe01, 0xffffffffffffffff, 0x5, 0x3, 0x805})
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xf}, 0x6, 0x0)
r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$auto_I2C_SMBUS(r1, 0x720, 0x4)
ioctl$auto(0x3, 0x40085618, 0x38)
r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0)
fsopen$auto(&(0x7f0000000040)='/dev/v4l-subdev2\x00', 0x6)
write$auto_console_fops_tty_io(r2, &(0x7f00000000c0)="347ffdb3417db2a749df6d0ce5", 0xd)

998.50525ms ago: executing program 3 (id=4809):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x8802, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x5452, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x575480, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)

756.965049ms ago: executing program 3 (id=4810):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
arch_prctl$auto(0x5001, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x6)
fsopen$auto(&(0x7f0000002840)='\xa1+:-.-+@#}\x00', 0x1)
setsockopt$auto(r0, 0x104000000000010e, 0xb, 0x0, 0x400)
r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000080)=0x3ff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

554.215135ms ago: executing program 3 (id=4811):
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
sysfs$auto(0x2, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x5, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci2/force_devcoredump\x00', 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1942, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0)
ioctl$auto_TIOCGDEV2(r0, 0x5453, 0x0)
read$auto_tty_fops_tty_io(r0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x7)
mmap$auto(0x0, 0x2020009, 0x32f, 0x8010, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x2, 0x5, 0x7)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x1001, 0x0)
sysinfo$auto(0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22242, 0x155)
socket(0x2, 0x1, 0x0)
fanotify_init$auto(0x66, 0x2)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)

220.698347ms ago: executing program 1 (id=4812):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
setresuid$auto(0xffffffffffffffff, 0x8, 0x8000)
setfsuid$auto(0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x80000006}, 0x9}, 0x7, 0x6, 0x0)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd8/pm_only\x00', 0x8480, 0x0)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
r2 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x200, 0x0)
readv$auto(r2, &(0x7f0000000100)={&(0x7f0000000080), 0x7f}, 0x81)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r3 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/options/userstacktrace\x00', 0x900, 0x0)
read$auto_trace_options_core_fops_trace(r3, &(0x7f0000000300)=""/90, 0x5a)
socket(0x25, 0x6, 0x2)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000380)=""/193, 0xc1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
write$auto(r0, &(0x7f0000000140)=']\x00', 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x80, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0xe, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r4, 0x4b31, 0x9)

0s ago: executing program 1 (id=4813):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

kernel console output (not intermixed with test programs):

rof+0x10/0x10
[  956.086578][T20539]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  956.092544][T20539]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  956.097913][T20539]  vmalloc_noprof+0x6b/0x90
[  956.102489][T20539]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  956.107862][T20539]  dvb_demux_do_ioctl+0x54d/0x1340
[  956.113072][T20539]  dvb_usercopy+0x165/0x320
[  956.117651][T20539]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  956.123278][T20539]  ? __pfx_dvb_usercopy+0x10/0x10
[  956.128381][T20539]  ? __pfx_lock_release+0x10/0x10
[  956.133482][T20539]  ? __fget_files+0x206/0x3a0
[  956.138236][T20539]  dvb_demux_ioctl+0x29/0x40
[  956.142903][T20539]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  956.148357][T20539]  __x64_sys_ioctl+0x190/0x200
[  956.153191][T20539]  do_syscall_64+0xcd/0x250
[  956.157773][T20539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.163741][T20539] RIP: 0033:0x7f07c6985d29
[  956.168209][T20539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  956.187887][T20539] RSP: 002b:00007f07c77ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  956.196379][T20539] RAX: ffffffffffffffda RBX: 00007f07c6b76080 RCX: 00007f07c6985d29
[  956.204415][T20539] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[  956.212450][T20539] RBP: 00007f07c6a01b08 R08: 0000000000000000 R09: 0000000000000000
[  956.220489][T20539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  956.228522][T20539] R13: 0000000000000000 R14: 00007f07c6b76080 R15: 00007ffce2d42598
[  956.236579][T20539]  </TASK>
[  956.272720][T20539] Mem-Info:
[  956.275988][T20539] active_anon:62836 inactive_anon:0 isolated_anon:743
[  956.275988][T20539]  active_file:4343 inactive_file:60047 isolated_file:0
[  956.275988][T20539]  unevictable:1318 dirty:797 writeback:0
[  956.275988][T20539]  slab_reclaimable:11364 slab_unreclaimable:103506
[  956.275988][T20539]  mapped:30652 shmem:45731 pagetables:929
[  956.275988][T20539]  sec_pagetables:0 bounce:0
[  956.275988][T20539]  kernel_misc_reclaimable:0
[  956.275988][T20539]  free:1245969 free_pcp:16339 free_cma:0
[  956.372669][T20539] Node 0 active_anon:180656kB inactive_anon:0kB active_file:10244kB inactive_file:238956kB unevictable:3736kB isolated(anon):2972kB isolated(file):0kB mapped:121424kB dirty:3188kB writeback:0kB shmem:110700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11164kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no
[  956.493821][T20539] Node 1 active_anon:71088kB inactive_anon:0kB active_file:7128kB inactive_file:1232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1184kB dirty:0kB writeback:0kB shmem:72624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no
[  956.581428][T20539] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  956.652657][T20539] lowmem_reserve[]: 0 2491 2492 0 0
[  956.658039][T20539] Node 0 DMA32 free:1205268kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:184816kB inactive_anon:0kB active_file:10244kB inactive_file:239224kB unevictable:1736kB writepending:3188kB present:3129332kB managed:2551336kB mlocked:68kB bounce:0kB free_pcp:3580kB local_pcp:424kB free_cma:0kB
[  956.716904][T20539] lowmem_reserve[]: 0 0 0 0 0
[  956.721765][T20539] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  956.792420][T20539] lowmem_reserve[]: 0 0 0 0 0
[  956.797314][T20539] Node 1 Normal free:3782884kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:65988kB inactive_anon:0kB active_file:7128kB inactive_file:1232kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:49128kB local_pcp:18328kB free_cma:0kB
[  956.875494][T20539] lowmem_reserve[]: 0 0 0 0 0
[  956.880334][T20539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  956.942423][T20539] Node 0 DMA32: 448*4kB (UME) 452*8kB (UME) 607*16kB (UME) 1136*32kB (UME) 564*64kB (UME) 427*128kB (UME) 279*256kB (UM) 130*512kB (UME) 36*1024kB (UME) 8*2048kB (UM) 212*4096kB (UME) = 1201808kB
[  957.022468][T20539] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  957.059863][T20539] Node 1 Normal: 8450*4kB (UME) 51*8kB (UME) 776*16kB (UME) 2223*32kB (UME) 1094*64kB (UME) 545*128kB (UME) 193*256kB (UME) 57*512kB (UME) 14*1024kB (UME) 2*2048kB (UE) 837*4096kB (M) = 3782912kB
[  957.129376][T20539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  957.139929][T20539] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  957.172392][T20539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  957.201294][T20539] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  957.210901][T20539] 108478 total pagecache pages
[  957.232385][T20539] 29 pages in swap cache
[  957.236714][T20539] Free swap  = 124652kB
[  957.260158][T20539] Total swap = 124996kB
[  957.268740][T20539] 2097051 pages RAM
[  957.281416][T20539] 0 pages HighMem/MovableOnly
[  957.286251][T20539] 427367 pages reserved
[  957.290450][T20539] 0 pages cma reserved
[  958.282348][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3714'.
[  958.315882][T20572] lo: entered allmulticast mode
[  958.391183][T20576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3713'.
[  958.941343][T20571] lo: left allmulticast mode
[  960.622161][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'.
[  960.989530][T20614] openvswitch: netlink: Key type 11012 is out of range max 32
[  961.074918][T20612] Process accounting resumed
[  963.319306][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'.
[  963.995216][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3739'.
[  964.087823][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3738'.
[  970.262836][T20740] can: request_module (can-proto-5) failed.
[  971.721273][T20761] warn_alloc: 1 callbacks suppressed
[  971.721300][T20761] syz.4.3762: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  971.825806][T20761] CPU: 1 UID: 0 PID: 20761 Comm: syz.4.3762 Not tainted 6.13.0-rc5-syzkaller #0
[  971.834933][T20761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  971.845076][T20761] Call Trace:
[  971.848411][T20761]  <TASK>
[  971.851391][T20761]  dump_stack_lvl+0x16c/0x1f0
[  971.857014][T20761]  warn_alloc+0x24d/0x3a0
[  971.861420][T20761]  ? __pfx_warn_alloc+0x10/0x10
[  971.866938][T20761]  ? __pfx_mark_lock+0x10/0x10
[  971.871786][T20761]  ? lock_acquire.part.0+0x11b/0x380
[  971.877133][T20761]  __vmalloc_node_range_noprof+0x10df/0x1530
[  971.883172][T20761]  ? rcu_is_watching+0x12/0xc0
[  971.887991][T20761]  ? trace_contention_end+0xee/0x140
[  971.893328][T20761]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  971.898667][T20761]  ? dvb_demux_do_ioctl+0x496/0x1340
[  971.904011][T20761]  ? __pfx___mutex_lock+0x10/0x10
[  971.909090][T20761]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  971.915473][T20761]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  971.921408][T20761]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  971.926743][T20761]  vmalloc_noprof+0x6b/0x90
[  971.931296][T20761]  ? dvb_demux_do_ioctl+0x54d/0x1340
[  971.936631][T20761]  dvb_demux_do_ioctl+0x54d/0x1340
[  971.941802][T20761]  dvb_usercopy+0x165/0x320
[  971.946347][T20761]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  971.951957][T20761]  ? __pfx_dvb_usercopy+0x10/0x10
[  971.957017][T20761]  ? __pfx_lock_release+0x10/0x10
[  971.962095][T20761]  ? __fget_files+0x206/0x3a0
[  971.966820][T20761]  dvb_demux_ioctl+0x29/0x40
[  971.971455][T20761]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  971.976796][T20761]  __x64_sys_ioctl+0x190/0x200
[  971.981600][T20761]  do_syscall_64+0xcd/0x250
[  971.986155][T20761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.992097][T20761] RIP: 0033:0x7f07c6985d29
[  971.996546][T20761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  972.016199][T20761] RSP: 002b:00007f07c77ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  972.024659][T20761] RAX: ffffffffffffffda RBX: 00007f07c6b76080 RCX: 00007f07c6985d29
[  972.032667][T20761] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[  972.040678][T20761] RBP: 00007f07c6a01b08 R08: 0000000000000000 R09: 0000000000000000
[  972.048718][T20761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  972.056778][T20761] R13: 0000000000000000 R14: 00007f07c6b76080 R15: 00007ffce2d42598
[  972.064808][T20761]  </TASK>
[  972.215049][T20761] Mem-Info:
[  972.218246][T20761] active_anon:96801 inactive_anon:14 isolated_anon:0
[  972.218246][T20761]  active_file:5922 inactive_file:60751 isolated_file:0
[  972.218246][T20761]  unevictable:801 dirty:513 writeback:0
[  972.218246][T20761]  slab_reclaimable:11443 slab_unreclaimable:103156
[  972.218246][T20761]  mapped:28176 shmem:78766 pagetables:875
[  972.218246][T20761]  sec_pagetables:0 bounce:0
[  972.218246][T20761]  kernel_misc_reclaimable:0
[  972.218246][T20761]  free:1208929 free_pcp:19160 free_cma:0
[  972.330274][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'.
[  972.339457][T20761] Node 0 active_anon:289064kB inactive_anon:56kB active_file:8876kB inactive_file:241776kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:114028kB dirty:2048kB writeback:0kB shmem:215488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11184kB pagetables:3500kB sec_pagetables:0kB all_unreclaimable? no
[  972.481642][T20761] Node 1 active_anon:90240kB inactive_anon:0kB active_file:14812kB inactive_file:1228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1176kB dirty:4kB writeback:0kB shmem:91776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  972.582381][T20761] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  972.661900][T20761] lowmem_reserve[]: 0 2491 2492 0 0
[  972.667902][T20761] Node 0 DMA32 free:1102564kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:277724kB inactive_anon:56kB active_file:8876kB inactive_file:240944kB unevictable:1668kB writepending:2048kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:5160kB local_pcp:2068kB free_cma:0kB
[  972.733809][T20761] lowmem_reserve[]: 0 0 0 0 0
[  972.746899][T20761] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  972.808369][T20761] lowmem_reserve[]: 0 0 0 0 0
[  972.813257][T20761] Node 1 Normal free:3740748kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:75940kB inactive_anon:0kB active_file:14812kB inactive_file:1228kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:73488kB local_pcp:39768kB free_cma:0kB
[  972.892301][T20761] lowmem_reserve[]: 0 0 0 0 0
[  972.902450][T20761] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  972.939746][T20761] Node 0 DMA32: 845*4kB (UME) 1056*8kB (UME) 235*16kB (UME) 282*32kB (UME) 199*64kB (UME) 113*128kB (UME) 280*256kB (UM) 131*512kB (UME) 36*1024kB (UME) 7*2048kB (UM) 211*4096kB (UME) = 1106020kB
[  972.984427][T20761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  973.012988][T20761] Node 1 Normal: 20672*4kB (UME) 2955*8kB (UME) 1036*16kB (UME) 278*32kB (UME) 343*64kB (UME) 545*128kB (UME) 193*256kB (UME) 57*512kB (UME) 14*1024kB (UME) 2*2048kB (UE) 837*4096kB (M) = 3748888kB
[  973.072175][T20761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  973.082074][T20761] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  973.102645][T20761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  973.134452][T20761] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  973.144092][T20761] 131325 total pagecache pages
[  973.164353][T20761] 29 pages in swap cache
[  973.168691][T20761] Free swap  = 124404kB
[  973.172893][T20761] Total swap = 124996kB
[  973.194431][T20761] 2097051 pages RAM
[  973.198317][T20761] 0 pages HighMem/MovableOnly
[  973.203042][T20761] 427367 pages reserved
[  973.222582][T20761] 0 pages cma reserved
[  974.160663][T20781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3768'.
[  974.411274][T20786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3769'.
[  976.217968][T20822] can: request_module (can-proto-5) failed.
[  976.320220][T20818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'.
[  977.029155][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3780'.
[  979.297032][T20869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3792'.
[  979.409555][T20877] Invalid ELF header magic: != ELF
[  979.569703][T20883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3795'.
[  980.020968][T20851] Bluetooth: hci4: command 0x0406 tx timeout
[  982.110250][T20927] binder: 20926:20927 ioctl c018620c 9 returned -14
[  983.185421][T20958] binder: 20957:20958 ioctl c018620c 9 returned -14
[  984.271884][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3824'.
[  984.291312][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3824'.
[  984.673505][T20933] netlink: 'syz.3.3809': attribute type 21 has an invalid length.
[  984.731806][T20933] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3809'.
[  985.420452][T20993] binder: 20992:20993 ioctl c018620c 9 returned -14
[  985.821397][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3830'.
[  987.184482][T21017] Process accounting resumed
[  987.390254][T21018] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3835'.
[  987.998166][T21031] can: request_module (can-proto-5) failed.
[  990.416022][T21069] can: request_module (can-proto-5) failed.
[  990.874097][T21076] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3852'.
[  990.897120][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3852'.
[  993.582905][T21116] can: request_module (can-proto-5) failed.
[  994.326790][T21111] netlink: 'syz.5.3859': attribute type 21 has an invalid length.
[  994.346731][T21111] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3859'.
[  994.517835][T21128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3863'.
[  994.543672][T21128] erspan0: entered promiscuous mode
[  994.563999][T21128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3863'.
[  995.153359][T21141] can: request_module (can-proto-4) failed.
[  995.304735][T21140] Invalid ELF header magic: != ELF
[  995.416518][T21147] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  995.603952][T21145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3867'.
[  995.703274][T21145] geneve1: entered allmulticast mode
[  996.641873][T21162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'.
[  996.852882][T21167] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3873'.
[  996.932702][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3873'.
[  997.666452][T21183] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  998.422417][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  998.429201][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  998.624296][T21201] Invalid ELF header magic: != ELF
[  999.519287][T21217] can: request_module (can-proto-5) failed.
[  999.571719][T21217] binder: 21215:21217 ioctl c018620c 9 returned -1
[ 1000.765277][T21245] can: request_module (can-proto-5) failed.
[ 1000.809460][T21245] binder: 21244:21245 ioctl c018620c 9 returned -22
[ 1001.470503][T21262] can: request_module (can-proto-0) failed.
[ 1001.738284][T21258] syz.4.3892: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1001.820038][T21258] CPU: 0 UID: 0 PID: 21258 Comm: syz.4.3892 Not tainted 6.13.0-rc5-syzkaller #0
[ 1001.829149][T21258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1001.839231][T21258] Call Trace:
[ 1001.842527][T21258]  <TASK>
[ 1001.845475][T21258]  dump_stack_lvl+0x16c/0x1f0
[ 1001.850199][T21258]  warn_alloc+0x24d/0x3a0
[ 1001.854607][T21258]  ? __pfx_warn_alloc+0x10/0x10
[ 1001.859532][T21258]  ? __pfx_mark_lock+0x10/0x10
[ 1001.864391][T21258]  ? lock_acquire.part.0+0x11b/0x380
[ 1001.869758][T21258]  __vmalloc_node_range_noprof+0x10df/0x1530
[ 1001.875791][T21258]  ? rcu_is_watching+0x12/0xc0
[ 1001.880587][T21258]  ? trace_contention_end+0xee/0x140
[ 1001.885904][T21258]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1001.891225][T21258]  ? dvb_demux_do_ioctl+0x496/0x1340
[ 1001.896547][T21258]  ? __pfx___mutex_lock+0x10/0x10
[ 1001.901602][T21258]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1001.908145][T21258]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1001.914069][T21258]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1001.919581][T21258]  vmalloc_noprof+0x6b/0x90
[ 1001.924127][T21258]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1001.929475][T21258]  dvb_demux_do_ioctl+0x54d/0x1340
[ 1001.934664][T21258]  dvb_usercopy+0x165/0x320
[ 1001.939206][T21258]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1001.944812][T21258]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1001.949895][T21258]  ? __pfx_lock_release+0x10/0x10
[ 1001.954989][T21258]  ? __fget_files+0x206/0x3a0
[ 1001.959722][T21258]  dvb_demux_ioctl+0x29/0x40
[ 1001.964364][T21258]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1001.969695][T21258]  __x64_sys_ioctl+0x190/0x200
[ 1001.974506][T21258]  do_syscall_64+0xcd/0x250
[ 1001.979053][T21258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.984989][T21258] RIP: 0033:0x7f07c6985d29
[ 1001.989424][T21258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1002.009068][T21258] RSP: 002b:00007f07c77ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1002.017524][T21258] RAX: ffffffffffffffda RBX: 00007f07c6b76080 RCX: 00007f07c6985d29
[ 1002.025528][T21258] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[ 1002.033525][T21258] RBP: 00007f07c6a01b08 R08: 0000000000000000 R09: 0000000000000000
[ 1002.041523][T21258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1002.049543][T21258] R13: 0000000000000000 R14: 00007f07c6b76080 R15: 00007ffce2d42598
[ 1002.057550][T21258]  </TASK>
[ 1002.125242][T21258] Mem-Info:
[ 1002.128446][T21258] active_anon:95558 inactive_anon:0 isolated_anon:0
[ 1002.128446][T21258]  active_file:5911 inactive_file:60782 isolated_file:0
[ 1002.128446][T21258]  unevictable:803 dirty:609 writeback:0
[ 1002.128446][T21258]  slab_reclaimable:11923 slab_unreclaimable:102739
[ 1002.128446][T21258]  mapped:44998 shmem:76833 pagetables:956
[ 1002.128446][T21258]  sec_pagetables:0 bounce:0
[ 1002.128446][T21258]  kernel_misc_reclaimable:0
[ 1002.128446][T21258]  free:1216057 free_pcp:12827 free_cma:0
[ 1002.234525][T21258] Node 0 active_anon:378740kB inactive_anon:0kB active_file:8876kB inactive_file:241832kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:179032kB dirty:2464kB writeback:0kB shmem:306408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no
[ 1002.301852][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3895'.
[ 1002.318397][T21258] Node 1 active_anon:2052kB inactive_anon:0kB active_file:14768kB inactive_file:1272kB unevictable:1536kB isolated(anon):2048kB isolated(file):0kB mapped:1240kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:16kB pagetables:12kB sec_pagetables:0kB all_unreclaimable? no
[ 1002.396446][T21258] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1002.436221][T21258] lowmem_reserve[]: 0 2491 2492 0 0
[ 1002.442745][T21258] Node 0 DMA32 free:1004952kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:379588kB inactive_anon:0kB active_file:8876kB inactive_file:241000kB unevictable:1668kB writepending:2464kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:4480kB local_pcp:360kB free_cma:0kB
[ 1002.473890][T21258] lowmem_reserve[]: 0 0 0 0 0
[ 1002.479951][T21258] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1002.507920][T21258] lowmem_reserve[]: 0 0 0 0 0
[ 1002.513174][T21258] Node 1 Normal free:3836000kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:14768kB inactive_file:1272kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:54456kB local_pcp:29176kB free_cma:0kB
[ 1002.589823][T21258] lowmem_reserve[]: 0 0 0 0 0
[ 1002.594691][T21258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1002.616571][T21258] Node 0 DMA32: 296*4kB (UME) 275*8kB (UME) 141*16kB (UE) 167*32kB (UE) 210*64kB (UME) 267*128kB (UME) 109*256kB (UM) 28*512kB (UM) 39*1024kB (UM) 6*2048kB (UM) 207*4096kB (UME) = 1000936kB
[ 1002.650519][T21258] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1002.662604][T21258] Node 1 Normal: 9982*4kB (UME) 2465*8kB (UME) 2258*16kB (UME) 1810*32kB (UME) 944*64kB (UME) 618*128kB (UME) 227*256kB (UME) 68*512kB (UME) 15*1024kB (UME) 3*2048kB (UME) 837*4096kB (M) = 3836000kB
[ 1002.683970][T21258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1002.694272][T21258] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1002.720947][T21258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1002.734115][T21258] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1002.758238][T21258] 145714 total pagecache pages
[ 1002.769568][T21258] 33 pages in swap cache
[ 1002.779608][T21258] Free swap  = 124256kB
[ 1002.784094][T21258] Total swap = 124996kB
[ 1002.788296][T21258] 2097051 pages RAM
[ 1002.800981][T21258] 0 pages HighMem/MovableOnly
[ 1002.829427][T21258] 427367 pages reserved
[ 1002.833668][T21258] 0 pages cma reserved
[ 1002.900076][T21277] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3897'.
[ 1002.919688][T21278] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3897'.
[ 1003.561107][T21284] can: request_module (can-proto-5) failed.
[ 1003.910298][T21299] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1003.939254][T21299] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1004.043410][T21286] sctp: [Deprecated]: syz.1.3899 (pid 21286) Use of int in maxseg socket option.
[ 1004.043410][T21286] Use struct sctp_assoc_value instead
[ 1005.835990][T21331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3910'.
[ 1006.525087][T21337] can: request_module (can-proto-5) failed.
[ 1006.619478][T21344] binder: 21336:21344 ioctl c018620c 9 returned -1
[ 1006.944173][   T29] audit: type=1800 audit(4295041940.522:33): pid=21348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3915" name="lu_gp_id" dev="configfs" ino=70841 res=0 errno=0
[ 1008.287730][T21370] netlink: 'syz.3.3920': attribute type 33 has an invalid length.
[ 1008.305992][T21370] netlink: 322 bytes leftover after parsing attributes in process `syz.3.3920'.
[ 1008.803662][T21374] HfR: entered promiscuous mode
[ 1008.880114][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3922'.
[ 1008.946732][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3922'.
[ 1009.068438][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3921'.
[ 1009.196265][T21374] HfR: left promiscuous mode
[ 1010.095823][T21389] can: request_module (can-proto-5) failed.
[ 1010.155837][T21389] binder: 21387:21389 ioctl c018620c 9 returned -22
[ 1010.655704][T21397] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3926'.
[ 1010.690684][T21397] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3926'.
[ 1011.100880][T21404] Invalid ELF header magic: != ELF
[ 1011.158389][T21410] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3937'.
[ 1011.218625][T21410] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3937'.
[ 1011.955319][T21408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3929'.

syzkaller
syzkaller login: [ 1012.708133][T21423] can: request_module (can-proto-5) failed.
[ 1015.016721][T21480] can: request_module (can-proto-5) failed.
[ 1015.062481][T21480] binder: 21479:21480 ioctl c018620c 9 returned -22
[ 1016.363982][T21513] can: request_module (can-proto-5) failed.
[ 1017.829656][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'.
[ 1017.951972][T21554] netlink: zone id is out of range
[ 1017.957410][T21554] netlink: zone id is out of range
[ 1018.002853][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3966'.
[ 1018.012032][T21554] netlink: zone id is out of range
[ 1018.017212][T21554] netlink: get zone limit has 4 unknown bytes
[ 1019.028191][T21576] can: request_module (can-proto-5) failed.
[ 1019.089069][T21583] can: request_module (can-proto-5) failed.
[ 1020.262309][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3982'.
[ 1020.599758][T21619] binder: 21618:21619 ioctl 8933 0 returned -22
[ 1020.616495][T21619] FAULT_INJECTION: forcing a failure.
[ 1020.616495][T21619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1020.660848][T21619] CPU: 0 UID: 0 PID: 21619 Comm: syz.4.3989 Not tainted 6.13.0-rc5-syzkaller #0
[ 1020.669964][T21619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1020.680072][T21619] Call Trace:
[ 1020.683398][T21619]  <TASK>
[ 1020.686377][T21619]  dump_stack_lvl+0x16c/0x1f0
[ 1020.691118][T21619]  should_fail_ex+0x497/0x5b0
[ 1020.695865][T21619]  _copy_to_user+0x32/0xd0
[ 1020.700378][T21619]  simple_read_from_buffer+0xd0/0x160
[ 1020.705812][T21619]  proc_fail_nth_read+0x198/0x270
[ 1020.710916][T21619]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1020.716550][T21619]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1020.722171][T21619]  vfs_read+0x1df/0xbe0
[ 1020.726398][T21619]  ? __fget_files+0x1fc/0x3a0
[ 1020.731132][T21619]  ? __pfx___mutex_lock+0x10/0x10
[ 1020.736229][T21619]  ? __pfx_vfs_read+0x10/0x10
[ 1020.740977][T21619]  ? __fget_files+0x206/0x3a0
[ 1020.745728][T21619]  ksys_read+0x12b/0x250
[ 1020.750029][T21619]  ? __pfx_ksys_read+0x10/0x10
[ 1020.754867][T21619]  do_syscall_64+0xcd/0x250
[ 1020.759446][T21619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.765417][T21619] RIP: 0033:0x7f07c698473c
[ 1020.769885][T21619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1020.789555][T21619] RSP: 002b:00007f07c77ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1020.798042][T21619] RAX: ffffffffffffffda RBX: 00007f07c6b75fa0 RCX: 00007f07c698473c
[ 1020.806072][T21619] RDX: 000000000000000f RSI: 00007f07c77ef0a0 RDI: 0000000000000005
[ 1020.814100][T21619] RBP: 00007f07c77ef090 R08: 0000000000000000 R09: 0000000000000000
[ 1020.822131][T21619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1020.830160][T21619] R13: 0000000000000000 R14: 00007f07c6b75fa0 R15: 00007ffce2d42598
[ 1020.838224][T21619]  </TASK>
[ 1021.581835][T21632] warn_alloc: 1 callbacks suppressed
[ 1021.581862][T21632] syz.4.3992: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1021.633862][T21632] CPU: 1 UID: 0 PID: 21632 Comm: syz.4.3992 Not tainted 6.13.0-rc5-syzkaller #0
[ 1021.642987][T21632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1021.653137][T21632] Call Trace:
[ 1021.656466][T21632]  <TASK>
[ 1021.659447][T21632]  dump_stack_lvl+0x16c/0x1f0
[ 1021.664208][T21632]  warn_alloc+0x24d/0x3a0
[ 1021.668626][T21632]  ? __pfx_warn_alloc+0x10/0x10
[ 1021.673557][T21632]  ? __pfx_mark_lock+0x10/0x10
[ 1021.678409][T21632]  ? lock_acquire.part.0+0x11b/0x380
[ 1021.683771][T21632]  __vmalloc_node_range_noprof+0x10df/0x1530
[ 1021.689833][T21632]  ? rcu_is_watching+0x12/0xc0
[ 1021.694759][T21632]  ? trace_contention_end+0xee/0x140
[ 1021.700117][T21632]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1021.705488][T21632]  ? dvb_demux_do_ioctl+0x496/0x1340
[ 1021.710862][T21632]  ? __pfx___mutex_lock+0x10/0x10
[ 1021.716113][T21632]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1021.722535][T21632]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1021.728511][T21632]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1021.733882][T21632]  vmalloc_noprof+0x6b/0x90
[ 1021.738466][T21632]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1021.743841][T21632]  dvb_demux_do_ioctl+0x54d/0x1340
[ 1021.749055][T21632]  dvb_usercopy+0x165/0x320
[ 1021.753634][T21632]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1021.759270][T21632]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1021.764461][T21632]  ? __pfx_lock_release+0x10/0x10
[ 1021.769579][T21632]  ? __fget_files+0x206/0x3a0
[ 1021.774341][T21632]  dvb_demux_ioctl+0x29/0x40
[ 1021.779009][T21632]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1021.784385][T21632]  __x64_sys_ioctl+0x190/0x200
[ 1021.789257][T21632]  do_syscall_64+0xcd/0x250
[ 1021.793848][T21632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.799818][T21632] RIP: 0033:0x7f07c6985d29
[ 1021.804295][T21632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1021.823969][T21632] RSP: 002b:00007f07c77ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1021.832463][T21632] RAX: ffffffffffffffda RBX: 00007f07c6b76080 RCX: 00007f07c6985d29
[ 1021.840497][T21632] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[ 1021.848537][T21632] RBP: 00007f07c6a01b08 R08: 0000000000000000 R09: 0000000000000000
[ 1021.856578][T21632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1021.864611][T21632] R13: 0000000000000000 R14: 00007f07c6b76080 R15: 00007ffce2d42598
[ 1021.872673][T21632]  </TASK>
[ 1021.901429][T21632] Mem-Info:
[ 1021.904859][T21632] active_anon:61119 inactive_anon:25 isolated_anon:0
[ 1021.904859][T21632]  active_file:8274 inactive_file:56862 isolated_file:0
[ 1021.904859][T21632]  unevictable:801 dirty:1052 writeback:0
[ 1021.904859][T21632]  slab_reclaimable:11729 slab_unreclaimable:103526
[ 1021.904859][T21632]  mapped:28649 shmem:44241 pagetables:789
[ 1021.904859][T21632]  sec_pagetables:0 bounce:0
[ 1021.904859][T21632]  kernel_misc_reclaimable:0
[ 1021.904859][T21632]  free:1247675 free_pcp:16887 free_cma:0
[ 1021.973623][T21632] Node 0 active_anon:243052kB inactive_anon:100kB active_file:17656kB inactive_file:227372kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:114652kB dirty:4208kB writeback:0kB shmem:173728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11252kB pagetables:3356kB sec_pagetables:0kB all_unreclaimable? no
[ 1022.032394][T21647] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3993'.
[ 1022.048502][T21632] Node 1 active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1022.098274][T21632] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1022.148820][T21632] lowmem_reserve[]: 0 2491 2492 0 0
[ 1022.158961][T21632] Node 0 DMA32 free:1152836kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:236012kB inactive_anon:100kB active_file:17656kB inactive_file:226540kB unevictable:1668kB writepending:4208kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:7508kB local_pcp:2108kB free_cma:0kB
[ 1022.201677][T21649] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3993'.
[ 1022.231065][T21632] lowmem_reserve[]: 0 0 0 0 0
[ 1022.235914][T21632] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1022.291232][T21632] lowmem_reserve[]: 0 0 0 0 0
[ 1022.296101][T21632] Node 1 Normal free:3846280kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:44700kB local_pcp:20660kB free_cma:0kB
[ 1022.371194][T21632] lowmem_reserve[]: 0 0 0 0 0
[ 1022.376356][T21632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1022.411425][T21632] Node 0 DMA32: 11397*4kB (UME) 4850*8kB (UME) 1912*16kB (UME) 1228*32kB (UME) 745*64kB (UME) 226*128kB (UME) 94*256kB (UM) 26*512kB (UM) 33*1024kB (UM) 4*2048kB (UM) 205*4096kB (UME) = 1149924kB
[ 1022.454440][T21632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1022.492295][T21632] Node 1 Normal: 10047*4kB (UME) 2466*8kB (UME) 2259*16kB (UME) 1778*32kB (UME) 995*64kB (UME) 627*128kB (UME) 233*256kB (UME) 70*512kB (UME) 17*1024kB (UME) 4*2048kB (UME) 837*4096kB (M) = 3846332kB
[ 1022.531200][T21632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1022.561632][T21632] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1022.585289][T21632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1022.611383][T21632] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1022.620770][T21632] 102708 total pagecache pages
[ 1022.650888][T21632] 905 pages in swap cache
[ 1022.661467][T21632] Free swap  = 114032kB
[ 1022.665698][T21632] Total swap = 124996kB
[ 1022.670277][T21632] 2097051 pages RAM
[ 1022.691189][T21632] 0 pages HighMem/MovableOnly
[ 1022.701525][T21632] 427367 pages reserved
[ 1022.705756][T21632] 0 pages cma reserved
[ 1023.036975][T21657] HfR: entered promiscuous mode
[ 1023.078412][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3998'.
[ 1023.101341][T21657] HfR: left promiscuous mode
[ 1023.673530][T21668] futex_wake_op: syz.4.4001 tries to shift op by -15; fix this program
[ 1023.762606][T21668] IPVS: length: 536882234 != 24
[ 1024.999492][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4009'.
[ 1025.040640][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4009'.
[ 1025.258970][T21709] openvswitch: HfR: Dropping previously announced user features
[ 1025.272790][T21709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4010'.
[ 1025.288793][T21709] HfR: left promiscuous mode
[ 1025.406151][T21706] can: request_module (can-proto-5) failed.
[ 1026.127916][T21731] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3)
[ 1026.707162][T21741] kAFS: No cell specified
[ 1027.912688][T21766] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4026'.
[ 1028.179008][T21763] binder: 21762:21763 ioctl c018620c 9 returned -1
[ 1028.222142][T21768] can: request_module (can-proto-5) failed.
[ 1028.870957][T21780] Invalid ELF header magic: != ELF
[ 1029.659917][T21791] binder: 21790:21791 ioctl c018620c 9 returned -1
[ 1030.746357][T21803] can: request_module (can-proto-5) failed.
[ 1030.753284][T21811] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4042'.
[ 1031.415827][T21821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4044'.
[ 1031.439989][T21821] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.447446][T21821] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.471304][T21821] bridge0: entered allmulticast mode
[ 1032.586045][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4047'.
[ 1033.058356][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4045'.
[ 1034.332113][T21842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'.
[ 1037.815794][T21901] binder: 21900:21901 ioctl c018620c 9 returned -1
[ 1038.067912][T21909] HfR: entered promiscuous mode
[ 1038.110550][T21909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4067'.
[ 1038.141959][T21909] HfR: left promiscuous mode
[ 1038.192587][T21913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4067'.
[ 1038.905232][T21928] binder: 21927:21928 ioctl c018620c 9 returned -1
[ 1039.993757][T21949] syz.4.4078: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1040.018888][T21949] CPU: 0 UID: 0 PID: 21949 Comm: syz.4.4078 Not tainted 6.13.0-rc5-syzkaller #0
[ 1040.028024][T21949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1040.038194][T21949] Call Trace:
[ 1040.041531][T21949]  <TASK>
[ 1040.044522][T21949]  dump_stack_lvl+0x16c/0x1f0
[ 1040.049287][T21949]  warn_alloc+0x24d/0x3a0
[ 1040.053707][T21949]  ? __pfx_warn_alloc+0x10/0x10
[ 1040.058641][T21949]  ? __pfx_mark_lock+0x10/0x10
[ 1040.063501][T21949]  ? lock_acquire.part.0+0x11b/0x380
[ 1040.068873][T21949]  __vmalloc_node_range_noprof+0x10df/0x1530
[ 1040.074929][T21949]  ? rcu_is_watching+0x12/0xc0
[ 1040.079781][T21949]  ? trace_contention_end+0xee/0x140
[ 1040.085139][T21949]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1040.090510][T21949]  ? dvb_demux_do_ioctl+0x496/0x1340
[ 1040.095885][T21949]  ? __pfx___mutex_lock+0x10/0x10
[ 1040.101017][T21949]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1040.107434][T21949]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1040.113410][T21949]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1040.118775][T21949]  vmalloc_noprof+0x6b/0x90
[ 1040.123342][T21949]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1040.128685][T21949]  dvb_demux_do_ioctl+0x54d/0x1340
[ 1040.133865][T21949]  dvb_usercopy+0x165/0x320
[ 1040.138415][T21949]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1040.144046][T21949]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1040.149125][T21949]  ? __pfx_lock_release+0x10/0x10
[ 1040.154206][T21949]  ? __fget_files+0x206/0x3a0
[ 1040.158933][T21949]  dvb_demux_ioctl+0x29/0x40
[ 1040.163579][T21949]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1040.168911][T21949]  __x64_sys_ioctl+0x190/0x200
[ 1040.173719][T21949]  do_syscall_64+0xcd/0x250
[ 1040.178270][T21949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.184211][T21949] RIP: 0033:0x7f07c6985d29
[ 1040.188656][T21949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1040.208310][T21949] RSP: 002b:00007f07c77ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1040.216765][T21949] RAX: ffffffffffffffda RBX: 00007f07c6b75fa0 RCX: 00007f07c6985d29
[ 1040.224767][T21949] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[ 1040.232772][T21949] RBP: 00007f07c6a01b08 R08: 0000000000000000 R09: 0000000000000000
[ 1040.240775][T21949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1040.248797][T21949] R13: 0000000000000000 R14: 00007f07c6b75fa0 R15: 00007ffce2d42598
[ 1040.256842][T21949]  </TASK>
[ 1040.291212][T21949] Mem-Info:
[ 1040.295358][T21949] active_anon:61575 inactive_anon:0 isolated_anon:0
[ 1040.295358][T21949]  active_file:8261 inactive_file:56995 isolated_file:0
[ 1040.295358][T21949]  unevictable:801 dirty:705 writeback:0
[ 1040.295358][T21949]  slab_reclaimable:11820 slab_unreclaimable:103896
[ 1040.295358][T21949]  mapped:25090 shmem:43321 pagetables:831
[ 1040.295358][T21949]  sec_pagetables:0 bounce:0
[ 1040.295358][T21949]  kernel_misc_reclaimable:0
[ 1040.295358][T21949]  free:1250993 free_pcp:11754 free_cma:0
[ 1040.381170][T21949] Node 0 active_anon:241000kB inactive_anon:0kB active_file:17604kB inactive_file:227904kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:100316kB dirty:2816kB writeback:0kB shmem:170748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11136kB pagetables:3224kB sec_pagetables:0kB all_unreclaimable? no
[ 1040.501093][T21949] Node 1 active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1040.551375][T21949] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1040.681262][T21949] lowmem_reserve[]: 0 2491 2492 0 0
[ 1040.686665][T21949] Node 0 DMA32 free:1147628kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:223460kB inactive_anon:0kB active_file:17604kB inactive_file:227072kB unevictable:1668kB writepending:2816kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:20092kB local_pcp:12488kB free_cma:0kB
[ 1040.758021][T21949] lowmem_reserve[]: 0 0 0 0 0
[ 1040.770313][T21949] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1040.831161][T21949] lowmem_reserve[]: 0 0 0 0 0
[ 1040.836021][T21949] Node 1 Normal free:3849052kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:41944kB local_pcp:19400kB free_cma:0kB
[ 1040.871607][T21949] lowmem_reserve[]: 0 0 0 0 0
[ 1040.876460][T21949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1040.891229][T21949] Node 0 DMA32: 6138*4kB (UME) 3707*8kB (UME) 2162*16kB (UME) 1391*32kB (UME) 782*64kB (UME) 381*128kB (UME) 103*256kB (UM) 38*512kB (UM) 36*1024kB (UM) 2*2048kB (UM) 204*4096kB (UME) = 1154496kB
[ 1040.921188][T21949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1040.933007][T21949] Node 1 Normal: 10014*4kB (UME) 2453*8kB (UME) 2243*16kB (UME) 1782*32kB (UME) 1004*64kB (UME) 631*128kB (UME) 241*256kB (UME) 70*512kB (UME) 17*1024kB (UME) 4*2048kB (UME) 837*4096kB (M) = 3849104kB
[ 1041.031309][T21949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1041.041787][T21949] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1041.065960][T21949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1041.098341][T21949] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1041.133655][T21949] 98531 total pagecache pages
[ 1041.149039][T21949] 57 pages in swap cache
[ 1041.170127][T21949] Free swap  = 124280kB
[ 1041.185948][T21949] Total swap = 124996kB
[ 1041.202940][T21949] 2097051 pages RAM
[ 1041.216226][T21949] 0 pages HighMem/MovableOnly
[ 1041.235233][T21949] 427367 pages reserved
[ 1041.239544][T21949] 0 pages cma reserved
[ 1042.656779][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4093'.
[ 1042.746635][T22002] Process accounting resumed
[ 1042.980773][T22015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4095'.
[ 1045.486656][T22071] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4110'.
[ 1046.291699][T22090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'.
[ 1046.352175][T22090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.359578][T22090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.447200][T22090] bridge0: entered allmulticast mode
[ 1049.260774][T22144] random: crng reseeded on system resumption
[ 1049.347702][T22142] snd_aloop snd_aloop.0: control 1:6:0:ЊИш^
[ 1049.347702][T22142] :0 is already present
[ 1051.012719][T22165] netlink: 252 bytes leftover after parsing attributes in process `syz.1.4136'.
[ 1052.823226][T22191] Process accounting resumed
[ 1057.537659][T22288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'.
[ 1057.991198][   T29] audit: type=1800 audit(8277292057.860:34): pid=22299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4175" name="discovery_nqn" dev="configfs" ino=73667 res=0 errno=0
[ 1058.085286][   T29] audit: type=1800 audit(8277292057.910:35): pid=22299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4175" name="members" dev="configfs" ino=73668 res=0 errno=0
[ 1058.882099][T22314] netlink: 'syz.4.4181': attribute type 11 has an invalid length.
[ 1059.083111][T22308] netlink: 252 bytes leftover after parsing attributes in process `syz.5.4178'.
[ 1059.856333][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.863118][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.891871][T22339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4188'.
[ 1062.169492][T22360] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1062.209511][T22360] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4194'.
[ 1062.874759][T22385] kAFS: bad VL server IP address
[ 1066.510018][T22431] sctp: [Deprecated]: syz.1.4213 (pid 22431) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1066.510018][T22431] Use struct sctp_sack_info instead
[ 1067.109493][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4212'.
[ 1067.366444][T22436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4215'.
[ 1072.873989][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4224'.
[ 1076.988974][T20851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1077.138445][T20851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1077.149380][T20851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1077.160706][T20851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1077.168910][T20851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1077.178114][T20851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1078.100645][T22513] chnl_net:caif_netlink_parms(): no params data found
[ 1079.003556][T22513] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.061331][T22513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1079.068943][T22513] bridge_slave_0: entered allmulticast mode
[ 1079.128349][T22513] bridge_slave_0: entered promiscuous mode
[ 1079.164283][T22513] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.191195][T22513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1079.231439][T22513] bridge_slave_1: entered allmulticast mode
[ 1079.238718][T22513] bridge_slave_1: entered promiscuous mode
[ 1079.361294][   T54] Bluetooth: hci3: command tx timeout
[ 1079.835256][T22513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1079.898601][T22513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1080.302567][T22513] team0: Port device team_slave_0 added
[ 1080.508661][T22513] team0: Port device team_slave_1 added
[ 1080.740402][T22513] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1080.770600][T22513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1080.886896][T22513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1080.951419][T22513] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1080.983480][T22513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1081.099229][T22513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1081.451446][   T54] Bluetooth: hci3: command tx timeout
[ 1081.680674][T22513] hsr_slave_0: entered promiscuous mode
[ 1081.722450][T22513] hsr_slave_1: entered promiscuous mode
[ 1081.748852][T22513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1081.789308][T22513] Cannot create hsr debugfs directory
[ 1082.997783][T22513] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1083.172488][T22513] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1083.284371][T22513] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1083.394431][T22513] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1083.548985][   T54] Bluetooth: hci3: command tx timeout
[ 1083.901484][T22513] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1083.978074][T22513] 8021q: adding VLAN 0 to HW filter on device team0
[ 1084.056342][T18323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1084.063597][T18323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1084.118865][T18323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1084.126158][T18323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1084.958481][T22513] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1085.601698][   T54] Bluetooth: hci3: command tx timeout
[ 1086.355447][T22513] veth0_vlan: entered promiscuous mode
[ 1086.753615][T22592] netlink: zone id is out of range
[ 1086.758815][T22592] netlink: zone id is out of range
[ 1086.829613][T22513] veth1_vlan: entered promiscuous mode
[ 1086.863103][T22592] netlink: zone id is out of range
[ 1086.959221][T22592] netlink: get zone limit has 4 unknown bytes
[ 1087.008341][T22513] veth0_macvtap: entered promiscuous mode
[ 1087.066033][T22513] veth1_macvtap: entered promiscuous mode
[ 1087.150465][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.203041][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.239202][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.291104][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.323604][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.386169][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.440482][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.486551][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.527415][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.581225][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.622265][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1087.661242][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.707421][T22513] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1087.780388][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1087.840251][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.882253][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1087.921474][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1087.961114][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.021101][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.069932][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.116505][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.171238][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.226542][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.284979][T22513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.354766][T22513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.392343][T22513] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1088.500820][T22602] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4259'.
[ 1088.732348][T22513] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.911185][T22513] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.920668][T22513] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.952900][T22513] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1089.475319][T18326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.508260][T18326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.612980][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.639558][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1094.717343][T22657] lo: entered allmulticast mode
[ 1094.812451][T22661] lo: left allmulticast mode
[ 1094.942952][T22655] can0: slcan on ptm0.
[ 1095.243857][T22654] can0 (unregistered): slcan off ptm0.
[ 1096.714139][T22713] perf: Dynamic interrupt throttling disabled, can hang your system!
[ 1096.750777][T22712] perf: Dynamic interrupt throttling disabled, can hang your system!
[ 1097.353352][T22733] syz.1.4285 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1097.752944][T22739] lo: entered allmulticast mode
[ 1097.823457][T22740] lo: left allmulticast mode
[ 1098.855559][T22755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4290'.
[ 1098.857743][   T29] audit: type=1326 audit(4294967299.391:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22756 comm="syz.6.4291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9188d85d29 code=0x0
[ 1100.350360][T22771] netlink: zone id is out of range
[ 1100.358748][T22771] netlink: zone id is out of range
[ 1100.371354][T22771] netlink: zone id is out of range
[ 1100.378594][T22771] netlink: zone id is out of range
[ 1100.384145][T22771] netlink: zone id is out of range
[ 1100.399879][T22771] netlink: zone id is out of range
[ 1100.405590][T22771] netlink: zone id is out of range
[ 1100.411388][T22771] netlink: zone id is out of range
[ 1100.417105][T22771] netlink: zone id is out of range
[ 1100.422556][T22771] netlink: zone id is out of range
[ 1101.245685][   T29] audit: type=1326 audit(4294967301.781:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef83185d29 code=0x0
[ 1102.451278][T22802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4306'.
[ 1102.897789][T22810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4309'.
[ 1104.504068][T20851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1104.517585][T20851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1104.528021][T20851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1104.538906][T20851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1104.553409][T20851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1104.561661][T20851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1104.942251][T22826] chnl_net:caif_netlink_parms(): no params data found
[ 1105.061667][T22826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.079289][T22826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.098150][T22826] bridge_slave_0: entered allmulticast mode
[ 1105.106697][T22826] bridge_slave_0: entered promiscuous mode
[ 1105.123039][T22826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.133312][T22826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.142200][T22826] bridge_slave_1: entered allmulticast mode
[ 1105.149474][T22826] bridge_slave_1: entered promiscuous mode
[ 1105.254260][T22826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1105.298304][T22826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1105.515058][T22826] team0: Port device team_slave_0 added
[ 1105.543759][T22826] team0: Port device team_slave_1 added
[ 1105.620358][T22826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1105.636795][T22826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1105.662849][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1105.705083][T22826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1105.719265][T22826] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1105.751248][T22826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1105.777201][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1105.821117][T22826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1105.990103][T22826] hsr_slave_0: entered promiscuous mode
[ 1106.014455][T22826] hsr_slave_1: entered promiscuous mode
[ 1106.034415][T22826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1106.051162][T22826] Cannot create hsr debugfs directory
[ 1106.071923][T22857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4320'.
[ 1106.280899][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4321'.
[ 1106.544450][T22826] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1106.588314][T22826] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1106.618919][T22826] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1106.641610][T20851] Bluetooth: hci0: command tx timeout
[ 1106.666490][T22826] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1106.939553][T22854] can0: slcan on ptm0.
[ 1106.991892][T22826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1107.049936][T22826] 8021q: adding VLAN 0 to HW filter on device team0
[ 1107.135244][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1107.142478][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1107.204425][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1107.211702][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1107.261899][T22853] can0 (unregistered): slcan off ptm0.
[ 1107.865811][T22826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1108.719984][T22826] veth0_vlan: entered promiscuous mode
[ 1108.721211][T20851] Bluetooth: hci0: command tx timeout
[ 1108.855344][T22826] veth1_vlan: entered promiscuous mode
[ 1108.906731][T22826] veth0_macvtap: entered promiscuous mode
[ 1108.917278][T22826] veth1_macvtap: entered promiscuous mode
[ 1108.936630][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.947749][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.958220][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.969528][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1108.980252][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1108.991318][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.001771][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1109.012852][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.023279][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1109.034178][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.044585][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1109.055602][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.066280][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1109.077469][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.088713][T22826] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1109.102277][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.113125][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.123522][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.134308][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.144529][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.155437][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.165938][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.175766][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4331'.
[ 1109.177252][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.196474][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.207652][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.218082][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.229213][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.239515][T22826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1109.250491][T22826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1109.264356][T22826] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1109.378310][T22826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.387242][T22826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.396238][T22826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.405345][T22826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.742425][T18326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.771089][T18326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1109.852533][T18326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1109.864508][T18326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1110.510562][T22948] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4336'.
[ 1110.526832][T22948] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4336'.
[ 1110.848295][T20851] Bluetooth: hci0: command tx timeout
[ 1111.485744][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4342'.
[ 1111.821971][T22980] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4346'.
[ 1111.847352][T22980] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4346'.
[ 1112.117172][T22985] __vm_enough_memory: pid: 22985, comm: syz.1.4349, bytes: 4503599627366400 not enough memory for the allocation
[ 1112.881470][T20851] Bluetooth: hci0: command tx timeout
[ 1112.959637][T23011] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4357'.
[ 1112.989060][T23011] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4357'.
[ 1113.714213][T23021] FAULT_INJECTION: forcing a failure.
[ 1113.714213][T23021] name failslab, interval 1, probability 0, space 0, times 0
[ 1113.781628][T23021] CPU: 0 UID: 0 PID: 23021 Comm: syz.6.4360 Not tainted 6.13.0-rc5-syzkaller #0
[ 1113.790748][T23021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1113.800985][T23021] Call Trace:
[ 1113.804318][T23021]  <TASK>
[ 1113.807292][T23021]  dump_stack_lvl+0x16c/0x1f0
[ 1113.812042][T23021]  should_fail_ex+0x497/0x5b0
[ 1113.816783][T23021]  ? fs_reclaim_acquire+0xae/0x150
[ 1113.821966][T23021]  should_failslab+0xc2/0x120
[ 1113.826724][T23021]  __kmalloc_noprof+0xce/0x4f0
[ 1113.831561][T23021]  ? d_absolute_path+0x137/0x1b0
[ 1113.836571][T23021]  ? tomoyo_encode2+0x100/0x3e0
[ 1113.841495][T23021]  tomoyo_encode2+0x100/0x3e0
[ 1113.846247][T23021]  tomoyo_realpath_from_path+0x1a7/0x710
[ 1113.851964][T23021]  tomoyo_path_number_perm+0x248/0x5b0
[ 1113.857509][T23021]  ? tomoyo_path_number_perm+0x235/0x5b0
[ 1113.863230][T23021]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1113.869328][T23021]  ? __pfx_lock_release+0x10/0x10
[ 1113.874413][T23021]  ? trace_lock_acquire+0x14e/0x1f0
[ 1113.879691][T23021]  ? lock_acquire+0x2f/0xb0
[ 1113.884244][T23021]  ? __fget_files+0x40/0x3a0
[ 1113.888900][T23021]  ? __fget_files+0x206/0x3a0
[ 1113.893643][T23021]  security_file_ioctl+0x9b/0x240
[ 1113.898728][T23021]  __x64_sys_ioctl+0xb7/0x200
[ 1113.903464][T23021]  do_syscall_64+0xcd/0x250
[ 1113.908035][T23021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1113.914006][T23021] RIP: 0033:0x7f9188d85d29
[ 1113.918469][T23021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1113.938157][T23021] RSP: 002b:00007f9186bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1113.946635][T23021] RAX: ffffffffffffffda RBX: 00007f9188f75fa0 RCX: 00007f9188d85d29
[ 1113.954663][T23021] RDX: 0000000000000088 RSI: 000000008008ae9d RDI: 0000000000000003
[ 1113.962689][T23021] RBP: 00007f9186bf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1113.970709][T23021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1113.978734][T23021] R13: 0000000000000000 R14: 00007f9188f75fa0 R15: 00007ffdfc642728
[ 1113.986779][T23021]  </TASK>
[ 1113.991541][T23021] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1114.654372][T23035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4364'.
[ 1116.302353][T23075] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4376'.
[ 1116.320525][T23069] Invalid ELF header magic: != ELF
[ 1116.342570][T23075] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4376'.
[ 1116.976370][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4381'.
[ 1116.986793][T23092] net_ratelimit: 1 callbacks suppressed
[ 1116.986829][T23092] netlink: zone id is out of range
[ 1117.003400][T23092] netlink: del zone limit has 8 unknown bytes
[ 1117.756940][T23106] netlink: zone id is out of range
[ 1117.777957][T23106] netlink: del zone limit has 8 unknown bytes
[ 1118.048166][T23114] FAULT_INJECTION: forcing a failure.
[ 1118.048166][T23114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1118.072597][T23113] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4390'.
[ 1118.091499][T23114] CPU: 1 UID: 0 PID: 23114 Comm: syz.7.4391 Not tainted 6.13.0-rc5-syzkaller #0
[ 1118.100612][T23114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1118.110720][T23114] Call Trace:
[ 1118.114042][T23114]  <TASK>
[ 1118.117016][T23114]  dump_stack_lvl+0x16c/0x1f0
[ 1118.121762][T23114]  should_fail_ex+0x497/0x5b0
[ 1118.126514][T23114]  _copy_from_iter+0x29b/0x1400
[ 1118.131437][T23114]  ? trace_lock_acquire+0x14e/0x1f0
[ 1118.136710][T23114]  ? __alloc_skb+0x200/0x380
[ 1118.141371][T23114]  ? __pfx__copy_from_iter+0x10/0x10
[ 1118.146732][T23114]  ? __virt_addr_valid+0x1a4/0x590
[ 1118.151918][T23114]  ? __virt_addr_valid+0x5e/0x590
[ 1118.157010][T23114]  ? __phys_addr_symbol+0x30/0x80
[ 1118.162101][T23114]  ? __check_object_size+0x488/0x710
[ 1118.167460][T23114]  netlink_sendmsg+0x813/0xd70
[ 1118.172297][T23114]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1118.177658][T23114]  ____sys_sendmsg+0x9ae/0xb40
[ 1118.182491][T23114]  ? copy_msghdr_from_user+0x10b/0x160
[ 1118.188021][T23114]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1118.193388][T23114]  ___sys_sendmsg+0x135/0x1e0
[ 1118.198147][T23114]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1118.203431][T23114]  ? __pfx_lock_release+0x10/0x10
[ 1118.208514][T23114]  ? trace_lock_acquire+0x14e/0x1f0
[ 1118.213748][T23113] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4390'.
[ 1118.222829][T23114]  ? __fget_files+0x206/0x3a0
[ 1118.227584][T23114]  __sys_sendmsg+0x16e/0x220
[ 1118.232248][T23114]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1118.237471][T23114]  do_syscall_64+0xcd/0x250
[ 1118.242044][T23114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1118.248000][T23114] RIP: 0033:0x7f4f92785d29
[ 1118.252468][T23114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1118.272134][T23114] RSP: 002b:00007f4f93601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1118.280616][T23114] RAX: ffffffffffffffda RBX: 00007f4f92975fa0 RCX: 00007f4f92785d29
[ 1118.288644][T23114] RDX: 0000000000008800 RSI: 0000000020003480 RDI: 0000000000000003
[ 1118.296670][T23114] RBP: 00007f4f93601090 R08: 0000000000000000 R09: 0000000000000000
[ 1118.304696][T23114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1118.312713][T23114] R13: 0000000000000000 R14: 00007f4f92975fa0 R15: 00007ffd70f5f028
[ 1118.320750][T23114]  </TASK>
[ 1118.873662][T23136] bond0: option mode: unable to set because the bond device is up
[ 1119.141768][T23142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4402'.
[ 1119.327408][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4401'.
[ 1119.743580][T23150] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4403'.
[ 1119.769254][T23150] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4403'.
[ 1121.288049][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.294838][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1123.572472][T23209] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4422'.
[ 1123.631741][T23210] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4422'.
[ 1124.014446][T23199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4419'.
[ 1124.753387][T23231] openvswitch: HfR: Dropping previously announced user features
[ 1124.783766][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4430'.
[ 1124.805089][T23231] HfR: left promiscuous mode
[ 1124.856414][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4430'.
[ 1125.259157][T23243] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4433'.
[ 1125.299005][T23243] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4433'.
[ 1125.759522][T23257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4435'.
[ 1127.103621][T23285] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4444'.
[ 1127.148920][T23285] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4444'.
[ 1128.848052][T23303] kexec: Could not allocate control_code_buffer
[ 1129.923680][T23340] __nla_validate_parse: 2 callbacks suppressed
[ 1129.923710][T23340] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4461'.
[ 1130.241401][T23350] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4464'.
[ 1130.274587][T23350] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4464'.
[ 1131.341843][T23366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4469'.
[ 1131.862321][T23392] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4476'.
[ 1131.888522][T23392] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4476'.
[ 1133.588196][T23420] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4486'.
[ 1133.622702][T23420] netlink: 338 bytes leftover after parsing attributes in process `syz.6.4486'.
[ 1138.767303][T23482] netlink: 'syz.3.4505': attribute type 21 has an invalid length.
[ 1138.797159][T23482] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4505'.
[ 1140.714651][T23505] syz.6.4510: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1140.749043][T23505] CPU: 0 UID: 0 PID: 23505 Comm: syz.6.4510 Not tainted 6.13.0-rc5-syzkaller #0
[ 1140.758174][T23505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1140.768298][T23505] Call Trace:
[ 1140.771633][T23505]  <TASK>
[ 1140.774616][T23505]  dump_stack_lvl+0x16c/0x1f0
[ 1140.779364][T23505]  warn_alloc+0x24d/0x3a0
[ 1140.783778][T23505]  ? __pfx_warn_alloc+0x10/0x10
[ 1140.788709][T23505]  ? __pfx_mark_lock+0x10/0x10
[ 1140.793565][T23505]  ? lock_acquire.part.0+0x11b/0x380
[ 1140.798942][T23505]  __vmalloc_node_range_noprof+0x10df/0x1530
[ 1140.805052][T23505]  ? rcu_is_watching+0x12/0xc0
[ 1140.809998][T23505]  ? trace_contention_end+0xee/0x140
[ 1140.815370][T23505]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1140.820748][T23505]  ? dvb_demux_do_ioctl+0x496/0x1340
[ 1140.826127][T23505]  ? __pfx___mutex_lock+0x10/0x10
[ 1140.831272][T23505]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1140.837693][T23505]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1140.843671][T23505]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1140.849047][T23505]  vmalloc_noprof+0x6b/0x90
[ 1140.853641][T23505]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1140.859023][T23505]  dvb_demux_do_ioctl+0x54d/0x1340
[ 1140.864241][T23505]  dvb_usercopy+0x165/0x320
[ 1140.868824][T23505]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1140.874462][T23505]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1140.879613][T23505]  ? __pfx_lock_release+0x10/0x10
[ 1140.884725][T23505]  ? __fget_files+0x206/0x3a0
[ 1140.889491][T23505]  dvb_demux_ioctl+0x29/0x40
[ 1140.894163][T23505]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1140.899531][T23505]  __x64_sys_ioctl+0x190/0x200
[ 1140.904369][T23505]  do_syscall_64+0xcd/0x250
[ 1140.908953][T23505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1140.914940][T23505] RIP: 0033:0x7f9188d85d29
[ 1140.919427][T23505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1140.939109][T23505] RSP: 002b:00007f9186bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1140.947641][T23505] RAX: ffffffffffffffda RBX: 00007f9188f76080 RCX: 00007f9188d85d29
[ 1140.955684][T23505] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[ 1140.963728][T23505] RBP: 00007f9188e01b08 R08: 0000000000000000 R09: 0000000000000000
[ 1140.971767][T23505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1140.979802][T23505] R13: 0000000000000000 R14: 00007f9188f76080 R15: 00007ffdfc642728
[ 1140.987863][T23505]  </TASK>
[ 1141.010438][T23505] Mem-Info:
[ 1141.017402][T23505] active_anon:52245 inactive_anon:0 isolated_anon:0
[ 1141.017402][T23505]  active_file:6064 inactive_file:60235 isolated_file:0
[ 1141.017402][T23505]  unevictable:817 dirty:264 writeback:0
[ 1141.017402][T23505]  slab_reclaimable:11812 slab_unreclaimable:109867
[ 1141.017402][T23505]  mapped:37015 shmem:34652 pagetables:875
[ 1141.017402][T23505]  sec_pagetables:0 bounce:0
[ 1141.017402][T23505]  kernel_misc_reclaimable:0
[ 1141.017402][T23505]  free:1229023 free_pcp:29462 free_cma:0
[ 1141.080904][T23505] Node 0 active_anon:212280kB inactive_anon:0kB active_file:8816kB inactive_file:240868kB unevictable:1732kB isolated(anon):0kB isolated(file):0kB mapped:148048kB dirty:1056kB writeback:0kB shmem:138372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11128kB pagetables:3500kB sec_pagetables:0kB all_unreclaimable? no
[ 1141.135674][T23505] Node 1 active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:712kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1141.168668][T23505] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1141.196759][T23505] lowmem_reserve[]: 0 2491 2492 0 0
[ 1141.202295][T23505] Node 0 DMA32 free:1116492kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:216556kB inactive_anon:0kB active_file:8816kB inactive_file:239948kB unevictable:1732kB writepending:1036kB present:3129332kB managed:2551336kB mlocked:64kB bounce:0kB free_pcp:3448kB local_pcp:1740kB free_cma:0kB
[ 1141.234013][T23505] lowmem_reserve[]: 0 0 0 0 0
[ 1141.238855][T23505] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[ 1141.271130][T23505] lowmem_reserve[]: 0 0 0 0 0
[ 1141.275986][T23505] Node 1 Normal free:3784392kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:106776kB local_pcp:34592kB free_cma:0kB
[ 1141.321179][T23505] lowmem_reserve[]: 0 0 0 0 0
[ 1141.326367][T23505] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1141.348844][T23505] Node 0 DMA32: 388*4kB (UME) 1145*8kB (UME) 1729*16kB (UME) 1049*32kB (UME) 109*64kB (UME) 417*128kB (UME) 268*256kB (UM) 108*512kB (UM) 54*1024kB (UM) 11*2048kB (UM) 191*4096kB (UME) = 1116360kB
[ 1141.370698][T23514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4514'.
[ 1141.383374][T23505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1141.400805][T23505] Node 1 Normal: 8982*4kB (UME) 50*8kB (UME) 76*16kB (UME) 231*32kB (UME) 958*64kB (UME) 674*128kB (UME) 309*256kB (UME) 89*512kB (UME) 24*1024kB (UME) 7*2048kB (UME) 837*4096kB (M) = 3784456kB
[ 1141.441698][T23505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1141.461171][T23505] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1141.473620][T23505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1141.489598][T23505] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1141.504761][T23505] 102743 total pagecache pages
[ 1141.512310][T23505] 32 pages in swap cache
[ 1141.519012][T23505] Free swap  = 124404kB
[ 1141.526613][T23505] Total swap = 124996kB
[ 1141.540818][T23505] 2097051 pages RAM
[ 1141.547219][T23505] 0 pages HighMem/MovableOnly
[ 1141.561153][T23505] 427367 pages reserved
[ 1141.565384][T23505] 0 pages cma reserved
[ 1141.906488][T23517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4515'.
[ 1144.454537][T23566] netlink: 'syz.1.4530': attribute type 11 has an invalid length.
[ 1144.767256][T23573] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4533'.
[ 1145.578521][   T29] audit: type=1800 audit(4294967346.111:38): pid=23593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4541" name="discovery_nqn" dev="configfs" ino=80298 res=0 errno=0
[ 1145.625016][T23593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4541'.
[ 1145.787261][T23595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4542'.
[ 1146.126251][T23603] scsi_dev_info_list_add_str: bad dev info string 'жа' '' ''
[ 1146.146375][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4545'.
[ 1148.981976][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1148.996611][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1149.005642][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1149.028039][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1149.040108][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1149.051374][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1150.092752][T23645] chnl_net:caif_netlink_parms(): no params data found
[ 1150.758275][T23645] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.765958][T23645] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1150.781281][T23645] bridge_slave_0: entered allmulticast mode
[ 1150.789501][T23645] bridge_slave_0: entered promiscuous mode
[ 1150.798137][T23645] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.836263][T23645] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1150.886728][T23645] bridge_slave_1: entered allmulticast mode
[ 1150.894439][T23645] bridge_slave_1: entered promiscuous mode
[ 1150.999580][T23645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1151.024233][T23645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1151.169272][T23645] team0: Port device team_slave_0 added
[ 1151.185624][T23645] team0: Port device team_slave_1 added
[ 1151.258966][T23645] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1151.281936][T23645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1151.338049][T23645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1151.371083][   T54] Bluetooth: hci4: command tx timeout
[ 1151.407074][T23645] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1151.433297][T23645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1151.561559][T23645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1151.764927][T23645] hsr_slave_0: entered promiscuous mode
[ 1151.786279][T23645] hsr_slave_1: entered promiscuous mode
[ 1151.806693][T23645] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1151.824093][T23645] Cannot create hsr debugfs directory
[ 1152.033983][T22600] svc: failed to register nfsdv3 RPC service (errno 512).
[ 1152.044934][T22600] svc: failed to register nfsaclv3 RPC service (errno 512).
[ 1152.672098][T23645] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1152.866082][T23645] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1152.965624][T23645] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1153.034283][T23645] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1153.441375][   T54] Bluetooth: hci4: command tx timeout
[ 1153.774714][   T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1153.985727][T23645] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1154.156267][   T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.246444][T23645] 8021q: adding VLAN 0 to HW filter on device team0
[ 1154.526491][   T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.600820][T17199] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.608053][T17199] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1154.738148][   T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.820332][T17199] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.827567][T17199] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1154.931761][T23715] FAULT_INJECTION: forcing a failure.
[ 1154.931761][T23715] name failslab, interval 1, probability 0, space 0, times 0
[ 1154.932035][T23645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1154.980463][T23715] CPU: 1 UID: 0 PID: 23715 Comm: syz.6.4572 Not tainted 6.13.0-rc5-syzkaller #0
[ 1154.989591][T23715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1154.999707][T23715] Call Trace:
[ 1155.003037][T23715]  <TASK>
[ 1155.006018][T23715]  dump_stack_lvl+0x16c/0x1f0
[ 1155.010769][T23715]  should_fail_ex+0x497/0x5b0
[ 1155.015519][T23715]  ? fs_reclaim_acquire+0xae/0x150
[ 1155.020708][T23715]  should_failslab+0xc2/0x120
[ 1155.025465][T23715]  __kmalloc_noprof+0xce/0x4f0
[ 1155.030299][T23715]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1155.035992][T23715]  ? tomoyo_realpath_from_path+0xbf/0x710
[ 1155.041787][T23715]  tomoyo_realpath_from_path+0xbf/0x710
[ 1155.047403][T23715]  ? tomoyo_path_number_perm+0x235/0x5b0
[ 1155.053120][T23715]  tomoyo_path_number_perm+0x248/0x5b0
[ 1155.058660][T23715]  ? tomoyo_path_number_perm+0x235/0x5b0
[ 1155.064376][T23715]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1155.070471][T23715]  ? __pfx_lock_release+0x10/0x10
[ 1155.075561][T23715]  ? trace_lock_acquire+0x14e/0x1f0
[ 1155.080846][T23715]  ? lock_acquire+0x2f/0xb0
[ 1155.085407][T23715]  ? __fget_files+0x40/0x3a0
[ 1155.090075][T23715]  ? __fget_files+0x206/0x3a0
[ 1155.094826][T23715]  security_file_ioctl+0x9b/0x240
[ 1155.099916][T23715]  __x64_sys_ioctl+0xb7/0x200
[ 1155.104659][T23715]  do_syscall_64+0xcd/0x250
[ 1155.109234][T23715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1155.115197][T23715] RIP: 0033:0x7f9188d85d29
[ 1155.119665][T23715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1155.139337][T23715] RSP: 002b:00007f9186bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1155.147820][T23715] RAX: ffffffffffffffda RBX: 00007f9188f75fa0 RCX: 00007f9188d85d29
[ 1155.155849][T23715] RDX: 0000000000000009 RSI: 00000000c018620c RDI: 0000000000000003
[ 1155.163883][T23715] RBP: 00007f9186bf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1155.171912][T23715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1155.179945][T23715] R13: 0000000000000000 R14: 00007f9188f75fa0 R15: 00007ffdfc642728
[ 1155.188011][T23715]  </TASK>
[ 1155.251396][T23715] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1155.258281][T23715] binder: 23714:23715 ioctl c018620c 9 returned -1
[ 1155.392048][   T35] bridge_slave_1: left allmulticast mode
[ 1155.397773][   T35] bridge_slave_1: left promiscuous mode
[ 1155.437978][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1155.492168][T23723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4570'.
[ 1155.521807][   T54] Bluetooth: hci4: command tx timeout
[ 1155.604074][   T35] bridge_slave_0: left allmulticast mode
[ 1155.610338][   T35] bridge_slave_0: left promiscuous mode
[ 1155.641574][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1157.611651][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1157.620458][   T54] Bluetooth: hci4: command tx timeout
[ 1157.635859][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1157.648577][   T35] bond0 (unregistering): Released all slaves
[ 1157.737846][T23645] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1158.580263][T23780] could not allocate digest TFM handle 
[ 1158.842070][T23773] could not allocate digest TFM handle 
[ 1159.463481][   T35] hsr_slave_0: left promiscuous mode
[ 1159.661083][   T35] hsr_slave_1: left promiscuous mode
[ 1159.682557][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1159.697541][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1159.793847][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1159.821154][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1159.903930][   T35] veth1_macvtap: left promiscuous mode
[ 1159.936547][   T35] veth0_macvtap: left promiscuous mode
[ 1159.955463][   T35] veth1_vlan: left promiscuous mode
[ 1159.981718][   T35] veth0_vlan: left promiscuous mode
[ 1160.498818][T23823] can: request_module (can-proto-0) failed.
[ 1162.079692][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1162.192817][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4598'.
[ 1162.352815][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1162.362235][T23851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4593'.
[ 1163.738806][T23645] veth0_vlan: entered promiscuous mode
[ 1163.752232][T23645] veth1_vlan: entered promiscuous mode
[ 1163.783582][T23645] veth0_macvtap: entered promiscuous mode
[ 1163.793802][T23645] veth1_macvtap: entered promiscuous mode
[ 1163.811362][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1163.821976][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1163.831913][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1163.842840][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1163.853164][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1163.866570][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1163.876850][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1163.888430][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1163.899045][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1163.910453][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1163.920932][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1163.933076][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1163.943056][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1163.953759][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1163.966917][T23645] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1163.980099][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1163.990892][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.001530][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1164.012762][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.023216][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1164.033977][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.043918][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1164.054600][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.064681][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1164.075242][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.085405][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1164.096288][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.106603][T23645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1164.117321][T23645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1164.128259][T23645] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1164.138454][T23645] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1164.147323][T23645] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1164.156163][T23645] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1164.165301][T23645] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1164.552346][ T8582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1164.661864][ T8582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1164.782586][T18323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1164.790611][T18323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1165.675607][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1165.998358][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1166.465971][T20851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1166.483308][T20851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1166.502954][T20851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1166.520486][T20851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1166.535489][T20851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1166.548749][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1166.550157][T20851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1166.813165][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.605815][   T35] bond0: left allmulticast mode
[ 1167.610756][   T35] bond_slave_0: left allmulticast mode
[ 1167.641156][   T35] bond_slave_1: left allmulticast mode
[ 1167.657031][   T35] bond0: left promiscuous mode
[ 1167.691043][   T35] bond_slave_0: left promiscuous mode
[ 1167.696664][   T35] bond_slave_1: left promiscuous mode
[ 1167.723071][   T35] bridge0: port 3(bond0) entered disabled state
[ 1167.782985][   T35] bridge_slave_1: left allmulticast mode
[ 1167.788721][   T35] bridge_slave_1: left promiscuous mode
[ 1167.821239][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1167.937965][   T35] bridge_slave_0: left allmulticast mode
[ 1167.959868][   T35] bridge_slave_0: left promiscuous mode
[ 1167.971269][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1168.642808][   T54] Bluetooth: hci0: command tx timeout
[ 1169.896584][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1169.990319][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1170.033893][   T35] bond0 (unregistering): Released all slaves
[ 1170.058442][T23957] chnl_net:caif_netlink_parms(): no params data found
[ 1170.721173][   T54] Bluetooth: hci0: command tx timeout
[ 1171.415688][T24061] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4637'.
[ 1171.462668][T23957] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.491445][T23957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.498783][T23957] bridge_slave_0: entered allmulticast mode
[ 1171.523729][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4636'.
[ 1171.535355][T23957] bridge_slave_0: entered promiscuous mode
[ 1171.671180][T23957] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.709712][T23957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.720897][T23957] bridge_slave_1: entered allmulticast mode
[ 1171.747426][T23957] bridge_slave_1: entered promiscuous mode
[ 1172.441637][T24079] syz.8.4639: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1172.472561][T23957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1172.501101][T24079] CPU: 0 UID: 0 PID: 24079 Comm: syz.8.4639 Not tainted 6.13.0-rc5-syzkaller #0
[ 1172.510241][T24079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1172.520369][T24079] Call Trace:
[ 1172.523706][T24079]  <TASK>
[ 1172.526692][T24079]  dump_stack_lvl+0x16c/0x1f0
[ 1172.531456][T24079]  warn_alloc+0x24d/0x3a0
[ 1172.535868][T24079]  ? __pfx_warn_alloc+0x10/0x10
[ 1172.540796][T24079]  ? __pfx_mark_lock+0x10/0x10
[ 1172.545684][T24079]  ? lock_acquire.part.0+0x11b/0x380
[ 1172.551062][T24079]  __vmalloc_node_range_noprof+0x10df/0x1530
[ 1172.557129][T24079]  ? rcu_is_watching+0x12/0xc0
[ 1172.561977][T24079]  ? trace_contention_end+0xee/0x140
[ 1172.567343][T24079]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1172.572724][T24079]  ? dvb_demux_do_ioctl+0x496/0x1340
[ 1172.578104][T24079]  ? __pfx___mutex_lock+0x10/0x10
[ 1172.583254][T24079]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1172.589675][T24079]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1172.595653][T24079]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1172.601035][T24079]  vmalloc_noprof+0x6b/0x90
[ 1172.605616][T24079]  ? dvb_demux_do_ioctl+0x54d/0x1340
[ 1172.610991][T24079]  dvb_demux_do_ioctl+0x54d/0x1340
[ 1172.616211][T24079]  dvb_usercopy+0x165/0x320
[ 1172.620787][T24079]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1172.626460][T24079]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1172.631562][T24079]  ? __pfx_lock_release+0x10/0x10
[ 1172.636671][T24079]  ? __fget_files+0x206/0x3a0
[ 1172.641433][T24079]  dvb_demux_ioctl+0x29/0x40
[ 1172.646101][T24079]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1172.651464][T24079]  __x64_sys_ioctl+0x190/0x200
[ 1172.656304][T24079]  do_syscall_64+0xcd/0x250
[ 1172.660890][T24079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.666859][T24079] RIP: 0033:0x7f7649185d29
[ 1172.671329][T24079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1172.691001][T24079] RSP: 002b:00007f7649f79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1172.699489][T24079] RAX: ffffffffffffffda RBX: 00007f7649376080 RCX: 00007f7649185d29
[ 1172.707529][T24079] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003
[ 1172.715558][T24079] RBP: 00007f7649201b08 R08: 0000000000000000 R09: 0000000000000000
[ 1172.723593][T24079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1172.731622][T24079] R13: 0000000000000000 R14: 00007f7649376080 R15: 00007fffad2a8998
[ 1172.739688][T24079]  </TASK>
[ 1172.781644][T23957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1172.801135][   T54] Bluetooth: hci0: command tx timeout
[ 1172.807177][T24079] Mem-Info:
[ 1172.811049][T24079] active_anon:43996 inactive_anon:0 isolated_anon:934
[ 1172.811049][T24079]  active_file:6064 inactive_file:60255 isolated_file:0
[ 1172.811049][T24079]  unevictable:801 dirty:813 writeback:0
[ 1172.811049][T24079]  slab_reclaimable:11982 slab_unreclaimable:111757
[ 1172.811049][T24079]  mapped:37427 shmem:26882 pagetables:875
[ 1172.811049][T24079]  sec_pagetables:0 bounce:0
[ 1172.811049][T24079]  kernel_misc_reclaimable:0
[ 1172.811049][T24079]  free:1261268 free_pcp:9605 free_cma:0
[ 1172.857218][T24079] Node 0 active_anon:174484kB inactive_anon:0kB active_file:8816kB inactive_file:240904kB unevictable:1668kB isolated(anon):3736kB isolated(file):0kB mapped:149624kB dirty:3252kB writeback:0kB shmem:104492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11248kB pagetables:3500kB sec_pagetables:0kB all_unreclaimable? no
[ 1172.892209][T24079] Node 1 active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1172.961279][T24079] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1172.989878][T24079] lowmem_reserve[]: 0 2491 2492 0 0
[ 1172.995445][T24079] Node 0 DMA32 free:1176536kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:175844kB inactive_anon:0kB active_file:8816kB inactive_file:240072kB unevictable:1668kB writepending:3248kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:6868kB local_pcp:4672kB free_cma:0kB
[ 1173.027724][T24079] lowmem_reserve[]: 0 0 0 0 0
[ 1173.032779][T24079] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1173.105184][T24079] lowmem_reserve[]: 0 0 0 0 0
[ 1173.125427][T24079] Node 1 Normal free:3857504kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:15440kB inactive_file:116kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:33592kB local_pcp:4580kB free_cma:0kB
[ 1173.196817][T24079] lowmem_reserve[]: 0 0 0 0 0
[ 1173.211140][T24079] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1173.249710][T24079] Node 0 DMA32: 2805*4kB (UME) 773*8kB (UME) 45*16kB (UME) 872*32kB (ME) 1017*64kB (UME) 635*128kB (UME) 347*256kB (UM) 125*512kB (UME) 53*1024kB (UME) 5*2048kB (UME) 189*4096kB (UM) = 1183884kB
[ 1173.304977][T23957] team0: Port device team_slave_0 added
[ 1173.312113][T24079] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1173.333489][T23957] team0: Port device team_slave_1 added
[ 1173.355318][T24079] Node 1 Normal: 1820*4kB (UME) 2152*8kB (UME) 2024*16kB (UME) 1231*32kB (UME) 1028*64kB (UME) 679*128kB (UME) 331*256kB (UME) 105*512kB (UME) 27*1024kB (UME) 7*2048kB (UME) 837*4096kB (M) = 3857808kB
[ 1173.387290][T24079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1173.401219][T24079] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1173.420929][T24079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1173.442681][T24079] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1173.452838][T24079] 89269 total pagecache pages
[ 1173.464876][T24079] 44 pages in swap cache
[ 1173.469192][T24079] Free swap  = 124580kB
[ 1173.481569][T24079] Total swap = 124996kB
[ 1173.485910][T24079] 2097051 pages RAM
[ 1173.496111][T24079] 0 pages HighMem/MovableOnly
[ 1173.500854][T24079] 427367 pages reserved
[ 1173.511801][T24079] 0 pages cma reserved
[ 1173.925831][T23957] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1173.951680][T23957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.024008][T23957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1174.038900][T23957] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1174.046070][T23957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.072328][T23957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1174.185639][   T35] hsr_slave_0: left promiscuous mode
[ 1174.276809][   T35] hsr_slave_1: left promiscuous mode
[ 1174.290092][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1174.301170][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1174.319912][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1174.331216][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1174.522789][   T35] veth1_macvtap: left promiscuous mode
[ 1174.528401][   T35] veth0_macvtap: left promiscuous mode
[ 1174.548638][   T35] veth1_vlan: left promiscuous mode
[ 1174.559966][   T35] veth0_vlan: left promiscuous mode
[ 1174.846522][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4644'.
[ 1174.886863][   T54] Bluetooth: hci0: command tx timeout
[ 1174.899568][T24097] binder_alloc: binder_alloc_mmap_handler: 24095 0-1000 already mapped failed -16
[ 1175.305876][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1176.005535][T23957] hsr_slave_0: entered promiscuous mode
[ 1176.014890][T23957] hsr_slave_1: entered promiscuous mode
[ 1176.037551][T23957] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1176.061798][T23957] Cannot create hsr debugfs directory
[ 1176.270583][T24101] HfR: entered promiscuous mode
[ 1176.660792][T23957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.855809][T23957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.033508][T23957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.056987][T24106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4647'.
[ 1177.324742][T23957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.809018][T23957] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1177.860115][T23957] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1177.885168][T23957] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1177.910479][T23957] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1178.225429][T23957] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1178.299459][T23957] 8021q: adding VLAN 0 to HW filter on device team0
[ 1178.366436][T18323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1178.373644][T18323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1178.390767][T18323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.398004][T18323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1178.485181][T23957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1178.495954][T23957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1179.003788][T23957] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1179.140774][T23957] veth0_vlan: entered promiscuous mode
[ 1179.153935][T23957] veth1_vlan: entered promiscuous mode
[ 1179.182289][T23957] veth0_macvtap: entered promiscuous mode
[ 1179.192889][T23957] veth1_macvtap: entered promiscuous mode
[ 1179.270299][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.283213][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.293593][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.304571][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.315070][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.326628][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.337073][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.347834][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.358199][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.369364][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.379465][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.390246][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.400530][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1179.411473][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.425907][T23957] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1179.439010][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.449621][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.459958][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.470883][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.481060][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.491731][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.502136][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.512992][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.524580][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.536186][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.546623][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.557465][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.568655][T23957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1179.579551][T23957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1179.592373][T23957] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1179.672931][T23957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.682041][T23957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.690776][T23957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.699620][T23957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1179.918209][ T8582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.940656][ T8582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1180.053886][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1180.070738][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1180.388108][T24160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4653'.
[ 1182.728061][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.736122][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.106693][T24237] netlink: 338 bytes leftover after parsing attributes in process `syz.8.4665'.
[ 1183.147141][T24241] netlink: 338 bytes leftover after parsing attributes in process `syz.8.4665'.
[ 1183.191522][T24237] netlink: 170 bytes leftover after parsing attributes in process `syz.8.4665'.
[ 1183.522481][T24255] netlink: zone id is out of range
[ 1183.528436][T24255] netlink: del zone limit has 8 unknown bytes
[ 1183.591749][T24257] netlink: zone id is out of range
[ 1183.597244][T24257] netlink: zone id is out of range
[ 1183.610700][T24257] netlink: zone id is out of range
[ 1183.624570][T24257] netlink: zone id is out of range
[ 1184.076460][T24270] Invalid ELF header magic: != ELF
[ 1184.751246][T24279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'.
[ 1187.137901][T24355] FAULT_INJECTION: forcing a failure.
[ 1187.137901][T24355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1187.215711][T24355] CPU: 0 UID: 0 PID: 24355 Comm: syz.8.4687 Not tainted 6.13.0-rc5-syzkaller #0
[ 1187.224852][T24355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1187.234960][T24355] Call Trace:
[ 1187.238285][T24355]  <TASK>
[ 1187.241262][T24355]  dump_stack_lvl+0x16c/0x1f0
[ 1187.246013][T24355]  should_fail_ex+0x497/0x5b0
[ 1187.250772][T24355]  _copy_from_user+0x2e/0xd0
[ 1187.255432][T24355]  copy_msghdr_from_user+0x99/0x160
[ 1187.260705][T24355]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1187.266600][T24355]  ___sys_sendmsg+0xff/0x1e0
[ 1187.271265][T24355]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1187.276646][T24355]  ? __pfx_lock_release+0x10/0x10
[ 1187.281729][T24355]  ? trace_lock_acquire+0x14e/0x1f0
[ 1187.287016][T24355]  ? __fget_files+0x206/0x3a0
[ 1187.291776][T24355]  __sys_sendmsg+0x16e/0x220
[ 1187.296449][T24355]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1187.301664][T24355]  do_syscall_64+0xcd/0x250
[ 1187.306246][T24355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1187.312210][T24355] RIP: 0033:0x7f7649185d29
[ 1187.316674][T24355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1187.336343][T24355] RSP: 002b:00007f7649f9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1187.344845][T24355] RAX: ffffffffffffffda RBX: 00007f7649375fa0 RCX: 00007f7649185d29
[ 1187.352875][T24355] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003
[ 1187.360906][T24355] RBP: 00007f7649f9a090 R08: 0000000000000000 R09: 0000000000000000
[ 1187.368934][T24355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1187.376956][T24355] R13: 0000000000000000 R14: 00007f7649375fa0 R15: 00007fffad2a8998
[ 1187.385002][T24355]  </TASK>
[ 1187.807501][T24370] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4691'.
[ 1190.820014][T24454] random: crng reseeded on system resumption
[ 1190.857214][   T29] audit: type=1807 audit(4294967391.391:39): UNKNOWN=$ res=0
[ 1190.877575][   T29] audit: type=1802 audit(4294967391.401:40): pid=24456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.4708" res=0 errno=0
[ 1190.968210][T24456] zram: Added device: zram2
[ 1190.987472][T24455] ima: policy update failed
[ 1190.998043][   T29] audit: type=1802 audit(4294967391.531:41): pid=24455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4708" res=0 errno=0
[ 1193.956964][T24551] FAULT_INJECTION: forcing a failure.
[ 1193.956964][T24551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1193.972195][T24551] CPU: 1 UID: 0 PID: 24551 Comm: syz.8.4727 Not tainted 6.13.0-rc5-syzkaller #0
[ 1193.981312][T24551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1193.991597][T24551] Call Trace:
[ 1193.994954][T24551]  <TASK>
[ 1193.997933][T24551]  dump_stack_lvl+0x16c/0x1f0
[ 1194.002686][T24551]  should_fail_ex+0x497/0x5b0
[ 1194.007442][T24551]  _copy_to_user+0x32/0xd0
[ 1194.011940][T24551]  kvm_arch_dev_ioctl+0x56a/0x730
[ 1194.017041][T24551]  ? __pfx_kvm_arch_dev_ioctl+0x10/0x10
[ 1194.022673][T24551]  ? do_vfs_ioctl+0x513/0x1950
[ 1194.027504][T24551]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1194.032604][T24551]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1194.038571][T24551]  kvm_dev_ioctl+0x781/0x1aa0
[ 1194.043326][T24551]  ? __pfx_lock_release+0x10/0x10
[ 1194.048414][T24551]  ? trace_lock_acquire+0x14e/0x1f0
[ 1194.053695][T24551]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1194.058974][T24551]  ? __fget_files+0x206/0x3a0
[ 1194.063731][T24551]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[ 1194.068914][T24551]  __x64_sys_ioctl+0x190/0x200
[ 1194.073743][T24551]  do_syscall_64+0xcd/0x250
[ 1194.078321][T24551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1194.084314][T24551] RIP: 0033:0x7f7649185d29
[ 1194.088786][T24551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1194.108466][T24551] RSP: 002b:00007f7649f9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1194.116949][T24551] RAX: ffffffffffffffda RBX: 00007f7649375fa0 RCX: 00007f7649185d29
[ 1194.126894][T24551] RDX: 0000000000000088 RSI: 000000008008ae9d RDI: 0000000000000003
[ 1194.134936][T24551] RBP: 00007f7649f9a090 R08: 0000000000000000 R09: 0000000000000000
[ 1194.142966][T24551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1194.151066][T24551] R13: 0000000000000000 R14: 00007f7649375fa0 R15: 00007fffad2a8998
[ 1194.159110][T24551]  </TASK>
[ 1194.162206][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1195.056250][T24584] Invalid ELF header magic: != ELF
[ 1195.992077][T24609] netlink: 334 bytes leftover after parsing attributes in process `syz.8.4739'.
[ 1196.119666][T24616] ovs_: entered promiscuous mode
[ 1196.123722][T24604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4738'.
[ 1196.882443][T24635] netlink: Unknown conntrack attr (type=64, max=9)
[ 1197.896781][T24658] HfR: entered promiscuous mode
[ 1197.957079][T24658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'.
[ 1197.987393][T24658] HfR: left promiscuous mode
[ 1198.234753][T24667] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4752'.
[ 1199.225721][T24688] netlink: 'syz.3.4757': attribute type 11 has an invalid length.
[ 1199.581217][T24694] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4756'.
[ 1200.163987][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[ 1201.183003][T24741] openvswitch: netlink: Key type 29 is not supported
[ 1201.835467][T24762] HfR: entered promiscuous mode
[ 1201.874015][T24762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4775'.
[ 1201.891174][T24762] HfR: left promiscuous mode
[ 1201.947075][T24765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4775'.
[ 1202.539313][T24779] netlink: 222 bytes leftover after parsing attributes in process `syz.1.4777'.
[ 1202.714741][T24785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4778'.
[ 1202.809766][T24784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4776'.
[ 1203.584710][T24799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4781'.
[ 1204.208549][T24809] netlink: 'syz.1.4783': attribute type 11 has an invalid length.
[ 1205.673631][T18323] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1205.847318][T18323] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1206.046094][T18323] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1206.165857][T24841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4792'.
[ 1206.262264][T18323] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1206.378978][T24847] HfR: entered promiscuous mode
[ 1206.394657][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4793'.
[ 1206.440197][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1206.480163][T24847] HfR: left promiscuous mode
[ 1206.536159][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1206.758569][T18323] bridge_slave_1: left allmulticast mode
[ 1206.782513][T18323] bridge_slave_1: left promiscuous mode
[ 1206.812824][T18323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1206.872358][T18323] bridge_slave_0: left allmulticast mode
[ 1206.878098][T18323] bridge_slave_0: left promiscuous mode
[ 1206.891973][T18323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1207.772646][T24865] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4799'.
[ 1207.825410][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1207.839127][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1207.849471][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1207.896134][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1207.904360][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1207.916382][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1208.501905][T18323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1208.544058][T18323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1208.623413][T18323] bond0 (unregistering): Released all slaves
[ 1208.648547][T24879] netlink: zone id is out of range
[ 1208.660674][T24879] netlink: zone id is out of range
[ 1208.682003][T24879] netlink: zone id is out of range
[ 1208.687200][T24879] netlink: zone id is out of range
[ 1208.710491][T24879] netlink: zone id is out of range
[ 1208.731073][T24879] netlink: zone id is out of range
[ 1208.754171][T18323] HfR: left promiscuous mode
[ 1208.765345][T24879] netlink: zone id is out of range
[ 1208.921387][T18323] ovs_: left promiscuous mode
[ 1209.263601][T24871] chnl_net:caif_netlink_parms(): no params data found
[ 1209.739001][T24907] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4806'.
[ 1209.848259][T24915] netlink: 354 bytes leftover after parsing attributes in process `syz.3.4810'.
[ 1210.001362][T20851] Bluetooth: hci2: command tx timeout
[ 1210.193279][T24871] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1210.200461][T24871] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1210.215778][T24871] bridge_slave_0: entered allmulticast mode
[ 1210.231104][T24871] bridge_slave_0: entered promiscuous mode
[ 1210.312168][T18323] hsr_slave_0: left promiscuous mode
[ 1210.354134][T18323] hsr_slave_1: left promiscuous mode
[ 1210.381995][T18323] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1210.403221][T24931] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4812'.
[ 1210.411090][T18323] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1210.434155][T18323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1210.451786][T18323] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1210.521541][T18323] veth1_macvtap: left promiscuous mode
[ 1210.537426][T18323] veth0_macvtap: left promiscuous mode
[ 1210.557118][T18323] veth1_vlan: left promiscuous mode
[ 1210.570013][T18323] veth0_vlan: left promiscuous mode
[ 1211.293284][T18323] team0 (unregistering): Failed to send options change via netlink (err -95)
[ 1211.305236][T18323] team0 (unregistering): Port device team_slave_1 removed
[ 1211.358277][T18323] team0 (unregistering): Failed to send options change via netlink (err -95)
[ 1211.374106][T18323] team0 (unregistering): Port device team_slave_0 removed
[ 1211.973073][T18323] list_del corruption. next->prev should be ffff88807c4d6580, but was 0000000000000000. (next=ffff88802640e900)
[ 1211.987266][T18323] ------------[ cut here ]------------
[ 1211.993356][T18323] kernel BUG at lib/list_debug.c:65!
[ 1211.999560][T18323] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 1212.006544][T18323] CPU: 0 UID: 0 PID: 18323 Comm: kworker/u8:13 Not tainted 6.13.0-rc5-syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1212.015844][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1212.025915][T18323] Workqueue: netns cleanup_net
[ 1212.030725][T18323] RIP: 0010:__list_del_entry_valid_or_report+0x141/0x1c0
[ 1212.037794][T18323] Code: db fc 90 0f 0b 48 89 c2 48 c7 c7 a0 74 b1 8b e8 15 06 db fc 90 0f 0b 48 89 d1 48 c7 c7 20 75 b1 8b 48 89 c2 e8 00 06 db fc 90 <0f> 0b 48 89 34 24 e8 54 f9 5d fd 48 8b 34 24 e9 d5 fe ff ff 48 89
[ 1212.057456][T18323] RSP: 0018:ffffc9000441f840 EFLAGS: 00010282
[ 1212.063571][T18323] RAX: 000000000000006d RBX: ffff88807c4d6580 RCX: ffffffff8178e2b9
[ 1212.071588][T18323] RDX: 0000000000000000 RSI: ffffffff81798a46 RDI: 0000000000000005
[ 1212.079602][T18323] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1212.087621][T18323] R10: 0000000080000000 R11: fffffffffffe75c0 R12: ffffffff8bf34f80
[ 1212.095642][T18323] R13: ffff88806fd28ec0 R14: ffffffff8bf35210 R15: 0000000000000000
[ 1212.103655][T18323] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1212.112635][T18323] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1212.119268][T18323] CR2: 0000001b33e13ff8 CR3: 000000007e536000 CR4: 00000000003526f0
[ 1212.127291][T18323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1212.135333][T18323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1212.143347][T18323] Call Trace:
[ 1212.146658][T18323]  <TASK>
[ 1212.149623][T18323]  ? die+0x31/0x80
[ 1212.153390][T18323]  ? do_trap+0x232/0x430
[ 1212.157693][T18323]  ? __list_del_entry_valid_or_report+0x141/0x1c0
[ 1212.164177][T18323]  ? __list_del_entry_valid_or_report+0x141/0x1c0
[ 1212.170654][T18323]  ? do_error_trap+0xf4/0x230
[ 1212.175390][T18323]  ? __list_del_entry_valid_or_report+0x141/0x1c0
[ 1212.181875][T18323]  ? handle_invalid_op+0x34/0x40
[ 1212.186873][T18323]  ? __list_del_entry_valid_or_report+0x141/0x1c0
[ 1212.193357][T18323]  ? exc_invalid_op+0x2e/0x50
[ 1212.198100][T18323]  ? asm_exc_invalid_op+0x1a/0x20
[ 1212.203185][T18323]  ? __wake_up_klogd.part.0+0x99/0xf0
[ 1212.208606][T18323]  ? vprintk+0x86/0xa0
[ 1212.212732][T18323]  ? __list_del_entry_valid_or_report+0x141/0x1c0
[ 1212.219213][T18323]  __team_options_unregister+0x12a/0x300
[ 1212.224906][T18323]  team_uninit+0x107/0x1c0
[ 1212.229380][T18323]  ? __pfx_team_uninit+0x10/0x10
[ 1212.234380][T18323]  unregister_netdevice_many_notify+0xf77/0x1e60
[ 1212.240780][T18323]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1212.247612][T18323]  ? unregister_netdevice_queue+0x22f/0x3f0
[ 1212.253570][T18323]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1212.259881][T18323]  ? batadv_softif_destroy_vlan+0xdf/0x160
[ 1212.265749][T18323]  default_device_exit_batch+0x740/0x9c0
[ 1212.271444][T18323]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1212.276796][T18323]  ? __pfx_default_device_exit_batch+0x10/0x10
[ 1212.283014][T18323]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[ 1212.288535][T18323]  ? __pfx___might_resched+0x10/0x10
[ 1212.293871][T18323]  ? __pfx_default_device_exit_batch+0x10/0x10
[ 1212.300099][T18323]  ops_exit_list+0x128/0x180
[ 1212.304758][T18323]  cleanup_net+0x5b7/0xbd0
[ 1212.309248][T18323]  ? __pfx_cleanup_net+0x10/0x10
[ 1212.314254][T18323]  ? lock_acquire+0x2f/0xb0
[ 1212.318800][T18323]  ? process_one_work+0x8bb/0x1b30
[ 1212.323961][T18323]  process_one_work+0x958/0x1b30
[ 1212.328949][T18323]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1212.334630][T18323]  ? __pfx_process_one_work+0x10/0x10
[ 1212.340134][T18323]  ? rcu_is_watching+0x12/0xc0
[ 1212.344959][T18323]  ? assign_work+0x1a0/0x250
[ 1212.349615][T18323]  worker_thread+0x6c8/0xf00
[ 1212.354261][T18323]  ? __pfx_worker_thread+0x10/0x10
[ 1212.359419][T18323]  kthread+0x2c1/0x3a0
[ 1212.363540][T18323]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1212.368785][T18323]  ? __pfx_kthread+0x10/0x10
[ 1212.373425][T18323]  ret_from_fork+0x45/0x80
[ 1212.377884][T18323]  ? __pfx_kthread+0x10/0x10
[ 1212.382525][T18323]  ret_from_fork_asm+0x1a/0x30
[ 1212.387358][T18323]  </TASK>
[ 1212.390408][T18323] Modules linked in:
[ 1212.396706][T18323] ---[ end trace 0000000000000000 ]---
[ 1212.457008][T18323] RIP: 0010:__list_del_entry_valid_or_report+0x141/0x1c0
[ 1212.470668][T18323] Code: db fc 90 0f 0b 48 89 c2 48 c7 c7 a0 74 b1 8b e8 15 06 db fc 90 0f 0b 48 89 d1 48 c7 c7 20 75 b1 8b 48 89 c2 e8 00 06 db fc 90 <0f> 0b 48 89 34 24 e8 54 f9 5d fd 48 8b 34 24 e9 d5 fe ff ff 48 89
[ 1212.506375][T20851] Bluetooth: hci2: command tx timeout
[ 1212.608064][T18323] RSP: 0018:ffffc9000441f840 EFLAGS: 00010282
[ 1212.617332][T18323] RAX: 000000000000006d RBX: ffff88807c4d6580 RCX: ffffffff8178e2b9
[ 1212.625477][T18323] RDX: 0000000000000000 RSI: ffffffff81798a46 RDI: 0000000000000005
[ 1212.633816][T18323] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1212.642355][T18323] R10: 0000000080000000 R11: fffffffffffe75c0 R12: ffffffff8bf34f80
[ 1212.650382][T18323] R13: ffff88806fd28ec0 R14: ffffffff8bf35210 R15: 0000000000000000
[ 1212.658707][T18323] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1212.667981][T18323] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1212.674913][T18323] CR2: 00007f9d194a7d60 CR3: 000000002f51c000 CR4: 00000000003526f0
[ 1212.683137][T18323] Kernel panic - not syncing: Fatal exception
[ 1212.689487][T18323] Kernel Offset: disabled
[ 1212.693824][T18323] Rebooting in 86400 seconds..