last executing test programs: 5.380303657s ago: executing program 0 (id=197): socket(0x2000000000000021, 0x2, 0x10000000000002) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto(0x3, 0x0, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x6) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xfffffffc) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0xa, 0x0) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3005806cfaecca81ee1b000400c70a64e0110050480dde6cd6ae6b8f1d0e3c0d059fbbfc0929901f3594533a14c4e91300daa083765f0533b8e07e317e77bbfd0d188ab9d97009cfaf", @ANYRES16=r5, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4048085}, 0x0) 5.186603605s ago: executing program 2 (id=199): socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sctp/snmp\x00', 0x722, 0x0) write$auto(0x3, 0x0, 0xfffffdef) syslog$auto(0x4, &(0x7f0000000000)='ethtool\x00', 0x401) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VERSION={0xd, 0x1, '\\\'!\'%+c]['}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000e60003800800c000e000000204002a000400110008002e00", @ANYRES32=0x0, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.126247893s ago: executing program 0 (id=201): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x4ce042, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, &(0x7f0000000040)="f746748d8b6afad4452e4d7d3e25") write$auto_console_fops_tty_io(r2, 0x0, 0x0) getpid() r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xc2481, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf251f0000004800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="080003003e07000008000100", @ANYRES32=r1, @ANYBLOB="080003000100000008000100", @ANYRES32=r1, @ANYBLOB="14000200697036746e6c300000000000000000003800018008000100", @ANYRES32=r1, @ANYBLOB="140002007866726d300000080000000000000000080003000100000008000300550600000800030001040000400001800800030003000000080003000400000e8fe416af470cfc91805105b5001400020076657468300000", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000700000005000600080000000800030004000000050005007f00000005000500020000000c0001800800030041cd0000"], 0x100}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) clone$auto(0x12051c, 0x40000006, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') 4.999044428s ago: executing program 2 (id=202): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_flowlabel\x00', 0x400002, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) mmap$auto(0x20000000000, 0x4, 0x3, 0x12, 0xffffffffffffffff, 0x168d) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/err\x00', 0x4000, 0x0) r3 = socket(0x2b, 0x1, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000180)={r1, 0x6}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001040)={0x80, 0x8, 0x304, 0xea, 0x101, 0x6, &(0x7f00000001c0)}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) shmctl$auto(0x0, 0xd, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 4.585470478s ago: executing program 3 (id=204): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x2012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r1, 0x0, 0x40000000f42c, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='\x00\x00i\xffw', 0x4, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000180)={0x7f, 0x1, 0x1, 0x2, 0xffffffff}) setsockopt$auto(0x3, 0x1, 0x1f, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) setreuid$auto(0xffffffffffffffff, 0x8) r2 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) connect$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x25, "835aabaf5dc454e38226799f73aa"}, 0x3d) shutdown$auto(0x200000003, 0x2) r3 = bpf$auto(0x0, 0x0, 0x6f4) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="000f151e873629b6cce56b5d4b5e4cfc7ddec303174ea0f02a7dc5210bf46529f7652d5478e7fae2e1aaaa3d3c349f19851ad16792afc96a0a537e51d7ad6632d4788edc2326605c3749f239cb30e52ac2680e7e1f7047499d636f66e92ee2fad771471bf253de1ccf4e16ca993112593e52bf6c2a32617f16a5", @ANYRES16=r4, @ANYBLOB="00012dbd7000fcdbdf2506000000"], 0x14}}, 0x4000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) unlinkat$auto(r3, &(0x7f0000000080)='./file0\x00', 0x7fffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) 3.959997576s ago: executing program 0 (id=206): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) 3.554949294s ago: executing program 0 (id=207): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vbi11\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r1, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = semctl$auto_GETPID(0x9483, 0x0, 0xb, 0x0) r3 = clone$auto(0x0, 0x5, &(0x7f00000000c0)=0x8, &(0x7f00000001c0)=0x3, 0x3ff) r4 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0xc880, 0x0) kcmp$auto_KCMP_EPOLL_TFD(r2, r3, 0x7, r4, 0x6) socket(0x1d, 0x6, 0x10000001) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r5, &(0x7f0000000280)='\x8d]\x00', 0x80000000, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x2) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x4021200, &(0x7f0000000500)="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", 0x161, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 3.283652557s ago: executing program 2 (id=208): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) socket(0xa, 0x1, 0x100) fcntl$auto(0x3, 0x4, 0xa553) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r2, 0xa0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x1ac}}, 0x40000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) 3.220341798s ago: executing program 3 (id=209): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)={0xafa, 0x7}) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x7) 3.070315186s ago: executing program 3 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80805, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/011/001\x00', 0x40, 0x0) fsconfig$auto_FSCONFIG_CMD_CREATE(r1, 0x6, &(0x7f0000000140)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', &(0x7f0000000340)="b9fd9a5958fd70ae5bdcb1d93aadd20d51d03e3a4074cb4ca8d9705c9470e0811a702748fcd23d291bafd09f55e3e7901e3f4942855b95ee49d221b29803ebde316f0dbf3e727b611ea91b4427bc6a89874c38d1be46bd312b181133b3724547bcc628595ae08b5e492ab488ad4db9a596fded56f709a45947daf82c291f44e6e4bf3a81859379798f7084c1e7330c8b2de0224fac4ce945d2df6d7c8ac082366a8d6d02e524866c3a6dac", 0x7fff) socket(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001000)={0x3bc, r4, 0x1, 0x4470bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_PMSR_RESULT={0x3a8, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0x3a0, 0x5, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "399e0301e69ab94801826971be0c056562fbca49a690ff0b9d8b2f291f1e9c997ce8c836eb9f7a3c08e470f9cca88f573f4e47d30024ccf55c3bb98782d6d42139012d08009c21c53e5c044ef79ebca8a9e2d5107763f35f182ee969b1c113e78d60a3e3247987c8a704c7b08e9d11aef0e717"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xc3, 0x1, "74bb40db225de9d0269c3450909b3cda57d685a9f044989bf45088740e5dd5f1d59d1585d38472a4c4cca30170fe270071055f5b18b9688e147144d0acfcb4a77cf35483ecb806502ac4373d1a010540cbebce05f6210daad8d18fc3174b215e8a4143eac8ed7325773b5443b6b016c446e2b4d0012369a5a050d5d9ca86dc43897aca49fe0867e1efdb8319ec2e3b2d1735c8c9d5f7e258a395f7b916d6b6d937aff5431fcc6dee918eeca07310c2a4ba01258552720a491454f2f4eb3fa7"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x50, 0x1, "7ce483b09dffbfca1ded8f83804b01f67a64f81b5994310749250806c664b2c94c6c0adfbb47887d6c6de4d5a2d536f466e6bdbeb1a914f29a47d783d5fa8c5c9bdb11474998972a4c04ed1c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xd, 0x1, "a877d72d42ae09cc62"}, @NL80211_PMSR_PEER_ATTR_RESP={0x4}]}, {0x1f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1e6, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}]}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r6, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x37, &(0x7f0000000180)={&(0x7f0000000840)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4040000) pipe$auto(&(0x7f0000000100)=r6) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x143881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0x7fff, 0x1, 0x948b, 0x5, 0x8, 0x400000006, 0x100000000003, 0x8, 0x9, 0x5, 0x6d3c, 0x400005, 0x5]}, 0x0) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044) 3.045659737s ago: executing program 1 (id=211): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) (async) sysfs$auto(0x2, 0xa, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bd7000fcdbdf8a6600002108000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) (async, rerun: 64) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x800, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000000000000) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x3, 0x6) (async, rerun: 64) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0x5ee, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x7) (async, rerun: 32) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x11, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) (rerun: 32) r6 = memfd_create$auto(0x0, 0x4) socket(0xa, 0x3, 0x3a) (async) statx$auto(r6, 0x0, 0x1000, 0xbdfc, 0x0) 2.921966467s ago: executing program 2 (id=212): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7d, 0x5, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) (async) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7d, 0x5, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r1 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) gettid() (async) r2 = gettid() mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) (async) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) setresuid$auto(0x8, 0x0, 0x4) (async) setresuid$auto(0x8, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x2, 0x73) (async) socket(0xa, 0x2, 0x73) kill$auto(r2, 0x11) setsockopt$auto_SO_CNX_ADVICE(r1, 0x2, 0x35, 0x0, 0x81) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) madvise$auto(0x8, 0xffffffffffff0005, 0x19) madvise$auto(0x1000, 0x400050, 0x9) munmap$auto(0x8000, 0xffffffff) 2.604864847s ago: executing program 2 (id=213): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1) socket(0x25, 0x1, 0x3) write$auto(0x3, 0x0, 0x8) dup$auto(0xffffffffffffffff) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x948b, 0x0, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x8, 0x6, 0x4, 0x0, 0x6, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) pselect6$auto(0x400, &(0x7f0000000000)={[0x8, 0x4, 0x40000000000000, 0x6, 0x7fffffff, 0xffffffffffffffff, 0xfff, 0x6, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) fgetxattr$auto(r3, &(0x7f0000000080)='[]!%^(\x00', 0x0, 0x2) process_madvise$auto_MADV_WIPEONFORK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)="6d5e859446609ac1c61c93c95ceac2103cd6c40bd887dd7672bebdc36b90d97000076a472cba54503fd25ed5e7eccc", 0x100}, 0xc, 0x12, 0x1) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) 2.365316927s ago: executing program 1 (id=214): close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) socket(0x11, 0x800, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyb0\x00', 0x282c40, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm0p/xrun_debug\x00', 0x20000, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x25, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="386ef3cc2e926891ec00012cbd7000fb"], 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x8011) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/edac_core/parameters/edac_mc_poll_msec\x00', 0x60301, 0x0) (async) sendmmsg$auto(r2, &(0x7f0000000080)={{&(0x7f0000000040), 0x1c, &(0x7f00000000c0)={0x0, 0x1a004}, 0x7, 0x0, 0x0, 0xb}, 0xfff}, 0x5, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) close_range$auto(r0, 0x8, 0x7) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000280)) 2.076289645s ago: executing program 3 (id=215): r0 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) ioctl$auto_FIONREAD(r0, 0xaa00, 0x8001) r1 = socket(0x1d, 0x3, 0x1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) write$auto(r2, 0x0, 0x0) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) setsockopt$auto(r1, 0x65, 0x5, 0x0, 0x800) r3 = socket(0xa, 0x2, 0x3a) sendmsg$auto_NL80211_CMD_GET_KEY(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x1c}}, 0x20000010) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x4000804) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x408, 0x8000) socket(0xa, 0x5, 0x0) socketpair$auto(0x8001, 0x5, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x9) mmap$auto(0x1, 0x8000, 0x1ff, 0x18, r3, 0x2) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="20030000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\x00'], 0x320}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000094) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/rotational\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x4002, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/10, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r6}, 0xa3) mlock$auto(0xfbe8, 0x1000000000000004) read$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) 2.023162119s ago: executing program 1 (id=216): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) read$auto(r0, &(0x7f0000000040)='%]!@.,\xcd[+]%!*,]&', 0x6) socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x3bd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/pts/ptmx\x00', 0x8000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) 1.592731093s ago: executing program 0 (id=217): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98{_\bP\x8d\x81\x8by\x8f\x83\xed\xf3\x88\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\xf7\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x6, 0x15) madvise$auto(0x5, 0x200007, 0x10019) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000100)="e41c35972f843a6eaf4ff53d7b6e0a26f26a2a610c6b1347c924aac954f84934b58bd05168437031a53539c09d40aeec06d02752366edfe4c910deba69dde85a55ab2a663fd45b86041475c0f3d9e2df671c4d8281", 0x40000000, &(0x7f0000000200)={&(0x7f00000001c0)="dc783bd1e299f2d51d2796060d8c64d9dcbbc134519957cba426d26ea339160f25e2cb63db6d00d02469", 0x8000000000000001}, 0x1, 0x0, 0x0, 0x4}, 0x80000000}, 0x773b, 0x10000040) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x1, 0xfffffffffffffffe, 0x9b72, 0x7, 0x28004) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) ioctl$auto_CEC_RECEIVE(r2, 0xc0386106, 0x0) mmap$auto(0xf4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1b3b40, 0x0) read$auto(0x3, 0x0, 0x7f) mmap$auto(0x0, 0x4, 0x4000000000df, 0x971, 0x402, 0x300000000000) close_range$auto(0xffffffffffffffff, r2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x3) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) fanotify_init$auto(0x3, 0x2010000000000) sysfs$auto(0x5, 0x3, 0x3) fsopen$auto(0x0, 0x1) clone$auto(0x20003b48, 0x800000000002, 0x0, 0x0, 0x2) socket(0x840000000002, 0x3, 0xff) 993.852605ms ago: executing program 3 (id=218): socket(0x10, 0x0, 0xbdb1) socket(0x10, 0x2, 0x4) bind$auto(0x3, &(0x7f0000000000)=@llc={0x1a, 0x200, 0x0, 0x59, 0x0, 0x0, @local}, 0x6) mmap$auto(0x800004000, 0x400008, 0x200df, 0x9b72, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = socket(0xa, 0x2, 0x0) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(r0, 0x0, 0x30, 0x0, 0x568) r1 = bpf$auto(0x3, 0x0, 0x6f3) r2 = socket(0xa, 0x2, 0x88) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x682401, 0x0) clock_adjtime$auto(0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, 0x0, 0x4004800) sendmsg$auto_NL80211_CMD_DEL_KEY(r2, 0x0, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x5014c0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) 930.570614ms ago: executing program 1 (id=219): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='\x92\xc7\x00_$\x12\x81\xed!\xa1\xdb\xd5L\xdd\xf7\xd5.(>\xb9\xee\xcb\xcca\xeb\x85ik\x006.\xc4lnO0\x99Z.{', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2f008b48a8a57689adcc1ca6d2cbfa93b50590c9"}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0225020000000800030080"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8, &(0x7f0000000180)={0x0, 0xc8}, 0x1, 0x0, 0x5}, 0x3}, 0x40000204, 0x0) 769.225456ms ago: executing program 2 (id=220): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) open(&(0x7f0000000100)='./cgroup\x00', 0x145081, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x10, 0x0, 0xc) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000005d80), 0xffffffffffffffff) read$auto(0xffffffffffffffff, &(0x7f0000000040)='#&\x00', 0x1) close_range$auto(r1, 0x8, 0x800000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) setresuid$auto(0x0, 0x8, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) ioctl$auto(0x3, 0x134a, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000140)=ANY=[@ANYRES8=r6, @ANYRES16=r0, @ANYBLOB='A\x00'/16], 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r7) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf250400000908000400ef9028b6"], 0x1c}, 0x1, 0x3000000, 0x0, 0x1}, 0x8010) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) write$auto(0xffffffffffffffff, 0x0, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) 387.931788ms ago: executing program 1 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x5e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c010}, 0x160000a4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pkey_free$auto(0x4) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r14) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r15, 0x703, 0x70bd27, 0x25dfd9fc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r10}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r11}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r12}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r13}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004801}, 0x404) 342.432113ms ago: executing program 0 (id=222): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/smaps_rollup\x00', 0x4c0200, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r1, 0x1, 0x9, 0x0, 0x0) setsockopt$auto_SO_DEBUG(r0, 0x7, 0x1, &(0x7f0000000000)='/proc/self/maps\x00', 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)="98", 0x1) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x67, 0x6, 0x7fff, 0x5, 0x80000000007, 0x1, 0x2, 0xff, 0x5, 0x7, 0xfbfffffe, 0x5, 0x7fa, 0x7, 0x9}) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4093, 0xffd) 41.182754ms ago: executing program 3 (id=223): pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x8, 0x81000b, 0xffb, 0x8000000008019, r0, 0x5) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) rseq$auto(0x0, 0xffffffe3, 0x5, 0x4) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x13e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0xb, 0x0) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r3, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r4, 0x1) r5 = open(0x0, 0x148640, 0x78e22799f4a46f8e) flock$auto(r5, 0x2) close_range$auto(r2, 0xffffffffffffffff, 0x0) ptrace$auto_PTRACE_SETREGSET(0x4205, 0x0, 0x1, 0x9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) 0s ago: executing program 1 (id=224): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0xa, 0x1) madvise$auto(0x0, 0x2000040080000006, 0xfffff220) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x7, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r1, 0x3b8f, r0) mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x1004, 0x6) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r4, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={0x0, 0x10}, 0x20000005, 0x0, 0x6, 0x1}, 0x1}, 0x1, 0x14) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(r5, &(0x7f0000000140)='[/]&].%[[[\\&.#}}\x00', 0x9, 0x7f) close_range$auto(0x2, 0x8, 0x0) socket(0x1a, 0x4, 0x73) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. syzkaller login: [ 81.002995][ T5853] cgroup: Unknown subsys name 'net' [ 81.132319][ T5853] cgroup: Unknown subsys name 'cpuset' [ 81.141025][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.643839][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.610532][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.619197][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.627039][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.649471][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.657272][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.738727][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.753239][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.762366][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.788361][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.797541][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.805490][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.815954][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.826541][ T5186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.839103][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.846819][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.877744][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.886457][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.896028][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.904557][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.914393][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.260426][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 85.321930][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 85.450502][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.457592][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.466032][ T5867] bridge_slave_0: entered allmulticast mode [ 85.473859][ T5867] bridge_slave_0: entered promiscuous mode [ 85.521141][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.528318][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.535442][ T5867] bridge_slave_1: entered allmulticast mode [ 85.543475][ T5867] bridge_slave_1: entered promiscuous mode [ 85.659438][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.676228][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.685967][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.694052][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.701367][ T5862] bridge_slave_0: entered allmulticast mode [ 85.709294][ T5862] bridge_slave_0: entered promiscuous mode [ 85.720886][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 85.768051][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.776511][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.784336][ T5862] bridge_slave_1: entered allmulticast mode [ 85.793612][ T5862] bridge_slave_1: entered promiscuous mode [ 85.815079][ T5867] team0: Port device team_slave_0 added [ 85.859236][ T5867] team0: Port device team_slave_1 added [ 85.865406][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 85.878636][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.926609][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.950965][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.957910][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.984116][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.997674][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.004823][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.030780][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.116673][ T5862] team0: Port device team_slave_0 added [ 86.143321][ T5862] team0: Port device team_slave_1 added [ 86.171910][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.179459][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.186596][ T5873] bridge_slave_0: entered allmulticast mode [ 86.194158][ T5873] bridge_slave_0: entered promiscuous mode [ 86.237634][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.244877][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.253257][ T5873] bridge_slave_1: entered allmulticast mode [ 86.260534][ T5873] bridge_slave_1: entered promiscuous mode [ 86.312375][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.319749][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.345939][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.372482][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.379991][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.387238][ T5866] bridge_slave_0: entered allmulticast mode [ 86.395082][ T5866] bridge_slave_0: entered promiscuous mode [ 86.409374][ T5867] hsr_slave_0: entered promiscuous mode [ 86.415918][ T5867] hsr_slave_1: entered promiscuous mode [ 86.423278][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.430373][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.457010][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.477868][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.491023][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.500582][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.507726][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.515928][ T5866] bridge_slave_1: entered allmulticast mode [ 86.522943][ T5866] bridge_slave_1: entered promiscuous mode [ 86.563870][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.577505][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.636517][ T5873] team0: Port device team_slave_0 added [ 86.675273][ T5873] team0: Port device team_slave_1 added [ 86.719983][ T5866] team0: Port device team_slave_0 added [ 86.752110][ T5862] hsr_slave_0: entered promiscuous mode [ 86.761189][ T51] Bluetooth: hci0: command tx timeout [ 86.767816][ T5862] hsr_slave_1: entered promiscuous mode [ 86.774400][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 86.780869][ T5862] Cannot create hsr debugfs directory [ 86.790053][ T5866] team0: Port device team_slave_1 added [ 86.818507][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.825504][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.852611][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.917366][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.924577][ T51] Bluetooth: hci1: command tx timeout [ 86.933852][ T5864] Bluetooth: hci2: command tx timeout [ 86.940770][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.968200][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.998825][ T5864] Bluetooth: hci3: command tx timeout [ 87.011833][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.019027][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.045295][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.082591][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.090582][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.116862][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.282411][ T5873] hsr_slave_0: entered promiscuous mode [ 87.289948][ T5873] hsr_slave_1: entered promiscuous mode [ 87.296035][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 87.302587][ T5873] Cannot create hsr debugfs directory [ 87.315029][ T5866] hsr_slave_0: entered promiscuous mode [ 87.322231][ T5866] hsr_slave_1: entered promiscuous mode [ 87.329182][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 87.334930][ T5866] Cannot create hsr debugfs directory [ 87.584304][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.597187][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.634484][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.674927][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.766939][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.784403][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.812439][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.824220][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.902450][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.913416][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.938026][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.950069][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.092694][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.104450][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.117437][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.133943][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.180818][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.241664][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.265022][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.296106][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.318312][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.325589][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.340320][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.347443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.364502][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.371700][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.397959][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.405089][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.430810][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.491395][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.534249][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.541623][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.561291][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.568493][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.585157][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.633730][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.705608][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.712825][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.776716][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.783941][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.838254][ T5864] Bluetooth: hci0: command tx timeout [ 89.001265][ T5864] Bluetooth: hci2: command tx timeout [ 89.006719][ T5864] Bluetooth: hci1: command tx timeout [ 89.081149][ T5864] Bluetooth: hci3: command tx timeout [ 89.085748][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.125228][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.313849][ T5862] veth0_vlan: entered promiscuous mode [ 89.337014][ T5867] veth0_vlan: entered promiscuous mode [ 89.357195][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.368399][ T5867] veth1_vlan: entered promiscuous mode [ 89.376722][ T5862] veth1_vlan: entered promiscuous mode [ 89.452803][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.474774][ T5862] veth0_macvtap: entered promiscuous mode [ 89.490324][ T5862] veth1_macvtap: entered promiscuous mode [ 89.517003][ T5867] veth0_macvtap: entered promiscuous mode [ 89.540515][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.552917][ T5867] veth1_macvtap: entered promiscuous mode [ 89.574831][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.592550][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.602737][ T5873] veth0_vlan: entered promiscuous mode [ 89.620400][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.631321][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.653926][ T5873] veth1_vlan: entered promiscuous mode [ 89.662585][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.686096][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.733483][ T5866] veth0_vlan: entered promiscuous mode [ 89.756633][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.785149][ T1107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.796368][ T1107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.824198][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.833341][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.867254][ T5866] veth1_vlan: entered promiscuous mode [ 89.884662][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.892004][ T5873] veth0_macvtap: entered promiscuous mode [ 89.910201][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.934623][ T5873] veth1_macvtap: entered promiscuous mode [ 89.976146][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.002062][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.057275][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.076917][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.084974][ T5866] veth0_macvtap: entered promiscuous mode [ 90.111339][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.117932][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.137175][ T1107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.154571][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.163957][ T1107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.180633][ T1107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.218721][ T1107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.229531][ T5866] veth1_macvtap: entered promiscuous mode [ 90.301197][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.316412][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.393001][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.404189][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.415710][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.459895][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.512034][ T1100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.539295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.558430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.567219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.587380][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.608260][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.617323][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.716774][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.758626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.793792][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.824200][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.924420][ T5864] Bluetooth: hci0: command tx timeout [ 90.977328][ T5963] bcache: register_bcache() error : failed to open device [ 91.079219][ T5864] Bluetooth: hci1: command tx timeout [ 91.084713][ T51] Bluetooth: hci2: command tx timeout [ 91.112274][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.158845][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.159534][ T5864] Bluetooth: hci3: command tx timeout [ 91.256992][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.298585][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.481250][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.688343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.967223][ T979] cfg80211: failed to load regulatory.db [ 92.091758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.102471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.125507][ T5980] random: crng reseeded on system resumption [ 92.152076][ T5980] Zero length message leads to an empty skb [ 92.268657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.350152][ T5991] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 92.471441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.488827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.606618][ T5998] bridge0: port 3(dummy0) entered blocking state [ 92.640356][ T5998] bridge0: port 3(dummy0) entered disabled state [ 92.647019][ T5998] dummy0: entered allmulticast mode [ 92.655207][ T5998] dummy0: entered promiscuous mode [ 92.662153][ T5998] bridge0: port 3(dummy0) entered blocking state [ 92.668746][ T5998] bridge0: port 3(dummy0) entered forwarding state [ 92.998519][ T6002] Bluetooth: hci0: command tx timeout [ 93.086690][ T5996] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.160915][ T6002] Bluetooth: hci1: command tx timeout [ 93.166745][ T6002] Bluetooth: hci2: command tx timeout [ 93.238441][ T6012] Bluetooth: hci3: command tx timeout [ 93.327831][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 94.190759][ T6020] binder: 6019:6020 ioctl c0046209 9 returned -22 [ 94.423413][ T6026] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.675083][ T6034] process 'syz.2.16' launched ':,' with NULL argv: empty string added [ 96.308621][ T6060] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 96.402342][ T6061] Trying to write to read-only block-device sda1 [ 97.525288][ T6082] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 97.558148][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 98.069573][ T6085] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 99.885026][ T6111] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.055575][ T6164] ICMPv6: process `syz.0.42' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_hsr.base_reachable_time - use net.ipv6.neigh.veth0_to_hsr.base_reachable_time_ms instead [ 102.268799][ T6174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.102757][ T6192] futex_wake_op: syz.1.48 tries to shift op by -9; fix this program [ 104.246784][ T6207] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.551187][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 105.186912][ T6213] random: crng reseeded on system resumption [ 109.151611][ T6286] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 110.266179][ T6305] bridge0: port 3(dummy0) entered blocking state [ 110.273258][ T6305] bridge0: port 3(dummy0) entered disabled state [ 110.307266][ T6305] dummy0: entered allmulticast mode [ 110.335223][ T6305] dummy0: entered promiscuous mode [ 110.344439][ T6305] bridge0: port 3(dummy0) entered blocking state [ 110.351412][ T6305] bridge0: port 3(dummy0) entered forwarding state [ 112.112557][ T6357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 112.272767][ T6363] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 113.554079][ T6389] netlink: 'syz.3.98': attribute type 11 has an invalid length. [ 114.247823][ T6401] Console: switching to colour VGA+ 80x25 [ 114.256099][ T6406] netlink: 334 bytes leftover after parsing attributes in process `syz.2.104'. [ 115.767084][ T6435] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 116.786344][ T6464] FAULT_INJECTION: forcing a failure. [ 116.786344][ T6464] name failslab, interval 1, probability 0, space 0, times 1 [ 116.792603][ T6442] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 116.875011][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.3.116 Not tainted syzkaller #0 PREEMPT(full) [ 116.875057][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.875078][ T6464] Call Trace: [ 116.875087][ T6464] [ 116.875097][ T6464] dump_stack_lvl+0x16c/0x1f0 [ 116.875144][ T6464] should_fail_ex+0x512/0x640 [ 116.875181][ T6464] ? fs_reclaim_acquire+0xae/0x150 [ 116.875224][ T6464] should_failslab+0xc2/0x120 [ 116.875258][ T6464] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 116.875292][ T6464] ? __kernfs_new_node+0xd2/0x8e0 [ 116.875329][ T6464] __kernfs_new_node+0xd2/0x8e0 [ 116.875364][ T6464] ? __lock_acquire+0x62e/0x1ce0 [ 116.875397][ T6464] ? __pfx___kernfs_new_node+0x10/0x10 [ 116.875450][ T6464] ? find_held_lock+0x2b/0x80 [ 116.875486][ T6464] ? kernfs_root+0xee/0x2a0 [ 116.875526][ T6464] kernfs_new_node+0x13c/0x1e0 [ 116.875567][ T6464] __kernfs_create_file+0x53/0x350 [ 116.875599][ T6464] sysfs_add_file_mode_ns+0x207/0x3c0 [ 116.875644][ T6464] internal_create_group+0x578/0xf30 [ 116.875689][ T6464] ? __pfx_internal_create_group+0x10/0x10 [ 116.875728][ T6464] ? kernfs_create_link+0x1bd/0x240 [ 116.875760][ T6464] internal_create_groups+0x9d/0x150 [ 116.875794][ T6464] device_add+0x731/0x1aa0 [ 116.875826][ T6464] ? __pfx_device_add+0x10/0x10 [ 116.875851][ T6464] ? __pfx___might_resched+0x10/0x10 [ 116.875879][ T6464] ? is_dynamic_key+0xb4/0x160 [ 116.875922][ T6464] __add_disk+0x457/0xf00 [ 116.875966][ T6464] add_disk_fwnode+0x13f/0x5d0 [ 116.876001][ T6464] nbd_dev_add+0x783/0xbb0 [ 116.876041][ T6464] ? __pfx_nbd_dev_add+0x10/0x10 [ 116.876102][ T6464] ? bpf_lsm_capable+0x9/0x10 [ 116.876132][ T6464] ? __radix_tree_lookup+0x21f/0x2c0 [ 116.876176][ T6464] nbd_genl_connect+0x8b0/0x1c60 [ 116.876210][ T6464] ? __pfx_nbd_genl_connect+0x10/0x10 [ 116.876238][ T6464] ? __nla_parse+0x40/0x60 [ 116.876272][ T6464] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 116.876301][ T6464] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 116.876335][ T6464] genl_family_rcv_msg_doit+0x206/0x2f0 [ 116.876370][ T6464] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.876397][ T6464] ? genl_get_cmd+0x194/0x580 [ 116.876444][ T6464] ? __radix_tree_lookup+0x21f/0x2c0 [ 116.876486][ T6464] genl_rcv_msg+0x55c/0x800 [ 116.876519][ T6464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.876547][ T6464] ? __pfx_nbd_genl_connect+0x10/0x10 [ 116.876588][ T6464] netlink_rcv_skb+0x155/0x420 [ 116.876627][ T6464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.876657][ T6464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.876711][ T6464] ? netlink_deliver_tap+0x1ae/0xd30 [ 116.876754][ T6464] genl_rcv+0x28/0x40 [ 116.876777][ T6464] netlink_unicast+0x5aa/0x870 [ 116.876821][ T6464] ? __pfx_netlink_unicast+0x10/0x10 [ 116.876859][ T6464] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 116.876894][ T6464] ? __lock_acquire+0xb97/0x1ce0 [ 116.876936][ T6464] netlink_sendmsg+0x8d1/0xdd0 [ 116.876981][ T6464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.877023][ T6464] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 116.877059][ T6464] ____sys_sendmsg+0xa95/0xc70 [ 116.877089][ T6464] ? copy_msghdr_from_user+0x10a/0x160 [ 116.877125][ T6464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.877164][ T6464] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.877208][ T6464] ___sys_sendmsg+0x134/0x1d0 [ 116.877248][ T6464] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.877340][ T6464] __sys_sendmsg+0x16d/0x220 [ 116.877381][ T6464] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.877424][ T6464] ? __x64_sys_futex+0x1e0/0x4c0 [ 116.877488][ T6464] do_syscall_64+0xcd/0x4c0 [ 116.877513][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.877540][ T6464] RIP: 0033:0x7f00c8d8eec9 [ 116.877569][ T6464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.877591][ T6464] RSP: 002b:00007f00c9bb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.877615][ T6464] RAX: ffffffffffffffda RBX: 00007f00c8fe5fa0 RCX: 00007f00c8d8eec9 [ 116.877632][ T6464] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 116.877647][ T6464] RBP: 00007f00c8e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.877661][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.877675][ T6464] R13: 00007f00c8fe6038 R14: 00007f00c8fe5fa0 R15: 00007ffcd71d80d8 [ 116.877712][ T6464] [ 117.803306][ T6469] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.943413][ T6464] nbd: failed to add new device [ 120.242367][ T6504] FAULT_INJECTION: forcing a failure. [ 120.242367][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 120.380080][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT(full) [ 120.380116][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.380142][ T6504] Call Trace: [ 120.380147][ T6504] [ 120.380153][ T6504] dump_stack_lvl+0x16c/0x1f0 [ 120.380179][ T6504] should_fail_ex+0x512/0x640 [ 120.380201][ T6504] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 120.380220][ T6504] should_failslab+0xc2/0x120 [ 120.380245][ T6504] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 120.380263][ T6504] ? posix_lock_inode+0x1b7/0x2280 [ 120.380288][ T6504] posix_lock_inode+0x1b7/0x2280 [ 120.380317][ T6504] ? __pfx_posix_lock_inode+0x10/0x10 [ 120.380343][ T6504] vfs_lock_file+0xfb/0x150 [ 120.380365][ T6504] fcntl_setlk+0x3ff/0xe20 [ 120.380380][ T6504] ? __pfx_fcntl_setlk+0x10/0x10 [ 120.380392][ T6504] ? lockdep_hardirqs_on+0x7c/0x110 [ 120.380420][ T6504] ? rep_movs_alternative+0x30/0x90 [ 120.380439][ T6504] do_fcntl+0xbce/0x15a0 [ 120.380459][ T6504] ? __pfx_do_fcntl+0x10/0x10 [ 120.380484][ T6504] ? tomoyo_file_fcntl+0x6c/0xc0 [ 120.380501][ T6504] __x64_sys_fcntl+0x163/0x200 [ 120.380522][ T6504] do_syscall_64+0xcd/0x4c0 [ 120.380535][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.380550][ T6504] RIP: 0033:0x7f452b98eec9 [ 120.380562][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.380575][ T6504] RSP: 002b:00007f452c7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 120.380588][ T6504] RAX: ffffffffffffffda RBX: 00007f452bbe5fa0 RCX: 00007f452b98eec9 [ 120.380597][ T6504] RDX: 00000000000000ff RSI: 0000000000000025 RDI: 0000000000000008 [ 120.380605][ T6504] RBP: 00007f452ba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.380613][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.380621][ T6504] R13: 00007f452bbe6038 R14: 00007f452bbe5fa0 R15: 00007ffff9176308 [ 120.380638][ T6504] [ 122.141932][ T6549] vivid-007: ================= START STATUS ================= [ 122.151541][ T6549] vivid-007: Generate PTS: true [ 122.156498][ T6549] vivid-007: Generate SCR: true [ 122.190624][ T6549] tpg source WxH: 320x240 (Y'CbCr) [ 122.229087][ T6549] tpg field: 1 [ 122.260217][ T6549] tpg crop: (0,0)/320x240 [ 122.272256][ T6549] tpg compose: (0,0)/320x240 [ 122.284366][ T6549] tpg colorspace: 8 [ 122.297241][ T6549] tpg transfer function: 0/0 [ 122.318130][ T6549] tpg Y'CbCr encoding: 0/0 [ 122.341704][ T6549] tpg quantization: 0/0 [ 122.351916][ T6549] tpg RGB range: 0/2 [ 122.431132][ T6549] vivid-007: ================== END STATUS ================== [ 122.600441][ T6568] FAULT_INJECTION: forcing a failure. [ 122.600441][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 122.675200][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.1.141 Not tainted syzkaller #0 PREEMPT(full) [ 122.675239][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.675252][ T6568] Call Trace: [ 122.675261][ T6568] [ 122.675271][ T6568] dump_stack_lvl+0x16c/0x1f0 [ 122.675317][ T6568] should_fail_ex+0x512/0x640 [ 122.675354][ T6568] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 122.675388][ T6568] should_failslab+0xc2/0x120 [ 122.675422][ T6568] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 122.675454][ T6568] ? security_file_alloc+0x34/0x2b0 [ 122.675493][ T6568] security_file_alloc+0x34/0x2b0 [ 122.675527][ T6568] init_file+0x93/0x4c0 [ 122.675564][ T6568] alloc_empty_file+0x73/0x1e0 [ 122.675603][ T6568] path_openat+0xda/0x2cb0 [ 122.675632][ T6568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.675671][ T6568] ? __pfx_path_openat+0x10/0x10 [ 122.675710][ T6568] do_filp_open+0x20b/0x470 [ 122.675746][ T6568] ? __pfx_do_filp_open+0x10/0x10 [ 122.675805][ T6568] ? alloc_fd+0x471/0x7d0 [ 122.675844][ T6568] do_sys_openat2+0x11b/0x1d0 [ 122.675882][ T6568] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.675920][ T6568] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.675961][ T6568] __x64_sys_openat+0x174/0x210 [ 122.675984][ T6568] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.676021][ T6568] do_syscall_64+0xcd/0x4c0 [ 122.676057][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.676083][ T6568] RIP: 0033:0x7f452b98eec9 [ 122.676105][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.676128][ T6568] RSP: 002b:00007f452c7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.676152][ T6568] RAX: ffffffffffffffda RBX: 00007f452bbe5fa0 RCX: 00007f452b98eec9 [ 122.676170][ T6568] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 122.676187][ T6568] RBP: 00007f452ba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.676203][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.676218][ T6568] R13: 00007f452bbe6038 R14: 00007f452bbe5fa0 R15: 00007ffff9176308 [ 122.676255][ T6568] [ 123.146284][ T6579] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 123.443626][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 124.506196][ T6617] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 124.604843][ T6613] zswap: compressor @ not available [ 124.933051][ T6626] i2c i2c-0: new_device: Missing parameters [ 125.363811][ T6636] FAULT_INJECTION: forcing a failure. [ 125.363811][ T6636] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.379785][ T6636] CPU: 1 UID: 0 PID: 6636 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) [ 125.379820][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.379833][ T6636] Call Trace: [ 125.379842][ T6636] [ 125.379851][ T6636] dump_stack_lvl+0x16c/0x1f0 [ 125.379893][ T6636] should_fail_ex+0x512/0x640 [ 125.379944][ T6636] copy_fpstate_to_sigframe+0x854/0xaf0 [ 125.379986][ T6636] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 125.380035][ T6636] ? collect_signal+0x263/0x540 [ 125.380069][ T6636] ? x86_task_fpu+0x5f/0x90 [ 125.380102][ T6636] get_sigframe+0x4a8/0x9c0 [ 125.380138][ T6636] ? __pfx_get_sigframe+0x10/0x10 [ 125.380171][ T6636] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.380204][ T6636] ? siginfo_layout+0x1d2/0x290 [ 125.380237][ T6636] x64_setup_rt_frame+0x12e/0xcf0 [ 125.380270][ T6636] ? kill_pid_info_type+0xea/0x2a0 [ 125.380304][ T6636] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 125.380336][ T6636] ? kill_pid_info_type+0x102/0x2a0 [ 125.380373][ T6636] arch_do_signal_or_restart+0x5b4/0x790 [ 125.380406][ T6636] ? __task_pid_nr_ns+0x186/0x500 [ 125.380440][ T6636] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 125.380493][ T6636] exit_to_user_mode_loop+0x84/0x110 [ 125.380532][ T6636] do_syscall_64+0x41c/0x4c0 [ 125.380559][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.380584][ T6636] RIP: 0033:0x7f3c2598eec9 [ 125.380605][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.380627][ T6636] RSP: 002b:00007f3c267ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 125.380651][ T6636] RAX: 0000000000000000 RBX: 00007f3c25be5fa0 RCX: 00007f3c2598eec9 [ 125.380667][ T6636] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 00000000000000a4 [ 125.380682][ T6636] RBP: 00007f3c25a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.380696][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.380709][ T6636] R13: 00007f3c25be6038 R14: 00007f3c25be5fa0 R15: 00007ffea8c94538 [ 125.380743][ T6636] [ 125.384854][ T6636] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 126.497850][ T30] audit: type=1326 audit(1758944218.800:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c2598eec9 code=0x0 [ 127.243353][ T6681] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 127.511567][ T6686] ptrace attach of "./syz-executor exec"[5867] was attempted by ""[6686] [ 128.745687][ T6718] futex_wake_op: syz.0.172 tries to shift op by -2048; fix this program [ 128.762181][ T30] audit: type=1326 audit(1758944221.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.2.171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f438418eec9 code=0x0 [ 128.768404][ T6719] futex_wake_op: syz.0.172 tries to shift op by -2048; fix this program [ 128.934816][ T30] audit: type=1326 audit(1758944221.250:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00c8d8eec9 code=0x0 [ 129.127680][ T6729] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 129.166481][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'. [ 129.219187][ T6733] mmap: syz.1.176 (6733) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.465898][ T6739] binder: 6738:6739 ioctl 40046210 0 returned -14 [ 129.733588][ T6746] netlink: 25 bytes leftover after parsing attributes in process `syz.2.179'. [ 130.456762][ T6762] FAULT_INJECTION: forcing a failure. [ 130.456762][ T6762] name failslab, interval 1, probability 0, space 0, times 0 [ 130.494215][ T6762] CPU: 0 UID: 0 PID: 6762 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT(full) [ 130.494249][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.494263][ T6762] Call Trace: [ 130.494271][ T6762] [ 130.494281][ T6762] dump_stack_lvl+0x16c/0x1f0 [ 130.494323][ T6762] should_fail_ex+0x512/0x640 [ 130.494350][ T6762] ? __kvmalloc_node_noprof+0x124/0x620 [ 130.494369][ T6762] should_failslab+0xc2/0x120 [ 130.494387][ T6762] __kvmalloc_node_noprof+0x137/0x620 [ 130.494402][ T6762] ? find_held_lock+0x2b/0x80 [ 130.494416][ T6762] ? seq_read_iter+0x826/0x12c0 [ 130.494430][ T6762] ? aa_file_perm+0x28f/0x12e0 [ 130.494454][ T6762] ? seq_read_iter+0x826/0x12c0 [ 130.494466][ T6762] seq_read_iter+0x826/0x12c0 [ 130.494483][ T6762] ? __pfx_aa_file_perm+0x10/0x10 [ 130.494507][ T6762] seq_read+0x3a3/0x570 [ 130.494520][ T6762] ? __pfx_seq_read+0x10/0x10 [ 130.494544][ T6762] ? rw_verify_area+0xcf/0x6c0 [ 130.494558][ T6762] ? __pfx_seq_read+0x10/0x10 [ 130.494571][ T6762] vfs_read+0x1e1/0xcf0 [ 130.494596][ T6762] ? __pfx___mutex_lock+0x10/0x10 [ 130.494610][ T6762] ? __pfx_vfs_read+0x10/0x10 [ 130.494630][ T6762] ? __fget_files+0x20e/0x3c0 [ 130.494651][ T6762] ksys_read+0x12a/0x250 [ 130.494666][ T6762] ? __pfx_ksys_read+0x10/0x10 [ 130.494688][ T6762] do_syscall_64+0xcd/0x4c0 [ 130.494702][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.494716][ T6762] RIP: 0033:0x7f3c2598eec9 [ 130.494729][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.494741][ T6762] RSP: 002b:00007f3c267ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.494755][ T6762] RAX: ffffffffffffffda RBX: 00007f3c25be5fa0 RCX: 00007f3c2598eec9 [ 130.494764][ T6762] RDX: 0000000000000ffd RSI: 00002000000020c0 RDI: 0000000000000003 [ 130.494772][ T6762] RBP: 00007f3c267ef090 R08: 0000000000000000 R09: 0000000000000000 [ 130.494780][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.494788][ T6762] R13: 00007f3c25be6038 R14: 00007f3c25be5fa0 R15: 00007ffea8c94538 [ 130.494807][ T6762] [ 132.220336][ T6803] FAULT_INJECTION: forcing a failure. [ 132.220336][ T6803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.233735][ T6803] CPU: 1 UID: 0 PID: 6803 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 132.233755][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.233764][ T6803] Call Trace: [ 132.233769][ T6803] [ 132.233774][ T6803] dump_stack_lvl+0x16c/0x1f0 [ 132.233800][ T6803] should_fail_ex+0x512/0x640 [ 132.233825][ T6803] _copy_to_iter+0x463/0x1710 [ 132.233845][ T6803] ? __pfx__copy_to_iter+0x10/0x10 [ 132.233861][ T6803] ? __kvmalloc_node_noprof+0x298/0x620 [ 132.233877][ T6803] ? find_held_lock+0x2b/0x80 [ 132.233892][ T6803] ? seq_read_iter+0x826/0x12c0 [ 132.233905][ T6803] ? aa_file_perm+0x28f/0x12e0 [ 132.233929][ T6803] seq_read_iter+0xcf8/0x12c0 [ 132.233951][ T6803] seq_read+0x3a3/0x570 [ 132.233964][ T6803] ? __pfx_seq_read+0x10/0x10 [ 132.233988][ T6803] ? rw_verify_area+0xcf/0x6c0 [ 132.234002][ T6803] ? __pfx_seq_read+0x10/0x10 [ 132.234015][ T6803] vfs_read+0x1e1/0xcf0 [ 132.234034][ T6803] ? __pfx___mutex_lock+0x10/0x10 [ 132.234047][ T6803] ? __pfx_vfs_read+0x10/0x10 [ 132.234067][ T6803] ? __fget_files+0x20e/0x3c0 [ 132.234088][ T6803] ksys_read+0x12a/0x250 [ 132.234104][ T6803] ? __pfx_ksys_read+0x10/0x10 [ 132.234125][ T6803] do_syscall_64+0xcd/0x4c0 [ 132.234139][ T6803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.234153][ T6803] RIP: 0033:0x7f3c2598eec9 [ 132.234165][ T6803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.234178][ T6803] RSP: 002b:00007f3c267ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.234191][ T6803] RAX: ffffffffffffffda RBX: 00007f3c25be5fa0 RCX: 00007f3c2598eec9 [ 132.234200][ T6803] RDX: 0000000000000ffd RSI: 00002000000020c0 RDI: 0000000000000003 [ 132.234208][ T6803] RBP: 00007f3c267ef090 R08: 0000000000000000 R09: 0000000000000000 [ 132.234217][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.234224][ T6803] R13: 00007f3c25be6038 R14: 00007f3c25be5fa0 R15: 00007ffea8c94538 [ 132.234243][ T6803] [ 133.846053][ T6830] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 135.125523][ T6849] netlink: 'syz.3.210': attribute type 11 has an invalid length. [ 135.143241][ T6849] netlink: 'syz.3.210': attribute type 11 has an invalid length. [ 135.178700][ T6849] netlink: 'syz.3.210': attribute type 11 has an invalid length. [ 135.393925][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 136.227949][ T30] audit: type=1326 audit(1758944228.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.3.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00c8d8eec9 code=0x0 [ 136.616012][ T6867] FAULT_INJECTION: forcing a failure. [ 136.616012][ T6867] name fail_futex, interval 1, probability 0, space 0, times 1 [ 136.630355][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 136.630391][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.630407][ T6867] Call Trace: [ 136.630415][ T6867] [ 136.630426][ T6867] dump_stack_lvl+0x16c/0x1f0 [ 136.630472][ T6867] should_fail_ex+0x512/0x640 [ 136.630516][ T6867] get_futex_key+0x1d0/0x1560 [ 136.630554][ T6867] ? __pfx_get_futex_key+0x10/0x10 [ 136.630583][ T6867] ? kasan_quarantine_put+0x10a/0x240 [ 136.630612][ T6867] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.630653][ T6867] ? kfree+0x2b4/0x4d0 [ 136.630682][ T6867] futex_wake+0xea/0x530 [ 136.630718][ T6867] ? do_getxattr+0x1f7/0x360 [ 136.630746][ T6867] ? __pfx_futex_wake+0x10/0x10 [ 136.630783][ T6867] ? path_getxattrat+0x139/0x2d0 [ 136.630815][ T6867] ? __pfx_path_getxattrat+0x10/0x10 [ 136.630855][ T6867] do_futex+0x1e3/0x350 [ 136.630939][ T6867] ? __pfx_do_futex+0x10/0x10 [ 136.630984][ T6867] __x64_sys_futex+0x1e0/0x4c0 [ 136.631023][ T6867] ? __pfx___x64_sys_futex+0x10/0x10 [ 136.631057][ T6867] ? xfd_validate_state+0x61/0x180 [ 136.631094][ T6867] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 136.631132][ T6867] do_syscall_64+0xcd/0x4c0 [ 136.631159][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.631186][ T6867] RIP: 0033:0x7f438418eec9 [ 136.631210][ T6867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.631234][ T6867] RSP: 002b:00007f4384fa70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.631258][ T6867] RAX: ffffffffffffffda RBX: 00007f43843e6098 RCX: 00007f438418eec9 [ 136.631275][ T6867] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f43843e609c [ 136.631292][ T6867] RBP: 00007f43843e6090 R08: 00007f4384fc9000 R09: 0000000000000000 [ 136.631308][ T6867] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 136.631324][ T6867] R13: 00007f43843e6128 R14: 00007fff38076740 R15: 00007fff38076828 [ 136.631360][ T6867] [ 138.044924][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.052301][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.246407][ T6913] i2c i2c-0: delete_device: Can't parse I2C address [ 138.255165][ T6913] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 138.263000][ T6913] #PF: supervisor instruction fetch in kernel mode [ 138.269509][ T6913] #PF: error_code(0x0010) - not-present page [ 138.275496][ T6913] PGD 8000000059e0b067 P4D 8000000059e0b067 PUD 68b52067 PMD 684df067 PTE 0 [ 138.284223][ T6913] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 138.289612][ T6913] CPU: 1 UID: 0 PID: 6913 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 138.298817][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.308870][ T6913] RIP: 0010:0x0 [ 138.312335][ T6913] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 138.319688][ T6913] RSP: 0018:ffffc900178cf9c8 EFLAGS: 00010287 [ 138.325749][ T6913] RAX: 0000000000000927 RBX: 0000000000000000 RCX: ffffc9000b7a9000 [ 138.333713][ T6913] RDX: 0000000000080000 RSI: ffffea0001b44a80 RDI: ffff88807adf9a40 [ 138.341679][ T6913] RBP: ffffea0001b44a80 R08: 0000000000000007 R09: 0000000000000000 [ 138.349646][ T6913] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92002f19f3a [ 138.357650][ T6913] R13: ffff88807adf9a40 R14: 0000000000000000 R15: dffffc0000000000 [ 138.365619][ T6913] FS: 00007f3c267ef6c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 138.374548][ T6913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.381130][ T6913] CR2: ffffffffffffffd6 CR3: 0000000078a4a000 CR4: 00000000003526f0 [ 138.389121][ T6913] Call Trace: [ 138.392403][ T6913] [ 138.395326][ T6913] filemap_read_folio+0xc5/0x2a0 [ 138.400271][ T6913] ? __pfx_filemap_read_folio+0x10/0x10 [ 138.405840][ T6913] ? __filemap_get_folio+0x32b/0xc30 [ 138.411143][ T6913] ? down_read+0x13d/0x480 [ 138.415558][ T6913] do_read_cache_folio+0x263/0x5c0 [ 138.420682][ T6913] freader_get_folio+0x337/0x930 [ 138.425636][ T6913] freader_fetch+0xc2/0x5e0 [ 138.430141][ T6913] ? mt_find+0x3ef/0xa30 [ 138.434383][ T6913] __build_id_parse.isra.0+0xec/0x7a0 [ 138.439760][ T6913] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 138.445754][ T6913] ? __pfx_find_vma+0x10/0x10 [ 138.450445][ T6913] do_procmap_query+0xd96/0x1090 [ 138.455395][ T6913] ? __pfx_do_procmap_query+0x10/0x10 [ 138.460763][ T6913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.466663][ T6913] ? do_vfs_ioctl+0x128/0x14f0 [ 138.471535][ T6913] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.476576][ T6913] ? __fget_files+0x20e/0x3c0 [ 138.481255][ T6913] procfs_procmap_ioctl+0x7d/0xb0 [ 138.486281][ T6913] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 138.492041][ T6913] __x64_sys_ioctl+0x18b/0x210 [ 138.496819][ T6913] do_syscall_64+0xcd/0x4c0 [ 138.501319][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.507209][ T6913] RIP: 0033:0x7f3c2598eec9 [ 138.511619][ T6913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.531709][ T6913] RSP: 002b:00007f3c267ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.540163][ T6913] RAX: ffffffffffffffda RBX: 00007f3c25be5fa0 RCX: 00007f3c2598eec9 [ 138.548150][ T6913] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000006 [ 138.556130][ T6913] RBP: 00007f3c25a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.564203][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.572178][ T6913] R13: 00007f3c25be6038 R14: 00007f3c25be5fa0 R15: 00007ffea8c94538 [ 138.580167][ T6913] [ 138.583186][ T6913] Modules linked in: [ 138.587076][ T6913] CR2: 0000000000000000 [ 138.591256][ T6913] ---[ end trace 0000000000000000 ]--- [ 138.596713][ T6913] RIP: 0010:0x0 [ 138.600186][ T6913] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 138.607545][ T6913] RSP: 0018:ffffc900178cf9c8 EFLAGS: 00010287 [ 138.613613][ T6913] RAX: 0000000000000927 RBX: 0000000000000000 RCX: ffffc9000b7a9000 [ 138.621574][ T6913] RDX: 0000000000080000 RSI: ffffea0001b44a80 RDI: ffff88807adf9a40 [ 138.629634][ T6913] RBP: ffffea0001b44a80 R08: 0000000000000007 R09: 0000000000000000 [ 138.637607][ T6913] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92002f19f3a [ 138.645571][ T6913] R13: ffff88807adf9a40 R14: 0000000000000000 R15: dffffc0000000000 [ 138.653672][ T6913] FS: 00007f3c267ef6c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 138.662598][ T6913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.669185][ T6913] CR2: ffffffffffffffd6 CR3: 0000000078a4a000 CR4: 00000000003526f0 [ 138.677413][ T6913] Kernel panic - not syncing: Fatal exception [ 138.683712][ T6913] Kernel Offset: disabled [ 138.688021][ T6913] Rebooting in 86400 seconds..