last executing test programs: 8.551687s ago: executing program 3 (id=131): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0) open$auto(&(0x7f0000000000)='./file0\x00', 0x5, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x7352, 0x3d, 0x200000000045f, 0x401ffde, 0x7, 0x3, 0x2, 0x9, 0x3ee, 0x5, 0x2, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x1, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3]}, 0x9, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0x100000000100df, 0x11, r0, 0x8003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$auto_TIOCGPTPEER2(r2, 0x5441, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.432949397s ago: executing program 2 (id=143): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4008c0, 0x0, 0x28}, 0x18) mmap$auto(0x40, 0xfaf, 0xc30e, 0x74, r0, 0xffff) epoll_ctl$auto(r0, 0x4, r0, &(0x7f0000000000)={0xfffff800, 0x2}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4008c0, 0x0, 0x28}, 0x18) (async) mmap$auto(0x40, 0xfaf, 0xc30e, 0x74, r0, 0xffff) (async) epoll_ctl$auto(r0, 0x4, r0, &(0x7f0000000000)={0xfffff800, 0x2}) (async) 5.245214794s ago: executing program 2 (id=144): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) read$auto_bm_entry_operations_binfmt_misc(r0, &(0x7f00000000c0)=""/143, 0x8f) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 5.015081828s ago: executing program 1 (id=145): mmap$auto(0x0, 0x4ae, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x936355e497c8b7e3, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) setfsgid$auto(0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') 4.195179154s ago: executing program 2 (id=146): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) read$auto_bm_entry_operations_binfmt_misc(r0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 4.134450616s ago: executing program 1 (id=147): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto_PR_SET_MM_START_DATA(0xff, 0x3, 0xffffffffffffffff, 0x80000000, 0x63) getsockopt$auto_SO_NETNS_COOKIE(r1, 0x652, 0x47, &(0x7f0000000000)='#!-\x00', &(0x7f00000000c0)=0x6eb) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.586969148s ago: executing program 1 (id=148): unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) (async) stat$auto(0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, 0x0, 0x3) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r2 = socket(0x10, 0x802, 0x80) (async, rerun: 64) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x2000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r3 = ioctl$auto_NS_GET_NSTYPE(r1, 0xb703, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_SET_BSS(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x4000880) (async) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 3.563912545s ago: executing program 0 (id=149): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 3.41645s ago: executing program 3 (id=150): socket(0x10, 0x2, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x400000008000) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x29, 0x0, 0x0) sysfs$auto(0x2, 0x20, 0x0) socketpair$auto(0x1e, 0x9, 0x9, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000240), 0xd2082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x3) close_range$auto(0x2, 0x8, 0x0) 3.276848074s ago: executing program 0 (id=151): bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7) 3.151170955s ago: executing program 2 (id=152): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) (rerun: 64) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socket(0x1f, 0x2, 0x200000) (async) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r0, 0x0, 0x4008080) (async) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x48000, 0x0) ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/pci/rescan\x00', 0x183501, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x7fff) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, 0x0) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) (rerun: 32) ioctl$auto(r1, 0xc0285629, r4) (async) open(0x0, 0x6041, 0x0) (async, rerun: 64) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x4041, 0x0) (async, rerun: 64) munmap$auto(0x20001000, 0x4) (async, rerun: 64) mincore$auto(0x1000, 0x8, 0x0) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) (rerun: 32) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) 3.046773328s ago: executing program 0 (id=153): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="74000004", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) 2.790873646s ago: executing program 0 (id=154): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) read$auto_bm_entry_operations_binfmt_misc(r0, &(0x7f00000000c0)=""/143, 0x8f) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 1.818537557s ago: executing program 2 (id=155): mmap$auto(0x0, 0x400005, 0xdb, 0x16, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0xdf, 0x111, 0x2, 0x8004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) mmap$auto(0x0, 0x1, 0x7fffffff, 0x44eb1, 0x3, 0x300007000000) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c04, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x9, 0x0) bind$auto(r0, 0x0, 0x67) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) set_mempolicy$auto(0x4, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) r1 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x7) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) socket(0xa, 0x3, 0x3) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) getpid() timerfd_settime$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={{0x85, 0x8}, {0x9, 0x3}}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) 1.783916927s ago: executing program 0 (id=156): read$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) sysfs$auto(0x2, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080003003800000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001000000000040"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x24840) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x7) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) (async) sysfs$auto(0x2, 0x4, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080003003800000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001000000000040"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x24840) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 1.643181048s ago: executing program 3 (id=157): r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) sendfile$auto(0xffffffffffffffff, r0, 0x0, 0x5) 1.642577238s ago: executing program 1 (id=158): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x6, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x10000}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r2, r2, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020006, 0x7, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r3 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) read$auto_proc_timers_operations_base(r3, &(0x7f0000000080)=""/173, 0xad) write$auto(0x3, 0x0, 0x7ffffffa) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) gettid() 1.229092825s ago: executing program 3 (id=159): openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0xb, 0xa505}, 0x800}, 0x7, 0x4008) 854.824587ms ago: executing program 0 (id=160): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) read$auto_bm_entry_operations_binfmt_misc(r0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 579.078232ms ago: executing program 1 (id=161): bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7) 544.542777ms ago: executing program 3 (id=162): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000400)={0x1ff, 0x0, 0x8, 0xffffff01, 0x9, 0x9, 0x7ffffffd, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0x8000000000f, 0xffffffffffffffff, 0x9, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3], "4800800000861b28275f09774e7a492487aeae666c6c2a6805493e4b8f0cbae721fa45f876147677f55ad2522c435ed96f6c7ca2364d8b0264bc532f9fe049a803962dd7"}, 0x5, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x80045515, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0xfe, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x0) (async) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x88083, 0xffeb) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) recvfrom$auto(r1, &(0x7f0000000300)="5cddbfec5a1e27b601886f6d968fdd6ce3e3a4be7a0526f3abab149c34c5594c32db5d3614577102237859ffb54e41f15aec3dc876a81f4bb7d8f8881bfedcce817e146ed392c52e64cf23fb8d9701c8862f43300d5a417115d69cd56da474bc676dbd2c9225f070307f22329af80ea6792787a8a6815198a09ea9d1cde81fb20431fb937128b8b3adef12152449882b113f1739c3eb80fbb70b84e6e8840cdc63d8174131054a71998fa219e0bf9040167bf5d8a53c28f308043520192b231db09d7e9a8d3acdd0995107335f9dfe5933bd1c004c7aece6af", 0x7, 0xff, &(0x7f0000000000)=@sco, &(0x7f0000000280)=0xffffcdf3) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x5423, r7) (async) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x8010, r7, 0x9) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sg0\x00', 0x40, 0x0) ioctl$auto_SG_GET_COMMAND_Q2(r8, 0x2270, &(0x7f00000006c0)) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 212.347716ms ago: executing program 1 (id=163): openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media11\x00', 0x1, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/7:10/max_ratio\x00', 0x68e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x4, 0x4, 0x3fe, 0x3}, "df037420448a3f1fa0e545289623a4f76220f17b5c023efe1471d2064b11fbfa56fd32d704000000000000002f7b01a4215612c388650d8c86894c4f3f8d53f025f0b7ca354501d8a64956db8040102e", 0x8}) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x7c96, 0x5, 0x3, 0xa}, "9128f52b22f440caed0b308b1dbd310cbde627aa64723985b675725542e874486f14b2f68f39c67e0db24a7a0211af4b81ae129c82f9e12842c6cc4ce93c0f569f2bab6cc77beb015dfb4bfa0118a712", 0x6}) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r4, 0x0) mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) mmap$auto(0xfffffffffffffff8, 0xef3f, 0x0, 0x17, 0xffffffffffffffff, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon6\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 67.062156ms ago: executing program 2 (id=164): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) read$auto_bm_entry_operations_binfmt_misc(r0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=165): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) (async) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) (async) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0x6, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x4000, 0x80000000, 0x10001, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0x8, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r5 = socket(0xa, 0x3, 0x3c) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r6, 0x5609, r5) (async) madvise$auto(0x0, 0x20499d, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_NS_GET_PID_FROM_PIDNS(r3, 0x8004b706, &(0x7f0000000180)=0x4) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf350a0000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 100.885786][ T5815] cgroup: Unknown subsys name 'net' [ 101.025902][ T5815] cgroup: Unknown subsys name 'cpuset' [ 101.035812][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.225867][ T9] cfg80211: failed to load regulatory.db [ 102.892911][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.176162][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.191021][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.198885][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.201619][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.207370][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.214851][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.221422][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.227816][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.244855][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.257880][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.281141][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.290566][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.290608][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.298354][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.314590][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.314751][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.340023][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.373242][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.382754][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.393254][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.857597][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 106.052110][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 106.167819][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 106.199869][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.207970][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.215525][ T5828] bridge_slave_0: entered allmulticast mode [ 106.223429][ T5828] bridge_slave_0: entered promiscuous mode [ 106.279124][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.286543][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.294879][ T5828] bridge_slave_1: entered allmulticast mode [ 106.305769][ T5828] bridge_slave_1: entered promiscuous mode [ 106.416104][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.429753][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.439234][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.447292][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.454847][ T5831] bridge_slave_0: entered allmulticast mode [ 106.462959][ T5831] bridge_slave_0: entered promiscuous mode [ 106.476408][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 106.517566][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.524991][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.532636][ T5831] bridge_slave_1: entered allmulticast mode [ 106.539938][ T5831] bridge_slave_1: entered promiscuous mode [ 106.564825][ T5828] team0: Port device team_slave_0 added [ 106.575618][ T5828] team0: Port device team_slave_1 added [ 106.689778][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.699498][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.707129][ T5835] bridge_slave_0: entered allmulticast mode [ 106.717757][ T5835] bridge_slave_0: entered promiscuous mode [ 106.748782][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.755999][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.782484][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.798762][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.808462][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.815968][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.823334][ T5835] bridge_slave_1: entered allmulticast mode [ 106.830685][ T5835] bridge_slave_1: entered promiscuous mode [ 106.860633][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.867921][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.894033][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.907705][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.001567][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.028085][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.035678][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.042991][ T5837] bridge_slave_0: entered allmulticast mode [ 107.050697][ T5837] bridge_slave_0: entered promiscuous mode [ 107.062674][ T5831] team0: Port device team_slave_0 added [ 107.072267][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.097903][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.105281][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.112803][ T5837] bridge_slave_1: entered allmulticast mode [ 107.120237][ T5837] bridge_slave_1: entered promiscuous mode [ 107.129437][ T5831] team0: Port device team_slave_1 added [ 107.182693][ T5835] team0: Port device team_slave_0 added [ 107.236066][ T5835] team0: Port device team_slave_1 added [ 107.258317][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.266354][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.293572][ T55] Bluetooth: hci0: command tx timeout [ 107.299112][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.313866][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.321446][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.347614][ T55] Bluetooth: hci1: command tx timeout [ 107.353230][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.371217][ T5828] hsr_slave_0: entered promiscuous mode [ 107.379491][ T5828] hsr_slave_1: entered promiscuous mode [ 107.407435][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.424541][ T55] Bluetooth: hci3: command tx timeout [ 107.424548][ T5139] Bluetooth: hci2: command tx timeout [ 107.452221][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.462255][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.469271][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.495740][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.510016][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.517376][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.543410][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.640334][ T5837] team0: Port device team_slave_0 added [ 107.650056][ T5837] team0: Port device team_slave_1 added [ 107.677956][ T5831] hsr_slave_0: entered promiscuous mode [ 107.684645][ T5831] hsr_slave_1: entered promiscuous mode [ 107.690929][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.698726][ T5831] Cannot create hsr debugfs directory [ 107.785610][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.795150][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.822601][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.840025][ T5835] hsr_slave_0: entered promiscuous mode [ 107.847062][ T5835] hsr_slave_1: entered promiscuous mode [ 107.853326][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.861022][ T5835] Cannot create hsr debugfs directory [ 107.886046][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.893138][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.919723][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.113680][ T5837] hsr_slave_0: entered promiscuous mode [ 108.120126][ T5837] hsr_slave_1: entered promiscuous mode [ 108.126657][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.134315][ T5837] Cannot create hsr debugfs directory [ 108.448241][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.462785][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.498930][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.526099][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.584848][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.597666][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.608379][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.627473][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.743432][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.770230][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.785413][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.822347][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.884072][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.898572][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.923759][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.938489][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.005463][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.072654][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.118312][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.137691][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.145020][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.159972][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.206136][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.213370][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.225660][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.233004][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.244170][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.251397][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.341917][ T55] Bluetooth: hci0: command tx timeout [ 109.365441][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.421732][ T55] Bluetooth: hci1: command tx timeout [ 109.429772][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.480541][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.487786][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.503576][ T55] Bluetooth: hci2: command tx timeout [ 109.505507][ T5139] Bluetooth: hci3: command tx timeout [ 109.523908][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.547382][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.554621][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.577036][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.634885][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.642193][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.686310][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.693548][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.977769][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.126445][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.162427][ T5831] veth0_vlan: entered promiscuous mode [ 110.209565][ T5831] veth1_vlan: entered promiscuous mode [ 110.324654][ T5828] veth0_vlan: entered promiscuous mode [ 110.346603][ T5831] veth0_macvtap: entered promiscuous mode [ 110.359327][ T5831] veth1_macvtap: entered promiscuous mode [ 110.383153][ T5828] veth1_vlan: entered promiscuous mode [ 110.420294][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.447445][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.467524][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.493323][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.503916][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.513697][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.523238][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.556427][ T5828] veth0_macvtap: entered promiscuous mode [ 110.594907][ T5828] veth1_macvtap: entered promiscuous mode [ 110.617939][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.718241][ T5835] veth0_vlan: entered promiscuous mode [ 110.721583][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.732374][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.748882][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.756438][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.768101][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.792323][ T5835] veth1_vlan: entered promiscuous mode [ 110.826127][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.837457][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.849828][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.883310][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.892658][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.901518][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.910250][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.939098][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.949331][ T5837] veth0_vlan: entered promiscuous mode [ 110.973355][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.018201][ T5835] veth0_macvtap: entered promiscuous mode [ 111.029080][ T5837] veth1_vlan: entered promiscuous mode [ 111.044512][ T5835] veth1_macvtap: entered promiscuous mode [ 111.106501][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.166400][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.191859][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.220327][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.231637][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.243496][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.274386][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.286261][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.299952][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.315818][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.328513][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.366461][ T3058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.369119][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.387283][ T3058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.391388][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.408857][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.417966][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.432952][ T5139] Bluetooth: hci0: command tx timeout [ 111.480110][ T5837] veth0_macvtap: entered promiscuous mode [ 111.501962][ T5139] Bluetooth: hci1: command tx timeout [ 111.515528][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.523458][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.565124][ T5837] veth1_macvtap: entered promiscuous mode [ 111.581358][ T5139] Bluetooth: hci2: command tx timeout [ 111.581747][ T55] Bluetooth: hci3: command tx timeout [ 111.874806][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.914367][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.941753][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.970878][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.007461][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.035038][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.058453][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.123455][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.160822][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.174546][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.185425][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.199335][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.220695][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.246175][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.271833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.289975][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.430220][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.461364][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.470159][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.499526][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.629422][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.666992][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.987703][ T3058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.014998][ T3058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.041387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.239703][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.255603][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.500997][ T55] Bluetooth: hci0: command tx timeout [ 113.585383][ T55] Bluetooth: hci1: command tx timeout [ 113.661777][ T55] Bluetooth: hci3: command tx timeout [ 113.661792][ T5139] Bluetooth: hci2: command tx timeout syzkaller syzkaller login: [ 115.821455][ T5933] Zero length message leads to an empty skb [ 120.143369][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 120.676288][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 120.858739][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.999901][ T5984] bridge_slave_1 (unregistering): left allmulticast mode [ 121.025714][ T5984] bridge_slave_1 (unregistering): left promiscuous mode [ 121.036150][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.158252][ T5979] bridge0: port 3(team0) entered blocking state [ 121.183305][ T5979] bridge0: port 3(team0) entered disabled state [ 121.216722][ T5979] team0: entered allmulticast mode [ 121.239450][ T5979] team_slave_0: entered allmulticast mode [ 121.258251][ T5979] team_slave_1: entered allmulticast mode [ 121.283009][ T5979] team0: entered promiscuous mode [ 121.288080][ T5979] team_slave_0: entered promiscuous mode [ 121.361231][ T5979] team_slave_1: entered promiscuous mode [ 121.367974][ T5979] bridge0: port 3(team0) entered blocking state [ 121.374834][ T5979] bridge0: port 3(team0) entered forwarding state [ 121.751164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.288174][ T6003] Invalid ELF header magic: != ELF [ 122.451112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 122.821180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.891660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 122.900401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.908961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.917604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.926215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.934879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.400652][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.421509][ T6015] netlink: 252 bytes leftover after parsing attributes in process `syz.0.23'. [ 123.451247][ T6015] netlink: 252 bytes leftover after parsing attributes in process `syz.0.23'. [ 123.704056][ T6021] ubi0: attaching mtd0 [ 123.756275][ T6021] ubi0: scanning is finished [ 123.786320][ T6021] ubi0: empty MTD device detected [ 123.871737][ T6021] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 123.970845][ T6013] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 124.299805][ T6026] Invalid ELF header magic: != ELF [ 124.452721][ T6030] syz.3.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 124.597638][ T6021] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 126.687288][ T6044] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 126.736216][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 127.252006][ T6052] syz.1.30 (6052) used greatest stack depth: 17704 bytes left [ 127.836804][ T6049] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 128.072636][ T6068] process 'syz.1.33' launched './file0' with NULL argv: empty string added [ 128.694723][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 129.577241][ T6089] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.693420][ T6120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.712346][ T6120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.784144][ T6120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.841804][ T6120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.865191][ T6120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.959460][ T6120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.132595][ T6120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.138695][ T6120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.450239][ T6120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.595479][ T6120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.623070][ T6120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 131.749527][ T6120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.110828][ T6137] capability: warning: `syz.1.46' uses 32-bit capabilities (legacy support in use) [ 132.277369][ T6143] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffffd12 [ 132.291526][ T6143] device-mapper: ioctl: Unable to rename non-existent device, to uuid /kmsg [ 132.701103][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.871154][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.199273][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.671296][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.153014][ T6174] mmap: syz.0.53 (6174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.273191][ T6178] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8162f1b9 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 134.288816][ T6178] Call Trace: [ 134.292146][ T6178] [ 134.295136][ T6178] mce_cpu_restart+0x98/0xb0 [ 134.299794][ T6178] ? __pfx_mce_cpu_restart+0x10/0x10 [ 134.305145][ T6178] smp_call_function_many_cond+0xd7d/0x1290 [ 134.311120][ T6178] ? __pfx_mce_cpu_restart+0x10/0x10 [ 134.316480][ T6178] ? __pfx_mce_cpu_restart+0x10/0x10 [ 134.321826][ T6178] on_each_cpu_cond_mask+0x40/0x90 [ 134.327010][ T6178] set_bank+0x240/0x3a0 [ 134.331222][ T6178] ? __pfx_set_bank+0x10/0x10 [ 134.335953][ T6178] ? find_held_lock+0x2b/0x80 [ 134.340680][ T6178] ? __pfx_set_bank+0x10/0x10 [ 134.345417][ T6178] dev_attr_store+0x55/0x80 [ 134.349971][ T6178] ? __pfx_dev_attr_store+0x10/0x10 [ 134.355217][ T6178] sysfs_kf_write+0xef/0x150 [ 134.359859][ T6178] kernfs_fop_write_iter+0x351/0x510 [ 134.365185][ T6178] ? __pfx_sysfs_kf_write+0x10/0x10 [ 134.370438][ T6178] vfs_write+0x5ba/0x1180 [ 134.374806][ T6178] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 134.380653][ T6178] ? __pfx___mutex_lock+0x10/0x10 [ 134.385728][ T6178] ? __pfx_vfs_write+0x10/0x10 [ 134.390545][ T6178] ksys_write+0x12a/0x240 [ 134.394909][ T6178] ? __pfx_ksys_write+0x10/0x10 [ 134.399789][ T6178] ? rcu_is_watching+0x12/0xc0 [ 134.404593][ T6178] do_syscall_64+0xcd/0x230 [ 134.409151][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.415077][ T6178] RIP: 0033:0x7efeb4d8e969 [ 134.419531][ T6178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.439180][ T6178] RSP: 002b:00007efeb2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.447635][ T6178] RAX: ffffffffffffffda RBX: 00007efeb4fb5fa0 RCX: 00007efeb4d8e969 [ 134.455636][ T6178] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 134.463631][ T6178] RBP: 00007efeb4e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 134.471629][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.479628][ T6178] R13: 0000000000000000 R14: 00007efeb4fb5fa0 R15: 00007ffd7dca7298 [ 134.487650][ T6178] [ 134.780939][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.940894][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.271191][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.740964][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.569817][ T6220] mkiss: ax0: crc mode is auto. [ 136.860943][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.022091][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.340892][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.821136][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.068076][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.074721][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.832720][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.807293][ T6319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.160631][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 150.570185][ T6418] ubi0: attaching mtd0 [ 150.766732][ T6418] ubi0: scanning is finished [ 150.791020][ T6418] ubi0: empty MTD device detected [ 150.883641][ T6418] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 151.084501][ T6413] svc: failed to register nfsdv3 RPC service (errno 512). [ 151.127018][ T6413] svc: failed to register nfsaclv3 RPC service (errno 111). [ 151.242954][ T6418] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 151.879164][ T6429] FAULT_INJECTION: forcing a failure. [ 151.879164][ T6429] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 151.951589][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.1.101 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 151.951668][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 151.951687][ T6429] Call Trace: [ 151.951697][ T6429] [ 151.951709][ T6429] dump_stack_lvl+0x16c/0x1f0 [ 151.951759][ T6429] should_fail_ex+0x512/0x640 [ 151.951810][ T6429] should_fail_alloc_page+0xe7/0x130 [ 151.951853][ T6429] prepare_alloc_pages+0x3c2/0x610 [ 151.951904][ T6429] ? rcu_is_watching+0x12/0xc0 [ 151.951940][ T6429] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 151.951982][ T6429] ? kasan_save_stack+0x33/0x60 [ 151.952014][ T6429] ? kasan_save_track+0x14/0x30 [ 151.952045][ T6429] ? __kasan_slab_alloc+0x89/0x90 [ 151.952079][ T6429] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 151.952112][ T6429] ? ptlock_alloc+0x1f/0x70 [ 151.952139][ T6429] ? pte_alloc_one+0x6d/0x380 [ 151.952172][ T6429] ? __pte_alloc+0x6d/0x3c0 [ 151.952211][ T6429] ? cgroup_rstat_updated+0x2a/0xb20 [ 151.952273][ T6429] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.952328][ T6429] ? __lock_acquire+0x5ca/0x1ba0 [ 151.952374][ T6429] ? __lock_acquire+0x5ca/0x1ba0 [ 151.952416][ T6429] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.952463][ T6429] ? policy_nodemask+0xea/0x4e0 [ 151.952507][ T6429] alloc_pages_mpol+0x1fb/0x550 [ 151.952548][ T6429] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 151.952589][ T6429] ? __lock_acquire+0x5ca/0x1ba0 [ 151.952648][ T6429] folio_alloc_mpol_noprof+0x36/0x2f0 [ 151.952696][ T6429] vma_alloc_folio_noprof+0xed/0x1e0 [ 151.952743][ T6429] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 151.952801][ T6429] do_pte_missing+0x223d/0x3fb0 [ 151.952849][ T6429] __handle_mm_fault+0x103d/0x2a40 [ 151.952896][ T6429] ? __pfx___handle_mm_fault+0x10/0x10 [ 151.952927][ T6429] ? __pte_offset_map_lock+0x155/0x2f0 [ 151.952973][ T6429] ? find_held_lock+0x2b/0x80 [ 151.953002][ T6429] ? find_held_lock+0x2b/0x80 [ 151.953060][ T6429] handle_mm_fault+0x3fe/0xad0 [ 151.953101][ T6429] __get_user_pages+0x771/0x36f0 [ 151.953161][ T6429] ? __pfx_mt_find+0x10/0x10 [ 151.953212][ T6429] ? __pfx___get_user_pages+0x10/0x10 [ 151.953278][ T6429] populate_vma_page_range+0x278/0x3a0 [ 151.953312][ T6429] ? __pfx_populate_vma_page_range+0x10/0x10 [ 151.953342][ T6429] ? __pfx_find_vma_intersection+0x10/0x10 [ 151.953393][ T6429] ? do_mmap+0x69c/0x11b0 [ 151.953450][ T6429] __mm_populate+0x1d8/0x380 [ 151.953483][ T6429] ? __pfx___mm_populate+0x10/0x10 [ 151.953516][ T6429] ? up_write+0x1b2/0x520 [ 151.953569][ T6429] vm_mmap_pgoff+0x362/0x450 [ 151.953621][ T6429] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 151.953689][ T6429] ? __x64_sys_futex+0x1e0/0x4c0 [ 151.953723][ T6429] ? __x64_sys_futex+0x1e9/0x4c0 [ 151.953766][ T6429] ksys_mmap_pgoff+0x7d/0x5c0 [ 151.953813][ T6429] ? rcu_is_watching+0x12/0xc0 [ 151.953846][ T6429] __x64_sys_mmap+0x125/0x190 [ 151.953883][ T6429] do_syscall_64+0xcd/0x230 [ 151.953933][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.953966][ T6429] RIP: 0033:0x7feb4af8e969 [ 151.953993][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.954024][ T6429] RSP: 002b:00007feb4be12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 151.954054][ T6429] RAX: ffffffffffffffda RBX: 00007feb4b1b5fa0 RCX: 00007feb4af8e969 [ 151.954075][ T6429] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 151.954094][ T6429] RBP: 00007feb4b010ab1 R08: 0000000000000002 R09: 0000000000008000 [ 151.954114][ T6429] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 151.954133][ T6429] R13: 0000000000000000 R14: 00007feb4b1b5fa0 R15: 00007fff9d295128 [ 151.954175][ T6429] [ 152.776150][ T6437] bridge0: port 4(bond0) entered blocking state [ 152.799541][ T6437] bridge0: port 4(bond0) entered disabled state [ 152.820032][ T6437] bond0: entered allmulticast mode                                                                                                                                                                                                                                                                                                          syzkaller syzkaller login: [ 163.806410][ T6629] FAULT_INJECTION: forcing a failure. [ 163.806410][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 163.866217][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.1.145 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 163.866270][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 163.866289][ T6629] Call Trace: [ 163.866301][ T6629] [ 163.866313][ T6629] dump_stack_lvl+0x16c/0x1f0 [ 163.866367][ T6629] should_fail_ex+0x512/0x640 [ 163.866412][ T6629] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 163.866454][ T6629] should_failslab+0xc2/0x120 [ 163.866496][ T6629] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 163.866535][ T6629] ? proc_alloc_inode+0x25/0x200 [ 163.866572][ T6629] ? __pfx_proc_alloc_inode+0x10/0x10 [ 163.866600][ T6629] proc_alloc_inode+0x25/0x200 [ 163.866628][ T6629] alloc_inode+0x61/0x240 [ 163.866667][ T6629] new_inode+0x22/0x1c0 [ 163.866710][ T6629] proc_pid_make_inode+0x22/0x160 [ 163.866764][ T6629] proc_ns_instantiate+0x57/0x100 [ 163.866818][ T6629] proc_ns_dir_lookup+0x1af/0x2f0 [ 163.866875][ T6629] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 163.866925][ T6629] lookup_open.isra.0+0x4d7/0x1580 [ 163.866982][ T6629] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 163.867063][ T6629] ? mnt_get_write_access+0x20c/0x300 [ 163.867112][ T6629] path_openat+0x905/0x2d40 [ 163.867160][ T6629] ? __pfx_path_openat+0x10/0x10 [ 163.867203][ T6629] do_filp_open+0x20b/0x470 [ 163.867234][ T6629] ? __pfx_do_filp_open+0x10/0x10 [ 163.867281][ T6629] ? __pfx_kfree_link+0x10/0x10 [ 163.867336][ T6629] ? alloc_fd+0x471/0x7d0 [ 163.867397][ T6629] do_sys_openat2+0x11b/0x1d0 [ 163.867439][ T6629] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.867484][ T6629] ? find_held_lock+0x2b/0x80 [ 163.867527][ T6629] __x64_sys_openat+0x174/0x210 [ 163.867572][ T6629] ? __pfx___x64_sys_openat+0x10/0x10 [ 163.867618][ T6629] ? rcu_is_watching+0x12/0xc0 [ 163.867660][ T6629] do_syscall_64+0xcd/0x230 [ 163.867711][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.867744][ T6629] RIP: 0033:0x7feb4af8d2d0 [ 163.867769][ T6629] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 163.867799][ T6629] RSP: 002b:00007feb4bdf0f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 163.867828][ T6629] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007feb4af8d2d0 [ 163.867847][ T6629] RDX: 0000000000000002 RSI: 00007feb4bdf0fa0 RDI: 00000000ffffff9c [ 163.867866][ T6629] RBP: 00007feb4bdf0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 163.867885][ T6629] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.867904][ T6629] R13: 0000000000000000 R14: 00007feb4b1b6080 R15: 00007fff9d295128 [ 163.867946][ T6629] [ 165.733946][ T6656] netlink: 330 bytes leftover after parsing attributes in process `syz.0.153'. [ 166.529998][ T6667] can: request_module (can-proto-3) failed. [ 167.115018][ T6677] netlink: 326 bytes leftover after parsing attributes in process `syz.0.156'. [ 169.086758][ T6706] ================================================================== [ 169.086781][ T6706] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.086832][ T6706] Read of size 1 at addr ffff888026295407 by task syz.1.163/6706 [ 169.086860][ T6706] [ 169.086874][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.1.163 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 169.086915][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 169.086934][ T6706] Call Trace: [ 169.086944][ T6706] [ 169.086956][ T6706] dump_stack_lvl+0x116/0x1f0 [ 169.087003][ T6706] print_report+0xc3/0x670 [ 169.087041][ T6706] ? __virt_addr_valid+0x5e/0x590 [ 169.087082][ T6706] ? __phys_addr+0xc6/0x150 [ 169.087124][ T6706] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.087164][ T6706] kasan_report+0xe0/0x110 [ 169.087202][ T6706] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.087261][ T6706] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.087310][ T6706] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 169.087354][ T6706] ? find_held_lock+0x2b/0x80 [ 169.087383][ T6706] ? __might_fault+0xe3/0x190 [ 169.087419][ T6706] ? __might_fault+0xe3/0x190 [ 169.087453][ T6706] ? __might_fault+0x13b/0x190 [ 169.087499][ T6706] ? proc_simple_write+0x114/0x1b0 [ 169.087538][ T6706] proc_simple_write+0x114/0x1b0 [ 169.087578][ T6706] ? __pfx_proc_simple_write+0x10/0x10 [ 169.087619][ T6706] proc_reg_write+0x23d/0x330 [ 169.087652][ T6706] ? __pfx_proc_reg_write+0x10/0x10 [ 169.087684][ T6706] vfs_writev+0x6c4/0xdc0 [ 169.087732][ T6706] ? __pfx___mutex_trylock_common+0x10/0x10 [ 169.087783][ T6706] ? __pfx_vfs_writev+0x10/0x10 [ 169.087832][ T6706] ? __mutex_lock+0x1ca/0xb90 [ 169.087883][ T6706] ? __pfx___mutex_lock+0x10/0x10 [ 169.087936][ T6706] ? __fget_files+0x20e/0x3c0 [ 169.087991][ T6706] ? do_writev+0x132/0x330 [ 169.088039][ T6706] do_writev+0x132/0x330 [ 169.088107][ T6706] ? __pfx_do_writev+0x10/0x10 [ 169.088157][ T6706] ? rcu_is_watching+0x12/0xc0 [ 169.088196][ T6706] do_syscall_64+0xcd/0x230 [ 169.088252][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.088286][ T6706] RIP: 0033:0x7feb4af8e969 [ 169.088310][ T6706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.088341][ T6706] RSP: 002b:00007feb4bdf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 169.088371][ T6706] RAX: ffffffffffffffda RBX: 00007feb4b1b6080 RCX: 00007feb4af8e969 [ 169.088393][ T6706] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 000000000000000b [ 169.088413][ T6706] RBP: 00007feb4b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 169.088433][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.088452][ T6706] R13: 0000000000000000 R14: 00007feb4b1b6080 R15: 00007fff9d295128 [ 169.088482][ T6706] [ 169.088492][ T6706] [ 169.088500][ T6706] Allocated by task 6706: [ 169.088515][ T6706] kasan_save_stack+0x33/0x60 [ 169.088547][ T6706] kasan_save_track+0x14/0x30 [ 169.088578][ T6706] __kasan_kmalloc+0xaa/0xb0 [ 169.088607][ T6706] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 169.088645][ T6706] memdup_user_nul+0x2b/0x120 [ 169.088688][ T6706] proc_simple_write+0xc7/0x1b0 [ 169.088724][ T6706] proc_reg_write+0x23d/0x330 [ 169.088753][ T6706] vfs_writev+0x6c4/0xdc0 [ 169.088799][ T6706] do_writev+0x132/0x330 [ 169.088845][ T6706] do_syscall_64+0xcd/0x230 [ 169.088888][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.088918][ T6706] [ 169.088925][ T6706] The buggy address belongs to the object at ffff888026295400 [ 169.088925][ T6706] which belongs to the cache kmalloc-8 of size 8 [ 169.088950][ T6706] The buggy address is located 0 bytes to the right of [ 169.088950][ T6706] allocated 7-byte region [ffff888026295400, ffff888026295407) [ 169.088982][ T6706] [ 169.088989][ T6706] The buggy address belongs to the physical page: [ 169.089009][ T6706] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026295a00 pfn:0x26295 [ 169.089039][ T6706] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 169.089064][ T6706] page_type: f5(slab) [ 169.089091][ T6706] raw: 00fff00000000000 ffff88801b441500 dead000000000100 dead000000000122 [ 169.089120][ T6706] raw: ffff888026295a00 000000008080007f 00000000f5000000 0000000000000000 [ 169.089139][ T6706] page dumped because: kasan: bad access detected [ 169.089153][ T6706] page_owner tracks the page as allocated [ 169.089164][ T6706] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5837, tgid 5837 (syz-executor), ts 113453449124, free_ts 113361048141 [ 169.089216][ T6706] post_alloc_hook+0x181/0x1b0 [ 169.089275][ T6706] get_page_from_freelist+0x135c/0x3920 [ 169.089309][ T6706] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 169.089343][ T6706] alloc_pages_mpol+0x1fb/0x550 [ 169.089379][ T6706] new_slab+0x244/0x340 [ 169.089425][ T6706] ___slab_alloc+0xd9c/0x1940 [ 169.089473][ T6706] __slab_alloc.constprop.0+0x56/0xb0 [ 169.089577][ T6706] __kmalloc_node_noprof+0x2ed/0x500 [ 169.089612][ T6706] __vmalloc_node_range_noprof+0x3eb/0x1540 [ 169.089660][ T6706] vmalloc_noprof+0x6b/0x90 [ 169.089706][ T6706] ebt_register_table+0x243/0xfc0 [ 169.089746][ T6706] find_inlist_lock.constprop.0+0x1d0/0x730 [ 169.089788][ T6706] do_ebt_get_ctl+0x1a4/0x6d0 [ 169.089828][ T6706] nf_getsockopt+0x79/0xe0 [ 169.089861][ T6706] ip_getsockopt+0x18c/0x1e0 [ 169.089906][ T6706] tcp_getsockopt+0x9e/0x100 [ 169.089933][ T6706] page last free pid 47 tgid 47 stack trace: [ 169.089951][ T6706] __free_frozen_pages+0x69d/0xff0 [ 169.090000][ T6706] qlist_free_all+0x4e/0x120 [ 169.090028][ T6706] kasan_quarantine_reduce+0x195/0x1e0 [ 169.090058][ T6706] __kasan_slab_alloc+0x69/0x90 [ 169.090092][ T6706] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 169.090124][ T6706] __alloc_skb+0x2b2/0x380 [ 169.090155][ T6706] mld_newpack.isra.0+0x18e/0xa20 [ 169.090198][ T6706] add_grhead+0x299/0x340 [ 169.090237][ T6706] add_grec+0x112a/0x1680 [ 169.090306][ T6706] mld_send_initial_cr.part.0+0xe2/0x260 [ 169.090355][ T6706] mld_dad_work+0x51/0x2d0 [ 169.090400][ T6706] process_one_work+0x9cc/0x1b70 [ 169.090447][ T6706] worker_thread+0x6c8/0xf10 [ 169.090495][ T6706] kthread+0x3c2/0x780 [ 169.090537][ T6706] ret_from_fork+0x45/0x80 [ 169.090586][ T6706] ret_from_fork_asm+0x1a/0x30 [ 169.090631][ T6706] [ 169.090639][ T6706] Memory state around the buggy address: [ 169.090655][ T6706] ffff888026295300: fa fc fc fc 06 fc fc fc fa fc fc fc 06 fc fc fc [ 169.090680][ T6706] ffff888026295380: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 169.090701][ T6706] >ffff888026295400: 07 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 169.090718][ T6706] ^ [ 169.090734][ T6706] ffff888026295480: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 169.090756][ T6706] ffff888026295500: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 169.090773][ T6706] ================================================================== [ 169.090895][ T6706] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.090916][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.1.163 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) [ 169.090958][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 169.090978][ T6706] Call Trace: [ 169.090988][ T6706] [ 169.091000][ T6706] dump_stack_lvl+0x3d/0x1f0 [ 169.091044][ T6706] panic+0x71c/0x800 [ 169.091091][ T6706] ? __pfx_panic+0x10/0x10 [ 169.091135][ T6706] ? mark_held_locks+0x49/0x80 [ 169.091179][ T6706] ? preempt_schedule_thunk+0x16/0x30 [ 169.091230][ T6706] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.091283][ T6706] ? preempt_schedule_common+0x44/0xc0 [ 169.091330][ T6706] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.091371][ T6706] check_panic_on_warn+0xab/0xb0 [ 169.091419][ T6706] end_report+0x107/0x170 [ 169.091455][ T6706] kasan_report+0xee/0x110 [ 169.091495][ T6706] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.091540][ T6706] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 169.091589][ T6706] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 169.091634][ T6706] ? find_held_lock+0x2b/0x80 [ 169.091663][ T6706] ? __might_fault+0xe3/0x190 [ 169.091699][ T6706] ? __might_fault+0xe3/0x190 [ 169.091734][ T6706] ? __might_fault+0x13b/0x190 [ 169.091779][ T6706] ? proc_simple_write+0x114/0x1b0 [ 169.091818][ T6706] proc_simple_write+0x114/0x1b0 [ 169.091856][ T6706] ? __pfx_proc_simple_write+0x10/0x10 [ 169.091897][ T6706] proc_reg_write+0x23d/0x330 [ 169.091930][ T6706] ? __pfx_proc_reg_write+0x10/0x10 [ 169.091963][ T6706] vfs_writev+0x6c4/0xdc0 [ 169.092011][ T6706] ? __pfx___mutex_trylock_common+0x10/0x10 [ 169.092062][ T6706] ? __pfx_vfs_writev+0x10/0x10 [ 169.092110][ T6706] ? __mutex_lock+0x1ca/0xb90 [ 169.092159][ T6706] ? __pfx___mutex_lock+0x10/0x10 [ 169.092210][ T6706] ? __fget_files+0x20e/0x3c0 [ 169.092275][ T6706] ? do_writev+0x132/0x330 [ 169.092322][ T6706] do_writev+0x132/0x330 [ 169.092373][ T6706] ? __pfx_do_writev+0x10/0x10 [ 169.092422][ T6706] ? rcu_is_watching+0x12/0xc0 [ 169.092457][ T6706] do_syscall_64+0xcd/0x230 [ 169.092504][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.092538][ T6706] RIP: 0033:0x7feb4af8e969 [ 169.092562][ T6706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.092593][ T6706] RSP: 002b:00007feb4bdf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 169.092624][ T6706] RAX: ffffffffffffffda RBX: 00007feb4b1b6080 RCX: 00007feb4af8e969 [ 169.092647][ T6706] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 000000000000000b [ 169.092667][ T6706] RBP: 00007feb4b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 169.092687][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.092707][ T6706] R13: 0000000000000000 R14: 00007feb4b1b6080 R15: 00007fff9d295128 [ 169.092739][ T6706] [ 169.093059][ T6706] Kernel Offset: disabled