last executing test programs: 2.830950811s ago: executing program 3 (id=4): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x220c, &(0x7f0000000400)={0x0, 0xc288, 0x0, 0x2, 0xfa}, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x80, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0xe, 0x0, 0x6, 0x8200000400000000, 0x7, 0x344, 0x3ffffffc}, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xfffffffffffffffd, &(0x7f00000003c0)=""/33) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0285628, &(0x7f0000000cc0)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xc, 0x6, [0x4, 0x3, 0x0, 0xa, 0x5, 0x570]}, &(0x7f0000000080)=0x14) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f00000008c0)={0x48, 0x8, r8, 0x0, 0xfff, 0x2, &(0x7f0000000840)='$i', 0x5}) 2.71183886s ago: executing program 0 (id=1): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\xd4\xd9z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4^_8\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\x83\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc1\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)\'\xf6\x8e\xd7v4\x81\a\xe6\xda@\xa0\x8c\xdf\xe0\x8e\x94\xe5\x88\xb3\xb3W_\xf9\xc8\xc0\xe4|\xd7\xcf9\r\xa5\xea\xe7\a\xdb\x18\xff\xbe1R\xa9\xc4\x82\xf4%\xdc\xe4D+\xc2A\x02V\xe5h\xc7|2\x8bp\xb4\xd3\xe4\xb8\xb5\x93\x03\x85\xe4@c\x9c0\xe2}\x13fon\x86y\x0eP\xc8\xab\xc8[d.Wg\xcb\x1c\v\x1e,\xa8\xc0h!\xe0p\xc7\xdf\x03\xbd\xebD\x9d\xeb{\xce\xc9\x97\xc5\x7fr\x1f\t\xe6\x86L$\xb0\xec\xaa#m\xe1NZ8\x9b1\xbcmY\x19\xdclt/\xa9\xf8\xa8\x8d\x8a\x01}\x1ay\xda\x97\xb9\x81`\f\x86\r\xd3g\xca\x96a\x9e\x82\x15\xb4\xfd\x18\xd6SO\xb71\xbeN\x874\xb2C\x15e\xdf\xfc\xda\xec\xea\xc4\xb0\x97\x16_6\xa9\x1d:\xf8\x1a-DTb\x8a:', 0x3) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) write$apparmor_exec(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='exec :'], 0xb0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f0000000180)={0x2a, 0x2, 0x1}, 0xc) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @multicast2, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0x3e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$x25(r1, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 1.986610117s ago: executing program 1 (id=2): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x5, 0x4}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f00000002c0)=""/206, 0x1000, 0x3000, 0x2, 0x1}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="1c002d8005000100000000000500040000000000080002"], 0x38}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000000), 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9a4a, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7fff, 0x4, {0x1, @raw_data="e675d8b1efc7679c5e785c036288673871066a8f41b3eb556f3755ef4204bbaa996e61205fd38d93f86cd841252e67dc6e6b9b713a22cea1fc1edac8484818349fc400c156f5ecfdf0a8d4117f5b21dc94cbb06b9595ee9749a14f647243d7c1072f10f50442bef21a67d8b8cb587eb2bffde63beba2dc478e9d68ffc40019f5ae42349ae6dd4524060f5b7cb0d435d45c1a3d9965706a507cd9fe631a6f1a7bfd9c8cf4676347298c27579902fcf788bfcd806d7891482152aa6ad76d8ef3ae5e2a7ec629a34099"}}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix={0xe, 0x1, 0x20323159, 0x3, 0x6410, 0xef, 0x6, 0x7, 0x1, 0x0, 0x2, 0x5}}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) fadvise64(0xffffffffffffffff, 0x92, 0x5, 0x5) 1.886611433s ago: executing program 2 (id=3): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x5, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xea8, 0xa4}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0xb, 0x4, '#'}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x40, 0x2, "f27b72f8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa, 0x2, 0xff, {0x7, 0x25, 0x1, 0x83, 0x81, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0xa, "77ae008956a9021c87"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd, 0x6, 0x6, {0x7, 0x25, 0x1, 0x2, 0x2, 0x7ff}}}}}}}]}}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) recvmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000140), 0x6e, &(0x7f0000000480)=[{}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/146, 0x92}], 0x5}, 0x20) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (async) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x5, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xea8, 0xa4}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0xb, 0x4, '#'}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x40, 0x2, "f27b72f8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xa, 0x2, 0xff, {0x7, 0x25, 0x1, 0x83, 0x81, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0xa, "77ae008956a9021c87"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd, 0x6, 0x6, {0x7, 0x25, 0x1, 0x2, 0x2, 0x7ff}}}}}}}]}}, 0x0) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) (async) recvmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000140), 0x6e, &(0x7f0000000480)=[{}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/146, 0x92}], 0x5}, 0x20) (async) 1.019021101s ago: executing program 0 (id=5): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(r3, &(0x7f00000003c0)='./file2\x00', 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x7fff, 0x3}, 0x2) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 962.558783ms ago: executing program 1 (id=6): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, 0x0, 0x4) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) (async) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, 0x0, 0x2) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfd, @tick, {0x5}, {0xe}, @connect={{}, {0x1, 0x7}}}], 0xfdc1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001a00010000000000000000001c14"], 0x28}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000002940)={0x1598, 0x36, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa}, [@generic="044d7c33e4b4ed8f8d15a28ce141b57cf380fe42cc1703d34358d9a27d860ee30865c86dae063f9d9f11b09215c2d920d8239ec9", @nested={0x1b6, 0x13e, 0x0, 0x1, [@nested={0x4, 0x15}, @nested={0x4, 0x25}, @generic="1c8eff579d05b84ac53ce2f00c00e499a83a857ac4243f366fde24f81966a1d4538e33f7f0a98554a51ad7390eac283ce51d70d6019e4993c6524fa3", @typed={0x11, 0x143, 0x0, 0x0, @str='/dev/rnullb0\x00'}, @nested={0x4, 0x14e}, @generic="3ac22af700bca8e3f4801145e5e145ab7393c3728e0bddb5e22f0b241a330018dce6fc2430a06645855b1ef85d5a87a1b07647f35ff901a09125203d862160105f49d78699c7016bc9d57e11cb0b1d44519b6216f25ecb697e94a103171946f0f553e5da20c446373add3bb2da0b6f0d7a98a0004fcee0099d63033e8ad6fce4fae917bdaf152295a5a9b6b9ede9376f2d50df9bd9c7522bf730bca1aef4fdbd532366935d2df2fa0fb779ea8d260a6236eb6824ee", @generic="7f8fd9b8d6ff8fa8321b48bf0b08235bf307c0fba5cd15653c1520c1d066b943270c0882567dde5ef9d09cd5351e93505a12251280c8bac82ffe9006582c26c8c2a867e5e2c37d8b44644fa1b2698de8545e03c2c40ad3122b4f", @generic="f7b451c205b30eabc8c26e53cc3ec0514a799ca013130cce582a2e6be1a6fab18d24d1ef89c6de21359eb348c701d80bd70eaf962e044f82d0d4574a05b3ceb380ab88d73f71ad"]}, @nested={0x16f, 0x53, 0x0, 0x1, [@generic="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"]}, @nested={0x1161, 0x123, 0x0, 0x1, [@generic="663d7fc935d60aa13291bf697182fd98893d892f13499b2eb364615e55261594e6059b7147c2f8e615f95ff7a1d9863184e3d0f774c23234f69e22bd857208a1c137e8f9b7640000370a83c88498acbbfd0e2d850f1974fdb38b5b649f08e985578fd2efb5038710b8ad9a9452aac7078f3f4bf05925174510b2395046edf5697a0e11467b4c61e68c3bd0e3be0d81f379e735f2c074562535c073475af2399331d6dc27342f6ad417c5c75e03d12c08899eeb7a26dcc7a9782f27119cb3eaaf21126f3c2c8444ebb72a85f6719d74c0edf30d939cf645ffae6747691b7b17ec924845c48e7b07b00fc0369a278fb17162ea00f3b7e044b6bdba7e9d7d0ebd25b9658e305cef542f533bef4783dbde960d66cc27fc501fcaac3bb51a5c7842f93d5753ee6b28695cfe1a1da585612e97ea64e4f96a185fce1c338caf52b4fe98b14d9d98267352398c23c4ea802ed9ed8385b4743e1cb3a2b3a0976c1de39b6e7f07e13fb15ea9df44ab3fad26a5bbf7301f514142814148610326363566bdd4d5e86a7a5c3bcc11f79ed70a3fd0b3d48bafadc58e424d3af2644a8079ed11d07649bb8c3cc62825d9b66bfb1e9a64e62075174cecd2590c92f636431ae7463953611c2a9547bbda7c83f0b9e80cd09e38c6dd45561fb286baf9576e57278f3a96cf5538123b923e718af864249de1e2ab752cdacc4ca06eac034673252c013717ec1c88d58738af97971c554b7a54c425e8177bd44856afd4400e29b9063efba8bd08d9563d4f71ef80b1877c8f1ea10792b87e16815e61416c4a7d9a5615249a21c8a1d78d79ed5abea1e4f38ce03d1c8073a18431d8fdba7a2710ef5e65402a034eea4b49bde634720909ee1a7b25ac0937f5884c8d5c44a60994d43b3aa1fdcb9199043b685641c1fac810bb9742b7a6dfde3c8f6fc2af195c5c7d4771750b73a964298f428444752dcf1825a80fdfa3cfcba6b0c3dbb0351a0b03071fbb75f365cc5074e311b92c8b89ede2eed5799e52764fac8dcc8db6d437a7de764bad4a0d5991b8063ec18bdd167cd91a0821ccc115ad6960c8fee5d153565d3113b8879d600a3721b73474624a4552358ad6036742649d30b1debfa8b809362976d6952444ff18340eda5a377fc62dc72ceeb550a4d09c3cfdd936eacc03947bb0ea4c5746f91e326d227706710c4cc8770e9a1480821c4336a8d85c1ef2b0b299a2abb1d091d9612c38a9c2aaeccdf573a6f72b4b3b6a136a21e98c66823013b97dfff8a21ef1a98b76624c8ff603d32405e1c5fcb26409848ace704c7c0e54498f543e05518fc8fce57404dc8a5735f5fac0e7e881dd31f524dce14ab2b4942816c1e380294f900887f0e240b0bfff50dbc734a84e92bc4514e063c0efabb7c4bee418afb21cbe846b64c113085ab201fa5a0f9c9bdef2f8a30b0b57048eaa9052dd58fedcd58e3a7e6ae0f0eebb445289d0d38a336343b3ae6ab77d318b8b88ecf32dfc8a2078ad35cf7991c5dad4623cb4da7b63b19eef0732c88ea656675dfb43ed63df62dbae87d29b0e6ae476262616272493998cde7068eb2c9e0d84df642a23ea07bacbdbcec42da7994774d781ba268519e789356d46d27bb12ac89d30aed181888adc02ebd27009f5a0d21a4c357e0f237c53eaf8c1dfe6e50b276d46ce829d892c5163432bb264d95c4c71c902f6c3372a8d82760d84f43af0975ff849aa33313fc365682ee5d0642eda40324eb66bcdb7acd4af9084b77cea60fc1b6c6138e3b6e8fd060fa8737c87ed6e6a9dc2553e21de6e9ec7c13e5b79d0be75a4bf382bde63376dd0da237cac9d893421a8ffaea0b13f6f9875e4f80e76ba45ee9c24fe1775fde039f3a5601f6104273e6a7da918ed05640907206f3b2582ac490d6c3369f0607ae5484468c15f8929bd599acc402bd9935926f16c9cf82fadc477315bb551c053d2b2307ed3985ae2cb6d8888386caa9a767c37ddc2bd4b6da6fe269d4df6638fa4c699a97856b7538153a11ec588b539d59f739d7151bd67a47c782d55e97662fe32eb33ad8336085a4e05b9cd62f93c9f4aa5148bf5ef1c7bd3879d9856c52b39b771c230633e562394e59e44a9e54ff595670178e757402af0d55d77422336fb1f7aba4f0f66dde169149cec3b73cc775b2482d0d17cc3a9a314e5061ec4e2a3a34c95906fca7e5d8c41165cd487134f1a8dd811d5b44a17a2d24f3fa8382f52d926a3f75e52817996eab6ba5c8add44f9e35017e31fe940ee1c99679c586a251d0f7a223c20ddbce5a94a2661946c853c4cd31252b16682bb36705b7aa944744914acb1ee81ff814eab959f68ff2b0b50e4bb0a5c844e10c8f8a900e6a17913074111b225faff472162d83c3dfd9658336df011d552fb40e43204f9740f88d4e40958149777d38ec80f12b9345ade4d2bd1f9b78ce7602c4556c085a831be6a47e3ed886377a94300ec6f26cec30cfeb5699b8bce94ed27a51d707a4795b7c0fe8a08d392348dbe3a1451b0613ae415e20586e1bd5535607ef240ee507e9e7fdb3481cf419b7fb96ddb3f728895d16797de3c2df067142890be80dac23db6f81f7fbbb252070201837089fc1358c8b409551004f37abfe3b27aa19eb8639986b8766b3e854ebdac962c3e78d53b1f2b6478894ae0b2c49cf51188ad5dcf6446a9b8f9709c86d30f8269d6219ae941ba594122236b336f9ca54dc20a9c49381eb0b0031c0f84c3b88e711096064aaa8033777d3635d1430cb355ccc99cb7e3de9d9b2e4f9aff0f55dbb1722fd30768aec650a55043453b4bc024c4637a882d917eaaa492126fb3ceb4cd8e2c2f43a73ba125a5aad3d01da86a9e3965895d68d3985ee1f243211541c9c3e3f830806a57349bfc5991f9d80a37676a3a27c439170115b20917c5b0836537c0a3e88d1ee824f0c077be5e1652410a749638b4ce89d8590ea06c468ba90e2e022abf11324b6020f7a30a9232f3d6e0e7cc204a54e82ec4a4206bd15b28f74e66dc1285daf5aa3b473cbb48f760c07c335c3cb8dec278fa09f8155e0f51dd0b6e5c35701e7fd481cace24e79e75e1d1a97f59ca3c1ae0fc388176edad06875b071e957a8d320200c7e73cf8c4b1d428d8adef7070c890ae99ba56128e29b5fe7b2e5d093d1f2b70ae81000181cb8b4b0cedd8177bb2c3730294d243c78af655c32d63a5937d7539b40116607f7bc65ece74cea956af7cb2d8caa5d2183f0a43db76631fb69b408870b6453e62fa73cdbc5708b9554e608cb093d06588a01949209e94051264e8fbcd3ff178f2f6d925bc69d4a6f765cb117823ee68a2163eb030425a45b383f274e5dc345a6e31c67fa949bf77d131d668f489d797516c0728914906055f36eeb4a56176a031d91b373db75bb004b62a2c0a89d73a02643c00efbbf10e1f76a0b428f9602a869f0f5ee53099ec693dfe8f341cd627e921e66bcebcd7227e4670f1012cfb35d0608028fac0822f0045a96d3f4c35f9a45bde12a0aee80f9cd44119f9796c1aaf833a3dacd8fdc24fe7d825e04a08d3100335626ca7d71ad1d5f3e6976dc742df6dd7b86060779bc4432d7956c485da180eedd6f5d4bf792a8a26fae80d9ce9dfcb94d70c782e46fe53366fd70ab654943eabe6fd905e71671b9f06ddf3d90cb048c4dead9b27c197900e8d8ddfafa446a7c46852ecac7ce1988b71bc4cf30b100cb57816baa0c2184ce2d36628fd4a9b37f4a977d9ca2ace05ccd2c28583afa288d37262b80d3f1c614ca0bebd2726239711dbda2544799928a6eaa3c8e7ee8d436eb0962770c097f8d0af559540ebd395ce1188a542cc38ca5ef6323eaf091ac001cd37ee062c0bad0a14116cfd575ec7aee7050c455c24ab81f0a9fa952d5a65d7116fdd66c7d214cf4a110fd77b6b8c8fa89ae2491c422368a2f40532a649f2d5dee1c6721335b1d22b670d5a754867c9dfd7f5da04cec644f46093bc4a8cec36c583e4452f41ba38c0b43f202b1294ca10056a816b662ac4e4f1d80b37202089b8d3d5a7da232b8ea19aaf37a097a79e880c1040ba3e0dcac38ea43f2f200d0592dc2095022b5e4b633c611f0b4b1b4f90ef79da565d59d5528aac6660440f05b10080921f782f927c6692ea0c4fbbd2f411f7be1fa4055c1ae0af351a1cfdbdce44afcb3bdf643a1f0e91308a04ccf49ff2f06c2444896cb58b89efaf1c9a14775b481d14fd0e32528009d6017522e893173df36662f962af76870c2f3079ffec9e60bd4a134fd78b79813598919665c6cd60eb863d73c9f74471395e1b7aeb75d934ceb25a41b39dbfca2c1bc72f5da49ab9e8f059a5a3d35763432ad5c98fc4a05a24da4a77348341968c61a56affd7746cf3e10482d33139205acfae4dd276e9022dd0533e4fa42ff9ac1b3b5582f65faaf079af1611250f62f1170e6e60fee883ac05fe6c872088147e573d0de4fa679b99bf8c52583471d94afed7dff25c081ec0d9aa94c9ac5d4001fb9eeff502415ff1fa3a183570703f9f9b54149a7f9038b955b0b392eaf98f547cc1e0660fbaf12badd46ad6f76b029d4096ba440a5993b38571265dd3dd89d48be611448c512572eb19cae1f5d703b9788a49944b4b257d10c8af9a206d9eae30c64155da11e3da5673ba397b53616fc2db0046fced3e21837e0e221f8c855d0df4ea8c741a1b00077cb837e5db6ed347dbc9fd9493a1e5f39e63bab44055baa1f284b195d1e6b74985cb67de7ed7c3e6c77c7b6fb5db34c5f6d3cce441119cc55c3df66c59321f6ff4bce143aa619ff50d103363bdd2be262b8142793269d73a7ed74e38f3c3887bcb4260e8b3455e0b4473d368dfaccbda79c5120d7391045d93a1f0f7c7898a26036e79ba856878211b28a7c8d8e93a1425c8bacf1fa8e03642f29da78fd0f2f8637a77218e38be748ac773432f50f3560c20ce13598a0ee85be64a348333e911de4679e87f44e9189aebc2450ce344eb1bac474787c21008345c3ea5420945221525c97ad0a3b9cb2e84109a89dd1fb9bbadd9480c84eb748ecf9f39ed5a62650debc3aea97c347aa80961e7bc382ffe15af0ab7efb16f4969c35c14d2860848ec0013313c4d84eb1bf2704ff58e30ca985d56e160b36f557c2d4349cfa1617138c0cb11567a70b84047b2cfa127e579b0a859a00ed67c67246bb5ce1da5c217ccce559adc7694ad040e9bee92189dd2f200c6a27e40a60475444b47d4d38ecf5c4cf74c2ecd60b3ab6518d9faf45add645313a9b33184b3769e1f0773c862e92b36eec93111bfeea5a2f1862a3cd5f064ea9bff360d90fb826ec2dbdfc90f80a865543feca389e5c84d435252430c94a5a7f3d628803f88078fed04a5fede7e03501cb787275d641dcedbceddfc5ff5d6a80fc309241f7aab9493ca8bb48af42492a4444aaac4822ed3d9f9cca0dfd38b6abea0387d071a8bed95b20c2f2449c8f6a4e2bba829fa92fd0ea83a5097d1f8862181d0ea7d4b2d71cc8133d0e4a384d2d8aa43cf764a56c3293187f124e07f5bdf5896b38865a2cdbbcdeba12e6231e78e340fe11d5830220048700299617b878395ef97178731b5a36cd44962239e5ade457942266d81f1b30022089985a32931385ecb93bdf0a1d2710c19634f994597bd0a532692c4a901dcd931ef8e6b6eb02132094c3ec6f3dae449b2b7a133c5d24f449518d56f55d6a187aaa38946bb72c8d0f1011c87b9450adcdd6910021f61783fa0a15bb0af58c6eddf130347bd203c60675d9f57bb766b9fd0f4c36f4dca9efcc899aa", @nested={0x4, 0x78}, @generic="206979085d2db6b1be1a05523ee52295a1064e32a296511a3ff60f3e2ca4cbb15e56d1a351b27f72adf6c201f22489b6accf3d0c555e528aa0515d1ae52e2f44051af6fc168be95631cb430989d5ca2e316e04b478051ba044123b9f7de67f2b871b8d36d2cf784a86618fb8c0e374833379a20599fb0513fa80f53c3ef8e898a39ac43a83a1847ad2466f3a87b3cf83d404a3", @generic="f29213f7f2e6a59387ba4bfd79771e819c49bb5dc1088c97c7b6504c61e26cfde785aaa2fa67518feb998e19ba9dab75167a00d63d08a09531a4ac82a0923ffe36bace6315c815aac35417f9cfb7cc8e50c83f3a3686524d1f5603414841a0a875c159ad0b4c00ab8dc41c1803fab68d2a00b3fb693292a1593e5c6eadcc5ba03a4a57650ddb7bbe25aa9d31f452d7a174cf1d8f12c7c55401", @generic="329f804d1274485606850b16440461416307970ae946ae32f5a26490f3b173d8f4efc9b76bbde29c8ae44106dc"]}, @generic="a72965683bb71d5b260f79be842a357123664a420c831089ab60bfb0a445243869dfa898cc59a07f0e6e33ee66c4f5c174c665fa2d26c8d13b3c3426a1c0715d15c854c3fb8526f587b1dfeb6dfdc1e7211bfec542e156f824af4ee805f0ceb6b55f0a2404803fe193b6581a80ccbbc0b40e9c1e2a0776666b28ee954e54129f5862855314fad2d268d15518c1fbab90fe7edf34adea57b95b9a5e1cf61b2d8a535f16f41e805a9195c4623371efa5826130b3466f6e310283a376c615b4b7a838"]}, 0x1598}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x80000001}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 744.92727ms ago: executing program 2 (id=7): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) pselect6(0x40, &(0x7f0000000040)={0x6, 0x42b, 0x0, 0x0, 0x0, 0x2, 0x8b12}, &(0x7f0000000080)={0x9, 0x7, 0x1, 0x8, 0xffffffffffffffff, 0x3ff, 0xb4, 0xf}, &(0x7f00000000c0)={0x9, 0x9fa, 0xfffffffffffffffd, 0x0, 0x38000, 0x50a1ef2, 0x7, 0xb}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000140)={[0x8]}, 0x8}) (async, rerun: 64) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@t={0x81, 0x5, 0x8, 0x4, @generic=0x726802bf}) (rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r1, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) (async) exit(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000)=0x1) 741.266791ms ago: executing program 1 (id=8): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) ioctl$SIOCAX25CTLCON(r1, 0x89e8, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000250f00000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x6) (async) ioctl$SIOCAX25CTLCON(r1, 0x89e8, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000250f00000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) (async) 458.201243ms ago: executing program 1 (id=9): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f00003ba000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 1 (id=10): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @default, @default, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fcffffff000000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000000800140022"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x24, r10, 0x19, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. [ 88.796535][ T5851] cgroup: Unknown subsys name 'net' [ 88.949196][ T5851] cgroup: Unknown subsys name 'cpuset' [ 88.958551][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.639141][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.936512][ T2159] cfg80211: failed to load regulatory.db [ 93.257646][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.270261][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.279445][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.287350][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.289099][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.294943][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.310204][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.317883][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.325810][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.333936][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.335409][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.342205][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.348374][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.356533][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.364380][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.370028][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.376871][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.385921][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.391780][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.409153][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.819373][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 93.979331][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 94.124680][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.132029][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.139844][ T5869] bridge_slave_0: entered allmulticast mode [ 94.147350][ T5869] bridge_slave_0: entered promiscuous mode [ 94.156594][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.163743][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.171465][ T5869] bridge_slave_1: entered allmulticast mode [ 94.178819][ T5869] bridge_slave_1: entered promiscuous mode [ 94.199726][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 94.329401][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.337493][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.344630][ T5876] bridge_slave_0: entered allmulticast mode [ 94.352389][ T5876] bridge_slave_0: entered promiscuous mode [ 94.363375][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.379212][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 94.390844][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.398422][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.405809][ T5876] bridge_slave_1: entered allmulticast mode [ 94.413054][ T5876] bridge_slave_1: entered promiscuous mode [ 94.422273][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.513744][ T5869] team0: Port device team_slave_0 added [ 94.550425][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.562744][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.574503][ T5869] team0: Port device team_slave_1 added [ 94.628357][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.635679][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.642850][ T5868] bridge_slave_0: entered allmulticast mode [ 94.650278][ T5868] bridge_slave_0: entered promiscuous mode [ 94.691848][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.699310][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.706770][ T5868] bridge_slave_1: entered allmulticast mode [ 94.714021][ T5868] bridge_slave_1: entered promiscuous mode [ 94.729848][ T5876] team0: Port device team_slave_0 added [ 94.736846][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.743897][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.770039][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.813389][ T5876] team0: Port device team_slave_1 added [ 94.820451][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.827476][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.853953][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.924774][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.934617][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.941889][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.949143][ T5867] bridge_slave_0: entered allmulticast mode [ 94.957021][ T5867] bridge_slave_0: entered promiscuous mode [ 94.978966][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.985984][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.012272][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.027049][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.051182][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.058778][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.066043][ T5867] bridge_slave_1: entered allmulticast mode [ 95.073746][ T5867] bridge_slave_1: entered promiscuous mode [ 95.081732][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.089160][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.115332][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.204481][ T5868] team0: Port device team_slave_0 added [ 95.213820][ T5868] team0: Port device team_slave_1 added [ 95.239110][ T5869] hsr_slave_0: entered promiscuous mode [ 95.246345][ T5869] hsr_slave_1: entered promiscuous mode [ 95.281613][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.294219][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.310078][ T5876] hsr_slave_0: entered promiscuous mode [ 95.316614][ T5876] hsr_slave_1: entered promiscuous mode [ 95.322743][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 95.328612][ T5876] Cannot create hsr debugfs directory [ 95.391708][ T5867] team0: Port device team_slave_0 added [ 95.398803][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.405867][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.432294][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.458938][ T51] Bluetooth: hci0: command tx timeout [ 95.464805][ T5877] Bluetooth: hci3: command tx timeout [ 95.464818][ T5880] Bluetooth: hci1: command tx timeout [ 95.467387][ T5875] Bluetooth: hci2: command tx timeout [ 95.483555][ T5867] team0: Port device team_slave_1 added [ 95.490512][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.498076][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.524377][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.634811][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.642021][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.668325][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.705711][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.712721][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.738979][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.804185][ T5868] hsr_slave_0: entered promiscuous mode [ 95.811252][ T5868] hsr_slave_1: entered promiscuous mode [ 95.818130][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 95.823884][ T5868] Cannot create hsr debugfs directory [ 95.948338][ T5867] hsr_slave_0: entered promiscuous mode [ 95.954793][ T5867] hsr_slave_1: entered promiscuous mode [ 95.961177][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 95.967011][ T5867] Cannot create hsr debugfs directory [ 96.172905][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.186198][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.218895][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.251960][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.363342][ T5876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.383533][ T5876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.404675][ T5876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.419906][ T5876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.499782][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.514066][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.536592][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.547574][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.651603][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.662609][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.675755][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.705678][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.783161][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.802147][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.833997][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.871263][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.887781][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.895064][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.914689][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.921947][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.952474][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.959609][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.978323][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.985514][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.998492][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.044463][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.082029][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.089190][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.130774][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.137922][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.212261][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.308650][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.350286][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.357502][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.409373][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.416598][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.537556][ T5875] Bluetooth: hci2: command tx timeout [ 97.537586][ T5877] Bluetooth: hci0: command tx timeout [ 97.542995][ T5875] Bluetooth: hci3: command tx timeout [ 97.554778][ T5877] Bluetooth: hci1: command tx timeout [ 97.643253][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.730252][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.772535][ T5876] veth0_vlan: entered promiscuous mode [ 97.820230][ T5876] veth1_vlan: entered promiscuous mode [ 97.864342][ T5869] veth0_vlan: entered promiscuous mode [ 97.904678][ T5869] veth1_vlan: entered promiscuous mode [ 97.961584][ T5876] veth0_macvtap: entered promiscuous mode [ 97.979863][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.004855][ T5876] veth1_macvtap: entered promiscuous mode [ 98.051191][ T5869] veth0_macvtap: entered promiscuous mode [ 98.081055][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.092271][ T5869] veth1_macvtap: entered promiscuous mode [ 98.103463][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.122887][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.148283][ T1115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.172764][ T1115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.182802][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.200398][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.221267][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.246769][ T5868] veth0_vlan: entered promiscuous mode [ 98.257378][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.300035][ T5868] veth1_vlan: entered promiscuous mode [ 98.331951][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.341861][ T1159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.354920][ T5867] veth0_vlan: entered promiscuous mode [ 98.380160][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.389515][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.434776][ T5867] veth1_vlan: entered promiscuous mode [ 98.436181][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.453211][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.538500][ T5868] veth0_macvtap: entered promiscuous mode [ 98.559894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.572329][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.575649][ T5867] veth0_macvtap: entered promiscuous mode [ 98.604480][ T5868] veth1_macvtap: entered promiscuous mode [ 98.615495][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.623366][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.628383][ T5867] veth1_macvtap: entered promiscuous mode [ 98.681848][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.701194][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.728879][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.733359][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.762401][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.781915][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.828656][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.872765][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.902698][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.934269][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.963931][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.963991][ T5955] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 98.977941][ T1115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.002992][ T1115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.013622][ T1115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.025594][ T5955] syzkaller1: entered promiscuous mode [ 99.031122][ T5955] syzkaller1: entered allmulticast mode [ 99.052864][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.057950][ T5955] process 'syz.0.1' launched '/dev/fd/8' with NULL argv: empty string added [ 99.095559][ T5919] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 99.182855][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.205093][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.246158][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.259413][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.272756][ T5919] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 99.302783][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.324417][ T5919] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.353289][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.372594][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.380519][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.397514][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.398275][ T5919] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 99.426388][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.448176][ T5919] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.453982][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.473314][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.481968][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.486611][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.521542][ T5919] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 99.545405][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.562700][ T5919] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.577982][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.594847][ T5919] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.620727][ T5875] Bluetooth: hci3: command tx timeout [ 99.627304][ T51] Bluetooth: hci1: command tx timeout [ 99.627326][ T5877] Bluetooth: hci0: command tx timeout [ 99.627365][ T5877] Bluetooth: hci2: command tx timeout [ 99.652462][ T5919] usb 4-1: string descriptor 0 read error: -22 [ 99.677180][ T5919] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.703843][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.800862][ T5919] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.095778][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.400756][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.425059][ T10] usb 3-1: config 1 has no interface number 1 [ 100.431788][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.457339][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.467048][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.475271][ T10] usb 3-1: Product: syz [ 100.479569][ T10] usb 3-1: Manufacturer: syz [ 100.484290][ T10] usb 3-1: SerialNumber: syz [ 100.730633][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 100.793322][ T10] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 100.964076][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 100.999202][ T10] usb 3-1: USB disconnect, device number 2 [ 101.015443][ T5877] Bluetooth: hci0: Malformed LE Event: 0x1b [ 101.232534][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.423468][ T5970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.444732][ T5970] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 101.630620][ T5970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.646853][ T5970] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 101.668743][ T5970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.682370][ T5970] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 101.695067][ C1] ------------[ cut here ]------------ [ 101.698290][ T5877] Bluetooth: hci3: command tx timeout [ 101.700965][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 101.701095][ C1] WARNING: kernel/workqueue.c:2256 at __queue_work+0xd38/0xfb0, CPU#1: rm/6006 [ 101.722014][ C1] Modules linked in: [ 101.726053][ C1] CPU: 1 UID: 0 PID: 6006 Comm: rm Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 101.736475][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.746553][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 101.751862][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 de a9 8b 4c 89 fa e8 49 3a f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 6a a3 35 00 90 0f 0b 90 e9 dd fc ff [ 101.771478][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 101.777557][ C1] RAX: dde1803273ef5700 RBX: 0000000000000100 RCX: ffff88802e3f3c00 [ 101.785546][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 101.793535][ C1] RBP: 1ffff110060a5e38 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 101.801535][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 101.809530][ C1] R13: ffff8880332b4988 R14: 0000000000000008 R15: ffff88803052f178 [ 101.817517][ C1] FS: 0000000000000000(0000) GS:ffff8881258de000(0000) knlGS:0000000000000000 [ 101.826462][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.833055][ C1] CR2: 00007ffdc351dfcc CR3: 00000000339c0000 CR4: 00000000003526f0 [ 101.841039][ C1] Call Trace: [ 101.844326][ C1] [ 101.847187][ C1] call_timer_fn+0x17b/0x5f0 [ 101.851789][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 101.857612][ C1] ? call_timer_fn+0xbe/0x5f0 [ 101.862302][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 101.867429][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 101.872660][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 101.878505][ C1] __run_timer_base+0x646/0x860 [ 101.883384][ C1] ? ktime_get+0x3e/0x1f0 [ 101.887787][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 101.893176][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 101.899465][ C1] run_timer_softirq+0xb7/0x180 [ 101.904334][ C1] handle_softirqs+0x283/0x870 [ 101.909123][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 101.913915][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 101.919237][ C1] __irq_exit_rcu+0xca/0x1f0 [ 101.923853][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 101.929077][ C1] irq_exit_rcu+0x9/0x30 [ 101.933333][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 101.938983][ C1] [ 101.941924][ C1] [ 101.944864][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.950856][ C1] RIP: 0010:unwind_next_frame+0x5/0x2390 [ 101.956514][ C1] Code: e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 b4 5c b0 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fe 48 bd 00 [ 101.976216][ C1] RSP: 0018:ffffc90003b56e78 EFLAGS: 00000202 [ 101.982293][ C1] RAX: 0000000000000001 RBX: ffffc90003b56f40 RCX: dde1803273ef5700 [ 101.990269][ C1] RDX: dffffc0000000000 RSI: ffffffff8214db34 RDI: ffffc90003b56e88 [ 101.998247][ C1] RBP: ffffc90003b56f10 R08: ffffc90003b56f50 R09: 0000000000000007 [ 102.006225][ C1] R10: ffffc90003b56ed8 R11: ffffffff81ac9040 R12: ffff88802e3f3c00 [ 102.014200][ C1] R13: ffff888032f6a400 R14: ffffffff81ac9040 R15: ffffc90003b56e88 [ 102.022182][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.028355][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.034525][ C1] ? mmap_region+0x724/0x20c0 [ 102.039226][ C1] arch_stack_walk+0x11c/0x150 [ 102.044023][ C1] ? mmap_region+0x724/0x20c0 [ 102.048752][ C1] stack_trace_save+0x9c/0xe0 [ 102.053443][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 102.058829][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 102.064202][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 102.069411][ C1] kasan_save_track+0x3e/0x80 [ 102.074101][ C1] ? kasan_save_track+0x3e/0x80 [ 102.078959][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 102.083992][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 102.089729][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 102.094690][ C1] ? mas_preallocate+0x3ad/0x6f0 [ 102.099645][ C1] ? __split_vma+0x2fa/0xa00 [ 102.104253][ C1] ? vms_gather_munmap_vmas+0x2ea/0x12f0 [ 102.109903][ C1] ? mmap_region+0x724/0x20c0 [ 102.114636][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 102.119605][ C1] __kasan_slab_alloc+0x6c/0x80 [ 102.124498][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 102.129967][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 102.134917][ C1] mas_alloc_nodes+0x2e9/0x8e0 [ 102.139704][ C1] mas_preallocate+0x3ad/0x6f0 [ 102.144485][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 102.149797][ C1] ? __mas_set_range+0x12f/0x3c0 [ 102.154755][ C1] __split_vma+0x2fa/0xa00 [ 102.159193][ C1] ? __pfx___split_vma+0x10/0x10 [ 102.164161][ C1] vms_gather_munmap_vmas+0x2ea/0x12f0 [ 102.169657][ C1] ? mtree_range_walk+0x6a7/0x840 [ 102.174695][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 102.180607][ C1] ? mas_find+0xa7d/0xd30 [ 102.184966][ C1] mmap_region+0x724/0x20c0 [ 102.189517][ C1] ? process_measurement+0x15b6/0x1a40 [ 102.194982][ C1] ? __pfx_mmap_region+0x10/0x10 [ 102.199948][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 102.205605][ C1] ? rcu_is_watching+0x15/0xb0 [ 102.210381][ C1] ? process_measurement+0x15c3/0x1a40 [ 102.215883][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 102.221787][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 102.227948][ C1] ? cap_mmap_addr+0xb0/0x100 [ 102.232648][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 102.237500][ C1] ? security_mmap_addr+0x71/0x270 [ 102.242644][ C1] ? shmem_mapping+0xd/0x50 [ 102.247157][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 102.252648][ C1] do_mmap+0xc45/0x10d0 [ 102.256827][ C1] ? __pfx_do_mmap+0x10/0x10 [ 102.261430][ C1] ? down_write_killable+0x178/0x230 [ 102.266723][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 102.272360][ C1] ? common_file_perm+0x1b5/0x230 [ 102.277426][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 102.282052][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 102.287194][ C1] ? __fget_files+0x2a/0x420 [ 102.291811][ C1] ? __fget_files+0x3a0/0x420 [ 102.296502][ C1] ? __fget_files+0x2a/0x420 [ 102.301107][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 102.305889][ C1] do_syscall_64+0xfa/0x3b0 [ 102.310409][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.315617][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.321689][ C1] ? clear_bhb_loop+0x60/0xb0 [ 102.326372][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.332276][ C1] RIP: 0033:0x7fc2a4e20242 [ 102.336721][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 102.356333][ C1] RSP: 002b:00007ffdc351dc28 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 102.364774][ C1] RAX: ffffffffffffffda RBX: 00007fc2a4d42000 RCX: 00007fc2a4e20242 [ 102.372750][ C1] RDX: 0000000000000005 RSI: 0000000000086000 RDI: 00007fc2a4d42000 [ 102.380725][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000010000 [ 102.388704][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffdc351dc78 [ 102.396683][ C1] R13: 00007fc2a4df40c0 R14: 00007ffdc351e030 R15: 00000fffb86a3b88 [ 102.404678][ C1] [ 102.407705][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.414990][ C1] CPU: 1 UID: 0 PID: 6006 Comm: rm Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 102.425405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.435468][ C1] Call Trace: [ 102.438755][ C1] [ 102.441609][ C1] dump_stack_lvl+0x99/0x250 [ 102.446218][ C1] ? __asan_memcpy+0x40/0x70 [ 102.450832][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.456061][ C1] ? __pfx__printk+0x10/0x10 [ 102.460673][ C1] vpanic+0x281/0x750 [ 102.464675][ C1] ? __pfx__printk+0x10/0x10 [ 102.469278][ C1] ? __pfx_vpanic+0x10/0x10 [ 102.473797][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 102.479115][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 102.484327][ C1] panic+0xb9/0xc0 [ 102.488059][ C1] ? __pfx_panic+0x10/0x10 [ 102.492496][ C1] __warn+0x334/0x4c0 [ 102.496496][ C1] ? __queue_work+0xd38/0xfb0 [ 102.501194][ C1] ? __queue_work+0xd38/0xfb0 [ 102.505881][ C1] report_bug+0x2be/0x4f0 [ 102.510232][ C1] ? __queue_work+0xd38/0xfb0 [ 102.514925][ C1] ? __queue_work+0xd38/0xfb0 [ 102.519627][ C1] ? __queue_work+0xd3a/0xfb0 [ 102.524330][ C1] handle_bug+0x84/0x160 [ 102.528591][ C1] exc_invalid_op+0x1a/0x50 [ 102.533112][ C1] asm_exc_invalid_op+0x1a/0x20 [ 102.537986][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 102.543290][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 0d 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 c0 de a9 8b 4c 89 fa e8 49 3a f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 6a a3 35 00 90 0f 0b 90 e9 dd fc ff [ 102.562903][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 102.568993][ C1] RAX: dde1803273ef5700 RBX: 0000000000000100 RCX: ffff88802e3f3c00 [ 102.576971][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 102.584957][ C1] RBP: 1ffff110060a5e38 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 102.592947][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 102.600937][ C1] R13: ffff8880332b4988 R14: 0000000000000008 R15: ffff88803052f178 [ 102.608944][ C1] call_timer_fn+0x17b/0x5f0 [ 102.613548][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 102.619369][ C1] ? call_timer_fn+0xbe/0x5f0 [ 102.624054][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 102.629180][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 102.634393][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 102.640207][ C1] __run_timer_base+0x646/0x860 [ 102.645080][ C1] ? ktime_get+0x3e/0x1f0 [ 102.649428][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 102.654802][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 102.661069][ C1] run_timer_softirq+0xb7/0x180 [ 102.665931][ C1] handle_softirqs+0x283/0x870 [ 102.670709][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 102.675487][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 102.680885][ C1] __irq_exit_rcu+0xca/0x1f0 [ 102.685495][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 102.690727][ C1] irq_exit_rcu+0x9/0x30 [ 102.694983][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 102.700664][ C1] [ 102.703610][ C1] [ 102.706550][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 102.712542][ C1] RIP: 0010:unwind_next_frame+0x5/0x2390 [ 102.718212][ C1] Code: e1 07 80 c1 03 38 c1 7c 92 48 89 df e8 b4 5c b0 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fe 48 bd 00 [ 102.737831][ C1] RSP: 0018:ffffc90003b56e78 EFLAGS: 00000202 [ 102.743942][ C1] RAX: 0000000000000001 RBX: ffffc90003b56f40 RCX: dde1803273ef5700 [ 102.751925][ C1] RDX: dffffc0000000000 RSI: ffffffff8214db34 RDI: ffffc90003b56e88 [ 102.759903][ C1] RBP: ffffc90003b56f10 R08: ffffc90003b56f50 R09: 0000000000000007 [ 102.767885][ C1] R10: ffffc90003b56ed8 R11: ffffffff81ac9040 R12: ffff88802e3f3c00 [ 102.775865][ C1] R13: ffff888032f6a400 R14: ffffffff81ac9040 R15: ffffc90003b56e88 [ 102.783842][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.790015][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.796186][ C1] ? mmap_region+0x724/0x20c0 [ 102.800887][ C1] arch_stack_walk+0x11c/0x150 [ 102.805677][ C1] ? mmap_region+0x724/0x20c0 [ 102.810397][ C1] stack_trace_save+0x9c/0xe0 [ 102.815086][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 102.820471][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 102.825768][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 102.830980][ C1] kasan_save_track+0x3e/0x80 [ 102.835676][ C1] ? kasan_save_track+0x3e/0x80 [ 102.840542][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 102.845576][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 102.851226][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 102.856177][ C1] ? mas_preallocate+0x3ad/0x6f0 [ 102.861125][ C1] ? __split_vma+0x2fa/0xa00 [ 102.865727][ C1] ? vms_gather_munmap_vmas+0x2ea/0x12f0 [ 102.871369][ C1] ? mmap_region+0x724/0x20c0 [ 102.876094][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 102.881046][ C1] __kasan_slab_alloc+0x6c/0x80 [ 102.885903][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 102.891375][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 102.896338][ C1] mas_alloc_nodes+0x2e9/0x8e0 [ 102.901144][ C1] mas_preallocate+0x3ad/0x6f0 [ 102.905933][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 102.911242][ C1] ? __mas_set_range+0x12f/0x3c0 [ 102.916220][ C1] __split_vma+0x2fa/0xa00 [ 102.920660][ C1] ? __pfx___split_vma+0x10/0x10 [ 102.925632][ C1] vms_gather_munmap_vmas+0x2ea/0x12f0 [ 102.931113][ C1] ? mtree_range_walk+0x6a7/0x840 [ 102.936152][ C1] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 102.942068][ C1] ? mas_find+0xa7d/0xd30 [ 102.946413][ C1] mmap_region+0x724/0x20c0 [ 102.950942][ C1] ? process_measurement+0x15b6/0x1a40 [ 102.956407][ C1] ? __pfx_mmap_region+0x10/0x10 [ 102.961359][ C1] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 102.967020][ C1] ? rcu_is_watching+0x15/0xb0 [ 102.971790][ C1] ? process_measurement+0x15c3/0x1a40 [ 102.977292][ C1] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 102.983197][ C1] ? thp_get_unmapped_area_vmflags+0x161/0x310 [ 102.989358][ C1] ? cap_mmap_addr+0xb0/0x100 [ 102.994040][ C1] ? bpf_lsm_mmap_addr+0x9/0x20 [ 102.998891][ C1] ? security_mmap_addr+0x71/0x270 [ 103.004019][ C1] ? shmem_mapping+0xd/0x50 [ 103.008532][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 103.014011][ C1] do_mmap+0xc45/0x10d0 [ 103.018196][ C1] ? __pfx_do_mmap+0x10/0x10 [ 103.022807][ C1] ? down_write_killable+0x178/0x230 [ 103.028097][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 103.033735][ C1] ? common_file_perm+0x1b5/0x230 [ 103.038776][ C1] vm_mmap_pgoff+0x2a6/0x4d0 [ 103.043400][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 103.048557][ C1] ? __fget_files+0x2a/0x420 [ 103.053183][ C1] ? __fget_files+0x3a0/0x420 [ 103.057882][ C1] ? __fget_files+0x2a/0x420 [ 103.062509][ C1] ksys_mmap_pgoff+0x51f/0x760 [ 103.067307][ C1] do_syscall_64+0xfa/0x3b0 [ 103.071833][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.077046][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.083121][ C1] ? clear_bhb_loop+0x60/0xb0 [ 103.087809][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.093707][ C1] RIP: 0033:0x7fc2a4e20242 [ 103.098145][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 103.117770][ C1] RSP: 002b:00007ffdc351dc28 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 103.126201][ C1] RAX: ffffffffffffffda RBX: 00007fc2a4d42000 RCX: 00007fc2a4e20242 [ 103.134231][ C1] RDX: 0000000000000005 RSI: 0000000000086000 RDI: 00007fc2a4d42000 [ 103.142245][ C1] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000010000 [ 103.150244][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffdc351dc78 [ 103.158275][ C1] R13: 00007fc2a4df40c0 R14: 00007ffdc351e030 R15: 00000fffb86a3b88 [ 103.166278][ C1] [ 103.169720][ C1] Kernel Offset: disabled [ 103.174056][ C1] Rebooting in 86400 seconds..