last executing test programs: 11.169908804s ago: executing program 3 (id=127): close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto(0x9, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mprotect$auto(0x1ffff000, 0x8000000000002001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090027bd7000fbdbdf000800191a384902355e23a98c030000000008008031c44d1cea970e5678906b99", @ANYRES32=r6, @ANYBLOB="55a0e25c3693e7f9f5439b5e6daa795b066010e91b0a85aa8cf85b92e21ead6e10455e9f6b8be4100e984b9e"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x80000000000, 0xffffffffffff0005, 0x19) mseal$auto(0x0, 0x7dda, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00de0f4dfb4321a9c6a740734becff", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf251b0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00028008000c00", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex=r8, r0, 0x5, 0x1, r1, @relative_fd=r0}, 0xa3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) 11.018608933s ago: executing program 1 (id=128): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) read$auto(0x3, 0x0, 0x7) open(0x0, 0x62240, 0x154) bind$auto(0x3, 0x0, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bpq1/power/runtime_status\x00', 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/node/node1/compact\x00', 0x101800, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') acct$auto(0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timer_create$auto(0xfffffffa, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) timer_settime$auto(0x80000000, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x6873}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/version\x00', 0x8080, 0x0) lseek$auto(r1, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) setrlimit$auto(0x1000000007, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mlockall$auto(0x7) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 9.542788483s ago: executing program 2 (id=130): r0 = memfd_secret$auto(0x1) read$auto_fops_u32_ro_(r0, 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r1, 0x0, &(0x7f0000000380)="1d4080909aa93cf6e18811747cb7ab188fac88b82819d46b339b520ae8ed1cadce286935c92d753dfd31454de619a6a03125487f5c9b50c352688d3f8083ab6682ad96d4fa13ce1b5e5ac90ccf1792eccc886e0a870a3ae79c64615e95b29ca082101a51217f71d3476485d47d39b90b1620159f218be0e8bcbca9c8e9aef321bf29f7d2b56f6f469237331950eefa08ef8ac9c02ef5e649cc3d651b21c53267e652b47bd4acf9da59e0c984afc182ef19800b9e27cb65fe01326c362bfa15ad63aca624e86a6298bf173d2622bf5ca1416f", 0x7, 0x10001) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x6ab, 0x1ffdf, 0x80000007, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x2, 0x10001, 0x80, 0x100000000, 0x800000, 0x3400, 0x8, 0x200, 0x800, 0x84, [0x1, 0x0, 0x800000000000, 0x50100000000000, 0x0, 0x401, 0x0, 0x6, 0x70624ce6, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x5, 0x4, 0x2000000800000000, 0x7, 0x0, 0x400000000005b8, 0xc, 0x0, 0x1000000000, 0x0, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0x400, 0x9, 0xa34, 0x0, 0x3, 0x6, 0x8, 0x7, 0x7, 0x2]}, 0x1fe, 0xd) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x405040, 0x0) ioctl$auto(0xffffffffffffffff, 0x4008af10, r3) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9.037793694s ago: executing program 2 (id=131): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x460700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x741, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x3, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xc, 0x0, 0x1f, 0x3}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1) socket(0x2, 0x1, 0x0) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d', @ANYRES16=0x0], 0x64}, 0x1, 0x0, 0x0, 0x84041}, 0x80448e1) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0xfffffffa) tkill$auto(0x1, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) madvise$auto(0x60b9ff94, 0x3, 0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0xa, 0x0) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) 8.581733932s ago: executing program 3 (id=132): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x204041, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket(0x15, 0x5, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x271c, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.187901029s ago: executing program 1 (id=133): setrlimit$auto(0x2, 0x0) mlockall$auto(0x7) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x3, 0x9}, 0x100007}, 0x31cd3c7c, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_clone(0x21242011, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) prctl$auto(0x8, 0x8, r3, 0x7, 0x3) ioctl$auto(0xffffffffffffffff, 0x7, r0) rt_sigpending$auto(&(0x7f00000000c0), 0x8) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xb, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/21, 0x15) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) 7.129654099s ago: executing program 2 (id=134): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) socket(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf2521"], 0x14}}, 0x4000000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x6, 0x3, 0x300000000000000, 0x80000001, 0x5, 0x6d3c, 0x5, 0x2]}, 0x0) madvise$auto(0x108000, 0x800034, 0xa) unshare$auto(0x40000080) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) open$auto(0x0, 0x49191, 0xff90) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(r2, &(0x7f00000001c0)=@phonet={0x23, 0x1, 0x32, 0x4}, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x9) readv$auto(0x3, 0x0, 0x100000007) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d7b519a855da7ac6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc000cd84061c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1", 0x300) pidfd_open$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/cpumask_requested\x00', 0x2400, 0x0) read$auto(r6, &(0x7f0000002440)='\x00', 0x9) 7.118688012s ago: executing program 3 (id=135): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) socketpair$auto(0x0, 0x2, 0x9, &(0x7f0000000080)=0xbc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x7, 0x8, 0x7, 0x18, 0x42c8b44c, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x40, 0x2, 0x9, 0x111, 0x9, 0x7) open(0x0, 0x22240, 0x16c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ec, 0x14) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x36, 0x1) msync$auto(0x0, 0x2000000005, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000b80), r0) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r3, 0x0, 0xeffd) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) 6.281823604s ago: executing program 0 (id=136): lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x3a) recvfrom$auto(r0, 0x0, 0x8, 0x8f, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x8003) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r1 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r1, &(0x7f0000000000)="32f7519fc625e773bd1a28b81cfb13886baeeb2f29527caf44e6a1cbdc7182b6f4dbcd87", 0x24) mmap$auto(0xfffffffffffffffd, 0x20009, 0x4000000000df, 0x11, 0x401, 0x8000) openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x86840, 0x0) ioctl$auto(0x3, 0x227c, 0x3b) sysfs$auto(0x3, 0x8000000000000000, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) setsockopt$auto(0x3, 0x29, 0x39, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r2, 0x0, 0x1) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) 5.456381984s ago: executing program 1 (id=137): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) socket(0x28, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) madvise$auto(0x108000, 0x800034, 0xa) unshare$auto(0x40000080) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x6c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xb1e}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xa6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r3 = open$auto(&(0x7f0000000200)='./file0\x00', 0x49193, 0xff90) ioctl$auto_PPPIOCGFLAGS(r3, 0x8004745a, 0x0) r4 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_COMEDI_LOCK(r4, 0x6405, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x9) readv$auto(0x3, &(0x7f0000000140)={0x0, 0x9}, 0x100000007) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000c80)="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", 0x300) pidfd_open$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.264834229s ago: executing program 0 (id=138): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd1/queue/scheduler\x00', 0x0, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f00000001c0)="dd69b6440800ac8caf4bdecc30b530ac6ebbff950e1a647d6a08a1b55dde5a409b53830b7803aef33addb33f3a800002000000f179fa3d472949a7264a1b5f", 0x3f) socket(0xa, 0x3, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) read$auto(r1, 0x0, 0x1f3c) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) r3 = gettid() tkill$auto(r3, 0x7) gettid() r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x5452, &(0x7f0000000880)=0x5) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/pcm0p/sub3/info\x00', 0x20080, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r6, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5dc79483a251405ce72a9af15390e93a8760df83859e16320e8d0b1161f13d13afae66b1d900a4958396aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89edac932b8859c767780d65e849700", "e600d778751f5f9e03e1f2b96e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184b8d300c13be6e57970685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08fb733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x5}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x25, 0x7, 0xdf, 0x1a, 0x2, 0xa9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x480, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 3.877729394s ago: executing program 2 (id=139): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa240, 0x15e) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xa00, 0x100) sysfs$auto(0x2, 0x1e, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) connect$auto(0x3, 0x0, 0x55) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x1, 0x5, 0x10000000000eb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x4) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) write$auto_random_fops_random(r1, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44810}, 0x80d0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) shutdown$auto(0x200000003, 0x2) 3.331455099s ago: executing program 3 (id=140): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) getrandom$auto(&(0x7f0000000080)='/dev/adsp1\x00', 0x5, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x20499d, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x108000, 0x800034, 0x200000b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r0) io_uring_enter$auto(r1, 0x1, 0x400065bd, 0x7, 0x0, 0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4113, 0x1011) semctl$auto(0x8000000000000000, 0x92c, 0x10, 0x7) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x204180, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_RESET(r2, 0x5000, 0x0) madvise$auto(0x5, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 3.143374594s ago: executing program 1 (id=141): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x100000000008, 0x8) ioctl$auto(0x3, 0xc0105512, 0x1) ioctl$auto(r0, 0xc0306201, 0x9) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ADD_UEID(r2, 0x0, 0x8092) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x1) mmap$auto(0x9, 0x100, 0x7fff, 0x411, r1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0x10000, 0x5, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r3) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4a}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8004552d, 0xea3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x0, 0x400, 0x7, 0x1005, 0x800006, 0x7, [0x4, 0x2e9, 0x8], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0x0, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x200039) bpf$auto(0xb, 0x0, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 2.84155884s ago: executing program 0 (id=142): r0 = socket(0x10, 0x2, 0x0) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x0, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x10000, 0xa, 0xd6, 0x9b72, r1, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x81, 0x3) rt_sigtimedwait$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f0000000180)=@generic={0xa}, 0x55) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyba\x00', 0x4000, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000240)="b24abea090711edc3312db2eb7977db0e535660de302cbb3d61666a7342b4137f5ee37f3eec034b7f02fb75b6634b03075410200000000000000ca87a05b4f05ee304a8c7f124fda2e5a3790f32c2dd488fbc85d4700a4a77b8385e6a9a65c6eff6d9775d49877753707d364ec90a022164fecdfca90b67fb553b9c891c890bfeaa094fc6412de60d40103304d04eb7a419ca3d53c00fb56cc", 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xfffffeff, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ip6gre0/proto_down\x00', 0x1c2b02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x80002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/card0/pcm0p/oss\x00', 0x441, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x8, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3c) r2 = open(&(0x7f0000000100)='.\x00', 0x100, 0x0) getdents64$auto(r2, 0x0, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 2.458157874s ago: executing program 0 (id=143): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) r0 = memfd_secret$auto(0x0) io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6}) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x1f9e, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4799ecdc, 0x0, 0x0, 0x3287, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x7fff) sendmmsg$auto(r1, &(0x7f00000005c0)={{&(0x7f00000000c0)="0286f4cf9e44865a3c63e7d23844df01a4", 0x4, &(0x7f0000000100)={&(0x7f0000000380)="a0c3dc7210a97c92e854d4615d349a3564590ab36896b5bdad5264171e022d9ee3021125e25127df0c300fb8fa3e38fac735f77e5e6bc15ee0ac3d72f99346646df737b4032b3a299a10acabad0c690e3f5024d07e2e70f3c21250b4f7b30c9055de8ff889dffe74e01b02266348e95f2475aecc077b87e5b5861e16d576708b258a8c6997a751eec3bb0def4f12deea077ed8fc93f16dfccaedd1d314c1a09b7328d0197a86361b6db584d3573e37398f070f4f4430357f80515847388278abc27d7f769e167c87028b85a10a3170", 0x81}, 0x10, &(0x7f00000004c0)="7d671640839c4a97467bd80c4092e0fe99b09876a3016b3f463522e71efd3190704955a5bf45e3fe66d355eae2ace0ab55f2be821a77c0dc59fd3047e458d39142338ca840c3becc25b759990484c82ff5b8433ca96c59db0f23282fbf91bc6c3a4fe265a09494b4c977e1919d328d2ec1cc3b7570f0b8a83100169f4dfeb91ddef5f7640f4a24027d2501f4a12753109809331203de45dc9e6d89e122a50df27fe2a187724a02a49b11b44cca71da57793c17c5cac6236d2867f899f63ee5535cd178f2939495efddea79853eef488684658685a236527026ca4fba1e02d2e3dec11d8dff00d6c6fc2dade09e0b4b555929ed8ddf0976", 0x80, 0x3}, 0x17c00000}, 0x10001, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa801, 0x0) r2 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) read$auto_wakeup_sources_stats_fops_wakeup(r2, &(0x7f0000000040)=""/125, 0x7d) read$auto_wakeup_sources_stats_fops_wakeup(r2, &(0x7f00000001c0)=""/171, 0xab) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000480)=ANY=[@ANYBLOB='$y\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25010000000800090004000000060003002a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) ioctl$auto(0x3, 0x1276, 0x7) socket(0x2b, 0x1, 0x1) 2.092902817s ago: executing program 1 (id=144): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101002, 0x0) write$auto(r0, &(0x7f0000000100)=']]\x00', 0x73) socket(0x2a, 0xa, 0xfffffffe) signalfd$auto(0xffffffff, 0x0, 0x8) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x7, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x800, 0x24, 0x1, 0x66b, 0x0, 0x5}, 0x4f4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket(0xf, 0x3, 0x2) setuid$auto(0x333d) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x6, 0xd, 0x0, 0xc) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0xfffffffffffffffe, 0x8, 0x8003, 0xeb3, 0xfffffffffffffff9, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x22240, 0x154) listxattr$auto(0x0, 0x0, 0xf) socket(0x2a, 0xa, 0xa) 1.218988229s ago: executing program 0 (id=145): r0 = memfd_secret$auto(0x1) read$auto_fops_u32_ro_(r0, &(0x7f0000000000)=""/109, 0x6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r1, &(0x7f00000000c0)='/dev/dma_heap/system\x00', &(0x7f0000000380)="1d4080909aa93cf6e18811747cb7ab188fac88b82819d46b339b520ae8ed1cadce286935c92d753dfd31454de619a6a03125487f5c9b50c352688d3f8083ab6682ad96d4fa13ce1b5e5ac90ccf1792eccc886e0a870a3ae79c64615e95b29ca082101a51217f71d3476485d47d39b90b1620159f218be0e8bcbca9c8e9aef321bf29f7d2b56f6f469237331950eefa08ef8ac9c02ef5e649cc3d651b21c53267e652b47bd4acf9da59e0c984afc182ef19800b9e27cb65fe01326c362bfa15ad63aca624e86a6298bf173d2622bf5ca1416f2995b4a59f17ef3c2e6e26c27e15", 0x7, 0x10001) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x4000000000, 0x7, 0x2]}, 0x1fe, 0xd) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x405040, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af10, r4) bpf$auto(0x5, &(0x7f0000000480)=@bpf_attr_5={@target_ifindex, r0, 0xfff, 0x6, r4, @relative_id=0x7, 0x2}, 0x40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x119, 0x4, 0x0, 0x8) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.144822392s ago: executing program 2 (id=146): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x1000, 0x400, 0x7ff}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f00000037c0)='/proc/self/attr/current\x00', 0x1, 0x0) write$auto_proc_pid_attr_operations_base(r3, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x29, 0x2, 0x0) setsockopt$auto(r4, 0x119, 0x1, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) futex$auto(&(0x7f0000000040)=0x9, 0x5, 0x0, 0x0, 0x0, 0xc0040000) r5 = socket(0x2, 0x3, 0xa) getsockopt$auto(r5, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram9\x00', 0x1c5800, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop5\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r7, 0x4c00, 0x0) r8 = socket(0x2a, 0x2, 0x1) connect$auto(r8, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x57) close_range$auto(0x2, 0x8, 0x0) 605.442734ms ago: executing program 3 (id=147): mmap$auto(0x0, 0x29, 0xdf, 0xeb1, 0x401, 0x10000000008000) r0 = socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) r1 = epoll_create$auto(0x4) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_DONE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000"], 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048c10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4) sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0x4}, @NET_SHAPER_A_LEAVES={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f0000000100)={0x0, 0xffff}, 0x1) r6 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r6, &(0x7f00000035c0)={0x0, 0x4}, 0x9) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="ffff"], 0x14}}, 0x4000808) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0003436547980034c42ccf22243d27bd7400fcdb6ad5"], 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0x10) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032bbd7000fddbdf25020000000800020005000000080002001104000008000200dfc60000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44041) r7 = socket$nl_generic(0x10, 0x3, 0x10) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) epoll_ctl$auto(0x5, 0x1, r7, 0x0) capset$auto(0x0, 0xfffffffffffffffe) epoll_ctl$auto(0x5, 0x3, r7, 0x0) epoll_wait$auto(0x5, 0x0, 0x2, 0xfffffffd) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r8 = open(0x0, 0x100, 0x0) getdents64$auto(r8, 0x0, 0x400) ioctl$auto_TCFLSH2(r8, 0x540b, 0x0) clone$auto(0x2, 0x3, 0x0, 0x0, 0xbd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/010/001\x00', 0xa901, 0x0) 558.383029ms ago: executing program 2 (id=148): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd7\x00', 0x42003, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub6/sw_params\x00', 0x2c8480, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1fc000, 0xffffffffffff82a4, 0x37d6, 0x3, 0xfffff000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/can/rcvlist_all\x00', 0x8000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/10, 0xa) r1 = socket(0x18, 0x6, 0x7) sendmmsg$auto(r1, &(0x7f00000003c0)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xa7}, 0x7, 0x7fffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r5, &(0x7f00000001c0)={{&(0x7f0000000400)="187aa4652fae7e9716371662e685498f4cfaffffffffffffff04e5d835b645f759dba86cf99ec0b37cf0cee3b4c0e183657bb19b4daa5894ca0189f4513b1b3da75c48bcaece31a7b4748d90414435566ce6e2699a56c21b04d5d019f02945438b4d80591649fa1bb71ff47a1d94ab93dcf307d3648d84fb5d6bc9d354a7ac822464942be29fb5700f2badc72e7054a2aa1aeb9d97a6aefc7f225eddf866fb03f19ccd43b65359abd49ca51f4300206a5967", 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x36}, 0x8, &(0x7f00000004c0)="a8f974d97d041a48176fca8cf49e60d936d44f55abca7cd3d96c7115346a55dc67cfbd11084eee758469e27e35a0f0895c02eb72b7c150da375e6cbf1dc031c8fc41402642f0825492cee2dfb0be0e96618d0ffbaea4ec8670313a8718b110e64892b56e8bf9aca7b63eb8ad28992159a891e2d46401697b9cedfbfd99b40cd8d70c95ceae30fbcff4b66e004048a489af79fd8be72f81bb7833ea63b5a220999e4fb8d77e7565b4cabddd1367891f0fb2df656723254033e4f536b92d5d61d9d60b338cc7bb0e0650a8", 0x7, 0x1003}, 0x5}, 0xfffffff3, 0xffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r3, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="b1042d8010"], 0x4d0}}, 0x4000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r1) semctl$auto(0x2, 0x800, 0x7, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r7, 0x0, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) sysfs$auto(0x2, 0x17, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 543.131074ms ago: executing program 0 (id=149): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec28\x00', 0x105000, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pkey_free$auto(0xa835) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram0/queue/stable_writes\x00', 0xc0202, 0x0) write$auto(r1, &(0x7f0000000000)='P^\x00', 0x8) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x101, 0x9, 0xe) personality$auto(0x7) io_uring_setup$auto(0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2504000000070011f72d2e0010"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) ioperm$auto(0x57, 0x200, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x9816}, 0x7f, 0x3) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x0) 180.971312ms ago: executing program 1 (id=150): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r2, &(0x7f0000000380)="8f85fae536edcca3f39f03aef3d45257d646cfbd34b3ccaa6b7752f9cb66a86f5422a8287fa60eb6caefee00c437de2f6209ac81b0191d40bbb9b618c6c7913dda97351421fa54ec8e1970a8f1e4ad94aea37105fa6f0144982e7e21fa0d5b8f8085e95449618d0066cd3d137241dc73fb8bb682209b121a7637dfe9f3899d92e20a18d36832c19ea9bc7a933ea14bc397ef05dea49c577658740dccc019ef18092c43c65da2438ba8a7cdb6be3360c01a7eebe7645822b831ac14887655bfdab8e6782e0e187896810602337bf45f7b4b34881474476442c26c67c8705631a86716f9ea1ad880f86216916777af3473782f95c40ca794e3addfbe1871caf3c435246ca94dfa8b24e58dba8271ae4ba8eaa1e566de5f6c5727508c3e803a00d4abd53f10a35dafef8447762ea87c9b96bafcc199670861725ac462533502014a0ee781f63f0ded4a261355ee0d47201a8e2acf8337ffe86c9402b2f0b0ab2c61c0616d2abfeba60d1641ef5607eecf79a110aa71ca7cec3d21f2918c52b22f756af516501e12e300e186bd077a37dcf447edaa6e6cf122e2c61c3f204b4b3147e94eff431e32dfebfb810f48d19ea031af5775097ecbc2a9e7a85de3cd07c79d4b1540d9fc310f6e95e0b157e36f4d455cf9bc8e30d3d42200cf31965c6bd65b3e6489e1c6e26cb39a526a1275a9e612a075907000d7f82e0f32a9f71b72561af958fa717db5c783091e25de23bcc291e809b339101e04dba36a9334b01dd8a364c0260f13b616535ed595781d32e530922e15b222d0db31f4208ec633672ffba109c3e1a5db8b295d5577aaa1797d875108c097ace2cfb671fbb428f4e51aaf9f890f057003a3dc0b98b0a5c5020303a78f1ea1dd8c961184683ababcaf5d249c4a392918d932b62c10f256c431e2917e1777c66a3b529eba989e83cf0b74b68c7d02cc69c0deb0fb36c43004f8e0dfeb5b53fab21f76771a7aa209552d2d21b698acbe6a0ccc287624bcd024aa7bc229029761750f4c86a574caa4e081012f5075cd25c1f2727ede7a637038a82e6d4b43432d7d1d58c428a71f2b2b64c2f03ee43cee134463a0d6dde9682b7c337098e5405fca9f6df92f1ea79c33e3967b776037c15289b485e2a69e0f29109923d7ecd49a5677f9d8c0c59e05cf4eda4d468b19308aa3c93e478688057568daa82b36cdd0883abf39091c6de874943eb2abbdb10e923806b5442b7d25d73f8d055085f0ee65dd5bcb2d98d630dfc5d6afd8e7a0c2fe8c7c1a58fb97e337584517205ee4a0327a4b8d7b8f632858c57bf178ff0db7d3588679b10f87accbef2503e05c013acc512d73b2ad2674dc315aa141588513e5582d8cb809d0aaf725a6cf31600a773b5649ee1b08b10e82531fe6b83f53b67358102e0c627b44dcbc75491dfbe43917e3d5389a1e9baebb69f018bc4b8761605c09544638f0f1c9cc967148b3eebbbad5ed4a4934c0b770f21a7f86d9bf3d91d90e02dae1758b0b8028f37434ef679527abb555133cfa7aff6cd78860ce9b7cc32b932b2ad713aeb6607bc2d7fc1a0882d1d870f17ea378cc82d40026a84b8550bdc8582efa91a5372526bb5ff7c22c9614aa1fd7602e43afe3f2c6769404a57b31b9a0c211f363c4f569deee99c293dabe703be7c1cb4a6653e620e43f8a7cbea3a9e2f33905a2d64cccf93997ba99a30ff77466387b91e59ec58df062723e6f2d390b6353eb76df34023060f9639f7b6ab1f5f2c48d5a554943196b8a22506d0d76fe0e5e753f64e59dfd2f05bdf1c5f7cac6abe64b4f517302c720c74dfaf594d06e5e4e9fa79b49db7310453a81d7d424cfe941451ef6ed4d09f57259c786fd646e0504e561ecb443811e3a344cdd60b377a486550c0db079694159b15a07a58a30b88375a2a86db71bcb8e4bb8d587543b4b56037871a79f5ffec50f5f6b23a7b6595aa920ab3c1bba408572ebf34aece700ca2e743bb29d87f320494be11cf650bde6893eddd3badf9a11eb7c9f54f17e3ec8e0423d123bf5f71e24655c1806f6c3ed3733250e7e1ceeb4c8c43bf7adc650dcae99e089f88aab4729f2a0585323f28b0fbb1febef4b7edfc750993a5bd1e29433b14d8f0cead123f8f01b96c3ac8dd5fbe59f6c6aa1fd0bbc9d9cfa89066236b73abb565d9d0be6d915783fa8d94d57b13a7555535ec85a939e2769477e95d22ad1023c8a34f9232b93ae648c2e9f93396ac5c51fae136caeb01174196c1f14863981d26d82d5d4ae8c5d0b6c16f3e862128156ce744d7b71942f3f3fa8cb673fde92c12903a22defa8c22acd8c2c3d1fcf0fe2ef534eba7fe54db56cdb7710cb9b3a2bc3f4797d174cf9f524ce5c8bd6af9d2f27d2765bb670f79671098db76188aab45c1bad358daea7337f1c56527697a2b8d412f11226a7373589f874676603b5fa0ea5c5393a19810450dbc1e181e5bf064557816e74bf064b772a8420cfbf9e11b166df8285428153da1de2d5f7f8a6b66dfb8493b6d2af8bd1ab6e58206238868d4ee187887a4046dd7d4067d88e87884f9735c6807d2470b30f12c9e997d93ae244c03a9903cc6074abd281490a05046dea2e5dc2a7fd60597ef22ced8eb408df8a3836bd1bbe877327cb9454eb1f1fd09d8892c5748427d217fd3e38b485841dee3c9a75662900ae9df66b0fdb276e353948ddaec67ce6f9b6cd715b16bc5debe4c6a78106e3b12372df5c72b7507dace12faecaf4acad6dc954b297e3601798692c27b5bd1681c7298d035a0af561d027aaf9ee6335fc6fcb7259cae83e4218d3d8017191cadeebe2531e871240d0b54f2a37252d636eeb50a6f056bd985d8d3978cbb955dbfd9b35110d5eac9258f14c77cbff259772d219e5c317350ae2ab6519a8f913ebb5829498a58b4670b7a37c03a94bc372ee0c2d59ee01b9177f12fadf5eb920d57793a59b21840882c8866124878a333d2832563f0532969a12ef3e0e264ddd3dc00de754ee118dfa1eaadc96f5d35916478dd55e82cf10417cbcdc8362a73eb32d01206fae78ae09d9e2e649cf399dd0707f4370213c1118b2a22e5d74705d2a0915984a07dc21dcdc0bff517457927bfc1e42876696f38abd0081b5dd3b270019c360b2b7c4193a2e8be6e49dbce4fd55299291cde1edcb1f64725599a2b08d03889b089228daca2d96668d57e6be4636ba62f31ebac13d03c52fcc41841e23873d47db7d9ff4ecbf2f03942e3bb1ec4d0729ed73960861ef749e810579a658178f286b5c5abaeddef59d773f4f304874aef7fbffa840407f5c68b63dc2cdc8c2c9ce0fdbd3c1bf5dd79368531ec06b4da217c56ae1221a342f65e4aaca0c861846142c37fdd84d070d73d2c4f9fc690f6b7b3f75504a13886d8b641e6f14a0f3c5ce3d371056989014f2a204dfccae673c13e9594651e8ec1da321e2d206fe441b51c5b92c4116869dd18b1f1b6dbd848808c53795902abb6644350e90151aee23e9d7db52b5135a5a89147b51bf4ed330c09fea6b499d571dc7805a04e5e4acf320fea0a8095c0058ad50035f1e9786ba560d64a8e537b5125c0d0e5ec9706aa89abf66d60a3feae4f4dd963630cb905091fa7360ff0b85285b2b4aeb5132b376942c477d8c6a31171e987068afa3c7e20181364499fd05b2cd9ee9d01a0f345701158311e911f6ce87a0db6b263cb41370be65996b1e4c964f5e22a9fabd0783b4252417737b0b80a630e3cf627f59312bd7446c07baf96d261ccbd8e4b2eca40421cbbbc102b7047035b0e2e202ac211fbc3ef028d6ab8bf3505c25b544410cd7346e62c91a6e4d422bac15102e309b5b56f750c75405c4abf7d9fd592eca6bdcf6d7c58fafd598fc3a0868a75da8c3826ca6ec9332d037deecbcb904ec50f3a06f17987522803d6697baf8d45663ef63423ab1c0bcff2fb621c0618a27ac1e045de98585c142b463d165a1d9c58fac2f01565a60c8406c9ad118be374a8ff10349be8c9a2d976b0df9e82ee9a75c4607610e3548abcea46cb83a21f5b22c63ea94aa100ec6936b3f2584a81750c9974a20d0444eecd6259ac924f98eae79fbefed5e59852b4e502b7d9ad39547c4317027bb2c7963efaa02acaa8a27790e819d8832fe5ae6af96e4666cfb215860e4a003ca0cfc405f1fbaaef87daba5cc7b30fa9000af86ad3ff3476e1c9003e759d24216907cfd49d432ecf6b89c287544c79354cf9ece61799770f1d667689946ab514721d9181c60fd1ba91d089b227601b97dfd842446c2dae3cb89676c2963ddf9b569816140235e496ac1f61972b5b41d6f7cc84659d0bbd53d2e1e0eb0b5e43cf37ab0402887ea71617abbc7e978840b530b6dbb23ca801523d80d0a7a5090edb5072af24b5eec68fdcd13959b7d44a80a189149047cf4701758b97c6d83704f3c8f47c4d9f0794e834e1981f96457b1f6da8438d1ca02310055c51eff0bf6624e5d640b53aa7b7569ec0648be595db8a54796aa7a0e427214592def5c1003d3cdcbfc60987d35ce36860a55b062fa2314b31df20fe6bf95191eba5fb83c399593fc1efc1cfd9e15f069d998869c7ff65a890b887df00515bc5837f55aa01c0c005c8a973b88956248d589540c9e67760d0824901d8d96adfe8c1fb5bc42323fa9a5d42faf3a12360881cda97800984b5b7f84f0ae834e0a5f7bf027b4ce0cac6e36d1ce0b04c894d3965ce97a8cabbb01832985d925c1f2d908d8638b6be52bf8e73d3df202b63dcf28c55dfe1bbfa8862a2aaa2fb1f6a660d1247785ffc07e5acad49078ba9eb5d1a280669b71e159d4c1518a793cc2def05c14a82e2965ad0b57a3c5a56b9c1bef379f55100254b4efe98bfb7661a363a45294638ec6bb6cededf3654fe6c67c930a0c595246a4ade3dc928fccd8a2ba774dd6d4edfb82ca68639ff417a9b0e48fa8cc335ba82a98ef19276d4c477a38e985b09ec9f6c43a23d3edfb33809caf9fe3d14677f7294e0a5b423a2e20ee015e692ee938aca13182094983b0d73c8e2ba931eb30ec3cc33f582b826fa28181529984b5034b43aedbd87dcdc5e06f44c3fba3656c7c61607c0d053247a274b96b3bfff62f25def3dddb9b46e6d6406b0fe2a3fbda8c2462297c0b84ffcde582c63694eec0db157511088b6acd8efb616857ea962c3a1c30fb22112d613390dbe3f0b0301b7faed4d48502791263ae2459ab23fd21b235b9b87813c68f2581c0f4fc411aa5a0ef09bc19dbd65a63c9a131b7e72fe1d26ec5847f36f7e24356ded54c8779dcc296e13c2ba16b804526250890cfd03944ac79a4ec9c71be1adbb03955c6cb3e510b78f554257b18c8bde325f0cd6ef727ae6982b97e670975f2b109cdd32d567acbf71a07bbdbb863ef258869bede4c32d0b6e49ffb5869706d56ade508ea286a82d0bf5e54487f0db871ea2c310a5182429d38e761fbbecaf62c9cfaf1fe06888862bc06a441bbdd05bc8ef48f0c94969bebfc016bb8d37c843ff72f97603d0cccce08fdacbabe1203ed0393e00dee592771f596f83aed1b995adc587e9f6538e68b66ccf01c3229c8647240d92abdc63ab057fd0adb9fd356882c310faf6906de2da0f6b506c9456250e8b95a3f3565487633e6c30b88510a2a73562f6c2ea251c8905810afb280f9288056b222ebbe1c6ba28eb61aa8422316821c38fdf99ff1b7d048b141dd5b36cbe7d8aad6cd9305fb6181509bddbb2c6135ba535c34b2949c57761fcd4dd0f286bc15272574fa28afd3ac9787b35a1d66735f3dabd9cefd38198493130219", 0x1000) open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20) sendfile$auto(0x6, 0x3, 0x0, 0xc01) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200003, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 3 (id=151): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) listen$auto(0x3, 0x83) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x100) ppoll$auto(0x0, 0x6, 0x0, 0x0, 0x8) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) read$auto_memtype_fops_memtype(r2, &(0x7f0000000240)=""/134, 0x86) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES64=r3, @ANYBLOB="0800010026f12107cac0b276aa70982fa766520008000200", @ANYRES32=0x9, @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x4841}, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x20, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MACSEC_ATTR_OFFLOAD={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @fd=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 65.388978][ T5819] cgroup: Unknown subsys name 'net' [ 65.497564][ T5819] cgroup: Unknown subsys name 'cpuset' [ 65.505996][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.891028][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.617427][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.630266][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.646897][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.648681][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.663340][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.671253][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.674378][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.679888][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.687867][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.693957][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.700136][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.708840][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.715228][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.722192][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.734545][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.742708][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.743239][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.753547][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.757569][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.785486][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.803430][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.827397][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.835058][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.842871][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.190523][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 69.230038][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.255833][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.308581][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 69.377969][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.386445][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.394243][ T5835] bridge_slave_0: entered allmulticast mode [ 69.401017][ T5835] bridge_slave_0: entered promiscuous mode [ 69.449200][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.456466][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.464618][ T5835] bridge_slave_1: entered allmulticast mode [ 69.471223][ T5835] bridge_slave_1: entered promiscuous mode [ 69.529329][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.537101][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.544408][ T5829] bridge_slave_0: entered allmulticast mode [ 69.551032][ T5829] bridge_slave_0: entered promiscuous mode [ 69.564520][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.571641][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.578901][ T5837] bridge_slave_0: entered allmulticast mode [ 69.585791][ T5837] bridge_slave_0: entered promiscuous mode [ 69.597274][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.607211][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.614459][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.621613][ T5829] bridge_slave_1: entered allmulticast mode [ 69.629217][ T5829] bridge_slave_1: entered promiscuous mode [ 69.641774][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.648991][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.657090][ T5837] bridge_slave_1: entered allmulticast mode [ 69.664155][ T5837] bridge_slave_1: entered promiscuous mode [ 69.672949][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.708247][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.715539][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.722673][ T5828] bridge_slave_0: entered allmulticast mode [ 69.730398][ T5828] bridge_slave_0: entered promiscuous mode [ 69.761994][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.771322][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.781676][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.789076][ T5828] bridge_slave_1: entered allmulticast mode [ 69.798397][ T5828] bridge_slave_1: entered promiscuous mode [ 69.807359][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.819957][ T5835] team0: Port device team_slave_0 added [ 69.830206][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.857918][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.868420][ T5835] team0: Port device team_slave_1 added [ 69.914470][ T5829] team0: Port device team_slave_0 added [ 69.922161][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.936899][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.949088][ T5837] team0: Port device team_slave_0 added [ 69.972210][ T5829] team0: Port device team_slave_1 added [ 69.979649][ T5837] team0: Port device team_slave_1 added [ 69.992512][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.999626][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.025881][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.039590][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.046659][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.073151][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.101766][ T5828] team0: Port device team_slave_0 added [ 70.130147][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.139977][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.168833][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.181933][ T5828] team0: Port device team_slave_1 added [ 70.188345][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.195452][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.221732][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.234930][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.241898][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.267913][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.301215][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.308319][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.335270][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.372059][ T5835] hsr_slave_0: entered promiscuous mode [ 70.378842][ T5835] hsr_slave_1: entered promiscuous mode [ 70.406276][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.413445][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.439999][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.476190][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.483260][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.509271][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.530484][ T5829] hsr_slave_0: entered promiscuous mode [ 70.537424][ T5829] hsr_slave_1: entered promiscuous mode [ 70.543584][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.551338][ T5829] Cannot create hsr debugfs directory [ 70.588905][ T5837] hsr_slave_0: entered promiscuous mode [ 70.595756][ T5837] hsr_slave_1: entered promiscuous mode [ 70.601721][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.609387][ T5837] Cannot create hsr debugfs directory [ 70.703042][ T5828] hsr_slave_0: entered promiscuous mode [ 70.709791][ T5828] hsr_slave_1: entered promiscuous mode [ 70.716759][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.724523][ T5828] Cannot create hsr debugfs directory [ 70.856908][ T5832] Bluetooth: hci0: command tx timeout [ 70.862824][ T5842] Bluetooth: hci1: command tx timeout [ 70.864530][ T5833] Bluetooth: hci2: command tx timeout [ 70.909692][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.924068][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.933948][ T5833] Bluetooth: hci3: command tx timeout [ 70.959490][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.979250][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.020750][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.038800][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.050625][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.072500][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.117782][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.146265][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.169159][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.189625][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.217605][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.238274][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.250901][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.272974][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.360674][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.426039][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.449841][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.457190][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.472255][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.498475][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.505650][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.526957][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.575564][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.598663][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.619362][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.626513][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.635505][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.642589][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.662979][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.670239][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.690063][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.726673][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.733852][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.738654][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.754168][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.760168][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.821094][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.828268][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.865964][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.873155][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.942360][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.071702][ T5829] veth0_vlan: entered promiscuous mode [ 72.117678][ T5829] veth1_vlan: entered promiscuous mode [ 72.195519][ T5829] veth0_macvtap: entered promiscuous mode [ 72.218436][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.229793][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.242153][ T5829] veth1_macvtap: entered promiscuous mode [ 72.285711][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.326203][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.357149][ T5835] veth0_vlan: entered promiscuous mode [ 72.380572][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.389771][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.400397][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.409527][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427825][ T5835] veth1_vlan: entered promiscuous mode [ 72.452336][ T5837] veth0_vlan: entered promiscuous mode [ 72.478829][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.500059][ T5837] veth1_vlan: entered promiscuous mode [ 72.577271][ T5835] veth0_macvtap: entered promiscuous mode [ 72.595433][ T5835] veth1_macvtap: entered promiscuous mode [ 72.614225][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.616822][ T5837] veth0_macvtap: entered promiscuous mode [ 72.622226][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.633609][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.653852][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.665778][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.702663][ T5828] veth0_vlan: entered promiscuous mode [ 72.708988][ T5837] veth1_macvtap: entered promiscuous mode [ 72.721164][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.732619][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.743805][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.764487][ T5828] veth1_vlan: entered promiscuous mode [ 72.773643][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.782383][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.792361][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.801167][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.817901][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.823576][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.836796][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.845725][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.856594][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.867250][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.879016][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.916838][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.931129][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.934503][ T5833] Bluetooth: hci2: command tx timeout [ 72.945930][ T5842] Bluetooth: hci1: command tx timeout [ 72.946515][ T5833] Bluetooth: hci0: command tx timeout [ 72.952187][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.969809][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.981023][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.008722][ T5828] veth0_macvtap: entered promiscuous mode [ 73.013915][ T5833] Bluetooth: hci3: command tx timeout [ 73.030336][ T5828] veth1_macvtap: entered promiscuous mode [ 73.038981][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.043957][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.062598][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.071766][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.083631][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.148764][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.169613][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.207400][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.220273][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.231501][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.248219][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.259567][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.319724][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.332593][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.335368][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.356081][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.356615][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.383977][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.393168][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.406873][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.425955][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.437053][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.448055][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.483931][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.492684][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.503998][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.512735][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.584645][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.593830][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.640530][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.672561][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.781816][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.789797][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.799518][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.822274][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.976346][ T5899] process 'syz.2.3' launched ':,' with NULL argv: empty string added [ 74.038024][ T5897] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.063301][ T5897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.658266][ T5899] vivid-003: ================= START STATUS ================= [ 74.694251][ T5899] vivid-003: Radio HW Seek Mode: Bounded [ 74.719691][ T5899] vivid-003: Radio Programmable HW Seek: false [ 74.749705][ T5899] vivid-003: RDS Rx I/O Mode: Block I/O [ 74.760216][ T5899] vivid-003: Generate RBDS Instead of RDS: false [ 74.770347][ T5899] vivid-003: RDS Reception: true [ 74.841251][ T5899] vivid-003: RDS Program Type: 0 inactive [ 74.885704][ T5899] vivid-003: RDS PS Name: inactive [ 74.913259][ T5899] vivid-003: RDS Radio Text: inactive [ 74.918812][ T5899] vivid-003: RDS Traffic Announcement: false inactive [ 74.999543][ T5899] vivid-003: RDS Traffic Program: false inactive [ 75.013715][ T5833] Bluetooth: hci0: command tx timeout [ 75.013744][ T5832] Bluetooth: hci1: command tx timeout [ 75.019135][ T5833] Bluetooth: hci2: command tx timeout [ 75.060384][ T5899] vivid-003: RDS Music: false inactive [ 75.068574][ T5899] vivid-003: ================== END STATUS ================== [ 75.093717][ T5833] Bluetooth: hci3: command tx timeout [ 75.315383][ T5919] HfR: entered promiscuous mode [ 75.331241][ T5919] binder: 5917:5919 ioctl 2284 ffffffffffffffff returned -22 [ 76.369972][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 76.489096][ T5939] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 77.093921][ T5832] Bluetooth: hci2: command tx timeout [ 77.100124][ T5842] Bluetooth: hci0: command tx timeout [ 77.105788][ T5833] Bluetooth: hci1: command tx timeout [ 77.173959][ T5833] Bluetooth: hci3: command tx timeout [ 78.692238][ T1204] cfg80211: failed to load regulatory.db [ 79.391841][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 79.469891][ T5975] hsr_slave_0: entered allmulticast mode [ 81.283818][ T5992] netlink: 338 bytes leftover after parsing attributes in process `syz.0.19'. [ 81.346695][ T5992] netlink: 338 bytes leftover after parsing attributes in process `syz.0.19'. [ 81.414292][ T5992] netlink: 98 bytes leftover after parsing attributes in process `syz.0.19'. [ 81.473654][ T5992] veth0_macvtap: left promiscuous mode [ 81.536761][ T5981] [U] [ 81.539689][ T5981] [U] [ 81.542424][ T5981] [U] [ 81.545245][ T5981] [U] [ 81.583334][ T5981] [U] [ 81.586109][ T5981] [U] [ 81.588847][ T5981] [U] [ 81.591760][ T5981] [U] [ 81.654439][ T5981] [U] [ 81.657295][ T5981] [U] [ 81.660033][ T5981] [U] [ 81.662771][ T5981] [U] [ 81.779249][ T5981] [U] [ 81.782025][ T5981] [U] [ 81.784772][ T5981] [U] [ 81.787507][ T5981] [U] [ 81.848128][ T5981] [U] [ 81.850898][ T5981] [U] [ 81.853636][ T5981] [U] [ 81.856367][ T5981] [U] [ 81.871666][ T5981] [U] [ 81.874451][ T5981] [U] [ 81.877191][ T5981] [U] [ 81.879916][ T5981] [U] [ 81.903559][ T5981] [U] [ 81.906344][ T5981] [U] [ 81.909077][ T5981] [U] [ 81.911861][ T5981] [U] [ 81.971744][ T5981] [U] [ 81.974515][ T5981] [U] [ 81.977251][ T5981] [U] [ 81.979982][ T5981] [U] [ 82.032038][ T5981] [U] [ 82.642301][ T6002] ima: policy update failed [ 82.693255][ T29] audit: type=1802 audit(1737158298.569:2): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.23" res=0 errno=0 [ 84.122369][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 84.507011][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 87.716047][ T6058] Zero length message leads to an empty skb syzkaller syzkaller login: [ 88.399285][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'. [ 88.446266][ T6066] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 88.856981][ T6073] block mtdblock0: the capability attribute has been deprecated. [ 89.643488][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 89.804749][ T6100] mmap: syz.1.43 (6100) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.740785][ T6112] FAULT_INJECTION: forcing a failure. [ 90.740785][ T6112] name failslab, interval 1, probability 0, space 0, times 1 [ 90.815043][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.3.45 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 90.825622][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 90.835727][ T6112] Call Trace: [ 90.839032][ T6112] [ 90.841992][ T6112] dump_stack_lvl+0x16c/0x1f0 [ 90.846722][ T6112] should_fail_ex+0x497/0x5b0 [ 90.851445][ T6112] ? fs_reclaim_acquire+0xae/0x150 [ 90.856610][ T6112] should_failslab+0xc2/0x120 [ 90.861336][ T6112] __kmalloc_cache_noprof+0x68/0x420 [ 90.866669][ T6112] ? __pfx_snd_timer_user_open+0x10/0x10 [ 90.872352][ T6112] snd_timer_user_open+0x6b/0x180 [ 90.877427][ T6112] snd_open+0x1fe/0x450 [ 90.881629][ T6112] ? __pfx_snd_open+0x10/0x10 [ 90.886607][ T6112] chrdev_open+0x237/0x6a0 [ 90.886645][ T6112] ? __pfx_apparmor_file_open+0x10/0x10 [ 90.886674][ T6112] ? __pfx_chrdev_open+0x10/0x10 [ 90.886711][ T6112] do_dentry_open+0xf59/0x1ea0 [ 90.906612][ T6112] ? __pfx_chrdev_open+0x10/0x10 [ 90.911604][ T6112] ? inode_permission+0xdd/0x5f0 [ 90.916606][ T6112] vfs_open+0x82/0x3f0 [ 90.920743][ T6112] ? may_open+0x1f2/0x400 [ 90.925118][ T6112] path_openat+0x1e6a/0x2d60 [ 90.929759][ T6112] ? __pfx_path_openat+0x10/0x10 [ 90.934751][ T6112] ? __pfx___lock_acquire+0x10/0x10 [ 90.939996][ T6112] ? lock_acquire.part.0+0x11b/0x380 [ 90.945333][ T6112] ? find_held_lock+0x2d/0x110 [ 90.950159][ T6112] do_filp_open+0x20c/0x470 [ 90.954717][ T6112] ? __pfx_do_filp_open+0x10/0x10 [ 90.959792][ T6112] ? find_held_lock+0x2d/0x110 [ 90.964639][ T6112] ? alloc_fd+0x41f/0x760 [ 90.969054][ T6112] do_sys_openat2+0x17a/0x1e0 [ 90.973783][ T6112] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.979028][ T6112] ? __sys_sendmsg+0x19a/0x220 [ 90.983847][ T6112] __x64_sys_openat+0x175/0x210 [ 90.988754][ T6112] ? __pfx___x64_sys_openat+0x10/0x10 [ 90.994189][ T6112] do_syscall_64+0xcd/0x250 [ 90.998743][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.004689][ T6112] RIP: 0033:0x7f646ad85d29 [ 91.009146][ T6112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.029068][ T6112] RSP: 002b:00007f646bc41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.037536][ T6112] RAX: ffffffffffffffda RBX: 00007f646af75fa0 RCX: 00007f646ad85d29 [ 91.045550][ T6112] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 91.053566][ T6112] RBP: 00007f646ae01b08 R08: 0000000000000000 R09: 0000000000000000 [ 91.061577][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.069585][ T6112] R13: 0000000000000000 R14: 00007f646af75fa0 R15: 00007fffc0424458 [ 91.077613][ T6112] [ 91.449142][ T6115] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.720077][ T6125] Invalid ELF header magic: != ELF [ 92.926774][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 92.957271][ T6133] erspan0: entered allmulticast mode [ 93.044292][ T6128] geneve1: entered allmulticast mode [ 93.843841][ T29] audit: type=1326 audit(1737158309.729:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.3.49" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f646ad85d29 code=0x0 [ 93.912445][ T6144] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 94.593924][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 94.774434][ T6155] nbd: socks must be embedded in a SOCK_ITEM attr [ 94.831853][ T6155] block nbd0: shutting down sockets [ 95.647966][ T6173] Invalid ELF header magic: != ELF [ 96.414183][ T6182] Invalid ELF header magic: != ELF [ 96.688305][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.57'. [ 96.870400][ T6175] bond0: entered allmulticast mode [ 96.963261][ T6175] bond_slave_0: entered allmulticast mode [ 97.003156][ T6175] bond_slave_1: entered allmulticast mode [ 97.972268][ T29] audit: type=1800 audit(1737158313.839:4): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.63" name="version" dev="configfs" ino=8172 res=0 errno=0 [ 101.067664][ T6236] binder: 6235:6236 ioctl c0105512 1 returned -22 [ 101.078622][ T6234] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 101.238352][ T6238] netlink: 338 bytes leftover after parsing attributes in process `syz.3.68'. [ 101.400972][ T6240] netlink: 338 bytes leftover after parsing attributes in process `syz.3.68'. [ 103.281265][ T6257] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 104.097337][ T6269] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.622921][ T6295] ======================================================= [ 105.622921][ T6295] WARNING: The mand mount option has been deprecated and [ 105.622921][ T6295] and is ignored by this kernel. Remove the mand [ 105.622921][ T6295] option from the mount to silence this warning. [ 105.622921][ T6295] ======================================================= [ 108.190178][ T6335] bridge0: port 3(team0) entered blocking state [ 108.319102][ T6335] bridge0: port 3(team0) entered disabled state [ 108.434990][ T6335] team0: entered allmulticast mode [ 108.504868][ T6335] team_slave_0: entered allmulticast mode [ 108.567228][ T6335] team_slave_1: entered allmulticast mode [ 108.667349][ T6335] team0: entered promiscuous mode [ 108.703191][ T6335] team_slave_0: entered promiscuous mode [ 108.759954][ T6335] team_slave_1: entered promiscuous mode [ 108.794102][ T6335] bridge0: port 3(team0) entered blocking state [ 108.800751][ T6335] bridge0: port 3(team0) entered forwarding state [ 109.773470][ T6350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 113.573454][ T6400] FAULT_INJECTION: forcing a failure. [ 113.573454][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 113.611308][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.1.103 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 113.621968][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 113.632067][ T6400] Call Trace: [ 113.635388][ T6400] [ 113.638358][ T6400] dump_stack_lvl+0x16c/0x1f0 [ 113.643081][ T6400] should_fail_ex+0x497/0x5b0 [ 113.647811][ T6400] ? fs_reclaim_acquire+0xae/0x150 [ 113.652967][ T6400] should_failslab+0xc2/0x120 [ 113.657697][ T6400] __kmalloc_noprof+0xce/0x4f0 [ 113.662504][ T6400] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 113.668178][ T6400] ? tomoyo_realpath_from_path+0xbf/0x710 [ 113.673945][ T6400] ? rcu_is_watching+0x12/0xc0 [ 113.678765][ T6400] tomoyo_realpath_from_path+0xbf/0x710 [ 113.684371][ T6400] tomoyo_check_open_permission+0x2ad/0x3c0 [ 113.690313][ T6400] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 113.696783][ T6400] ? lock_acquire.part.0+0x11b/0x380 [ 113.702137][ T6400] ? __pfx_hook_file_open+0x10/0x10 [ 113.707568][ T6400] ? lock_acquire+0x2f/0xb0 [ 113.712100][ T6400] ? mnt_get_write_access+0x6a/0x300 [ 113.717431][ T6400] tomoyo_file_open+0x6b/0x90 [ 113.722133][ T6400] security_file_open+0x84/0x1e0 [ 113.727084][ T6400] do_dentry_open+0x57e/0x1ea0 [ 113.731869][ T6400] vfs_open+0x82/0x3f0 [ 113.735952][ T6400] ? may_open+0x1f2/0x400 [ 113.740322][ T6400] path_openat+0x1e6a/0x2d60 [ 113.744934][ T6400] ? __pfx_path_openat+0x10/0x10 [ 113.749884][ T6400] ? __pfx___lock_acquire+0x10/0x10 [ 113.755089][ T6400] ? lock_acquire.part.0+0x11b/0x380 [ 113.760391][ T6400] ? find_held_lock+0x2d/0x110 [ 113.765174][ T6400] do_filp_open+0x20c/0x470 [ 113.769694][ T6400] ? __pfx_do_filp_open+0x10/0x10 [ 113.774734][ T6400] ? find_held_lock+0x2d/0x110 [ 113.779542][ T6400] ? alloc_fd+0x41f/0x760 [ 113.783896][ T6400] do_sys_openat2+0x17a/0x1e0 [ 113.788599][ T6400] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.793828][ T6400] ? __pfx___might_resched+0x10/0x10 [ 113.799135][ T6400] __x64_sys_openat+0x175/0x210 [ 113.804009][ T6400] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.809408][ T6400] do_syscall_64+0xcd/0x250 [ 113.813931][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.819842][ T6400] RIP: 0033:0x7f90e6f85d29 [ 113.824272][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.843890][ T6400] RSP: 002b:00007f90e7cfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.852312][ T6400] RAX: ffffffffffffffda RBX: 00007f90e7175fa0 RCX: 00007f90e6f85d29 [ 113.860375][ T6400] RDX: 0000000000040001 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 113.868352][ T6400] RBP: 00007f90e7001b08 R08: 0000000000000000 R09: 0000000000000000 [ 113.876329][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.884308][ T6400] R13: 0000000000000000 R14: 00007f90e7175fa0 R15: 00007fff4fb0e118 [ 113.892306][ T6400] [ 114.003150][ T6400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.455364][ T6413] erspan0: entered allmulticast mode [ 115.654639][ T6422] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 116.081996][ T6426] Invalid ELF header magic: != ELF [ 116.153777][ T6417] kafs: addr_prefs: Invalid Command [ 116.308662][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 118.742327][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 118.812830][ T6446] netlink: 85 bytes leftover after parsing attributes in process `syz.1.114'. [ 118.854951][ T6450] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 119.277990][ T6454] netlink: 342 bytes leftover after parsing attributes in process `syz.0.116'. [ 119.500471][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 121.743116][ T29] audit: type=1326 audit(4294967299.100:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.2.123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f93f85d29 code=0x0 [ 121.796674][ T6482] Process accounting resumed [ 122.958691][ T6493] Invalid ELF header magic: != ELF [ 124.403277][ T6511] Process accounting resumed [ 125.639907][ T6532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 125.649082][ T6532] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 128.864752][ T6553] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 130.975273][ T6559] [U] [ 130.978037][ T6559] [U] [ 130.981593][ T6559] [U] [ 130.981649][ T6559] [U] [ 130.982534][ T6559] [U] [ 130.982576][ T6559] [U] [ 130.982613][ T6559] [U] [ 130.982651][ T6559] [U] [ 130.982824][ T6559] [U] [ 130.982867][ T6559] [U] [ 130.982909][ T6559] [U] [ 130.982950][ T6559] [U] [ 130.985675][ T6560] kexec: Could not allocate control_code_buffer [ 130.993208][ T6559] [U] [ 130.993255][ T6559] [U] [ 130.993295][ T6559] [U] [ 130.993332][ T6559] [U] [ 130.993519][ T6559] [U] [ 130.993552][ T6559] [U] [ 130.993585][ T6559] [U] [ 130.993618][ T6559] [U] [ 130.993781][ T6559] [U] [ 130.993823][ T6559] [U] [ 130.993863][ T6559] [U] [ 130.993901][ T6559] [U] [ 130.994076][ T6559] [U] [ 130.994116][ T6559] [U] [ 130.994158][ T6559] [U] [ 130.994193][ T6559] [U] [ 130.994360][ T6559] [U] [ 130.994399][ T6559] [U] [ 130.994439][ T6559] [U] [ 130.994478][ T6559] [U] [ 130.994643][ T6559] [U] [ 130.994685][ T6559] [U] [ 130.994724][ T6559] [U] [ 130.994773][ T6559] [U] [ 130.994952][ T6559] [U] [ 130.994994][ T6559] [U] [ 130.995034][ T6559] [U] [ 130.995073][ T6559] [U] [ 130.995238][ T6559] [U] [ 130.995277][ T6559] [U] [ 130.995317][ T6559] [U] [ 130.995358][ T6559] [U] [ 130.995524][ T6559] [U] [ 130.995564][ T6559] [U] [ 130.995603][ T6559] [U] [ 130.995645][ T6559] [U] [ 130.995822][ T6559] [U] [ 130.995866][ T6559] [U] [ 130.995908][ T6559] [U] [ 130.995944][ T6559] [U] [ 130.996109][ T6559] [U] [ 130.996141][ T6559] [U] [ 130.996180][ T6559] [U] [ 130.996220][ T6559] [U] [ 130.996392][ T6559] [U] [ 130.996431][ T6559] [U] [ 130.996471][ T6559] [U] [ 130.996511][ T6559] [U] [ 130.996675][ T6559] [U] [ 130.996719][ T6559] [U] [ 130.996761][ T6559] [U] [ 130.996814][ T6559] [U] [ 130.996997][ T6559] [U] [ 130.997041][ T6559] [U] [ 130.997085][ T6559] [U] [ 130.997128][ T6559] [U] [ 130.997305][ T6559] [U] [ 130.997344][ T6559] [U] [ 130.997385][ T6559] [U] [ 130.997425][ T6559] [U] [ 130.997594][ T6559] [U] [ 130.997636][ T6559] [U] [ 130.997675][ T6559] [U] [ 130.997717][ T6559] [U] [ 130.997904][ T6559] [U] [ 130.997947][ T6559] [U] [ 130.997991][ T6559] [U] [ 130.998036][ T6559] [U] [ 130.998214][ T6559] [U] [ 130.998256][ T6559] [U] [ 130.998299][ T6559] [U] [ 130.998342][ T6559] [U] [ 130.998510][ T6559] [U] [ 130.998549][ T6559] [U] [ 130.998590][ T6559] [U] [ 130.998629][ T6559] [U] [ 130.998807][ T6559] [U] [ 130.998847][ T6559] [U] [ 130.998889][ T6559] [U] [ 130.998932][ T6559] [U] [ 130.999097][ T6559] [U] [ 130.999140][ T6559] [U] [ 130.999179][ T6559] [U] [ 130.999215][ T6559] [U] [ 130.999384][ T6559] [U] [ 130.999424][ T6559] [U] [ 130.999481][ T6559] [U] [ 130.999523][ T6559] [U] [ 130.999704][ T6559] [U] [ 130.999746][ T6559] [U] [ 130.999792][ T6559] [U] [ 130.999831][ T6559] [U] [ 131.000004][ T6559] [U] [ 131.000043][ T6559] [U] [ 131.000082][ T6559] [U] [ 131.000125][ T6559] [U] [ 131.000278][ T6559] [U] [ 131.000312][ T6559] [U] [ 131.000350][ T6559] [U] [ 131.000384][ T6559] [U] [ 131.000543][ T6559] [U] [ 131.000582][ T6559] [U] [ 131.000620][ T6559] [U] [ 131.000658][ T6559] [U] [ 131.000821][ T6559] [U] [ 131.000853][ T6559] [U] [ 131.000886][ T6559] [U] [ 131.000918][ T6559] [U] [ 131.119176][ T6559] [U] [ 131.499343][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 132.023243][ T6585] binder: 6584:6585 ioctl c0105512 1 returned -22 [ 133.185359][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.191711][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.024925][ T6612] futex_wake_op: syz.2.146 tries to shift op by 64; fix this program [ 134.132698][ T6612] loop5: detected capacity change from 0 to 8192 [ 134.347038][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 135.198811][ T6628] Invalid ELF header magic: != ELF [ 135.233961][ T6624] [ 135.236345][ T6624] ====================================================== [ 135.243386][ T6624] WARNING: possible circular locking dependency detected [ 135.250600][ T6624] 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 Not tainted [ 135.257727][ T6624] ------------------------------------------------------ [ 135.264762][ T6624] syz.0.149/6624 is trying to acquire lock: [ 135.270670][ T6624] ffff8880256a85d8 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0xe2/0x170 [ 135.279861][ T6624] [ 135.279861][ T6624] but task is already holding lock: [ 135.287244][ T6624] ffff8880256a80a8 (&q->q_usage_counter(io)){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 135.297211][ T6624] [ 135.297211][ T6624] which lock already depends on the new lock. [ 135.297211][ T6624] [ 135.307627][ T6624] [ 135.307627][ T6624] the existing dependency chain (in reverse order) is: [ 135.316658][ T6624] [ 135.316658][ T6624] -> #4 (&q->q_usage_counter(io)){++++}-{0:0}: [ 135.325045][ T6624] __submit_bio+0x49c/0x540 [ 135.330108][ T6624] submit_bio_noacct_nocheck+0x892/0xd70 [ 135.336300][ T6624] submit_bio_noacct+0x93a/0x1e20 [ 135.341888][ T6624] mpage_readahead+0x41d/0x590 [ 135.347208][ T6624] read_pages+0x1a8/0xdc0 [ 135.352085][ T6624] page_cache_ra_unbounded+0x3dc/0x750 [ 135.358094][ T6624] page_cache_ra_order+0x8f2/0xc80 [ 135.363759][ T6624] page_cache_sync_ra+0x4b4/0x9c0 [ 135.369334][ T6624] filemap_get_pages+0xd7b/0x1be0 [ 135.374919][ T6624] filemap_splice_read+0x5cc/0xd00 [ 135.380593][ T6624] do_splice_read+0x282/0x370 [ 135.385816][ T6624] splice_file_to_pipe+0x109/0x120 [ 135.391475][ T6624] do_sendfile+0x3fd/0xe30 [ 135.396436][ T6624] __x64_sys_sendfile64+0x1da/0x220 [ 135.402189][ T6624] do_syscall_64+0xcd/0x250 [ 135.407248][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.413700][ T6624] [ 135.413700][ T6624] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 135.422267][ T6624] down_read+0x9a/0x330 [ 135.426992][ T6624] filemap_fault+0x2e0/0x2820 [ 135.432243][ T6624] __do_fault+0x10a/0x490 [ 135.437125][ T6624] do_pte_missing+0x1a8/0x3e00 [ 135.442462][ T6624] __handle_mm_fault+0x103c/0x2a40 [ 135.448148][ T6624] handle_mm_fault+0x3fa/0xaa0 [ 135.453479][ T6624] do_user_addr_fault+0x7a3/0x13f0 [ 135.459148][ T6624] exc_page_fault+0x5c/0xc0 [ 135.464206][ T6624] asm_exc_page_fault+0x26/0x30 [ 135.469613][ T6624] rep_movs_alternative+0x4a/0x70 [ 135.475180][ T6624] _copy_to_iter+0x384/0x1400 [ 135.480409][ T6624] get_random_bytes_user+0x180/0x3c0 [ 135.486238][ T6624] __x64_sys_getrandom+0x184/0x290 [ 135.491897][ T6624] do_syscall_64+0xcd/0x250 [ 135.496955][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.503413][ T6624] [ 135.503413][ T6624] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 135.503660][ T6633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.151'. [ 135.510978][ T6624] __might_fault+0x11b/0x190 [ 135.524942][ T6624] _copy_from_user+0x29/0xd0 [ 135.530092][ T6624] __blk_trace_setup+0xa8/0x180 [ 135.535492][ T6624] blk_trace_setup+0x47/0x70 [ 135.540628][ T6624] sg_ioctl+0x7a3/0x26b0 [ 135.545430][ T6624] __x64_sys_ioctl+0x190/0x200 [ 135.550738][ T6624] do_syscall_64+0xcd/0x250 [ 135.555794][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.562241][ T6624] [ 135.562241][ T6624] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 135.570092][ T6624] __mutex_lock+0x19b/0xa60 [ 135.575151][ T6624] blk_register_queue+0x13c/0x4f0 [ 135.580728][ T6624] add_disk_fwnode+0x785/0x1300 [ 135.586123][ T6624] brd_alloc.isra.0+0x50a/0x7c0 [ 135.591536][ T6624] brd_init+0x12b/0x1d0 [ 135.596234][ T6624] do_one_initcall+0x128/0x630 [ 135.601548][ T6624] kernel_init_freeable+0x58f/0x8b0 [ 135.607297][ T6624] kernel_init+0x1c/0x2b0 [ 135.612186][ T6624] ret_from_fork+0x45/0x80 [ 135.617151][ T6624] ret_from_fork_asm+0x1a/0x30 [ 135.622481][ T6624] [ 135.622481][ T6624] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 135.630076][ T6624] __lock_acquire+0x249e/0x3c40 [ 135.635471][ T6624] lock_acquire.part.0+0x11b/0x380 [ 135.641127][ T6624] __mutex_lock+0x19b/0xa60 [ 135.646183][ T6624] queue_attr_store+0xe2/0x170 [ 135.651492][ T6624] sysfs_kf_write+0x117/0x170 [ 135.656714][ T6624] kernfs_fop_write_iter+0x33d/0x500 [ 135.662552][ T6624] vfs_write+0x5ae/0x1150 [ 135.667419][ T6624] ksys_write+0x12b/0x250 [ 135.672295][ T6624] do_syscall_64+0xcd/0x250 [ 135.677361][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.683803][ T6624] [ 135.683803][ T6624] other info that might help us debug this: [ 135.683803][ T6624] [ 135.694042][ T6624] Chain exists of: [ 135.694042][ T6624] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io) [ 135.694042][ T6624] [ 135.708605][ T6624] Possible unsafe locking scenario: [ 135.708605][ T6624] [ 135.716076][ T6624] CPU0 CPU1 [ 135.721459][ T6624] ---- ---- [ 135.726878][ T6624] lock(&q->q_usage_counter(io)); [ 135.732013][ T6624] lock(mapping.invalidate_lock#2); [ 135.739854][ T6624] lock(&q->q_usage_counter(io)); [ 135.747519][ T6624] lock(&q->sysfs_lock); [ 135.751870][ T6624] [ 135.751870][ T6624] *** DEADLOCK *** [ 135.751870][ T6624] [ 135.760024][ T6624] 6 locks held by syz.0.149/6624: [ 135.765067][ T6624] #0: ffff888030127b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 135.774174][ T6624] #1: ffff888035df4420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 135.783204][ T6624] #2: ffff88807e3a1888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 135.793011][ T6624] #3: ffff8881413fc698 (kn->active#87){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 135.803078][ T6624] #4: ffff8880256a80a8 (&q->q_usage_counter(io)){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 135.813493][ T6624] #5: ffff8880256a80e0 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 135.824433][ T6624] [ 135.824433][ T6624] stack backtrace: [ 135.830335][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.0.149 Not tainted 6.13.0-rc7-syzkaller-00160-gad26fc09dabf #0 [ 135.840951][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 135.851027][ T6624] Call Trace: [ 135.854322][ T6624] [ 135.857274][ T6624] dump_stack_lvl+0x116/0x1f0 [ 135.861985][ T6624] print_circular_bug+0x41c/0x610 [ 135.867047][ T6624] check_noncircular+0x31a/0x400 [ 135.872025][ T6624] ? __pfx_check_noncircular+0x10/0x10 [ 135.877521][ T6624] ? save_trace+0x42/0xa10 [ 135.881972][ T6624] ? add_lock_to_list+0x17d/0x390 [ 135.887037][ T6624] __lock_acquire+0x249e/0x3c40 [ 135.891917][ T6624] ? __pfx___lock_acquire+0x10/0x10 [ 135.897145][ T6624] ? __pfx___lock_acquire+0x10/0x10 [ 135.902375][ T6624] lock_acquire.part.0+0x11b/0x380 [ 135.907514][ T6624] ? queue_attr_store+0xe2/0x170 [ 135.912484][ T6624] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 135.918146][ T6624] ? rcu_is_watching+0x12/0xc0 [ 135.922939][ T6624] ? trace_lock_acquire+0x14e/0x1f0 [ 135.928176][ T6624] ? find_held_lock+0x2d/0x110 [ 135.932970][ T6624] ? queue_attr_store+0xe2/0x170 [ 135.937940][ T6624] ? lock_acquire+0x2f/0xb0 [ 135.942469][ T6624] ? queue_attr_store+0xe2/0x170 [ 135.947434][ T6624] __mutex_lock+0x19b/0xa60 [ 135.951960][ T6624] ? queue_attr_store+0xe2/0x170 [ 135.956920][ T6624] ? mark_held_locks+0x9f/0xe0 [ 135.961722][ T6624] ? queue_attr_store+0xe2/0x170 [ 135.966686][ T6624] ? __pfx___mutex_lock+0x10/0x10 [ 135.971734][ T6624] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.977660][ T6624] ? blk_mq_freeze_queue_wait+0xaf/0x190 [ 135.983320][ T6624] ? __pfx_autoremove_wake_function+0x10/0x10 [ 135.989430][ T6624] ? queue_attr_store+0xd8/0x170 [ 135.994396][ T6624] ? queue_attr_store+0xe2/0x170 [ 135.999367][ T6624] queue_attr_store+0xe2/0x170 [ 136.004166][ T6624] ? __pfx_queue_attr_store+0x10/0x10 [ 136.009565][ T6624] sysfs_kf_write+0x117/0x170 [ 136.014272][ T6624] kernfs_fop_write_iter+0x33d/0x500 [ 136.019590][ T6624] ? __pfx_sysfs_kf_write+0x10/0x10 [ 136.024822][ T6624] vfs_write+0x5ae/0x1150 [ 136.029180][ T6624] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 136.035019][ T6624] ? __pfx___mutex_lock+0x10/0x10 [ 136.040087][ T6624] ? __pfx_vfs_write+0x10/0x10 [ 136.044889][ T6624] ksys_write+0x12b/0x250 [ 136.049248][ T6624] ? __pfx_ksys_write+0x10/0x10 [ 136.054128][ T6624] ? syscall_user_dispatch+0x77/0x140 [ 136.059533][ T6624] do_syscall_64+0xcd/0x250 [ 136.064071][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.069997][ T6624] RIP: 0033:0x7f2f08985d29 [ 136.074428][ T6624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.094061][ T6624] RSP: 002b:00007f2f097db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.102504][ T6624] RAX: ffffffffffffffda RBX: 00007f2f08b75fa0 RCX: 00007f2f08985d29 [ 136.110499][ T6624] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000005 [ 136.118493][ T6624] RBP: 00007f2f08a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 136.126484][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.134474][ T6624] R13: 0000000000000000 R14: 00007f2f08b75fa0 R15: 00007ffdea744e08 [ 136.142475][ T6624] [ 136.155243][ T6619] ima: policy update failed [ 136.162900][ T29] audit: type=1802 audit(4294967313.520:6): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.148" res=0 errno=0 [ 136.405211][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 136.428146][ T6624] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 136.454954][ T6636] geneve1: left allmulticast mode