last executing test programs: 15.272139239s ago: executing program 1 (id=240): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) ioctl$auto_TIOCGETD2(0xffffffffffffffff, 0x5424, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000680), 0x640, 0x0) socket(0x2b, 0x4, 0xb) getdents$auto(r1, &(0x7f00000006c0)={0x0, 0x0, 0x5, "5d055b1d8f7600c3a7adb193b4c890caa7d6112f830d78e2012ddf28d716125697b31cc52562dac3"}, 0x7f) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={0x0, 0x4904}, 0x1, 0x0, 0x0, 0x40}, 0x4000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="02003abd7000ffdbdf250f0000001beb41ee0a8f8d5ca6925c3551599be2f978fbaab67ee44676486e07d6aa9202b90d5900eed24253c55cd18581f8d17e12cec6d90ba3313aefc16ff7afe2b6492759f04939e2277194e91293d9d25c984ee50bce2db351ab2bd4ffa7975f449c925fe70adaea33497970803fab8a4f8fc7c4cbaab17a988c97789f9a156b190419d42d3de8f3c78f2a3b9dfcfd11032ef5846df4edac73bd9967"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c8c0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f00000000c0)="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", 0x5b4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7, 0x0, 0x8) r5 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) write$auto_tracing_mark_raw_fops_trace(r5, 0x0, 0x10) 14.938670194s ago: executing program 1 (id=244): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd26, 0x9, {}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) r0 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x3, 0x0) write$auto(0x3, 0x0, 0x5c8) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x2, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r1 = gettid() rt_sigtimedwait$auto(&(0x7f0000000500)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) tkill$auto(r1, 0x7) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f00000000c0)=0xed) futex_waitv$auto(&(0x7f0000000000)={0xd, 0x5d98, 0x180, 0x4}, 0x77, 0x0, 0x0, 0x62ba) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64$auto(r3, 0x0, 0x6, 0x8) r4 = bpf$auto(0x5, &(0x7f0000000000)=@batch={0x1000, 0x8400000000000001, 0x2, 0x2, 0x4, r3, 0x71, 0x9}, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004c814}, 0x20000000) mprotect$auto(0x1ffff000, 0x4000000, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@enable_stats={0x4}, 0xa3) syz_genetlink_get_family_id$auto_nl80211(0xfffffffffffffffe, r4) 14.314872194s ago: executing program 1 (id=245): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x7fff, 0xeb6, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x55) r0 = socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x4a8) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x12, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) shmctl$auto(0x4, 0x1, &(0x7f0000000280)={{0xfe9e, 0xffffffffffffffff, 0xee00, 0xa6, 0x7ff, 0x1, 0x3}, 0x7a6e56f5, 0x4000000000003, 0x9, 0xa, @inferred, @raw=0x7, 0x4, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000300), r0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd0001fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044010) mprotect$auto(0x1fffeffc, 0x8000000000000001, 0x7ffffffe) r3 = socket(0x1f, 0x2, 0xfffffffc) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mprotect$auto(0x4, 0x10000, 0x8) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$auto(r1, 0x4, 0xfffffffc, &(0x7f0000000000)='@\x00', &(0x7f0000000100)=0x7fff) ioctl$auto_PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x101, &(0x7f0000000040)={0x40, 0x9, 0x9}}) connect$auto(0x3, &(0x7f0000000140), 0x55) setsockopt$auto(0x3, 0x6, 0x1c, 0x0, 0xfb3) madvise$auto(0x0, 0xffffffffffff0001, 0x9) unshare$auto(0x20000) connect$auto(0x3, 0x0, 0x55) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) rename$auto(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') 13.86474955s ago: executing program 1 (id=248): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x28100, 0x0) r0 = getpgid(0x0) pidfd_open$auto(r0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/raw6\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x100000000008, 0x8) 13.554586884s ago: executing program 1 (id=249): r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105041, 0x0) mmap$auto(0x0, 0x8, 0x400000000000008, 0x16, r0, 0x8001) r1 = socket(0x26, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="e810ffb8a841d9df25df5106297d1124b30251a03fa0dd7b5d44b346c4148e18a5735510c4e0f539ad754ba05d8396621dadb033b8081b95a7602a685da85b81", @ANYRES16=r3, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000804}, 0x5) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008842}, 0x20000804) r4 = socket(0xa, 0x6, 0x0) setsockopt$auto(r4, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4\xa1\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x9e\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./file1\x00', 0x1652c1, 0xe1d2b27bdc14aa9a) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40342, 0x162) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) lsm_get_self_attr$auto(0xfc9, 0x0, &(0x7f0000000080)=0x8, 0x9) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x200) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r5, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) getgroups$auto(0xeda, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xfffff004, 0x2) 13.28398528s ago: executing program 1 (id=250): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x802, 0x0) fallocate$auto(r0, 0x3, 0x5, 0x4) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000100)="0a1b9a3c5c00006e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910bb713aca465c9bbc23b5d40a", 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0x38) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) 11.439278905s ago: executing program 2 (id=260): r0 = socket(0x15, 0x5, 0x0) recvfrom$auto(r0, 0x0, 0x1ff, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x5}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty39\x00', 0x40001, 0x0) rename$auto(0x0, &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f0000001780)="02326662285988558c4af65b3e4df374561798a49d12480613c64ed63681eeada4de670eba343ae7abc425fc290a32b430fccfde989e1b5dac", 0x39) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4601, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) write$auto(0xffffffffffffffff, 0x0, 0x4) r3 = io_uring_setup$auto(0x3ff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="d4010000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fedbdf251a00000008001d00", @ANYRES32=r3, @ANYBLOB="98012b800c0038000800000000000000698754af1e939c547463ea4355685ec20061e73f15a7004a80e0ce20bac3671b614e1aca40fd05143ecde958406df23da23d7427081204923a8d50c1622fda416d261880b28a672b8a70b81cb2893e23ffd3c6572890b6883f1a10c40a3096cab10384397264272b3e8a32e80f9fd51b990cf0a561524780e59988288f24225336fd1b75fc3096b536471b9548dc6120cbc48c2195265b985bbaf602b7a8fa37accbeac708073dfb5bd62190040034800400fd000400618004002d800008008c00000000008200f900a75138034cbf68368c70a0e46ab18a647e08f9d5282ae2d456898f2353e80a3212429f7c2826db55710eb08ce0ab1c6b97adac9b9c5830ef8b8e1f86df09a0f11a6738e4763296df2b1797d9025a644fc6b6be11a6a07071ffa170573bb4c830c84ede5de8ef42034cb095f5d91356988c81243535f69b8afa4e754066cf00000800bc00", @ANYRES32=r0, @ANYBLOB="ba3d06e496bad29fdada3c81bb2e11b0a05a7fffe5dd73c92e7670cd5dee9b7e087bd53eb4a59aae8978694508001c00411a305c752b2c00e517c4eba376d551aefb15d35c43f7d8b5feb52a1708642fe95f5613b0a867e2446cf425b947448c509744b5543a4c7b55a49ce6c7ec48a85dd640405ab49ae8", @ANYRES32=0x0, @ANYBLOB="070002002c26000006000a000300000005001100f300000005002400f9000000"], 0x1d4}, 0x1, 0x0, 0x0, 0x24008000}, 0x20008881) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000a7dd85c25280f9eb501a50a34c6c3ae000", @ANYRES16=r5, @ANYBLOB="000125bd7000fbdbdf2531000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x84001) mlockall$auto(0x7) madvise$auto(0x0, 0x3, 0x66) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirtytime_expire_seconds\x00', 0x2, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f0000000000), 0x1000) 9.661347242s ago: executing program 2 (id=269): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, "0200000000000100"}, 0x2) (async, rerun: 32) getxattrat$auto(r0, &(0x7f0000000080)='./file0\x00', 0xfffffffa, &(0x7f00000000c0)='{:,.\x00', &(0x7f0000000140)={0x401, 0x800, 0x9}, 0x3) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) prctl$auto(0x29, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0x8, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) 8.376807917s ago: executing program 2 (id=272): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x221c2, 0x0) mlockall$auto(0x0) open(&(0x7f0000000000)='./file0\x00', 0x10489d03fd83715f, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x3, 0x8000000000000001, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x6, 0x1, 0x1000003) write$auto_msr_fops_msr(r0, 0x0, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/security/tomoyo/query\x00', 0x400, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/swradio0\x00', 0x101000, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000001c0)=""/191, 0x1f8) read$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000080)=""/4096, 0x1000) read$auto(r1, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpgr1, 0x5, 0x55bdc46a, 0x2, 0x4, r1, 0x81, 0x9}, 0x6f4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x10ba41, 0x0) mbind$auto(0x4, 0x2, 0x1ff, &(0x7f0000000080)=0x3ff, 0x7fe000000, 0x8) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x1) r3 = landlock_create_ruleset$auto(&(0x7f0000000100)={0xe, 0x2, 0x5}, 0x608, 0x80) timerfd_settime$auto(r3, 0x6f4, &(0x7f0000000180)={{0xe, 0x2}, {0x9, 0x8}}, &(0x7f00000001c0)={{0x4, 0x1}, {0x40, 0xb}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r2, 0x0, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/tcp_cdg/parameters/use_shadow\x00', 0x408982, 0x0) write$auto(r4, 0x0, 0x40db) socket(0x28, 0x80000, 0x6) close_range$auto(0x2, 0xa, 0x0) 4.971990444s ago: executing program 3 (id=281): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) ioctl$auto_TIOCGETD2(0xffffffffffffffff, 0x5424, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000680), 0x640, 0x0) socket(0x2b, 0x4, 0xb) getdents$auto(r1, &(0x7f00000006c0)={0x0, 0x0, 0x5, "5d055b1d8f7600c3a7adb193b4c890caa7d6112f830d78e2012ddf28d716125697b31cc52562dac3"}, 0x7f) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={0x0, 0x4904}, 0x1, 0x0, 0x0, 0x40}, 0x4000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="02003abd7000ffdbdf250f0000001beb41ee0a8f8d5ca6925c3551599be2f978fbaab67ee44676486e07d6aa9202b90d5900eed24253c55cd18581f8d17e12cec6d90ba3313aefc16ff7afe2b6492759f04939e2277194e91293d9d25c984ee50bce2db351ab2bd4ffa7975f449c925fe70adaea33497970803fab8a4f8fc7c4cbaab17a988c97789f9a156b190419d42d3de8f3c78f2a3b9dfcfd11032ef5846df4edac73bd9967"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c8c0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f00000000c0)="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", 0x5b4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7, 0x0, 0x8) r5 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) write$auto_tracing_mark_raw_fops_trace(r5, 0x0, 0x10) 4.394285414s ago: executing program 0 (id=282): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) readahead$auto(r0, 0x7ff, 0x9) 4.181491118s ago: executing program 0 (id=283): r0 = socket(0x2, 0x801, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r2, r0, 0x9f, 0x0, 0x1, @relative_fd, 0x5}, 0x96) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'pimreg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2e0, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9b}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_FEATURES_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x48a546f9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40084}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0xdf8d81f3c194e2c3, 0x0) socket(0xa, 0x2, 0x0) socket(0x11, 0x80003, 0x304) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x82000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./cgroup\x00', 0x68a041, 0x344) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) connect$auto(0x3, 0x0, 0x55) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x0, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x10000000007, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) 4.079263832s ago: executing program 3 (id=284): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd26, 0x9, {}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) r0 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x3, 0x0) write$auto(0x3, 0x0, 0x5c8) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x2, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r1 = gettid() rt_sigtimedwait$auto(&(0x7f0000000500)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) tkill$auto(r1, 0x7) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f00000000c0)=0xed) futex_waitv$auto(&(0x7f0000000000)={0xd, 0x5d98, 0x180, 0x4}, 0x77, 0x0, 0x0, 0x62ba) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0x2, 0x0) pread64$auto(r3, 0x0, 0x6, 0x8) r4 = bpf$auto(0x5, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004c814}, 0x20000000) mprotect$auto(0x1ffff000, 0x4000000, 0x4) bpf$auto(0x0, &(0x7f0000000000)=@enable_stats={0x4}, 0xa3) syz_genetlink_get_family_id$auto_nl80211(0xfffffffffffffffe, r4) 3.097844516s ago: executing program 0 (id=285): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"\x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(r0, &(0x7f0000000300)=@in={0x2, 0x4, @remote}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) write$auto(0x3, 0x0, 0xffd8) 2.466505943s ago: executing program 0 (id=286): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x221c2, 0x0) mlockall$auto(0x0) open(&(0x7f0000000000)='./file0\x00', 0x10489d03fd83715f, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x3, 0x8000000000000001, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) socket(0x6, 0x1, 0x1000003) write$auto_msr_fops_msr(r0, 0x0, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/security/tomoyo/query\x00', 0x400, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/swradio0\x00', 0x101000, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000001c0)=""/191, 0x1f8) read$auto_tomoyo_operations_securityfs_if(r1, &(0x7f0000000080)=""/4096, 0x1000) read$auto(r1, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg 1 [ 66.187955][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.196683][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.204886][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.214120][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.216057][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.222415][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.236426][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.246799][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.256845][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.265198][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.265980][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.273536][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.280924][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.287655][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.296244][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.302791][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.308365][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.326007][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.334053][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.342174][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.342377][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.349632][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.363973][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.647615][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 66.712517][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 66.829257][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.836972][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.846751][ T5829] bridge_slave_0: entered allmulticast mode [ 66.853649][ T5829] bridge_slave_0: entered promiscuous mode [ 66.861760][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 66.886127][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 66.896634][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.904096][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.911244][ T5829] bridge_slave_1: entered allmulticast mode [ 66.918011][ T5829] bridge_slave_1: entered promiscuous mode [ 66.940857][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.948006][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.955404][ T5831] bridge_slave_0: entered allmulticast mode [ 66.961978][ T5831] bridge_slave_0: entered promiscuous mode [ 66.969400][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.976641][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.984177][ T5831] bridge_slave_1: entered allmulticast mode [ 66.990818][ T5831] bridge_slave_1: entered promiscuous mode [ 67.038976][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.052126][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.088105][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.107482][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.158441][ T5829] team0: Port device team_slave_0 added [ 67.175447][ T5831] team0: Port device team_slave_0 added [ 67.196606][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.204424][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.211661][ T5836] bridge_slave_0: entered allmulticast mode [ 67.219128][ T5836] bridge_slave_0: entered promiscuous mode [ 67.227372][ T5829] team0: Port device team_slave_1 added [ 67.244332][ T5831] team0: Port device team_slave_1 added [ 67.250233][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.257418][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.264957][ T5830] bridge_slave_0: entered allmulticast mode [ 67.271532][ T5830] bridge_slave_0: entered promiscuous mode [ 67.278946][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.286491][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.293805][ T5836] bridge_slave_1: entered allmulticast mode [ 67.300598][ T5836] bridge_slave_1: entered promiscuous mode [ 67.327715][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.334929][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.342137][ T5830] bridge_slave_1: entered allmulticast mode [ 67.349017][ T5830] bridge_slave_1: entered promiscuous mode [ 67.371408][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.378598][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.405656][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.418610][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.425804][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.452672][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.479426][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.486457][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.512690][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.524538][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.531484][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.557447][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.571042][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.583365][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.594354][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.605912][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.655401][ T5830] team0: Port device team_slave_0 added [ 67.690244][ T5830] team0: Port device team_slave_1 added [ 67.698516][ T5836] team0: Port device team_slave_0 added [ 67.707702][ T5836] team0: Port device team_slave_1 added [ 67.735879][ T5829] hsr_slave_0: entered promiscuous mode [ 67.742242][ T5829] hsr_slave_1: entered promiscuous mode [ 67.774145][ T5831] hsr_slave_0: entered promiscuous mode [ 67.780441][ T5831] hsr_slave_1: entered promiscuous mode [ 67.787235][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.795639][ T5831] Cannot create hsr debugfs directory [ 67.814785][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.821756][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.847933][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.871244][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.878280][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.904854][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.920758][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.927936][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.954562][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.974009][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.980992][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.007077][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.069888][ T5830] hsr_slave_0: entered promiscuous mode [ 68.078213][ T5830] hsr_slave_1: entered promiscuous mode [ 68.084637][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.092191][ T5830] Cannot create hsr debugfs directory [ 68.144142][ T5836] hsr_slave_0: entered promiscuous mode [ 68.150254][ T5836] hsr_slave_1: entered promiscuous mode [ 68.157166][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.165089][ T5836] Cannot create hsr debugfs directory [ 68.273378][ T54] Bluetooth: hci0: command tx timeout [ 68.352787][ T54] Bluetooth: hci2: command tx timeout [ 68.383374][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.403146][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.419047][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.433672][ T54] Bluetooth: hci3: command tx timeout [ 68.434121][ T5843] Bluetooth: hci1: command tx timeout [ 68.449471][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.488168][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.497712][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.509172][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.526375][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.579920][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.599342][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.609222][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.635608][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.711438][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.731369][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.744989][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.756987][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.767498][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.845537][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.858299][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.870172][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.877600][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.901137][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.908289][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.954538][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.980768][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.987939][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.007485][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.014660][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.031780][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.095436][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.106530][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.124784][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.158474][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.165671][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.180476][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.187585][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.196669][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.203792][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.225203][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.232424][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.330533][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.358806][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.397576][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.470474][ T5831] veth0_vlan: entered promiscuous mode [ 69.495312][ T5831] veth1_vlan: entered promiscuous mode [ 69.566934][ T5831] veth0_macvtap: entered promiscuous mode [ 69.618387][ T5831] veth1_macvtap: entered promiscuous mode [ 69.642113][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.671479][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.694687][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.715924][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.725900][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.735098][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.745195][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.765669][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.817650][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.867822][ T5829] veth0_vlan: entered promiscuous mode [ 69.887606][ T5830] veth0_vlan: entered promiscuous mode [ 69.926915][ T5830] veth1_vlan: entered promiscuous mode [ 69.945346][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.962750][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.962810][ T5829] veth1_vlan: entered promiscuous mode [ 70.031819][ T5830] veth0_macvtap: entered promiscuous mode [ 70.041477][ T5830] veth1_macvtap: entered promiscuous mode [ 70.058830][ T5836] veth0_vlan: entered promiscuous mode [ 70.069873][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.071866][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.089242][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.089756][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.107648][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.125387][ T5829] veth0_macvtap: entered promiscuous mode [ 70.139302][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.150083][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.163021][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.181536][ T5836] veth1_vlan: entered promiscuous mode [ 70.190186][ T5829] veth1_macvtap: entered promiscuous mode [ 70.214507][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.238167][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.247251][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.256163][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.265263][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.308956][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.348581][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.355094][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 70.367801][ T5843] Bluetooth: hci0: command tx timeout [ 70.370991][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.388582][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.393233][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 70.401757][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.420285][ T5836] veth0_macvtap: entered promiscuous mode [ 70.432812][ T5843] Bluetooth: hci2: command tx timeout [ 70.445889][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.460318][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.471904][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.482751][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.497811][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.508314][ T5836] veth1_macvtap: entered promiscuous mode [ 70.514610][ T5843] Bluetooth: hci1: command tx timeout [ 70.520035][ T5843] Bluetooth: hci3: command tx timeout [ 70.533593][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.548334][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.557168][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.566139][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.637002][ T5893] Zero length message leads to an empty skb [ 70.644947][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.664654][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.681743][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.709035][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.718966][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.730271][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.741294][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.774114][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.786391][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.798314][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.808929][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.818825][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.835777][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.849792][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.862485][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.872107][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.926475][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.941033][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.951221][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.961681][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.980278][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.013233][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.110330][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.144486][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.182908][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.200488][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.250760][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.288585][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.349772][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.399246][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.653636][ T5904] svc: failed to register nfsdv3 RPC service (errno 111). [ 71.723196][ T5904] svc: failed to register nfsaclv3 RPC service (errno 111). [ 71.797708][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.804844][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.434079][ T5843] Bluetooth: hci0: command tx timeout [ 72.513544][ T5843] Bluetooth: hci2: command tx timeout [ 72.592716][ T5843] Bluetooth: hci3: command tx timeout [ 72.592721][ T54] Bluetooth: hci1: command tx timeout [ 72.647506][ T5916] ======================================================= [ 72.647506][ T5916] WARNING: The mand mount option has been deprecated and [ 72.647506][ T5916] and is ignored by this kernel. Remove the mand [ 72.647506][ T5916] option from the mount to silence this warning. [ 72.647506][ T5916] ======================================================= [ 73.434722][ T5937] dyndbg: bad flag-op f, at start of format [ 73.441367][ T5937] dyndbg: flags parse failed [ 73.451774][ T5937] dyndbg: bad flag-op [, at start of [main]initcall [ 73.459830][ T5937] dyndbg: flags parse failed [ 73.841147][ T5946] syz.3.14 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.296404][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.513380][ T5843] Bluetooth: hci0: command tx timeout [ 74.596181][ T5843] Bluetooth: hci2: command tx timeout [ 74.672834][ T5843] Bluetooth: hci3: command tx timeout [ 74.672890][ T5843] Bluetooth: hci1: command tx timeout [ 77.277943][ T5971] mmap: syz.1.18 (5971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.533611][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.101289][ T29] audit: type=1804 audit(6032501376.585:2): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.30" name="/newroot/sys/kernel/debug/tracing/trace" dev="tracefs" ino=124 res=1 errno=0 [ 78.120455][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 78.340609][ T6039] FAULT_INJECTION: forcing a failure. [ 78.340609][ T6039] name failslab, interval 1, probability 0, space 0, times 1 [ 78.387819][ T6021] hsr_slave_1 (unregistering): left promiscuous mode [ 78.395427][ T6047] FAULT_INJECTION: forcing a failure. [ 78.395427][ T6047] name failslab, interval 1, probability 0, space 0, times 1 [ 78.412502][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.0.32 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 78.412534][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.412552][ T6047] Call Trace: [ 78.412559][ T6047] [ 78.412568][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 78.412612][ T6047] should_fail_ex+0x497/0x5b0 [ 78.412646][ T6047] ? fs_reclaim_acquire+0xae/0x150 [ 78.412677][ T6047] should_failslab+0xc2/0x120 [ 78.412699][ T6047] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 78.412752][ T6047] ? lockdep_init_map_type+0x16d/0x7d0 [ 78.412780][ T6047] ? security_inode_alloc+0x3b/0x2b0 [ 78.412812][ T6047] security_inode_alloc+0x3b/0x2b0 [ 78.412839][ T6047] inode_init_always_gfp+0xce4/0x1030 [ 78.412875][ T6047] alloc_inode+0x82/0x230 [ 78.412906][ T6047] create_pipe_files+0x4c/0x850 [ 78.412943][ T6047] do_pipe2+0xb0/0x1d0 [ 78.412972][ T6047] ? __pfx_do_pipe2+0x10/0x10 [ 78.413001][ T6047] ? xfd_validate_state+0x5d/0x180 [ 78.413035][ T6047] __x64_sys_pipe2+0x54/0x80 [ 78.413067][ T6047] do_syscall_64+0xcd/0x250 [ 78.413103][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.413139][ T6047] RIP: 0033:0x7f650e585d29 [ 78.413157][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.413181][ T6047] RSP: 002b:00007f650f450038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 78.413203][ T6047] RAX: ffffffffffffffda RBX: 00007f650e776080 RCX: 00007f650e585d29 [ 78.413227][ T6047] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 78.413242][ T6047] RBP: 00007f650e601b08 R08: 0000000000000000 R09: 0000000000000000 [ 78.413255][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.413270][ T6047] R13: 0000000000000000 R14: 00007f650e776080 R15: 00007fffa221bae8 [ 78.413300][ T6047] [ 78.419004][ T6039] CPU: 1 UID: 0 PID: 6039 Comm: syz.1.31 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 78.419037][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.419051][ T6039] Call Trace: [ 78.419058][ T6039] [ 78.419067][ T6039] dump_stack_lvl+0x16c/0x1f0 [ 78.419104][ T6039] should_fail_ex+0x497/0x5b0 [ 78.419136][ T6039] ? fs_reclaim_acquire+0xae/0x150 [ 78.419168][ T6039] should_failslab+0xc2/0x120 [ 78.419190][ T6039] __kmalloc_noprof+0xce/0x4f0 [ 78.419222][ T6039] ? alloc_pipe_info+0x1ec/0x590 [ 78.419250][ T6039] ? kasan_save_track+0x14/0x30 [ 78.419283][ T6039] alloc_pipe_info+0x1ec/0x590 [ 78.419318][ T6039] create_pipe_files+0x8c/0x850 [ 78.419352][ T6039] do_pipe2+0xb0/0x1d0 [ 78.419382][ T6039] ? __pfx_do_pipe2+0x10/0x10 [ 78.419412][ T6039] ? xfd_validate_state+0x5d/0x180 [ 78.419444][ T6039] __x64_sys_pipe2+0x54/0x80 [ 78.419475][ T6039] do_syscall_64+0xcd/0x250 [ 78.419509][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.419541][ T6039] RIP: 0033:0x7fdf03585d29 [ 78.419558][ T6039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.419579][ T6039] RSP: 002b:00007fdf04390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 78.419599][ T6039] RAX: ffffffffffffffda RBX: 00007fdf03775fa0 RCX: 00007fdf03585d29 [ 78.419614][ T6039] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 78.419626][ T6039] RBP: 00007fdf03601b08 R08: 0000000000000000 R09: 0000000000000000 [ 78.419639][ T6039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.419651][ T6039] R13: 0000000000000000 R14: 00007fdf03775fa0 R15: 00007ffeb6255be8 [ 78.419680][ T6039] [ 78.781979][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.176642][ T6050] netlink: 346 bytes leftover after parsing attributes in process `syz.2.33'. [ 79.854860][ T6055] capability: warning: `syz.1.35' uses 32-bit capabilities (legacy support in use) [ 80.180529][ T6070] netlink: 346 bytes leftover after parsing attributes in process `syz.2.39'. [ 80.420397][ T6076] FAULT_INJECTION: forcing a failure. [ 80.420397][ T6076] name failslab, interval 1, probability 0, space 0, times 0 [ 80.438978][ T6076] CPU: 1 UID: 0 PID: 6076 Comm: syz.2.40 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 80.439022][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.439036][ T6076] Call Trace: [ 80.439043][ T6076] [ 80.439054][ T6076] dump_stack_lvl+0x16c/0x1f0 [ 80.439094][ T6076] should_fail_ex+0x497/0x5b0 [ 80.439127][ T6076] ? fs_reclaim_acquire+0xae/0x150 [ 80.439161][ T6076] should_failslab+0xc2/0x120 [ 80.439184][ T6076] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 80.439222][ T6076] ? __d_alloc+0x35/0x8c0 [ 80.439259][ T6076] __d_alloc+0x35/0x8c0 [ 80.439293][ T6076] d_alloc_pseudo+0x1c/0xc0 [ 80.439318][ T6076] alloc_file_pseudo+0xd2/0x200 [ 80.439342][ T6076] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 80.439373][ T6076] ? __raw_spin_lock_init+0x3a/0x110 [ 80.439406][ T6076] create_pipe_files+0x364/0x850 [ 80.439440][ T6076] do_pipe2+0xb0/0x1d0 [ 80.439473][ T6076] ? __pfx_do_pipe2+0x10/0x10 [ 80.439503][ T6076] ? xfd_validate_state+0x5d/0x180 [ 80.439539][ T6076] __x64_sys_pipe2+0x54/0x80 [ 80.439571][ T6076] do_syscall_64+0xcd/0x250 [ 80.439607][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.439641][ T6076] RIP: 0033:0x7f14d2b85d29 [ 80.439661][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.439683][ T6076] RSP: 002b:00007f14d394c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 80.439706][ T6076] RAX: ffffffffffffffda RBX: 00007f14d2d75fa0 RCX: 00007f14d2b85d29 [ 80.439721][ T6076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 80.439736][ T6076] RBP: 00007f14d2c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 80.439750][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.439764][ T6076] R13: 0000000000000000 R14: 00007f14d2d75fa0 R15: 00007ffd99bfef98 [ 80.439795][ T6076] [ 81.338500][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.42'. [ 81.386915][ T6073] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 81.402087][ T6073] File: /dev/ram7 PID: 6073 Comm: syz.0.37 [ 81.543273][ T6089] Process accounting resumed [ 82.414705][ T6099] ALUA LU Group already has a valid ID, ignoring request [ 83.120424][ T6109] bond0: option all_slaves_active: invalid value (3™i&ê<0²¹K [ 93.295144][ T6286] dump_stack_lvl+0x16c/0x1f0 [ 93.295182][ T6286] should_fail_ex+0x497/0x5b0 [ 93.295216][ T6286] ? fs_reclaim_acquire+0xae/0x150 [ 93.295248][ T6286] should_failslab+0xc2/0x120 [ 93.295271][ T6286] __kmalloc_noprof+0xce/0x4f0 [ 93.295304][ T6286] ? memcg_list_lru_alloc+0x29f/0x730 [ 93.295331][ T6286] ? find_held_lock+0x2d/0x110 [ 93.295365][ T6286] memcg_list_lru_alloc+0x29f/0x730 [ 93.295399][ T6286] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 93.295425][ T6286] ? get_mem_cgroup_from_objcg+0x183/0x330 [ 93.295464][ T6286] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 93.295498][ T6286] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 93.295527][ T6286] ? kasan_save_track+0x14/0x30 [ 93.295562][ T6286] kmem_cache_alloc_lru_noprof+0x30d/0x3b0 [ 93.295597][ T6286] ? __d_alloc+0x35/0x8c0 [ 93.295640][ T6286] __d_alloc+0x35/0x8c0 [ 93.295687][ T6286] d_alloc_pseudo+0x1c/0xc0 [ 93.295714][ T6286] alloc_file_pseudo+0xd2/0x200 [ 93.295741][ T6286] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 93.295779][ T6286] ? __raw_spin_lock_init+0x3a/0x110 [ 93.295813][ T6286] create_pipe_files+0x364/0x850 [ 93.295849][ T6286] do_pipe2+0xb0/0x1d0 [ 93.295881][ T6286] ? __pfx_do_pipe2+0x10/0x10 [ 93.295911][ T6286] ? xfd_validate_state+0x5d/0x180 [ 93.295947][ T6286] __x64_sys_pipe2+0x54/0x80 [ 93.295989][ T6286] do_syscall_64+0xcd/0x250 [ 93.296027][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.296070][ T6286] RIP: 0033:0x7f6635785d29 [ 93.296088][ T6286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.296119][ T6286] RSP: 002b:00007f66365b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 93.296142][ T6286] RAX: ffffffffffffffda RBX: 00007f6635975fa0 RCX: 00007f6635785d29 [ 93.296159][ T6286] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 93.296177][ T6286] RBP: 00007f6635801b08 R08: 0000000000000000 R09: 0000000000000000 [ 93.296192][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.296207][ T6286] R13: 0000000000000000 R14: 00007f6635975fa0 R15: 00007fff28359f78 [ 93.296238][ T6286] [ 93.539622][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.583859][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 93.636963][ T6292] tipc: Can't bind to reserved service type 63 [ 94.737500][ T6309] netlink: 346 bytes leftover after parsing attributes in process `syz.1.87'. [ 100.537999][ T6399] FAULT_INJECTION: forcing a failure. [ 100.537999][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 100.557084][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.3.103 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 100.557119][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.557134][ T6399] Call Trace: [ 100.557142][ T6399] [ 100.557151][ T6399] dump_stack_lvl+0x16c/0x1f0 [ 100.557192][ T6399] should_fail_ex+0x497/0x5b0 [ 100.557226][ T6399] ? fs_reclaim_acquire+0xae/0x150 [ 100.557260][ T6399] should_failslab+0xc2/0x120 [ 100.557284][ T6399] __kmalloc_noprof+0xce/0x4f0 [ 100.557318][ T6399] ? memcg_list_lru_alloc+0x29f/0x730 [ 100.557347][ T6399] ? find_held_lock+0x2d/0x110 [ 100.557380][ T6399] memcg_list_lru_alloc+0x29f/0x730 [ 100.557415][ T6399] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 100.557442][ T6399] ? get_mem_cgroup_from_objcg+0x183/0x330 [ 100.557481][ T6399] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 100.557515][ T6399] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 100.557544][ T6399] ? kasan_save_track+0x14/0x30 [ 100.557580][ T6399] kmem_cache_alloc_lru_noprof+0x30d/0x3b0 [ 100.557616][ T6399] ? __d_alloc+0x35/0x8c0 [ 100.557654][ T6399] __d_alloc+0x35/0x8c0 [ 100.557690][ T6399] d_alloc_pseudo+0x1c/0xc0 [ 100.557716][ T6399] alloc_file_pseudo+0xd2/0x200 [ 100.557742][ T6399] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 100.557780][ T6399] ? __raw_spin_lock_init+0x3a/0x110 [ 100.557816][ T6399] create_pipe_files+0x364/0x850 [ 100.557856][ T6399] do_pipe2+0xb0/0x1d0 [ 100.557891][ T6399] ? __pfx_do_pipe2+0x10/0x10 [ 100.557923][ T6399] ? xfd_validate_state+0x5d/0x180 [ 100.557958][ T6399] __x64_sys_pipe2+0x54/0x80 [ 100.557992][ T6399] do_syscall_64+0xcd/0x250 [ 100.558028][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.558063][ T6399] RIP: 0033:0x7f6635785d29 [ 100.558083][ T6399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.558105][ T6399] RSP: 002b:00007f66365b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 100.558129][ T6399] RAX: ffffffffffffffda RBX: 00007f6635975fa0 RCX: 00007f6635785d29 [ 100.558145][ T6399] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 100.558159][ T6399] RBP: 00007f6635801b08 R08: 0000000000000000 R09: 0000000000000000 [ 100.558173][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.558187][ T6399] R13: 0000000000000000 R14: 00007f6635975fa0 R15: 00007fff28359f78 [ 100.558217][ T6399] [ 102.216996][ T6412] process 'syz.0.106' launched ':,' with NULL argv: empty string added [ 103.194348][ T6423] vhci_hcd: invalid port number 115 [ 103.194372][ T6423] vhci_hcd: default hub control req: 6974 v6679 i0073 l0 [ 103.232779][ T6423] FAULT_INJECTION: forcing a failure. [ 103.232779][ T6423] name failslab, interval 1, probability 0, space 0, times 0 [ 103.232907][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.1.108 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 103.232937][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 103.232951][ T6423] Call Trace: [ 103.232959][ T6423] [ 103.232968][ T6423] dump_stack_lvl+0x16c/0x1f0 [ 103.233007][ T6423] should_fail_ex+0x497/0x5b0 [ 103.233042][ T6423] ? fs_reclaim_acquire+0xae/0x150 [ 103.233075][ T6423] should_failslab+0xc2/0x120 [ 103.233099][ T6423] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 103.233135][ T6423] ? vm_area_dup+0x21/0x300 [ 103.233167][ T6423] vm_area_dup+0x21/0x300 [ 103.233195][ T6423] __split_vma+0x181/0x1210 [ 103.233235][ T6423] ? __pfx___split_vma+0x10/0x10 [ 103.233286][ T6423] vms_gather_munmap_vmas+0x38b/0x1730 [ 103.233333][ T6423] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 103.233373][ T6423] ? mas_walk+0x6a6/0x910 [ 103.233417][ T6423] __mmap_region+0x32c/0x2760 [ 103.233446][ T6423] ? __pfx___mmap_region+0x10/0x10 [ 103.233468][ T6423] ? hlock_class+0x4e/0x130 [ 103.233497][ T6423] ? mark_lock+0xb5/0xc60 [ 103.233533][ T6423] ? __pfx___schedule+0x10/0x10 [ 103.233568][ T6423] ? find_held_lock+0x2d/0x110 [ 103.233637][ T6423] ? mm_get_unmapped_area+0x95/0xe0 [ 103.233670][ T6423] ? shmem_get_unmapped_area+0x183/0xa20 [ 103.233695][ T6423] ? cap_mmap_addr+0x53/0x320 [ 103.233732][ T6423] mmap_region+0x127/0x320 [ 103.233772][ T6423] do_mmap+0xa09/0x1050 [ 103.233815][ T6423] vm_mmap_pgoff+0x203/0x3a0 [ 103.233856][ T6423] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 103.233895][ T6423] ? __x64_sys_futex+0x1e1/0x4c0 [ 103.233928][ T6423] ? __x64_sys_futex+0x1ea/0x4c0 [ 103.233966][ T6423] ksys_mmap_pgoff+0x7d/0x5c0 [ 103.233996][ T6423] ? rcu_is_watching+0x12/0xc0 [ 103.234032][ T6423] __x64_sys_mmap+0x125/0x190 [ 103.234062][ T6423] do_syscall_64+0xcd/0x250 [ 103.234099][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.234134][ T6423] RIP: 0033:0x7fdf03585d29 [ 103.234154][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.234176][ T6423] RSP: 002b:00007fdf04390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 103.234199][ T6423] RAX: ffffffffffffffda RBX: 00007fdf03775fa0 RCX: 00007fdf03585d29 [ 103.234216][ T6423] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 103.234231][ T6423] RBP: 00007fdf03601b08 R08: 0000000000000401 R09: 0000000000008000 [ 103.234246][ T6423] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 103.234260][ T6423] R13: 0000000000000000 R14: 00007fdf03775fa0 R15: 00007ffeb6255be8 [ 103.234292][ T6423] [ 109.812796][ T6479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.825858][ T6479] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.954960][ T6479] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.014985][ T6479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.021625][ T6479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.032888][ T6479] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.165056][ T6479] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.295550][ T6479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.322937][ T6479] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.506031][ T6479] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.740543][ T6479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.776832][ T6479] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.904678][ T6479] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.072494][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.113494][ T6497] netlink: 346 bytes leftover after parsing attributes in process `syz.1.121'. [ 111.376345][ T6502] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.033004][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.352544][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.752786][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.153235][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.834069][ T6541] Invalid ELF header magic: != ELF [ 114.112572][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.432643][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.832642][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.846547][ T6554] Invalid ELF header magic: != ELF [ 115.238033][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.202531][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.512590][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.922590][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.312534][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.494911][ T6533] Process accounting resumed [ 118.851957][ T6603] Invalid ELF header magic: != ELF [ 123.530753][ T6656] Invalid ELF header magic: != ELF [ 125.681973][ T6639] Process accounting resumed [ 132.473722][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 133.245211][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.251573][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.846167][ T5843] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 141.664923][ T6905] sd 0:0:1:0: PR command failed: 1026 [ 141.684359][ T6905] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 141.691130][ T6905] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 142.972532][ T6942] FAULT_INJECTION: forcing a failure. [ 142.972532][ T6942] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.991915][ T6945] FAULT_INJECTION: forcing a failure. [ 142.991915][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 143.011842][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.1.223 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 143.011871][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.011883][ T6942] Call Trace: [ 143.011888][ T6942] [ 143.011896][ T6942] dump_stack_lvl+0x16c/0x1f0 [ 143.011934][ T6942] should_fail_ex+0x497/0x5b0 [ 143.011971][ T6942] _copy_from_user+0x2e/0xd0 [ 143.011993][ T6942] copy_msghdr_from_user+0x99/0x160 [ 143.012026][ T6942] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.012064][ T6942] ? __pfx___lock_acquire+0x10/0x10 [ 143.012090][ T6942] ___sys_recvmsg+0xdc/0x1a0 [ 143.012122][ T6942] ? __pfx____sys_recvmsg+0x10/0x10 [ 143.012153][ T6942] ? find_held_lock+0x2d/0x110 [ 143.012198][ T6942] ? __pfx___might_resched+0x10/0x10 [ 143.012222][ T6942] ? __might_fault+0xe3/0x190 [ 143.012249][ T6942] do_recvmmsg+0x2f8/0x740 [ 143.012274][ T6942] ? __pfx_do_recvmmsg+0x10/0x10 [ 143.012293][ T6942] ? vfs_write+0x306/0x1150 [ 143.012327][ T6942] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 143.012366][ T6942] ? __fget_files+0x206/0x3a0 [ 143.012401][ T6942] __x64_sys_recvmmsg+0x239/0x290 [ 143.012425][ T6942] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 143.012455][ T6942] do_syscall_64+0xcd/0x250 [ 143.012486][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.012518][ T6942] RIP: 0033:0x7fdf03585d29 [ 143.012537][ T6942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.012563][ T6942] RSP: 002b:00007fdf0434e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.012596][ T6942] RAX: ffffffffffffffda RBX: 00007fdf03776160 RCX: 00007fdf03585d29 [ 143.012609][ T6942] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 143.012621][ T6942] RBP: 00007fdf0434e090 R08: 0000000000000000 R09: 0000000000000000 [ 143.012633][ T6942] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 143.012644][ T6942] R13: 0000000000000000 R14: 00007fdf03776160 R15: 00007ffeb6255be8 [ 143.012671][ T6942] [ 143.214042][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.224392][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.0.226 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 143.224424][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.224437][ T6945] Call Trace: [ 143.224443][ T6945] [ 143.224451][ T6945] dump_stack_lvl+0x16c/0x1f0 [ 143.224486][ T6945] should_fail_ex+0x497/0x5b0 [ 143.224515][ T6945] ? fs_reclaim_acquire+0xae/0x150 [ 143.224544][ T6945] should_failslab+0xc2/0x120 [ 143.224572][ T6945] __kmalloc_node_noprof+0xd1/0x520 [ 143.224604][ T6945] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 143.224639][ T6945] __kvmalloc_node_noprof+0xad/0x1a0 [ 143.224669][ T6945] proc_sys_call_handler+0x2a8/0x5a0 [ 143.224701][ T6945] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 143.224744][ T6945] vfs_read+0x87f/0xbe0 [ 143.224778][ T6945] ? __pfx_vfs_read+0x10/0x10 [ 143.224823][ T6945] ksys_read+0x12b/0x250 [ 143.224849][ T6945] ? __pfx_ksys_read+0x10/0x10 [ 143.224885][ T6945] do_syscall_64+0xcd/0x250 [ 143.224919][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.224953][ T6945] RIP: 0033:0x7f650e585d29 [ 143.224971][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.224991][ T6945] RSP: 002b:00007f650f471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.225012][ T6945] RAX: ffffffffffffffda RBX: 00007f650e775fa0 RCX: 00007f650e585d29 [ 143.225028][ T6945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 143.225040][ T6945] RBP: 00007f650f471090 R08: 0000000000000000 R09: 0000000000000000 [ 143.225053][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.225066][ T6945] R13: 0000000000000000 R14: 00007f650e775fa0 R15: 00007fffa221bae8 [ 143.225097][ T6945] [ 144.110758][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 146.018666][ T7012] vivid-003: ================= START STATUS ================= [ 146.048999][ T7012] vivid-003: Radio HW Seek Mode: Bounded [ 146.079358][ T7012] vivid-003: Radio Programmable HW Seek: false [ 146.134738][ T7012] vivid-003: RDS Rx I/O Mode: Block I/O [ 146.204511][ T7012] vivid-003: Generate RBDS Instead of RDS: false [ 146.250330][ T7012] vivid-003: RDS Reception: true [ 146.258327][ T7012] vivid-003: RDS Program Type: 0 inactive [ 146.275628][ T7012] vivid-003: RDS PS Name: inactive [ 146.302563][ T7012] vivid-003: RDS Radio Text: inactive [ 146.312702][ T7012] vivid-003: RDS Traffic Announcement: false inactive [ 146.343669][ T7012] vivid-003: RDS Traffic Program: false inactive [ 146.365149][ T7012] vivid-003: RDS Music: false inactive [ 146.370715][ T7012] vivid-003: ================== END STATUS ================== [ 147.568342][ T7036] sp0: Synchronizing with TNC [ 147.897675][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 148.325948][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 148.427308][ T7049] bond0: (slave bond_slave_1): Releasing backup interface [ 150.910002][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.269'. [ 156.048487][ T7136] Process accounting paused [ 160.460534][ T7033] ------------[ cut here ]------------ [ 160.466885][ T7033] WARNING: CPU: 1 PID: 7033 at mm/page_alloc.c:4729 __alloc_pages_noprof+0x1f66/0x2470 [ 160.476967][ T7033] Modules linked in: [ 160.480899][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.1.250 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 160.491270][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.501459][ T7033] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 160.507725][ T7033] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 3c 03 58 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 160.527565][ T7033] RSP: 0018:ffffc9000531f918 EFLAGS: 00010246 [ 160.533731][ T7033] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 160.541746][ T7033] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 160.550363][ T7033] RBP: 0000000000800000 R08: 0000000000000006 R09: 00000000003fffff [ 160.558716][ T7033] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 160.566906][ T7033] R13: 1ffff92000a63f37 R14: 0000000000800000 R15: 00000000003fffff [ 160.575062][ T7033] FS: 00007fdf043906c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 160.584194][ T7033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.590924][ T7033] CR2: 00007ffd99bfce60 CR3: 0000000033b62000 CR4: 00000000003526f0 [ 160.599017][ T7033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 160.607346][ T7033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 160.615441][ T7033] Call Trace: [ 160.618774][ T7033] [ 160.621742][ T7033] ? __warn+0xea/0x3c0 [ 160.625942][ T7033] ? __alloc_pages_noprof+0x1f66/0x2470 [ 160.631552][ T7033] ? report_bug+0x3c0/0x580 [ 160.636220][ T7033] ? handle_bug+0x54/0xa0 [ 160.640595][ T7033] ? exc_invalid_op+0x17/0x50 [ 160.645459][ T7033] ? asm_exc_invalid_op+0x1a/0x20 [ 160.650561][ T7033] ? __alloc_pages_noprof+0x1f66/0x2470 [ 160.656578][ T7033] ? __pfx___schedule+0x10/0x10 [ 160.661495][ T7033] ? hlock_class+0x4e/0x130 [ 160.666424][ T7033] ? __lock_acquire+0x15a9/0x3c40 [ 160.671509][ T7033] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 160.677520][ T7033] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.682851][ T7033] ? find_held_lock+0x2d/0x110 [ 160.687666][ T7033] ___kmalloc_large_node+0x84/0x1b0 [ 160.692991][ T7033] __kmalloc_large_node_noprof+0x1c/0x70 [ 160.698682][ T7033] __kmalloc_noprof.cold+0xc/0x63 [ 160.703840][ T7033] ? __might_fault+0xe3/0x190 [ 160.708747][ T7033] ? tomoyo_write_control+0x267/0x13d0 [ 160.714310][ T7033] tomoyo_write_control+0x267/0x13d0 [ 160.719656][ T7033] ? rcu_is_watching+0x12/0xc0 [ 160.725655][ T7033] ? __pfx_tomoyo_write_control+0x10/0x10 [ 160.725698][ T7033] ? ksys_write+0x12b/0x250 [ 160.725737][ T7033] ? __pfx_tomoyo_write+0x10/0x10 [ 160.725772][ T7033] vfs_write+0x24c/0x1150 [ 160.725808][ T7033] ? __fget_files+0x1fc/0x3a0 [ 160.725843][ T7033] ? __pfx___mutex_lock+0x10/0x10 [ 160.725880][ T7033] ? __pfx_vfs_write+0x10/0x10 [ 160.725924][ T7033] ? __fget_files+0x206/0x3a0 [ 160.725969][ T7033] ksys_write+0x12b/0x250 [ 160.726002][ T7033] ? __pfx_ksys_write+0x10/0x10 [ 160.726047][ T7033] do_syscall_64+0xcd/0x250 [ 160.726088][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.726134][ T7033] RIP: 0033:0x7fdf03585d29 [ 160.726159][ T7033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.726184][ T7033] RSP: 002b:00007fdf04390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.726213][ T7033] RAX: ffffffffffffffda RBX: 00007fdf03775fa0 RCX: 00007fdf03585d29 [ 160.726233][ T7033] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 160.726250][ T7033] RBP: 00007fdf03601b08 R08: 0000000000000000 R09: 0000000000000000 [ 160.726268][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.726285][ T7033] R13: 0000000000000000 R14: 00007fdf03775fa0 R15: 00007ffeb6255be8 [ 160.726323][ T7033] [ 160.726338][ T7033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 160.726351][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.1.250 Not tainted 6.13.0-syzkaller-02526-gc4b9570cfb63 #0 [ 160.726380][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.726394][ T7033] Call Trace: [ 160.726402][ T7033] [ 160.726412][ T7033] dump_stack_lvl+0x3d/0x1f0 [ 160.726445][ T7033] panic+0x71d/0x800 [ 160.726474][ T7033] ? __pfx_panic+0x10/0x10 [ 160.726505][ T7033] ? show_trace_log_lvl+0x29d/0x3d0 [ 160.726543][ T7033] ? __alloc_pages_noprof+0x1f66/0x2470 [ 160.726575][ T7033] check_panic_on_warn+0xab/0xb0 [ 160.726608][ T7033] __warn+0xf6/0x3c0 [ 160.726638][ T7033] ? __alloc_pages_noprof+0x1f66/0x2470 [ 160.726673][ T7033] report_bug+0x3c0/0x580 [ 160.726710][ T7033] handle_bug+0x54/0xa0 [ 160.726731][ T7033] exc_invalid_op+0x17/0x50 [ 160.726755][ T7033] asm_exc_invalid_op+0x1a/0x20 [ 160.726787][ T7033] RIP: 0010:__alloc_pages_noprof+0x1f66/0x2470 [ 160.726823][ T7033] Code: 24 38 41 89 c6 0f b6 c0 44 8b ac 24 84 00 00 00 89 44 24 18 e9 a8 f7 ff ff 90 0f 0b 90 e9 b6 f7 ff ff c6 05 3c 03 58 0e 01 90 <0f> 0b 90 e9 d9 e4 ff ff 90 0f 0b 90 e9 4e fb ff ff 83 bc 24 80 00 [ 160.726844][ T7033] RSP: 0018:ffffc9000531f918 EFLAGS: 00010246 [ 160.726863][ T7033] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 160.726877][ T7033] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 160.726892][ T7033] RBP: 0000000000800000 R08: 0000000000000006 R09: 00000000003fffff [ 160.726907][ T7033] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 160.726922][ T7033] R13: 1ffff92000a63f37 R14: 0000000000800000 R15: 00000000003fffff [ 160.726963][ T7033] ? __pfx___schedule+0x10/0x10 [ 160.727000][ T7033] ? hlock_class+0x4e/0x130 [ 160.727032][ T7033] ? __lock_acquire+0x15a9/0x3c40 [ 160.727059][ T7033] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 160.727099][ T7033] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.727153][ T7033] ? find_held_lock+0x2d/0x110 [ 160.727190][ T7033] ___kmalloc_large_node+0x84/0x1b0 [ 160.727224][ T7033] __kmalloc_large_node_noprof+0x1c/0x70 [ 160.727258][ T7033] __kmalloc_noprof.cold+0xc/0x63 [ 160.727292][ T7033] ? __might_fault+0xe3/0x190 [ 160.727316][ T7033] ? tomoyo_write_control+0x267/0x13d0 [ 160.727345][ T7033] tomoyo_write_control+0x267/0x13d0 [ 160.727380][ T7033] ? rcu_is_watching+0x12/0xc0 [ 160.727414][ T7033] ? __pfx_tomoyo_write_control+0x10/0x10 [ 160.727437][ T7033] ? ksys_write+0x12b/0x250 [ 160.727475][ T7033] ? __pfx_tomoyo_write+0x10/0x10 [ 160.727507][ T7033] vfs_write+0x24c/0x1150 [ 160.727539][ T7033] ? __fget_files+0x1fc/0x3a0 [ 160.727571][ T7033] ? __pfx___mutex_lock+0x10/0x10 [ 160.727604][ T7033] ? __pfx_vfs_write+0x10/0x10 [ 160.727645][ T7033] ? __fget_files+0x206/0x3a0 [ 160.727687][ T7033] ksys_write+0x12b/0x250 [ 160.727717][ T7033] ? __pfx_ksys_write+0x10/0x10 [ 160.727758][ T7033] do_syscall_64+0xcd/0x250 [ 160.727794][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.727828][ T7033] RIP: 0033:0x7fdf03585d29 [ 160.727848][ T7033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.727870][ T7033] RSP: 002b:00007fdf04390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.727893][ T7033] RAX: ffffffffffffffda RBX: 00007fdf03775fa0 RCX: 00007fdf03585d29 [ 160.727909][ T7033] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 160.727923][ T7033] RBP: 00007fdf03601b08 R08: 0000000000000000 R09: 0000000000000000 [ 160.727937][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.727951][ T7033] R13: 0000000000000000 R14: 00007fdf03775fa0 R15: 00007ffeb6255be8 [ 160.727983][ T7033] [ 160.728241][ T7033] Kernel Offset: disabled