last executing test programs: 8.989524794s ago: executing program 3 (id=418): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x60800, 0x0) r0 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy18/hwsim/ps\x00', 0x828182, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x9bc) unshare$auto(0x3) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x105240, 0x0) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto(0x3, 0x541b, 0x10000000000402) open(0x0, 0x2002, 0x1) r2 = prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x1, 0x84) r3 = socket(0x2a, 0x2, 0xdd2a) bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_4={0x16, r2, 0x4, r3}, 0x11) socket(0xa, 0x4, 0x3) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) socket(0x10, 0x2, 0xf) 8.494169953s ago: executing program 0 (id=419): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video14\x00', 0x1a1983, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(r1, 0x0, 0x400018) ioctl$auto(0x3, 0xc0485619, 0x38) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) r2 = socket(0x2b, 0x1, 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) 8.163430973s ago: executing program 3 (id=421): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, 0xfffffffffffffffa, 0x6) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) mmap$auto(0x3, 0x200000000005, 0xdf, 0xeb5, 0x401, 0x8001) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/io_timeout\x00', 0x129882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x40246f4c, 0x38) unshare$auto(0x40000080) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x3, {0x8005, 0x3, 0x2, 0x7, 0x2, 0x73, 0xfffffffd, 0x10003, 0x3}}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0xfff, 0x4800c000, 0x800c000}, 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) timerfd_create$auto(0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1p\x00', 0x501900, 0x0) prctl$auto(0xcb, 0x1, 0x4, 0x8, 0x7) open(0x0, 0x200000, 0x181) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) 7.321396066s ago: executing program 2 (id=422): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) 7.236052836s ago: executing program 0 (id=423): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) 6.502359196s ago: executing program 1 (id=424): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xb5, 0xeb1, r0, 0x167c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"}) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x420103, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) 6.289960759s ago: executing program 0 (id=425): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) 6.253893557s ago: executing program 2 (id=426): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) 5.996035109s ago: executing program 3 (id=427): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3da) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_RINGS_TX_PUSH={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) fcntl$auto(0x3, 0x4, 0xa553) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps\x00', 0x709801, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) 5.280209697s ago: executing program 1 (id=428): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r1 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000002c0)={0x7fe3, 0x6, "b908674cfda2f7f351c66f681b0cf4a6f675fcee96065fdca6f219ea386de55097e14dbb38e0462dd9d44d7c6c55e2a5937efe361800", "3b6e33d493a9c79b3387938d612ceab5a4a20e605cd0842aa149397ff8063b45d44f8ce95fa39df1e5e1fc5e51f00fa2dfcc38c9b1ef6596b9e746f5e48ac07048156ea6be1e1ca5d281c7bb11333d0f", 0x397, 0x3, "d3bc655e384df871894a5771758ff164f2cd8098ac193333046911421bc3f1a0cf5d0300000000000000a9001fa7efb0600cc93b5b84a000"}) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000001c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x7, 0xe64, 0xffffffffffffffff, @relative_fd, 0xf5}, 0x9e) splice$auto(r1, &(0x7f0000001d00)=0x1, 0xffffffffffffffff, 0x0, 0x6, 0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x4, 0x10000}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r3, r3, 0x0, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020006, 0x7, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x8900, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000140)=0x6) r4 = gettid() prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x81, 0x3, r4, 0x9, 0x81) ioctl$auto_NS_GET_NSTYPE(r1, 0xb703, 0x0) r5 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) read$auto_proc_timers_operations_base(r5, &(0x7f0000000080)=""/173, 0xad) write$auto(0x3, 0x0, 0x7ffffffa) write$auto(0x3, 0x0, 0x5c8) 5.161977368s ago: executing program 0 (id=429): mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x24, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) read$auto_virtual_ncidev_fops_virtual_ncidev(r0, &(0x7f0000000000)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) write$auto(r2, &(0x7f0000000080)='(\x00', 0x5) mmap$auto(0x3, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) bpf$auto(0x0, &(0x7f0000000340)=@query={@target_fd, 0xfffffffd, 0xf6, 0xb, 0x5, @count=0x5, 0x0, 0x3, 0x5, 0x2, 0x7}, 0xe29) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa0541, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) mlockall$auto(0x7) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd4/queue/scheduler\x00', 0x20140, 0x0) madvise$auto(0x6, 0xccc7, 0x1) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/192, 0xc0) 5.104314124s ago: executing program 2 (id=430): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x29, 0x40, 0x0, 0x10001) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x60800, 0x0) r0 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy18/hwsim/ps\x00', 0x828182, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x9bc) unshare$auto(0x3) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x105240, 0x0) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto(0x3, 0x541b, 0x10000000000402) open(0x0, 0x2002, 0x1) r2 = prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x1, 0x84) r3 = socket(0x2a, 0x2, 0xdd2a) bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_4={0x16, r2, 0x4, r3}, 0x11) socket(0xa, 0x4, 0x3) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) socket(0x10, 0x2, 0xf) 4.475532559s ago: executing program 3 (id=431): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video14\x00', 0x1a1983, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(r1, 0x0, 0x400018) ioctl$auto(0x3, 0xc0485619, 0x38) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) r2 = socket(0x2b, 0x1, 0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) 4.115766641s ago: executing program 1 (id=432): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc10c5541, 0xffffffffffffffff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(r0, 0xffffffffffffffff, 0xfffff21b) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r3, 0x5453, r3) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) ioctl$auto_FIOQSIZE(r4, 0x5460, 0xffffffffffffffff) read$auto_aoe_fops_aoechr(r4, &(0x7f0000000040)=""/4096, 0x1000) close_range$auto(0x2, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100}, 0x2e) io_uring_setup$auto(0x1, 0x0) 4.03667636s ago: executing program 2 (id=433): mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x404, 0x8003) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x400, 0x0, 0x2000000000, 0x9}, 0x2}, 0x9, 0x80) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0x161342, 0x100) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) pkey_mprotect$auto(0x0, 0x7, 0x6, 0xfffffffb) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) 2.959253861s ago: executing program 1 (id=434): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) flock$auto(0xffffffffffffffff, 0x9) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/250, 0xfa) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) 2.557314626s ago: executing program 2 (id=435): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xb5, 0xeb1, r0, 0x167c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "147f624b05a2b22a62eb108f57b62c1a128c0f4a188dab9dc484db51686adb5a70d52b7f2f66145c31facd1cbb574c587628bd4cd6107b246f8f98fc23c6a864a492955d4c9350848a1d376d48008c8245ef620306a514c0e2f4dccf4932b8161402a453d31f6a2849bd701d53c73b5c87638db257f5ee75b4b2f3050dcd85bdda18e5f6c8f07bcbafc93b528f48baacd00dff67c662817347d58f7e2540061f146deeeb8a8fbea98e59c0ed49ac5898827aaa13b42a504dc9de98747915c70a39df9e7ad1373109c541923589e6364976cd3168fe3d0f085186627bde1577bbf260387eb8ecb5ad8d705de9f1e9b3d50ce454db9cbecf236dffbd3b274b5a7a63d3be027f04c7111ed622df2830ad588ef1d8b6c480b0f0772b5e7f621f8afa59a92859c296e01a7fa3f30f0d0d4337652988adb2b9d680d2c4f9896e1139548670c3598f33ba0f43def8ca1044626e75ca4d2b886f6db26ebb438a587407e59cf70e6cedf804044a4ccbccdcdcfd3e18152f5ac92af75d4deb491679de72f1b13ad5478ed08bb7acfc503580dae5c23583d01fdfecc9207f9e276540cf2328ba7a585937fd6acbda9a3a770277729be4f41177789decd4e0854b9861c08504c89215d7e8ce3473a0ad98f25d1d9e5fe2054a4ba9d3e0a67718ac00f384b74f5c8b24097e30e63af0c374c78f21d0af94486933450a311f8194051592e9e37607542244627393d338575c5a0a51815a01bd5ecf313cadddbb3c6bd4941a5c636b0c884ea266740b25c397ff3ea626070602d43ffbbebc0bddfdc47602432ecedce3bb6b0aba196f0eb714251d210bc979b4518005e41b5b6b0fc0ba793a8e77edd81553ce3a99cf9e7f4a9a41858e1971ac4127fa9995c888259e3436b7366e1344955ec1dd8628581a07056ec537e8196f87ab570af4fb4744f874fb283f8a54cae01cb32f70543eb60b6f65cc5269171d7e5fff4cbe4cc0b76983aaba8d869d8848e496e2c5359251a39e5f9d1c0c6756456dcdd744e82594b2a6bfe3db7877c7fc123c259f8f70b36b3c48ae31875d5cf3eb6b00a32e107f419a079641e51c8233f4c304b4bf7942814ec1eb8166f0b168d76fb3c05cb1d0ccd66fd15cbb399f3730076246721f4d71f5bbcb63d2309c74878bb16ec592873f7514b66118673f808c2cb16b4a7b3be7b560b5183bb231be5829d9de866ecbf23c70779c6f9d37b7d185cdf53a328eeee8ea27931c68c68edad37f2a10fbfcffacbacb80e8c39a0504bddab3156c7c35ab417aee9c979bf14718975e59ec51a37516a71abd59ddc916de121937da400f09b85e96b554a1f5688b20e2df0f814163e46db2ef60268a6c57035008998b834560a7f9a69bcde2110f8d401321db671c7cd28fce473d9dd43d598ef1e576c93281a5a510fb48e7dbfe06451e2e9718ab0b6cd6ec02b6b62ae9d6cc7ec94af64311793125d92ef9ac91b0d99445c4dae30f46ef49f8068950a6a32661094ac22af30e313fc183ebe103e709be8bcb4e657a731ac05e55a5f3b772ec5f89074fce97e565f560d172c6975dd1edde80507a9e442b208fd57520cbbcac16ddcb26fc8ef1d19d2cfb07e80d32aab1769e628303478aff29f0143140478b50d392fb3e53e0d386ea97d901c27ae5911330f337ef7048cb7f5307fb0231066c100177c09722719372aa5dcffbfa6e84469bfa884446d5848d6af5c4a324f0805e5a1c82e97387239ba24e8406edccd92d37c0bafd97160cea312ba3ef96b6982d28e0d5e2b3bba83dcee9f5de3155d635deebc55bc030f9dadc659a0b6f5a84d539077e785ed5ed098115b576a7238c3532cea0fe9f00cfad2112908e57e66be5e86339812b5257a03e735727ea8c4cf5bcf0820dcf87a906bd962806a2767971f6079613acfb781d514111f35ba1fcdecaa15764d9ca817794c536cb4b1d4a2f60cf116520aa1cd2f7ade5d38c195ee6aaa196ceeaad0a3d642b0e4b54a5c9ffe8941e4f661aba9b9d77a0e2af0d1dd8120810f4b4f93bc56a2405b32ec460ccfae654ed07abfbfc3dab30d5e0b77538033ee73833910ecb297be29cf034a1133583e5afd7633e4a1b44c844cd34eb7d5e07d74e695b4abea1a70b5eb902385563e30134ec33ada8dc78433b4eefa2ead19df77dfc71148607e5c708f7692f1645e7a323f175849bd045f0bbed4f6a06169deceb2a4d361493ee6db8c7b0bd18b9782f48f7459c9d9033221dcf6a07464c04df0b11f99a943e12b1b0b6dc71c3bfef7128b2df83f1ee99952e4cc0a51189a21302e998fd2ed37b2ae8bfd96a47d50eb3d196fea3af714157e6a4e0630e0944de57556aa3225b485388faed23a9a9d595a5ff296e8e29452ef5541230954d4d0f916a27781041902f13cf0e962527e1a0f659a95a0c3831bb62841ba3e01c74859818283ad0725e76ed82f695405fffccd90ad1be0ad211891546a2ab3f75b9872c3ad68c2f5f4d8510cf1e087e789c5ab821ef46e197a36986434b1569499ad2717db7b200afd77b7542ba00a46192341aee8fe3bfe3d6e0c2767cafca11ce2beaf97602ef9095e815ab6eaec42399865f724ee9d96217f45a84a0def5d87375c65e0430cdc83422b8d367982f2722e793c6ba37687d34f0e2068c114fae854a3158abba5f5689a40488d095de19071a71d8d7a17f4389f2d20c4c0f9c16760d52d166acc5c201cfaecc0fc54b7143c60aaaac0ae196b36f3e1447e3e0992be2642ca8302b24514bd06cce84279ce361bb8ce245ca5152848ab4cced61c67e4579c0db21efd26efc0780cf4a04b02ddaa54335fa327d57320307e0dc3fe1f6cdb686150e2235e05ddeba10a193d49408ee47f57229a6ff30351dedf61b8789900eb15db5b0069c57984ba31710509d88da1d78b3eface0ad5b2cb7f303e248cb68abfd5a0c3ac672d1f6178fe54ef67e034d38c01e3458d9b64a97eb0cccfae7efbbbc0c8b806e75ae5dbdf641d8daa862f90cac0d460c6f70a7765169cd1e9fe305db403e4e453ce84c35a3573751a93ca7dd478ba547449254f3d7ac7b05f345bf0eec346db042b982c964c81545bf05986d033df8e41e9e19d3561250514ed703444048f44763261a860aa3cf0b539544af9a1fc4ba7f989111e00dcab0e64b538a1019467c3b43641e13c2707a4fdc78648b92302a54a0e7e3de53488e852f0fe658557ad1df2cf12a898515769bcde0f4a3386764d5b2f0eba5eee1e3257215c005b3bad612ff43b4121efc277fe9b80c69eee2c1ffdcb3ef843485d636a0025848254e22cd2f51c1f85202ae22d53969072c1ec4dbb973a157059ed523b8dad9671f6bba68a9d4521564a826b208df019ea32eeaf5b8f973263fdcab4c2519ac0d5ce4c181b12ba71bb3fc02388e72e89a24152e07b264fb00b425633ca2b2aaccd7208d5df00002b7fa4502656593a8e84e4b620bc65a60bf3d3c8b0c1d0ac93bcc711b9cf206b1037d3437e515913badbd7ce52a69b32cd5b828193dac41fe0ff1a869bf086927eff915e422be23f40a54a2384e478f74bb2a397ecd214224294d9300d921afad2f50960e9830dc1ac8ee08ea0ff474d40a23b1f7dbc7761120c889b3354281751342d2429eb2555a8a57063f61c6cb3115d99d41a040c4d9fb3c5ddec980abfef33562607b7ad6fc8ac67c8026d50f2e01d949d065a8ea488b3d0d7ba296c914352b99a6c36aad4c030d1f9bef8696cb6d9dee3835646695b2a43f8682405c118477dd6486699dcd9cb93d911dae691fabfdfcc76ae48bcdf5d5ea87fffdcaf4e14faaa36689da73c9012ff943a787ec0e83f52cf221219f3468bdc010698450a19717e4ed062ab7d682d9e18c4469581bd09cd31aeaf1d17afb02b9cd769f56830d0ad155e4898889b438edfb13fb40d46bfe082ae1cd0f287805e4f2d011f43cd070f883668f45612132b19ff2f406bf80a1e5e69c741c63bc366c102a7a7e78d92e058d1f771031e582094bc7536182ddf2b88ef13d6573d0d34183c5e4dff48654ec1d18a44f6b2c67b17eb06489523bc3e7908b612e5204985cad17ff99b41650e49e469d8d80f3a2e32e93826e02160fbf19d92ab300bee4319b333aa9e96ac46d22ed71cf8394663f62362fe145094d140588c2e6f3eadc0bc16f6f6172aeac1e9ca44d93fa1399c641729e21f97f25ce5b4163419235bb98a218fa9d50b7aaa835d122c0436352b27909dcab907e43630907b23713bb445b93b8ec840b17d3d4618dd38bf58f2a0a6c3272a00aa8704774078f565faa4195ddfc15b33b196e646ebd8ab55e74da11ab4c30d031785c7c168d30ca12d23dcfa4a5a4f883f3b887fb77d822dae0a161d6c3565037a1f36bb1cf1d8601d94e4111b4ee435a98c21577b1e647ba160921881339a00a2d04210e603dcd9dfe2c40d32e5d93d9e94a5c176ca6291d5befa75121ec0abd660e2bac1458bd5609a6d725af0895b0d559ad726f34b50a06fd45f86764508386ab65ade7c76d0ce07330bf0d342216a769c98edb854cad6f6b02e0d09e713bbb7e12c786edd9d1078f3c5d0a87d34d9326e938098d674fb2d1ab1e39e3683a3ef0e00d9b66d56582e9d5f2d61a60226ee2c9cda7d44ef0504d6109fcd7978207df3eb9ed5ac860e0172907362654efb54cd6d04f7a58578fa3853d65e9243730466085905cbf1e1b34ea7a2f9dd268495d49824045074debb4c9140dfdbfc81fc6d371ec49521ddd996fd8761ada5d427348503a57a73a3ac74a540df4c2af59a1ecf644c00ebfbffafbf2990776717a2687889da69fefd0b0cb33c8351d147bcf31f98c8909e554c7ffd2cc9f64e4eb6b9c4b232489a2d912f19f79108b73a38de79fafd4a885de47810bdc4658d6d773c97e523732997392f1e02396875eda8ff955ef0ad75145cc1819df6a53878b9f1c5964146dcd73eabed0df798aea5c533fc263bc8d2533e36cde59e2cdd2ffac12cd7e6bea69ccc14b0b22b7606a6f82e8528f8dc739cd5c0ed0795d49452f257be2068055dcfaa7589ca65820d31583a81834910d8d1327469e370339dce1d87c31a750a02270cdaef457da2d50abac6651357858c391464781009209d79cf4286045773fe247e705a14b162583cd89e850df91b7517bd0a4476ac02fdc1dbd0faa81fa1e829ad0a548236939efcdf63c15b868b8712ca05571d7c0b810cc02cba9d1ae63e987b59ec3281cd706d7571d6b69a92663f11a24a68dbc6b2436b8049986f78fbe8effcf94457d5085dbf8812abb1fd431c6b465203eb67070a936a665fb19273240ed1e3905ea27b996b74b31b1216a77734b106dd9752a5f430ac5aef718c6942379dbd342aa66537e655afa95ec78cadcfc80584045cd07d43911c4d7dc3a37a4cf3cdf6eea9904c441ec02cfe0515c6c360463237aa6b3fafebcb1a59be1bf5ebe4680819f3e78ccc1e517987db6220b45bf840fb8fc9b33757a0e258468a911f2504358981410b6daad15bb0ed81ff971ef3cc89f06dacfa45a37cb37e946f5010d0a308ff760227d439f07401839b7844bd4e5f5d1824c17797c5abfb5a326f6b4626f9789d8d7a074b7f223cc4183f68e14de037a197920a858c310e3602a3c6f319b506bc4c523af495a95b74eb88af2699cbbeecbab62811ed05a0ea5e292e72e565ccbeb3fda2f32ee05ff7bfa40bfead96ace132532026e553bc4438a65ea897d64e9cdec2baa75839f9ea4dba584b81a9b813dc648e3ac31c885ec5dcedda3efc7a3a7"}) socket(0x18, 0xa, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x420103, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) 2.430701786s ago: executing program 0 (id=436): socket(0x2, 0x1, 0x106) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000100)={0x1, [0x239, 0xff, 0x6]}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x6a, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto(0x3, 0x890b, 0x38) mbind$auto(0x1, 0x3, 0x7f, &(0x7f00000000c0)=0x9, 0x10000, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) mincore$auto(0x1000, 0x8001, 0x0) 2.395619606s ago: executing program 3 (id=437): readv$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_list_modules$auto(&(0x7f0000000080)=0x1, 0x0, 0x4b1d) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x2, 0x9, 0x40) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) msgctl$auto(0x9, 0xf8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x0, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x48010) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) connect$auto(0x3, 0x0, 0x55) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000140)={r2, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) 1.916580671s ago: executing program 2 (id=438): r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x1, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe0742, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TCFLSH2(r4, 0x8910, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) close_range$auto(0x2, 0xa, 0x0) 1.867620133s ago: executing program 1 (id=439): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/range\x00', 0x100, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000000c0)="0a1b9a3c3e3efd6ea3d31791840bd70c00000082574c58e9865c42d76e1cadd6a7b7b426", 0x24) r1 = socket(0x11, 0x2, 0x6) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bus/usb/001/001\x00', 0x800, 0x0) ioctl$auto_USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x71, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_OP={0x8, 0xa, 0x5}, @CTRL_ATTR_FAMILY_ID={0x31, 0x1, 0x6}]}, 0x10e}}, 0x10004010) read$auto(r0, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x421, 0xb5a}, 0x9, 0x32a) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) getsockopt$auto_SO_RCVTIMEO_OLD(r5, 0x4, 0x14, 0x0, &(0x7f00000000c0)=0xf0b7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/hwdep\x00', 0x0, 0x0) write$auto(r6, &(0x7f0000000280)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM.\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tc\xcbB\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/dev_mcast\x00', 0x4001, 0x0) prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0x7fffffffffffffff, 0x0, 0x2, 0x8f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) setsockopt$auto_SO_PASSCRED(r7, 0xffffffc4, 0x10, 0x0, 0x81) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x108000, 0x800034, 0x9) 880.49158ms ago: executing program 0 (id=440): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x3) socket(0x2, 0x1, 0x0) listen$auto(0x3, 0xfffffffa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty30\x00', 0x62c00, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xdff1, 0xfffffffffffffffd, 0xd4, 0xffffffffffffffc0, 0x6, 0x0, 0x80009, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0xc, 0x5, 0x29a, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) prctl$auto_PR_SET_MM_ARG_START(0x3, 0x8, 0xffffffffffffffff, 0x0, 0x7) r1 = fcntl$getown(r0, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xa) getsockopt$auto(r2, 0x9, 0x29, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = prctl$auto(0xc2, 0x5, r1, 0x6, 0x8) memfd_secret$auto(0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f00000000c0)={0x7fff, 0xe, 0x80, @raw}}) ftruncate$auto(0x3, 0x700) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8040) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 659.455218ms ago: executing program 3 (id=441): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) stat$auto(0x0, &(0x7f0000000380)={0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0xa, 0xff, 0x100, 0x401, 0x5f57, 0x80000000, 0xaa}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) getsockopt$auto_SO_PASSCRED(r3, 0x1, 0x10, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptypb/power/control\x00', 0x124001, 0x0) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20048801) ioperm$auto(0xffff, 0xe, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_inv\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0xe, 0x100000000007) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffffa, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, 0xfffff7fffffffffa, 0x81) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) write$auto(0x3, 0x0, 0xfffffdef) 0s ago: executing program 1 (id=442): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r2) close_range$auto(0x0, r2, 0x7566583d) set_mempolicy$auto(0x4, 0x0, 0x5) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xb, 0x2, 0x5) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0xff, 0x0, 0xff, 0x6, 0x8, 0x80000000000000, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {0x3, 0x200}, 0x9, 0x1, 0x2, 0x7, 0x0, 0x8, 0x545, 0x1, 0x8c6a, 0x8}) read$auto(0x3, 0x0, 0x80) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 91.578408][ T5819] cgroup: Unknown subsys name 'net' [ 91.756777][ T5819] cgroup: Unknown subsys name 'cpuset' [ 91.769783][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.670095][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.035188][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.064302][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.072445][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.079988][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.087890][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.096449][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.105407][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.113517][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.120815][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.130364][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.138360][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.147782][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.155992][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.165974][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.188644][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.197366][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.211920][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.218560][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.220433][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.234537][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.882127][ T52] cfg80211: failed to load regulatory.db [ 96.894141][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 96.957689][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 97.068851][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 97.111596][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 97.341081][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.348280][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.356926][ T5835] bridge_slave_0: entered allmulticast mode [ 97.364741][ T5835] bridge_slave_0: entered promiscuous mode [ 97.374276][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.381839][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.389064][ T5832] bridge_slave_0: entered allmulticast mode [ 97.397553][ T5832] bridge_slave_0: entered promiscuous mode [ 97.427304][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.434608][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.442826][ T5835] bridge_slave_1: entered allmulticast mode [ 97.450269][ T5835] bridge_slave_1: entered promiscuous mode [ 97.457927][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.465138][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.473202][ T5832] bridge_slave_1: entered allmulticast mode [ 97.480768][ T5832] bridge_slave_1: entered promiscuous mode [ 97.494776][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.502381][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.509650][ T5834] bridge_slave_0: entered allmulticast mode [ 97.518055][ T5834] bridge_slave_0: entered promiscuous mode [ 97.604648][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.611876][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.619076][ T5834] bridge_slave_1: entered allmulticast mode [ 97.628142][ T5834] bridge_slave_1: entered promiscuous mode [ 97.638766][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.651821][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.676243][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.683732][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.691241][ T5829] bridge_slave_0: entered allmulticast mode [ 97.698617][ T5829] bridge_slave_0: entered promiscuous mode [ 97.737305][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.753277][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.760420][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.768198][ T5829] bridge_slave_1: entered allmulticast mode [ 97.776073][ T5829] bridge_slave_1: entered promiscuous mode [ 97.827584][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.855244][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.868400][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.881433][ T5835] team0: Port device team_slave_0 added [ 97.906604][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.935164][ T5835] team0: Port device team_slave_1 added [ 97.958408][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.026783][ T5832] team0: Port device team_slave_0 added [ 98.053619][ T5834] team0: Port device team_slave_0 added [ 98.075840][ T5832] team0: Port device team_slave_1 added [ 98.085831][ T5829] team0: Port device team_slave_0 added [ 98.094496][ T5834] team0: Port device team_slave_1 added [ 98.104502][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.111507][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.138138][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.169463][ T5829] team0: Port device team_slave_1 added [ 98.209610][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.216950][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.243936][ T55] Bluetooth: hci1: command tx timeout [ 98.244683][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.255087][ T55] Bluetooth: hci3: command tx timeout [ 98.301011][ T55] Bluetooth: hci2: command tx timeout [ 98.306940][ T55] Bluetooth: hci0: command tx timeout [ 98.321111][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.328118][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.354614][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.368840][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.376011][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.402454][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.415413][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.422709][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.448674][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.461019][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.468012][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.493993][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.515296][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.522458][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.548454][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.560269][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.567703][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.593691][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.657903][ T5835] hsr_slave_0: entered promiscuous mode [ 98.665335][ T5835] hsr_slave_1: entered promiscuous mode [ 98.712118][ T5832] hsr_slave_0: entered promiscuous mode [ 98.718616][ T5832] hsr_slave_1: entered promiscuous mode [ 98.725136][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.735207][ T5832] Cannot create hsr debugfs directory [ 98.855221][ T5834] hsr_slave_0: entered promiscuous mode [ 98.862634][ T5834] hsr_slave_1: entered promiscuous mode [ 98.868816][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.876504][ T5834] Cannot create hsr debugfs directory [ 98.921261][ T5829] hsr_slave_0: entered promiscuous mode [ 98.928086][ T5829] hsr_slave_1: entered promiscuous mode [ 98.938759][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.946556][ T5829] Cannot create hsr debugfs directory [ 99.453892][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.468171][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.480058][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.504789][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.568825][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.584356][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.617563][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.628987][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.713387][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.727356][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.746389][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.759415][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.878554][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.902878][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.918878][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.934324][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.047935][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.094164][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.117548][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.162522][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.179078][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.186387][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.213692][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.220985][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.257657][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.264893][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.275636][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.282832][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.301366][ T55] Bluetooth: hci3: command tx timeout [ 100.305552][ T5841] Bluetooth: hci1: command tx timeout [ 100.335784][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.380831][ T5841] Bluetooth: hci0: command tx timeout [ 100.381196][ T55] Bluetooth: hci2: command tx timeout [ 100.414438][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.427093][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.469606][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.476942][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.491900][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.529397][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.536685][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.564563][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.571827][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.583549][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.590777][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.167126][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.246622][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.363891][ T5832] veth0_vlan: entered promiscuous mode [ 101.378336][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.415420][ T5832] veth1_vlan: entered promiscuous mode [ 101.437600][ T5834] veth0_vlan: entered promiscuous mode [ 101.455062][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.475478][ T5834] veth1_vlan: entered promiscuous mode [ 101.552860][ T5832] veth0_macvtap: entered promiscuous mode [ 101.596126][ T5832] veth1_macvtap: entered promiscuous mode [ 101.615120][ T5829] veth0_vlan: entered promiscuous mode [ 101.637496][ T5835] veth0_vlan: entered promiscuous mode [ 101.645346][ T5834] veth0_macvtap: entered promiscuous mode [ 101.672995][ T5834] veth1_macvtap: entered promiscuous mode [ 101.683737][ T5829] veth1_vlan: entered promiscuous mode [ 101.693399][ T5835] veth1_vlan: entered promiscuous mode [ 101.707482][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.757639][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.769851][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.783910][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.793092][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.804001][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.846714][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.869795][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.918309][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.928230][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.938693][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.947771][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.963272][ T5835] veth0_macvtap: entered promiscuous mode [ 102.001206][ T5829] veth0_macvtap: entered promiscuous mode [ 102.026665][ T5835] veth1_macvtap: entered promiscuous mode [ 102.051190][ T5829] veth1_macvtap: entered promiscuous mode [ 102.084723][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.098297][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.105547][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.121730][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.156049][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.172136][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.181193][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.189927][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.199493][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.242854][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.256002][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.264842][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.287237][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.296676][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.309948][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.318815][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.381005][ T55] Bluetooth: hci1: command tx timeout [ 102.381293][ T5841] Bluetooth: hci3: command tx timeout [ 102.405755][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.436264][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.462054][ T5841] Bluetooth: hci2: command tx timeout [ 102.462064][ T55] Bluetooth: hci0: command tx timeout [ 102.506371][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.554221][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.571093][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.695710][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.727729][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.898953][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.915472][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.956676][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.980914][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.164577][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.195806][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.353093][ T5914] sd 0:0:1:0: PR command failed: 1026 [ 103.389331][ T5914] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 103.417714][ T5915] Setting dangerous option i915.mitigations - tainting kernel [ 103.427112][ T5914] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 103.749982][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 104.398976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 104.408962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.460698][ T5841] Bluetooth: hci1: command tx timeout [ 104.472533][ T5841] Bluetooth: hci3: command tx timeout [ 104.502630][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.536639][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.545398][ T5841] Bluetooth: hci0: command tx timeout [ 104.547539][ T55] Bluetooth: hci2: command tx timeout [ 104.618495][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.653387][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.727626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.741393][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.252288][ T5917] Zero length message leads to an empty skb [ 106.370834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.459796][ T5931] random: crng reseeded on system resumption [ 106.470924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.833921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.442806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.451665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.651090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.659784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.904496][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'. [ 119.914567][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.924219][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.939459][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.950164][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.305900][ T6129] FAULT_INJECTION: forcing a failure. [ 121.305900][ T6129] name failslab, interval 1, probability 0, space 0, times 1 [ 121.333162][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.0.37 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 121.333200][ T6129] Tainted: [U]=USER [ 121.333213][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.333229][ T6129] Call Trace: [ 121.333236][ T6129] [ 121.333247][ T6129] dump_stack_lvl+0x16c/0x1f0 [ 121.333288][ T6129] should_fail_ex+0x512/0x640 [ 121.333322][ T6129] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 121.333348][ T6129] should_failslab+0xc2/0x120 [ 121.333376][ T6129] __kmalloc_cache_noprof+0x6a/0x3e0 [ 121.333399][ T6129] ? alloc_info_private+0xc4/0x1b0 [ 121.333436][ T6129] alloc_info_private+0xc4/0x1b0 [ 121.333471][ T6129] snd_info_text_entry_open+0xae/0x2a0 [ 121.333505][ T6129] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 121.333538][ T6129] ? trace_kmem_cache_alloc+0x28/0xc0 [ 121.333570][ T6129] ? __pfx_apparmor_file_open+0x10/0x10 [ 121.333601][ T6129] ? proc_reg_open+0x21d/0x610 [ 121.333624][ T6129] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 121.333659][ T6129] proc_reg_open+0x289/0x610 [ 121.333683][ T6129] do_dentry_open+0x744/0x1c10 [ 121.333707][ T6129] ? __pfx_proc_reg_open+0x10/0x10 [ 121.333735][ T6129] vfs_open+0x82/0x3f0 [ 121.333768][ T6129] path_openat+0x1e5e/0x2d40 [ 121.333801][ T6129] ? __pfx_path_openat+0x10/0x10 [ 121.333830][ T6129] do_filp_open+0x20b/0x470 [ 121.333853][ T6129] ? __pfx_do_filp_open+0x10/0x10 [ 121.333895][ T6129] ? alloc_fd+0x471/0x7d0 [ 121.333938][ T6129] do_sys_openat2+0x11b/0x1d0 [ 121.333968][ T6129] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.334011][ T6129] __x64_sys_openat+0x174/0x210 [ 121.334043][ T6129] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.334097][ T6129] ? rcu_is_watching+0x12/0xc0 [ 121.334129][ T6129] do_syscall_64+0xcd/0x230 [ 121.334170][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.334195][ T6129] RIP: 0033:0x7fb19af8e969 [ 121.334219][ T6129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.334246][ T6129] RSP: 002b:00007fb198dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.334268][ T6129] RAX: ffffffffffffffda RBX: 00007fb19b1b6080 RCX: 00007fb19af8e969 [ 121.334284][ T6129] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 121.334299][ T6129] RBP: 00007fb19b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 121.334314][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.334328][ T6129] R13: 0000000000000000 R14: 00007fb19b1b6080 R15: 00007fff4587a548 [ 121.334359][ T6129] [ 127.727243][ T6187] mmap: syz.2.46 (6187) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.059585][ T6209] FAULT_INJECTION: forcing a failure. [ 129.059585][ T6209] name failslab, interval 1, probability 0, space 0, times 0 [ 129.082354][ T6209] CPU: 1 UID: 0 PID: 6209 Comm: syz.1.48 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 129.082405][ T6209] Tainted: [U]=USER [ 129.082416][ T6209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.082433][ T6209] Call Trace: [ 129.082444][ T6209] [ 129.082456][ T6209] dump_stack_lvl+0x16c/0x1f0 [ 129.082512][ T6209] should_fail_ex+0x512/0x640 [ 129.082574][ T6209] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 129.082618][ T6209] should_failslab+0xc2/0x120 [ 129.082660][ T6209] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 129.082696][ T6209] ? __pfx_apparmor_file_open+0x10/0x10 [ 129.082743][ T6209] ? proc_reg_open+0x21d/0x610 [ 129.082781][ T6209] proc_reg_open+0x21d/0x610 [ 129.082817][ T6209] do_dentry_open+0x744/0x1c10 [ 129.082860][ T6209] ? __pfx_proc_reg_open+0x10/0x10 [ 129.082902][ T6209] vfs_open+0x82/0x3f0 [ 129.082950][ T6209] path_openat+0x1e5e/0x2d40 [ 129.082998][ T6209] ? __pfx_path_openat+0x10/0x10 [ 129.083042][ T6209] do_filp_open+0x20b/0x470 [ 129.083075][ T6209] ? __pfx_do_filp_open+0x10/0x10 [ 129.083138][ T6209] ? alloc_fd+0x471/0x7d0 [ 129.083208][ T6209] do_sys_openat2+0x11b/0x1d0 [ 129.083252][ T6209] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.083312][ T6209] __x64_sys_openat+0x174/0x210 [ 129.083357][ T6209] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.083405][ T6209] ? rcu_is_watching+0x12/0xc0 [ 129.083449][ T6209] do_syscall_64+0xcd/0x230 [ 129.083502][ T6209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.083535][ T6209] RIP: 0033:0x7fed7438e969 [ 129.083560][ T6209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.083591][ T6209] RSP: 002b:00007fed7527a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.083620][ T6209] RAX: ffffffffffffffda RBX: 00007fed745b6080 RCX: 00007fed7438e969 [ 129.083641][ T6209] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 129.083661][ T6209] RBP: 00007fed74410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 129.083679][ T6209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.083697][ T6209] R13: 0000000000000000 R14: 00007fed745b6080 R15: 00007fff87dc1408 [ 129.083737][ T6209] [ 132.913498][ T6265] netlink: 330 bytes leftover after parsing attributes in process `syz.3.58'. [ 132.930920][ T6265] ›: renamed from hsr0 (while UP) [ 133.831965][ T6265] syz.3.58 (6265) used greatest stack depth: 21384 bytes left [ 135.788870][ T6282] Invalid ELF header magic: != ELF [ 137.378501][ T6296] FAULT_INJECTION: forcing a failure. [ 137.378501][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 137.423851][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.2.62 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 137.423902][ T6296] Tainted: [U]=USER [ 137.423912][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.423930][ T6296] Call Trace: [ 137.423941][ T6296] [ 137.423951][ T6296] dump_stack_lvl+0x16c/0x1f0 [ 137.423999][ T6296] should_fail_ex+0x512/0x640 [ 137.424042][ T6296] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 137.424073][ T6296] should_failslab+0xc2/0x120 [ 137.424116][ T6296] __kmalloc_cache_noprof+0x6a/0x3e0 [ 137.424145][ T6296] ? alloc_info_private+0xc4/0x1b0 [ 137.424192][ T6296] alloc_info_private+0xc4/0x1b0 [ 137.424234][ T6296] snd_info_text_entry_open+0xae/0x2a0 [ 137.424278][ T6296] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 137.424320][ T6296] ? trace_kmem_cache_alloc+0x28/0xc0 [ 137.424359][ T6296] ? __pfx_apparmor_file_open+0x10/0x10 [ 137.424396][ T6296] ? proc_reg_open+0x21d/0x610 [ 137.424425][ T6296] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 137.424468][ T6296] proc_reg_open+0x289/0x610 [ 137.424498][ T6296] do_dentry_open+0x744/0x1c10 [ 137.424528][ T6296] ? __pfx_proc_reg_open+0x10/0x10 [ 137.424563][ T6296] vfs_open+0x82/0x3f0 [ 137.424604][ T6296] path_openat+0x1e5e/0x2d40 [ 137.424644][ T6296] ? __pfx_path_openat+0x10/0x10 [ 137.424681][ T6296] do_filp_open+0x20b/0x470 [ 137.424710][ T6296] ? __pfx_do_filp_open+0x10/0x10 [ 137.424762][ T6296] ? alloc_fd+0x471/0x7d0 [ 137.424815][ T6296] do_sys_openat2+0x11b/0x1d0 [ 137.424855][ T6296] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.424907][ T6296] __x64_sys_openat+0x174/0x210 [ 137.424946][ T6296] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.424987][ T6296] ? rcu_is_watching+0x12/0xc0 [ 137.425037][ T6296] do_syscall_64+0xcd/0x230 [ 137.425092][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.425125][ T6296] RIP: 0033:0x7f650d38e969 [ 137.425147][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.425174][ T6296] RSP: 002b:00007f650e123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.425201][ T6296] RAX: ffffffffffffffda RBX: 00007f650d5b5fa0 RCX: 00007f650d38e969 [ 137.425219][ T6296] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 137.425236][ T6296] RBP: 00007f650d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 137.425251][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.425267][ T6296] R13: 0000000000000000 R14: 00007f650d5b5fa0 R15: 00007ffc55626868 [ 137.425301][ T6296] [ 137.832023][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.838757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.350925][ T6330] GUP no longer grows the stack in syz.3.67 (6330): 14000-401000 (4000) [ 140.390429][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.3.67 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 140.390479][ T6330] Tainted: [U]=USER [ 140.390488][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.390506][ T6330] Call Trace: [ 140.390516][ T6330] [ 140.390528][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 140.390584][ T6330] gup_vma_lookup+0x1d2/0x220 [ 140.390635][ T6330] __get_user_pages+0x234/0x36f0 [ 140.390698][ T6330] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 140.390740][ T6330] ? look_up_lock_class+0x59/0x150 [ 140.390786][ T6330] ? __pfx___get_user_pages+0x10/0x10 [ 140.390837][ T6330] ? process_vm_rw+0x216/0x2c0 [ 140.390883][ T6330] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 140.390924][ T6330] ? do_syscall_64+0xcd/0x230 [ 140.390987][ T6330] __gup_longterm_locked+0x20d/0x1850 [ 140.391055][ T6330] ? __pfx___gup_longterm_locked+0x10/0x10 [ 140.391129][ T6330] pin_user_pages_remote+0xed/0x140 [ 140.391163][ T6330] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 140.391192][ T6330] ? mm_access+0x22d/0x2e0 [ 140.391248][ T6330] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 140.391300][ T6330] ? futex_wait_queue+0x14c/0x220 [ 140.391341][ T6330] ? futex_unqueue+0xba/0x140 [ 140.391383][ T6330] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 140.391428][ T6330] ? iovec_from_user+0xbb/0x140 [ 140.391480][ T6330] ? iovec_from_user+0xbb/0x140 [ 140.391516][ T6330] process_vm_rw+0x216/0x2c0 [ 140.391559][ T6330] ? __pfx_process_vm_rw+0x10/0x10 [ 140.391611][ T6330] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.391692][ T6330] ? xfd_validate_state+0x5d/0x180 [ 140.391732][ T6330] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 140.391773][ T6330] ? do_syscall_64+0x91/0x230 [ 140.391819][ T6330] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.391858][ T6330] do_syscall_64+0xcd/0x230 [ 140.391910][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.391937][ T6330] RIP: 0033:0x7fa3f778e969 [ 140.391959][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.391985][ T6330] RSP: 002b:00007fa3f8600038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 140.392022][ T6330] RAX: ffffffffffffffda RBX: 00007fa3f79b6080 RCX: 00007fa3f778e969 [ 140.392038][ T6330] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000005c [ 140.392053][ T6330] RBP: 00007fa3f7810ab1 R08: 0000000000000003 R09: 0000000000000000 [ 140.392067][ T6330] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 140.392082][ T6330] R13: 0000000000000000 R14: 00007fa3f79b6080 R15: 00007ffc178d3638 [ 140.392112][ T6330] [ 144.165862][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 144.177487][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.187417][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.206453][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.215908][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.370048][ T6409] netlink: 330 bytes leftover after parsing attributes in process `syz.2.82'. [ 146.421491][ T6409] ›: renamed from hsr0 (while UP) [ 148.142645][ T55] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 148.170615][ T30] audit: type=1800 audit(6042712779.274:2): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.86" name="dbroot" dev="configfs" ino=8700 res=0 errno=0 [ 148.321817][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 150.307578][ T6451] random: crng reseeded on system resumption [ 150.646578][ T6461] netlink: 48 bytes leftover after parsing attributes in process `syz.3.92'.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               [ 304.154267][ T8512] FAULT_INJECTION: forcing a failure. [ 304.154267][ T8512] name failslab, interval 1, probability 0, space 0, times 0 [ 304.154339][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.3.441 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 304.154387][ T8512] Tainted: [U]=USER [ 304.154397][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.154415][ T8512] Call Trace: [ 304.154426][ T8512] [ 304.154438][ T8512] dump_stack_lvl+0x16c/0x1f0 [ 304.154492][ T8512] should_fail_ex+0x512/0x640 [ 304.154547][ T8512] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.154601][ T8512] ? bit_cursor+0x885/0x17e0 [ 304.154644][ T8512] should_failslab+0xc2/0x120 [ 304.154685][ T8512] __kmalloc_noprof+0xd2/0x510 [ 304.154727][ T8512] ? fb_get_color_depth+0x120/0x250 [ 304.154776][ T8512] bit_cursor+0x885/0x17e0 [ 304.154835][ T8512] ? __pfx_bit_cursor+0x10/0x10 [ 304.154899][ T8512] ? fb_get_color_depth+0x120/0x250 [ 304.154941][ T8512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 304.154991][ T8512] ? get_color+0x1ce/0x440 [ 304.155032][ T8512] ? __pfx_bit_cursor+0x10/0x10 [ 304.155076][ T8512] fbcon_cursor+0x40c/0x5f0 [ 304.155125][ T8512] hide_cursor+0x87/0x220 [ 304.155164][ T8512] redraw_screen+0x5d4/0x760 [ 304.155206][ T8512] ? __pfx_redraw_screen+0x10/0x10 [ 304.155244][ T8512] ? kfree+0x2b6/0x4d0 [ 304.155273][ T8512] ? vc_do_resize+0x972/0x10e0 [ 304.155327][ T8512] vc_do_resize+0xed0/0x10e0 [ 304.155398][ T8512] ? __pfx_vc_do_resize+0x10/0x10 [ 304.155441][ T8512] ? __drm_fb_helper_restore_fbdev_mode_unlocked+0x90/0x200 [ 304.155488][ T8512] fbcon_init+0xd53/0x1900 [ 304.155531][ T8512] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 304.155573][ T8512] visual_init+0x31d/0x620 [ 304.155607][ T8512] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 304.155658][ T8512] store_bind+0x61d/0x760 [ 304.155700][ T8512] ? sysfs_file_kobj+0xe4/0x290 [ 304.155746][ T8512] ? __pfx_store_bind+0x10/0x10 [ 304.155780][ T8512] dev_attr_store+0x58/0x80 [ 304.155820][ T8512] ? __pfx_dev_attr_store+0x10/0x10 [ 304.155861][ T8512] sysfs_kf_write+0xf2/0x150 [ 304.155909][ T8512] kernfs_fop_write_iter+0x351/0x510 [ 304.155948][ T8512] ? __pfx_sysfs_kf_write+0x10/0x10 [ 304.155998][ T8512] vfs_write+0x5ba/0x1180 [ 304.156031][ T8512] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 304.156075][ T8512] ? __pfx___mutex_lock+0x10/0x10 [ 304.156123][ T8512] ? __pfx_vfs_write+0x10/0x10 [ 304.156183][ T8512] ksys_write+0x12a/0x240 [ 304.156215][ T8512] ? __pfx_ksys_write+0x10/0x10 [ 304.156243][ T8512] ? rcu_is_watching+0x12/0xc0 [ 304.156292][ T8512] do_syscall_64+0xcd/0x230 [ 304.156342][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.156374][ T8512] RIP: 0033:0x7fa3f778e969 [ 304.156398][ T8512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.156427][ T8512] RSP: 002b:00007fa3f8600038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.156455][ T8512] RAX: ffffffffffffffda RBX: 00007fa3f79b6080 RCX: 00007fa3f778e969 [ 304.156475][ T8512] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 304.156493][ T8512] RBP: 00007fa3f7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 304.156511][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.156528][ T8512] R13: 0000000000000000 R14: 00007fa3f79b6080 R15: 00007ffc178d3638 [ 304.156570][ T8512] [ 304.192304][ T8512] ================================================================== [ 304.192324][ T8512] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 304.192372][ T8512] Read of size 6 at addr ffff888033ba9876 by task syz.3.441/8512 [ 304.192397][ T8512] [ 304.192414][ T8512] CPU: 1 UID: 0 PID: 8512 Comm: syz.3.441 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 304.192456][ T8512] Tainted: [U]=USER [ 304.192464][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.192482][ T8512] Call Trace: [ 304.192491][ T8512] [ 304.192503][ T8512] dump_stack_lvl+0x116/0x1f0 [ 304.192550][ T8512] print_report+0xc3/0x670 [ 304.192586][ T8512] ? __virt_addr_valid+0x5e/0x590 [ 304.192627][ T8512] ? __phys_addr+0xc6/0x150 [ 304.192666][ T8512] ? fbcon_prepare_logo+0xa03/0xc70 [ 304.192704][ T8512] kasan_report+0xe0/0x110 [ 304.192743][ T8512] ? fbcon_prepare_logo+0xa03/0xc70 [ 304.192786][ T8512] kasan_check_range+0xef/0x1a0 [ 304.192831][ T8512] __asan_memcpy+0x23/0x60 [ 304.192859][ T8512] fbcon_prepare_logo+0xa03/0xc70 [ 304.192907][ T8512] fbcon_init+0xd77/0x1900 [ 304.192947][ T8512] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 304.192985][ T8512] visual_init+0x31d/0x620 [ 304.193016][ T8512] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 304.193067][ T8512] store_bind+0x61d/0x760 [ 304.193105][ T8512] ? sysfs_file_kobj+0xe4/0x290 [ 304.193150][ T8512] ? __pfx_store_bind+0x10/0x10 [ 304.193185][ T8512] dev_attr_store+0x58/0x80 [ 304.193225][ T8512] ? __pfx_dev_attr_store+0x10/0x10 [ 304.193266][ T8512] sysfs_kf_write+0xf2/0x150 [ 304.193311][ T8512] kernfs_fop_write_iter+0x351/0x510 [ 304.193350][ T8512] ? __pfx_sysfs_kf_write+0x10/0x10 [ 304.193396][ T8512] vfs_write+0x5ba/0x1180 [ 304.193426][ T8512] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 304.193469][ T8512] ? __pfx___mutex_lock+0x10/0x10 [ 304.193515][ T8512] ? __pfx_vfs_write+0x10/0x10 [ 304.193557][ T8512] ksys_write+0x12a/0x240 [ 304.193585][ T8512] ? __pfx_ksys_write+0x10/0x10 [ 304.193614][ T8512] ? rcu_is_watching+0x12/0xc0 [ 304.193649][ T8512] do_syscall_64+0xcd/0x230 [ 304.193698][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.193730][ T8512] RIP: 0033:0x7fa3f778e969 [ 304.193753][ T8512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.193782][ T8512] RSP: 002b:00007fa3f8600038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.193810][ T8512] RAX: ffffffffffffffda RBX: 00007fa3f79b6080 RCX: 00007fa3f778e969 [ 304.193829][ T8512] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 304.193847][ T8512] RBP: 00007fa3f7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 304.193865][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.193883][ T8512] R13: 0000000000000000 R14: 00007fa3f79b6080 R15: 00007ffc178d3638 [ 304.193913][ T8512] [ 304.193923][ T8512] [ 304.193930][ T8512] Allocated by task 8511: [ 304.193944][ T8512] kasan_save_stack+0x33/0x60 [ 304.193975][ T8512] kasan_save_track+0x14/0x30 [ 304.194005][ T8512] __kasan_kmalloc+0xaa/0xb0 [ 304.194040][ T8512] __kmalloc_noprof+0x223/0x510 [ 304.194072][ T8512] kobject_get_path+0xd2/0x2a0 [ 304.194116][ T8512] kobject_uevent_env+0x289/0x1870 [ 304.194148][ T8512] net_rx_queue_update_kobjects+0x1de/0x770 [ 304.194213][ T8512] netdev_register_kobject+0x269/0x3a0 [ 304.194258][ T8512] register_netdevice+0x13dc/0x2270 [ 304.194302][ T8512] __ip_tunnel_create+0x4a8/0x680 [ 304.194342][ T8512] ip_tunnel_init_net+0x22f/0x7d0 [ 304.194385][ T8512] ops_init+0x1e2/0x5f0 [ 304.194424][ T8512] setup_net+0x21e/0x850 [ 304.194464][ T8512] copy_net_ns+0x2a6/0x5f0 [ 304.194508][ T8512] create_new_namespaces+0x3ea/0xad0 [ 304.194543][ T8512] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 304.194579][ T8512] ksys_unshare+0x45b/0xa40 [ 304.194622][ T8512] __x64_sys_unshare+0x31/0x40 [ 304.194666][ T8512] do_syscall_64+0xcd/0x230 [ 304.194715][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.194746][ T8512] [ 304.194754][ T8512] Freed by task 8511: [ 304.194768][ T8512] kasan_save_stack+0x33/0x60 [ 304.194802][ T8512] kasan_save_track+0x14/0x30 [ 304.194837][ T8512] kasan_save_free_info+0x3b/0x60 [ 304.194885][ T8512] __kasan_slab_free+0x51/0x70 [ 304.194921][ T8512] kfree+0x2b6/0x4d0 [ 304.194946][ T8512] kobject_uevent_env+0x2db/0x1870 [ 304.194980][ T8512] net_rx_queue_update_kobjects+0x1de/0x770 [ 304.195032][ T8512] netdev_register_kobject+0x269/0x3a0 [ 304.195077][ T8512] register_netdevice+0x13dc/0x2270 [ 304.195119][ T8512] __ip_tunnel_create+0x4a8/0x680 [ 304.195159][ T8512] ip_tunnel_init_net+0x22f/0x7d0 [ 304.195201][ T8512] ops_init+0x1e2/0x5f0 [ 304.195239][ T8512] setup_net+0x21e/0x850 [ 304.195278][ T8512] copy_net_ns+0x2a6/0x5f0 [ 304.195323][ T8512] create_new_namespaces+0x3ea/0xad0 [ 304.195357][ T8512] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 304.195394][ T8512] ksys_unshare+0x45b/0xa40 [ 304.195436][ T8512] __x64_sys_unshare+0x31/0x40 [ 304.195480][ T8512] do_syscall_64+0xcd/0x230 [ 304.195529][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.195561][ T8512] [ 304.195568][ T8512] The buggy address belongs to the object at ffff888033ba9800 [ 304.195568][ T8512] which belongs to the cache kmalloc-64 of size 64 [ 304.195594][ T8512] The buggy address is located 54 bytes to the right of [ 304.195594][ T8512] allocated 64-byte region [ffff888033ba9800, ffff888033ba9840) [ 304.195629][ T8512] [ 304.195636][ T8512] The buggy address belongs to the physical page: [ 304.195648][ T8512] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33ba9 [ 304.195677][ T8512] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 304.195702][ T8512] page_type: f5(slab) [ 304.195730][ T8512] raw: 00fff00000000000 ffff88801b4418c0 ffffea0000cd0100 dead000000000004 [ 304.195759][ T8512] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 304.195778][ T8512] page dumped because: kasan: bad access detected [ 304.195793][ T8512] page_owner tracks the page as allocated [ 304.195803][ T8512] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6657, tgid 6656 (syz.2.124), ts 165519983737, free_ts 165197205662 [ 304.195855][ T8512] post_alloc_hook+0x181/0x1b0 [ 304.195886][ T8512] get_page_from_freelist+0x135c/0x3920 [ 304.195921][ T8512] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 304.195959][ T8512] new_slab+0x94/0x340 [ 304.195985][ T8512] ___slab_alloc+0xd9c/0x1940 [ 304.196013][ T8512] __slab_alloc.constprop.0+0x56/0xb0 [ 304.196051][ T8512] __kmalloc_node_noprof+0x2ed/0x500 [ 304.196087][ T8512] alloc_slab_obj_exts+0x41/0xa0 [ 304.196115][ T8512] new_slab+0x28c/0x340 [ 304.196139][ T8512] ___slab_alloc+0xd9c/0x1940 [ 304.196164][ T8512] __slab_alloc.constprop.0+0x56/0xb0 [ 304.196193][ T8512] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 304.196232][ T8512] kmemdup_noprof+0x29/0x60 [ 304.196270][ T8512] neigh_sysctl_register+0xb2/0x670 [ 304.196306][ T8512] addrconf_sysctl_register+0xb9/0x1f0 [ 304.196340][ T8512] ipv6_add_dev+0xb39/0x15f0 [ 304.196369][ T8512] page last free pid 6665 tgid 6664 stack trace: [ 304.196385][ T8512] __free_frozen_pages+0x69d/0xff0 [ 304.196414][ T8512] __put_partials+0x16d/0x1c0 [ 304.196441][ T8512] qlist_free_all+0x4e/0x120 [ 304.196469][ T8512] kasan_quarantine_reduce+0x195/0x1e0 [ 304.196502][ T8512] __kasan_slab_alloc+0x69/0x90 [ 304.196538][ T8512] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 304.196573][ T8512] ptlock_alloc+0x1f/0x70 [ 304.196615][ T8512] pte_alloc_one+0x6d/0x380 [ 304.196658][ T8512] __pte_alloc+0x6d/0x3c0 [ 304.196695][ T8512] do_pte_missing+0x2925/0x3fb0 [ 304.196721][ T8512] __handle_mm_fault+0x103d/0x2a40 [ 304.196748][ T8512] handle_mm_fault+0x3fe/0xad0 [ 304.196774][ T8512] __get_user_pages+0x771/0x36f0 [ 304.196818][ T8512] populate_vma_page_range+0x278/0x3a0 [ 304.196844][ T8512] __mm_populate+0x1d8/0x380 [ 304.196867][ T8512] vm_mmap_pgoff+0x362/0x450 [ 304.196906][ T8512] [ 304.196913][ T8512] Memory state around the buggy address: [ 304.196927][ T8512] ffff888033ba9700: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 304.196948][ T8512] ffff888033ba9780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 304.196969][ T8512] >ffff888033ba9800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 304.196986][ T8512] ^ [ 304.197002][ T8512] ffff888033ba9880: 00 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc [ 304.197029][ T8512] ffff888033ba9900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 304.197046][ T8512] ================================================================== [ 304.197062][ T8512] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 304.197084][ T8512] CPU: 1 UID: 0 PID: 8512 Comm: syz.3.441 Tainted: G U 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 304.197124][ T8512] Tainted: [U]=USER [ 304.197134][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.197151][ T8512] Call Trace: [ 304.197159][ T8512] [ 304.197170][ T8512] dump_stack_lvl+0x3d/0x1f0 [ 304.197214][ T8512] panic+0x71c/0x800 [ 304.197255][ T8512] ? __pfx_panic+0x10/0x10 [ 304.197302][ T8512] ? __pfx__printk+0x10/0x10 [ 304.197347][ T8512] ? fbcon_prepare_logo+0xa03/0xc70 [ 304.197385][ T8512] check_panic_on_warn+0xab/0xb0 [ 304.197429][ T8512] end_report+0x107/0x170 [ 304.197464][ T8512] kasan_report+0xee/0x110 [ 304.197500][ T8512] ? fbcon_prepare_logo+0xa03/0xc70 [ 304.197543][ T8512] kasan_check_range+0xef/0x1a0 [ 304.197586][ T8512] __asan_memcpy+0x23/0x60 [ 304.197614][ T8512] fbcon_prepare_logo+0xa03/0xc70 [ 304.197662][ T8512] fbcon_init+0xd77/0x1900 [ 304.197702][ T8512] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 304.197740][ T8512] visual_init+0x31d/0x620 [ 304.197771][ T8512] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 304.197815][ T8512] store_bind+0x61d/0x760 [ 304.197852][ T8512] ? sysfs_file_kobj+0xe4/0x290 [ 304.197896][ T8512] ? __pfx_store_bind+0x10/0x10 [ 304.197930][ T8512] dev_attr_store+0x58/0x80 [ 304.197969][ T8512] ? __pfx_dev_attr_store+0x10/0x10 [ 304.198010][ T8512] sysfs_kf_write+0xf2/0x150 [ 304.198061][ T8512] kernfs_fop_write_iter+0x351/0x510 [ 304.198099][ T8512] ? __pfx_sysfs_kf_write+0x10/0x10 [ 304.198146][ T8512] vfs_write+0x5ba/0x1180 [ 304.198175][ T8512] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 304.198216][ T8512] ? __pfx___mutex_lock+0x10/0x10 [ 304.198263][ T8512] ? __pfx_vfs_write+0x10/0x10 [ 304.198306][ T8512] ksys_write+0x12a/0x240 [ 304.198335][ T8512] ? __pfx_ksys_write+0x10/0x10 [ 304.198364][ T8512] ? rcu_is_watching+0x12/0xc0 [ 304.198400][ T8512] do_syscall_64+0xcd/0x230 [ 304.198447][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.198477][ T8512] RIP: 0033:0x7fa3f778e969 [ 304.198499][ T8512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.198528][ T8512] RSP: 002b:00007fa3f8600038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.198556][ T8512] RAX: ffffffffffffffda RBX: 00007fa3f79b6080 RCX: 00007fa3f778e969 [ 304.198576][ T8512] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 304.198595][ T8512] RBP: 00007fa3f7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 304.198613][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.198632][ T8512] R13: 0000000000000000 R14: 00007fa3f79b6080 R15: 00007ffc178d3638 [ 304.198661][ T8512] [ 304.198991][ T8512] Kernel Offset: disabled