last executing test programs: 5.885033815s ago: executing program 1 (id=582): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x8001, 0x6, 0xffffffff, 0x2}, 0x8003, 0x0, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0x8008b705, 0x1000000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x5c3611, 0x0) writev$auto(r1, &(0x7f0000000000)={0x0, 0x710d}, 0x8000000000000001) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0xb5, 0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x2}) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) close_range$auto(r0, 0x8000, 0x40001) open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm1p/sub2/info\x00', 0x2080, 0x0) pread64$auto(r2, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) select$auto(0x2, &(0x7f0000000000)={[0x2, 0x8eac, 0x6, 0x9, 0x9, 0x2, 0x3c, 0x0, 0x3, 0x4, 0x6, 0x6, 0x80000000, 0x8, 0x1, 0x3]}, 0x0, &(0x7f0000000280)={[0xfffffffffffffff8, 0x1000000005, 0x1ff, 0x8, 0x7, 0x4, 0xfffffffffffffffc, 0x10001, 0x377, 0x5, 0x7, 0x8000, 0x3, 0x9, 0xf963, 0x80]}, &(0x7f0000000180)={0x0, 0x35}) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x5000000) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/sda/hctx0/cpu1/poll_rq_list\x00', 0x8100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x1) madvise$auto(0x6, 0xffffffffffff0001, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={0xffffffffffffffff, 0x4, 0xffff}, 0x4, 0x100000) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f00000039c0)={0x0, 0xa6ff, &(0x7f0000003980)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00000020001a80a31e97c3e5c6ac6aa83fea365644c182edda9cc09c737f11c6b9ce5bf94f041b5e85eaf2b9e67955760000", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0xffffffa6, 0x0, 0x20000000}, 0x40000) shmdt$auto(0x0) setresuid$auto(0x8, 0x8, 0x0) 5.005757894s ago: executing program 3 (id=590): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) acct$auto(&(0x7f0000000000)='/dev/ptmx\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032dbd7000ffdbdf251100fffcd86e30ff6bfedffaf2d78be9990246e54da7cd83f9efc5d42aa2d5f81f"], 0x14}}, 0x400c0) ioctl$auto(r0, 0x5403, 0xd8) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbd7000fbdbdf250a000048992a0a08000a00050000003100010006000000"], 0x10e}}, 0x10004010) acct$auto(&(0x7f0000000080)='.#(-\x82)${.)+@},\x00') socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setpriority$auto_PRIO_USER(0x2, 0x0, 0x75c) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x3, 0x4, 0xdf, 0xeb5, r0, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(r5, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc800}, 0x4000845) recvmmsg$auto(0x4, 0x0, 0x6, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt$auto(r6, 0x114, 0x2710, 0xfffffffffffffffc, 0x0) 4.910637097s ago: executing program 1 (id=591): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) socket(0xb, 0x2, 0x73) clock_gettime$auto(0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9fe) fdatasync$auto(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250743000000080001", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x20000000) pipe$auto(0x0) write$auto(r2, 0x0, 0x100000000002d9) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x567) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) set_tid_address$auto(&(0x7f0000000080)=0x6) unshare$auto(0x40000080) madvise$auto(0x1b3, 0x6, 0xffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000900", @ANYRES16=r5, @ANYBLOB="010326bd700002dcdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 4.851561716s ago: executing program 3 (id=593): r0 = socket(0x2, 0x3, 0xa) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x801) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x103041, 0x0) write$auto(r2, &(0x7f0000000180)='/dev/audio1\x00', 0xa3d9) (async) mmap$auto(0x0, 0x40009, 0xe3, 0x13, r2, 0x28000) (async) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x7ffffbff, 0x20, 0x0, 0x28) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (rerun: 32) ioperm$auto(0x7, 0x6, 0x2) (async) dup3$auto(0x8000000000000001, 0x5, 0x800000000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) mincore$auto(0x1000, 0x4000000, 0x0) (rerun: 32) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) bpf$auto(0xa, 0x0, 0x91) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (rerun: 64) 4.241323386s ago: executing program 1 (id=595): r0 = getsockopt$auto_SO_NETNS_COOKIE(0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000000)='[\x00', &(0x7f0000000040)) gettid() r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x212f02, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d) mmap$auto(0x0, 0x80000000, 0x31a, 0xeb1, r0, 0x2) r2 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f00000018c0), 0x55) setsockopt$auto(r2, 0x1, 0x40, &(0x7f0000000200)='\x00\x89e\xad\x97\xc5E\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5dB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4E>ry\x8d(\xcb\xadaH<-h\xef8\x0678]`\x1f\xe5\\\x9c\xb4\xbd 6\x9fP\x16\xb5\xa1.;d\xf5F7TgT\x908=l\x89\x05\x03\xcb\x04\x9c\x0e\x04\xb5a\xe6\xa6\x13\xf8\xb2\xe1\xab\vI;\x10\xa7\xcc\x84\x1d\xff(\x1c\x99\x90M\xba\xfe\xaa\x8e\x83\x98\xbb8\xc3\x02\x8d(\xb0\x9c@n\xb7\xd3TF\xc7\x7f\x11\x9e\x00\x00\x00\x00\x00', 0xbb) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0xfff7fffffffffff7, 0x100) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) sysfs$auto(0x2, 0x1e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x800000f000, 0x800000008, 0x6143, 0x9b72, r0, 0x8000) pidfd_open$auto(0x1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x1d, 0x2, 0x7) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r4, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) socket(0x11, 0x80003, 0x300) 3.333537159s ago: executing program 3 (id=598): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) memfd_create$auto(0x0, 0x8) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setregid$auto(0xffffffffffffffff, 0x4000000000000000) (async) fcntl$auto_F_SETOWN_EX(0xffffffffffffffff, 0xf, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) shutdown$auto(0x200000003, 0x2) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x82, 0x6, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x4, 0xfffffffffffffffd, 0x0) (async) faccessat$auto(0xffffffffffffffff, 0x0, 0x2) 3.220808447s ago: executing program 1 (id=599): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002400)='/sys/devices/virtual/mtd/mtd0/mtdblock0/ro\x00', 0x20000, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) getsockopt$auto(0x4, 0x6, 0x1f, 0xfffffffffffffffc, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/156, 0x9c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) getdents$auto(r0, &(0x7f0000000100)={0x800, 0x6, 0x3, "694e35b9d41e181fcace6c00f28fdeb373a62873d9b2445d6f402374b30e6d89639b814a9306349576d6d59f6aa6b148bf30c1824e5867e9fbda6ba5356a05656ee3ab77904f800377786443351f953c2c3fc10af304b60e61b4f2ed74a3a55bcbf31611f6cea89dcd64277a4843d59dfc3b29c22050a0363c8d6d764d909a5620ee11fee823ee520398b761473fbe3adb79722e16dd4cc19af5ab19ec35df6439f000381eb1fb0176d6aa8de2d080e629f53833d92f7752d4d9755f42a330d234a94ae0e43636d168e6c6b277019f60d59732699fe3eca5dc76ea1b53b125f036"}, 0x4c3) close_range$auto(0x2, 0x8, 0xffffffff) r1 = socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$auto(0x3, 0x0, 0xfdef) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffbfffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0x2, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0x20200, 0x15) close_range$auto(0x2, 0x8, 0x0) 2.710749142s ago: executing program 0 (id=600): mmap$auto(0x0, 0x0, 0xdd26, 0xeb1, 0x401, 0x8003) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x401, 0x4, 0xdf, 0xeb1, r0, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r1, 0x0, 0x81) acct$auto(&(0x7f0000000000)='\x83\x9f\xe0P\x91\xe5\xd4I\x14\x81\xd4\xa0\x11\x81\xb4(\xa8\xae\x91\xbb\xb5\xf2\x11U\xe8\xe8\x96\x9d\xb9\xdc$\xb6\x19\xfb)\xc5\xf6\xa8') r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x1c1141, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="110000000600"/17, 0x11) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, r3, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/netfilter/nf_log\x00', 0x101001, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) mmap$auto(0xf9, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100000001) close_range$auto(0x2, 0x8000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000100)={0x7, &(0x7f00000000c0)="3b2d3e8e17e47b83adbc0042950f73f1f8ce934782d3d8da690fca52fe10fbd44b0e774c2040ab665ea20b8aa52084dce069e032", 0x6}) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x6, 0x0, 0x86) socket(0xa, 0x1, 0x84) setgroups$auto(0x9, &(0x7f0000000040)=0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.19005707s ago: executing program 3 (id=602): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000001040), 0x280180, 0x0) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) write$auto(r0, 0x0, 0x9) 2.164456467s ago: executing program 0 (id=603): r0 = fcntl$auto_F_SETLK(0xffffffffffffffff, 0x6, 0xffffffffffffffff) sendmsg$auto_NLBL_MGMT_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8254801}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '-\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) sendmmsg$auto(r1, &(0x7f0000000340)={{&(0x7f0000000140)="331f042150a2a63c253bd3f0e16f996b6ac028dafa92213d181c5d236d08a21ac555fd8c37aa8fb628a4d434de2c21", 0x5, &(0x7f0000000240)={&(0x7f0000000180)="3937d51b6534f63e5d8bb56f6af30391fb10177ba2a7357ef95b5360a75404670caa25ca95df3032a0ca44b6f1dd9a8b3fd1a5469d7cca6fc286067e38ff55d73c58e37614ff63da1f640120ab61480976bc3ce99aa5a86d151df45aeac11826fcc611278a0d78d5e217b19b21d606f3b77d42555e6bde105535f9f472093118d528f651546e359db5a05cc4b0220c0e302481393ae61fdd7364bb105aa46bdd9b", 0xfffffffffffffffc}, 0x7, &(0x7f0000000280)="ff12a4b5453ae81d0981e2a2b74922604b82d9b50f7003f57ce8a8469135a74e167fc4a6678c4140da739739bfafb2e50d3f06cfe0117d408ec084df156eda71054c6fd1ab21b02ab3802b702160dcd8714bb176f66505e94342762826b05a2d32b00dd079190441b31845c709b8dcb9249f17a0387c86d4fd24770b1269a4598e730b42d3212e17c4c97cbd5bb0f3554d31397c63027d761c", 0x1, 0x2}, 0x1}, 0x9, 0x7) (async) sendmmsg$auto(r1, &(0x7f0000000340)={{&(0x7f0000000140)="331f042150a2a63c253bd3f0e16f996b6ac028dafa92213d181c5d236d08a21ac555fd8c37aa8fb628a4d434de2c21", 0x5, &(0x7f0000000240)={&(0x7f0000000180)="3937d51b6534f63e5d8bb56f6af30391fb10177ba2a7357ef95b5360a75404670caa25ca95df3032a0ca44b6f1dd9a8b3fd1a5469d7cca6fc286067e38ff55d73c58e37614ff63da1f640120ab61480976bc3ce99aa5a86d151df45aeac11826fcc611278a0d78d5e217b19b21d606f3b77d42555e6bde105535f9f472093118d528f651546e359db5a05cc4b0220c0e302481393ae61fdd7364bb105aa46bdd9b", 0xfffffffffffffffc}, 0x7, &(0x7f0000000280)="ff12a4b5453ae81d0981e2a2b74922604b82d9b50f7003f57ce8a8469135a74e167fc4a6678c4140da739739bfafb2e50d3f06cfe0117d408ec084df156eda71054c6fd1ab21b02ab3802b702160dcd8714bb176f66505e94342762826b05a2d32b00dd079190441b31845c709b8dcb9249f17a0387c86d4fd24770b1269a4598e730b42d3212e17c4c97cbd5bb0f3554d31397c63027d761c", 0x1, 0x2}, 0x1}, 0x9, 0x7) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000003c0), r0) r3 = getpgid(0xffffffffffffffff) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380), 0xc, &(0x7f0000000800)={&(0x7f0000000400)={0x3dc, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_LIST={0x3c8, 0x2, 0x0, 0x1, [@generic="af6d3facd261d3f48d096b48e9c5b08126626ec5ab65e6356a582d45b0ed5606c29f08b19032cf3190b1a4a6b0fd4b9fc9abd75148df5b991da74efabca2a6c21b04f4510269a846056f10697167ca86e77eeb637e4c6d8d0148120cc9025d61534a9bc7b7bb9de4052e9c7b69ba84ea06ddcdd4ca07e8ccf0d13ca23cadfd7f54cb275c4da6c3882123348b4f9b8c44e15a1cdd65c93070e63749e85a5a83f549dbea911aeb204067e5a0e50dfcc596a6906965402ad132891f7a49925b820b76d50db1422f9e7a79af31f140023d37426e832e3a33912f5fa5a49dfafb169ddc6c234e94eb98fc84fa08c003c0b0ac0109", @nested={0x14, 0xc4, 0x0, 0x1, [@nested={0x4, 0x54}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0x5}]}, @typed={0x8, 0xd2, 0x0, 0x0, @pid=r3}, @generic="c793bf0908b149414cc67cb7f0031c0c0035bc27f0b1cf169bc104eebb7cea125648bf37065de66133c08c7e76fbaa69b726499e2ae1f1bd586cb134e0f8cb91a086f2aff265f250f74a0e02b9978fbc2308bde71169ae928986c59cf97f590adb975f4322ab3068b469339eb10c0987c2a91fa5a3a4071ff7f99b3f68c3fb19bbfc0f5a7ae1c446fa0fbf7e021205773b8a166add515dfa40da256acccebdedcc73b72c72e0f0a2d6e24b6d35ed4513e89d327ce6a97427ae5c79b320b6b47da59fd469e9bd73900d71645c4f24b743dca0bc", @generic="71492d6c92fe3c2e001a8b47e211ba35619d15a4125749668c139a20a77c0a2b288c95229a4bfe24cee94f02226d7c7aa46a0d7060a720f707c50929f014cb96b6f70ca03805837202e42bd5c44fd829350c7083b7ece16b", @generic="28aa932c936751a91d853dff9c5d192f628b2fd3943a1f02095a083aa298d44331b9c1e1821696f6a74759a18342670e6be819802e11fd8d46296c5f14844d5cde010789271a40d126d1fe25998af5eb41f68d33a5ec1a2cc0fcf9a0bb0e97e072b7ac3f7f0f61c263c9446909efd34c0692fe37ce239a9c7d8823ea2199e54a19197ab49404252e267dd8b2164861f04d6663eccde1be1009b7fda96a919f0fc08bf4a951a214751b6e2af3f5b420a81dca8d5edf77eb93c0c7150ab304", @generic="77818b34e5938e55a64f8f8bd51041d55439ac69d1cd2a901eb1e9da91f237e4edbb690175ac2b11301053210086531ebb7f0958687296b68f35cc21994749c673c2a410683882c9c185102bfecd7e6a5fe58685239167534f54643e00a9239ab65e2b25f3ed3709d26e5a07766067023ac1732ac3625d735f375dbe8f439dcb93d9ca4f44acbe9135e4e84a27da961b16076570894e005ea448f9d002411b34e0206e24624587def5dcf26c4cae1dd322a91231cf07abd06682dbf9c613dc0aeda367e560ad20611a81a2432c"]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x840}, 0x4008041) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000880)="be88a8dfbbd9b7c6b92b93e3c7a1d08182fae9627cd6bb75dac3db3cd49ebdae74513ae32090802aa3443f679d5836910c4dd778dd91821e906d80340a64dd260f4b10d87ba296de29b5cb64cd3b248f2cd82ef705ad7edc94210aec9d3e99ed25e76911af12b8b3029f4d7833274fab460833d8d090015e97b0f26662cc8089571705582921d0039578e2a960a3bb18611a6b02005cb530767d164fd274e50340af429bccc2336b869ba4", 0xab) (async) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000880)="be88a8dfbbd9b7c6b92b93e3c7a1d08182fae9627cd6bb75dac3db3cd49ebdae74513ae32090802aa3443f679d5836910c4dd778dd91821e906d80340a64dd260f4b10d87ba296de29b5cb64cd3b248f2cd82ef705ad7edc94210aec9d3e99ed25e76911af12b8b3029f4d7833274fab460833d8d090015e97b0f26662cc8089571705582921d0039578e2a960a3bb18611a6b02005cb530767d164fd274e50340af429bccc2336b869ba4", 0xab) ptrace$auto_PTRACE_PEEKDATA(0x2, r3, 0x1, 0x6) (async) ptrace$auto_PTRACE_PEEKDATA(0x2, r3, 0x1, 0x6) setsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x6, 0x40, &(0x7f0000000940)='\x00', 0x5) (async) setsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x6, 0x40, &(0x7f0000000940)='\x00', 0x5) getsockname$auto(r0, &(0x7f0000000980)=@sco={0x1f, @none}, &(0x7f00000009c0)=0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'geneve1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa8, 0x0, 0x120, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000cc0), r0) (async) r8 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000cc0), r0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x6, 0x3}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x1a, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000051}, 0x10) r9 = socket(0x1d, 0x800, 0x1) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/fb1\x00', 0x40000, 0x0) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000e40), r9) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r10, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) mremap$auto(0x7, 0x4fff, 0x2, 0x400, 0x9) (async) mremap$auto(0x7, 0x4fff, 0x2, 0x400, 0x9) mmap$auto(0x9, 0x15, 0x2, 0x10, 0xffffffffffffffff, 0xe487) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000f80), r0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f00000038c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003880)={&(0x7f0000000fc0)={0x28b4, r11, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xe2, 0xe8, "bf0f2296b75d31cce62906551b9c6f566f75725e14be6ee752b19c88c4a4c1a6c967a4ea6a46a8472f3b62b848fd91c68fe905e219dc443e25cfd4400f384bf1bbdd30ce91072c516ea9bd351cb902b63b7724269dcf1488420f80bb3f3c7bca98ee9f340b24f9859c6e75823e7800c90c50a5bdc48a71cbfd84079304ec8a817aba1464e738d46d78999641ce6e2807e285c63a853fffcd9345fe0236ae1f20fcdd99ef455b3dc6be1cf85c66bc98575291a9d90055ce77c99f1b6317c0e4e0af315c586a69445447c22add26bd83bb22281d8b2414b9d6ca7eb2cc0847"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x60}, @NL80211_ATTR_KEY_DATA={0x4}, @NL80211_ATTR_BEACON_HEAD={0x505, 0xe, "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"}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0xf8, 0x136, "7f868109db7af561e806642efc31b2551d76b58f1a3a18dfe453f20eb927f4ed92bbd3546d3624199c39026e1da3d20e84a5991d503a810156fef4043bad4517bca52371e69bc034f79535fe76cb0441ca1f22a14c3f8644f5d0b2a5f0d1422304b805a701ab25231c3cae287aee4b860a54afd11da2c1fe61c9932014c4d98511116249ee1710e6fb3ff58ff4f2b299f2cf1f837eec13d4f7aa71c87132ff1287bed1d6c1c759120ded367de1bbbdcadbfdd8f7f85cfaf8a925857ec773cbcb3e964afad335e8ff30ee46e63567b6240ed77f32768fc94f256a3e40269c6739296662b1529ad4d19f73c821e7f3385c8de4b6b4"}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x21a6, 0x75, 0x0, 0x1, [@generic="62e8d8eb0f3f42df8cb1cf5185bf856e702779a088d71445da6028fd102f3d5dd993d32efc3c9d053dc1d9d4669ebb7ba1b1a808003ec0e2280572f1f0a185c8a01a05ad9aa72b9901c55e1120aaa63d0f21b9df73ce9b21a5ad889be608a59aaff66cfb0f69e83551667641e3726d953fe5b37968eccf41dde4df0cd9231421097ee4d2314cc6dceecf3b44473c40af97cdcbe583bf251d541c2e9cf7325272abda60d21c0d3f1a428d1fd483aaa55cf1630af9d774320dfe811fa1e06b23e853b4f0b9f74eb19d7d9156660fba16b0012c5bcefaa86d40", @generic="5e301d13cdefde8c5f1b4e93547156c397dd70dd94b1f20d02009213907ac04872265261706785e70f7d08565c964946794869e96d8b71924a776d27b1636734c13214353115ab5058093150bf7608765a4b927144b1c563fc149a181ca9d86a7975246efaa97aa9d37cbe7dc662e28c11c7457aaa22a3db6133", @nested={0x203a, 0x3c, 0x0, 0x1, [@generic="c87a33ca1dd660deb95cbd34b5e90f4cdf635cf6ee785a64d39f45", @nested={0x4, 0x12a}, @generic="917fbd327144ffe5293040ca179b145300ec60b196338dffdc19f42493202170661655f4bfea61a4c8ecc0e50a14cf43d93baf4d5d9c882d1514225b87eccca5ac341bf505f675ee1ac1e2d1b2416bdc77211c5f9e193d41ca3a9dfd3457e91350003d974cdcf26157c6bf5cc5a455d51e9b41b455794c1f0feec89171357d124e232b5869c37fdfb8a38ed524091512b7dfb4e441c059927b65b30ee6cb1d59d0099367a7a4759f7e747091e61370af84b2f423964c9a359b87623a049c11c70659db237ad9757e2e9ecdbc7381da7e5e811edc93fb8eeba1761365a9c47cdd1217159cd7932aa0f2dcbf0d2a46d4700df6ba96c888180b887c6899b8c84cc1038e1be773ab7e0a0ad6841744d172a78f17485d4c77f19a8d54c9429076ad35fda72a70d34f1201cd783a9ad11cbb07790cb105eb2ce6710eb021124b8055b3b546d0ef331115f01ae555004066f9a6c9c0552573e9c8a73ae19dd1a0ee85b219b8d1b42d6afec101f057f21963f3e146a372e871acae0f6f97e002e9e578d97fc3f833176072239342fbc71391d75d7e710c7e0c597d772e69410b667b7025cccd8fb5119c8f543ae8a6184560294e76e3d78346340491ed12c8e2e8a9aa4d1f6146a615a44f9ac7af18ddfa4d0f381968ca42a862e8f38685fb6306b9fa22e848eea94e25450658c82776cdde85aef147482a4828eb33d2429c3516a1a01f037f3a6c5b2c852ca6a19912722342c2e67188c5611c7ffbc9889ce6f9d0e23aed09c16a0027d925cd664cbe6de7c93edc2a5743f9eb6adb7b0142587031fa7464364167eefa78c5d46aa7108aa5e52953fb08d3653ddd2b920924b581f7548a2587f3c76972cff1d77bacb46db541869f796a67e7ba69dbdaf514eb123ad45af89b9832d3d25176fc307cea16b92852142e1156cfa08d8837b69e82b4e03783929a66127481489838113bf34cd157e847e82d2ecf4fdd5a8ed8e5db702f747a4fb37a235f39955b57ad6e8e863e7ec8e961169c1f61c35e8890418a12775f5d5c44c033062841a196155a1f6d1ccbb1029d2d2f6aa8b8c06c0cd60d42eb3755b884aff0cfbec76aa742d48248865124d2f7a2d1b8f66120b409db9daf84ea491bc195039ed69aae9a96441067d34e41bb0be654658f137a9be1ccf583eac4db55f2c72fd6238b5cb73a0e6d9e44a2086b1ecd09ef060601413d045fd9d767e8b76ee27b7ee348e80117216886f49fe4a16ee43f3f5b0d5c46a1bd3c2a1aeb3f2dc9e93eb7fabb3753158fe607ce424d67a9a1835eb9435f271e42c76b6b6ddd98e51e4467e590a86e8db7dee9ae860044e8bfd9fb3d298279d5e2dbe1d28470a1189c5a98cd10df4ae5caff3e6410ba1dc19cecd00e4904f237af5873ff17fd8ce2952efc918557a18357541bead5dece68c3cc8d839f6f0ad721c19ade41977f92523eccf9fcf2a813251c6e6b3aae398f07f624d34fb47c6f24bc2bf3d47186189db875079028d0cce6d5eabebc04b1e6033e6587ca213395fa4bca61f63789aab4347aaa966c43c3589ad40999b5239e1d1057c2575d9f5470250e3f64a587a68a28357533ada2da4f76831b994d5a40334398fddf11719dfd1a38692f8ced63d8e5671980dbc392602b23f359c869840de32922d53738966d00170242a683a8118f7dd67e17cace2ecc6d5095c0d8a0b88381451023b1924239d53e39ac8737b0294ccb2f01fd258a4f91225823ea0c80831502a8ead45fd1dd3a12bf0856b6f36fbe218445346f21c5119b512b2c9d3865ce891abd0d3f060c34526d6778347a384ed51cd88146cb6e92f2c78880acc0228eaa548aca8eee954ce2e58962b4b36730ba2fa662eafdabfbaabbbdd29db5bc1a396619b81156f94c4a1c184971190966a72960378eb568679612f9d4b7d91edc326b03781ad09a860c5f513ad38fecce1e2dfea074d6b9ab5f64379d2978421f9795e7b67d78fefa6d64b50eef44d21933ab79a8b6ad64ee87aaea97d4b83e757a941cbc9088e415e8cfafbb30b4e407b57f8d7247030c45ba0aaec550b2009684d7c055ce2e08a4d5394c2fbb1b3667c92e113bd3fac92d7422db1a6c77ef84592875a2bb62b46a7d6185ecd44b377ed13afc006445d8ab7d6026b2f73952290181ac6377378c317f79ea104ae1a04a5f32884bc51ef0babb53b24f380e7675785796ae6321ac40166268a11c0759ef9e899e70958e2dfa5c9d034bfea0837579be22dd114271ab12a748a068cbb14e9f90079d106571e32229ea810c3ea68d06163438584f4f46a92e928b27f6a518d92513169e363f05c0ba99e042cab4c01dd3a96ec53102ac80d0eb503be2ee4ab0bf65b39d5363bdb771169b112ea95ae455df0fa20177c6e5be34954c0933e90be7d7df142a5dedaf9ef34dd8400ba75e121ee1e26d124baa6091554f79e876ca31799ba545b1233d22938d63feb43446db9faf38ed33325d01103ef352de080534eb0803e785a8c345ca0afab77459530873926d655ddbee23e4cec387b728a7194b7a9243a4ddc640518ac8cd63e65b83e31b8dfef42ef368dbeaff615a42a47955bc38b3b3cf993a4d7521a01c5c97895dfe4173c93fb965f4b93f6d5fa4fabef391fed7540cfd3ed4e5d8cd993b685d9e47a41c9ac45189a11ffc448d7ba9df987a03c6e2410d32ae3e4c49844f6c63efa204348321eb4a1c4e93a9fa6eefc335936c712cac683ea38805f8fc27b0c978760a97a0aed9cfba87b51b945083458c6dc40a680dd9df93eb6f6be665540f60f1b0aeb0694d00d8c7ddc50e2ad45db393b79c1872afe1fdbbcd92987f0bb1e8f713a43f1f88f23083d13518e7dfc083555d9ddcbadd4898e5f631c7599c21f07c91e7fd6e787200fbbedebf29d8e07abb9679aa17e59de83480c41e3b00686f1aa99be77916136f0ca6ff352d146dbeb615572c6950ce834761efe6b36a1a1c111eed1d30301e2721c0581fed979389c2431a1f46a0df18ecf291966026a6226ac88b08d385e74f1ec77917f96df1a8636694d7551703d9da2d73ba05d33f8dfb9bb007f9a476d3cb46a63822d90bd38530312ee0bfef961aee171e742d11a047d5dd1d3f54b0de0c53b7479cb8b86788dc7c7ac2d7c451c7c65ba89b67b77de5bd1451113b6b6abae11483bf8a6725fe28efb47124e6e11a9191862cfd7dcc78c4ba4999439b31399ebbdc483f7165854a7761f6909e8e42b17b90fc3cbecf2656d564c27911dde5ee291ad340740005a6efd5ac0c6cc0d93cca851e3cf7c25d28a9c5547777f238ae693be86c7a03145f5bbe259caaa1d20b5a337b09b41cf7a4498a896a610d769a40f8ebe756231ff8a396e076fb2921d935b272f50a26f727a0f50d6a84aedc73aaba3e7a7121b5ae6d68cf14d77218ec2b60727c510c36615ac2cabdf2eed83c87b55e7e29fbc5af4f7fa033f1ebf46c6203d0ac360915f8fa71e846b3a8d5884ebc183220a39f1e2aea1a7d2896b7d9edf2b0f956000ba57640cc4b79e34d0b53d7517aff3181ac9f565f43eaaab7036564f0227a0a2a32ac11a0bc403475c48cff76ef331039e9f166b2d7e72336319ae38d12b7e8701dea253ac64b26435e46cc1341c92c9430bfe33da10cfd4c50d48f6ee2a066b0b3575823ace5349d9f4bf4597cef8a79f9411b74367533c0ca47e8469a547217b89e7a4717cd2d72082342133c8c097a94810367d1034603a86299950cd8d2b407f5120e5377f6e8ff985e8a536fc6bc70d1b8dbab53b92fa192e5bba6e98bca5096e77fe383e41917215974df3a08228d8ec31399413a4fc8223b1f799b3a19b2cc7fafbf5a13ac4c8b4f9a6435f94d30174011c75e9f9b671fafe2bf558b6c2b27fe7002cc475e30f1e660a1a1ba669f7ccc58d0245311c0c559ab9107fbcd32b398fbd516b5f05e3c883dfcf6003b5b618cd08f525b238ce2002c87907ae6160630bb63b5f377ed78369b457940c5ec97acfcfe1712ed9f06e134cbbfaee9a882d11fa80cc6df61d4931ad6089f8fa068c97c098d00c62e2577f2d748674f3443da5f0f67aed17ba69027b800dabc8f1a950be5a610dfee981f7ed20cb2604ff8437d79afe8342dc335da090ddd79a4dda11e7b135033b285b79b8115ccee66352630539d8b6798dc7b5135aafeea260fbb84298456ef734b9d6229fc31ad6b17172e75a6b8d48fc00d23759cba33bd48adf6abe87cece1fefe45a58b2d20ee2525aa96763b1345225e2954e00b3ad993f7124875e4338a916463b2add81cc162478a4abefd8f997524d8d48cccab1cb154ccecc10b2252610d3474060cf835cd49d2843828e47248fb334d2b2f99100121ade3f96ccc65e0282ff24685e53c2d64f876e2651e4177575b34fc405a89ffe1150953c4ca44c6c5b694e132d13bb10986bd3e03c4522e9b6626e78151409bf5b146339ee06c5f33a2dfa170f7a7b4545b560ce96e25baac6148ffa0e3203236e58976fb3909bd32187a70bd91d1fc004e04afb0f07ea7df338a0c8fc63082aa5ca6875d55ae812315a6a7c2b789a056d35157f75f13b65edaef3376c62f6f7fe931bbaa603729561afb4851c228cf57006da2d17b85408952b56b489df2a701d0fd4fa5dda62bdd0413dfab5cd0c113da962c8efc55e306439dbbd066aa8576e1cb850dc5b1d4959e730fa67e779c611326006d58ada2fc716a6e533c1075df113124d48f03212bba89d9975ac00f71247a2a589dbd4c41cad1adad24620885341cc9f326e49a22e86330ca720e21fab72bbf432207cd04c1ad941c8e33c78298d819628fa6535b23f7a0ce98587156586739aa8c58a2fb791c1f665c8f54b1537369f9887406ef7720f6e84966f152dff150555c0d9dd7092019ff5ef99a790adc0475df16f59ab67cf25cc4090ae1bac45458d9fc3ea8dc15806451d11eab3c796136e6f8333431e6a294c6bf73ecf8981af0d8246d036027d8c1f59fcaeed214bed584013cdb0b68825aaed319d7556e89b63dba217d13af11cad16c8b453d5fed1c0247f3452f40cf683b7dc2b3eb87835a9d86bff70b3a2e4263c725920cfca3ec4e57ace8a1fd978e4262362075886c3819b2614b7f9b951371eeb821ba995f5ee22e21aff478a9c96e87aa93d0f31a598c9c0972f7752fdbe62463eee77837e19684140279c7b98d525b7d9906d100fed5d8a286a84f273adf9a791e3952d306106c81d2edbfa105a389f34c2735d9883affcc6223736151724848065b32b51b9a23d2536cea53eb3b0f02203749dfc8c80eb25cc09efd439c5fffbc27ed6235c43830e1887d86770c05257a024962cf5ba1a4947d308686b4f8f658766e9453f99557857ed0e56992f2a018f282c4ae532be0706518f8498a307e767edcccdf65bfdd3723bb71c95472c25f9694574c30b8a6cd3562b79597abfcabe4a632e491c7dcd9f2538cf06b331e26ffaece1f718ee0fe9d0d453581e963071ec52d49de458f665e5e47f1e3320292b7e7285bb4c634654daf480f74f3fd8b5f5500e00b6031a7e5071bae5283857714e7e68f8f3880866ce71bf59ec83b8fcb2ba59002f6035c0f81e681faee0b9d9964aa70c45cae4ba49b6dc667ab0f2869f129ff6cd522b5c5533dd3609443ff321b75d822672794000107e11f03919bf951ac6f6f1b69d553616c969b0db557236198ee8e6733aafea7e4e20660b779ee6b42eb4462901bb57419d0eca64ad54ac7c3f160976d60a698d043632d6caaf4f6f8a4c549c596ec5874bc529511393ad335a5", @typed={0x8, 0x77, 0x0, 0x0, @pid=r3}, @generic="98f543ff970b09feca3c01", @generic="903522f13abe835220ae6aec662067f3099bc1b875a77c6b0300c2a3167029195d6f783ff2a4032aa2a70c63a61c18848d36a7e813e2af9e66ca583de1134a7f7678159273b7d435e63b21218304765d57d5e8b0173763bf42644182f8a4955770b210c637f8c28d9fe60ba2c34e64db4d113fdf1b844ab59b75471a2af52e24f8c3822a7869fc0b5c3769a05cba8f593c9d9d986cf94f814711a112247a9b4c30152cefa9f768a85b0f39216a9fac876cfaaddfafc7f37deb10c5b48f16c58b1834aca60700e25e1433ebda4bfa840b53664ea3f3d4bfc0b277a58535ea9b111b525239269d08f9de0d86f037d31b2cc8c0ed1f483bc826dee9f86a073a5dab754b630e63d75291a16084490de635a774304d1473ff6cd77d001ecf045e69f22388113f954287e12ae138e55e87397d8b20ce0fd349f134e2487541c65db2b02f8ae18c8f45c7416543a44b906d04b5b3949e154042d646c4c639bf2ec83af746bbdc077545814204d2caa0e13f96788a7245c7ad5f537753d34c58510c5ed9cf4a9c9e351c645616cd1c2d2146a481a77d3a97125ef98c44dcbed68877af2d21772c68c3118a51774a6eb1940bfc963a3cb3c65354672d050a5bdebcd76614337b2217d1d8c760530dc58a07cdea261f5c33dfc17dd805c53cc8ecdb53dba30ee40147f59f432edc1b4df9e6a180371ed0a9759bbf8c966111b784971cb5228d7f39dc8b8b270c896e05adde210b4951c020aed627c8b3280ec12be1dd2a98d4e0da420b6ca3312043970b27781abc8735c14c12cae76386929b85897e49d4f0a91fa7079e863697d0202918bcda07bbc87f258b2651d1403080a616a5ef94ead585d9d3c494f7f42eb3a0df96bc4392087352aef2b08542c675e0110a58f3e702b2376cb08af61e5f37f2756990eb0f7733b081e4bbcb216e0afe416bc61afabd0fae4fe693dfc765fe42dafed506020a28449f26d0ccb5b9cd665629636d494a02eabe16e1061310ac1f2c21b3b325725b3e9b1b8e62d59b28f08036f2e2e9a186ab49be89353d2fdc24a66bad1840ab7c6d4144208a407e2e717382edb14c4bbf536d0468e7a59b33212444a4221c3a5fe8a47e09121c4e2295c3a4ac247dfd6728aeb885dde713e80d2565e97dff2283ce16ca2c56a9c5c9ccf6c389350eda6fe8e91ac4c5700c82d358a4aa1194dec968e2d0c56520903a2864756750531fd6e3fdddb7f231c47a8d8d4c4d63c438eaf9d8409c11f813fdb7ff4988dfcba447099436d3da677aabd3684b88e414b61186815de56d3f94a0fd502719c076f103c2f64926200ec6b99b6c45217aae99d350f0252c57a601242d0b14f51cc1df119e892169d49e805aaea6eda1ede08e12af4a128d35da6069fe2b8afa83fec211905aff72a430f2c8493724b89a5f2438980a424bce12fb05659c5598cf906d14407fcb9698d5ae2fc27d701828edff1113a7d4316df20179eff98a58d79e3f5130c16bdf5c20e2d92a62adcacc80b1dd29a687be4b19afffc4600109f862006a796e59f90872f6bfaf6e76faa806b8500aa775b025d728901af00ec63791cdba54f409dc4ed3253d19496fbeb81174cdac0ac691e000f3f05b6bb7e522439f7bf5657c72bc55901f2530190510158cf059d37c995a6d02003551b11f798d345d192507947d3d5fbdb9ba2a2fd588f6168ee9471a66518f6cd0415cda0c4f3472a615841d218559a104c3c75888243531c09039a7ac9b13616bb9ffe189f092c67e60d408ac941152df68bc760afa3172927515ca93133af10ab5fd3fb2576fd2877e9e211233103ee063715c9bd9b8b1b36750984c51a21586ebe0dd6173f0ead02989db447e9e20a511ac3e7e4af97eec4c4fceb4f848d359615490b46e065d26e730bdfc7af6d3a52f0d1949a4de6eabbe8ee43a86a06833325c2847f4c60bbd0e105d56c10a49b45e9431e372f1b65fd3fe1cf99cf6ba01bdf6933cb6789d7c6590a378f4e90016c15435e445c76e91c092d21b821e5d15e9ba4f14ea8475d97497420a66efd658d9fcc3b357569d40e9ea6cb40d7788222e217a83f45fda146ca0394c2acb1cf91d8ebf9f44392e4be7b19615348311a04d4ba7232c6b3fc6f664140e2747e7c9b642e3f53f011847dc45414740350ea206827decfbfdf468db9b36d959cdd65e50d678ee4b2ac0c3adaaf5c814583d49f4598e1e7beb573ad5d02536cdab51bb748dcdbdf085a034e2b7beb5a5e89d4c2f0b2f3c415b89d8ebbef4fea7c1920a7e19eeefd8a69f676833fecff87f5b70fbc8ddaab7b81fee765427b9e8b662e5a34a84164606d9b292407e4f573afa433fb76ccf23c32178cab25b3cdb75211daf87c313ee93a1440324dbbd27f3ae6117ca4c97e5af40dcebba9b441241cecb8ce46355cc3a8f1c4f25bd1932f709c667a034558112ab914ac63940da4b91d291edda8cf7c10ce5dafe813a3f1b2788b102b1033ec02e94c7596eeba554a941ba535bbcb01cc5124290be8111277c397bd6bb71299d1b3d4f71c27fa7feeec8cd365705e3128cddb0f5018868c59d17ba2ae3c723bdd1d547cbcc7b22b65c00104ce1b254adace8747c7cc04a2f170bbb5516bd50b7040009ea6453c7f7c70508a5162a6eb4eeffeeb651073998cb4808bdcb465faa2e1e058a4532e0365fbee25764b663686c863e0ea1795cfe3d4dc581acf70631d6033b6d85fcee78e00cf07d36b7c9a1b06dc899675385aecf82713f3b311a4bba8974c02055b3fb99de6e3114f176535afe6bd0f421e47a740028b42b571cd8f79e2dad7b7e247cab685a9883a74637717e8f66bfd537944c4ec8252a9104953d72757e7675244031e9dde6e6f6cbad52ef269a75f009036993fc0a68464026f639aa849a2570e78056363f8912c7c6de0527bc26d0f72f201dea48ba4b65bd26f97ee9422c5485bfbaa679c928015109b887dee000ff3357aa4cb7700e1e9373a24c888aa30832f8ce4d9e4a56bf68ffe1464b32a488d59ace8885921128621dc99a258fabd40ff71b1f80ab16701f6edcc9fb525a8a1e7f54177076e0a2baa2415663456f24adbab1da933f9d7da665b9bafa232ae58bc40f1820ba771352799c2bbc970e1418b94d9b602e14d8b9b323bc729018d50e6b95a74bdbcba99541d1539289ddd8465f184bacca725df58b89deabfdd3b91fbfea20c767a66a67b03b30eaa39b4b59b1fbd68b391825a6d94196503b9e69d2a149b32a7ecba50b893da9c1df8732d8cef5775f603580d043465e679ecd1c7aaee7f66a940b25725828cb61fd001b8801b20ac5d4b10c71a201f7ff2481477c0d71bd577d08e830e5d112f5ca8654a97512fea873212be4a5b6330b099ccb846b74a4090f74f4dba54f5209cad9a3779d6805df8b7624b440cdbf9caef7717227b1450247ced442f5b5a795777410e71f8fa1f923ca8d4ea216bed224909e3cb97506f1518f5481a76fa41e4dea22ac91ccb52e4a282b015268527dc4d1a7df60c10b66a78ebf06d7b9ad02a5714e35cd4eed0c023e33151b80e0f50be6db16942599f7a4d1a334f8c7f763a7eb4c992baf68567e30471bd578d4973e294a1bdb233a12bd5364e02f4d02b7a6ef9a02b1107ac81bf41f000af40d9de3c401a7d8f6aaa3b67c0d786e70f3dae6c249c7e309807911db4296f1e88f8b36349567d6cad73456d8464ae418806e7448c17965ea57a44d48b53a1f0c6b87e6d489be3c711c66eeb448221d4f3bce307a834bdaa1b32e1bd73bd2e0cd0b78d9c109c49488b0bf2af1344aaebeb701c8027c302dcd2b0f2a4820ddfa7c94889577a868926b471207415d01f1ef9f49762cc2960a0614514810f75463edbad6c3d6c0bd7b1952483f728b48cbec8ee22898e19efb7f41b67d18ae2de3a0b5005d308fce89e4be63eca5f9d65771e32664309396c76fb8d895227709edb3c11b8d8d7710a843cf22cd9183c1b701346ca65241036877846926950d1703ecc092d07bfd0697585c5693c48a61d25e87977abc0b61bf23a37516147198024c1bf0ae9fe209b203d0e8207c43f2d222d33327828d4663ac56104d7c7e1f8b7b69bc0cde1b63c21814d66ff3543e78c8ce4b0f18ac58b4b4d07c9c6e848b687cb7d99b4cf53233d00c4839404a93fbac2e0879f5490b779e4d84713763d74ca5bddb83107f8aa1ea24a817127806ae0c725e0fea201d7a9113bb33332503b724faa9e541b02e0baf0f24c53cec9da3b5f785b0674d5e2580f9debe6427cb168a883dd9990b084f41818985515aa3e38a352c756d17af5e2adee12d79f39ced154407b7036c4c0bce610968e9a31f7992d20e05b03908dd5e711a4af993d52a097ef83d4e32a1c574de2bf7e59ce5d0b1ee65041fb1cb5484645f95c7daa5e1b354937d56d29f86591b4846ba496a5ffab0c3dcfa380db81a594f196897186ba7ba115c719d696a9dbf1364b15cae6d8d320faba6e0cc733ce12fca8ff35e338665b20f10c0844f5e5787f8a9e7f3fb5c579d9ce414d93bb34a1e237cd73c7b8a38653d0e5d20d54ed3a45db88247efcc1332234589e474f98e71f0cc4d98121a94583299a95d8e96f702707b554353f2f32b24698c8bd0bedd2bfb010fcd6baf2ed147b92ce2e6d53f24cff2aed589cd8c514056ca38d57b50acd2a62f55207713cba31ed6aa1ba53ce6238b7ae58b8d5ebb337a9a77531f1fa91a5f3e060d336896e5c66db4222fa6b18dd6425ec2b8eba7911eed2d21072b5b43a5127f8585b14b9593ed3aaf12e850048e9e3117c4d9b9c311ec9a0f3f32b06abdc3371d20153d50530ae151883d27e19d294e199f1360639d7506e0ef06e5a871c85f9a2d20038ba9ad7824cf9375f454f0c6bdba1de06e1a7280a8f3d36e9c6a41e93f174d053d7eedc7dc0c9b6b9b666fa95e4ebd5fe8cb54c0cd2b5f2020dcd80dc2588920103ea84bfc89cffe64450bc560e165a371def15d115f129370f507bec00acc8e77199bc05cdc06176c46940a7a9ab7a7c691c4a381335ab05b32cafb7b47a81061bfe06c23f92368bf4bacde6192d522b6c43b503b2e617019488e320a863644fce4a8a5266344e5e607fde1bc04b919fd322492351b0e6515b4a258e94bf5c5419d273d6ea390b0ad9e49f50abbb227b9ad424c658ef415caf82a8c475ccc91bc305ef76870499a9a0edd3cc9f02f1bed8a5ce83fc3a3872174725358989851af963f3a7abf1bfecb44569910899324223c7401fc892f283dcefad279114d9b3641baf8d9c43c1928e5d4a1e3efda2a00758ca6e2365bb4d3337eda5018601ad18534bf5d8c3fc4d17d8b459bf56834c7f10a1c88deb99a8e58a33e4bc69375b4326341bc69e70b3d58e8021a17a868738cf2d773a7fb2a9343821094b200f5b523b19af254d8b868de79b9c88f7acb55eba35565b26a14340ce3bff8f6eb08bb5f22cae63330d1ec6f8ce124fdb15aad89707863038e3fe6f5d46890ebd600d329150a68743fdd58c48a2c25769c351c0bd5fcb8bf4f6356ddf3696d1d8756458f585df2a17417a144ddb619a517000b56a7b217881a64fad915ea70328614e15b3f7f18e674305e63d2350c44402a709cc36141a51a5ea3ddc4dc1fc2d528b810772414e4da33b6db00129753ca11ac22dbca380c74a6d7ec1cf2c2f92d2b7d0b57de2f1f5d3c51fc81987a6478c4b8468c15ae6471e7359adc2573bcf8f3dd74692fec1c53aeef7e1e61f969a6019026b20c358fd783757f422819681de5e76153cfe30f12969003", @nested={0x4, 0x14c}]}, @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x28b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) getsockopt$auto_SO_SNDTIMEO_OLD(r1, 0x3, 0x15, &(0x7f0000003900)='NCSI\x00', &(0x7f0000003940)=0xd6d) (async) r12 = getsockopt$auto_SO_SNDTIMEO_OLD(r1, 0x3, 0x15, &(0x7f0000003900)='NCSI\x00', &(0x7f0000003940)=0xd6d) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000039c0), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r12, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x50, r13, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @pid=r3}, @typed={0x4, 0xc6}, @typed={0x14, 0xb9, 0x0, 0x0, @ipv6=@mcast1}]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xed}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xff23}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r12, 0x40084149, &(0x7f0000003b00)=0x4) 1.90327943s ago: executing program 1 (id=606): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) statmount$auto(0x0, 0x0, 0x8000001fe, 0x12) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000000c0), 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) shutdown$auto(0x200000003, 0x2) listen$auto(r3, 0x80000083) ioctl$auto(r1, 0x89f0, 0x24) 1.814533218s ago: executing program 0 (id=607): mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x15, 0x0, 0x56b) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/cpumask_isolated\x00', 0x80100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="12915fb9d5") (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3222b14561ab0a8b}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f00000001c0), r1) unshare$auto(0x40000080) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r4) mkdir$auto(&(0x7f00000002c0)='./cgroup\x00', 0x6) (async) socket(0x2, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) (async) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') 1.417853281s ago: executing program 2 (id=609): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/urbs\x00', 0x40200, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x18, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @typed={0x8, 0x23, 0x0, 0x0, @uid}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2, r1}) epoll_wait$auto(r1, &(0x7f00000007c0)={0x0, 0x200}, 0x4, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r4, 0x4004550f, &(0x7f0000000080)=0x7) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4) sendmsg$auto_NL80211_CMD_SET_STATION(r4, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000180)={0x4b0, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_RATES={0xd6, 0x5a, 0x0, 0x1, [@typed={0x14, 0x89, 0x0, 0x0, @ipv6=@local}, @generic="51f64491c840950a2aa57dc483316579ae35157fb1fd5055a6a29154b0a9749c35956411028d46a25cfb97b5d45c858cb43b4283bc713957755f43e96242a158e932ade5b66608e15350426cfb4d0b67c3640c75b2793b676fb6a8b12e7a554e2301481384a3dd0ece2125e11cfffd56e4c471d72583662bdc5c2cbf054e855423aa3c948df5b217e27ab796e4816ff669490d92ff25ca4e843bd6d408821c4aee525fed3c3b5e4e96503c889690306b4ceb4b72c05bacfe8667c14a11f1"]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1ff}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_IE_RIC={0x391, 0xb2, "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"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7fff}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x51e0}]}, 0x4b0}, 0x1, 0x0, 0x0, 0xa}, 0x80) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/76, 0x4c) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 1.264405896s ago: executing program 2 (id=610): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="250025bd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 1.153372011s ago: executing program 2 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x4024009, 0x6, 0xeb1, r0, 0x8000) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0x20499d, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44d, 0x7, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x8, 0x80000001, 0x4, 0x200000000001, 0x2000000000384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x200, 0x2, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x0, 0x401ffc, 0x0, 0xe, 0x1, 0x400, 0xfffffffffffffffd, 0x8001, 0x8, 0x2, 0x6, 0x1, 0x8, 0x63de, 0x8, 0x10000000000, 0xffffffffffffffff, 0x4, 0x2f, 0x0, 0x0, 0x3006, 0x400000000005b8, 0xffff, 0x0, 0xff, 0x8, 0xa, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8000000000000001, 0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x789, 0xa484, 0x10000001007, 0x6, 0x8000000002]}, 0xa, 0xd) (async) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd01, &(0x7f00000001c0)) (async) timerfd_create$auto(0x7, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f000000a500), 0xffffffffffffffff) (async) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = prctl$auto_PR_SET_VMA_ANON_NAME(0x2, 0x0, 0x0, 0xe2d1, 0x100000001) ioctl$auto_MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000)={0x5, 0x9, 0x58, 0x4, 0x6, 0x1000, 0x4, 0x0, 0x9, 0x6a, 0x7, 0x8, 0xfffffffe, @setup="8d166a4254df2a8c", 0x7fff, 0x5eb6, 0xda, 0x8}, &(0x7f0000000040)="7a25889567700cba82208311df70db7cdc6e5a14b247626e49c7a2a673", 0x800}) 1.049874867s ago: executing program 2 (id=612): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) fstatfs$auto(r0, &(0x7f00000000c0)={0x2, 0xe, 0x0, 0x6, 0x8000000000000001, 0x4, 0xae3, {[0x1, 0x1]}, 0x8, 0x1ff, 0xffff, [0x6, 0x7, 0x1, 0x4]}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1.049497358s ago: executing program 3 (id=613): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae67, r0) mmap$auto(0x0, 0xa, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x1, 0x106) socket(0x28, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x179040, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x480001, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xd, 0x8000000000001, 0x948b, 0x4460, 0x15f4da0a, 0xb8, 0x7, 0x2fffffffffffffd, 0x1, 0x7, 0x1, 0x4, 0x2]}, 0x0) close_range$auto(r4, 0x8, 0x0) shmget$auto(0x400, 0x7, 0x568c12f2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) clone$auto(0x100001002, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) mmap$auto(0x1, 0xc, 0x4000000000df, 0x44eb2, r2, 0x300000000000) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x20040885) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 813.617809ms ago: executing program 0 (id=614): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = io_uring_setup$auto(0xb, &(0x7f0000000040)={0x200, 0x8, 0x3, 0x8, 0x80, 0x3, r0, [0x5, 0x7, 0x2], {0x200, 0x7, 0x6, 0x9a, 0x81, 0x5ba, 0x4, 0x1, 0x7}, {0x8, 0x401, 0x0, 0x48, 0x2, 0x0, 0x4, 0xff, 0x9}}) setsockopt$auto_SO_NOFCS(r1, 0x9, 0x2b, &(0x7f00000000c0)='/dev/kvm\x00', 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.2/tty/ttyS2/io_type\x00', 0x2081, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)="132ec0a44d7b9e61704d808d0f996e5bf810bdc06d185cc9f6bc6bec859845e3a0026fecab261217aed3c4ef5e912130542026409c771154f210da5267347cc8358e7b085574805ad26042707c380910960b0b3b50c3626a48592e2fd63b9d5a7741d6a14e56bc8386d85a1d7ef5115b83606ded31c5334da116f4ca9a68fe587de99144ae2e66f1f0fdd71b8762e14c9bce46d7e19d7b7e35cd1788ff48026a8eae48f9104c97c50f409b6ac53842371d9483b6dd69cb638be6844de9070003350f6ccfe64a98d718ce3e8308fe8872ba507fad05e39f18853b757b161d5fb6eff7b5f37fc999bb285226c0323f0ed9a4feba098378b1f5a4", 0xf9) connect$auto(r3, &(0x7f0000000280)=@ax25={0x3, @null, 0x3}, 0x80) r4 = gettid() r5 = prctl$auto(0x7fffffff, 0x2, r4, 0x5d, 0x0) mmap$auto(0xe0, 0x8001, 0x10000, 0x17, r1, 0x5) r6 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/id\x00', 0x22000, 0x0) r7 = prctl$auto_PR_SET_SPECULATION_CTRL(0x35, 0x80000001, r4, 0x1b0, 0x2f61) ioctl$auto_TCSBRKP2(r1, 0x5425, &(0x7f0000000300)="bf3c4af802b00f75d3c9e9680ba5bcc0845f5159") ioctl$auto_FS_IOC_FIEMAP(r5, 0xc020660b, r7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000340), 0x40a201, 0x0) ioctl$auto_SG_EMULATED_HOST2(r1, 0x2203, &(0x7f0000000380)="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") ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000016c0)={{r6, &(0x7f0000000480)="6cbef68d999fa3b8ddb93c3ce8ea1b2bb7a0444eaab133ab2652", 0x5, &(0x7f00000004c0)="331d23d7dd3a22978a2af785c1221991", 0x1000, &(0x7f0000000500)="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", &(0x7f0000001500)=0xb4}, 0x8, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001540)="734b877856c1100b1b5c0758684671e353f0db34ef2dd36695312df20413e478f0dd203c7e5339ec79fd3fb6688ae52d8db1b0899aac86d18a76aff3aeb5dedf4a728d4997d8eb4055e349b2da98ade5e032925aab1c9c451d087106119d0edc97e44e7ac473b38f2764f9cd7d6b17858fc352a6748dd8aa08c1bb0d72f9f17d407927823e889ddf04529a121d5dcb5254f5", &(0x7f0000001600)="65d8372b7eb009f1b5ba18aa10578e198b70e0ac0c69234273f58a87afa08c5d051f832f00b7b71d2c5dea89472ad692d9692ee6861853508f6828c48566a25ced24fd76ead65bcd9ee72904e6361f08cc0b48a9c00f7a2c9ad43ff47379f78c8a657274335fb5d62bddc766", 0x2ac4, 0x6}}) setsockopt$auto_SO_BUSY_POLL(r2, 0x6, 0x2e, &(0x7f0000001740)='^M(\x00', 0x66) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000017c0), r8) sendmsg$auto_NL80211_CMD_GET_MPP(r8, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x20, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x8001) r10 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) setsockopt$auto_SO_TIMESTAMPING_OLD(r10, 0x9, 0x25, &(0x7f0000001900)='#-$\x00', 0x80000000) sendto$auto(r10, &(0x7f0000001940)="c6013b", 0x6, 0x3, &(0x7f0000001980)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4) setsockopt$auto_SO_RXQ_OVFL(r0, 0x7, 0x28, &(0x7f00000019c0)='#-$\x00', 0xb7) madvise$auto(0x4, 0x80000000, 0x10001) r11 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x24280, 0x0) mmap$auto(0x8, 0x3, 0x0, 0x12, r11, 0xb) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a80), r7) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000001c00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xe4, r12, 0x8, 0x70bd2b, 0x90, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCAN_FREQUENCIES={0x60, 0x2c, 0x0, 0x1, [@nested={0x54, 0x97, 0x0, 0x1, [@nested={0x4, 0xf3}, @typed={0x4, 0x1d}, @typed={0x8, 0x25, 0x0, 0x0, @ipv4=@loopback}, @generic="a1c7afdb1b673c479e8bcf8a81c3b88830b53b5bf1dd8cbb8f26566c75c8c83111aa27c3021eded59aeb77816b3b55ce6bdd25d2ce554503", @nested={0x4, 0x84}, @typed={0x4, 0x3a}]}, @nested={0x8, 0x11c, 0x0, 0x1, [@nested={0x4, 0x124}]}]}, @NL80211_ATTR_FILS_ERP_REALM={0x42, 0xfa, "6c346265db55907f3975f361bc93ca3eb1f92df6caf2e432171d9c65c8161b38564251d194cb5eb3570fd6c7cec4fddacdbeca3d639a32077bee0026cc9d"}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebf10efab4633caa13e9c180e17f925fdfa5f447eb496f03"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x1f, 0x0, 0x8) ioctl$auto_SNDRV_PCM_IOCTL_START2(0xffffffffffffffff, 0x4142, 0x0) 484.128026ms ago: executing program 0 (id=615): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(0xc8, 0x0, 0x84, 0xe83) ioperm$auto(0x7, 0x6, 0x1) mmap$auto(0x5, 0x400008, 0x0, 0x9b70, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r1, 0x7005, 0x0) readv$auto(r1, &(0x7f00000004c0)={0x0, 0x2004}, 0x5) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_7={@btf_id=0x9, 0x2, 0x6}, 0x10000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0x2a0400, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0xe, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) socket(0x2, 0x2, 0x88) madvise$auto(0x405, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) 311.58295ms ago: executing program 1 (id=616): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto(0x800000000000c8, 0x0, 0x1a) mmap$auto(0xffb3, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = prctl$auto(0x9, 0x4, 0x0, 0x2, 0x80000000f501) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002e00), r2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x101082, 0x0) r3 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r3, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002bc0)=""/82, 0x52) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/58, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="03002bbd7000fcdbdf2e0000a9"], 0x1c}}, 0x4044820) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) write$auto(r7, 0x0, 0x7) io_uring_setup$auto(0xfffffff5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r9, @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4044) syz_genetlink_get_family_id$auto_thermal(0x0, r8) socket(0x200000000000011, 0x2, 0x0) 226.218081ms ago: executing program 2 (id=617): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x8001, 0x0) write$auto(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1098}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) msgctl$auto_IPC_STAT(0x7fff, 0x2, &(0x7f0000000280)={{0x4, 0xee01, 0xffffffffffffffff, 0x0, 0xe, 0x4, 0xfffc}, &(0x7f0000000040)=0x81, &(0x7f00000000c0)=0x3, 0xfffffffffffffffa, 0x81, 0x5, 0x1ff, 0x4, 0x4, 0x3, 0x6}) rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000200)={@siginfo_0_0={0xd, 0x60, 0x8, @_sigsys={&(0x7f00000021c0)="c2fa05367f3cbc4741d06a97628ecf2ed02033443d80e0a5658864340c2f56ec37102cc0c5e7dc4e57b28b0b048110b2ece93a3eff9770db9494b9d97e4315f87a4905d9fb7b356a530678359b46735f17d4c666129eb2bef95a2e2ad48b615f4b52cb4700d2cc28ef0e75e2d995fe40a4e665b51af64806d118512c0ef5f50bc582b1439b5b17a59676f2230c0469256690823e25559788b4ed2eb8c23fb18b47b9b08bb877112c5f4f9d584ee7e874c917edec2cdbc8b4cab7b3d5fd4658a3961e2b79dc7d86f3e12850cdaf38a31af8f36d6436e1f8d43b1f9cce4922c26f9ecd55bb98422b98fedb41de8e1e56c2835525fa27f53d311aacf20bd79e5fad3850c59e5c28d126d88d964020fdc2f48f6848ac0cf0d5c148f2516691d19667f6d09d6283bffaea17842a0e5b838d658739469cdef5f443b01e547edc0c1e69c2db530c8cc3bb265a848e6ad6799683c9db4eaede3e397755a8ea039f99367cc44a67779c6e923435bfa8cabfc1a0dc8c7cac3d6b4019f6bda1d424ff7ac6fcc03a779569bfc5cf8c2d88e2aa2a7ba327568949c89abca59883a80c9f5f4665c87c178d9b2c16e732e3658e79796b4f99e3bde0bb5b37ab27cf8c2c00ffc916df233055fbbd9b15cc6d72e75f14fe5d3ce56f4063056e1faefa0de180efcf1ff363e01e453f29283eda02ac4179ced3e971a13804bb4aeabd38c8d850502a414cef6af0f250acf78129f267579417fd193091c6227bbac6dda164af5e8397fea253fa50bcb93707945cd27457fc5b26e03189e9b58b20df1d84d6673ea669aafda8b2377cfae52a782173b27cd20786387485940d4b6cf54e9fa9ed846982587ece12ceeb9a867a48c03f4d916ec8069cf78ea5f77d13f8bd99f4b4f916aed7ecb93c7224478e70a848acd9a5102cb3e6fa78762cda9a5964460706ac11b9445212be5e3a8fe32a2b4dea1041600d3a19dad9b7a1652abdb2888427ba9db165c1ff406dfd44d94a4c44c36d2d1e9a81dd551fc3dfee290b9b7baa0596a11e1ae6e91436af76a20573ddc8dd166d92c5ebf304168d9afc59af16e8aa395b9016bf39c4f35939dc97ccba0576af35fef0adb038ad1c45aa6d44a86f9bee2d6e13e8019e90f10fb73132b58e7326312a1b97196cf9f435ed222ce0231fbb5f6365859468ecff23a3d92cba2bffd76a2d4a50dc7f3fd7fd12e1bcde714583e5dfc9eb475d11c1c77b1ebec05ccf6c9926d11e28d6bed7395a1164f2672a7ce7a85038867b351132561b68198b3f8ffdc789e5c479ef8e3907053ae700f4def2b0dd80bc43edd13bdb0ec3fe745ab8971458dd888f83a8a2067f98be821fcfe92acdfbbab665334da296fecc7f41c88fc1b1e088fc00a774da43091113509bb60044ab59f8471a6837f1a6582043893eadbd7a2c4fdcb3c7033d328ac4fac17bfc0b3f57429ef94a7bb8b5e7c21079c5889016884fa416898fd85468d0d2e4211d5e05ac0d74928c860e73b3c81e96fc0fef03b82192f3d22dfd715bdecd4d29dd6c9565ec556b956ef1de77cae0578337b3b5afd6b4dc6a14952ad9b1ac29cad285df68da996f69c4355d76a54ee7e8953e4d83450064bc1838d7f6c8f02b3f0e7dce794eb6ef61230f9c84d185af534ee6f6a23179dec36ad3164d44046103b0445bec4bb16313cd1450a7dd4f9487e035460215c2bce309c7a84978bc1af8e4a6c7a58f2b7b3647fdfcabb63fb8c49e24e3aa91a31f70c0c7dd8c3d288a756867c10c3be2fb1feb061da46b7896a2bd2504cf4fe6734aedfceeab68cd54428300d0388b8a6c96f12f8b1c9b055bcfb515e5180ee30323082e41390e7cad2b2b498f56f64de9f0d4db1c18d5fef07ea3fab3256fed62bc9722891db85fbfb417f5d817efd00895d8a1da3938f43ae0efc95f997b79f067ef1d07c621043ce79af7ec7aa330eeb801e1502f4f61e228ba80351715f6de1ad609ddcd11937c55fc7e40eb1337101cee4aed666aee22555ba6963a1bc6ecdc834ff0bfa38ce412b8d47b5f8e319c819d978d414c1b6e8e4e0120db2c22af76f58af3c1ec60347451cb7da414d6893702c888a50cc07307ff2832b249be0418e45641c902ce9d646765d548abef64d633276114d7ab5fdfa3d6758c28e169cccd2551fe4d2b3bfcca1c032425ee1e98496a477f3de248bc21214f58b0fb63062164739b60895fbc332c72168aee0d3b6bef869cb1d09c7e4231a6b906fac07bd60b6edc0cd28c579ec2c333deed306870b4f0c34f54ac6c895699ad3d7aaa61429e6d72912228f4a3970cd30a2c9e34f96f36eb2e20a13875c46b20a405c9d69bcac478b17f3c1fbaba7d90564a21023483ff86bf2c428ba882642849bca6eba7908b44ff36617d070a3e195fa5cc33b818ffc2f00b8390ded85ace61c6baa0fb101cc66e8452146a9bb117c8703eee75e641132d69fb749c8b73ac53009810d448cab39f4ec2a47993a170dabe50f5432465be987c1d5454c889e5e430c1e9858675470a79ddd8bd674148a275256d2dd0d6965a3a76ec60dee91875cdcb6d2cd14b7cc640f70a78052b1600fa731f201949106306198b376a73701235a44cf42f8dab805b61409db2f16e979237e8054c73d69e190e6e52bdaeca518258a8ff137116c71ea492e0d343969ce9e377b685216d42caadb2603a893b5e26c7a48fc8254cd1472f853b99cc9962de134584c6f60e0807768a08aa8f58ad6e1f1ff2b326fa3ae59b30ed641a86b1677506ab5ca7811d172632869ce2dff398ddc06e9807c8228a87fd8046c878d528e8bfdce2ab13b3e9288202229d9367f8c09fd09ea0c149457ff152b6627c8a20122c8c294548f38b62fab49581eb5d40293f17997f0b55d2ef6141314cd8d5a4d34dcd983e4ac369070e753f05d8d5e3c241dcbc1ed7b63567999bd7d3740b37b92ba2a12316f96a55cd94b007f39f0513587662e34bdf016b80f10db21f60760cd77355436556df3b0517133e1a4f015e040e574bc101d915d88a56e2d4b86f1ba2134692aff80fdac6b42f2bf492ffef04dc202182f7a286e0ded35013296b6132931665d71c6ec671b7e252d294225aea51f3a302e0945f144dcbde6d46ddd690d4e376754ee6512586871257015bc8b7a419ce38a3460bc9c9926fec0c91cdd730a48436e9c4c2fdc1ec676d7d9fff838aa05b5c92f008e23d80b3f3dd89faf522cf2460ed8bd12774b6deac39300cbabd186e447e55096904f2afe0902974e157175c7017d962cd399bffad9f9045ce5ee95eaccf167e72aa2656cd4914d238271dd04c41b1a903250f832774a4478e746c54c265bc0fce613520e1b2effb577cdb217bc7fd55bf497af2974f2160925de99d4ede33b7f96d585be090756f8cd4e4eda5fc78c675b6746e58a183dc48735ec359f0ef1a53cbe0462cef051e101d26308488102dbd4b52446349ceb8566221c1e5337eae6323a951ea65cb0b5f36c5c9421bee03b2d2fb9630f09e86d6a345fa3e93f37931f8ca1eae41e4d37f3dc687110251f86c0353cdce13d4355d9f55f1557d1849fe968d86c94b91e5834a80af6364097a108dccd96061fda8eca848c95e4589bcbf8c8e3d8f14af37b71664998c5ba4888f06e7d2a2796eeae27a5ee07efa9ed6e3140214d5d6885022b109fc1195f799809548babec509b3a2d6c7de1991c0a3fcdc888c0d4386d1d4b7b9b4484dc8b7c464e2217e22dc2e13f0fbe6764db75e96f19553c83c236f2d2a9c3460b8e6422c38723131c452b64b48f2bca4db6412624c8ae87a8f5baf7fe99675bdc445bdae03d3d4e532025d957200711085f3911ecbfd72a4da56a62caba68618c56e84c57662c3a0ebc4d019b78187ca1b30c78d08b5cf4e9f0b41991d36f5f24e6eb92e6024bfb0ad30e8b09f5e487eb38932d7405466f73a7507c973052d0ec3448901e1e9601aeba67b3676ed838ff8c31dc8dc6b391f3e388d7dd01fbe184596ae42479ee63eebdc67dcd0e49d3cd2676e512175d4de3446451a87fe95c942bc9c97cf7b6f9275d50bdac20c658f029ed9d600483b9747bffed672fa28cca563e818b29834c53e53408eec26fe329d5631bbb613c2b2a796bd852a4d6bfd50b0859832f043f35981f2cd17894903773658ed538f3f7a45968add070000000000000072cfb15c1fd7e924eb3d59db79d3131ee424b586d42d59da70937b390ddbb3da99be94c1c53ae8041648f4654c7c67f11dd24353155a51a5fea5278343e2a57e01770d70d27c53b5f8e090e5e268c2850ea750aeb6cc4005d6cfe2d18ee1477d2a84b7b0c6f2cb69ea34ea608c72a7adaa32d3c6e6f705b1fc3f309e7efb75efc3729b2abdc40e31c2ca5d520cbfc8a70d664d2822bf5ba4a258f6a08ecad472a5ef44e7b26aa3e570795413e28cbb32255644bb235a59565b7170c9987daf66a2d9a89d94f0aca71f3c596e56612375a6f0284875750b57f382b25ad725e537a389b63c20927938e40bcb669c2693999a47c6197ba9a3a3d6149bdffb10b7ed350d4d0484f93861a54731d1bdf98121c0fedcf9e3f0aca0dd9f85a6a33097780105a2d76303404ad6570ac9f16b72a470ec86d0e5356812a14aa9ad4b8ea9a0634e0407a6cca69998bb4902e75645f208eaf19dcb81fb3c4c6d9d542aa017c558e28c83b01461b30648df68c51f00127a9c2892066d1f760f704cb0cf11371e0f6ed3bf8bb710bd33830a4ccf45887da493c13b35ff5e2b68b8bdacc0c6ee29cbcc17fa580b70fb02ebd6a929c0a214c60be77e5db93317ea9d8718576b8d9c1b867130619e91cf44de01688cb5458bd2dcf8e7d6226d7cc6de549f0405a46a148d2e1325dc51dc3c90c384c2467707ad7768eb8365ac003679d50e2338be631509d93cef878466b03ca39d7dd5e6b73571a595c483d0ab5cce14d734a61134b9f5c41a4c247f99c7dcd223fdd5ec4e8cc4b74a6e21896b9742545a797603a595b3dfe052d7027f9cea4e20e3a37cfd2fa3c9499d31a90fb2d7b9a0874f8eb7c1ba471175b4a5e67aa54816273ebffbe90d6961b009eed2468282ed4478fa99d00f5eeeccee7235be04d6982c360255f153c2e91adc5c0f625a064e2e75c48af5b20393b889b4560cf89da015834bfcd01c7acdc7991146cae5bc658a713dcc987ebcae7128231e4bd4fe148afe1838ceee4c582867508d0f747c806402a508fe6e06b6abe45330472430615fccacb1d161b551d38180f3343231514f96b81df6f15f1b55264a1d7a8b8db79bde6ae3b95ac4fd9648dddfd820063c1a2c3c8991de0e3986712aefe7b53c6a38581bb824e13e3990587b721f7a37aa49e30c8fd74200d7dce7596d7763a8f1800c0f9eec5ccd5b89f57ad99337c94a309b91b10a7da84d43d6924f56e4a8779908714eb69eb32a0121558385004cec47beb7c0008ce5cc64f153c529504c7358b71d6a8657e043233401138067b12127d6d766a4f55a68b5c075f4cbac5deea47367cc74e74fcf15b3c600c4a94cc8402c48a4df5c9f2be2284c178faa4e81858a83b769c110c21b909f328f9885cd25c21d28a7a2aed70f392483101ac04cc5ed80499cbfaa3cb50910bbe804d0f1274df6777ee85b0e5c437c83de0adb5b11f2aa7f28dd70bcd4893d34bb01a3e423297a86692b8a259b281821bdd98993f15fb80e668ac5e45cf4eef0cd3c55406fddc22f4653f56415e134b703e3fff9f0c1eaba07402d833d89e88fe74c72cb293f7024a7c698bde20d5b2b1537d4471f1753c7220000000000000000000000009dfdce8895c5a3d307096d3ff8995fcf27cb", 0x6, 0x642}}}) 128.917765ms ago: executing program 3 (id=618): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x6) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r3, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x6}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0xa3182, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/fib_trie\x00', 0x0, 0x0) r5 = prctl$auto_PR_GET_TAGGED_ADDR_CTRL(0x38, 0x8000000000000000, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'vxcan1\x00', 0x0}) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000001380)='/sys/kernel/debug/cec/cec28/status\x00', 0x444401, 0x0) sendmsg$auto_OVS_DP_CMD_SET(r5, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="0054a94dd9a33e58cb9c", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2504000000050001000000000008000900", @ANYRES32=r6, @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r7 = semctl$auto_GETALL(0x7, 0x9, 0xd, 0x200000000000000) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f0000001480)={@sival_int=0x2, @raw=0x2, 0xa3, @_tid=r7}, &(0x7f00000014c0)=0x5) io_uring_setup$auto(0x2, &(0x7f0000000100)={0x6, 0xfffffffc, 0xd, 0xfe2, 0x3, 0x5, r1, [0x6, 0x9, 0x2], {0x5, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2, 0xe633af7, 0xed20}, {0x2, 0x8, 0x0, 0x1, 0xc, 0x800, 0x9f32, 0xe1a}}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000300)={@raw=0x8000000000000000, 0xc, 0x7a2, @unused, @devid=0xd780}) 31.747658ms ago: executing program 2 (id=619): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/net/rxrpc/bundles\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0xf429, 0x100) io_uring_setup$auto(0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyee\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto_BCH_IOCTL_DISK_RESIZE_JOURNAL(r1, 0x4018bc0f, &(0x7f0000000040)={0x8, 0x0, 0x5, 0xfffffffffffffffb}) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x59, 0x7) 0s ago: executing program 0 (id=620): socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) r0 = socket(0x10, 0x2, 0x9) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x401, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x8000000000000001, 0x9, 0x5, 0xf870e9c, 0x7, 0x8}, 0x9) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) r7 = socket(0xa, 0x1, 0x84) getsockopt$auto(r7, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) close_range$auto(0x2, 0xa, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 75.441527][ T5826] cgroup: Unknown subsys name 'net' [ 75.568595][ T5826] cgroup: Unknown subsys name 'cpuset' [ 75.576374][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.459720][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.466261][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.141938][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.984148][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.992125][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.000491][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.008582][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.009963][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.016995][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.023703][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.030836][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.038819][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.044187][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.051331][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.066317][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.075875][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.083555][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.091333][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.101667][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.101717][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.120471][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.131134][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.138848][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.432099][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 79.525810][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.589477][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 79.621025][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.630830][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.639611][ T5835] bridge_slave_0: entered allmulticast mode [ 79.647799][ T5835] bridge_slave_0: entered promiscuous mode [ 79.673136][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.680351][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.689891][ T5835] bridge_slave_1: entered allmulticast mode [ 79.697051][ T5835] bridge_slave_1: entered promiscuous mode [ 79.737471][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.744706][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.751991][ T5837] bridge_slave_0: entered allmulticast mode [ 79.759520][ T5837] bridge_slave_0: entered promiscuous mode [ 79.767891][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 79.787860][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.810663][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.818043][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.825298][ T5837] bridge_slave_1: entered allmulticast mode [ 79.831893][ T5837] bridge_slave_1: entered promiscuous mode [ 79.843800][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.902765][ T5835] team0: Port device team_slave_0 added [ 79.918719][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.929976][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.954648][ T5835] team0: Port device team_slave_1 added [ 79.984558][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.991775][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.999399][ T5836] bridge_slave_0: entered allmulticast mode [ 80.006499][ T5836] bridge_slave_0: entered promiscuous mode [ 80.023418][ T5837] team0: Port device team_slave_0 added [ 80.040793][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.048187][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.057938][ T5836] bridge_slave_1: entered allmulticast mode [ 80.064617][ T5836] bridge_slave_1: entered promiscuous mode [ 80.072313][ T5837] team0: Port device team_slave_1 added [ 80.085087][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.092043][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.118346][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.131820][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.139084][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.165523][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.212190][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.229909][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.237311][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.244461][ T5838] bridge_slave_0: entered allmulticast mode [ 80.252592][ T5838] bridge_slave_0: entered promiscuous mode [ 80.260198][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.267376][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.274522][ T5838] bridge_slave_1: entered allmulticast mode [ 80.281469][ T5838] bridge_slave_1: entered promiscuous mode [ 80.289829][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.301724][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.308877][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.334932][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.347316][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.354300][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.381623][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.451170][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.462970][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.474261][ T5836] team0: Port device team_slave_0 added [ 80.482658][ T5836] team0: Port device team_slave_1 added [ 80.492025][ T5835] hsr_slave_0: entered promiscuous mode [ 80.498312][ T5835] hsr_slave_1: entered promiscuous mode [ 80.560768][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.568186][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.594433][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.607003][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.614082][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.640661][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.654061][ T5838] team0: Port device team_slave_0 added [ 80.662555][ T5838] team0: Port device team_slave_1 added [ 80.672258][ T5837] hsr_slave_0: entered promiscuous mode [ 80.678875][ T5837] hsr_slave_1: entered promiscuous mode [ 80.684858][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.692703][ T5837] Cannot create hsr debugfs directory [ 80.740882][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.748623][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.776344][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.807063][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.814056][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.840127][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.858091][ T5836] hsr_slave_0: entered promiscuous mode [ 80.864302][ T5836] hsr_slave_1: entered promiscuous mode [ 80.870689][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.878557][ T5836] Cannot create hsr debugfs directory [ 80.969687][ T5838] hsr_slave_0: entered promiscuous mode [ 80.976452][ T5838] hsr_slave_1: entered promiscuous mode [ 80.982399][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.990151][ T5838] Cannot create hsr debugfs directory [ 81.144619][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.162257][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.175987][ T55] Bluetooth: hci1: command tx timeout [ 81.181976][ T5151] Bluetooth: hci2: command tx timeout [ 81.183618][ T5849] Bluetooth: hci0: command tx timeout [ 81.188225][ T55] Bluetooth: hci3: command tx timeout [ 81.206835][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.230139][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.273544][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.283592][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.296409][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.313771][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.355359][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.381428][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.399130][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.409112][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.468724][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.495453][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.508916][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.518737][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.539510][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.596605][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.629911][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.637292][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.666986][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.676394][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.683490][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.734862][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.763836][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.771095][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.783393][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.790510][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.824473][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.891042][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.903487][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.942566][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.949761][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.962055][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.969331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.990515][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.046989][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.107425][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.114581][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.139765][ T1796] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.146935][ T1796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.203732][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.250048][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.274351][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.360179][ T5837] veth0_vlan: entered promiscuous mode [ 82.371808][ T5835] veth0_vlan: entered promiscuous mode [ 82.387529][ T5837] veth1_vlan: entered promiscuous mode [ 82.407167][ T5835] veth1_vlan: entered promiscuous mode [ 82.439814][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.463291][ T5837] veth0_macvtap: entered promiscuous mode [ 82.489934][ T5837] veth1_macvtap: entered promiscuous mode [ 82.500712][ T5835] veth0_macvtap: entered promiscuous mode [ 82.524628][ T5835] veth1_macvtap: entered promiscuous mode [ 82.537008][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.567815][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.583080][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.605112][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.623755][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.641625][ T5836] veth0_vlan: entered promiscuous mode [ 82.651495][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.660789][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.670937][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.679891][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.706256][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.717082][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.729147][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.742096][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.751900][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.760882][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.769799][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.799607][ T5836] veth1_vlan: entered promiscuous mode [ 82.818178][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.901103][ T5836] veth0_macvtap: entered promiscuous mode [ 82.911568][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.925358][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.936485][ T5836] veth1_macvtap: entered promiscuous mode [ 82.981415][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.995920][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.005620][ T2123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.007876][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.013457][ T2123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.031946][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.042800][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.053273][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.064121][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.079170][ T5838] veth0_vlan: entered promiscuous mode [ 83.103590][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.111715][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.117582][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.131117][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.142093][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.152573][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.163728][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.184518][ T5838] veth1_vlan: entered promiscuous mode [ 83.204781][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.213887][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.223673][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.233132][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.256279][ T5851] Bluetooth: hci2: command tx timeout [ 83.259798][ T5151] Bluetooth: hci3: command tx timeout [ 83.261735][ T5851] Bluetooth: hci1: command tx timeout [ 83.273199][ T5849] Bluetooth: hci0: command tx timeout [ 83.299988][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.332629][ T5838] veth0_macvtap: entered promiscuous mode [ 83.408487][ T5838] veth1_macvtap: entered promiscuous mode [ 83.461003][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.477372][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.525121][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.544939][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.554817][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.566268][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.577716][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.612169][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.634986][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.660673][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.671652][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.694940][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.714982][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.738780][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.756775][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.808456][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.833444][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.914259][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.923948][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.933005][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.034769][ T1796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.055772][ T1796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.116022][ T1796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.124795][ T1796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.161319][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.170383][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.657358][ T5913] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 84.662970][ T5913] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.794360][ T5913] FAULT_INJECTION: forcing a failure. [ 84.794360][ T5913] name failslab, interval 1, probability 0, space 0, times 1 [ 84.794433][ T5913] CPU: 1 UID: 0 PID: 5913 Comm: syz.1.2 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 84.794469][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.794489][ T5913] Call Trace: [ 84.794497][ T5913] [ 84.794512][ T5913] dump_stack_lvl+0x16c/0x1f0 [ 84.794562][ T5913] should_fail_ex+0x512/0x640 [ 84.794591][ T5913] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 84.794623][ T5913] should_failslab+0xc2/0x120 [ 84.794654][ T5913] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 84.794683][ T5913] ? lockdep_rtnl_is_held+0x26/0x40 [ 84.794727][ T5913] ? fib_trie_unmerge+0x281/0xcb0 [ 84.794764][ T5913] fib_trie_unmerge+0x281/0xcb0 [ 84.794801][ T5913] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 84.794832][ T5913] ? fib_newrule+0x1113/0x1e60 [ 84.794866][ T5913] ? __pfx___mutex_lock+0x10/0x10 [ 84.794916][ T5913] fib_unmerge+0xf8/0x520 [ 84.794954][ T5913] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 84.794996][ T5913] fib4_rule_configure+0x383/0x10c0 [ 84.795046][ T5913] fib_newrule+0x34c/0x1e60 [ 84.795094][ T5913] ? __pfx_fib_newrule+0x10/0x10 [ 84.795139][ T5913] ? kmem_cache_free+0x2d4/0x4d0 [ 84.795169][ T5913] ? __pfx_skb_network_protocol+0x10/0x10 [ 84.795224][ T5913] ? find_held_lock+0x2b/0x80 [ 84.795264][ T5913] ? __pfx_fib_nl_newrule+0x10/0x10 [ 84.795303][ T5913] ? __pfx_fib_nl_newrule+0x10/0x10 [ 84.795342][ T5913] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 84.795386][ T5913] ? __pfx_fib_nl_newrule+0x10/0x10 [ 84.795428][ T5913] rtnetlink_rcv_msg+0x95b/0xe90 [ 84.795472][ T5913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.795531][ T5913] netlink_rcv_skb+0x16a/0x440 [ 84.795575][ T5913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.795621][ T5913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.795681][ T5913] ? netlink_deliver_tap+0x1ae/0xd30 [ 84.795728][ T5913] netlink_unicast+0x53a/0x7f0 [ 84.795775][ T5913] ? __pfx_netlink_unicast+0x10/0x10 [ 84.795817][ T5913] ? __lock_acquire+0xaa4/0x1ba0 [ 84.795878][ T5913] netlink_sendmsg+0x8d1/0xdd0 [ 84.795935][ T5913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.795992][ T5913] ____sys_sendmsg+0xa95/0xc70 [ 84.796044][ T5913] ? copy_msghdr_from_user+0x10a/0x160 [ 84.796083][ T5913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.796148][ T5913] ___sys_sendmsg+0x134/0x1d0 [ 84.796188][ T5913] ? __pfx____sys_sendmsg+0x10/0x10 [ 84.796263][ T5913] __sys_sendmsg+0x16d/0x220 [ 84.796302][ T5913] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.796340][ T5913] ? __x64_sys_futex+0x1e0/0x4c0 [ 84.796398][ T5913] ? rcu_is_watching+0x12/0xc0 [ 84.796447][ T5913] do_syscall_64+0xcd/0x260 [ 84.796493][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.796529][ T5913] RIP: 0033:0x7fe503f8d169 [ 84.796564][ T5913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.796599][ T5913] RSP: 002b:00007fe504dc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.796630][ T5913] RAX: ffffffffffffffda RBX: 00007fe5041a5fa0 RCX: 00007fe503f8d169 [ 84.796652][ T5913] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000008 [ 84.796672][ T5913] RBP: 00007fe50400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.796692][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.796711][ T5913] R13: 0000000000000000 R14: 00007fe5041a5fa0 R15: 00007fffd0fe4b08 [ 84.796747][ T5913] [ 85.335189][ T5849] Bluetooth: hci0: command tx timeout [ 85.335233][ T5849] Bluetooth: hci1: command tx timeout [ 85.337012][ T5849] Bluetooth: hci3: command tx timeout [ 85.337052][ T5849] Bluetooth: hci2: command tx timeout [ 85.756598][ T5928] netlink: 330 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.757079][ T5928] Zero length message leads to an empty skb [ 85.764659][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.208808][ T5916] tty tty17: ldisc open failed (-12), clearing slot 16 [ 87.065526][ T5948] Invalid ELF header magic: != ELF [ 87.107974][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 87.432594][ T5851] Bluetooth: hci2: command tx timeout [ 87.441528][ T5849] Bluetooth: hci3: command tx timeout [ 87.441551][ T5151] Bluetooth: hci1: command tx timeout [ 87.451676][ T5851] Bluetooth: hci0: command tx timeout [ 87.779897][ T5957] FAULT_INJECTION: forcing a failure. [ 87.779897][ T5957] name failslab, interval 1, probability 0, space 0, times 0 [ 87.808961][ T5957] CPU: 0 UID: 0 PID: 5957 Comm: syz.0.13 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 87.809005][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.809024][ T5957] Call Trace: [ 87.809033][ T5957] [ 87.809043][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 87.809087][ T5957] should_fail_ex+0x512/0x640 [ 87.809110][ T5957] ? __kmalloc_noprof+0xbf/0x510 [ 87.809133][ T5957] ? __register_sysctl_table+0xb3/0x1900 [ 87.809161][ T5957] should_failslab+0xc2/0x120 [ 87.809187][ T5957] __kmalloc_noprof+0xd2/0x510 [ 87.809213][ T5957] __register_sysctl_table+0xb3/0x1900 [ 87.809245][ T5957] ? __pfx___register_sysctl_table+0x10/0x10 [ 87.809272][ T5957] ? is_module_address+0x2a/0x50 [ 87.809293][ T5957] ? register_net_sysctl_sz+0x228/0x3e0 [ 87.809326][ T5957] ? __asan_memcpy+0x3c/0x60 [ 87.809361][ T5957] xfrm6_net_init+0xf0/0x1c0 [ 87.809382][ T5957] ? __pfx_xfrm6_net_init+0x10/0x10 [ 87.809404][ T5957] ops_init+0x1df/0x5f0 [ 87.809436][ T5957] setup_net+0x21e/0x850 [ 87.809466][ T5957] ? __pfx_setup_net+0x10/0x10 [ 87.809493][ T5957] ? lockdep_init_map_type+0x5c/0x280 [ 87.809515][ T5957] ? __pfx_down_read_killable+0x10/0x10 [ 87.809550][ T5957] ? debug_mutex_init+0x37/0x70 [ 87.809579][ T5957] copy_net_ns+0x2a6/0x5f0 [ 87.809612][ T5957] create_new_namespaces+0x3ea/0xad0 [ 87.809659][ T5957] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 87.809694][ T5957] ksys_unshare+0x45b/0xa40 [ 87.809730][ T5957] ? __pfx_ksys_unshare+0x10/0x10 [ 87.809764][ T5957] ? xfd_validate_state+0x5d/0x180 [ 87.809798][ T5957] ? rcu_is_watching+0x12/0xc0 [ 87.809842][ T5957] __x64_sys_unshare+0x31/0x40 [ 87.809893][ T5957] do_syscall_64+0xcd/0x260 [ 87.809925][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.809947][ T5957] RIP: 0033:0x7f317e58d169 [ 87.809964][ T5957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.809986][ T5957] RSP: 002b:00007f317f414038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.810006][ T5957] RAX: ffffffffffffffda RBX: 00007f317e7a5fa0 RCX: 00007f317e58d169 [ 87.810021][ T5957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 87.810035][ T5957] RBP: 00007f317e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.810048][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.810062][ T5957] R13: 0000000000000000 R14: 00007f317e7a5fa0 R15: 00007ffd9c2fd4c8 [ 87.810085][ T5957] [ 88.456237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 88.625618][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 88.666074][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.035885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.044969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.918837][ T5964] syz.2.14 (5964) used greatest stack depth: 21528 bytes left [ 90.495193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.840116][ T975] cfg80211: failed to load regulatory.db [ 92.407554][ T5981] mmap: syz.3.19 (5981) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.842660][ T6001] Invalid ELF header magic: != ELF [ 94.117488][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.174080][ T6022] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 94.526669][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.562883][ T6022] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 94.786117][ T6017] process 'syz.1.24' launched './file0' with NULL argv: empty string added [ 95.062626][ T6038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28'. [ 95.348314][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.163161][ T6052] could not allocate digest TFM handle [ 97.370333][ T6067] HfR: entered promiscuous mode [ 97.387683][ T6052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.31'. [ 97.456633][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 97.492304][ T6067] HfR: left promiscuous mode [ 97.542185][ T6071] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 97.602860][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33'. [ 98.312257][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.35'. [ 98.452964][ T6077] team0: Port device team_slave_1 removed [ 98.922795][ T30] audit: type=1800 audit(6038330408.492:2): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.39" name="members" dev="configfs" ino=7750 res=0 errno=0 [ 99.482212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.490775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.500768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 99.711764][ T6118] Invalid ELF header magic: != ELF [ 100.526176][ T6151] netlink: 342 bytes leftover after parsing attributes in process `syz.0.50'. [ 100.562403][ T6151] netlink: 342 bytes leftover after parsing attributes in process `syz.0.50'. [ 100.571658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.576362][ T6149] netlink: 342 bytes leftover after parsing attributes in process `syz.0.50'. [ 101.404969][ T6163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.412365][ T6163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.431074][ T6163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.441738][ T6163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.449156][ T6163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.468220][ T6163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.497918][ T6163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.504338][ T6163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.513878][ T6163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.524429][ T6163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.532446][ T6163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.542798][ T6163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.686217][ T6215] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 102.732720][ T6216] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 102.920987][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.927057][ T30] audit: type=1800 audit(6038332460.501:3): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.65" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 102.947191][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.011679][ T6204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.189420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.457472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.483095][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.557407][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.567341][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.905729][ T6239] netlink: zone id is out of range [ 103.963774][ T6239] netlink: zone id is out of range [ 104.040478][ T6239] netlink: zone id is out of range [ 104.136817][ T6239] netlink: zone id is out of range [ 104.141991][ T6239] netlink: zone id is out of range [ 104.215196][ T6239] netlink: zone id is out of range [ 104.220357][ T6239] netlink: zone id is out of range [ 104.225572][ T6239] netlink: zone id is out of range [ 104.230721][ T6239] netlink: zone id is out of range [ 104.236192][ T6239] netlink: zone id is out of range [ 104.990046][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.151587][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.76'. [ 105.547174][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.626580][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.633481][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.775716][ T6271] cgroup: fork rejected by pids controller in /syz2 [ 106.341009][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 106.419047][ T6319] usb usb32: usbfs: process 6319 (syz.1.80) did not claim interface 0 before use [ 107.069085][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.341578][ T6330] Invalid ELF header magic: != ELF [ 107.636117][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.695953][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.707200][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.810532][ T6380] netlink: 93 bytes leftover after parsing attributes in process `syz.0.84'. [ 109.364782][ T6394] ubi0: attaching mtd0 [ 109.398802][ T6394] ubi0: scanning is finished [ 109.422221][ T6394] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 109.616645][ T6394] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 110.788709][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 111.273596][ T6455] usbip-vudc usbip-vudc.0: gadget not bound [ 112.089931][ T5851] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 112.436659][ T6490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 112.747635][ T6490] team0: Port device team_slave_1 removed syzkaller syzkaller login: [ 113.658709][ T6519] FAULT_INJECTION: forcing a failure. [ 113.658709][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 113.763232][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.2.112 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 113.763266][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.763279][ T6519] Call Trace: [ 113.763285][ T6519] [ 113.763294][ T6519] dump_stack_lvl+0x16c/0x1f0 [ 113.763327][ T6519] should_fail_ex+0x512/0x640 [ 113.763350][ T6519] ? fs_reclaim_acquire+0xae/0x150 [ 113.763384][ T6519] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 113.763414][ T6519] should_failslab+0xc2/0x120 [ 113.763439][ T6519] __kmalloc_noprof+0xd2/0x510 [ 113.763466][ T6519] tomoyo_realpath_from_path+0xc2/0x6e0 [ 113.763501][ T6519] tomoyo_check_open_permission+0x2ab/0x3c0 [ 113.763526][ T6519] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 113.763570][ T6519] ? do_raw_spin_lock+0x12c/0x2b0 [ 113.763601][ T6519] tomoyo_file_open+0x6b/0x90 [ 113.763647][ T6519] security_file_open+0x84/0x1e0 [ 113.763673][ T6519] do_dentry_open+0x596/0x1c10 [ 113.763722][ T6519] vfs_open+0x82/0x3f0 [ 113.763749][ T6519] path_openat+0x1e5e/0x2d40 [ 113.763776][ T6519] ? __pfx_path_openat+0x10/0x10 [ 113.763800][ T6519] do_filp_open+0x20b/0x470 [ 113.763820][ T6519] ? __pfx_do_filp_open+0x10/0x10 [ 113.763857][ T6519] ? alloc_fd+0x471/0x7d0 [ 113.763895][ T6519] do_sys_openat2+0x11b/0x1d0 [ 113.763920][ T6519] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.763948][ T6519] ? __pfx___might_resched+0x10/0x10 [ 113.763986][ T6519] __x64_sys_openat+0x174/0x210 [ 113.764012][ T6519] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.764040][ T6519] ? rcu_is_watching+0x12/0xc0 [ 113.764071][ T6519] do_syscall_64+0xcd/0x260 [ 113.764112][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.764133][ T6519] RIP: 0033:0x7f86f8d8d169 [ 113.764148][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.764167][ T6519] RSP: 002b:00007f86f9b95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.764186][ T6519] RAX: ffffffffffffffda RBX: 00007f86f8fa5fa0 RCX: 00007f86f8d8d169 [ 113.764201][ T6519] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 113.764221][ T6519] RBP: 00007f86f8e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.764237][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.764254][ T6519] R13: 0000000000000000 R14: 00007f86f8fa5fa0 R15: 00007fff7dd07b18 [ 113.764280][ T6519] [ 114.159334][ T6519] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.167190][ T6519] random: crng reseeded on system resumption [ 115.370379][ T6558] tipc: Can't bind to reserved service type 2 [ 115.543555][ T6559] netlink: 544 bytes leftover after parsing attributes in process `syz.2.119'. [ 118.789987][ T5851] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 118.854517][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.129'. [ 119.152709][ T6622] macvtap0: entered promiscuous mode [ 119.152916][ T6622] macvtap0: entered allmulticast mode [ 119.152942][ T6622] veth0_macvtap: entered allmulticast mode syzkaller syzkaller login: [ 119.948496][ T6655] input: isc as /devices/virtual/input/input6 [ 119.961876][ T6655] FAULT_INJECTION: forcing a failure. [ 119.961876][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 119.972784][ T6657] netlink: 338 bytes leftover after parsing attributes in process `syz.0.138'. [ 120.001831][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.2.140 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 120.001870][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.001906][ T6655] Call Trace: [ 120.001916][ T6655] [ 120.001929][ T6655] dump_stack_lvl+0x16c/0x1f0 [ 120.001981][ T6655] should_fail_ex+0x512/0x640 [ 120.002014][ T6655] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 120.002050][ T6655] should_failslab+0xc2/0x120 [ 120.002086][ T6655] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 120.002120][ T6655] ? __kernfs_new_node+0xd2/0x8a0 [ 120.002156][ T6655] __kernfs_new_node+0xd2/0x8a0 [ 120.002190][ T6655] ? __pfx___kernfs_new_node+0x10/0x10 [ 120.002232][ T6655] ? __lock_acquire+0xf7f/0x1ba0 [ 120.002299][ T6655] kernfs_new_node+0x186/0x240 [ 120.002341][ T6655] kernfs_create_link+0xcc/0x240 [ 120.002387][ T6655] sysfs_do_create_link_sd+0x90/0x140 [ 120.002442][ T6655] sysfs_create_link+0x61/0xc0 [ 120.002494][ T6655] device_add+0x50a/0x1a70 [ 120.002547][ T6655] ? __pfx_device_add+0x10/0x10 [ 120.002597][ T6655] ? __pfx_exact_lock+0x10/0x10 [ 120.002632][ T6655] ? kobject_get+0xbb/0x150 [ 120.002676][ T6655] cdev_device_add+0xc2/0x1e0 [ 120.002709][ T6655] evdev_connect+0x3a4/0x4c0 [ 120.002758][ T6655] input_attach_handler.isra.0+0x181/0x260 [ 120.002808][ T6655] input_register_device+0xa84/0x1130 [ 120.002858][ T6655] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 120.002897][ T6655] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 120.002940][ T6655] ? find_held_lock+0x2b/0x80 [ 120.002995][ T6655] ? __pfx_uinput_ioctl+0x10/0x10 [ 120.003040][ T6655] __x64_sys_ioctl+0x190/0x200 [ 120.003094][ T6655] do_syscall_64+0xcd/0x260 [ 120.003141][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.003167][ T6655] RIP: 0033:0x7f86f8d8d169 [ 120.003188][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.003225][ T6655] RSP: 002b:00007f86f9b95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.003251][ T6655] RAX: ffffffffffffffda RBX: 00007f86f8fa5fa0 RCX: 00007f86f8d8d169 [ 120.003269][ T6655] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 120.003284][ T6655] RBP: 00007f86f8e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.003299][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.003314][ T6655] R13: 0000000000000000 R14: 00007f86f8fa5fa0 R15: 00007fff7dd07b18 [ 120.003342][ T6655] [ 120.256801][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.311819][ T6659] Invalid ELF header magic: != ELF [ 120.389912][ T6655] input: failed to attach handler evdev to device input6, error: -12 [ 121.990623][ T6685] net_ratelimit: 57 callbacks suppressed [ 121.990644][ T6685] openvswitch: netlink: IP tunnel dst address not specified [ 122.736029][ T6697] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 124.545259][ T6755] ubi4: attaching mtd0 [ 124.919571][ T6764] netlink: 186 bytes leftover after parsing attributes in process `syz.0.160'. [ 125.256311][ T6772] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.864035][ T6776] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 128.186076][ T6820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.232886][ T6820] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.286658][ T6820] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.339268][ T6820] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.257060][ T6854] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 129.288031][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.929296][ T5849] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 129.929340][ T5849] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 129.949184][ T5849] Bluetooth: hci0: adv larger than maximum supported [ 129.949217][ T5849] Bluetooth: hci0: adv larger than maximum supported [ 129.956123][ T5849] Bluetooth: hci0: adv larger than maximum supported [ 129.966264][ T5849] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 129.977703][ T5849] Bluetooth: hci0: adv larger than maximum supported [ 130.308295][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.311661][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.387898][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.589139][ T10] Process accounting resumed [ 131.913910][ T6894] netlink: 342 bytes leftover after parsing attributes in process `syz.3.189'. [ 133.225697][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.198'. [ 133.310027][ T5851] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 133.799918][ T6950] openvswitch: netlink: Key type 261 is out of range max 32 [ 134.479393][ T6956] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 134.765179][ T6962] busy [ 135.327587][ T30] audit: type=1800 audit(6038332499.084:4): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.205" name="features" dev="configfs" ino=12505 res=0 errno=0 [ 136.538283][ T7003] netlink: 338 bytes leftover after parsing attributes in process `syz.3.208'. [ 137.441465][ T7045] Invalid ELF header magic: != ELF [ 137.720069][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.726605][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.446937][ T7075] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 139.680411][ T7094] netlink: 'syz.3.221': attribute type 4 has an invalid length. [ 140.687097][ T7123] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 140.720782][ T7123] ======================================================= [ 140.720782][ T7123] WARNING: The mand mount option has been deprecated and [ 140.720782][ T7123] and is ignored by this kernel. Remove the mand [ 140.720782][ T7123] option from the mount to silence this warning. [ 140.720782][ T7123] ======================================================= [ 143.490978][ T7181] netlink: 330 bytes leftover after parsing attributes in process `syz.2.241'. [ 143.802065][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.243'. syzkaller syzkaller login: [ 145.132623][ T7230] random: crng reseeded on system resumption [ 145.318423][ T7232] blktrace: Concurrent blktraces are not allowed on sg0 [ 145.950434][ T7243] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[7243] [ 149.037936][ T7276] Invalid ELF header magic: != ELF [ 149.100675][ T7269] ubi0: attaching mtd0 [ 149.155729][ T7269] ubi0: scanning is finished [ 149.232195][ T7269] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 149.650187][ T7269] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 150.341115][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'. [ 150.396161][ T30] audit: type=1107 audit(6038332514.213:5): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 150.471651][ T30] audit: type=1107 audit(6038332514.213:6): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 150.588276][ T7296] team0: Port device team_slave_0 removed [ 151.029105][ T7314] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 151.097548][ T7312] Invalid ELF header magic: != ELF [ 153.225013][ T7375] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 153.801723][ T7397] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 155.305353][ T7432] FAULT_INJECTION: forcing a failure. [ 155.305353][ T7432] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 155.365379][ T7432] CPU: 1 UID: 0 PID: 7432 Comm: syz.0.291 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 155.365425][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.365444][ T7432] Call Trace: [ 155.365453][ T7432] [ 155.365464][ T7432] dump_stack_lvl+0x16c/0x1f0 [ 155.365509][ T7432] should_fail_ex+0x512/0x640 [ 155.365552][ T7432] should_fail_alloc_page+0xe7/0x130 [ 155.365589][ T7432] prepare_alloc_pages.constprop.0+0x172/0x570 [ 155.365637][ T7432] ? stack_trace_save+0x8e/0xc0 [ 155.365681][ T7432] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 155.365719][ T7432] ? kasan_save_stack+0x42/0x60 [ 155.365746][ T7432] ? kasan_save_stack+0x33/0x60 [ 155.365773][ T7432] ? kasan_save_track+0x14/0x30 [ 155.365800][ T7432] ? __kasan_slab_alloc+0x89/0x90 [ 155.365830][ T7432] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 155.365860][ T7432] ? security_inode_alloc+0x3b/0x2b0 [ 155.365887][ T7432] ? inode_init_always_gfp+0xce4/0x1030 [ 155.365915][ T7432] ? alloc_inode+0x86/0x240 [ 155.365951][ T7432] ? sock_alloc+0x40/0x280 [ 155.365989][ T7432] ? __sock_create+0xc1/0x8d0 [ 155.366033][ T7432] ? __sys_socket+0x14d/0x260 [ 155.366078][ T7432] ? __x64_sys_socket+0x72/0xb0 [ 155.366125][ T7432] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.366182][ T7432] ? sk_prot_alloc+0x1a8/0x2a0 [ 155.366223][ T7432] __alloc_pages_noprof+0xb/0x1b0 [ 155.366254][ T7432] ___kmalloc_large_node+0x82/0x1e0 [ 155.366299][ T7432] __kmalloc_large_node_noprof+0x1c/0x70 [ 155.366345][ T7432] __kmalloc_noprof.cold+0xc/0x61 [ 155.366393][ T7432] sk_prot_alloc+0x1a8/0x2a0 [ 155.366438][ T7432] sk_alloc+0x36/0xc20 [ 155.366470][ T7432] can_create+0x1e5/0x600 [ 155.366505][ T7432] __sock_create+0x335/0x8d0 [ 155.366563][ T7432] __sys_socket+0x14d/0x260 [ 155.366611][ T7432] ? __pfx___sys_socket+0x10/0x10 [ 155.366660][ T7432] ? rcu_is_watching+0x12/0xc0 [ 155.366704][ T7432] __x64_sys_socket+0x72/0xb0 [ 155.366749][ T7432] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.366786][ T7432] do_syscall_64+0xcd/0x260 [ 155.366827][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.366872][ T7432] RIP: 0033:0x7f317e58d169 [ 155.366896][ T7432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.366925][ T7432] RSP: 002b:00007f317f414038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 155.366954][ T7432] RAX: ffffffffffffffda RBX: 00007f317e7a5fa0 RCX: 00007f317e58d169 [ 155.366974][ T7432] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 155.366991][ T7432] RBP: 00007f317e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.367009][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.367026][ T7432] R13: 0000000000000000 R14: 00007f317e7a5fa0 R15: 00007ffd9c2fd4c8 [ 155.367057][ T7432] [ 156.221634][ T7449] random: crng reseeded on system resumption [ 156.527789][ T7446] bond0: option all_slaves_active: invalid value () [ 156.963383][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 157.001135][ T7468] FAULT_INJECTION: forcing a failure. [ 157.001135][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 157.032963][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 157.078731][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.2.296 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 157.078787][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.078813][ T7468] Call Trace: [ 157.078826][ T7468] [ 157.078842][ T7468] dump_stack_lvl+0x16c/0x1f0 [ 157.078898][ T7468] should_fail_ex+0x512/0x640 [ 157.078929][ T7468] ? __kvmalloc_node_noprof+0x122/0x600 [ 157.078986][ T7468] should_failslab+0xc2/0x120 [ 157.079020][ T7468] __kvmalloc_node_noprof+0x135/0x600 [ 157.079071][ T7468] ? alloc_fdtable+0x158/0x2b0 [ 157.079138][ T7468] ? alloc_fdtable+0x158/0x2b0 [ 157.079178][ T7468] alloc_fdtable+0x158/0x2b0 [ 157.079236][ T7468] dup_fd+0x83b/0xb90 [ 157.079270][ T7468] __do_sys_close_range+0x4ca/0x730 [ 157.079300][ T7468] ? xfd_validate_state+0x5d/0x180 [ 157.079352][ T7468] ? __pfx___do_sys_close_range+0x10/0x10 [ 157.079379][ T7468] ? rcu_is_watching+0x12/0xc0 [ 157.079430][ T7468] do_syscall_64+0xcd/0x260 [ 157.079460][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.079484][ T7468] RIP: 0033:0x7f86f8d8d169 [ 157.079501][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.079525][ T7468] RSP: 002b:00007f86f9b95038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 157.079549][ T7468] RAX: ffffffffffffffda RBX: 00007f86f8fa5fa0 RCX: 00007f86f8d8d169 [ 157.079565][ T7468] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000002 [ 157.079578][ T7468] RBP: 00007f86f8e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.079592][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.079605][ T7468] R13: 0000000000000000 R14: 00007f86f8fa5fa0 R15: 00007fff7dd07b18 [ 157.079630][ T7468] [ 157.443815][ T7483] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 157.468601][ T7454] vivid-003: ================= START STATUS ================= [ 157.477312][ T7454] vivid-003: Radio HW Seek Mode: Bounded [ 157.483890][ T7454] vivid-003: Radio Programmable HW Seek: false [ 157.495031][ T7454] vivid-003: RDS Rx I/O Mode: Block I/O [ 157.500790][ T7454] vivid-003: Generate RBDS Instead of RDS: false [ 157.514185][ T7454] vivid-003: RDS Reception: true [ 157.520339][ T7454] vivid-003: RDS Program Type: 0 inactive [ 157.527562][ T7454] vivid-003: RDS PS Name: inactive [ 157.533340][ T7454] vivid-003: RDS Radio Text: inactive [ 157.539343][ T7454] vivid-003: RDS Traffic Announcement: false inactive [ 157.546358][ T7454] vivid-003: RDS Traffic Program: false inactive [ 157.554687][ T7454] vivid-003: RDS Music: false inactive [ 157.560379][ T7454] vivid-003: ================== END STATUS ================== [ 158.378755][ T7501] queue_state_write: unsupported operation '' [ 158.405134][ T7501] queue_state_write: use 'run', 'start' or 'kick' [ 160.726602][ T7550] FAULT_INJECTION: forcing a failure. [ 160.726602][ T7550] name failslab, interval 1, probability 0, space 0, times 0 [ 160.770996][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.1.312 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 160.771037][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.771054][ T7550] Call Trace: [ 160.771063][ T7550] [ 160.771074][ T7550] dump_stack_lvl+0x16c/0x1f0 [ 160.771119][ T7550] should_fail_ex+0x512/0x640 [ 160.771150][ T7550] ? __kmalloc_noprof+0xbf/0x510 [ 160.771182][ T7550] ? lsm_blob_alloc+0x68/0x90 [ 160.771224][ T7550] should_failslab+0xc2/0x120 [ 160.771258][ T7550] __kmalloc_noprof+0xd2/0x510 [ 160.771295][ T7550] lsm_blob_alloc+0x68/0x90 [ 160.771338][ T7550] security_prepare_creds+0x30/0x270 [ 160.771379][ T7550] prepare_creds+0x540/0x750 [ 160.771415][ T7550] lookup_user_key+0xf76/0x1300 [ 160.771450][ T7550] ? __pfx_lookup_user_key+0x10/0x10 [ 160.771489][ T7550] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 160.771526][ T7550] ? __x64_sys_futex+0x1e0/0x4c0 [ 160.771570][ T7550] ? __x64_sys_futex+0x1e9/0x4c0 [ 160.771620][ T7550] keyctl_session_to_parent+0x28/0xaf0 [ 160.771666][ T7550] ? rcu_is_watching+0x12/0xc0 [ 160.771708][ T7550] __do_sys_keyctl+0x25c/0x590 [ 160.771737][ T7550] do_syscall_64+0xcd/0x260 [ 160.771779][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.771809][ T7550] RIP: 0033:0x7fe503f8d169 [ 160.771832][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.771861][ T7550] RSP: 002b:00007fe504da0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 160.771900][ T7550] RAX: ffffffffffffffda RBX: 00007fe5041a6080 RCX: 00007fe503f8d169 [ 160.771920][ T7550] RDX: 0000000000004000 RSI: 0000000000004000 RDI: 0000000000000012 [ 160.771938][ T7550] RBP: 00007fe50400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 160.771957][ T7550] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 160.771974][ T7550] R13: 0000000000000000 R14: 00007fe5041a6080 R15: 00007fffd0fe4b08 [ 160.772006][ T7550] [ 160.977693][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.723094][ T7599] netlink: 330 bytes leftover after parsing attributes in process `syz.0.322'. [ 162.940368][ T7599] net veth1_virt_wifi : renamed from virt_wifi0 [ 163.549282][ T7620] bond0: no command found in slaves file - use +ifname or -ifname [ 163.563158][ T7622] Invalid ELF header magic: != ELF [ 163.653076][ T7611] syz.0.324: vmalloc error: size 1052672, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 163.669884][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.0.324 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 163.669924][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.669940][ T7611] Call Trace: [ 163.669949][ T7611] [ 163.669960][ T7611] dump_stack_lvl+0x16c/0x1f0 [ 163.670005][ T7611] warn_alloc+0x248/0x3a0 [ 163.670038][ T7611] ? __pfx_warn_alloc+0x10/0x10 [ 163.670070][ T7611] ? alloc_pages_mpol+0x25a/0x540 [ 163.670107][ T7611] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.670154][ T7611] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 163.670213][ T7611] ? __snd_dma_alloc_pages+0x50/0x90 [ 163.670249][ T7611] ? do_alloc_pages+0xd7/0x280 [ 163.670277][ T7611] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 163.670326][ T7611] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 163.670369][ T7611] ? __snd_dma_alloc_pages+0x50/0x90 [ 163.670401][ T7611] vmalloc_noprof+0x6b/0x90 [ 163.670448][ T7611] ? __snd_dma_alloc_pages+0x50/0x90 [ 163.670478][ T7611] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 163.670513][ T7611] __snd_dma_alloc_pages+0x50/0x90 [ 163.670546][ T7611] snd_dma_alloc_dir_pages+0x151/0x240 [ 163.670582][ T7611] do_alloc_pages+0x115/0x280 [ 163.670624][ T7611] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 163.670661][ T7611] snd_pcm_hw_params+0x15e1/0x1b40 [ 163.670697][ T7611] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 163.670730][ T7611] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 163.670784][ T7611] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 163.670834][ T7611] ? __asan_memset+0x23/0x50 [ 163.670883][ T7611] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 163.670920][ T7611] snd_pcm_oss_change_params_locked+0x1432/0x3b40 [ 163.670983][ T7611] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 163.671049][ T7611] ? find_held_lock+0x2b/0x80 [ 163.671094][ T7611] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 163.671149][ T7611] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 163.671197][ T7611] ? find_held_lock+0x2b/0x80 [ 163.671235][ T7611] ? hook_file_ioctl_common+0x145/0x410 [ 163.671266][ T7611] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 163.671319][ T7611] ? __fget_files+0x20e/0x3c0 [ 163.671349][ T7611] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 163.671400][ T7611] __x64_sys_ioctl+0x190/0x200 [ 163.671444][ T7611] do_syscall_64+0xcd/0x260 [ 163.671484][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.671515][ T7611] RIP: 0033:0x7f317e58d169 [ 163.671538][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.671567][ T7611] RSP: 002b:00007f317f3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.671603][ T7611] RAX: ffffffffffffffda RBX: 00007f317e7a6240 RCX: 00007f317e58d169 [ 163.671623][ T7611] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 00000000000000d2 [ 163.671642][ T7611] RBP: 00007f317e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.671660][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.671678][ T7611] R13: 0000000000000000 R14: 00007f317e7a6240 R15: 00007ffd9c2fd4c8 [ 163.671711][ T7611] [ 163.984016][ T7630] capability: warning: `syz.3.328' uses 32-bit capabilities (legacy support in use) [ 164.038942][ T7611] Mem-Info: [ 164.042253][ T7611] active_anon:38882 inactive_anon:0 isolated_anon:0 [ 164.042253][ T7611] active_file:16730 inactive_file:38959 isolated_file:0 [ 164.042253][ T7611] unevictable:768 dirty:28 writeback:0 [ 164.042253][ T7611] slab_reclaimable:11198 slab_unreclaimable:94119 [ 164.042253][ T7611] mapped:34578 shmem:26434 pagetables:880 [ 164.042253][ T7611] sec_pagetables:0 bounce:0 [ 164.042253][ T7611] kernel_misc_reclaimable:0 [ 164.042253][ T7611] free:1301246 free_pcp:4813 free_cma:0 [ 164.087938][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.152042][ T7611] Node 0 active_anon:165428kB inactive_anon:0kB active_file:66920kB inactive_file:155760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138308kB dirty:108kB writeback:0kB shmem:112048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10840kB pagetables:3520kB sec_pagetables:0kB all_unreclaimable? no [ 164.184726][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.297819][ T7611] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:2888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 164.361205][ T7611] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.440874][ T7611] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 164.450683][ T7611] Node 0 DMA32 free:1272208kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:184824kB inactive_anon:0kB active_file:66956kB inactive_file:153944kB unevictable:1536kB writepending:108kB present:3129332kB managed:2544032kB mlocked:0kB bounce:0kB free_pcp:6092kB local_pcp:3076kB free_cma:0kB [ 164.590282][ T7611] lowmem_reserve[]: 0 0 1 1 1 [ 164.622474][ T7611] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 164.781751][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 164.948162][ T7611] Node 1 Normal free:3893340kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10584kB local_pcp:6144kB free_cma:0kB [ 164.977627][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.985090][ T7611] lowmem_reserve[]: 0 0 0 0 0 [ 164.991853][ T7611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.032198][ T7611] Node 0 DMA32: 177*4kB (UME) 69*8kB (UM) 6*16kB (UME) 67*32kB (UE) 239*64kB (UME) 100*128kB (UM) 130*256kB (UME) 67*512kB (UM) 36*1024kB (UM) 9*2048kB (UME) 270*4096kB (M) = 1260396kB [ 165.067641][ T7611] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 165.082504][ T7611] Node 1 Normal: 215*4kB (UME) 48*8kB (UE) 38*16kB (UME) 223*32kB (UME) 93*64kB (UME) 30*128kB (UME) 17*256kB (UME) 13*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 940*4096kB (M) = 3893340kB [ 165.112222][ T7611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.123959][ T7611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 165.134181][ T7611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.144364][ T7611] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 165.165183][ T7611] 87659 total pagecache pages [ 165.172146][ T7611] 33 pages in swap cache [ 165.176475][ T7611] Free swap = 124748kB [ 165.181597][ T7611] Total swap = 124996kB [ 165.185799][ T7611] 2097051 pages RAM [ 165.240107][ T7611] 0 pages HighMem/MovableOnly [ 165.244846][ T7611] 428937 pages reserved [ 165.316373][ T7611] 0 pages cma reserved [ 165.434340][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 166.768688][ T7680] FAULT_INJECTION: forcing a failure. [ 166.768688][ T7680] name failslab, interval 1, probability 0, space 0, times 0 [ 166.809269][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.0.339 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 166.809311][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.809327][ T7680] Call Trace: [ 166.809334][ T7680] [ 166.809344][ T7680] dump_stack_lvl+0x16c/0x1f0 [ 166.809381][ T7680] should_fail_ex+0x512/0x640 [ 166.809407][ T7680] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 166.809448][ T7680] should_failslab+0xc2/0x120 [ 166.809476][ T7680] __kmalloc_cache_noprof+0x6a/0x3e0 [ 166.809515][ T7680] ? police_init_net+0x56/0x270 [ 166.809540][ T7680] ? __pfx_police_init_net+0x10/0x10 [ 166.809565][ T7680] police_init_net+0x56/0x270 [ 166.809591][ T7680] ops_init+0x1df/0x5f0 [ 166.809628][ T7680] setup_net+0x21e/0x850 [ 166.809662][ T7680] ? __pfx_setup_net+0x10/0x10 [ 166.809692][ T7680] ? lockdep_init_map_type+0x5c/0x280 [ 166.809716][ T7680] ? __pfx_down_read_killable+0x10/0x10 [ 166.809756][ T7680] ? debug_mutex_init+0x37/0x70 [ 166.809789][ T7680] copy_net_ns+0x2a6/0x5f0 [ 166.809825][ T7680] create_new_namespaces+0x3ea/0xad0 [ 166.809867][ T7680] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 166.809907][ T7680] ksys_unshare+0x45b/0xa40 [ 166.809946][ T7680] ? __pfx_ksys_unshare+0x10/0x10 [ 166.809983][ T7680] ? xfd_validate_state+0x5d/0x180 [ 166.810012][ T7680] ? rcu_is_watching+0x12/0xc0 [ 166.810048][ T7680] __x64_sys_unshare+0x31/0x40 [ 166.810096][ T7680] do_syscall_64+0xcd/0x260 [ 166.810130][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.810155][ T7680] RIP: 0033:0x7f317e58d169 [ 166.810174][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.810197][ T7680] RSP: 002b:00007f317f3d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 166.810221][ T7680] RAX: ffffffffffffffda RBX: 00007f317e7a6160 RCX: 00007f317e58d169 [ 166.810237][ T7680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 166.810252][ T7680] RBP: 00007f317e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.810266][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.810281][ T7680] R13: 0000000000000000 R14: 00007f317e7a6160 R15: 00007ffd9c2fd4c8 [ 166.810307][ T7680] [ 167.210043][ T7683] futex_wake_op: syz.1.340 tries to shift op by 64; fix this program [ 167.249774][ T7676] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.363112][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.371097][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.379591][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.388477][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 167.396410][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 167.842368][ T5851] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 168.040128][ T7705] Line length is too long: Should be less than 4094 [ 170.580996][ T7750] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 171.725758][ T7783] FAULT_INJECTION: forcing a failure. [ 171.725758][ T7783] name failslab, interval 1, probability 0, space 0, times 0 [ 171.792757][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.0.361 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 171.792802][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.792821][ T7783] Call Trace: [ 171.792831][ T7783] [ 171.792843][ T7783] dump_stack_lvl+0x16c/0x1f0 [ 171.792891][ T7783] should_fail_ex+0x512/0x640 [ 171.792923][ T7783] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 171.792959][ T7783] should_failslab+0xc2/0x120 [ 171.792996][ T7783] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 171.793029][ T7783] ? security_file_alloc+0x34/0x2b0 [ 171.793071][ T7783] security_file_alloc+0x34/0x2b0 [ 171.793110][ T7783] init_file+0x93/0x4c0 [ 171.793146][ T7783] alloc_empty_file+0x73/0x1e0 [ 171.793185][ T7783] alloc_file_pseudo+0x13a/0x230 [ 171.793225][ T7783] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 171.793265][ T7783] ? alloc_fd+0x471/0x7d0 [ 171.793320][ T7783] sock_alloc_file+0x50/0x210 [ 171.793363][ T7783] __sys_socket+0x1c0/0x260 [ 171.793414][ T7783] ? __pfx___sys_socket+0x10/0x10 [ 171.793466][ T7783] ? rcu_is_watching+0x12/0xc0 [ 171.793511][ T7783] __x64_sys_socket+0x72/0xb0 [ 171.793560][ T7783] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.793599][ T7783] do_syscall_64+0xcd/0x260 [ 171.793642][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.793675][ T7783] RIP: 0033:0x7f317e58d169 [ 171.793700][ T7783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.793732][ T7783] RSP: 002b:00007f317f414038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 171.793774][ T7783] RAX: ffffffffffffffda RBX: 00007f317e7a5fa0 RCX: 00007f317e58d169 [ 171.793795][ T7783] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 171.793813][ T7783] RBP: 00007f317e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.793831][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.793849][ T7783] R13: 0000000000000000 R14: 00007f317e7a5fa0 R15: 00007ffd9c2fd4c8 [ 171.793882][ T7783] [ 172.035275][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'. [ 172.045263][ T7786] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 173.215617][ T7803] random: crng reseeded on system resumption [ 173.591537][ T30] audit: type=1326 audit(6038332548.528:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.1.367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe503f8d169 code=0x0 [ 174.613325][ T7821] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 174.673381][ T7821] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 174.940062][ T7831] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 176.602601][ T7864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.617548][ T7864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.640708][ T7864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.681947][ T7864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.659177][ T7900] netlink: zone id is out of range [ 177.664541][ T7900] netlink: zone id is out of range [ 177.669694][ T7900] netlink: zone id is out of range [ 177.682954][ T7900] netlink: zone id is out of range [ 177.688139][ T7900] netlink: zone id is out of range [ 177.714288][ T7900] netlink: zone id is out of range [ 177.719484][ T7900] netlink: zone id is out of range [ 177.778082][ T7900] netlink: zone id is out of range [ 177.783615][ T7900] netlink: zone id is out of range [ 177.788771][ T7900] netlink: zone id is out of range [ 178.529322][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.696704][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.700535][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.703581][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.011167][ T975] Process accounting resumed [ 179.925700][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 179.947648][ T7947] veth0_macvtap: left promiscuous mode [ 179.953450][ T7947] macvtap0: entered promiscuous mode [ 179.969283][ T7947] macvtap0: entered allmulticast mode [ 180.989408][ T7968] netlink: 342 bytes leftover after parsing attributes in process `syz.3.396'. [ 182.224697][ T8004] FAULT_INJECTION: forcing a failure. [ 182.224697][ T8004] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 182.246739][ T8010] netlink: 222 bytes leftover after parsing attributes in process `syz.3.405'. [ 182.322609][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.1.403 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 182.322669][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.322692][ T8004] Call Trace: [ 182.322700][ T8004] [ 182.322733][ T8004] dump_stack_lvl+0x16c/0x1f0 [ 182.322780][ T8004] should_fail_ex+0x512/0x640 [ 182.322816][ T8004] _copy_from_user+0x2e/0xd0 [ 182.322852][ T8004] bpf_vlog_reverse_ubuf+0x13b/0x470 [ 182.322912][ T8004] bpf_vlog_finalize+0x271/0x360 [ 182.322964][ T8004] bpf_check+0x10d1/0xb760 [ 182.323003][ T8004] ? find_held_lock+0x2b/0x80 [ 182.323056][ T8004] ? __pfx_bpf_check+0x10/0x10 [ 182.323109][ T8004] ? find_held_lock+0x2b/0x80 [ 182.323150][ T8004] ? rcu_is_watching+0x12/0xc0 [ 182.323188][ T8004] ? ktime_get_with_offset+0x26e/0x3b0 [ 182.323235][ T8004] ? __asan_memset+0x23/0x50 [ 182.323282][ T8004] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 182.323314][ T8004] bpf_prog_load+0xe3c/0x2480 [ 182.323350][ T8004] ? __pfx_bpf_prog_load+0x10/0x10 [ 182.323380][ T8004] ? __pfx___futex_wait+0x10/0x10 [ 182.323433][ T8004] __sys_bpf+0x4a12/0x4cb0 [ 182.323469][ T8004] ? __pfx___sys_bpf+0x10/0x10 [ 182.323510][ T8004] ? percpu_counter_add_batch+0xb8/0x1f0 [ 182.323555][ T8004] ? errseq_sample+0x53/0x70 [ 182.323586][ T8004] ? file_init_path+0x4fe/0x760 [ 182.323623][ T8004] ? do_futex+0x122/0x350 [ 182.323674][ T8004] ? __pfx_do_futex+0x10/0x10 [ 182.323747][ T8004] ? xfd_validate_state+0x5d/0x180 [ 182.323783][ T8004] ? rcu_is_watching+0x12/0xc0 [ 182.323825][ T8004] __x64_sys_bpf+0x78/0xc0 [ 182.323858][ T8004] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.323896][ T8004] do_syscall_64+0xcd/0x260 [ 182.323938][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.323968][ T8004] RIP: 0033:0x7fe503f8d169 [ 182.323992][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.324022][ T8004] RSP: 002b:00007fe504dc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 182.324051][ T8004] RAX: ffffffffffffffda RBX: 00007fe5041a5fa0 RCX: 00007fe503f8d169 [ 182.324070][ T8004] RDX: 0000000000000100 RSI: 0000200000000100 RDI: 0000000000000005 [ 182.324088][ T8004] RBP: 00007fe50400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.324105][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.324121][ T8004] R13: 0000000000000000 R14: 00007fe5041a5fa0 R15: 00007fffd0fe4b08 [ 182.324152][ T8004] [ 182.716612][ T8018] netlink: 'syz.0.406': attribute type 64 has an invalid length. [ 182.752917][ T8018] netlink: 74 bytes leftover after parsing attributes in process `syz.0.406'. [ 183.181276][ T8036] netlink: 'syz.3.412': attribute type 11 has an invalid length. [ 183.200746][ T8036] netlink: 'syz.3.412': attribute type 11 has an invalid length. [ 183.358323][ T8041] Invalid ELF header magic: != ELF [ 183.499044][ T8046] netlink: 342 bytes leftover after parsing attributes in process `syz.2.411'. [ 184.483279][ T8069] CIFS: VFS: Unsupported security flags: 0x200 syzkaller syzkaller login: [ 187.227801][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.430'. [ 187.283447][ T8122] FAULT_INJECTION: forcing a failure. [ 187.283447][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 187.298040][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.3.431 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 187.298082][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.298108][ T8122] Call Trace: [ 187.298117][ T8122] [ 187.298129][ T8122] dump_stack_lvl+0x16c/0x1f0 [ 187.298175][ T8122] should_fail_ex+0x512/0x640 [ 187.298206][ T8122] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 187.298242][ T8122] should_failslab+0xc2/0x120 [ 187.298278][ T8122] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 187.298308][ T8122] ? stack_depot_save_flags+0x29/0x9c0 [ 187.298341][ T8122] ? do_raw_spin_unlock+0x172/0x230 [ 187.298375][ T8122] ? alloc_empty_file+0x55/0x1e0 [ 187.298415][ T8122] alloc_empty_file+0x55/0x1e0 [ 187.298453][ T8122] path_openat+0xe0/0x2d40 [ 187.298478][ T8122] ? getname_flags+0x93/0xf0 [ 187.298522][ T8122] ? do_sys_openat2+0xb8/0x1d0 [ 187.298557][ T8122] ? __x64_sys_open+0x153/0x1e0 [ 187.298592][ T8122] ? do_syscall_64+0xcd/0x260 [ 187.298630][ T8122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.298670][ T8122] ? __pfx_path_openat+0x10/0x10 [ 187.298706][ T8122] do_filp_open+0x20b/0x470 [ 187.298736][ T8122] ? __pfx_do_filp_open+0x10/0x10 [ 187.298783][ T8122] ? _raw_spin_unlock+0x28/0x50 [ 187.298815][ T8122] ? alloc_fd+0x471/0x7d0 [ 187.298883][ T8122] do_sys_openat2+0x11b/0x1d0 [ 187.298918][ T8122] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.298965][ T8122] __x64_sys_open+0x153/0x1e0 [ 187.299001][ T8122] ? __pfx___x64_sys_open+0x10/0x10 [ 187.299044][ T8122] ? rcu_is_watching+0x12/0xc0 [ 187.299083][ T8122] do_syscall_64+0xcd/0x260 [ 187.299134][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.299164][ T8122] RIP: 0033:0x7f294f78d169 [ 187.299187][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.299216][ T8122] RSP: 002b:00007f2950540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 187.299244][ T8122] RAX: ffffffffffffffda RBX: 00007f294f9a5fa0 RCX: 00007f294f78d169 [ 187.299263][ T8122] RDX: 0000000000000100 RSI: 0000000000161342 RDI: 0000200000000000 [ 187.299281][ T8122] RBP: 00007f294f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.299298][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.299315][ T8122] R13: 0000000000000000 R14: 00007f294f9a5fa0 R15: 00007ffde7c76b08 [ 187.299346][ T8122] [ 188.270979][ T8135] FAULT_INJECTION: forcing a failure. [ 188.270979][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.271026][ T8135] CPU: 1 UID: 0 PID: 8135 Comm: syz.2.433 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 188.271066][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.271083][ T8135] Call Trace: [ 188.271092][ T8135] [ 188.271104][ T8135] dump_stack_lvl+0x16c/0x1f0 [ 188.271151][ T8135] should_fail_ex+0x512/0x640 [ 188.271188][ T8135] _copy_to_user+0x32/0xd0 [ 188.271226][ T8135] do_pages_stat+0x5a5/0x850 [ 188.271275][ T8135] ? __pfx_do_pages_stat+0x10/0x10 [ 188.271339][ T8135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 188.271376][ T8135] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.271414][ T8135] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 188.271452][ T8135] kernel_move_pages+0x106e/0x1550 [ 188.271502][ T8135] ? __pfx_kernel_move_pages+0x10/0x10 [ 188.271549][ T8135] ? __x64_sys_futex+0x1e0/0x4c0 [ 188.271594][ T8135] ? __x64_sys_futex+0x1e9/0x4c0 [ 188.271642][ T8135] ? xfd_validate_state+0x5d/0x180 [ 188.271678][ T8135] ? rcu_is_watching+0x12/0xc0 [ 188.271720][ T8135] __x64_sys_move_pages+0xe0/0x1c0 [ 188.271769][ T8135] ? do_syscall_64+0x91/0x260 [ 188.271810][ T8135] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.271850][ T8135] do_syscall_64+0xcd/0x260 [ 188.271893][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.271926][ T8135] RIP: 0033:0x7f86f8d8d169 [ 188.271951][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.271982][ T8135] RSP: 002b:00007f86f9b53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 188.272012][ T8135] RAX: ffffffffffffffda RBX: 00007f86f8fa6160 RCX: 00007f86f8d8d169 [ 188.272032][ T8135] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000000 [ 188.272050][ T8135] RBP: 00007f86f8e0e2a0 R08: 0000000000000000 R09: 8000000000000000 [ 188.272069][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.272087][ T8135] R13: 0000000000000000 R14: 00007f86f8fa6160 R15: 00007fff7dd07b18 [ 188.272120][ T8135] [ 189.682446][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 194.899128][ T8242] [U] ^@ [ 195.029700][ T8242] FAULT_INJECTION: forcing a failure. [ 195.029700][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 195.051850][ T8242] CPU: 0 UID: 0 PID: 8242 Comm: syz.3.456 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 195.051895][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.051914][ T8242] Call Trace: [ 195.051924][ T8242] [ 195.051935][ T8242] dump_stack_lvl+0x16c/0x1f0 [ 195.051983][ T8242] should_fail_ex+0x512/0x640 [ 195.052015][ T8242] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 195.052061][ T8242] should_failslab+0xc2/0x120 [ 195.052097][ T8242] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 195.052130][ T8242] ? security_file_alloc+0x34/0x2b0 [ 195.052170][ T8242] security_file_alloc+0x34/0x2b0 [ 195.052208][ T8242] init_file+0x93/0x4c0 [ 195.052243][ T8242] alloc_empty_file+0x73/0x1e0 [ 195.052281][ T8242] alloc_file_pseudo+0x13a/0x230 [ 195.052321][ T8242] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 195.052361][ T8242] ? alloc_fd+0x471/0x7d0 [ 195.052414][ T8242] sock_alloc_file+0x50/0x210 [ 195.052457][ T8242] __sys_socket+0x1c0/0x260 [ 195.052506][ T8242] ? __pfx___sys_socket+0x10/0x10 [ 195.052555][ T8242] ? rcu_is_watching+0x12/0xc0 [ 195.052600][ T8242] __x64_sys_socket+0x72/0xb0 [ 195.052648][ T8242] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.052686][ T8242] do_syscall_64+0xcd/0x260 [ 195.052728][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.052760][ T8242] RIP: 0033:0x7f294f78d169 [ 195.052784][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.052814][ T8242] RSP: 002b:00007f2950540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 195.052843][ T8242] RAX: ffffffffffffffda RBX: 00007f294f9a5fa0 RCX: 00007f294f78d169 [ 195.052864][ T8242] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 195.052881][ T8242] RBP: 00007f294f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.052900][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.052917][ T8242] R13: 0000000000000000 R14: 00007f294f9a5fa0 R15: 00007ffde7c76b08 [ 195.052950][ T8242] [ 195.694039][ T8260] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 195.702250][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 196.705431][ T8274] netlink: 544 bytes leftover after parsing attributes in process `syz.0.462'. [ 197.697565][ T8290] FAULT_INJECTION: forcing a failure. [ 197.697565][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 197.859865][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.0.466 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 197.859918][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.859937][ T8290] Call Trace: [ 197.859947][ T8290] [ 197.859959][ T8290] dump_stack_lvl+0x16c/0x1f0 [ 197.860006][ T8290] should_fail_ex+0x512/0x640 [ 197.860039][ T8290] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 197.860076][ T8290] should_failslab+0xc2/0x120 [ 197.860114][ T8290] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 197.860146][ T8290] ? xfd_validate_state+0x5d/0x180 [ 197.860182][ T8290] ? getname_flags.part.0+0x48/0x540 [ 197.860228][ T8290] getname_flags.part.0+0x48/0x540 [ 197.860272][ T8290] __x64_sys_unlink+0xb0/0x110 [ 197.860304][ T8290] do_syscall_64+0xcd/0x260 [ 197.860348][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.860381][ T8290] RIP: 0033:0x7f317e58d169 [ 197.860405][ T8290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.860436][ T8290] RSP: 002b:00007f317f3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 197.860467][ T8290] RAX: ffffffffffffffda RBX: 00007f317e7a6080 RCX: 00007f317e58d169 [ 197.860488][ T8290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 197.860507][ T8290] RBP: 00007f317e60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.860526][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.860545][ T8290] R13: 0000000000000000 R14: 00007f317e7a6080 R15: 00007ffd9c2fd4c8 [ 197.860579][ T8290] [ 198.456637][ T8308] netlink: 342 bytes leftover after parsing attributes in process `syz.2.470'. [ 198.751625][ T8320] zram: Removed device: zram0 [ 198.836118][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.843201][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.064405][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'. [ 199.073693][ T8334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.098148][ T8334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.378677][ T8342] [ 199.794601][ T8348] lo: entered allmulticast mode [ 199.884679][ T8347] lo: left allmulticast mode [ 203.747193][ T8430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.770781][ T8430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.786305][ T8430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.792477][ T8430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.952801][ T8443] FAULT_INJECTION: forcing a failure. [ 203.952801][ T8443] name fail_futex, interval 1, probability 0, space 0, times 1 [ 203.993711][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.0.505 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 203.993757][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.993775][ T8443] Call Trace: [ 203.993784][ T8443] [ 203.993796][ T8443] dump_stack_lvl+0x16c/0x1f0 [ 203.993842][ T8443] should_fail_ex+0x512/0x640 [ 203.993879][ T8443] get_futex_key+0x49e/0x1000 [ 203.993927][ T8443] ? __pfx_get_futex_key+0x10/0x10 [ 203.993972][ T8443] ? __pfx_map_create+0x10/0x10 [ 203.994000][ T8443] ? __might_fault+0xe3/0x190 [ 203.994037][ T8443] ? __might_fault+0xe3/0x190 [ 203.994072][ T8443] ? __might_fault+0x13b/0x190 [ 203.994115][ T8443] futex_wake+0xe7/0x4e0 [ 203.994146][ T8443] ? __pfx_futex_wake+0x10/0x10 [ 203.994177][ T8443] ? kmem_cache_free+0x2d4/0x4d0 [ 203.994206][ T8443] ? find_held_lock+0x2b/0x80 [ 203.994257][ T8443] ? putname+0x154/0x1a0 [ 203.994290][ T8443] ? do_sys_openat2+0x1b0/0x1d0 [ 203.994330][ T8443] do_futex+0x1e3/0x350 [ 203.994374][ T8443] ? __pfx_do_futex+0x10/0x10 [ 203.994433][ T8443] __x64_sys_futex+0x1e0/0x4c0 [ 203.994500][ T8443] ? __pfx___x64_sys_futex+0x10/0x10 [ 203.994550][ T8443] ? rcu_is_watching+0x12/0xc0 [ 203.994608][ T8443] do_syscall_64+0xcd/0x260 [ 203.994651][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.994687][ T8443] RIP: 0033:0x7f317e58d169 [ 203.994711][ T8443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.994742][ T8443] RSP: 002b:00007f317f4140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.994770][ T8443] RAX: ffffffffffffffda RBX: 00007f317e7a5fa8 RCX: 00007f317e58d169 [ 203.994790][ T8443] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f317e7a5fac [ 203.994808][ T8443] RBP: 00007f317e7a5fa0 R08: 00007f317f415000 R09: 0000000000000000 [ 203.994827][ T8443] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f317e7a5fac [ 203.994846][ T8443] R13: 0000000000000000 R14: 00007ffd9c2fd3e0 R15: 00007ffd9c2fd4c8 [ 203.994878][ T8443] [ 205.193120][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.449201][ T30] audit: type=1800 audit(6038332580.570:8): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.514" name="discovery_nqn" dev="configfs" ino=21635 res=0 errno=0 [ 205.503746][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 205.523493][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 205.757722][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.825677][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.825825][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.736268][ T8521] FAULT_INJECTION: forcing a failure. [ 207.736268][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 207.766201][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz.1.523 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 207.766246][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.766265][ T8521] Call Trace: [ 207.766275][ T8521] [ 207.766287][ T8521] dump_stack_lvl+0x16c/0x1f0 [ 207.766335][ T8521] should_fail_ex+0x512/0x640 [ 207.766363][ T8521] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 207.766413][ T8521] should_failslab+0xc2/0x120 [ 207.766448][ T8521] __kmalloc_cache_noprof+0x6a/0x3e0 [ 207.766496][ T8521] ? mqueue_init_fs_context+0x4b/0x480 [ 207.766556][ T8521] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 207.766606][ T8521] mqueue_init_fs_context+0x4b/0x480 [ 207.766655][ T8521] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 207.766703][ T8521] alloc_fs_context+0x54a/0x9c0 [ 207.766741][ T8521] mq_init_ns+0x172/0x620 [ 207.766770][ T8521] copy_ipcs+0x383/0x610 [ 207.766797][ T8521] ? copy_utsname+0xab/0x470 [ 207.766826][ T8521] create_new_namespaces+0x20a/0xad0 [ 207.766872][ T8521] ? security_capable+0x7e/0x260 [ 207.766924][ T8521] copy_namespaces+0x468/0x560 [ 207.766971][ T8521] copy_process+0x2b75/0x9130 [ 207.767053][ T8521] ? __pfx_copy_process+0x10/0x10 [ 207.767103][ T8521] ? try_to_wake_up+0xa2f/0x1680 [ 207.767149][ T8521] ? plist_check_head+0xa3/0x150 [ 207.767178][ T8521] ? find_held_lock+0x2b/0x80 [ 207.767223][ T8521] ? wake_up_q+0xb0/0x160 [ 207.767260][ T8521] ? do_raw_spin_unlock+0x172/0x230 [ 207.767300][ T8521] ? 0xffffffffff600000 [ 207.767323][ T8521] kernel_clone+0xfc/0x960 [ 207.767370][ T8521] ? __pfx_futex_wake+0x10/0x10 [ 207.767398][ T8521] ? __pfx_kernel_clone+0x10/0x10 [ 207.767443][ T8521] ? perf_event_namespaces+0x1af/0x200 [ 207.767486][ T8521] ? 0xffffffffff600000 [ 207.767509][ T8521] ? 0xffffffffff600000 [ 207.767529][ T8521] __do_sys_clone+0xce/0x120 [ 207.767576][ T8521] ? __pfx___do_sys_clone+0x10/0x10 [ 207.767623][ T8521] ? do_raw_spin_unlock+0x172/0x230 [ 207.767660][ T8521] ? 0xffffffffff600000 [ 207.767681][ T8521] ? 0xffffffffff600000 [ 207.767701][ T8521] ? 0xffffffffff600000 [ 207.767733][ T8521] ? rcu_is_watching+0x12/0xc0 [ 207.767779][ T8521] do_syscall_64+0xcd/0x260 [ 207.767823][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.767855][ T8521] RIP: 0033:0x7fe503f8d169 [ 207.767880][ T8521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.767911][ T8521] RSP: 002b:00007fe504dc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 207.767942][ T8521] RAX: ffffffffffffffda RBX: 00007fe5041a5fa0 RCX: 00007fe503f8d169 [ 207.767963][ T8521] RDX: ffffffffff600000 RSI: 0000000000000002 RDI: 000fffffffe22000 [ 207.767983][ T8521] RBP: 00007fe50400e2a0 R08: 00000800fffffffc R09: 0000000000000000 [ 207.768002][ T8521] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 207.768029][ T8521] R13: 0000000000000000 R14: 00007fe5041a5fa0 R15: 00007fffd0fe4b08 [ 207.768055][ T8521] ? 0xffffffffff600000 [ 207.768080][ T8521] ? 0xffffffffff600000 [ 207.768106][ T8521] [ 208.578194][ T8534] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.842026][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 209.086476][ T8556] netlink: 'syz.2.531': attribute type 2 has an invalid length. [ 209.301979][ T8562] Invalid ELF header magic: != ELF [ 209.345118][ T8562] Invalid ELF header magic: != ELF [ 209.358304][ T5843] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.366282][ T5843] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.397683][ T5843] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.406302][ T5843] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.422848][ T5843] rtc rtc0: __rtc_set_alarm: err=-22 [ 209.471558][ T5849] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 210.820406][ T5849] Bluetooth: hci1: Malformed LE Event: 0x02 [ 211.254136][ T8607] Invalid ELF header magic: != ELF [ 211.677959][ T8609] FAULT_INJECTION: forcing a failure. [ 211.677959][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 211.734854][ T8609] CPU: 1 UID: 0 PID: 8609 Comm: syz.1.541 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 211.734896][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.734913][ T8609] Call Trace: [ 211.734922][ T8609] [ 211.734932][ T8609] dump_stack_lvl+0x16c/0x1f0 [ 211.734976][ T8609] should_fail_ex+0x512/0x640 [ 211.735007][ T8609] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 211.735041][ T8609] should_failslab+0xc2/0x120 [ 211.735076][ T8609] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 211.735107][ T8609] ? crng_make_state+0x48e/0x6d0 [ 211.735147][ T8609] ? proc_net_ns_init+0x42/0x410 [ 211.735185][ T8609] ? __pfx_proc_net_ns_init+0x10/0x10 [ 211.735240][ T8609] proc_net_ns_init+0x42/0x410 [ 211.735280][ T8609] ? __pfx_proc_net_ns_init+0x10/0x10 [ 211.735317][ T8609] ops_init+0x1df/0x5f0 [ 211.735359][ T8609] setup_net+0x21e/0x850 [ 211.735401][ T8609] ? __pfx_setup_net+0x10/0x10 [ 211.735437][ T8609] ? lockdep_init_map_type+0x5c/0x280 [ 211.735466][ T8609] ? __pfx_down_read_killable+0x10/0x10 [ 211.735513][ T8609] ? debug_mutex_init+0x37/0x70 [ 211.735554][ T8609] copy_net_ns+0x2a6/0x5f0 [ 211.735611][ T8609] create_new_namespaces+0x3ea/0xad0 [ 211.735662][ T8609] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 211.735709][ T8609] ksys_unshare+0x45b/0xa40 [ 211.735758][ T8609] ? __pfx_ksys_unshare+0x10/0x10 [ 211.735803][ T8609] ? xfd_validate_state+0x5d/0x180 [ 211.735835][ T8609] ? rcu_is_watching+0x12/0xc0 [ 211.735875][ T8609] __x64_sys_unshare+0x31/0x40 [ 211.735919][ T8609] do_syscall_64+0xcd/0x260 [ 211.735958][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.735990][ T8609] RIP: 0033:0x7fe503f8d169 [ 211.736013][ T8609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.736042][ T8609] RSP: 002b:00007fe504da0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 211.736069][ T8609] RAX: ffffffffffffffda RBX: 00007fe5041a6080 RCX: 00007fe503f8d169 [ 211.736087][ T8609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 211.736104][ T8609] RBP: 00007fe50400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 211.736120][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.736136][ T8609] R13: 0000000000000000 R14: 00007fe5041a6080 R15: 00007fffd0fe4b08 [ 211.736166][ T8609] [ 213.669746][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 215.403945][ T8665] netlink: 342 bytes leftover after parsing attributes in process `syz.0.553'. [ 215.414929][ T8667] netlink: 342 bytes leftover after parsing attributes in process `syz.0.553'. [ 215.673958][ T8673] random: crng reseeded on system resumption [ 216.184765][ T8682] netlink: 544 bytes leftover after parsing attributes in process `syz.2.559'. [ 217.214095][ T8708] netlink: 330 bytes leftover after parsing attributes in process `syz.1.564'. [ 217.449409][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 218.199149][ T8726] netlink: 544 bytes leftover after parsing attributes in process `syz.3.569'. [ 219.658988][ T8761] capability: warning: `syz.2.573' uses deprecated v2 capabilities in a way that may be insecure [ 220.016787][ T8749] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.023965][ T8749] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.030494][ T8749] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.039077][ T8749] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.381567][ T8772] FAULT_INJECTION: forcing a failure. [ 220.381567][ T8772] name failslab, interval 1, probability 0, space 0, times 0 [ 220.428090][ T8772] CPU: 1 UID: 0 PID: 8772 Comm: syz.0.578 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 220.428134][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.428151][ T8772] Call Trace: [ 220.428159][ T8772] [ 220.428170][ T8772] dump_stack_lvl+0x16c/0x1f0 [ 220.428214][ T8772] should_fail_ex+0x512/0x640 [ 220.428245][ T8772] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 220.428279][ T8772] should_failslab+0xc2/0x120 [ 220.428314][ T8772] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 220.428344][ T8772] ? getname_flags.part.0+0x48/0x540 [ 220.428397][ T8772] getname_flags.part.0+0x48/0x540 [ 220.428439][ T8772] getname_flags+0x93/0xf0 [ 220.428484][ T8772] do_sys_openat2+0xb8/0x1d0 [ 220.428520][ T8772] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.428568][ T8772] __x64_sys_openat+0x174/0x210 [ 220.428604][ T8772] ? __pfx___x64_sys_openat+0x10/0x10 [ 220.428644][ T8772] ? rcu_is_watching+0x12/0xc0 [ 220.428688][ T8772] do_syscall_64+0xcd/0x260 [ 220.428729][ T8772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.428759][ T8772] RIP: 0033:0x7f317e58bad0 [ 220.428781][ T8772] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 220.428810][ T8772] RSP: 002b:00007f317f413f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 220.428848][ T8772] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f317e58bad0 [ 220.428877][ T8772] RDX: 0000000000000000 RSI: 00007f317f413fa0 RDI: 00000000ffffff9c [ 220.428893][ T8772] RBP: 00007f317f413fa0 R08: 0000000000000000 R09: 0000000000000000 [ 220.428908][ T8772] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 220.428923][ T8772] R13: 0000000000000000 R14: 00007f317e7a5fa0 R15: 00007ffd9c2fd4c8 [ 220.428951][ T8772] [ 220.607852][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.504269][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.667351][ T8813] netlink: 342 bytes leftover after parsing attributes in process `syz.0.588'. [ 221.680899][ T8813] netlink: 302 bytes leftover after parsing attributes in process `syz.0.588'. [ 221.928657][ T8818] netlink: 93 bytes leftover after parsing attributes in process `syz.3.590'. [ 222.062346][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.062363][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.062405][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.170264][ T8821] Invalid ELF header magic: != ELF [ 223.708048][ T8861] netlink: 544 bytes leftover after parsing attributes in process `syz.2.597'. [ 224.576560][ T8873] netlink: 342 bytes leftover after parsing attributes in process `syz.1.599'. [ 225.546275][ T8921] nbd: socks must be embedded in a SOCK_ITEM attr [ 225.570128][ T8921] block nbd1: shutting down sockets [ 225.704404][ T8926] netlink: 350 bytes leftover after parsing attributes in process `syz.2.610'. [ 226.898810][ T8955] [ 226.901206][ T8955] ====================================================== [ 226.908250][ T8955] WARNING: possible circular locking dependency detected [ 226.915293][ T8955] 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 Not tainted [ 226.922081][ T8955] ------------------------------------------------------ [ 226.929119][ T8955] syz.3.618/8955 is trying to acquire lock: [ 226.935032][ T8955] ffff888025e49958 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 226.945034][ T8955] [ 226.945034][ T8955] but task is already holding lock: [ 226.952426][ T8955] ffff888025e49428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 226.963739][ T8955] [ 226.963739][ T8955] which lock already depends on the new lock. [ 226.963739][ T8955] [ 226.974234][ T8955] [ 226.974234][ T8955] the existing dependency chain (in reverse order) is: [ 226.983243][ T8955] [ 226.983243][ T8955] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 226.991871][ T8955] blk_alloc_queue+0x619/0x760 [ 226.997189][ T8955] blk_mq_alloc_queue+0x179/0x290 [ 227.002741][ T8955] __blk_mq_alloc_disk+0x29/0x120 [ 227.008297][ T8955] loop_add+0x496/0xb70 [ 227.013006][ T8955] loop_init+0x164/0x270 [ 227.017775][ T8955] do_one_initcall+0x120/0x6e0 [ 227.023090][ T8955] kernel_init_freeable+0x5c2/0x900 [ 227.028830][ T8955] kernel_init+0x1c/0x2b0 [ 227.033721][ T8955] ret_from_fork+0x45/0x80 [ 227.038689][ T8955] ret_from_fork_asm+0x1a/0x30 [ 227.044013][ T8955] [ 227.044013][ T8955] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 227.051257][ T8955] fs_reclaim_acquire+0x102/0x150 [ 227.056851][ T8955] blk_mq_alloc_and_init_hctx+0x503/0x11c0 [ 227.063203][ T8955] blk_mq_realloc_hw_ctxs+0x8f6/0xc00 [ 227.069117][ T8955] blk_mq_init_allocated_queue+0x3af/0x1230 [ 227.075546][ T8955] blk_mq_alloc_queue+0x1c2/0x290 [ 227.081104][ T8955] __blk_mq_alloc_disk+0x29/0x120 [ 227.086667][ T8955] loop_add+0x496/0xb70 [ 227.091376][ T8955] loop_init+0x164/0x270 [ 227.096156][ T8955] do_one_initcall+0x120/0x6e0 [ 227.101470][ T8955] kernel_init_freeable+0x5c2/0x900 [ 227.107213][ T8955] kernel_init+0x1c/0x2b0 [ 227.112095][ T8955] ret_from_fork+0x45/0x80 [ 227.117052][ T8955] ret_from_fork_asm+0x1a/0x30 [ 227.122375][ T8955] [ 227.122375][ T8955] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 227.130224][ T8955] __lock_acquire+0x1173/0x1ba0 [ 227.135637][ T8955] lock_acquire+0x179/0x350 [ 227.140692][ T8955] __mutex_lock+0x199/0xb90 [ 227.145742][ T8955] queue_requests_store+0x1c7/0x310 [ 227.151484][ T8955] queue_attr_store+0x270/0x310 [ 227.156881][ T8955] sysfs_kf_write+0x117/0x170 [ 227.162113][ T8955] kernfs_fop_write_iter+0x351/0x510 [ 227.167947][ T8955] iter_file_splice_write+0x91c/0x1150 [ 227.173961][ T8955] direct_splice_actor+0x18f/0x6c0 [ 227.179630][ T8955] splice_direct_to_actor+0x342/0xa30 [ 227.185557][ T8955] do_splice_direct+0x174/0x240 [ 227.190965][ T8955] do_sendfile+0xafd/0xe50 [ 227.195930][ T8955] __x64_sys_sendfile64+0x1d8/0x220 [ 227.201677][ T8955] do_syscall_64+0xcd/0x260 [ 227.206725][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.213175][ T8955] [ 227.213175][ T8955] other info that might help us debug this: [ 227.213175][ T8955] [ 227.223410][ T8955] Chain exists of: [ 227.223410][ T8955] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 227.223410][ T8955] [ 227.237192][ T8955] Possible unsafe locking scenario: [ 227.237192][ T8955] [ 227.244653][ T8955] CPU0 CPU1 [ 227.250021][ T8955] ---- ---- [ 227.255392][ T8955] lock(&q->q_usage_counter(io)#29); [ 227.260790][ T8955] lock(fs_reclaim); [ 227.267307][ T8955] lock(&q->q_usage_counter(io)#29); [ 227.275234][ T8955] lock(&q->elevator_lock); [ 227.279841][ T8955] [ 227.279841][ T8955] *** DEADLOCK *** [ 227.279841][ T8955] [ 227.287989][ T8955] 5 locks held by syz.3.618/8955: [ 227.293018][ T8955] #0: ffff888031b0a420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 227.303105][ T8955] #1: ffff88803223ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 227.312894][ T8955] #2: ffff888025ea25a8 (kn->active#165){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 227.323044][ T8955] #3: ffff888025e49428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 227.334791][ T8955] #4: ffff888025e49460 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 227.346817][ T8955] [ 227.346817][ T8955] stack backtrace: [ 227.352720][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.3.618 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) [ 227.352754][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.352769][ T8955] Call Trace: [ 227.352776][ T8955] [ 227.352786][ T8955] dump_stack_lvl+0x116/0x1f0 [ 227.352822][ T8955] print_circular_bug+0x275/0x350 [ 227.352864][ T8955] check_noncircular+0x14c/0x170 [ 227.352907][ T8955] __lock_acquire+0x1173/0x1ba0 [ 227.352949][ T8955] ? __lock_acquire+0xaa4/0x1ba0 [ 227.352990][ T8955] lock_acquire+0x179/0x350 [ 227.353011][ T8955] ? queue_requests_store+0x1c7/0x310 [ 227.353044][ T8955] ? __pfx___might_resched+0x10/0x10 [ 227.353083][ T8955] __mutex_lock+0x199/0xb90 [ 227.353114][ T8955] ? queue_requests_store+0x1c7/0x310 [ 227.353145][ T8955] ? mark_held_locks+0x49/0x80 [ 227.353184][ T8955] ? queue_requests_store+0x1c7/0x310 [ 227.353216][ T8955] ? __pfx___mutex_lock+0x10/0x10 [ 227.353249][ T8955] ? blk_mq_freeze_queue_wait+0xad/0x1b0 [ 227.353278][ T8955] ? __pfx_autoremove_wake_function+0x10/0x10 [ 227.353320][ T8955] ? queue_requests_store+0x1c7/0x310 [ 227.353350][ T8955] queue_requests_store+0x1c7/0x310 [ 227.353395][ T8955] ? __pfx_queue_requests_store+0x10/0x10 [ 227.353427][ T8955] ? __mutex_trylock_common+0xe9/0x250 [ 227.353452][ T8955] ? __pfx_queue_requests_store+0x10/0x10 [ 227.353483][ T8955] queue_attr_store+0x270/0x310 [ 227.353534][ T8955] ? __pfx_queue_attr_store+0x10/0x10 [ 227.353564][ T8955] ? __lock_acquire+0x5ca/0x1ba0 [ 227.353613][ T8955] ? kernfs_fop_write_iter+0x28f/0x510 [ 227.353655][ T8955] ? __pfx_queue_attr_store+0x10/0x10 [ 227.353684][ T8955] sysfs_kf_write+0x117/0x170 [ 227.353720][ T8955] kernfs_fop_write_iter+0x351/0x510 [ 227.353753][ T8955] ? __pfx_sysfs_kf_write+0x10/0x10 [ 227.353790][ T8955] iter_file_splice_write+0x91c/0x1150 [ 227.353839][ T8955] ? __pfx_iter_file_splice_write+0x10/0x10 [ 227.353884][ T8955] ? __pfx_copy_splice_read+0x10/0x10 [ 227.353929][ T8955] ? __pfx_iter_file_splice_write+0x10/0x10 [ 227.353981][ T8955] direct_splice_actor+0x18f/0x6c0 [ 227.354020][ T8955] splice_direct_to_actor+0x342/0xa30 [ 227.354059][ T8955] ? __pfx_direct_splice_actor+0x10/0x10 [ 227.354100][ T8955] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 227.354141][ T8955] do_splice_direct+0x174/0x240 [ 227.354178][ T8955] ? __pfx_do_splice_direct+0x10/0x10 [ 227.354216][ T8955] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 227.354255][ T8955] ? rw_verify_area+0xcf/0x680 [ 227.354289][ T8955] do_sendfile+0xafd/0xe50 [ 227.354343][ T8955] ? __pfx_do_sendfile+0x10/0x10 [ 227.354381][ T8955] ? __x64_sys_futex+0x1e0/0x4c0 [ 227.354417][ T8955] ? __x64_sys_futex+0x1e9/0x4c0 [ 227.354455][ T8955] __x64_sys_sendfile64+0x1d8/0x220 [ 227.354483][ T8955] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 227.354510][ T8955] ? rcu_is_watching+0x12/0xc0 [ 227.354544][ T8955] do_syscall_64+0xcd/0x260 [ 227.354578][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.354603][ T8955] RIP: 0033:0x7f294f78d169 [ 227.354629][ T8955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.354653][ T8955] RSP: 002b:00007f2950540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.354675][ T8955] RAX: ffffffffffffffda RBX: 00007f294f9a5fa0 RCX: 00007f294f78d169 [ 227.354692][ T8955] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 227.354707][ T8955] RBP: 00007f294f80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 227.354723][ T8955] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 227.354738][ T8955] R13: 0000000000000000 R14: 00007f294f9a5fa0 R15: 00007ffde7c76b08 [ 227.354760][ T8955] [ 227.354787][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.720377][ C1] vkms_vblank_simulate: vblank timer overrun