last executing test programs: 19.00760686s ago: executing program 2 (id=177): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 16.500882961s ago: executing program 2 (id=182): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) timer_create$auto(0x9, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) fremovexattr$auto(r0, &(0x7f0000000040)='s}stem.\xa5\x1aE\x8d\x9e\xb9\x81\xf0\x01\xc2\xa9\xe9\x8d\x87/\xe7') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001d00)={&(0x7f0000000080), 0xc, &(0x7f0000001cc0)={&(0x7f00000003c0)={0x18f8, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0x5e, 0x129, "492ad9e799aeedc41ffb9b93dd9a62ce2c873f18fcae7ffeabb88b1c612be49edfb6d5adaa09b5cd14509c99361f7745051668fe7c36482624b0e6a05295a9acd20f15a60d3d433229eaf0a1dd0587f5b01b5098bc8a70390c25"}, @NL80211_ATTR_IE_RIC={0x4bc, 0xb2, "a616e6859636f243444b374b34eec159c99a670c4aa2cbfd348b106be3f06f819880e3da99877ddc64a136d552ebfc2094db50486893450369269d54de8204f88ad1211d5acb3643e1defd652cc0a3e59296d99d695d364c8b3fd79962a0c6bb989e6a6326f2ac1c9fc756f0498c8c65d4e8efb3bae880e76c8ebc38cff9600e732be21ef1f070b156e8146152ceba5236c62d019ba40b77cb34f6f1d56b299912d8cbf2c19080d2f5537bbe66b37857ec9862ef60aeb7a0fb493c5627c0a3e2f89b6a3537fd2aa2b6e8c8f642ed3c3b03a98666b8c3855833b3da9c6f5234521c6f7f559f00996a80ddf470be7db6fab01936014d65b3c819a24a0614d837a357a2e568c2c2bf44b1e43d9b0a7a80e3645ecde390a0bff45ae9fc8fd9850f77a60f06d5056c940c37529fc18ffe0f127b552722b724cea400c92f86bccc65cd02f3c345a7f88ee16b8d3ad7195e9663f46aee007e3ae423a46eed58b62a1e8b72bf48138cbb03c7815c406c88e9a3868e939f7e5511d5cc3ec235283d455071cca21db5736476513bbc09e7643d36550f4fb03a20c81742c7bdd9930a93c341c56fea96c8657eff65676170b7a2389a388e9819a8b238e1613582c7348b3eee3ad7d00831ca21527c64cb51bf4977d1f1781d7db652cd7baa9f83448ec2c028e1acd3ed6b0737c84caba9b654ba05a91f0247e4098fd358a6d719ca7318c7e0d397b2e5ef1284af64ad7fe569e304bee26f9f93e8c06d77cfcd46697fa85a36b91208d6985eb41090f4201c071f8b26e0a58b3c1e2c9045f3d8a4356a3bd01f2721626465e94eb894a1a7350db27d801e9ab04db5e104b3a5c19908a7af573c79dbef8437707e296edcb922467784e726dacb92b657b8375392c7235df76b3c06726e3905d2ed3a6e749887143965e54c1cea8649b868e077d911e8696836c027316d0b05560bf921c5220553ad7855d79f0d53f4ffb2093e3d01c3117e5dd038a3f1be0c54cfd7a8b725cc54c1f112d72a8b8bf1b2b28ee0389d9a4b2057ebfdd3970e6d26032464be01d5124815f6ee0fae6f91777f03fc439c7e227d531782ebf509758a61c8ab21957f7dec6fb47835871293a6b27ff9a003a6a50cc5fd5a4da5d7911263246098c38856bce45ee03f78c1991eb6e7c36b908f6e3b72a7965ffa2b3db8961122e84962b2203581385e23b0ca19b1675adea7bb0e4456d423040372107425b698e35ca4832792bb9b46bf8025f765d9136b6b93a856ee2bf62cb0d1ff4b63f089f35357216d0ae6912e95255ed376ee049efa5554790768d81061917fd799d36db2b02a4600cb2b2b1532eb46ea79af670f1dd8307138eb1420b3990ff8c734667faa89adb404ec64d82146cfe1210d9adee06211a532bdb5f5e0fef06703ee4bea2001d78176673aad0db7d68569cae13d520b69d689da66d9a677d51076e46a5eb354205a178ba51a049dbbad6bc2fe2ee9ca0bbbdaaa8b493db8ddb5f92ee4c4f2c3f01dddb67677ca5c295f8e0ec4e3dd514b16e5c50ab42ce4c8d1e602926c21e44a73e491aade4404ba11113de93cb2bc7a79010918ea4312c24ec91514d9c3119f12033944c398eb337decf583de4cdb4cdd5e4bcea31d57ded907f5cd338772b3337cced08269cffe909157c82e28be92f18c3108f493fb0fac8c0b8fabd30808d1fa2503885e1773848b3e"}, @NL80211_ATTR_REG_ALPHA2={0x1004, 0x21, "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"}, @NL80211_ATTR_IE={0x312, 0x2a, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x85}, @NL80211_ATTR_WIPHY_NAME={0xb, 0x2, 'macsec\x00'}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_MAC={0x8c, 0x6, "72db5e87f68c4954fa1ecbc0c827f6dfc58bfcce0b4128d1d058c6b6ec56fec9c67efcec43fdabb1d39449dfff89dd9a3cf4fcf148697aa57031415d1d6aacb29192bc565cd1b95ea88751d8d488528261b60f0acdec929e3e9073d74c2db0cc424e3b1a6e08a291a7a8bc95648db219655a409b7240c76fd7378e5e99bd85b002e1c631a3908bcb"}, @NL80211_ATTR_DISABLE_HE={0x4}]}, 0x18f8}, 0x1, 0x0, 0x0, 0x44844}, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 14.359857926s ago: executing program 1 (id=183): ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 13.165294401s ago: executing program 2 (id=186): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 10.201029225s ago: executing program 1 (id=190): r0 = socket(0xa, 0x3, 0x3a) ioctl$auto(r0, 0x8982, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x20000001005}, 0x1, &(0x7f0000000040)={&(0x7f00000000c0)="abef5558a98826e4a646ebb16786b22b22a1b7c4d5e888ac8a3c3c0f7ca67d607263b1bdb529bddde02ff15a00a9a689eebc447d33ee812e77", 0xfffffffc}, 0x4, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) (async) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 9.934887359s ago: executing program 2 (id=192): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x1000000007e81, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ram5\x00', 0x6aa02, 0x0) r0 = open(0x0, 0x56042, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2y\x1f\xee\xeeE\x18A\x14\xc6\xaa\x19\x9d\x17\xcf\x9e3!\x97\xe8X\xa3,a\xd5\x14\xb9\xa9\xb3\xf7\x19\xe5\xa6\x81\xbb 3\xc3\xec\x12\xef\xfbs\x9e}\xb0\xc9\x16I\x14\xbc\x01\xf0\x93O\xf0\x9byg\xb2\xdcZ\xf8g[\xf5\x97\x16\x0fm3\xcc\xc9\xaa\x812\b\x12\xffQq\xd5\xfc\xc5\xaf\xcd:1\xef\xca\xf3\xc7\xa4\xebS\x17\x99\x0f\xa3\x83\xb9\xbe\xa0u\x90(\xd2\xa5\xbe\xaf9a\x10K&\xf7N\xb8\xf5\x19\x12\x95\x1ex\xe3\x89\x9eU\xb5\x80\x0e\xfb\xe2\xd61\b\t\xa4H*v\x9a`%\xb4)\xa0\xb6\x11\xc3\xb4\xaa^\x02\xc5E\na\x03\xd3\xf2j\xa4Ly\xfa\xfcX.\xa1\xcfU\xcc\xec\x8b\x057\xda,v\x1br\xd3\xc1\xcc\xb4p\xff\x8c\x17YW\xc2\x92\xaf\xa8\x9c\x9dX]\xa4\x9a\x1a\xd5\x80B\x10\xd1\xd5\xca\x85\x9e)FT0\xe3\xb4\x19\x9dR\xc5\xdf\xb3\x9e\xea+2\x94\xba\x8c\xbe79\xba\x92\xcb\xd5\x87kB\xbd\xda\xf9\xb6)\xb3R\"\xe5A\xcfi\xd1\xf6\xa9\x86\x00\x88\x86\x05@d\xbc\xca\xd0v\xa07\xd9\x01Z\x89\xec\xce[J\xfeM\xfc\x1f\xe7j)\xe8\xdb\xfa\xa57\xe71\x9b\xbc\xf5|\xc6\xc8\xe7N\xd3i.|\xdd\xc0h\xd6', 0x8001, 0x20000000) ioctl$auto_SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) fsconfig$auto_XFS_DAX_NEVER(0xffffffffffffffff, 0x6, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x38, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r5, 0x0, 0x400000000006) 9.837569909s ago: executing program 3 (id=193): mmap$auto(0x0, 0x400008, 0xdf, 0x411, 0x2, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x894}, 0x4) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000a00)=0x101) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto(r5, 0x0, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05082dbd7000fbdbdf257e000000", @ANYRES32=r4, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) recvfrom$auto(0x3, 0x0, 0x8000000003, 0xfffff4a5, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r1, 0x0, 0x10a, 0x6, 0x0) 9.204669685s ago: executing program 3 (id=195): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, 0x0, 0x8014) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000000c0)="0ef6eb135b5f", 0x4, &(0x7f00000003c0)={0x0, 0xb9d}, 0x3, 0x0, 0xa82, 0x800005}, 0xfff}, 0x101, 0xc3a4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250400000008000200000000000800010006000000080001009d0900000800020001040000"], 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) write$auto(0x3, 0x0, 0x100000000) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x42a, 0x200, 0x4, 0x10, 0x401}) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) r1 = socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) mprotect$auto(0x6, 0xab80000000000000, 0x549b) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) recvfrom$auto(r1, 0x0, 0xe230, 0x5, 0x0, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) ioctl$auto(0x3, 0x8906, 0xd) r2 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r2, 0x8000) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r2, &(0x7f00000005c0)=""/238, 0xee) 8.810772971s ago: executing program 1 (id=196): mmap$auto(0x0, 0x400009, 0x40000000df, 0x9b72, 0xffffffffffffffff, 0x8) r0 = socket(0x21, 0x2, 0x2) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4020ae46, r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x4, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye6\x00', 0x115981, 0x0) ioctl$auto(r2, 0x4b67, 0x1) r3 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x22ae01, 0x0) mmap$auto(0x5, 0x0, 0x1000000, 0x18, r3, 0x1000) 8.621556216s ago: executing program 1 (id=197): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000b00) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 8.09384524s ago: executing program 0 (id=198): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 8.055572412s ago: executing program 3 (id=199): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) timer_create$auto(0x9, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) fremovexattr$auto(r0, &(0x7f0000000040)='s}stem.\xa5\x1aE\x8d\x9e\xb9\x81\xf0\x01\xc2\xa9\xe9\x8d\x87/\xe7') socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 7.375642566s ago: executing program 3 (id=200): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x58) capset$auto(&(0x7f0000000040)={0x5, 0xffffffffffffffff}, &(0x7f0000000080)={0x1, 0x4, 0xe}) prctl$auto(0x3e, 0x1, r1, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 6.947402206s ago: executing program 2 (id=201): ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 4.787272253s ago: executing program 3 (id=202): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x58) capset$auto(&(0x7f0000000040)={0x5, 0xffffffffffffffff}, &(0x7f0000000080)={0x1, 0x4, 0xe}) prctl$auto(0x3e, 0x1, r1, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 4.639747413s ago: executing program 0 (id=203): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000002880), 0x2000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x4, 0x2, 0xcb6}, 0xaa) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(&(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xa7e, 0x6, &(0x7f0000000100)={0x2, 0x200, 0x9, 0xd}) ioctl$auto_KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000028c0)={0xa}) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)=""/213, 0xd5) 4.415257691s ago: executing program 1 (id=204): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x0, 0x200003d) connect$auto(0x3, &(0x7f0000000000)=@generic={0x3, "0000e10000000000000000000015"}, 0x58) prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) lseek$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0xd) 3.797806607s ago: executing program 0 (id=205): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x40000e6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x3, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x18, 0x5, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x7, 0x0, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) lstat$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x40a00, 0x1c7) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0x9, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x8, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x4, 0x108000001, 0x9, 0x8, 0x1ff, 0x6, 0x7, 0x7, 0x1, 0x4000000000003, 0x10000004300, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="cb5b"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) statfs$auto(&(0x7f0000000400)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000500)={0x8, 0x100000000, 0xffffffffffffffff, 0x4, 0xfff, 0xc, 0x800, {[0x6, 0xa]}, 0x8, 0x9f, 0x2, [0x7fffffffffffffff, 0x8, 0xc3d, 0x7]}) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000580)=@bpf_attr_1={r1, 0x7fffffff, @value=0xfffffffffffffffd, 0x7}, 0x5b) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) 2.603044495s ago: executing program 0 (id=206): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x23, 0x2, 0x0) ioctl$auto(r1, 0x89ef, 0x74) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) 1.814896477s ago: executing program 1 (id=207): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 1.570961277s ago: executing program 2 (id=208): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(0x0, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 819.322673ms ago: executing program 0 (id=209): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x40000000006, 0x5, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x3bef0e67, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1203000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mremap$auto(0x40000000006, 0x5, 0x4, 0x7, 0x100000000) (async) madvise$auto(0x0, 0x200007, 0x19) (async) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x3bef0e67, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) (async) syz_clone(0x1203000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) madvise$auto(0x0, 0x200007, 0x8) (async) 141.381874ms ago: executing program 3 (id=210): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) write$auto_media_devnode_fops_mc_devnode(r1, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001240)="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", 0x15e) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sg1\x00', 0x10440, 0x0) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sg1\x00', 0x10440, 0x0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f00000011c0)={"8ea04fb36df5554bed21642e5fb6d0061e4aedbc2a1a536dae8b259ab9b62cdc", 0x0, 0xfffffffc, 0xffffffcb, 0x3, 0x8, 0x0}) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f00000010c0)={"c6f0e7200d89a5b21b80b919cb5599dd0b8c3c4c42c16065b807aa63f5167307", 0x424, 0x80000001, 0xffff8001, 0xf, 0x6, r3}) (async) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f00000010c0)={"c6f0e7200d89a5b21b80b919cb5599dd0b8c3c4c42c16065b807aa63f5167307", 0x424, 0x80000001, 0xffff8001, 0xf, 0x6, r3}) mmap$auto(0x0, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xffffffff, 0xffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000001, 0x15, 0x8001, 0x1, 0x9, 0x5, 0x8, 0x40000000000000, 0x3, 0x8000000008, 0xfffffffffffffffa, 0xab, 0x2, 0x9]}, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(r4, &(0x7f0000001080)='ns/uts\x00') mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0xa801, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r5, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) ioctl$auto_USBDEVFS_SUBMITURB32(r5, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x1, 0xffffffffffff0001, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) pread64$auto(r6, 0x0, 0xf42c, 0x38) (async) pread64$auto(r6, 0x0, 0xf42c, 0x38) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x80005520, 0x7f) (async) ioctl$auto(0x3, 0x80005520, 0x7f) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) 0s ago: executing program 0 (id=211): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x1, 0xf) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, 0x0, 0x58) capset$auto(&(0x7f0000000040)={0x5, 0xffffffffffffffff}, &(0x7f0000000080)={0x1, 0x4, 0xe}) prctl$auto(0x3e, 0x1, r1, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 81.980207][ T5620] cgroup: Unknown subsys name 'net' [ 82.122387][ T5620] cgroup: Unknown subsys name 'cpuset' [ 82.131521][ T5620] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.847197][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.935696][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.952240][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.960587][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.969483][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.979183][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.987406][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.996789][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.999647][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.012325][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.012687][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.020736][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.028631][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.036010][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.050988][ T5646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.059290][ T5646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.070160][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.078046][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.086393][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.093596][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.100058][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.794405][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.802565][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.809885][ T5632] bridge_slave_0: entered allmulticast mode [ 87.818103][ T5632] bridge_slave_0: entered promiscuous mode [ 87.853245][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.860824][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.868303][ T5632] bridge_slave_1: entered allmulticast mode [ 87.875614][ T5632] bridge_slave_1: entered promiscuous mode [ 87.883226][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.893064][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.900329][ T5631] bridge_slave_0: entered allmulticast mode [ 87.907651][ T5631] bridge_slave_0: entered promiscuous mode [ 87.915969][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.923346][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.930849][ T5631] bridge_slave_1: entered allmulticast mode [ 87.939160][ T5631] bridge_slave_1: entered promiscuous mode [ 88.053414][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.065842][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.079932][ T50] Bluetooth: hci1: command tx timeout [ 88.102081][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.113486][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.168675][ T50] Bluetooth: hci3: command tx timeout [ 88.168797][ T5635] Bluetooth: hci2: command tx timeout [ 88.175329][ T5646] Bluetooth: hci0: command tx timeout [ 88.216085][ T5631] team0: Port device team_slave_0 added [ 88.228315][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.235502][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.242947][ T5630] bridge_slave_0: entered allmulticast mode [ 88.250435][ T5630] bridge_slave_0: entered promiscuous mode [ 88.259820][ T5632] team0: Port device team_slave_0 added [ 88.267430][ T5631] team0: Port device team_slave_1 added [ 88.284827][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.292207][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.299641][ T5630] bridge_slave_1: entered allmulticast mode [ 88.306899][ T5630] bridge_slave_1: entered promiscuous mode [ 88.316505][ T5632] team0: Port device team_slave_1 added [ 88.376042][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.383586][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.390845][ T5633] bridge_slave_0: entered allmulticast mode [ 88.398096][ T5633] bridge_slave_0: entered promiscuous mode [ 88.432844][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.440202][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.466289][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.479488][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.487033][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.495697][ T5633] bridge_slave_1: entered allmulticast mode [ 88.503230][ T5633] bridge_slave_1: entered promiscuous mode [ 88.519902][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.529893][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.537235][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.563324][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.575440][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.582584][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.609466][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.633056][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.655009][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.661978][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.687941][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.737925][ T5630] team0: Port device team_slave_0 added [ 88.747293][ T5630] team0: Port device team_slave_1 added [ 88.757416][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.770063][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.853950][ T5631] hsr_slave_0: entered promiscuous mode [ 88.860542][ T5631] hsr_slave_1: entered promiscuous mode [ 88.878789][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.885998][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.912074][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.936723][ T5633] team0: Port device team_slave_0 added [ 88.943117][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.950331][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.976517][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.005867][ T5632] hsr_slave_0: entered promiscuous mode [ 89.012335][ T5632] hsr_slave_1: entered promiscuous mode [ 89.018628][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 89.024450][ T5632] Cannot create hsr debugfs directory [ 89.032894][ T5633] team0: Port device team_slave_1 added [ 89.115132][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.122515][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.148669][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.184868][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.192042][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.218355][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.277423][ T5630] hsr_slave_0: entered promiscuous mode [ 89.284028][ T5630] hsr_slave_1: entered promiscuous mode [ 89.290787][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 89.296566][ T5630] Cannot create hsr debugfs directory [ 89.388485][ T5633] hsr_slave_0: entered promiscuous mode [ 89.394916][ T5633] hsr_slave_1: entered promiscuous mode [ 89.401447][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 89.407205][ T5633] Cannot create hsr debugfs directory [ 89.742646][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.755429][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.763616][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.782142][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.791273][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.804570][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.820451][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.832577][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.915358][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.926951][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.935445][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.946469][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.959234][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.972216][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.981271][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.993174][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.088529][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.099925][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.117718][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.131821][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.144967][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.155130][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.162558][ T5646] Bluetooth: hci1: command tx timeout [ 90.170805][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.182293][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.238698][ T5646] Bluetooth: hci2: command tx timeout [ 90.249357][ T5646] Bluetooth: hci0: command tx timeout [ 90.255004][ T50] Bluetooth: hci3: command tx timeout [ 90.280687][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.291410][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.307343][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.319349][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.327405][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.337822][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.354652][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.364655][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.392161][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.445002][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.477956][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.485534][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.517934][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.525096][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.553719][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.613603][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.638579][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.645722][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.671435][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.678716][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.723800][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.783057][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.837585][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.869312][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.876520][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.895685][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.917468][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.925007][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.942792][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.950039][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.984778][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.991942][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.673592][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.822698][ T5631] veth0_vlan: entered promiscuous mode [ 91.865139][ T5631] veth1_vlan: entered promiscuous mode [ 91.932524][ T9] cfg80211: failed to load regulatory.db [ 91.970331][ T5631] veth0_macvtap: entered promiscuous mode [ 92.004410][ T5631] veth1_macvtap: entered promiscuous mode [ 92.036479][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.098043][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.162946][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.208292][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231595][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.243894][ T5646] Bluetooth: hci1: command tx timeout [ 92.263405][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.272662][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.310234][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.319094][ T5646] Bluetooth: hci0: command tx timeout [ 92.324569][ T50] Bluetooth: hci3: command tx timeout [ 92.324582][ T5635] Bluetooth: hci2: command tx timeout [ 92.338040][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.349871][ T5630] veth0_vlan: entered promiscuous mode [ 92.387590][ T5630] veth1_vlan: entered promiscuous mode [ 92.480731][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.493946][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.570691][ T5633] veth0_vlan: entered promiscuous mode [ 92.575688][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.584898][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.596333][ T5632] veth0_vlan: entered promiscuous mode [ 92.631664][ T5630] veth0_macvtap: entered promiscuous mode [ 92.652791][ T5633] veth1_vlan: entered promiscuous mode [ 92.673012][ T5632] veth1_vlan: entered promiscuous mode [ 92.682618][ T5630] veth1_macvtap: entered promiscuous mode [ 92.703586][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.753650][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.792092][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.826255][ T5632] veth0_macvtap: entered promiscuous mode [ 92.836836][ T5633] veth0_macvtap: entered promiscuous mode [ 92.854442][ T5632] veth1_macvtap: entered promiscuous mode [ 92.864252][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886167][ T5633] veth1_macvtap: entered promiscuous mode [ 92.902742][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.931486][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.945831][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.978916][ T5790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.009760][ T5790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.049702][ T5790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.084436][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.142847][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.162367][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.238846][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.254349][ T3279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.278535][ T3279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.307510][ T3279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.323785][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.340222][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.353380][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.381226][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.395053][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.404658][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.466569][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.508753][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.536390][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.841401][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.877423][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.964554][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.995070][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.055771][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.086639][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.155420][ T3279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.193981][ T3279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.318974][ T50] Bluetooth: hci1: command tx timeout [ 94.398514][ T5635] Bluetooth: hci2: command tx timeout [ 94.404036][ T5646] Bluetooth: hci0: command tx timeout [ 94.409590][ T50] Bluetooth: hci3: command tx timeout [ 99.148670][ T5884] ptrace attach of ""[5885] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[5884] [ 99.721734][ T5882] syz.0.10 (5882) used greatest stack depth: 16920 bytes left [ 100.440588][ T5896] HfR: entered promiscuous mode [ 102.609185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.048305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 103.458354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.493030][ T5938] random: crng reseeded on system resumption [ 105.475453][ T5961] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 107.565510][ T5979] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.683736][ T5979] can: request_module (can-proto-5) failed. [ 107.731092][ T5964] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 107.828431][ T5964] File: /dev/nullb0 PID: 5964 Comm: syz.3.25 [ 110.914825][ T6009] input: f¬ as /devices/virtual/input/input5 [ 111.018047][ T6009] Zero length message leads to an empty skb [ 112.929824][ T6036] netlink: zone id is out of range [ 112.968398][ T6036] netlink: zone id is out of range [ 113.013950][ T6036] netlink: zone id is out of range [ 113.028854][ T6036] netlink: zone id is out of range [ 113.034228][ T6036] netlink: zone id is out of range [ 113.050116][ T6036] netlink: zone id is out of range [ 113.105266][ T6036] netlink: zone id is out of range [ 113.130131][ T6036] netlink: zone id is out of range [ 113.160142][ T6036] netlink: zone id is out of range [ 113.173489][ T6036] netlink: zone id is out of range [ 114.069759][ T6052] futex_wake_op: syz.0.39 tries to shift op by -2048; fix this program [ 114.119959][ T6052] futex_wake_op: syz.0.39 tries to shift op by -2048; fix this program [ 114.377365][ T6051] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.043392][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 119.715562][ T6118] random: crng reseeded on system resumption [ 119.915781][ T6122] netlink: 9 bytes leftover after parsing attributes in process `syz.3.49'. [ 124.876241][ T6187] netlink: 252 bytes leftover after parsing attributes in process `syz.2.58'. [ 124.905043][ T6187] netlink: 252 bytes leftover after parsing attributes in process `syz.2.58'. [ 126.117943][ T6198] process 'syz.2.60' launched '/dev/fd/7/./file0' with NULL argv: empty string added [ 126.979773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.940762][ T6264] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 132.886207][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894879][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.806321][ T6389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 146.409816][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 147.212444][ T6444] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 149.304058][ T6469] mmap: syz.2.102 (6469) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.081211][ T6732] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 175.668784][ T6753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 179.120672][ T6797] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 188.121364][ T6918] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 191.671580][ T6953] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 194.330551][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338512][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.616867][ T7034] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 203.007665][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 203.072848][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 208.938635][ T7154] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 211.774219][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 211.780389][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 211.784120][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 211.787371][ T5642] Bluetooth: hci0: command 0x0406 tx timeout [ 213.276214][ T7199] ================================================================== [ 213.284356][ T7199] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 213.292408][ T7199] Read of size 8 at addr ffff88807a9f1800 by task syz.3.210/7199 [ 213.300161][ T7199] [ 213.302535][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.3.210 Not tainted syzkaller #0 PREEMPT(full) [ 213.302569][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.302590][ T7199] Call Trace: [ 213.302600][ T7199] [ 213.302612][ T7199] dump_stack_lvl+0x100/0x190 [ 213.302649][ T7199] print_report+0x13d/0x4b0 [ 213.302691][ T7199] ? __virt_addr_valid+0x239/0x430 [ 213.302740][ T7199] ? cache_seq_start_rcu+0x3fe/0x420 [ 213.302771][ T7199] kasan_report+0xdf/0x1d0 [ 213.302805][ T7199] ? cache_seq_start_rcu+0x3fe/0x420 [ 213.302840][ T7199] cache_seq_start_rcu+0x3fe/0x420 [ 213.302874][ T7199] seq_read_iter+0x2c1/0x1270 [ 213.302915][ T7199] seq_read+0x33b/0x4c0 [ 213.302946][ T7199] ? __pfx_seq_read+0x10/0x10 [ 213.302986][ T7199] ? futex_hash+0x141/0x370 [ 213.303020][ T7199] ? __pfx_seq_read+0x10/0x10 [ 213.303052][ T7199] proc_reg_read+0x240/0x330 [ 213.303088][ T7199] ? __pfx_proc_reg_read+0x10/0x10 [ 213.303123][ T7199] vfs_read+0x1e4/0xb30 [ 213.303159][ T7199] ? __pfx_vfs_read+0x10/0x10 [ 213.303190][ T7199] ? find_held_lock+0x2b/0x80 [ 213.303228][ T7199] ? __fget_files+0x215/0x3d0 [ 213.303262][ T7199] ? __fget_files+0x215/0x3d0 [ 213.303300][ T7199] ? __fget_files+0x21f/0x3d0 [ 213.303349][ T7199] __x64_sys_pread64+0x1eb/0x250 [ 213.303383][ T7199] ? __pfx___x64_sys_pread64+0x10/0x10 [ 213.303419][ T7199] ? rcu_is_watching+0x12/0xc0 [ 213.303455][ T7199] do_syscall_64+0x10b/0xf80 [ 213.303496][ T7199] ? clear_bhb_loop+0x40/0x90 [ 213.303527][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.303554][ T7199] RIP: 0033:0x7f92e719ce59 [ 213.303580][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.303609][ T7199] RSP: 002b:00007f92e805c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 213.303634][ T7199] RAX: ffffffffffffffda RBX: 00007f92e7415fa0 RCX: 00007f92e719ce59 [ 213.303652][ T7199] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000005 [ 213.303668][ T7199] RBP: 00007f92e7232d6f R08: 0000000000000000 R09: 0000000000000000 [ 213.303684][ T7199] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 213.303701][ T7199] R13: 00007f92e7416038 R14: 00007f92e7415fa0 R15: 00007ffcb8bd1308 [ 213.303727][ T7199] [ 213.303736][ T7199] [ 213.531858][ T7199] Allocated by task 5630: [ 213.536225][ T7199] kasan_save_stack+0x30/0x50 [ 213.540939][ T7199] kasan_save_track+0x14/0x30 [ 213.545642][ T7199] __kasan_kmalloc+0xaa/0xb0 [ 213.550248][ T7199] __kmalloc_noprof+0x301/0x850 [ 213.555130][ T7199] cache_create_net+0xa2/0x1f0 [ 213.559924][ T7199] ip_map_cache_create+0x60/0x130 [ 213.564984][ T7199] sunrpc_init_net+0x55/0x190 [ 213.569789][ T7199] ops_init+0x1e2/0x5f0 [ 213.573979][ T7199] setup_net+0x118/0x3a0 [ 213.578258][ T7199] copy_net_ns+0x46f/0x7c0 [ 213.582710][ T7199] create_new_namespaces+0x3ea/0xac0 [ 213.588038][ T7199] unshare_nsproxy_namespaces+0xf2/0x220 [ 213.593703][ T7199] ksys_unshare+0x438/0xab0 [ 213.598236][ T7199] __x64_sys_unshare+0x31/0x40 [ 213.603044][ T7199] do_syscall_64+0x10b/0xf80 [ 213.607699][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.613637][ T7199] [ 213.615975][ T7199] The buggy address belongs to the object at ffff88807a9f1000 [ 213.615975][ T7199] which belongs to the cache kmalloc-2k of size 2048 [ 213.630038][ T7199] The buggy address is located 0 bytes to the right of [ 213.630038][ T7199] allocated 2048-byte region [ffff88807a9f1000, ffff88807a9f1800) [ 213.644643][ T7199] [ 213.647006][ T7199] The buggy address belongs to the physical page: [ 213.653446][ T7199] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a9f0 [ 213.662234][ T7199] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 213.670748][ T7199] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 213.678325][ T7199] page_type: f5(slab) [ 213.682326][ T7199] raw: 00fff00000000040 ffff88813fe34000 dead000000000100 dead000000000122 [ 213.690943][ T7199] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 213.699559][ T7199] head: 00fff00000000040 ffff88813fe34000 dead000000000100 dead000000000122 [ 213.708246][ T7199] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 213.716947][ T7199] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 213.725649][ T7199] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 213.734334][ T7199] page dumped because: kasan: bad access detected [ 213.740775][ T7199] page_owner tracks the page as allocated [ 213.746500][ T7199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5631, tgid 5631 (syz-executor), ts 87016790452, free_ts 86983575439 [ 213.767892][ T7199] post_alloc_hook+0xfd/0x120 [ 213.772624][ T7199] get_page_from_freelist+0x11a6/0x33b0 [ 213.778304][ T7199] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 213.784237][ T7199] new_slab+0xa6/0x6c0 [ 213.788335][ T7199] refill_objects+0x277/0x420 [ 213.793047][ T7199] __pcs_replace_empty_main+0x375/0x650 [ 213.798636][ T7199] __kmalloc_noprof+0x688/0x850 [ 213.803502][ T7199] ops_init+0x77/0x5f0 [ 213.807592][ T7199] setup_net+0x118/0x3a0 [ 213.811868][ T7199] copy_net_ns+0x46f/0x7c0 [ 213.816313][ T7199] create_new_namespaces+0x3ea/0xac0 [ 213.821623][ T7199] unshare_nsproxy_namespaces+0xf2/0x220 [ 213.827285][ T7199] ksys_unshare+0x438/0xab0 [ 213.831840][ T7199] __x64_sys_unshare+0x31/0x40 [ 213.836666][ T7199] do_syscall_64+0x10b/0xf80 [ 213.841283][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.847194][ T7199] page last free pid 5632 tgid 5632 stack trace: [ 213.853544][ T7199] __free_frozen_pages+0x747/0x1040 [ 213.858778][ T7199] qlist_free_all+0x47/0xf0 [ 213.863305][ T7199] kasan_quarantine_reduce+0x1a0/0x1f0 [ 213.868813][ T7199] __kasan_slab_alloc+0x69/0x90 [ 213.873697][ T7199] kmem_cache_alloc_noprof+0x241/0x6e0 [ 213.879209][ T7199] __kernfs_new_node+0xd2/0x9f0 [ 213.884086][ T7199] kernfs_new_node+0x11b/0x1a0 [ 213.888888][ T7199] __kernfs_create_file+0x53/0x350 [ 213.894050][ T7199] sysfs_add_file_mode_ns+0x207/0x3c0 [ 213.899453][ T7199] internal_create_group+0x593/0xf40 [ 213.904754][ T7199] internal_create_groups+0x9d/0x150 [ 213.910064][ T7199] device_add+0x71a/0x1950 [ 213.914508][ T7199] netdev_register_kobject+0x1a9/0x3d0 [ 213.920005][ T7199] register_netdevice+0x151c/0x24b0 [ 213.925225][ T7199] __ip_tunnel_create+0x52b/0x670 [ 213.930279][ T7199] ip_tunnel_init_net+0x230/0x780 [ 213.935418][ T7199] [ 213.937759][ T7199] Memory state around the buggy address: [ 213.943401][ T7199] ffff88807a9f1700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 213.951490][ T7199] ffff88807a9f1780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 213.959561][ T7199] >ffff88807a9f1800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.967634][ T7199] ^ [ 213.971719][ T7199] ffff88807a9f1880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.979800][ T7199] ffff88807a9f1900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.987889][ T7199] ================================================================== [ 214.056350][ T7199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 214.063600][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.3.210 Not tainted syzkaller #0 PREEMPT(full) [ 214.072851][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.082927][ T7199] Call Trace: [ 214.086215][ T7199] [ 214.089174][ T7199] dump_stack_lvl+0x100/0x190 [ 214.093904][ T7199] vpanic+0x552/0x970 [ 214.097933][ T7199] ? __pfx_vpanic+0x10/0x10 [ 214.102496][ T7199] ? cache_seq_start_rcu+0x3fe/0x420 [ 214.107837][ T7199] panic+0xd1/0xe0 [ 214.111598][ T7199] ? __pfx_panic+0x10/0x10 [ 214.116045][ T7199] ? cache_seq_start_rcu+0x3fe/0x420 [ 214.121381][ T7199] ? preempt_schedule_common+0x42/0xc0 [ 214.126908][ T7199] ? check_panic_on_warn+0x1f/0x90 [ 214.132056][ T7199] check_panic_on_warn.cold+0x19/0x34 [ 214.137461][ T7199] end_report.part.0+0x3a/0x90 [ 214.142244][ T7199] kasan_report.cold+0xe/0x18 [ 214.146946][ T7199] ? cache_seq_start_rcu+0x3fe/0x420 [ 214.152250][ T7199] cache_seq_start_rcu+0x3fe/0x420 [ 214.157406][ T7199] seq_read_iter+0x2c1/0x1270 [ 214.162134][ T7199] seq_read+0x33b/0x4c0 [ 214.166328][ T7199] ? __pfx_seq_read+0x10/0x10 [ 214.171031][ T7199] ? futex_hash+0x141/0x370 [ 214.175568][ T7199] ? __pfx_seq_read+0x10/0x10 [ 214.180284][ T7199] proc_reg_read+0x240/0x330 [ 214.184887][ T7199] ? __pfx_proc_reg_read+0x10/0x10 [ 214.190056][ T7199] vfs_read+0x1e4/0xb30 [ 214.194231][ T7199] ? __pfx_vfs_read+0x10/0x10 [ 214.198934][ T7199] ? find_held_lock+0x2b/0x80 [ 214.203643][ T7199] ? __fget_files+0x215/0x3d0 [ 214.208347][ T7199] ? __fget_files+0x215/0x3d0 [ 214.213068][ T7199] ? __fget_files+0x21f/0x3d0 [ 214.217797][ T7199] __x64_sys_pread64+0x1eb/0x250 [ 214.222782][ T7199] ? __pfx___x64_sys_pread64+0x10/0x10 [ 214.228282][ T7199] ? rcu_is_watching+0x12/0xc0 [ 214.233065][ T7199] do_syscall_64+0x10b/0xf80 [ 214.237685][ T7199] ? clear_bhb_loop+0x40/0x90 [ 214.242405][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.248321][ T7199] RIP: 0033:0x7f92e719ce59 [ 214.252778][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.272488][ T7199] RSP: 002b:00007f92e805c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 214.280928][ T7199] RAX: ffffffffffffffda RBX: 00007f92e7415fa0 RCX: 00007f92e719ce59 [ 214.288928][ T7199] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000005 [ 214.296924][ T7199] RBP: 00007f92e7232d6f R08: 0000000000000000 R09: 0000000000000000 [ 214.304902][ T7199] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 214.312883][ T7199] R13: 00007f92e7416038 R14: 00007f92e7415fa0 R15: 00007ffcb8bd1308 [ 214.320871][ T7199] [ 214.324654][ T7199] Kernel Offset: disabled [ 214.329014][ T7199] Rebooting in 86400 seconds..