last executing test programs: 11.151545009s ago: executing program 2 (id=21): socket(0x15, 0x6, 0x4) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x400454d8, 0x3) socket(0x2, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/mem\x00', 0x401, 0x0) getsockopt$auto(r1, 0x84, 0xc, 0x0, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/pci0000:00/0000:00:01.3/power/control\x00', 0xe3182, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) prctl$auto(0x41, 0x2, 0x0, 0x0, 0x0) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) read$auto(r4, &(0x7f0000000000)='#.&\x00', 0xc1) 10.912137956s ago: executing program 2 (id=22): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon24\x00', 0x121200, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen\x00', 0x23100, 0x0) connect$auto(r2, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/kcm\x00', 0x80, 0x0) r3 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r3) r5 = socket(0x2, 0x80002, 0x73) r6 = landlock_create_ruleset$auto(0x0, 0x9, 0x0) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'dvmrp0\x00', 0x0}) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0090000", @ANYRES16=r9, @ANYBLOB="131f2cbd700023723ab36bf877ac08000300", @ANYRES32=r11], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r12, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NET_SHAPER_CMD_GET(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd4, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r11}, @NET_SHAPER_A_HANDLE={0x1c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9d0f}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x80000001}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8937}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xfb}]}, @NET_SHAPER_A_HANDLE={0x2c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x40}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x8}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r14}, @NET_SHAPER_A_HANDLE={0x3c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xd}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x4fa54be1}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xb1}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x5090) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c030000", @ANYRES16=r4, @ANYBLOB="200029bd7000fddbdf250b000000050013000200000008001d00", @ANYRES32=r6, @ANYBLOB="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"], 0x35c}, 0x1, 0x0, 0x0, 0x8040}, 0x20048054) 10.54423283s ago: executing program 0 (id=24): gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x7ff, 0x20000000092d0, 0x2) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x1, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) 10.197108971s ago: executing program 0 (id=25): mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c) write$auto(0x3, 0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) msync$auto(0x200000, 0x2000000005, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20008, 0x2000000df, 0xeb1, 0x401, 0x7) 9.767032306s ago: executing program 2 (id=26): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/halt_poll_invalid\x00', 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x15, 0xfffffffffffffffa, 0x8002) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r4 = ioctl$auto_TUNDETACHFILTER(r2, 0x401054d6, &(0x7f0000000100)={0x6, &(0x7f00000000c0)={0xb, 0x2, 0x18, @inferred=r2}}) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f0000000180)={0x10, 0x5, 0x15, 0x5, 0x9, "8137537f13247cb3ccf3db695ae92784"}) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @broadcast}, 0x6a) fchown$auto(r0, 0x0, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={"404d240c72dca6ed8eda6072bc9472134890f187e4b4219d8bcbb07ef72efbc2", 0x7, 0xd6f, 0x800, 0x7fffffff, 0x6, 0xffffffffffffffff}) prctl$auto(0x6, 0x5, r5, 0x5, 0x41) 6.541123228s ago: executing program 0 (id=31): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8041, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rt_sigsuspend$auto(0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmmsg$auto(r0, 0x0, 0x9a6, 0xe000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fstat$auto(0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.428630173s ago: executing program 3 (id=34): sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/conf/wlan0/route_localnet\x00', 0xd7a185e906c5fc10, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) fsconfig$auto_XFS_DAX_NEVER(0xffffffffffffffff, 0x80, &(0x7f0000000100)='\x00', 0x0, 0x2) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000380)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/pci/drivers/ahci/bind\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) socket(0x10, 0x2, 0x0) r3 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x2, 0x1, 0x0, 0x9601, 0x81) r4 = socket(0x29, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r5) sendmsg$auto_SEG6_CMD_SETHMAC(r5, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACINFO={0x10, 0x7, 0x0, 0x1, [@generic, @typed={0xc, 0x131, 0x0, 0x0, @u64=0x3}]}, @SEG6_ATTR_HMACINFO={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x104}]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x60, 0x4, "ae7fa49a9cc1c09103b2289e0aa7caed5c78f9dfb306436c31e76eb58e6ee6873d92f9841c12a3b77a14d630dae7570c78cdaa41537f951afd5a8f6b92fa10db38dca9af71b1d008145b08fc8cf7747d16f16f729a4f8b1f6bf9abb4"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r7 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000080), r4) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)={0x19c, r7, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0xfffffffffffffffa}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x8b, 0x1, '@qUP\xc8\xdc\xa4\xee\xd9N\xdb\x91\xaa\xaa\x8a\xab\xee\xefw\xe7O3\x12b\tJ4\xd5\x84!\x8f\xb2\xdfw\xce _\xa0\xd8\xc6y\xfc\xa9o\xbbQ\x1b\"\x9a\x0e*\xb0#\b\x8b\x97\x18\xa9wh \x0ff\xa8\x05\xf8T.RS\xf1u#e5\x9d\xa2\xfep\x81\x03\xc6\a \xab\\\x8f\x1e\xfd\xb0\x86\xa4\xc0\x94\x19\x9d\a\x8b\xe6\xe40n\b:\xcf5@\'\xef\xc2\xa0Y\x03\x04\xaf\xa7\x94.\xd5\xfev\xbc\xaa\xe3\xc9U@]<\x04\xc9\xf0\xed\x98\xfb'}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0xcb, 0xa, "e65865ee46a3480395fda4abdb71ea893348a7804ed4c3d7b7c79d817f811fff208e47b8328cf8b23488213642fa1f7985b41876300ea3b059b158bb342e566f3584c19650a4dd1730af16be85246bcb34d41f41610cd03bd0760ad7bacb4e3e73dbb221e0fd37bd2a76e2aa20bc41d6891d52d51caec655c512b876b65a7e57df96d26cf1c5a33671e77febe6ad3ed7e42a6e109865cb21ec9d96c0b5d364e359f6e124a001da8123eb82bcb3a39a3d6e293bdba4510e08273ce05ae0f94446a09e23662f7856"}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0x16, 0xa, "89d46f9678470eb02a3d0475e1d6801bc503"}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x5}]}, 0x19c}, 0x1, 0x0, 0x0, 0x5}, 0x10) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="c61f2bbd7000fedbdf2508000000140002006d61637365633000000000000000000006000c00340e00001400020076657468305f746f5f627269646765001006562657996b5b1f209746c162651ac8da3028143ca0cf3c234489e4d6944d50924cc0"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24040841) ioctl$auto_TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000000)=0xc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r8, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)="2002b475e36c3b2156f4d253345e1bc4f9d8dec437087baa723a9b0ee0e771abb198bdeb19614e2ae13e2ec093b0d7792c8ad521d79590888a81510a1e72103ef4dacf3446e6a67dbdb6f9626fc093b538404641d2", 0xfc2}, 0x2, &(0x7f00000001c0), 0x1007, 0xa505}, 0x800}, 0x7, 0x4008) read$auto(r0, 0x0, 0x1ff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x3, 0x10000009b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) 5.086404611s ago: executing program 0 (id=35): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) ioctl$auto_FS_IOC_RESVSP64(r0, 0x4030582a, 0x10000) r1 = socket(0x29, 0x5, 0x0) r2 = io_uring_setup$auto(0x56, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x400, 0x9, 0x4, 0x4, 0xffffffffffffffff, [0x0, 0x10000], {0x6, 0x1800, 0x3, 0x29f, 0x1, 0x84, 0x101, 0x17f, 0x2}, {0xff, 0x401, 0xfffffff9, 0x80005, 0x1, 0x7, 0x4, 0x7, 0x7}}) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) sendmsg$auto_OVS_METER_CMD_SET(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf25020000003ef4fec903fc8fb904000200"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$auto_OVS_METER_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="000225bd7000fcdbdf2504000000080007000600000008000100000000000800070006000000080001002ca90000040006000400060008000800f9ffffff0800070005000000040006005d5f8ad16601e8d552f7003e46a3132b421b642ca24045f95ce9c14d42146208b5286d4c89713bd09d57c5ce3a5a3e4a4105f3e48064c51b2b672c7fa08c7194f560ddadb32194799c935f8ef087b7d7f9dc4276bf8b841a9c484db4", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd9/trace/end_lba\x00', 0x2062, 0x0) write$auto(r7, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000280)={{0x1, 0x0, 0x1, 0x9, 0x7}, "656900000000000000007900ba840000000000000000000000002200"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000002c0)={0xa, 0xdc, 0x0, 0x80000001, 0x5, "9c0210df35fcefe400cf718ca5ef8772c6508f61073d7a8dd50c5c2fd1bd65ece3aae59511c56111e824016b80f10fa66b1ea2fc2642fb826e6ce0bb"}) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) pread64$auto(0xffffffffffffffff, 0x0, 0xd, 0x80000000000b) acct$auto(0x0) mmap$auto(0xefff, 0x810000, 0x1000, 0x8000000008011, r3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) acct$auto(&(0x7f0000000040)='/dev/pts/ptmx\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) sendfile$auto(r8, r8, 0x0, 0xb) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 5.029608297s ago: executing program 2 (id=36): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.12/usb34/bMaxPower\x00', 0x2a081, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = getsockopt$auto(r1, 0x84, 0x71, 0x0, &(0x7f0000000080)=0x108) (async) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) r3 = socket(0x1d, 0x3, 0x7) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESOCT=r5, @ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0x61cf770a5abeed4a}, 0x28064880) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffe11, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x37, 0xfffffffffffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x1000000009, 0x10001, 0x6, 0x400, 0x7ffffffb, 0x5, 0xdd79, 0x10000, 0x3, 0x104}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) (async) epoll_create$auto(0x3e) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x26540, 0x0) (async) socket(0x10, 0x80003, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/resend_igmp\x00', 0x1e2142, 0x0) r8 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r8, 0xffffffffffffffff, 0x0) (async) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r9, 0xc058560f, r9) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRESHEX=r6, @ANYBLOB="10002c800800307d", @ANYRES8=r9, @ANYBLOB="1fe2fb61"], 0x2c}}, 0x4000000) (async) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr8\x00', 0x101000, 0x0) 4.704147903s ago: executing program 2 (id=38): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec18\x00', 0x80000, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000000080)={0x4, 0xc7c, 0x9, @raw=[0x172, 0x7fffffff, 0xfa71, 0x1, 0xb, 0x60000, 0x3, 0x7, 0x7f, 0x1, 0xe, 0xf57, 0x1000, 0x9, 0x800, 0x9]}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mprotect$auto(0x1000, 0xf, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x5, 0x5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) 4.422091726s ago: executing program 3 (id=39): r0 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r0, &(0x7f0000002140)='\\t\x00', 0xffffffffffffc45c, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x1000, &(0x7f0000000040)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r3 = socket(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r3) io_cancel$auto(0x1, &(0x7f0000000140)={0x9, 0x0, 0xe, 0x7, 0x1e, r2, 0x7fffffffffffffff, 0x7, 0xb5, 0x0, 0x8000, r3}, &(0x7f0000000180)={0x7e, 0x180000000, 0x5, 0x80}) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xfffff800}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r6, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x10006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x3c, 0x0) 3.70450797s ago: executing program 0 (id=40): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) mlockall$auto(0x7) mmap$auto(0x0, 0xc, 0x7, 0x44fb2, r2, 0x2fffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400008036add0a834c94c1c0384848183ddbcce2e083e8f5993201e333495fa6f269c05ea8b29d5c6906f0606aef4c11fbfb72fdcaf3fa026abfed6aec746d990c25c6b54ac88e6c135aa56882155e455474f990351d19bc1", @ANYRES16=r4, @ANYBLOB="00022bbd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000085) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/xfrm_stat\x00', 0x80080, 0x0) read$auto(r6, &(0x7f0000000040)='/,\x00', 0x5642) r7 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r7, 0x0, 0x80000000006) bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)=@bpf_attr_3={0xffffffff, 0x1, 0x8, 0x8, 0x80, 0x3, 0x2c, 0x80, 0x3d1f, "6e1b4e6ea164040259f19765ddd5903f", 0x0, 0x4f, r6, 0xa, 0x4, 0x3ff, 0x200, 0x0, 0x1ff, 0xf, @attach_prog_fd=r2, 0x2, 0x6, 0xfffffffffffffffb, 0x5, 0x101, r6, r7}, 0x80000001) sendmsg$auto_NL80211_CMD_DISCONNECT(r7, &(0x7f0000002500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000024c0)={&(0x7f0000003100)=ANY=[], 0x10cc}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) signalfd$auto(r7, 0x0, 0x8) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x80000000, 0xfff, 0x6, @_sigpoll={0x2, r5}}}, 0x9, &(0x7f0000000200)={{0xff, 0xc}, {0x2, 0xfed}, 0x608, 0x8000000000000000, 0x9, 0x101, 0xfffffffffffffffa, 0x6, 0x8000, 0x9, 0x8, 0x2, 0x800, 0x9, 0x4, 0x3}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r8 = socket(0x2, 0x1, 0x106) open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) lsetxattr$auto(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='-\x00', &(0x7f0000003100), 0x7, 0x3) setreuid$auto(0xffffffffffffffff, 0x8) setsockopt$auto(r8, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4) 3.63631405s ago: executing program 1 (id=41): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x3) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7f}, 0x8000000000000001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket$nl_generic(0x10, 0x3, 0x10) 3.430113079s ago: executing program 3 (id=42): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) setsockopt$auto(r1, 0x2f6, 0x3, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x5) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10000, 0x0) r3 = socket(0x29, 0x2, 0x0) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=@bpf_attr_4={0x8, r1, 0x1, r0}, 0x3) ioctl$auto_PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000340)=0x8000) getsockopt$auto_SO_DOMAIN(r0, 0x7fffffff, 0x27, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', &(0x7f00000000c0)=0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)='4', 0x1) ioctl$auto(r3, 0x8949, 0x24) 2.328871924s ago: executing program 1 (id=43): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1a0, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x578}, @NL80211_ATTR_VHT_CAPABILITY={0xc7, 0x9d, "7c075ad8beca39b5c3f554664280bb120b50edf18ad0688be09f71b6611d8a47444a3b4e90ebe8c57979d8ed039ac7ebfca77712bfdaa9aa1cbee04cf9c8e13d9e146dd25dcd224cd17f68bb9629b9b2c42df3d031cb026bd552fc7a7ddfde97753cfbfb37bebeb890a09d43fafb60a8ed752662432cd8410a03b25c40010d2f01a1d3c2ff5ee46d52d6036a5647dc318d3713cfa125d6d741dd0542dd3cbdd229c01f922b0b4746f89cecdf85dda661cd3b6177170423bdcc5584ff709d1b63271233"}, @NL80211_ATTR_VENDOR_DATA={0xb2, 0xc5, "16e489904b2b307e45a56f777fc535df6757a753a91089e13b051dbe07c454cb3e33301ed791292a6d5da81e778d9c25c01f48f5109e17c35afca3b1a0ea261c2c81fed2e319b83885016ba3826d7cc0b65c920846de8642717092ff8a43191d8163010d275e91db5500fe242c3126ceffee80f01eb969739e8db789c6a72f3ca1c5e6a852ea95e3951d385076b230bfa75c829c7aa916939d8982299dd123e1bdb02dc79ddc8183de17ce6226ca"}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x894}, 0x880) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0x4008ae8a, 0x0) 2.26766866s ago: executing program 3 (id=44): mmap$auto(0x0, 0x2020009, 0x8000000000000006, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) sysfs$auto(0x0, 0x10, 0x7ff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x6000000000, 0x8, 0x7) madvise$auto(0x0, 0x400053, 0x9) shmdt$auto(0x0) 1.898502701s ago: executing program 1 (id=45): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="01022abd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async) mmap$auto(0x4, 0x4820006, 0xdf, 0x13, r0, 0x8000) (async) fanotify_init$auto(0x65, 0x2) socket(0xa, 0x1, 0x84) (async) setreuid$auto(0x0, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r2, 0x0, 0x1ff) (async) socket(0x10, 0x2, 0x4) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x2) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400ebe, 0x401, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) (async) read$auto(0x3, 0x0, 0x8080) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) io_uring_setup$auto(0xa, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000480)='\xf7\xff\xff\xff\xff\xff\xff\xff\x00'/19, 0x101000006, 0x4) r6 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x40a100, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001140)={@inferred=r4, 0xffff, 0x80, @unused, @name="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"}) 1.296227026s ago: executing program 0 (id=46): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x24, 0x0, 0x8) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0xffffffffffffffff, 0x3ff, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mq_notify$auto(0xffffffffffffffff, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="bc017d68353b661219", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf252c0000000500f6000200000063000600ef32312bfa85cbd125e79ffe74995dc2a98c1ac59351645e46fee72f78a4ec7ca0f7ee4e54531f4b93f4ada9b4691bca92e97e3d23e430e6973080014d1275414966c94d02e2268627b61b3bcb6d4b9c792dbb38dbfddfeb1c8c3d1c40edbf0030003280050001007f00000004000500050003000e000000050001000200000005000200060000000500010001000000040044010600120009000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) wait4$auto(0xfffffff9, 0x0, 0x0, 0x0) lseek$auto(0x3, 0x2, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x2003ec, 0x14) 1.094413222s ago: executing program 3 (id=47): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff0100"/85], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 835.068126ms ago: executing program 3 (id=48): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) 728.255176ms ago: executing program 1 (id=49): mmap$auto(0x0, 0x10005, 0xe3, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000100)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) prctl$auto(0x9, 0x0, r0, 0x20000000000, 0x0) (async) brk$auto(0x7fffffffafff) (async) brk$auto(0x7fffffffefff) brk$auto(0xa) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) (rerun: 64) pread64$auto(r1, 0x0, 0x6, 0x40008) mmap$auto(0x0, 0x801, 0xff, 0x200009b72, 0x7, 0x20000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd7000dddbdf25020000001800e38014005900fc02000000000000000000000000000308006100040000000800620000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$auto_RTC_EPOCH_SET(r4, 0x4008700e, 0x0) (async, rerun: 32) ustat$auto(0x801, 0x0) (async, rerun: 32) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x181840, 0x0) r6 = pipe2$auto(0x0, 0x80) (async) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) r9 = setfsgid$auto(r8) statx$auto(r6, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, r7, r9, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x40, 0x6, 0x0, 0x9, [0x61, 0x10, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x0, 0x9]}) (async) shmctl$auto_IPC_INFO(0x2, 0x3, &(0x7f00000012c0)={{0x9, 0xee01, r9, 0x5, 0x4, 0xbf, 0x4}, 0xffff5926, 0x1, 0xe6, 0x3, @inferred=r0, @raw=0x8f, 0x0, 0x0, &(0x7f0000000140)="c6c09e8f4cca4cf3f68fb5a85aae361cba69db7beccbec68", &(0x7f00000002c0)="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"}) (async) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)=""/46, 0x2e) (async, rerun: 32) r10 = socket(0x2, 0x1, 0x0) (rerun: 32) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x11, 0x4000000}, 0x4000080) 339.247895ms ago: executing program 1 (id=50): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) write$auto(r0, 0x0, 0xffd8) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0xa, 0x1) socket(0x2, 0x3, 0x1) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x281901, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x21, 0x2, 0xa) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.776299ms ago: executing program 2 (id=51): openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x22001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x14, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x48880) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = pidfd_open$auto(0xffffffffffffffff, 0x613) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0x80000007}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/ptp/ptp0/n_external_timestamps\x00', 0x8a684, 0x0) read$auto(r2, 0x0, 0x9) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) semtimedop$auto(0xd, 0x0, 0x1f8, 0x0) mkdir$auto(&(0x7f0000000000)='./file0\x00', 0x8cd) sysfs$auto(0x2, 0x24, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) write$auto(r4, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x80040, 0x0) 0s ago: executing program 1 (id=52): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/io-timeout-fail\x00', 0x121201, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/io-timeout-fail\x00', 0x121201, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) (async) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) pread64$auto(r1, 0x0, 0x1ff, 0x8800000000) (async) pread64$auto(r1, 0x0, 0x1ff, 0x8800000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x15, 0x5, 0x0) rename$auto(&(0x7f0000000180)='n\xd0T\xf2 x1\x18\xa4\xf8\x9b\xab\xf5\xfaH_8\x1d\x12FL\t\x84\xb2s\x1b\xde\xd5\xe7P\xab-\xfeL\x0f\x98\xf15\xee\xb6\x9e\x01-\xbc\x0e.\',\xd0\x8d\xc3\xa4\x06\x03\xb0\xb9\xb0V\xf2\x0fM\x16_\x8d\x83\xc9\xb7JD\xe2t\xe9\xc4\xa1y\xe0\'\xb3ev\xcfJs\aX\xb5\xa6\x95\xfd\xe6[\x14\xb9\x1f\xdd\x05\xe2kn\x1d\xec]{\xe6Z\x19\xcaG\x12r\xd6.L\x953m\xd8\xb5\t\x01a\xf2\xc3\xd8Si\x02Gt\x83N\x9ch\xd4W*\"\x0e\xcb\x9c3\xe1\x9aG`\x12-^\xac\xea\xbf\x19\xae\xc6{\x19&z\xd9u\xf2C\x1b\xd2\xabWG\x9a\xcf\xc4\x96\xad?y\xdb\xb3`\x87G8\xf1\x81\x10\x15;F\xf0\xbe@?\xc4\x19\xa2Y:\x9bLCW\xad\x9d\xd7tk7\xda\xe5\r\x80\xbd_\x87N\xcb\xc9&\x8f8\x9a\x9a\xd7\xa0\xdd\x91\xdd\x1d\x1e\x8f\xc1\xf768\b[\x88)\xb7\x05\xd7H\x84\xf6\xdd\xa7i8\x105\xa5\xf9\fNG\x84\xb1t\xa4#\x0f\x03\x89\xbcA\xca.\xbc\xc0\xf6w\xc1 \xb7\xb2\x7f\x12\xcfF\xae', &(0x7f0000000480)='4\\\xa6.\x00\x00\x00\x00\x00\x00\xf2\x0f\x1bN\xeam_\xa3\xf8\xe3Y\"X\xcd\r\xc5\xf8\'\xb8\xc5\xdc/\xd6\xb7\x16$<\xd5\xf3\xf7@16\xfb\xbf[\xee\xd7Ey\xbfD\xb4f\x1bn\xbf\xbb\x8f\x13\x13O\xa2\x87\xaa\xe2k\x11hv\xdarY\x10I%\x93\x95\xe3_\xf6*\x10T\x06\ahem\xecb\x94\xb3\xb8Y\xe5z\x18+\x8e\x0e\xc6Zb\xf8\xbc\xd2\xee4bth,5`\xda\xc3\x91\xad\x18\xc8M\t\xc9\x96\x12\xdbcJ\x01\xa5%\a\x00\x00\x00\x00\x00\x00\x00\x16\xa5\xce,\xb6i\x80Hu\xf4U\xde\xa02\x8c\"\xc5T\x15]\xdb9C!\xd3}\xca5\x88\xe5\"?\\\x95\x1f\xf1?\xae\xba~\xe3\xceA\x03\x93\xea\x14/\xc1\x05\xae\xa5\xbe\xfbD\x92Ck\xb6\x96\xd1\xaeYj\x14s\xb8\xd7)R\xcfa\x1a1|\xfa\xce\xd1A\xd6\x1b\xa7\x90\xef\x1e <\xd9\xe1N\xc9$\xbd\r8\xf1\xef\x85\xe7\xe4@\x11]B:\xa9F<\xf6\x1e\x03o\x1a\x1f\xa2\x87\xf3h\xeccr\x8a\x17\xa7\xd3\x10\x86\x82\x87$E\xdf\xa4\x9bQ\xac\x8b\x93$\x1e\x86p\xbaq\xfe\"\xe2\xb5\xdc\x90\x8c\xdd\xa18Vg\x8a@k`\x94\x81\xbd\x94\xb6\"\xc9\xeb.+B\xcaf\x00'/338) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000000c0), r2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0xa0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1008, &(0x7f0000000100)={0x0, 0xfc2}, 0x6, 0x0, 0x1, 0xa503}, 0x800}, 0x7, 0x4008) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1008, &(0x7f0000000100)={0x0, 0xfc2}, 0x6, 0x0, 0x1, 0xa503}, 0x800}, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x80002, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) (async) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r6, 0x3, &(0x7f0000000000)={{0x6, 0x7}, {0x0, 0xa2b}}, 0x0) read$auto(0x3, 0x0, 0x80) accept$auto(r4, &(0x7f0000000040)=@xdp={0x2c, 0x8, r5, 0x16}, &(0x7f0000000080)=0x2) sendmmsg$auto(r3, &(0x7f0000000600)={{&(0x7f0000000140)="d372ac52a8232854351c97acd84233a30006", 0x7, &(0x7f00000003c0)={&(0x7f0000000340)="60ce7e7628c4839abe16abf7f9d19ce5b80c17d82d6eda1be27a971716fe47d2ed6e4fb674d5469fb5732e26747f3a78b847c21370e5e03e03cb4d13cbaf012a5ad509d1f473ad66e0ca78f1ce389f22182ebda6665e59b344cf2b930f098c11bd344bdf74c8a2f3b2ca88e88612", 0x4}, 0xb4, &(0x7f0000000400)="1593a0bb5ec0df8f86fca4d481b30d23e2e66a509378ca30c33d2a6b36e317215ea798656e4c468c4e0930c228c958e676a4d80fe6e9f9845c5bd1b04990c810767978f41157ec98a3b4b0deb288fe3f9031489d401d9146dd4cd13cfc6582ce02290a09f8587cb2b19afd8831eb5b6ed997880d3054390f1464", 0x7, 0x3}, 0x99a}, 0x30000, 0x483d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 88.171315][ T5616] cgroup: Unknown subsys name 'net' [ 88.291842][ T5616] cgroup: Unknown subsys name 'cpuset' [ 88.301039][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.182606][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.225568][ T24] cfg80211: failed to load regulatory.db [ 92.393162][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.405956][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.414292][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.427752][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.437262][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.445718][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.449906][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.462416][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.464635][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.471550][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.482447][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.494216][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.503276][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.507316][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.518567][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.527355][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.538335][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.549515][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.563826][ T4946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.572849][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.324831][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.332359][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.340859][ T5628] bridge_slave_0: entered allmulticast mode [ 94.349061][ T5628] bridge_slave_0: entered promiscuous mode [ 94.384744][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.392661][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.400580][ T5628] bridge_slave_1: entered allmulticast mode [ 94.408446][ T5628] bridge_slave_1: entered promiscuous mode [ 94.530363][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.560107][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.569114][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.576740][ T5636] bridge_slave_0: entered allmulticast mode [ 94.584577][ T5636] bridge_slave_0: entered promiscuous mode [ 94.594981][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.608812][ T5630] Bluetooth: hci1: command tx timeout [ 94.608907][ T4946] Bluetooth: hci3: command tx timeout [ 94.615519][ T5630] Bluetooth: hci2: command tx timeout [ 94.620822][ T5633] Bluetooth: hci0: command tx timeout [ 94.643949][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.651982][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.659436][ T5629] bridge_slave_0: entered allmulticast mode [ 94.667794][ T5629] bridge_slave_0: entered promiscuous mode [ 94.676245][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.683690][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.691306][ T5636] bridge_slave_1: entered allmulticast mode [ 94.698981][ T5636] bridge_slave_1: entered promiscuous mode [ 94.727449][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.735632][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.742992][ T5629] bridge_slave_1: entered allmulticast mode [ 94.750964][ T5629] bridge_slave_1: entered promiscuous mode [ 94.781849][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.789629][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.797196][ T5632] bridge_slave_0: entered allmulticast mode [ 94.805314][ T5632] bridge_slave_0: entered promiscuous mode [ 94.838834][ T5628] team0: Port device team_slave_0 added [ 94.845989][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.855212][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.864936][ T5632] bridge_slave_1: entered allmulticast mode [ 94.874085][ T5632] bridge_slave_1: entered promiscuous mode [ 94.894796][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.906563][ T5628] team0: Port device team_slave_1 added [ 94.930225][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.943417][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.000342][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.047543][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.070425][ T5636] team0: Port device team_slave_0 added [ 95.077535][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.085044][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.112462][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.128742][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.141039][ T5629] team0: Port device team_slave_0 added [ 95.149958][ T5636] team0: Port device team_slave_1 added [ 95.156400][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.163549][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.191215][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.224085][ T5629] team0: Port device team_slave_1 added [ 95.259750][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.267288][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.295230][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.347421][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.356304][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.388964][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.406767][ T5632] team0: Port device team_slave_0 added [ 95.425186][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.432896][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.461323][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.483175][ T5632] team0: Port device team_slave_1 added [ 95.500982][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.508575][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.536295][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.578033][ T5628] hsr_slave_0: entered promiscuous mode [ 95.585379][ T5628] hsr_slave_1: entered promiscuous mode [ 95.647782][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.655280][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.683664][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.712825][ T5636] hsr_slave_0: entered promiscuous mode [ 95.719940][ T5636] hsr_slave_1: entered promiscuous mode [ 95.727462][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 95.734044][ T5636] Cannot create hsr debugfs directory [ 95.750302][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.760742][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.788552][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.816985][ T5629] hsr_slave_0: entered promiscuous mode [ 95.824578][ T5629] hsr_slave_1: entered promiscuous mode [ 95.831158][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 95.837444][ T5629] Cannot create hsr debugfs directory [ 95.961285][ T5632] hsr_slave_0: entered promiscuous mode [ 95.968551][ T5632] hsr_slave_1: entered promiscuous mode [ 95.974908][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 95.981349][ T5632] Cannot create hsr debugfs directory [ 96.430331][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.451065][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.462421][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.474363][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.483161][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.494843][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.505015][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.518322][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.604621][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.617096][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.634314][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.647220][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.656142][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.668786][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.679382][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.688505][ T4946] Bluetooth: hci1: command tx timeout [ 96.689857][ T5633] Bluetooth: hci2: command tx timeout [ 96.697787][ T4946] Bluetooth: hci0: command tx timeout [ 96.700727][ T5630] Bluetooth: hci3: command tx timeout [ 96.712581][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.826672][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.841265][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.851533][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.868560][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.877154][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.889496][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.899941][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.913000][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.035848][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.047335][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.064354][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.075879][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.098774][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.111527][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.127316][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.140259][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.206509][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.301110][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.339303][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.347974][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.366300][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.404404][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.416159][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.465433][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.484928][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.531439][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.539518][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.574886][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.582894][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.601611][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.616822][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.634999][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.643700][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.681294][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.688639][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.715827][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.733454][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.783901][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.792436][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.832432][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.840671][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.774282][ T5630] Bluetooth: hci3: command tx timeout [ 98.774338][ T4946] Bluetooth: hci0: command tx timeout [ 98.781488][ T5639] Bluetooth: hci1: command tx timeout [ 98.795700][ T5633] Bluetooth: hci2: command tx timeout [ 98.918366][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.175544][ T5628] veth0_vlan: entered promiscuous mode [ 99.225292][ T5628] veth1_vlan: entered promiscuous mode [ 99.322909][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.362948][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.414918][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.441949][ T5628] veth0_macvtap: entered promiscuous mode [ 99.465714][ T5628] veth1_macvtap: entered promiscuous mode [ 99.550541][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.573146][ T5636] veth0_vlan: entered promiscuous mode [ 99.597225][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.630322][ T5632] veth0_vlan: entered promiscuous mode [ 99.658459][ T5629] veth0_vlan: entered promiscuous mode [ 99.670356][ T3275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.681370][ T3275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.692516][ T5636] veth1_vlan: entered promiscuous mode [ 99.714006][ T3275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.723669][ T3275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.738692][ T5632] veth1_vlan: entered promiscuous mode [ 99.786950][ T5629] veth1_vlan: entered promiscuous mode [ 99.877064][ T5636] veth0_macvtap: entered promiscuous mode [ 99.904378][ T5632] veth0_macvtap: entered promiscuous mode [ 99.928289][ T5636] veth1_macvtap: entered promiscuous mode [ 99.940644][ T5632] veth1_macvtap: entered promiscuous mode [ 99.962768][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.976022][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.031009][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.054676][ T5629] veth0_macvtap: entered promiscuous mode [ 100.064875][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.076796][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.103764][ T5629] veth1_macvtap: entered promiscuous mode [ 100.116769][ T3275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.120402][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.129510][ T3275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.149015][ T1161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.158118][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.191553][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.201366][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.223379][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.235633][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.245887][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.264867][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.296117][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.309367][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.316653][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.335740][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.378333][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.402498][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.466088][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.538236][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.561972][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.759518][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.778019][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.849369][ T5633] Bluetooth: hci1: command tx timeout [ 100.849558][ T5639] Bluetooth: hci2: command tx timeout [ 100.855243][ T4946] Bluetooth: hci3: command tx timeout [ 100.868291][ T5630] Bluetooth: hci0: command tx timeout [ 100.912720][ T3357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.922952][ T3357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.057049][ T3275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.111841][ T3275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.196695][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.222034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.285665][ T3275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.330327][ T3275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.584660][ T5792] random: crng reseeded on system resumption [ 101.672643][ T5792] FAULT_INJECTION: forcing a failure. [ 101.672643][ T5792] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 101.741196][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: syz.3.5 Not tainted syzkaller #0 PREEMPT(full) [ 101.741236][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.741254][ T5792] Call Trace: [ 101.741264][ T5792] [ 101.741275][ T5792] dump_stack_lvl+0x100/0x190 [ 101.741316][ T5792] should_fail_ex.cold+0x5/0xa [ 101.741351][ T5792] ? prepare_alloc_pages+0x16d/0x5f0 [ 101.741402][ T5792] should_fail_alloc_page+0xeb/0x140 [ 101.741441][ T5792] prepare_alloc_pages+0x1f0/0x5f0 [ 101.741488][ T5792] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 101.741542][ T5792] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 101.741601][ T5792] ? mark_held_locks+0x40/0x70 [ 101.741630][ T5792] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 101.741669][ T5792] ? lockdep_hardirqs_on+0x78/0x100 [ 101.741709][ T5792] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.741748][ T5792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 101.741801][ T5792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 101.741856][ T5792] ? kasan_save_stack+0x30/0x50 [ 101.741885][ T5792] ? kasan_save_track+0x14/0x30 [ 101.741914][ T5792] ? __kasan_kmalloc+0xaa/0xb0 [ 101.741939][ T5792] ? memory_bm_create+0x14d/0xba0 [ 101.741979][ T5792] ? do_syscall_64+0x10b/0xf80 [ 101.742018][ T5792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.742055][ T5792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.742103][ T5792] ? policy_nodemask+0xed/0x4f0 [ 101.742152][ T5792] alloc_pages_mpol+0x1fb/0x540 [ 101.742191][ T5792] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 101.742230][ T5792] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 101.742275][ T5792] alloc_pages_noprof+0x1a/0x160 [ 101.742330][ T5792] get_zeroed_page_noprof+0x18/0xb0 [ 101.742368][ T5792] get_image_page+0x18/0x1a0 [ 101.742406][ T5792] alloc_rtree_node+0x3c/0xb0 [ 101.742447][ T5792] memory_bm_create+0x65e/0xba0 [ 101.742506][ T5792] create_basic_memory_bitmaps+0x10b/0x350 [ 101.742557][ T5792] snapshot_open+0x230/0x2a0 [ 101.742603][ T5792] ? __pfx_snapshot_open+0x10/0x10 [ 101.742650][ T5792] misc_open+0x26d/0x450 [ 101.742690][ T5792] ? __pfx_misc_open+0x10/0x10 [ 101.742728][ T5792] chrdev_open+0x234/0x6a0 [ 101.742769][ T5792] ? __pfx_chrdev_open+0x10/0x10 [ 101.742810][ T5792] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 101.742860][ T5792] do_dentry_open+0x6d8/0x1660 [ 101.742895][ T5792] ? __pfx_chrdev_open+0x10/0x10 [ 101.742939][ T5792] vfs_open+0x82/0x3f0 [ 101.742984][ T5792] path_openat+0x208c/0x31a0 [ 101.743034][ T5792] ? __pfx_path_openat+0x10/0x10 [ 101.743087][ T5792] do_file_open+0x20e/0x430 [ 101.743138][ T5792] ? __pfx_do_file_open+0x10/0x10 [ 101.743210][ T5792] ? alloc_fd+0x476/0x790 [ 101.743253][ T5792] ? do_getname+0x191/0x390 [ 101.743304][ T5792] do_sys_openat2+0x10d/0x1e0 [ 101.743352][ T5792] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.743411][ T5792] ? __fget_files+0x21f/0x3d0 [ 101.743457][ T5792] __x64_sys_openat+0x12d/0x210 [ 101.743507][ T5792] ? __pfx___x64_sys_openat+0x10/0x10 [ 101.743561][ T5792] ? rcu_is_watching+0x12/0xc0 [ 101.743600][ T5792] do_syscall_64+0x10b/0xf80 [ 101.743633][ T5792] ? clear_bhb_loop+0x40/0x90 [ 101.743671][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.743702][ T5792] RIP: 0033:0x7f53fd39cdd9 [ 101.743727][ T5792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.743754][ T5792] RSP: 002b:00007f53fe220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.743783][ T5792] RAX: ffffffffffffffda RBX: 00007f53fd615fa0 RCX: 00007f53fd39cdd9 [ 101.743803][ T5792] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 101.743821][ T5792] RBP: 00007f53fd432d69 R08: 0000000000000000 R09: 0000000000000000 [ 101.743839][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.743856][ T5792] R13: 00007f53fd616038 R14: 00007f53fd615fa0 R15: 00007ffe136094a8 [ 101.743895][ T5792] [ 102.392524][ T5802] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.541521][ T5801] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.701930][ T5805] FAULT_INJECTION: forcing a failure. [ 102.701930][ T5805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.718421][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 102.718463][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.718481][ T5805] Call Trace: [ 102.718490][ T5805] [ 102.718502][ T5805] dump_stack_lvl+0x100/0x190 [ 102.718542][ T5805] should_fail_ex.cold+0x5/0xa [ 102.718567][ T5805] ? prepare_alloc_pages+0x16d/0x5f0 [ 102.718604][ T5805] should_fail_alloc_page+0xeb/0x140 [ 102.718649][ T5805] prepare_alloc_pages+0x1f0/0x5f0 [ 102.718694][ T5805] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 102.718745][ T5805] ? do_raw_spin_lock+0x128/0x260 [ 102.718789][ T5805] ? mark_held_locks+0x40/0x70 [ 102.718818][ T5805] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 102.718853][ T5805] ? lockdep_hardirqs_on+0x78/0x100 [ 102.718892][ T5805] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.718926][ T5805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.718977][ T5805] ? kasan_save_stack+0x3f/0x50 [ 102.719003][ T5805] ? kasan_save_stack+0x30/0x50 [ 102.719029][ T5805] ? kasan_save_track+0x14/0x30 [ 102.719054][ T5805] ? __kasan_kmalloc+0xaa/0xb0 [ 102.719079][ T5805] ? mon_bin_open+0x1a8/0x470 [ 102.719115][ T5805] ? chrdev_open+0x234/0x6a0 [ 102.719152][ T5805] ? __x64_sys_openat+0x12d/0x210 [ 102.719190][ T5805] ? do_syscall_64+0x10b/0xf80 [ 102.719231][ T5805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.719269][ T5805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.719311][ T5805] ? policy_nodemask+0xed/0x4f0 [ 102.719353][ T5805] alloc_pages_mpol+0x1fb/0x540 [ 102.719388][ T5805] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.719431][ T5805] alloc_pages_noprof+0x1a/0x160 [ 102.719475][ T5805] get_zeroed_page_noprof+0x18/0xb0 [ 102.719511][ T5805] mon_alloc_buff+0xce/0x1b0 [ 102.719543][ T5805] ? kasan_save_track+0x14/0x30 [ 102.719576][ T5805] mon_bin_open+0x207/0x470 [ 102.719612][ T5805] ? __pfx_mon_bin_open+0x10/0x10 [ 102.719645][ T5805] chrdev_open+0x234/0x6a0 [ 102.719684][ T5805] ? __pfx_chrdev_open+0x10/0x10 [ 102.719727][ T5805] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 102.719776][ T5805] do_dentry_open+0x6d8/0x1660 [ 102.719814][ T5805] ? __pfx_chrdev_open+0x10/0x10 [ 102.719861][ T5805] vfs_open+0x82/0x3f0 [ 102.719910][ T5805] path_openat+0x208c/0x31a0 [ 102.719966][ T5805] ? __pfx_path_openat+0x10/0x10 [ 102.720017][ T5805] do_file_open+0x20e/0x430 [ 102.720058][ T5805] ? __pfx_do_file_open+0x10/0x10 [ 102.720131][ T5805] ? alloc_fd+0x476/0x790 [ 102.720175][ T5805] ? do_getname+0x191/0x390 [ 102.720225][ T5805] do_sys_openat2+0x10d/0x1e0 [ 102.720279][ T5805] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.720331][ T5805] ? __fget_files+0x21f/0x3d0 [ 102.720385][ T5805] __x64_sys_openat+0x12d/0x210 [ 102.720435][ T5805] ? __pfx___x64_sys_openat+0x10/0x10 [ 102.720491][ T5805] ? rcu_is_watching+0x12/0xc0 [ 102.720535][ T5805] do_syscall_64+0x10b/0xf80 [ 102.720575][ T5805] ? clear_bhb_loop+0x40/0x90 [ 102.720613][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.720645][ T5805] RIP: 0033:0x7f53fd39cdd9 [ 102.720672][ T5805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.720700][ T5805] RSP: 002b:00007f53fe220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.720730][ T5805] RAX: ffffffffffffffda RBX: 00007f53fd615fa0 RCX: 00007f53fd39cdd9 [ 102.720750][ T5805] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 102.720770][ T5805] RBP: 00007f53fd432d69 R08: 0000000000000000 R09: 0000000000000000 [ 102.720787][ T5805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.720805][ T5805] R13: 00007f53fd616038 R14: 00007f53fd615fa0 R15: 00007ffe136094a8 [ 102.720846][ T5805] [ 103.389938][ T5809] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.7'. [ 105.548565][ T5841] Zero length message leads to an empty skb [ 105.940805][ T5861] FAULT_INJECTION: forcing a failure. [ 105.940805][ T5861] name failslab, interval 1, probability 0, space 0, times 1 [ 106.031101][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 106.031146][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.031164][ T5861] Call Trace: [ 106.031174][ T5861] [ 106.031187][ T5861] dump_stack_lvl+0x100/0x190 [ 106.031229][ T5861] should_fail_ex.cold+0x5/0xa [ 106.031269][ T5861] should_failslab+0xc2/0x120 [ 106.031308][ T5861] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 106.031359][ T5861] ? prepare_creds+0x2c/0x950 [ 106.031413][ T5861] prepare_creds+0x2c/0x950 [ 106.031451][ T5861] __sys_setuid+0x9c/0x440 [ 106.031491][ T5861] do_syscall_64+0x10b/0xf80 [ 106.031534][ T5861] ? clear_bhb_loop+0x40/0x90 [ 106.031575][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.031608][ T5861] RIP: 0033:0x7f53fd39cdd9 [ 106.031635][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.031664][ T5861] RSP: 002b:00007f53fe1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 106.031695][ T5861] RAX: ffffffffffffffda RBX: 00007f53fd616090 RCX: 00007f53fd39cdd9 [ 106.031715][ T5861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 106.031733][ T5861] RBP: 00007f53fd432d69 R08: 0000000000000000 R09: 0000000000000000 [ 106.031751][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.031769][ T5861] R13: 00007f53fd616128 R14: 00007f53fd616090 R15: 00007ffe136094a8 [ 106.031810][ T5861] [ 106.520229][ T5867] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.575956][ T5857] zswap: compressor not available [ 107.627295][ T5887] binder: 5885:5887 ioctl 0 9 returned -22 [ 107.687491][ T5893] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.22'. [ 107.761102][ T5887] binder: 5885:5887 ioctl 0 9 returned -22 [ 107.913022][ T5887] binder: 5885:5887 ioctl 0 9 returned -22 [ 107.931226][ T5887] binder: 5885:5887 ioctl 0 9 returned -22 [ 108.107006][ T5887] binder: 5885:5887 ioctl 0 9 returned -22 [ 108.189121][ T5887] binder: 5885:5887 ioctl 0 9 returned -22 [ 108.223615][ T5887] binder: 5885:5887 ioctl 0 9 returned -22 [ 108.833247][ T5935] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 114.149623][ T4946] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 114.157562][ T4946] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 114.314007][ T6004] Process accounting resumed [ 115.628232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.646166][ T6030] smpboot: CPU 1 is now offline [ 117.804707][ T6078] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 118.146737][ T6083] ================================================================== [ 118.154871][ T6083] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 118.163504][ T6083] Read of size 8 at addr ffff888022a88800 by task syz.1.52/6083 [ 118.171324][ T6083] [ 118.173663][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 118.173686][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.173696][ T6083] Call Trace: [ 118.173704][ T6083] [ 118.173711][ T6083] dump_stack_lvl+0x100/0x190 [ 118.173734][ T6083] print_report+0x13d/0x4b0 [ 118.173760][ T6083] ? __virt_addr_valid+0x239/0x430 [ 118.173789][ T6083] ? cache_seq_start_rcu+0x3fe/0x420 [ 118.173814][ T6083] kasan_report+0xdf/0x1d0 [ 118.173834][ T6083] ? cache_seq_start_rcu+0x3fe/0x420 [ 118.173862][ T6083] cache_seq_start_rcu+0x3fe/0x420 [ 118.173890][ T6083] seq_read_iter+0x2c1/0x1270 [ 118.173913][ T6083] seq_read+0x33b/0x4c0 [ 118.173931][ T6083] ? __pfx_seq_read+0x10/0x10 [ 118.173954][ T6083] ? __pfx_seq_read+0x10/0x10 [ 118.173972][ T6083] proc_reg_read+0x240/0x330 [ 118.173992][ T6083] ? __pfx_proc_reg_read+0x10/0x10 [ 118.174013][ T6083] vfs_read+0x1e4/0xb30 [ 118.174033][ T6083] ? __pfx_vfs_read+0x10/0x10 [ 118.174051][ T6083] ? find_held_lock+0x2b/0x80 [ 118.174073][ T6083] ? __fget_files+0x215/0x3d0 [ 118.174092][ T6083] ? __fget_files+0x215/0x3d0 [ 118.174113][ T6083] ? __fget_files+0x21f/0x3d0 [ 118.174134][ T6083] __x64_sys_pread64+0x1eb/0x250 [ 118.174155][ T6083] ? __pfx___x64_sys_pread64+0x10/0x10 [ 118.174177][ T6083] ? rcu_is_watching+0x12/0xc0 [ 118.174199][ T6083] do_syscall_64+0x10b/0xf80 [ 118.174221][ T6083] ? clear_bhb_loop+0x40/0x90 [ 118.174241][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.174259][ T6083] RIP: 0033:0x7f067e59cdd9 [ 118.174273][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.174290][ T6083] RSP: 002b:00007f067f3c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 118.174307][ T6083] RAX: ffffffffffffffda RBX: 00007f067e815fa0 RCX: 00007f067e59cdd9 [ 118.174319][ T6083] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 118.174329][ T6083] RBP: 00007f067e632d69 R08: 0000000000000000 R09: 0000000000000000 [ 118.174339][ T6083] R10: 0000008800000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.174349][ T6083] R13: 00007f067e816038 R14: 00007f067e815fa0 R15: 00007ffc4fca9758 [ 118.174371][ T6083] [ 118.174377][ T6083] [ 118.413851][ T6083] Allocated by task 5636: [ 118.418794][ T6083] kasan_save_stack+0x30/0x50 [ 118.423603][ T6083] kasan_save_track+0x14/0x30 [ 118.428588][ T6083] __kasan_kmalloc+0xaa/0xb0 [ 118.433468][ T6083] __kmalloc_noprof+0x301/0x850 [ 118.438732][ T6083] cache_create_net+0xa2/0x1f0 [ 118.443623][ T6083] nfsd_export_init+0x62/0x250 [ 118.448487][ T6083] nfsd_net_init+0x69/0x3e0 [ 118.453316][ T6083] ops_init+0x1e2/0x5f0 [ 118.457834][ T6083] setup_net+0x118/0x3a0 [ 118.462280][ T6083] copy_net_ns+0x46f/0x7c0 [ 118.467073][ T6083] create_new_namespaces+0x3ea/0xac0 [ 118.473394][ T6083] unshare_nsproxy_namespaces+0xf2/0x220 [ 118.479342][ T6083] ksys_unshare+0x438/0xab0 [ 118.484013][ T6083] __x64_sys_unshare+0x31/0x40 [ 118.489168][ T6083] do_syscall_64+0x10b/0xf80 [ 118.493776][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.499862][ T6083] [ 118.502359][ T6083] The buggy address belongs to the object at ffff888022a88000 [ 118.502359][ T6083] which belongs to the cache kmalloc-2k of size 2048 [ 118.517125][ T6083] The buggy address is located 0 bytes to the right of [ 118.517125][ T6083] allocated 2048-byte region [ffff888022a88000, ffff888022a88800) [ 118.533189][ T6083] [ 118.535547][ T6083] The buggy address belongs to the physical page: [ 118.542488][ T6083] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22a88 [ 118.551528][ T6083] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.560895][ T6083] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.570365][ T6083] page_type: f5(slab) [ 118.574858][ T6083] raw: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 118.583722][ T6083] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 118.592722][ T6083] head: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 118.602173][ T6083] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 118.611976][ T6083] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 118.621703][ T6083] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 118.633001][ T6083] page dumped because: kasan: bad access detected [ 118.640597][ T6083] page_owner tracks the page as allocated [ 118.647660][ T6083] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3582831821, free_ts 0 [ 118.668978][ T6083] post_alloc_hook+0x153/0x170 [ 118.674470][ T6083] get_page_from_freelist+0x11a6/0x33b0 [ 118.680762][ T6083] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 118.686784][ T6083] new_slab+0xa6/0x6c0 [ 118.691242][ T6083] refill_objects+0x277/0x420 [ 118.696615][ T6083] __pcs_replace_empty_main+0x375/0x650 [ 118.702405][ T6083] __kmalloc_cache_noprof+0x493/0x6f0 [ 118.708019][ T6083] acpi_add_single_object+0xbe/0x1ab0 [ 118.713936][ T6083] acpi_bus_check_add+0x2d2/0x920 [ 118.718998][ T6083] acpi_ns_walk_namespace+0x4cc/0x760 [ 118.724943][ T6083] acpi_walk_namespace+0xff/0x1d0 [ 118.730529][ T6083] acpi_bus_scan+0x3e7/0x4a0 [ 118.735261][ T6083] acpi_scan_init+0x2fb/0x520 [ 118.739994][ T6083] acpi_init+0x78f/0x840 [ 118.744472][ T6083] do_one_initcall+0x121/0x750 [ 118.749589][ T6083] kernel_init_freeable+0x6ea/0x7b0 [ 118.754997][ T6083] page_owner free stack trace missing [ 118.760646][ T6083] [ 118.763131][ T6083] Memory state around the buggy address: [ 118.768936][ T6083] ffff888022a88700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.777309][ T6083] ffff888022a88780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.785489][ T6083] >ffff888022a88800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.793845][ T6083] ^ [ 118.798019][ T6083] ffff888022a88880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.806639][ T6083] ffff888022a88900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.814975][ T6083] ================================================================== [ 118.843697][ T6084] process 'syz.2.51' launched '/dev/fd/6' with NULL argv: empty string added [ 119.756911][ T6083] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 119.764259][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 119.773404][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.783626][ T6083] Call Trace: [ 119.786990][ T6083] [ 119.789933][ T6083] dump_stack_lvl+0x100/0x190 [ 119.794631][ T6083] vpanic+0x552/0x970 [ 119.798629][ T6083] ? __pfx_vpanic+0x10/0x10 [ 119.803308][ T6083] ? cache_seq_start_rcu+0x3fe/0x420 [ 119.808742][ T6083] panic+0xd1/0xe0 [ 119.812481][ T6083] ? __pfx_panic+0x10/0x10 [ 119.816912][ T6083] ? cache_seq_start_rcu+0x3fe/0x420 [ 119.822381][ T6083] ? preempt_schedule_common+0x42/0xc0 [ 119.827931][ T6083] ? check_panic_on_warn+0x1f/0x90 [ 119.833199][ T6083] check_panic_on_warn.cold+0x19/0x34 [ 119.838600][ T6083] end_report.part.0+0x3a/0x90 [ 119.843554][ T6083] kasan_report.cold+0xe/0x18 [ 119.848270][ T6083] ? cache_seq_start_rcu+0x3fe/0x420 [ 119.853589][ T6083] cache_seq_start_rcu+0x3fe/0x420 [ 119.858916][ T6083] seq_read_iter+0x2c1/0x1270 [ 119.863612][ T6083] seq_read+0x33b/0x4c0 [ 119.867904][ T6083] ? __pfx_seq_read+0x10/0x10 [ 119.872607][ T6083] ? __pfx_seq_read+0x10/0x10 [ 119.877324][ T6083] proc_reg_read+0x240/0x330 [ 119.882058][ T6083] ? __pfx_proc_reg_read+0x10/0x10 [ 119.887404][ T6083] vfs_read+0x1e4/0xb30 [ 119.891671][ T6083] ? __pfx_vfs_read+0x10/0x10 [ 119.896459][ T6083] ? find_held_lock+0x2b/0x80 [ 119.901253][ T6083] ? __fget_files+0x215/0x3d0 [ 119.906035][ T6083] ? __fget_files+0x215/0x3d0 [ 119.910727][ T6083] ? __fget_files+0x21f/0x3d0 [ 119.915427][ T6083] __x64_sys_pread64+0x1eb/0x250 [ 119.920387][ T6083] ? __pfx___x64_sys_pread64+0x10/0x10 [ 119.925859][ T6083] ? rcu_is_watching+0x12/0xc0 [ 119.930631][ T6083] do_syscall_64+0x10b/0xf80 [ 119.935427][ T6083] ? clear_bhb_loop+0x40/0x90 [ 119.940238][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.946595][ T6083] RIP: 0033:0x7f067e59cdd9 [ 119.951105][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.972195][ T6083] RSP: 002b:00007f067f3c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 119.980897][ T6083] RAX: ffffffffffffffda RBX: 00007f067e815fa0 RCX: 00007f067e59cdd9 [ 119.989463][ T6083] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 119.997551][ T6083] RBP: 00007f067e632d69 R08: 0000000000000000 R09: 0000000000000000 [ 120.005636][ T6083] R10: 0000008800000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.013890][ T6083] R13: 00007f067e816038 R14: 00007f067e815fa0 R15: 00007ffc4fca9758 [ 120.021967][ T6083] [ 120.025160][ T6083] Kernel Offset: disabled [ 120.029598][ T6083] Rebooting in 86400 seconds..