last executing test programs: 2m5.856207624s ago: executing program 32 (id=109): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x6, 0x40) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x2, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, 0x0, 0x4048090) unshare$auto(0x40000080) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000280), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x400, 0x2, 0x0, 0x8000080000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 1m47.873241182s ago: executing program 33 (id=175): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, 0x0, 0x5, 0x11}, 0x5}, 0x2, 0x100) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r4, 0x5441, 0x0) r5 = socket(0x2, 0x2, 0x88) setsockopt$auto(r5, 0x0, 0x20, 0x0, 0x8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) (async) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f0000001700)={@inferred, 0xc, 0x3, 0x9, "9d4724b76f4d07faf46cb94d85033d940fdf05ecff75c12163ddeab942ed73d07dadd6f419694d591eca8162"}) mmap$auto(0x100000000000007, 0x500003, 0x1, 0x9b72, r7, 0x0) (async) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) (async) clock_gettime$auto(0x0, 0x0) (async) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r8, 0x5423, 0x0) (async) ioctl$auto_TCFLSH2(r8, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48894}, 0x4) 1m38.468695965s ago: executing program 5 (id=236): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp6\x00', 0x0, 0x0) setsockopt$auto_SO_NO_CHECK(r0, 0xa091f3da, 0xb, &(0x7f0000000040)='/proc/self/net/tcp6\x00', 0x1) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) close_range$auto(0x2, 0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r2) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) 1m37.973521269s ago: executing program 5 (id=260): r0 = socket(0x2a, 0x2, 0x8001) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x448280, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) rt_sigqueueinfo$auto(0x0, 0x4, 0x0) socket(0x29, 0x2, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x200004, 0x2, 0x40eb2, r1, 0x300000000000) read$auto(r1, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) 1m22.729787917s ago: executing program 34 (id=260): r0 = socket(0x2a, 0x2, 0x8001) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x448280, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) rt_sigqueueinfo$auto(0x0, 0x4, 0x0) socket(0x29, 0x2, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x200004, 0x2, 0x40eb2, r1, 0x300000000000) read$auto(r1, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) 1m19.890321738s ago: executing program 4 (id=347): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x101202, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x2003, 0x11, 0xffffffffffffffff, 0x7fff) r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204282, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r0, 0xdb, 0x50, 0x0, 0x9) socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x25, 0x6, 0x0, 0x3ffe) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x66c43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r2 = prctl$auto_PR_SCHED_CORE_CREATE(0xfff, 0x1, 0x0, 0x9, 0x7fff) pread64$auto(r2, &(0x7f0000000040)='7/(\x00', 0xf9c7, 0x7) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x9}, 0x5) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usb/uevent\x00', 0x3c3480, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x300008c1}, 0xc040810) mmap$auto(0x0, 0x20007, 0x4000000000dd, 0xeb1, 0x401, 0xfffffffffffffffb) pwrite64$auto(r4, &(0x7f0000000040)='\x0e/cg\xd0\x1e\x0f\xf1\xe2L\x1d\x82\xcf\b\x8c\x97\x02\xe0\xa4rzu\x15ym', 0x4, 0xb) 1m19.516877258s ago: executing program 4 (id=348): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000001640)=@bpf_attr_1={0xffffffffffffffff, 0x7, @next_key=0x8, 0x7}, 0x400) r6 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(r6, 0x40046f41, 0x0) ioctl$auto_TIOCGETD(r1, 0x5424, &(0x7f0000000200)="0ec11a5d36386a6e23ae8e6e46f96aed") migrate_pages$auto(0x0, 0xa, &(0x7f0000000240)=0x9, &(0x7f0000000140)=0x3) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000003c0)) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xfffffffffffffffa, 0x9, 0xfffffffffffffbff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/idVendor\x00', 0x80000, 0x0) splice$auto(r7, &(0x7f0000000040)=0x7, r6, &(0x7f0000000080)=0x8, 0x26c8, 0x895) timer_create$auto(0x3, &(0x7f00000000c0)={@sival_int=0x400000, @inferred=r7, 0x80}, &(0x7f00000001c0)=0x10001) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) 1m18.044951405s ago: executing program 4 (id=354): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/192, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0xffffffffffffffff, 0x4, 0xb) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) pkey_free$auto(0x17) mmap$auto(0x0, 0x200006, 0x3, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x25, 0x3, 0x0) sendmmsg$auto(r1, 0x0, 0x200, 0x101) mmap$auto(0x0, 0x400008, 0xdf, 0xffffffffffffff53, 0x2, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) r3 = prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) symlink$auto(0x0, 0x0) read$auto_ftrace_formats_fops_trace_printk(r3, &(0x7f0000000180)=""/174, 0xae) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto_GETPID(0x9, 0x3ff, 0xb, 0xbfff) 1m16.989340487s ago: executing program 4 (id=358): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$auto_SO_NO_CHECK(r0, 0xa091f3da, 0xb, &(0x7f0000000040)='/proc/self/net/tcp6\x00', 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x11, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) close_range$auto(0x2, 0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r2) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) 1m16.261760279s ago: executing program 4 (id=360): read$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffffff, &(0x7f0000000000)=""/191, 0xbf) (async) read$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffffff, &(0x7f0000000000)=""/191, 0xbf) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x1000000000005, 0x8000000000000000, 0xfffffffd) (async) madvise$auto(0x1000000000005, 0x8000000000000000, 0xfffffffd) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x6, 0x19, 0x0, 0x56b) mmap$auto(0x99, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x99, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1ff, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) ioprio_set$auto(0xffffff81, 0x0, 0x5) socket(0x1e, 0x4, 0x0) read$auto(0x3, 0x0, 0x80) (async) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0x81, 0x8, 0xfffffffffffffff4, 0xb, 0xd) 1m15.040160585s ago: executing program 4 (id=366): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x2003, 0x11, 0xffffffffffffffff, 0x7fff) r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204282, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r0, 0xdb, 0x50, 0x0, 0x9) socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x25, 0x6, 0x0, 0x3ffe) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x66c43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r2 = prctl$auto_PR_SCHED_CORE_CREATE(0xfff, 0x1, 0x0, 0x9, 0x7fff) pread64$auto(r2, &(0x7f0000000040)='7/(\x00', 0xf9c7, 0x7) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x9}, 0x5) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usb/uevent\x00', 0x3c3480, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x300008c1}, 0xc040810) mmap$auto(0x0, 0x20007, 0x4000000000dd, 0xeb1, 0x401, 0xfffffffffffffffb) pwrite64$auto(r4, &(0x7f0000000040)='\x0e/cg\xd0\x1e\x0f\xf1\xe2L\x1d\x82\xcf\b\x8c\x97\x02\xe0\xa4rzu\x15ym', 0x4, 0xb) 59.976630395s ago: executing program 35 (id=366): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x2003, 0x11, 0xffffffffffffffff, 0x7fff) r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x204282, 0x0) setsockopt$auto_SO_DEVMEM_DONTNEED(r0, 0xdb, 0x50, 0x0, 0x9) socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x25, 0x6, 0x0, 0x3ffe) clock_nanosleep$auto(0x400000, 0x1, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x66c43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r2 = prctl$auto_PR_SCHED_CORE_CREATE(0xfff, 0x1, 0x0, 0x9, 0x7fff) pread64$auto(r2, &(0x7f0000000040)='7/(\x00', 0xf9c7, 0x7) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x9}, 0x5) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/usb/uevent\x00', 0x3c3480, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x300008c1}, 0xc040810) mmap$auto(0x0, 0x20007, 0x4000000000dd, 0xeb1, 0x401, 0xfffffffffffffffb) pwrite64$auto(r4, &(0x7f0000000040)='\x0e/cg\xd0\x1e\x0f\xf1\xe2L\x1d\x82\xcf\b\x8c\x97\x02\xe0\xa4rzu\x15ym', 0x4, 0xb) 53.499871933s ago: executing program 7 (id=449): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x2, 0x100000001, 0x4000000000df, 0x17, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x400000000000000, 0x400008, 0xdf, 0x80000000009b72, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x1b) madvise$auto(0x8, 0x200007, 0x8) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) setsockopt$auto_SO_RCVMARK(r3, 0x3051de87, 0x4b, &(0x7f0000000080)='\']\x97.[(\x00', 0x9) mmap$auto(0x5, 0x2, 0x1, 0x9b72, 0xffffffffffffffff, 0x20000028028) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x103, 0x10000007, 0x1f, 0x7181, 0x1ffde, 0xb099, 0x3, 0x9, 0x6, 0x3, 0x884, 0x1, 0xb7, 0x9, 0x8, 0x10003, 0xb2, 0x4, 0x0, 0xb, 0x22004, 0x20000200, 0x1, 0x84, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xc0, 0x0, 0x7, 0x0, 0xb, 0x8, 0x2, 0x0, 0x0, 0x0, 0xad3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0xd) 47.948421426s ago: executing program 3 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0xf, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="2f212cbd7010ca705d845526cc0008", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x0}) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="13002ebd7000fbdbdf250a00000008000300", @ANYRES32=r12], 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'tunl0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r14) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010029bd6000fbdbdf2501000000080007000500000008000100", @ANYRES32=r16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x810) r17 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x4, r18, 0x10}, 0x22) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xe4, 0x0, 0x20, 0x5, 0x8, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x14, r1, 0x309, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r19, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32, @ANYBLOB="2cd8ee8a82cd4f20d58a87d4abdca695702aa00d513a1ff0e1e47fa0202507c8229eb697349ab05565515c195ee92d53d9a2c2"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 47.668507574s ago: executing program 3 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) r2 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) r3 = ioctl$auto_TUNSETVNETLE2(r2, 0x400454dc, &(0x7f00000002c0)=0xc) r4 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) setsockopt$auto_SO_ERROR(r4, 0x0, 0x4, &(0x7f00000006c0)='.\x00', 0xcc01) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r4, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x8080, 0x0) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000007584e6503090e8e2b5345e9cfa0488f164657bdaf133aa4d7b077ba1ef5b8363cdf15c32d776d70c37fb947a373d39b4b398c60a30cb4220b77d78a224eccfe5f9139e82a44281e7f788c99891cf49fa1b2380ab80cd79cf342a3b905512943361100d75bc2e483ca3ca496b33e9996c6fee13b68bc901361cdc0c0cd298dd13f50a00233aa3fc4c1b156e9e90874f09ebcf719ce5e1d9f413aefcd288c40620579d97fb92bcecc60d7641a0d988b839fceabc568e02f2dd121a9e600194462cd48f42024cc98b2e5fc7cdc4b0e510adbabb11b8ab20", @ANYRES16=r1, @ANYBLOB="020026bd7000ff9a7d001c000000000014001f00fe88000000000000000000000000010100"/46], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f0000000440)={[0x10000, 0x7, 0x80000000f, 0x40000000008fda, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x200000060, 0x0, 0x7, 0x1, 0x9, 0x3ff, 0x8000000000000000]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x5, 0x80000, 0xb) r5 = socket(0x2, 0x3, 0x1) connect$auto(r5, &(0x7f0000000000), 0x55) sendmmsg$auto(r5, &(0x7f0000000240)={{&(0x7f0000000100)="c9a19b9bd45daf8d1e42325618d266e9b4d29346a538f4501870f63224261ea46d2048306cb48caaa96d8e74944fe4311b40ed00640d041ca43967b3a4f18b86c38c26c9df10a988d1f2c1c69262f1908a4880ba65a9fca956c49dc5990384089f8c005c64f32d9bbba6f289964068a8ced940397118c0aa87e26591cfeead8827333219be3c55", 0x10000, 0x0, 0x2, 0x0, 0x3, 0xfffff2cf}, 0x6}, 0x2319, 0x5) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r6, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000040)={0x0, 0xd5}, 0x1, 0x0, 0x1, 0x9}, 0x6}, 0x6, 0x100000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 47.264162432s ago: executing program 3 (id=517): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)=ANY=[@ANYBLOB="54100000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000010001a80080001008703000004000480"], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r3, 0x1, 0x70bd27, 0x25dfdc02, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80014) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/9/chip_name\x00', 0x181000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)=""/45, 0x2d) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0xed) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) 46.914662936s ago: executing program 3 (id=520): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000b8008001c"], 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/yama/ptrace_scope\x00', 0x10400, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x10) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x7, 0x4, 0x1ff, 0x2, 0x8, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x1]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000480)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f00000002c0)="3ff26019f851082ff509f9d255b87814ebc7915be355175850b29b599219acdcfa3f76ebe70dd0b509c9e282278b9d801999509329e2195425c7a8180dcadc4dae81416f173696e464b264218889bc656cf20e0e4baba7be835f663fe0ac88ced349aa351f61299de6aa6490736144ef013777fec9b8e0", 0x200, &(0x7f00000000c0)={&(0x7f0000000340)="050fdf1e5c51ea6c52c694424d05bc260673a1b778401af1abd479587fca596c5defe073b09507913a862c12d4316a0951ab9221b86648415db776fc5e74618c767a4c1253ad1bc971ff5e42e81fd993bea6bad7346dbd370c7e9510", 0x9}, 0x9, &(0x7f00000003c0)="50cd93bfd44ec788a1d3fbcc6cb5fc63c39f5a6a44b5c5b810b4faad378a990ecbaabff9f380f930c90ae56ba1d3a22f2665b9996ea3b9e4eb2b66d5ba0ddd2013323a81bde34b3c033cb4e3b4c6175a2d24087eeb23c1192a05d2eb63c92731398792fe53f09ec07aa92b7f8fa37911acff1566df59d8e3489d00d62cf65804699e3c30ee5db6f91549f278837b0e2ee85b43707b6c64", 0x4, 0xfffffffe}, 0x22e}, 0x0, 0x8) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/veth1_to_bond\x00', 0x8000, 0x0) 46.852543737s ago: executing program 3 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000080), r0) sendmsg$auto_NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x50, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'batadv0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x80}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x4}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8dd}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x8044}, 0x20004010) (async) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r2, 0x77bed28568c43d3b, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}, 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) 46.699818304s ago: executing program 3 (id=523): mmap$auto(0x0, 0x2020089, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x7ffc) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/99, 0x63) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket(0x10, 0x2, 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf25110000002280080046800400f7800a0010800000002a4f7b0000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r7 = bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0xb8, 0x10, 0x1, 0x6, r3, 0x0, "2af0513ce63f00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) getsockopt$auto_SO_SNDTIMEO_NEW(r7, 0x1, 0x43, &(0x7f0000000000)='\x00', 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(r6, &(0x7f0000000040)=@xdp={0x2c, 0xf, r8, 0x28}, 0x6e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r9 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x9, 0x5, 0x3, 0x0) ioctl$auto(r9, 0xce2, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8) unshare$auto(0x40000080) 44.889805677s ago: executing program 6 (id=531): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/duplex\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000300)=""/77, 0x4d) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) io_uring_setup$auto(0x4, 0x0) io_uring_register$auto(r1, 0x9, &(0x7f0000000180)="55edd4981ad7e680a525e6f4231e5401000000000000005e1e8fbaa9ed203ec9c3de78dc7c4c58c8", 0xac7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0xffff]}, 0x0, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r2 = socket(0xa, 0x2, 0x73) sendto$auto(r2, 0x0, 0x402, 0x0, 0x0, 0x1c) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x1) 43.422487103s ago: executing program 6 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="010026bd7000fbdbdf800f0000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x80) 43.347775454s ago: executing program 6 (id=537): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x80000, 0x104) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002dbd7000fedb85bec6ba2f94"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram10\x00', 0x74b202, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, r3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x133d01, 0x0) 42.346754376s ago: executing program 6 (id=539): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x6, 0x0, 0x0, 0x0) (async) write$auto_uprobe_events_ops_trace_uprobe(r0, &(0x7f0000000040)="fb943365ca43f38717838baeccf779f9fcc6a82d14fb0256269eb23d56c9ce1d6734744dd0abbfa329ee371552dc4aa0b90c4ed5e38d3974d8185a1d1357e6ad56e1d93bae84427d05cf77d61656e331f257e684ee6e5acd", 0x58) socket(0x2, 0x80002, 0x73) r1 = socket(0x1, 0x3, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) (async, rerun: 32) fcntl$auto_F_GETOWN(r1, 0x9, 0x40) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) socketpair$auto(0x2, 0x3, 0x1dea, &(0x7f0000000000)=0x9) socket(0x10, 0xa, 0x7) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r2, 0xb21064a6, 0x20000a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r4, 0x5220, 0x0) (async) poll$auto(&(0x7f0000000040)={r3, 0x1, 0x40}, 0x8, 0x8000) socket(0x26, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f00000000c0)=0x10009) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) (async) read$auto(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) connect$auto(0xffffffffffffffff, 0x0, 0x6) (rerun: 64) 42.230728535s ago: executing program 6 (id=540): openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x2, 0x0) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) bind$auto(0x3, 0x0, 0x6a) (async) connect$auto(r0, 0x0, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x3ff, 0xfffffffffffffffe, 0x6, 0x48, 0x4909b6f8, 0x5, 0x7, 0x200003, 0x2, 0xd27, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x8, 0xa, 0x7, 0x200, 0xfffffffd, 0x83, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x1, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x72d, 0x1, 0x2, 0x8000, 0x4000003, 0x0, 0x80000000000, 0x0, 0x10000000000000, 0x0, 0x0, 0x5, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xec4e, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x802}, 0x24, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d803, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9080, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab40, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20a04, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = socket(0x11, 0x80003, 0x300) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(r3, 0x105, 0xe, 0x0, 0x80000009) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r4, 0x0, 0x42) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) 41.736124653s ago: executing program 6 (id=542): unshare$auto(0x40000080) (async) setresuid$auto(0x0, 0x8, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f00000004c0)={0x1, 0x0, "ed"}, 0xffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x1d, 0x80000, 0x300) setsockopt$auto(r0, 0x1, 0xf, 0x0, 0x6) msync$auto(0x0, 0x2000000005, 0x6) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x80100, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) (async) r1 = socket(0x10, 0x3, 0x6) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xc2c02, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty54\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5453, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) 38.051259019s ago: executing program 36 (id=449): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x2, 0x100000001, 0x4000000000df, 0x17, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x400000000000000, 0x400008, 0xdf, 0x80000000009b72, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x1b) madvise$auto(0x8, 0x200007, 0x8) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) setsockopt$auto_SO_RCVMARK(r3, 0x3051de87, 0x4b, &(0x7f0000000080)='\']\x97.[(\x00', 0x9) mmap$auto(0x5, 0x2, 0x1, 0x9b72, 0xffffffffffffffff, 0x20000028028) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x103, 0x10000007, 0x1f, 0x7181, 0x1ffde, 0xb099, 0x3, 0x9, 0x6, 0x3, 0x884, 0x1, 0xb7, 0x9, 0x8, 0x10003, 0xb2, 0x4, 0x0, 0xb, 0x22004, 0x20000200, 0x1, 0x84, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xc0, 0x0, 0x7, 0x0, 0xb, 0x8, 0x2, 0x0, 0x0, 0x0, 0xad3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0xd) 34.663106885s ago: executing program 8 (id=561): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x2, 0xcb7d, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x801, 0x100) (async) ioctl$auto(0x3, 0x5411, 0x38) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)=0x3) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x32b, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) connect$auto(0x3, 0x0, 0x0) (async) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, 0x0, 0x100800, 0x0) (async) socket(0x11, 0xa, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon1\x00', 0x4ad03, 0x0) ioctl$auto_MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000080)={0xafa, 0x7}) (async) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) 34.07711667s ago: executing program 8 (id=565): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0x7eb680, 0x100) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x702, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x400000000000001, 0x0, 0x800000000001, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 32) io_setup$auto(0x7ffe, 0x0) (rerun: 32) io_setup$auto(0x7ffe, &(0x7f0000000000)) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) (async) mlockall$auto(0x7) (async, rerun: 32) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (rerun: 32) ioctl$auto(0xffffffffffffffff, 0x4b67, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101100, 0x0) read$auto(0x3, 0x0, 0x7) (async) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async, rerun: 32) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) (rerun: 32) read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f0000001100)=""/4096, 0x1000) (async, rerun: 64) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x20800, 0x0) (async, rerun: 64) fcntl$auto(0x3, 0x4, 0xa553) (async) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x05\xbaYbR\xc1\xdd\xa2', 0xea) (async) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x4e0082, 0x0) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r2) fcntl$auto(r5, 0x9, 0x0) 33.995494061s ago: executing program 8 (id=566): ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000080)={0xffffffffffffffff, 0x5}) (async) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000080)={0xffffffffffffffff, 0x5}) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) socket(0xa, 0x5, 0x84) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) (async) sendfile$auto(0x1, r2, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x5760, 0x10000000000402) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000000)={0x6, 0x0, 0x1, 0x8}) write$auto(r1, 0x0, 0x9) mmap$auto(0x0, 0xc, 0xde, 0x20eb1, r0, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff9e}, 0x1, 0x0, 0x0, 0x8010}, 0x40400d0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x7, 0x0, 0x400000000001, 0x1ff}, 0x823}, 0x9a6, 0xe000) 33.81223116s ago: executing program 8 (id=568): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000001c0)) fcntl$auto_F_GETOWN(r0, 0x9, 0x6) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b40, 0x1) 33.784268883s ago: executing program 8 (id=570): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_READ(r0, 0xc0085508, 0x0) socket(0xa, 0x2, 0x3) socket(0x2b, 0x1, 0x1) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/statm\x00', 0x800, 0x0) lseek$auto(r1, 0x5, 0x0) socket(0x1, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) linkat$auto(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 33.530933813s ago: executing program 8 (id=572): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x28, 0x805, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2b, 0xa, 0x13) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) r2 = socket(0x3, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe602}, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) bpf$auto(0xfffffffe, &(0x7f00000000c0)=@bpf_attr_0={0x2000005, 0x5, 0x8000, 0x7, 0x4, 0xffffffffffffffff, 0x1, "c9a846cf2ff44a620fc96d22c425bc88", r5, r0, 0x4, 0x6811, 0x7, 0x324c3075}, 0xf) r7 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r8) mmap$auto(0x0, 0x20009, 0xe1, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0xa, 0x80000, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 31.63539753s ago: executing program 37 (id=523): mmap$auto(0x0, 0x2020089, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x7ffc) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/99, 0x63) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket(0x10, 0x2, 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf25110000002280080046800400f7800a0010800000002a4f7b0000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) r6 = ioctl$auto_TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r7 = bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_0={0x6, 0xb8, 0x10, 0x1, 0x6, r3, 0x0, "2af0513ce63f00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) getsockopt$auto_SO_SNDTIMEO_NEW(r7, 0x1, 0x43, &(0x7f0000000000)='\x00', 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(r6, &(0x7f0000000040)=@xdp={0x2c, 0xf, r8, 0x28}, 0x6e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r9 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x9, 0x5, 0x3, 0x0) ioctl$auto(r9, 0xce2, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8) unshare$auto(0x40000080) 26.675149384s ago: executing program 38 (id=542): unshare$auto(0x40000080) (async) setresuid$auto(0x0, 0x8, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f00000004c0)={0x1, 0x0, "ed"}, 0xffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x1d, 0x80000, 0x300) setsockopt$auto(r0, 0x1, 0xf, 0x0, 0x6) msync$auto(0x0, 0x2000000005, 0x6) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x80100, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) (async) r1 = socket(0x10, 0x3, 0x6) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) (async) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xc2c02, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty54\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5453, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) 18.469953515s ago: executing program 39 (id=572): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x28, 0x805, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2b, 0xa, 0x13) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) r2 = socket(0x3, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe602}, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x10000c5, 0x0, 0x40eb2, 0x402, 0x300000000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) bpf$auto(0xfffffffe, &(0x7f00000000c0)=@bpf_attr_0={0x2000005, 0x5, 0x8000, 0x7, 0x4, 0xffffffffffffffff, 0x1, "c9a846cf2ff44a620fc96d22c425bc88", r5, r0, 0x4, 0x6811, 0x7, 0x324c3075}, 0xf) r7 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r8) mmap$auto(0x0, 0x20009, 0xe1, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0xa, 0x80000, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 12.868876752s ago: executing program 9 (id=668): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000001c0)="2c380a70ac791ee7af33b5df209b8e5935732802de7ee57fbba413c1e505ea8e23cb370d02e2e811537be5676cd1f432551b18fb6da6e0db758c86e652812057f45fda5d18de0e356ecff0fa2f7bedcaefaecef248daf8029e89a5aa09ca906251bd36163a3bfedb5e17c698fdb7cbdac32a049f29214e91be7bda0b00071ff0637700e9a7482c0e2dbefb17263bc8ca897287bb999ad06a30325ab8b0ae75c84ec7495942c028226cbf3b0b1a01e20c9cea1910a6848c9bcdc092b9a687b26b8063f91e15e462b9e0f3abd8d7bcdcb2632be2ee6ae0f88abac538cb") landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x101}, 0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") r3 = getpid() r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r5 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r5, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r4, 0x3d}, 0xfffffffe, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000000340)="a8bfb76df65d2a4d5c6aee3aac7a134db2fb9f1c0e5730cba6d3a57050b020c2b05b25d4bb1cf8d2e66dcabc5c1878dfb4407ad13783e91caab4582691c74fa3834ae16ec5682993dafbbac7dff695a47fadb92124c44885a42095844c52a2b97ee406e99d6d194fa87dd5163e53ee8545e9d363436c1755a69fdeebb44b2f31b8b71cb2e14d05037b43d217548c28f5ac7c501efe5fe5f7771b5fee0b834a685df5a1c1da2d3855ae746725e78e63fa92af38d1d905112ff0366c8e78b860cf27d74e5e01882f3f48543446c5cd88f07104d03af1d9ab", 0x7fff) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r5, 0x8001) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x3, 0x4000000002, r3, 0x4000000000001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1000000000000001, 0x948b, 0x3, 0x15f4da0c, 0x2, 0x8007, 0x62, 0x6, 0x7, 0x5, 0xa, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) 11.879264215s ago: executing program 9 (id=673): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/vbi17/uevent\x00', 0x4735483c138343d4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, 0x401, 0x8000) r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0xf410, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) setuid$auto(0xe) write$auto(0x3, 0x0, 0xfffffdef) 11.602250993s ago: executing program 9 (id=674): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0xf, 0x2, 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x2, 0x207, 0x7, 0x80000011, r1, 0xfffffffffffffff8) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon28\x00', 0x101000, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7c27) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000140)='/\xd7\x10\xcd\x00', &(0x7f0000000480)={0x68, 0xc9, "c7d6abc891221288ae7ee67346e7408f57d283e396eeb3a9c8ff5d3556dd6b266278bb8c6f68da03f5658be0cc020bb3b2f7760d2d77757d872c5bbcef0759cf52800207d2ddabea0294a3ada25a92af5ceef4f6cfb7dee09e083969b84c7b2cf84d99fa96a266fa"}, 0x0, 0x1006) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$auto_SHM_STAT(0x7f, 0xd, &(0x7f0000000400)={{0x5, 0xee01, 0xffffffffffffffff, 0x65b, 0x61b, 0x3, 0x3}, 0x1, 0x6, 0x2, 0x3, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000800)="865a8afc04253ca971433176de87e4fd3ef162bc18b0111c38a33076ff43617563597c197af03d516e6141378432fbae9c67cf054dbaa74fd966a995428c9f7eef1d042fcee7a66b2db209928ad96885bab741b35ecee472e36195db87d4e7b6dafb33bbfcda642b69624638a5313582eb55710dee18046c1930df36382acc622328dca6a7c5785982293343cef79d4a66eb850a4b8680d676138f727fce3d392f7c8ec013d7c04e12a05cda85feb2f7b64c54600895ea1762", &(0x7f0000000300)="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"}) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r5, 0x0, 0x7ff, 0xd) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000b00)={{@inferred=r4, 0x7, 0x80000101, 0x9, "aab8e8dfffff7f000000000000000000205e782d000000000000000000021000", @raw=0x2}, 0x6, 0x8008, 0x6, @raw=0x9, @enumerated={0x1, 0x10002, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x10000000009e, 0x9}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f00000007c0)={{0x2, 0xee01, 0x0, 0x5, 0x6, 0x1, 0x5}, 0x4000002, 0x5, 0xfffffffffffffffe, 0x467, @raw=0x7, @inferred=r4, 0x7, 0x0, &(0x7f0000000540)="cf796bf5a61035b9b6f7c74256be85e94833a0bcf2346a0b01999bc9177cdf8f39cf60440eeca77358234d4a1f40f05c9a28c2872717452b8ddd190807df4882205c2295206215ebaa946bd9636c71b3e51b35afb2d3a705265d2820d8b8adee2448eb9bb546e2cd5a2b0c8873e51a07a022a3477c1a66cfb1bd10d140e052a3115757ca537ee690c197b90096c919b92823cb0cb4d0ecd4a895d993973b81501b4fe39b7605583ffb04181baa61e0a7a7", &(0x7f0000000600)="da6ef5fd9c3b334e61bf88b0ce4475425e4c78c1532a57ca2d737bad4df767de6c84f3a5adbd94e6bd20015d54d39d0019a9522e86313eb4c2273952e06dd291460abd4100d76b652108aeb9efd5817d09db424af07a078d81d19f926a506a19edc2a93bbf45fb1ce24d1693a4cb4711ffcddb94e101deca6e964e2e3a575c42c47cceab038d0ad709e0eb3c42b922841d942da7d4f64b903c82b56122e0750865b8f4c0b251ca40ce625e2ea94ed4932ef145bdd0028e58433fc46a48ddf37cf30d22d693651b3a1427b5e4a75d2c3f1403e30f82596edb81c57f11390b0fe79bee3ce85ca8875f71c2a267c2b440dc995da2ff"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) r6 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r6, 0x0, 0x4) 10.431295893s ago: executing program 9 (id=677): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x1, 0x1, 0x14, &(0x7f0000000000)='\x00', 0xbb) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/nbd6/integrity/write_generate\x00', 0xa0582, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(r3, 0x0, 0x2b6) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r2) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r8 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xfffffff9, 0x3, 0xffffffffffffffff, 0x101, 0x7) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000380)={0x9, 0x7, "38daa2788a828fb3a1eda03a7009079688c9fa01fa74842d6a911014a7faf9889bfbc5d4672bf88fddfc8bb921ee2d6210fa19cd9d9f5fe1326072f1dc4ef1f1", "cf693b110d8e81a1b61493b39fa39a79beffecf20e75a60f3bfd31de71c3628181c0f18a277e15a2bd356f59fd9994a1a03669ba56fa80f36aeb755a48df826f35a64ee00f4c59a2fc5ade6204af98db", 0x2, 0xcea4, "ccf95821dbe90258b00b15d915c98b495eb9a38c0c39601a0211c2102c28c6ffffaf28b5d0a32ef8611dfeccd50d72b8625f87fc7863134f235acbcf4720d8ff"}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3a00ccff", @ANYRES16=r7, @ANYBLOB="1b0026bd7000fddbdf25030000001c00038018000180140006801000748004004d8004000300040033800400038004000280"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto(r5, 0x542e, r5) 9.918030247s ago: executing program 9 (id=681): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x80401, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000240)="350600fa610c0bcf83a4ebdb040000000000000021cb24", 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, &(0x7f0000000c40)={0x0, 0x300, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf25070000000800020031000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2000c, 0xdf, 0x18, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x22, 0x1, 0x100) ioperm$auto(0x7, 0x105acf, 0xfffffffc) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xebf, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) 8.721284337s ago: executing program 9 (id=687): r0 = socket(0x9, 0x80000, 0xfffffff8) setsockopt$auto(r0, 0x29, 0x18, &(0x7f0000000040)='!\x00', 0x1ff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x2020009, 0x52c, 0xeb1, r0, 0x6a2) (async) mmap$auto(0x0, 0x2020009, 0x52c, 0xeb1, r0, 0x6a2) writev$auto(0x3, 0x0, 0x8009) (async) writev$auto(0x3, 0x0, 0x8009) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) (async) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) (async) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/stack\x00', 0x1052c0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x48e1, 0xa, 0x7, 0xd4d7, r1, 0x8000) select$auto(0x0, 0x0, 0x0, &(0x7f0000000480)={[0x1, 0x10001, 0x9, 0x8, 0xe4, 0x6, 0x30e5, 0x0, 0x8, 0x350660ac, 0x7ff, 0x5, 0x6, 0xb9, 0xf4, 0x4]}, &(0x7f0000000080)={0x5, 0x74b}) (async) select$auto(0x0, 0x0, 0x0, &(0x7f0000000480)={[0x1, 0x10001, 0x9, 0x8, 0xe4, 0x6, 0x30e5, 0x0, 0x8, 0x350660ac, 0x7ff, 0x5, 0x6, 0xb9, 0xf4, 0x4]}, &(0x7f0000000080)={0x5, 0x74b}) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) r2 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffff1}, 0x5, 0x3, 0x9) (async) pwritev$auto(0x3, &(0x7f0000000100)={0x0, 0xfffffffffffffff1}, 0x5, 0x3, 0x9) read$auto(r2, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r0) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}}, 0x4040800) getrandom$auto(0x0, 0x6000000, 0x3) 4.146462807s ago: executing program 1 (id=702): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, 0x0, 0x183200, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, 0x0, 0x810) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) accept4$auto(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xcd68, 0x1) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x80045515, r3) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)) unshare$auto(0x40000080) 3.739021547s ago: executing program 1 (id=705): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xca, 0x0, 0x6) setreuid$auto(0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0045520, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4f4, 0x7}, 0x10) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000fffc}, 0x3) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mkdirat$auto(r1, 0x0, 0xa) pipe$auto(0x0) dup2$auto(0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r2 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400000002020009, 0x4000000000000203, 0xeb1, 0xfffffffffffffffa, 0x8004) select$auto(0x6, &(0x7f0000000000)={[0x4, 0x7, 0x2, 0x9, 0x552d42bb, 0x6, 0x0, 0x80000001, 0x4c8c, 0x6, 0x0, 0x4, 0x2, 0x2, 0x2, 0x1]}, &(0x7f0000000080)={[0x8, 0x4881, 0x6, 0xde, 0x7, 0x40, 0x4, 0x3ff, 0x80, 0xddf, 0xe8d6, 0x0, 0x7fffffff, 0xfffffffffffffff9, 0x4, 0x2]}, &(0x7f0000000100)={[0x9, 0x6, 0x8000, 0x2, 0x1, 0xffffffffffffffff, 0x8, 0x73d7, 0x0, 0x3, 0x7fffffff, 0x7, 0x8, 0x8000000000000000, 0x8, 0xbfc]}, &(0x7f00000001c0)={0x0, 0x8}) unshare$auto(0x40000080) setfsuid$auto(0xee01) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r2, 0x4, 0x0, 0x0, 0xffffff9c) eventfd2$auto(0x3, 0x4) 3.355567382s ago: executing program 0 (id=706): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) write$auto(r0, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_settime$auto(0x0, 0xffff7ffe, &(0x7f00000000c0)={{0xf, 0xe64e}, {0x9, 0x3}}, 0x0) r2 = socket(0x9, 0x6, 0x89) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) bpf$auto(0x18000000, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x7, 0x1, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0x91) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=0x0, @ANYRESDEC=r1, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) readv$auto(r2, &(0x7f0000000080)={0x0, 0x80000000000503fa}, 0x6) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) msgctl$auto(0x9, 0x10000, &(0x7f0000000240)={{0x1382, 0x0, 0x0, 0x375e, 0xc, 0x5, 0xc1ac}, &(0x7f0000000040), &(0x7f0000000200)=0x8, 0x9, 0x401, 0x7, 0x3, 0x0, 0xffff, 0x100, 0xee5f, @inferred=0xffffffffffffffff, @inferred=0x0}) msgctl$auto(0x9baa, 0x0, &(0x7f0000000480)={{0x800, 0xee01, 0xffffffffffffffff, 0x1, 0x8a3, 0x7, 0xe0}, &(0x7f0000000340)=0x76, &(0x7f0000000380)=0xc, 0x203ff, 0x1, 0x3, 0x6, 0x0, 0x8, 0x2000, 0x2, @inferred=r9, @inferred=r8}) ioctl$auto_EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000540)={0xee01, 0x6, 0x0, 0x6, 0xd, 0x40}) socket$nl_generic(0x10, 0x3, 0x10) 3.113263056s ago: executing program 0 (id=708): write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9b", 0x39) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x10000000000, 0x400008, 0xde, 0x11, 0xffffffffffffffff, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) truncate$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6) listxattr$auto(0x0, 0x0, 0x7) r1 = socket(0x1f, 0x808, 0x5) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={r1, 0x1}, 0x102) io_uring_register$auto(r2, 0x1b, 0x0, 0x4) pipe$auto(0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x1d6c, 0x20012, 0xdb, 0x20eb1, 0xff1, 0xfffffffffffffc01) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/notify_on_release\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)="35c4a3a6116c4df6ca40bc07a8921434b129cdbad41109ae0c4d7b89eb96c5217ed5b4cdef216fda83ba935276ab57c2f1c8cad3fa40f37ba659621cb61c86f8031a77b0dc0b56b67826c743ad1740069028e7ef5a196f5582d4e57d0d92897d6dca848ba3b7186f9605cce3887316ae2181adf9891202b5843e4558662c4aa7bc4ef83a21713c9cabfd7333f0aadb49b587a0510e650de22c1a3fe4063bd720f96672a8b0ba3265aab4", 0xaa) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x7, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/ns/cgroup\x00', 0x8000, 0x0) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=@iter_create={r4, 0xfffffff9}, 0x401) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x47abd214480221e9, 0x0) write$auto(r5, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x0, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2.788433547s ago: executing program 1 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r1 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xfffffff8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xa}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0xee}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r0) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x81}, @NL80211_ATTR_MLD_ADDR={0xb5, 0x13a, "80f4db7ea82baa38a9ca275dd86a6b50bdf4e3ed4c746ce94417f9b2ca3902825fe6ed56316b09f1e1e6a53680a42d9d340a9952f338e95a5807e714663deeae7294faa442fadb4db4a57b6b742f120f186456edb4dcab9c3699f61cf70bbca04bf8793bb4376d1d29521c2b16482d3aea6afb9a78bb92ae1da5327459a9379f73603e8a5c33d72fd4f88da4a5db6e6f4bffcd6e787498881e58ea80a98ecbf2a2ff8a282601ce26c78ec9bf780401dd49"}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44080}, 0x4050) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x2, 0xe1ca, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.635254654s ago: executing program 1 (id=712): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x80000, 0x104) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002dbd7000fedb85bec6ba2f94"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram10\x00', 0x74b202, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, r3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x133d01, 0x0) 2.375354689s ago: executing program 2 (id=713): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0x2505}, 0x7fe}, 0x4, 0x1000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pppoe\x00', 0x28000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) getsockopt$auto(r1, 0x84, 0x22, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) getdents$auto(r1, &(0x7f0000000140)={0xf3, 0xa51, 0x9bd8, "3db9186e7cc8d4d79ab51cbcd552db50a2407332b517"}, 0x5b5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x4040ae79, 0x38) r4 = wait4$auto(0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x2, &(0x7f0000000280)={{0x8, 0x3f8000}, {0xe5d, 0x5}, 0x7fff, 0xfff, 0x1, 0x5, 0xf6f, 0x0, 0x9, 0x7, 0x0, 0x11d4dea8, 0x0, 0xff, 0x0, 0x9}) bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)=@task_fd_query={r4, r1, 0x0, 0x6, 0x4a3, 0x3f, r0, 0x2b, 0x1}, 0xffffffff) 2.144100938s ago: executing program 0 (id=714): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x80000, 0x104) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002dbd7000fedb85bec6ba2f94"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram10\x00', 0x74b202, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, r3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x133d01, 0x0) 1.791455446s ago: executing program 1 (id=715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r1, 0x1, 0x70bd27, 0x25dfdc02, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80014) 1.685792384s ago: executing program 1 (id=716): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8", 0x3d) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = bpf$auto(0x5, 0x0, 0x102) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000180)='7\x81\x1d\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=\x00\x00\x00\x00\x00\x00\x9f\x80#\xf5\xb5\xf6\tU\x86b\xca\xb1J', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) read$auto(r3, 0x0, 0xb4d3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) 1.411654277s ago: executing program 2 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf800f0000000c00018008000100", @ANYBLOB="72bfb70b97023ee5a3475fcd39645d47f62948ab22ff342c11ed0a3111ad3238a600a91d9834ecf13949401d727dc29ee101f30d2d45643c32f839cc2f47ec4f05b6e7c72ac9110ae7568de849dd92229870e143322f9bd6820373efc1ded82f5a542a6f62494bda706cfeb6b9a376b6ee136502678fb6d96d1bb26209045fd4768de50b636f0d30f97c2e569c4a7286ddb0c532100301cab1b2ad23824ecf4fd6178a6ed1a4fd37d55427be281f76f7997f96fecaca6d0893b700bf1c2094707855b0725c40490ddbcedc4f9812b9d6ad7ffe15477b2e3c81a7e9e34128fc73eddcd5690c3fd6135dbd8a3d2af4"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x80) 1.36365371s ago: executing program 2 (id=718): mmap$auto(0x6, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x542f, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty29\x00', 0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/nullb0\x00', 0x66ec03, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bus/usb/032/001\x00', 0x80000, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000380)={0xa, 0x7, 0x401, 0x1, 0x9515, 0x9, &(0x7f0000000340)="95ffa8c0295a2e1343dc"}) mmap$auto(0x0, 0x810001, 0xffb, 0x8000000008011, 0x3, 0x8000) getsockopt$auto_SO_LOCK_FILTER(r1, 0x5, 0x2c, &(0x7f0000000040)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', &(0x7f00000002c0)=0x8) ioctl$auto(0xffffffffffffffff, 0x4b4c, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) pread64$auto(r3, 0x0, 0x594c, 0x9fffffffd) select$auto(0x4ff, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212cbd8966efb91b2e351f000008000300", @ANYRES32], 0x28}}, 0x4000000) sendmsg$auto_NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008001) r4 = mq_open$auto(0x0, 0x7, 0x9, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/thread-self/mem\x00', 0x101000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/index\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00'}) write$auto(r5, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) 1.058357029s ago: executing program 0 (id=719): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4bfb, 0x9) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="7000000062e832967ecf19dd8ba38a6902535d11df122545f19135f3e2c34990a71980bc2c1b2a195df9590ca64587bf0dd593c8fb3ef1f129b07030cfd7756b01749856db24dd1c57aa00f8b0ca42ade41b93c9da2ed72d1950224ca5fe1ed5c254b7a8e209f075699e374bc5f1f367e02202a9c0d74c1287ef85645a86cabfeafbb7bff813a6e9e1685f780f403c953a781c05408ee8f21e0dc028", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d0000002c001a800800010087030000200004801c000180050007000900000004000a00040004000400020004000400"], 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/16t\x00', 0x426202, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xb0001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x181ac2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x80000000000001, 0xd) 749.268343ms ago: executing program 0 (id=720): timer_getoverrun$auto(0x80000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82002, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd4/sched/dispatch0\x00', 0x848000, 0x0) pread64$auto(r2, 0x0, 0x6c, 0xfc) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1c\x00', 0x187200, 0x0) (async, rerun: 64) r3 = socketpair$auto(0x1e, 0x1, 0xffffffff, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) mq_timedsend$auto(r1, &(0x7f00000002c0)='%!}^\x00', 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1}) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r7, 0x4010ae68, r8) (async) r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000000100)={0x2, 0x3ff, 0x9, 0x4, 0x0, 0xffffffffffffffff}) (async, rerun: 32) msgctl$auto(0x14d891a8, 0x6756, &(0x7f00000001c0)={{0x80000001, 0x0, 0x0, 0x2, 0x6, 0x4, 0x4}, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x2, 0x2, 0x5, 0x5, 0x9, 0x204000000000, 0x0, 0x6, 0x3, @raw=0x6, @raw=0x8000}) (rerun: 32) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x1cc, r9, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "016a76f37bf001ca2200000100"}, @OVS_PACKET_ATTR_KEY={0x191, 0x2, 0x0, 0x1, [@typed={0x4, 0xaa, 0x0, 0x0, @uid=r10}, @typed={0x8, 0x58, 0x0, 0x0, @fd}, @generic="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", @generic="cd81ec57e83c21b05ca77f8f2c260036d12fec9d1826490f7067b22ade3a7efa030920196a088e7bb7f0c28ffe24e6f36659cca21da5", @nested={0xfffffffffffffe90, 0x6b, 0x0, 0x1, [@nested={0x3c, 0x134, 0x0, 0x1, [@typed={0x2d, 0xe2, 0x0, 0x0, @str='/sys/devices/virtual/block/ram2/partscan\x00'}, @typed={0x0, 0xc3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x10c}]}]}, @typed={0x8, 0xa3}, @generic="94372eef9cf2f307f31e80d96728f23815ad8626f4119ea8ad1a18bbf3e194bda8a017573fe36df4"]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) (async, rerun: 64) ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) (async, rerun: 64) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) close_range$auto(0x2, 0xa, 0x0) 608.149388ms ago: executing program 0 (id=721): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x7f) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) shmctl$auto_IPC_STAT(0x3, 0x2, &(0x7f0000000240)={{0x9, 0xee01, 0x0, 0x5, 0xfe9, 0x80000000, 0x400}, 0xfff, 0x5, 0x7, 0x5, @raw=0xaa, @raw=0x1f, 0x5, 0x0, &(0x7f0000000440)="c6f2aad8e9a150ca7892e67820b845fa65705519c06ff673b94f55a0f618ae80a22d29ee84b55210e6cfad3d3c487ff295ee453cb206bde9d11b338130bf874ef074515c7d59d4ed771fa926f52781c230afdcb92ddf7733980355d8ca7bb155bbfa969f8151b3c7c6029ab16c30882b2893e42f1e6f3d4a0bb2cda8b5de2de90d56b081e4da4b0602e18a0dd6a05d7710cc80b21f28be3b037e1489c9adb883466db3983b16c47fe1ed4ea75154b38d3a912e6b832be31fd3d710915132079eff46895f2b7f445a94990c808baa7f4182edae94", &(0x7f0000000540)="0ec0937950fd405ff691f7cc5b5bce60d92fa31c23dc91bfdbd49a8c3f0689cf911134d269688777dd087901be146144c703ef70c837d74bb1770de137fb5ebdf6d73930ef26286025e1f8cce0e831c52110b9d415cb473409b1e5e29a496fe91e9947b43ab8774a55a1854d2cd52009d8cd5d706c251c381ff0a7b327b4ca557da47998ee1a7e369b4f8bea88bf276604261cff0845cbda4f89e02fd76c27f6a35a0f96f8"}) getpriority$auto_PRIO_USER(0x2, r2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x400, 0xd, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0xf, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(0x3, &(0x7f0000000340)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x88000, 0x0) pread64$auto(r4, 0x0, 0x800a, 0x100) mmap$auto(0xfffffffffffffffc, 0x40009, 0xdf, 0x9b72, r1, 0x28000) r5 = socket(0xa, 0x5, 0x84) write$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffffff, &(0x7f0000000000)="706f3a82d9e5cc7c2ceda8d50bfc94be9fe6c22ffaf8493a38", 0x19) sendto$auto(r5, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) 472.349949ms ago: executing program 2 (id=722): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/version\x00', 0x20002, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, 0x0, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) 410.644811ms ago: executing program 2 (id=723): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x54) r1 = socket(0xa, 0x5, 0x84) getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x9c) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) setreuid$auto(0x9, 0x1) ioctl$auto(r2, 0x4b31, 0x1) 0s ago: executing program 2 (id=724): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x80000, 0x104) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002dbd7000fedb85bec6ba2f94"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram10\x00', 0x74b202, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x133d01, 0x0) kernel console output (not intermixed with test programs): ith an up link [ 85.627111][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.634174][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.660320][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.685629][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.709012][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.716379][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.743158][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.797986][ T5824] team0: Port device team_slave_0 added [ 85.816340][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.823919][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.831604][ T5834] bridge_slave_0: entered allmulticast mode [ 85.838610][ T5834] bridge_slave_0: entered promiscuous mode [ 85.849568][ T5824] team0: Port device team_slave_1 added [ 85.857623][ T5825] team0: Port device team_slave_0 added [ 85.864352][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.871659][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.878819][ T5834] bridge_slave_1: entered allmulticast mode [ 85.885994][ T5834] bridge_slave_1: entered promiscuous mode [ 85.906625][ T5825] team0: Port device team_slave_1 added [ 85.985854][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.993425][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.019630][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.044360][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.059765][ T5832] hsr_slave_0: entered promiscuous mode [ 86.066678][ T5832] hsr_slave_1: entered promiscuous mode [ 86.074171][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.081513][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.107774][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.119429][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.126433][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.152364][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.166890][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.183314][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.190342][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.216370][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.255452][ T5834] team0: Port device team_slave_0 added [ 86.295598][ T5834] team0: Port device team_slave_1 added [ 86.321379][ T5835] Bluetooth: hci0: command tx timeout [ 86.327143][ T5835] Bluetooth: hci3: command tx timeout [ 86.329171][ T5831] Bluetooth: hci1: command tx timeout [ 86.394083][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.401154][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.401192][ T5831] Bluetooth: hci2: command tx timeout [ 86.427651][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.449198][ T5824] hsr_slave_0: entered promiscuous mode [ 86.455762][ T5824] hsr_slave_1: entered promiscuous mode [ 86.461998][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 86.467796][ T5824] Cannot create hsr debugfs directory [ 86.493773][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.501075][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.527056][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.557783][ T5825] hsr_slave_0: entered promiscuous mode [ 86.564193][ T5825] hsr_slave_1: entered promiscuous mode [ 86.570973][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.576713][ T5825] Cannot create hsr debugfs directory [ 86.677888][ T5834] hsr_slave_0: entered promiscuous mode [ 86.684328][ T5834] hsr_slave_1: entered promiscuous mode [ 86.690577][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 86.696306][ T5834] Cannot create hsr debugfs directory [ 87.135947][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.159577][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.190442][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.214879][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.266650][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.276790][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.288029][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.299173][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.394078][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.412565][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.431996][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.444759][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.532112][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.552913][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.563695][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.579555][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.653884][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.686131][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.705698][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.746607][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.753861][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.766076][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.773213][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.806019][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.863797][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.871068][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.886681][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.894151][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.918923][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.935215][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.946050][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.974822][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.065645][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.083287][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.101373][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.108603][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.159215][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.166793][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.191585][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.198774][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.250790][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.257978][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.384888][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.403846][ T5831] Bluetooth: hci3: command tx timeout [ 88.404531][ T5148] Bluetooth: hci1: command tx timeout [ 88.416548][ T5835] Bluetooth: hci0: command tx timeout [ 88.480496][ T5835] Bluetooth: hci2: command tx timeout [ 88.593545][ T5832] veth0_vlan: entered promiscuous mode [ 88.656191][ T5832] veth1_vlan: entered promiscuous mode [ 88.713851][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.726032][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.775780][ T5832] veth0_macvtap: entered promiscuous mode [ 88.789304][ T5832] veth1_macvtap: entered promiscuous mode [ 88.839055][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.865283][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.901059][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.911930][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.923133][ T5824] veth0_vlan: entered promiscuous mode [ 88.941473][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.950782][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963043][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.995621][ T5824] veth1_vlan: entered promiscuous mode [ 89.013593][ T5825] veth0_vlan: entered promiscuous mode [ 89.074371][ T5825] veth1_vlan: entered promiscuous mode [ 89.116743][ T5834] veth0_vlan: entered promiscuous mode [ 89.143406][ T5834] veth1_vlan: entered promiscuous mode [ 89.171029][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.173116][ T5824] veth0_macvtap: entered promiscuous mode [ 89.178975][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.211683][ T5824] veth1_macvtap: entered promiscuous mode [ 89.222769][ T5825] veth0_macvtap: entered promiscuous mode [ 89.238054][ T5825] veth1_macvtap: entered promiscuous mode [ 89.292170][ T5834] veth0_macvtap: entered promiscuous mode [ 89.307924][ T5834] veth1_macvtap: entered promiscuous mode [ 89.314345][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.323835][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.337863][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.353771][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.369476][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.397391][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.415255][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.433918][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.460195][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.463183][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.468983][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.518930][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.528170][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.595330][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.607655][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.626574][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.635527][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.660695][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.692731][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.712321][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.758296][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.848221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.860878][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.956241][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.964610][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.988213][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.002395][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.051978][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.061114][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.062553][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.068954][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.147395][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.164942][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.357943][ T5928] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.422438][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.489748][ T5835] Bluetooth: hci1: command tx timeout [ 90.495238][ T5835] Bluetooth: hci3: command tx timeout [ 90.499918][ T5148] Bluetooth: hci0: command tx timeout [ 90.560281][ T5148] Bluetooth: hci2: command tx timeout [ 91.113681][ T5942] Zero length message leads to an empty skb [ 91.130037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.250136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.440441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.891823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.902543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.911609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.932617][ T3097] cfg80211: failed to load regulatory.db [ 92.090230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.350095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.360129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.369592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.560000][ T5148] Bluetooth: hci3: command tx timeout [ 92.565500][ T5835] Bluetooth: hci1: command tx timeout [ 92.571067][ T5831] Bluetooth: hci0: command tx timeout [ 92.640286][ T5148] Bluetooth: hci2: command tx timeout [ 94.055657][ T5967] syz.3.9 (5967) used greatest stack depth: 19224 bytes left [ 94.747638][ T5973] syz.1.10 (5973): attempted to duplicate a private mapping with mremap. This is not supported. [ 96.144017][ T6024] bond0: option all_slaves_active: invalid value () [ 96.151824][ T6019] netlink: 93 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.237622][ T6038] netlink: 93 bytes leftover after parsing attributes in process `syz.2.20'. [ 98.127931][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 99.823810][ T6086] netlink: 93 bytes leftover after parsing attributes in process `syz.3.26'. [ 100.211608][ T6114] netlink: 188 bytes leftover after parsing attributes in process `syz.0.29'. [ 101.396681][ T6141] FAULT_INJECTION: forcing a failure. [ 101.396681][ T6141] name failslab, interval 1, probability 0, space 0, times 1 [ 101.451117][ T6141] CPU: 1 UID: 0 PID: 6141 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 101.451153][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.451168][ T6141] Call Trace: [ 101.451177][ T6141] [ 101.451186][ T6141] dump_stack_lvl+0x16c/0x1f0 [ 101.451230][ T6141] should_fail_ex+0x512/0x640 [ 101.451251][ T6141] ? fs_reclaim_acquire+0xae/0x150 [ 101.451277][ T6141] should_failslab+0xc2/0x120 [ 101.451299][ T6141] __kmalloc_noprof+0xdd/0x880 [ 101.451326][ T6141] ? tomoyo_encode2+0x100/0x3e0 [ 101.451360][ T6141] ? tomoyo_encode2+0x100/0x3e0 [ 101.451387][ T6141] tomoyo_encode2+0x100/0x3e0 [ 101.451419][ T6141] tomoyo_encode+0x29/0x50 [ 101.451445][ T6141] tomoyo_realpath_from_path+0x18f/0x6e0 [ 101.451483][ T6141] tomoyo_mkdev_perm+0x22b/0x570 [ 101.451506][ T6141] ? tomoyo_mkdev_perm+0x217/0x570 [ 101.451540][ T6141] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 101.451568][ T6141] ? do_raw_spin_lock+0x12c/0x2b0 [ 101.451602][ T6141] ? do_raw_spin_unlock+0x172/0x230 [ 101.451645][ T6141] ? __pfx_current_check_access_path+0x10/0x10 [ 101.451680][ T6141] ? simple_lookup+0x105/0x1d0 [ 101.451711][ T6141] tomoyo_path_mknod+0x12a/0x190 [ 101.451732][ T6141] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 101.451755][ T6141] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.451787][ T6141] security_path_mknod+0x161/0x310 [ 101.451815][ T6141] do_mknodat+0x239/0x5d0 [ 101.451847][ T6141] ? __pfx_do_mknodat+0x10/0x10 [ 101.451873][ T6141] ? getname_flags.part.0+0x1c5/0x550 [ 101.451903][ T6141] __x64_sys_mknod+0x87/0xb0 [ 101.451933][ T6141] do_syscall_64+0xcd/0xfa0 [ 101.451966][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.451988][ T6141] RIP: 0033:0x7f15eb18efc9 [ 101.452010][ T6141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.452031][ T6141] RSP: 002b:00007f15ebf93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 101.452054][ T6141] RAX: ffffffffffffffda RBX: 00007f15eb3e5fa0 RCX: 00007f15eb18efc9 [ 101.452069][ T6141] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 101.452083][ T6141] RBP: 00007f15eb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 101.452096][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.452110][ T6141] R13: 00007f15eb3e6038 R14: 00007f15eb3e5fa0 R15: 00007ffedcda02f8 [ 101.452141][ T6141] [ 101.452178][ T6141] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.980244][ T6159] raw_sendmsg: syz.3.38 forgot to set AF_INET. Fix it! [ 103.534895][ T6165] netlink: 93 bytes leftover after parsing attributes in process `syz.2.36'. [ 104.467901][ T6191] netlink: 334 bytes leftover after parsing attributes in process `syz.3.42'. [ 104.774285][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 104.837122][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 104.942437][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.919092][ T6246] netlink: 93 bytes leftover after parsing attributes in process `syz.1.51'. [ 109.562024][ T6302] random: crng reseeded on system resumption [ 110.807651][ T6300] process 'syz.3.61' launched '/dev/fd/9' with NULL argv: empty string added [ 111.126117][ T6337] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 111.880290][ T6362] FAULT_INJECTION: forcing a failure. [ 111.880290][ T6362] name fail_futex, interval 1, probability 0, space 0, times 1 [ 111.913473][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) [ 111.913511][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.913526][ T6362] Call Trace: [ 111.913534][ T6362] [ 111.913544][ T6362] dump_stack_lvl+0x16c/0x1f0 [ 111.913583][ T6362] should_fail_ex+0x512/0x640 [ 111.913615][ T6362] get_futex_key+0x1d0/0x1560 [ 111.913660][ T6362] ? __pfx_get_futex_key+0x10/0x10 [ 111.913695][ T6362] ? futex_private_hash_put+0x176/0x300 [ 111.913740][ T6362] futex_wake+0xea/0x530 [ 111.913768][ T6362] ? futex_wait+0x120/0x380 [ 111.913802][ T6362] ? __pfx_futex_wake+0x10/0x10 [ 111.913829][ T6362] ? __lock_acquire+0x622/0x1c90 [ 111.913870][ T6362] ? fput+0x9b/0xd0 [ 111.913902][ T6362] do_futex+0x1e3/0x350 [ 111.913928][ T6362] ? __pfx_do_futex+0x10/0x10 [ 111.913960][ T6362] __x64_sys_futex+0x1e0/0x4c0 [ 111.913990][ T6362] ? __pfx___x64_sys_futex+0x10/0x10 [ 111.914017][ T6362] ? __sys_getsockopt+0x144/0x1b0 [ 111.914065][ T6362] do_syscall_64+0xcd/0xfa0 [ 111.914105][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.914132][ T6362] RIP: 0033:0x7f03ceb8efc9 [ 111.914152][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.914176][ T6362] RSP: 002b:00007f03cfb070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.914200][ T6362] RAX: ffffffffffffffda RBX: 00007f03cede5fa8 RCX: 00007f03ceb8efc9 [ 111.914216][ T6362] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03cede5fac [ 111.914231][ T6362] RBP: 00007f03cede5fa0 R08: 00007f03cfb08000 R09: 0000000000000000 [ 111.914248][ T6362] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 111.914263][ T6362] R13: 00007f03cede6038 R14: 00007fffe2604770 R15: 00007fffe2604858 [ 111.914300][ T6362] [ 112.101302][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.619147][ T6386] netlink: 186 bytes leftover after parsing attributes in process `syz.2.74'. [ 115.123438][ T6413] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.349815][ T6418] usb usb15: usbfs: process 6418 (syz.0.79) did not claim interface 0 before use [ 115.833119][ T6404] netlink: 93 bytes leftover after parsing attributes in process `syz.3.77'. [ 116.430227][ T6432] random: crng reseeded on system resumption [ 118.992031][ T6474] netlink: 186 bytes leftover after parsing attributes in process `syz.0.87'. [ 119.291976][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 121.016528][ T6525] FAULT_INJECTION: forcing a failure. [ 121.016528][ T6525] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.040841][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(full) [ 121.040863][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.040872][ T6525] Call Trace: [ 121.040877][ T6525] [ 121.040883][ T6525] dump_stack_lvl+0x16c/0x1f0 [ 121.040909][ T6525] should_fail_ex+0x512/0x640 [ 121.040925][ T6525] get_futex_key+0x1d0/0x1560 [ 121.040951][ T6525] ? __pfx_get_futex_key+0x10/0x10 [ 121.040971][ T6525] ? futex_private_hash_put+0x176/0x300 [ 121.040997][ T6525] futex_wake+0xea/0x530 [ 121.041011][ T6525] ? futex_wait+0x120/0x380 [ 121.041028][ T6525] ? __pfx_futex_wake+0x10/0x10 [ 121.041042][ T6525] ? __lock_acquire+0x622/0x1c90 [ 121.041059][ T6525] ? fput+0x9b/0xd0 [ 121.041076][ T6525] do_futex+0x1e3/0x350 [ 121.041090][ T6525] ? __pfx_do_futex+0x10/0x10 [ 121.041108][ T6525] __x64_sys_futex+0x1e0/0x4c0 [ 121.041124][ T6525] ? __pfx___x64_sys_futex+0x10/0x10 [ 121.041138][ T6525] ? __sys_getsockopt+0x144/0x1b0 [ 121.041163][ T6525] do_syscall_64+0xcd/0xfa0 [ 121.041184][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.041198][ T6525] RIP: 0033:0x7f03ceb8efc9 [ 121.041210][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.041222][ T6525] RSP: 002b:00007f03cfb070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.041242][ T6525] RAX: ffffffffffffffda RBX: 00007f03cede5fa8 RCX: 00007f03ceb8efc9 [ 121.041251][ T6525] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03cede5fac [ 121.041259][ T6525] RBP: 00007f03cede5fa0 R08: 00007f03cfb08000 R09: 0000000000000000 [ 121.041267][ T6525] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 121.041275][ T6525] R13: 00007f03cede6038 R14: 00007fffe2604770 R15: 00007fffe2604858 [ 121.041302][ T6525] [ 121.780097][ T6539] futex_wake_op: syz.0.102 tries to shift op by -2048; fix this program [ 121.855758][ T6539] futex_wake_op: syz.0.102 tries to shift op by -2048; fix this program [ 123.690415][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 124.110376][ T6594] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.820218][ T6596] netlink: 334 bytes leftover after parsing attributes in process `syz.2.112'. [ 125.467703][ T6608] netlink: 93 bytes leftover after parsing attributes in process `syz.2.114'. [ 127.742721][ T6644] netlink: 334 bytes leftover after parsing attributes in process `syz.0.122'. [ 128.490233][ T6661] FAULT_INJECTION: forcing a failure. [ 128.490233][ T6661] name fail_futex, interval 1, probability 0, space 0, times 0 [ 128.602953][ T6661] CPU: 0 UID: 0 PID: 6661 Comm: syz.0.125 Not tainted syzkaller #0 PREEMPT(full) [ 128.602987][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.603001][ T6661] Call Trace: [ 128.603016][ T6661] [ 128.603026][ T6661] dump_stack_lvl+0x16c/0x1f0 [ 128.603071][ T6661] should_fail_ex+0x512/0x640 [ 128.603102][ T6661] get_futex_key+0x1d0/0x1560 [ 128.603150][ T6661] ? __pfx_get_futex_key+0x10/0x10 [ 128.603190][ T6661] ? futex_private_hash_put+0x176/0x300 [ 128.603242][ T6661] futex_wake+0xea/0x530 [ 128.603270][ T6661] ? futex_wait+0x120/0x380 [ 128.603305][ T6661] ? __pfx_futex_wake+0x10/0x10 [ 128.603333][ T6661] ? __lock_acquire+0x622/0x1c90 [ 128.603366][ T6661] ? fput+0x9b/0xd0 [ 128.603398][ T6661] do_futex+0x1e3/0x350 [ 128.603426][ T6661] ? __pfx_do_futex+0x10/0x10 [ 128.603462][ T6661] __x64_sys_futex+0x1e0/0x4c0 [ 128.603494][ T6661] ? __pfx___x64_sys_futex+0x10/0x10 [ 128.603522][ T6661] ? __sys_getsockopt+0x144/0x1b0 [ 128.603571][ T6661] do_syscall_64+0xcd/0xfa0 [ 128.603612][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.603638][ T6661] RIP: 0033:0x7f15eb18efc9 [ 128.603659][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.603683][ T6661] RSP: 002b:00007f15ebf720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.603708][ T6661] RAX: ffffffffffffffda RBX: 00007f15eb3e6098 RCX: 00007f15eb18efc9 [ 128.603724][ T6661] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f15eb3e609c [ 128.603738][ T6661] RBP: 00007f15eb3e6090 R08: 00007f15ebf94000 R09: 0000000000000000 [ 128.603754][ T6661] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 128.603769][ T6661] R13: 00007f15eb3e6128 R14: 00007ffedcda0210 R15: 00007ffedcda02f8 [ 128.603799][ T6661] [ 128.951881][ T6663] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.004907][ T6693] netlink: 334 bytes leftover after parsing attributes in process `syz.2.133'. [ 130.955084][ T6699] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 131.021452][ T6699] File: /dev/ram7 PID: 6699 Comm: syz.2.135 [ 131.105875][ T6705] random: crng reseeded on system resumption [ 131.398376][ T6718] size and base must be multiples of 4 kiB [ 131.409601][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.3.138 Not tainted syzkaller #0 PREEMPT(full) [ 131.409635][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.409650][ T6718] Call Trace: [ 131.409659][ T6718] [ 131.409672][ T6718] dump_stack_lvl+0x16c/0x1f0 [ 131.409716][ T6718] mtrr_del+0xd1/0x110 [ 131.409742][ T6718] mtrr_ioctl+0x922/0xcf0 [ 131.409769][ T6718] ? __pfx_mtrr_ioctl+0x10/0x10 [ 131.409803][ T6718] ? find_held_lock+0x2b/0x80 [ 131.409855][ T6718] ? __fget_files+0x20e/0x3c0 [ 131.409891][ T6718] ? __pfx_mtrr_ioctl+0x10/0x10 [ 131.409931][ T6718] proc_reg_unlocked_ioctl+0x229/0x320 [ 131.409960][ T6718] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 131.409992][ T6718] __x64_sys_ioctl+0x18e/0x210 [ 131.410025][ T6718] do_syscall_64+0xcd/0xfa0 [ 131.410067][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.410093][ T6718] RIP: 0033:0x7f03ceb8efc9 [ 131.410116][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.410141][ T6718] RSP: 002b:00007f03cfac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.410166][ T6718] RAX: ffffffffffffffda RBX: 00007f03cede6180 RCX: 00007f03ceb8efc9 [ 131.410184][ T6718] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 131.410200][ T6718] RBP: 00007f03cec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.410216][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.410232][ T6718] R13: 00007f03cede6218 R14: 00007f03cede6180 R15: 00007fffe2604858 [ 131.410275][ T6718] [ 131.928182][ T6723] netlink: 338 bytes leftover after parsing attributes in process `syz.2.139'. [ 131.929453][ T6723] netlink: 338 bytes leftover after parsing attributes in process `syz.2.139'. [ 131.940507][ T6723] netlink: 134 bytes leftover after parsing attributes in process `syz.2.139'. [ 132.885369][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.892091][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.018089][ T6733] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 133.125983][ T6736] netlink: 93 bytes leftover after parsing attributes in process `syz.2.142'. [ 133.624864][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 133.880510][ T6057] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 133.888074][ T6057] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 134.575940][ T6765] netlink: 334 bytes leftover after parsing attributes in process `syz.0.148'. [ 134.587233][ T6765] netlink: 'syz.0.148': attribute type 35 has an invalid length. [ 135.471574][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 135.485619][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'. [ 138.619315][ T6824] netlink: 93 bytes leftover after parsing attributes in process `syz.0.161'. [ 139.511013][ T6846] block nbd8: Unsupported socket: should be TCP or UNIX. [ 139.576115][ T6836] netlink: 93 bytes leftover after parsing attributes in process `syz.2.165'. [ 139.651675][ T6850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.661257][ T6850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.671862][ T6850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.681220][ T6850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.699084][ T6850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.152246][ T6847] netlink: 268 bytes leftover after parsing attributes in process `syz.0.167'. [ 140.161780][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 140.689616][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.704556][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.722219][ T6848] bridge_slave_0: entered allmulticast mode [ 140.742814][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 140.764682][ T6848] bridge_slave_0: entered promiscuous mode [ 140.801241][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 140.801311][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.837943][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.845798][ T6848] bridge_slave_1: entered allmulticast mode [ 140.857356][ T6848] bridge_slave_1: entered promiscuous mode [ 141.004016][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.025079][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.161083][ T6848] team0: Port device team_slave_0 added [ 141.194237][ T6848] team0: Port device team_slave_1 added [ 141.423095][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.439469][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.490593][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.509603][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.517621][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.553865][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.760034][ T6850] Bluetooth: hci4: command tx timeout [ 141.775298][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'. [ 141.793459][ T6902] hsr_slave_0: left promiscuous mode [ 141.822405][ T6902] hsr_slave_1: left promiscuous mode [ 141.835943][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.176'. [ 141.876812][ T6848] hsr_slave_0: entered promiscuous mode [ 141.883987][ T6848] hsr_slave_1: entered promiscuous mode [ 141.891898][ T6848] debugfs: 'hsr0' already exists in 'hsr' [ 141.907847][ T6848] Cannot create hsr debugfs directory [ 142.526537][ T6848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.587118][ T6848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.606887][ T6848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.671299][ T6848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.985988][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.032148][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.049727][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.056879][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.088868][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.096023][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.565055][ T6947] netlink: 93 bytes leftover after parsing attributes in process `syz.2.183'. [ 143.570778][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.842538][ T6850] Bluetooth: hci4: command tx timeout [ 144.228691][ T6848] veth0_vlan: entered promiscuous mode [ 144.278199][ T6848] veth1_vlan: entered promiscuous mode [ 144.343254][ T6848] veth0_macvtap: entered promiscuous mode [ 144.359821][ T6848] veth1_macvtap: entered promiscuous mode [ 144.448751][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.475549][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.542157][ T6049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.589333][ T6049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.602646][ T6049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.611535][ T6049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.770474][ T6105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.779419][ T6105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.823634][ T6105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.832235][ T6105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.932286][ T6850] Bluetooth: hci4: command tx timeout [ 145.988029][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 146.049198][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 146.536462][ T6994] netlink: 334 bytes leftover after parsing attributes in process `syz.2.193'. [ 146.734186][ T6996] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 147.257328][ T7016] netlink: 93 bytes leftover after parsing attributes in process `syz.4.198'. [ 147.960062][ T7031] FAULT_INJECTION: forcing a failure. [ 147.960062][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 147.977156][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.3.200 Not tainted syzkaller #0 PREEMPT(full) [ 147.977177][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.977185][ T7031] Call Trace: [ 147.977190][ T7031] [ 147.977196][ T7031] dump_stack_lvl+0x16c/0x1f0 [ 147.977242][ T7031] should_fail_ex+0x512/0x640 [ 147.977255][ T7031] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 147.977277][ T7031] should_failslab+0xc2/0x120 [ 147.977292][ T7031] kmem_cache_alloc_noprof+0x75/0x6e0 [ 147.977311][ T7031] ? vm_area_alloc+0x1f/0x160 [ 147.977331][ T7031] ? vm_area_alloc+0x1f/0x160 [ 147.977346][ T7031] vm_area_alloc+0x1f/0x160 [ 147.977362][ T7031] __mmap_region+0xf85/0x27a0 [ 147.977381][ T7031] ? find_held_lock+0x2b/0x80 [ 147.977400][ T7031] ? __pfx___mmap_region+0x10/0x10 [ 147.977416][ T7031] ? finish_task_switch.isra.0+0x21c/0xc10 [ 147.977435][ T7031] ? rcu_is_watching+0x12/0xc0 [ 147.977453][ T7031] ? finish_task_switch.isra.0+0x221/0xc10 [ 147.977471][ T7031] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.977490][ T7031] ? finish_task_switch.isra.0+0x221/0xc10 [ 147.977524][ T7031] ? __pfx___schedule+0x10/0x10 [ 147.977564][ T7031] ? trace_cap_capable+0x18d/0x200 [ 147.977585][ T7031] mmap_region+0x1ab/0x3f0 [ 147.977602][ T7031] ? __get_unmapped_area+0x267/0x440 [ 147.977618][ T7031] do_mmap+0xa3e/0x1210 [ 147.977641][ T7031] ? __pfx_do_mmap+0x10/0x10 [ 147.977656][ T7031] ? __pfx_down_write_killable+0x10/0x10 [ 147.977676][ T7031] vm_mmap_pgoff+0x29e/0x470 [ 147.977694][ T7031] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 147.977717][ T7031] ? __x64_sys_futex+0x1e0/0x4c0 [ 147.977732][ T7031] ? __x64_sys_futex+0x1e9/0x4c0 [ 147.977750][ T7031] ksys_mmap_pgoff+0x7d/0x5c0 [ 147.977763][ T7031] ? xfd_validate_state+0x61/0x180 [ 147.977782][ T7031] __x64_sys_mmap+0x125/0x190 [ 147.977801][ T7031] do_syscall_64+0xcd/0xfa0 [ 147.977822][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.977835][ T7031] RIP: 0033:0x7f03ceb8efc9 [ 147.977853][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.977867][ T7031] RSP: 002b:00007f03cfae6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 147.977882][ T7031] RAX: ffffffffffffffda RBX: 00007f03cede6090 RCX: 00007f03ceb8efc9 [ 147.977891][ T7031] RDX: ffffffffffffffff RSI: 0000000000000004 RDI: 0000000000000000 [ 147.977900][ T7031] RBP: 00007f03cec11f91 R08: 0000000000000401 R09: 0000000000008000 [ 147.977909][ T7031] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 147.977917][ T7031] R13: 00007f03cede6128 R14: 00007f03cede6090 R15: 00007fffe2604858 [ 147.977937][ T7031] [ 148.481720][ T6850] Bluetooth: hci4: command tx timeout [ 148.568770][ T7029] netlink: 188 bytes leftover after parsing attributes in process `syz.3.200'. [ 148.679478][ T6850] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 149.304634][ T7068] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 149.485940][ T7066] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input11 [ 149.754626][ T7081] Process accounting resumed [ 151.723942][ T7140] FAULT_INJECTION: forcing a failure. [ 151.723942][ T7140] name failslab, interval 1, probability 0, space 0, times 0 [ 151.783718][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT(full) [ 151.783752][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.783766][ T7140] Call Trace: [ 151.783774][ T7140] [ 151.783783][ T7140] dump_stack_lvl+0x16c/0x1f0 [ 151.783824][ T7140] should_fail_ex+0x512/0x640 [ 151.783848][ T7140] ? __kmalloc_cache_noprof+0x5f/0x780 [ 151.783881][ T7140] should_failslab+0xc2/0x120 [ 151.783906][ T7140] __kmalloc_cache_noprof+0x72/0x780 [ 151.783937][ T7140] ? kernfs_fop_open+0x244/0xda0 [ 151.783974][ T7140] ? kernfs_fop_open+0x244/0xda0 [ 151.784002][ T7140] kernfs_fop_open+0x244/0xda0 [ 151.784041][ T7140] do_dentry_open+0x982/0x1530 [ 151.784079][ T7140] ? __pfx_kernfs_fop_open+0x10/0x10 [ 151.784117][ T7140] vfs_open+0x82/0x3f0 [ 151.784149][ T7140] path_openat+0x1de4/0x2cb0 [ 151.784195][ T7140] ? __pfx_path_openat+0x10/0x10 [ 151.784242][ T7140] ? __lock_acquire+0xb8a/0x1c90 [ 151.784273][ T7140] do_filp_open+0x20b/0x470 [ 151.784308][ T7140] ? __pfx_do_filp_open+0x10/0x10 [ 151.784369][ T7140] ? alloc_fd+0x471/0x7d0 [ 151.784416][ T7140] do_sys_openat2+0x11b/0x1d0 [ 151.784444][ T7140] ? __pfx_do_sys_openat2+0x10/0x10 [ 151.784468][ T7140] ? find_held_lock+0x2b/0x80 [ 151.784501][ T7140] ? handle_mm_fault+0x2ab/0xd10 [ 151.784541][ T7140] __x64_sys_openat+0x174/0x210 [ 151.784570][ T7140] ? __pfx___x64_sys_openat+0x10/0x10 [ 151.784614][ T7140] do_syscall_64+0xcd/0xfa0 [ 151.784653][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.784679][ T7140] RIP: 0033:0x7f03ceb8efc9 [ 151.784699][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.784722][ T7140] RSP: 002b:00007f03cfaa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.784745][ T7140] RAX: ffffffffffffffda RBX: 00007f03cede6270 RCX: 00007f03ceb8efc9 [ 151.784762][ T7140] RDX: 0000000000000200 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 151.784778][ T7140] RBP: 00007f03cec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 151.784792][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.784807][ T7140] R13: 00007f03cede6308 R14: 00007f03cede6270 R15: 00007fffe2604858 [ 151.784845][ T7140] [ 152.207623][ T7154] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 152.596235][ T7163] netlink: 334 bytes leftover after parsing attributes in process `syz.3.221'. [ 153.424217][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'. [ 153.521757][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'. [ 154.421272][ T7212] bond0: option all_slaves_active: invalid value () [ 154.738345][ T7226] netlink: 334 bytes leftover after parsing attributes in process `syz.2.230'. [ 155.984400][ T7261] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 156.024133][ T7264] Process accounting resumed [ 157.598618][ T6050] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.611892][ T6050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.621085][ T6050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.629821][ T6050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.641934][ T6050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.646319][ T7289] chnl_net:caif_netlink_parms(): no params data found [ 159.029125][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.054713][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.070027][ T7289] bridge_slave_0: entered allmulticast mode [ 159.088357][ T7289] bridge_slave_0: entered promiscuous mode [ 159.207144][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.240929][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.251006][ T7308] synth uevent: /devices/virtual/block/nbd6: unknown uevent action string [ 159.270219][ T7289] bridge_slave_1: entered allmulticast mode [ 159.337483][ T7308] block nbd6: uevent: failed to send synthetic uevent: -22 [ 159.348478][ T7289] bridge_slave_1: entered promiscuous mode [ 159.760662][ T6050] Bluetooth: hci5: command tx timeout [ 159.769418][ T7289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.811125][ T7321] bond0: option all_slaves_active: invalid value () [ 159.938378][ T7289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.343506][ T7289] team0: Port device team_slave_0 added [ 160.414720][ T7289] team0: Port device team_slave_1 added [ 160.589584][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.615008][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.669745][ T7289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.764260][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.799790][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.866491][ T7289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.115593][ T7289] hsr_slave_0: entered promiscuous mode [ 161.124361][ T7289] hsr_slave_1: entered promiscuous mode [ 161.151311][ T7289] debugfs: 'hsr0' already exists in 'hsr' [ 161.209794][ T7289] Cannot create hsr debugfs directory [ 161.629565][ T7352] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 161.648824][ T7352] nbd: error processing sock list [ 161.840062][ T6050] Bluetooth: hci5: command tx timeout [ 162.483556][ T7367] netlink: 334 bytes leftover after parsing attributes in process `syz.2.248'. [ 162.643280][ T7289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.694724][ T7289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.771567][ T7289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.808274][ T7289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.135847][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.150483][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.256'. [ 163.184831][ T7385] netlink: 120 bytes leftover after parsing attributes in process `syz.2.256'. [ 163.200937][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.251330][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.258501][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.338189][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.345361][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.486239][ T7289] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.510019][ T7289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.920999][ T6050] Bluetooth: hci5: command tx timeout [ 164.004800][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.828085][ T7289] veth0_vlan: entered promiscuous mode [ 164.899117][ T7289] veth1_vlan: entered promiscuous mode [ 164.940727][ T7289] veth0_macvtap: entered promiscuous mode [ 164.981828][ T7289] veth1_macvtap: entered promiscuous mode [ 165.148318][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.334650][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.434944][ T6052] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.445583][ T6052] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.497359][ T6052] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.507026][ T6052] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.810468][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.877031][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.988908][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.000633][ T6050] Bluetooth: hci5: command tx timeout [ 166.019235][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.333928][ T7449] zswap: compressor not available [ 168.190034][ T7456] FAULT_INJECTION: forcing a failure. [ 168.190034][ T7456] name fail_futex, interval 1, probability 0, space 0, times 0 [ 168.190077][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.5.260 Not tainted syzkaller #0 PREEMPT(full) [ 168.190106][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.190120][ T7456] Call Trace: [ 168.190128][ T7456] [ 168.190137][ T7456] dump_stack_lvl+0x16c/0x1f0 [ 168.190179][ T7456] should_fail_ex+0x512/0x640 [ 168.190222][ T7456] get_futex_key+0xff0/0x1560 [ 168.190279][ T7456] ? __pfx_get_futex_key+0x10/0x10 [ 168.190325][ T7456] ? __mutex_trylock_common+0xe9/0x250 [ 168.190372][ T7456] futex_wake+0xea/0x530 [ 168.190406][ T7456] ? __pfx_futex_wake+0x10/0x10 [ 168.190433][ T7456] ? __lock_acquire+0xb8a/0x1c90 [ 168.190474][ T7456] do_futex+0x1e3/0x350 [ 168.190500][ T7456] ? __pfx_do_futex+0x10/0x10 [ 168.190529][ T7456] ? __might_fault+0xe3/0x190 [ 168.190577][ T7456] mm_release+0x24e/0x300 [ 168.190618][ T7456] do_exit+0x68e/0x2bf0 [ 168.190658][ T7456] ? __pfx_do_exit+0x10/0x10 [ 168.190683][ T7456] ? do_raw_spin_lock+0x12c/0x2b0 [ 168.190715][ T7456] ? find_held_lock+0x2b/0x80 [ 168.190753][ T7456] do_group_exit+0xd3/0x2a0 [ 168.190786][ T7456] get_signal+0x2671/0x26d0 [ 168.190835][ T7456] ? __pfx_get_signal+0x10/0x10 [ 168.190864][ T7456] ? do_futex+0x122/0x350 [ 168.190887][ T7456] ? __pfx_do_futex+0x10/0x10 [ 168.190914][ T7456] arch_do_signal_or_restart+0x8f/0x790 [ 168.190948][ T7456] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.190998][ T7456] ? syscall_user_dispatch+0x78/0x140 [ 168.191036][ T7456] exit_to_user_mode_loop+0x85/0x130 [ 168.191071][ T7456] do_syscall_64+0x426/0xfa0 [ 168.191109][ T7456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.191140][ T7456] RIP: 0033:0x7f4bb878efc9 [ 168.191159][ T7456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.191178][ T7456] RSP: 002b:00007f4bb96ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 168.191200][ T7456] RAX: fffffffffffffe00 RBX: 00007f4bb89e6278 RCX: 00007f4bb878efc9 [ 168.191217][ T7456] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4bb89e6278 [ 168.191232][ T7456] RBP: 00007f4bb89e6270 R08: 0000000000000000 R09: 0000000000000000 [ 168.191247][ T7456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.191262][ T7456] R13: 00007f4bb89e6308 R14: 00007ffd9a982f20 R15: 00007ffd9a983008 [ 168.191293][ T7456] [ 168.824914][ T7465] tty tty39: ldisc open failed (-12), clearing slot 38 [ 169.221990][ T7488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.267'. [ 169.231186][ T7488] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 169.249918][ T7488] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 170.554307][ T7525] vivid-003: ================= START STATUS ================= [ 170.572282][ T7525] vivid-003: Radio HW Seek Mode: Bounded [ 170.583505][ T7525] vivid-003: Radio Programmable HW Seek: false [ 170.604088][ T7525] vivid-003: RDS Rx I/O Mode: Block I/O [ 170.618173][ T7525] vivid-003: Generate RBDS Instead of RDS: false [ 170.633333][ T7525] vivid-003: RDS Reception: true [ 170.852827][ T7525] vivid-003: RDS Program Type: 0 inactive [ 170.859247][ T7525] vivid-003: RDS PS Name: inactive [ 170.864557][ T7525] vivid-003: RDS Radio Text: inactive [ 170.870208][ T7525] vivid-003: RDS Traffic Announcement: false inactive [ 170.877008][ T7525] vivid-003: RDS Traffic Program: false inactive [ 170.904989][ T7525] vivid-003: RDS Music: false inactive [ 170.915239][ T7525] vivid-003: ================== END STATUS ================== [ 171.207401][ T7534] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 171.464129][ T7533] netlink: 93 bytes leftover after parsing attributes in process `syz.3.279'. [ 171.979500][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 172.034257][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 172.691232][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 172.703276][ T7560] bridge_slave_1: left allmulticast mode [ 172.712966][ T7560] bridge_slave_1: left promiscuous mode [ 172.719660][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.938133][ T7560] bridge_slave_0: left allmulticast mode [ 172.944486][ T7560] bridge_slave_0: left promiscuous mode [ 172.950708][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.425174][ T7567] netlink: 268 bytes leftover after parsing attributes in process `syz.4.287'. [ 174.185927][ T7596] __vm_enough_memory: pid: 7596, comm: syz.4.292, bytes: 4398046511104 not enough memory for the allocation [ 174.289909][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 174.302553][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 175.657035][ T7624] netlink: 268 bytes leftover after parsing attributes in process `syz.3.300'. [ 175.786812][ T7627] netlink: 334 bytes leftover after parsing attributes in process `syz.2.301'. [ 176.125239][ T7632] nbd: socks must be embedded in a SOCK_ITEM attr [ 176.648206][ T7652] mmap: syz.4.307 (7652) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.625949][ T7661] netlink: 334 bytes leftover after parsing attributes in process `syz.3.310'. [ 179.402644][ T6050] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 181.471198][ T7753] FAULT_INJECTION: forcing a failure. [ 181.471198][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 181.485408][ T7753] CPU: 0 UID: 0 PID: 7753 Comm: syz.4.333 Not tainted syzkaller #0 PREEMPT(full) [ 181.485442][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.485456][ T7753] Call Trace: [ 181.485464][ T7753] [ 181.485474][ T7753] dump_stack_lvl+0x16c/0x1f0 [ 181.485526][ T7753] should_fail_ex+0x512/0x640 [ 181.485551][ T7753] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 181.485590][ T7753] should_failslab+0xc2/0x120 [ 181.485616][ T7753] kmem_cache_alloc_noprof+0x75/0x6e0 [ 181.485648][ T7753] ? __proc_create+0x2ce/0x8e0 [ 181.485681][ T7753] ? __proc_create+0x2ce/0x8e0 [ 181.485704][ T7753] __proc_create+0x2ce/0x8e0 [ 181.485736][ T7753] ? __pfx___proc_create+0x10/0x10 [ 181.485772][ T7753] ? mark_held_locks+0x49/0x80 [ 181.485799][ T7753] proc_create_reg+0x7d/0x180 [ 181.485831][ T7753] proc_create_net_data+0x8e/0x1c0 [ 181.485861][ T7753] ? __pfx_proc_create_net_data+0x10/0x10 [ 181.485886][ T7753] ? __pfx___netlink_kernel_create+0x10/0x10 [ 181.485918][ T7753] fib_proc_init+0x58/0x1b0 [ 181.485943][ T7753] fib_net_init+0x2af/0x3f0 [ 181.485968][ T7753] ? __pfx___register_sysctl_table+0x10/0x10 [ 181.485999][ T7753] ? __pfx_fib_net_init+0x10/0x10 [ 181.486024][ T7753] ? lockdep_init_map_type+0x5c/0x280 [ 181.486052][ T7753] ? __pfx_nl_fib_input+0x10/0x10 [ 181.486086][ T7753] ? devinet_init_net+0x5c2/0x910 [ 181.486121][ T7753] ? __pfx_fib_net_init+0x10/0x10 [ 181.486148][ T7753] ops_init+0x1e2/0x5f0 [ 181.486178][ T7753] setup_net+0x100/0x390 [ 181.486203][ T7753] ? __pfx_setup_net+0x10/0x10 [ 181.486228][ T7753] ? debug_mutex_init+0x37/0x70 [ 181.486261][ T7753] copy_net_ns+0x2f8/0x690 [ 181.486289][ T7753] create_new_namespaces+0x3ea/0xa90 [ 181.486327][ T7753] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 181.486361][ T7753] ksys_unshare+0x45b/0xa40 [ 181.486385][ T7753] ? __pfx_ksys_unshare+0x10/0x10 [ 181.486421][ T7753] ? xfd_validate_state+0x61/0x180 [ 181.486462][ T7753] __x64_sys_unshare+0x31/0x40 [ 181.486487][ T7753] do_syscall_64+0xcd/0xfa0 [ 181.486535][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.486560][ T7753] RIP: 0033:0x7f013bf8efc9 [ 181.486581][ T7753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.486609][ T7753] RSP: 002b:00007f013cd68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 181.486632][ T7753] RAX: ffffffffffffffda RBX: 00007f013c1e5fa0 RCX: 00007f013bf8efc9 [ 181.486650][ T7753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 181.486666][ T7753] RBP: 00007f013c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.486678][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.486691][ T7753] R13: 00007f013c1e6038 R14: 00007f013c1e5fa0 R15: 00007ffd5466f758 [ 181.486724][ T7753] [ 182.404669][ T6850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.414221][ T6850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.425790][ T6850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.440628][ T6850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.450410][ T6850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.972927][ T7766] chnl_net:caif_netlink_parms(): no params data found [ 183.255724][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.271323][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.293591][ T7766] bridge_slave_0: entered allmulticast mode [ 183.316776][ T7766] bridge_slave_0: entered promiscuous mode [ 183.425184][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.442294][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.464164][ T7766] bridge_slave_1: entered allmulticast mode [ 183.510761][ T7766] bridge_slave_1: entered promiscuous mode [ 183.742151][ T7766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.774739][ T7766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.892531][ T7766] team0: Port device team_slave_0 added [ 184.013910][ T7766] team0: Port device team_slave_1 added [ 184.250951][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.258054][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.284995][ T7766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.297770][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.304908][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.333026][ T7766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.482084][ T6850] Bluetooth: hci6: command tx timeout [ 184.594027][ T7766] hsr_slave_0: entered promiscuous mode [ 184.609229][ T7766] hsr_slave_1: entered promiscuous mode [ 184.627168][ T7766] debugfs: 'hsr0' already exists in 'hsr' [ 184.633343][ T7766] Cannot create hsr debugfs directory [ 185.257397][ T7766] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.297908][ T7766] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.319140][ T7766] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.378868][ T7766] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.662215][ T7766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.765033][ T7766] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.842042][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.849242][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.864062][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.871290][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.503156][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'. [ 186.564518][ T6850] Bluetooth: hci6: command tx timeout [ 187.162795][ T7878] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.185939][ T7766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.060388][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 188.092930][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 188.576046][ T7766] veth0_vlan: entered promiscuous mode [ 188.604230][ T7766] veth1_vlan: entered promiscuous mode [ 188.645154][ T6850] Bluetooth: hci6: command tx timeout [ 188.668316][ T7766] veth0_macvtap: entered promiscuous mode [ 188.683285][ T7766] veth1_macvtap: entered promiscuous mode [ 188.725564][ T7766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.748169][ T7766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.770546][ T6201] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.796480][ T6201] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.818988][ T6201] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.859453][ T6201] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.008897][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.022203][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.102376][ T6201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.131043][ T6201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.267259][ T7920] random: crng reseeded on system resumption [ 189.322941][ T7920] FAULT_INJECTION: forcing a failure. [ 189.322941][ T7920] name failslab, interval 1, probability 0, space 0, times 0 [ 189.379837][ T7920] CPU: 1 UID: 0 PID: 7920 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(full) [ 189.379874][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.379889][ T7920] Call Trace: [ 189.379898][ T7920] [ 189.379908][ T7920] dump_stack_lvl+0x16c/0x1f0 [ 189.379961][ T7920] should_fail_ex+0x512/0x640 [ 189.379987][ T7920] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 189.380029][ T7920] should_failslab+0xc2/0x120 [ 189.380057][ T7920] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 189.380093][ T7920] ? stack_trace_save+0x8e/0xc0 [ 189.380125][ T7920] ? __d_alloc+0x32/0xae0 [ 189.380166][ T7920] ? __d_alloc+0x32/0xae0 [ 189.380197][ T7920] __d_alloc+0x32/0xae0 [ 189.380237][ T7920] d_alloc_parallel+0x111/0x1510 [ 189.380277][ T7920] ? find_held_lock+0x2b/0x80 [ 189.380312][ T7920] ? __pfx_d_alloc_parallel+0x10/0x10 [ 189.380346][ T7920] ? __d_lookup+0x266/0x4a0 [ 189.380404][ T7920] lookup_open.isra.0+0x665/0x1580 [ 189.380447][ T7920] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 189.380502][ T7920] ? mnt_get_write_access+0x1e9/0x2f0 [ 189.380532][ T7920] path_openat+0x893/0x2cb0 [ 189.380577][ T7920] ? __pfx_path_openat+0x10/0x10 [ 189.380614][ T7920] ? __lock_acquire+0xb8a/0x1c90 [ 189.380643][ T7920] do_filp_open+0x20b/0x470 [ 189.380676][ T7920] ? __pfx_do_filp_open+0x10/0x10 [ 189.380735][ T7920] ? alloc_fd+0x471/0x7d0 [ 189.380777][ T7920] do_sys_openat2+0x11b/0x1d0 [ 189.380807][ T7920] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.380852][ T7920] __x64_sys_openat+0x174/0x210 [ 189.380881][ T7920] ? __pfx___x64_sys_openat+0x10/0x10 [ 189.380924][ T7920] do_syscall_64+0xcd/0xfa0 [ 189.380971][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.380997][ T7920] RIP: 0033:0x7f03ceb8efc9 [ 189.381018][ T7920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.381044][ T7920] RSP: 002b:00007f03cfb07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.381068][ T7920] RAX: ffffffffffffffda RBX: 00007f03cede5fa0 RCX: 00007f03ceb8efc9 [ 189.381085][ T7920] RDX: 0000000000063102 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 189.381101][ T7920] RBP: 00007f03cec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 189.381115][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.381129][ T7920] R13: 00007f03cede6038 R14: 00007f03cede5fa0 R15: 00007fffe2604858 [ 189.381164][ T7920] [ 189.383181][ T7924] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 189.384178][ T7920] Restarting kernel threads ... [ 189.687877][ T7920] Done restarting kernel threads. [ 189.766188][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'. [ 190.527877][ T7950] FAULT_INJECTION: forcing a failure. [ 190.527877][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 190.540915][ T7950] CPU: 1 UID: 0 PID: 7950 Comm: syz.6.370 Not tainted syzkaller #0 PREEMPT(full) [ 190.541033][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.541042][ T7950] Call Trace: [ 190.541050][ T7950] [ 190.541057][ T7950] dump_stack_lvl+0x16c/0x1f0 [ 190.541083][ T7950] should_fail_ex+0x512/0x640 [ 190.541097][ T7950] ? __kmalloc_cache_noprof+0x5f/0x780 [ 190.541117][ T7950] should_failslab+0xc2/0x120 [ 190.541131][ T7950] __kmalloc_cache_noprof+0x72/0x780 [ 190.541148][ T7950] ? do_raw_spin_unlock+0x172/0x230 [ 190.541165][ T7950] ? snd_mixer_oss_open+0x11d/0x300 [ 190.541183][ T7950] ? snd_mixer_oss_open+0x11d/0x300 [ 190.541197][ T7950] snd_mixer_oss_open+0x11d/0x300 [ 190.541211][ T7950] ? __pfx_snd_mixer_oss_open+0x10/0x10 [ 190.541227][ T7950] soundcore_open+0x40c/0x580 [ 190.541243][ T7950] ? __pfx_soundcore_open+0x10/0x10 [ 190.541257][ T7950] chrdev_open+0x234/0x6a0 [ 190.541278][ T7950] ? __pfx_chrdev_open+0x10/0x10 [ 190.541298][ T7950] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 190.541320][ T7950] do_dentry_open+0x982/0x1530 [ 190.541340][ T7950] ? __pfx_chrdev_open+0x10/0x10 [ 190.541363][ T7950] vfs_open+0x82/0x3f0 [ 190.541379][ T7950] path_openat+0x1de4/0x2cb0 [ 190.541404][ T7950] ? __pfx_path_openat+0x10/0x10 [ 190.541423][ T7950] ? __lock_acquire+0xb8a/0x1c90 [ 190.541439][ T7950] do_filp_open+0x20b/0x470 [ 190.541458][ T7950] ? __pfx_do_filp_open+0x10/0x10 [ 190.541489][ T7950] ? alloc_fd+0x471/0x7d0 [ 190.541512][ T7950] do_sys_openat2+0x11b/0x1d0 [ 190.541527][ T7950] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.541549][ T7950] __x64_sys_openat+0x174/0x210 [ 190.541564][ T7950] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.541587][ T7950] do_syscall_64+0xcd/0xfa0 [ 190.541608][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.541622][ T7950] RIP: 0033:0x7f3343b8efc9 [ 190.541635][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.541647][ T7950] RSP: 002b:00007f33449d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.541662][ T7950] RAX: ffffffffffffffda RBX: 00007f3343de5fa0 RCX: 00007f3343b8efc9 [ 190.541671][ T7950] RDX: 0000000000000902 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 190.541680][ T7950] RBP: 00007f3343c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.541688][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.541697][ T7950] R13: 00007f3343de6038 R14: 00007f3343de5fa0 R15: 00007ffeb2896598 [ 190.541716][ T7950] [ 190.802413][ T6850] Bluetooth: hci6: command tx timeout [ 191.251548][ T30] audit: type=1800 audit(4294967371.290:2): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.368" name="dbroot" dev="configfs" ino=19819 res=0 errno=0 [ 193.389976][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 193.413807][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 193.708889][ T30] audit: type=1804 audit(4294967373.760:3): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.379" name="/newroot/5/file0" dev="tmpfs" ino=45 res=1 errno=0 [ 193.735997][ T30] audit: type=1804 audit(4294967373.790:4): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.379" name="/newroot/5/file0" dev="tmpfs" ino=45 res=1 errno=0 [ 194.337349][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.353777][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.837212][ T30] audit: type=1800 audit(4294967374.880:5): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.388" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 195.769468][ T8060] ======================================================= [ 195.769468][ T8060] WARNING: The mand mount option has been deprecated and [ 195.769468][ T8060] and is ignored by this kernel. Remove the mand [ 195.769468][ T8060] option from the mount to silence this warning. [ 195.769468][ T8060] ======================================================= [ 196.383215][ T8080] netlink: 334 bytes leftover after parsing attributes in process `syz.2.396'. [ 197.130598][ T8102] FAULT_INJECTION: forcing a failure. [ 197.130598][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 197.171665][ T8102] CPU: 0 UID: 0 PID: 8102 Comm: syz.6.400 Not tainted syzkaller #0 PREEMPT(full) [ 197.171698][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.171711][ T8102] Call Trace: [ 197.171719][ T8102] [ 197.171727][ T8102] dump_stack_lvl+0x16c/0x1f0 [ 197.171765][ T8102] should_fail_ex+0x512/0x640 [ 197.171787][ T8102] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 197.171819][ T8102] should_failslab+0xc2/0x120 [ 197.171842][ T8102] kmem_cache_alloc_noprof+0x75/0x6e0 [ 197.171870][ T8102] ? security_file_alloc+0x34/0x2b0 [ 197.171908][ T8102] ? security_file_alloc+0x34/0x2b0 [ 197.171938][ T8102] security_file_alloc+0x34/0x2b0 [ 197.171969][ T8102] init_file+0x93/0x4c0 [ 197.171993][ T8102] alloc_empty_file+0x73/0x1e0 [ 197.172021][ T8102] alloc_file_pseudo+0x13a/0x230 [ 197.172049][ T8102] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 197.172076][ T8102] ? alloc_fd+0x471/0x7d0 [ 197.172109][ T8102] sock_alloc_file+0x50/0x210 [ 197.172135][ T8102] __sys_socket+0x1c0/0x260 [ 197.172162][ T8102] ? __x64_sys_openat+0x174/0x210 [ 197.172228][ T8102] ? __pfx___sys_socket+0x10/0x10 [ 197.172256][ T8102] ? xfd_validate_state+0x61/0x180 [ 197.172292][ T8102] __x64_sys_socket+0x72/0xb0 [ 197.172320][ T8102] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.172357][ T8102] do_syscall_64+0xcd/0xfa0 [ 197.172395][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.172420][ T8102] RIP: 0033:0x7f3343b8efc9 [ 197.172438][ T8102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.172460][ T8102] RSP: 002b:00007f3341df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 197.172484][ T8102] RAX: ffffffffffffffda RBX: 00007f3343de6450 RCX: 00007f3343b8efc9 [ 197.172500][ T8102] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 197.172515][ T8102] RBP: 00007f3343c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 197.172529][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.172543][ T8102] R13: 00007f3343de64e8 R14: 00007f3343de6450 R15: 00007ffeb2896598 [ 197.172578][ T8102] [ 200.007730][ T8183] netlink: 338 bytes leftover after parsing attributes in process `syz.3.418'. [ 200.048690][ T8183] veth1_macvtap: left promiscuous mode [ 200.505907][ T8196] netlink: 268 bytes leftover after parsing attributes in process `syz.2.421'. [ 200.733494][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 200.788482][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 200.995605][ T8217] netlink: 334 bytes leftover after parsing attributes in process `syz.3.426'. [ 201.081229][ T8219] capability: warning: `syz.3.427' uses 32-bit capabilities (legacy support in use) [ 201.208770][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.429'. [ 201.512007][ T8227] netlink: 330 bytes leftover after parsing attributes in process `syz.6.429'. [ 203.232818][ T8279] FAULT_INJECTION: forcing a failure. [ 203.232818][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 203.258131][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.3.440 Not tainted syzkaller #0 PREEMPT(full) [ 203.258164][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.258173][ T8279] Call Trace: [ 203.258178][ T8279] [ 203.258184][ T8279] dump_stack_lvl+0x16c/0x1f0 [ 203.258211][ T8279] should_fail_ex+0x512/0x640 [ 203.258225][ T8279] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 203.258264][ T8279] should_failslab+0xc2/0x120 [ 203.258278][ T8279] __kvmalloc_node_noprof+0x141/0x9c0 [ 203.258301][ T8279] ? v4l2_ctrl_new+0x982/0x2190 [ 203.258317][ T8279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.258339][ T8279] ? v4l2_ctrl_new+0x982/0x2190 [ 203.258355][ T8279] v4l2_ctrl_new+0x982/0x2190 [ 203.258379][ T8279] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 203.258395][ T8279] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 203.258417][ T8279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.258435][ T8279] v4l2_ctrl_new_std+0x1be/0x290 [ 203.258458][ T8279] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 203.258475][ T8279] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 203.258494][ T8279] ? trace_kmalloc+0x2b/0xd0 [ 203.258507][ T8279] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 203.258528][ T8279] ? media_request_object_init+0x100/0x180 [ 203.258544][ T8279] vicodec_open+0x1d9/0xf70 [ 203.258558][ T8279] ? kobject_get_unless_zero+0x156/0x1e0 [ 203.258576][ T8279] v4l2_open+0x1d2/0x5e0 [ 203.258591][ T8279] ? __pfx_v4l2_open+0x10/0x10 [ 203.258605][ T8279] chrdev_open+0x234/0x6a0 [ 203.258624][ T8279] ? __pfx_apparmor_file_open+0x10/0x10 [ 203.258640][ T8279] ? __pfx_chrdev_open+0x10/0x10 [ 203.258660][ T8279] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 203.258683][ T8279] do_dentry_open+0x982/0x1530 [ 203.258702][ T8279] ? __pfx_chrdev_open+0x10/0x10 [ 203.258725][ T8279] vfs_open+0x82/0x3f0 [ 203.258742][ T8279] path_openat+0x1de4/0x2cb0 [ 203.258767][ T8279] ? __pfx_path_openat+0x10/0x10 [ 203.258786][ T8279] ? __lock_acquire+0xb8a/0x1c90 [ 203.258803][ T8279] do_filp_open+0x20b/0x470 [ 203.258822][ T8279] ? __pfx_do_filp_open+0x10/0x10 [ 203.258854][ T8279] ? alloc_fd+0x471/0x7d0 [ 203.258879][ T8279] do_sys_openat2+0x11b/0x1d0 [ 203.258894][ T8279] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.258916][ T8279] __x64_sys_openat+0x174/0x210 [ 203.258931][ T8279] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.258954][ T8279] do_syscall_64+0xcd/0xfa0 [ 203.258976][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.258989][ T8279] RIP: 0033:0x7f03ceb8efc9 [ 203.259001][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.259014][ T8279] RSP: 002b:00007f03cfb07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.259028][ T8279] RAX: ffffffffffffffda RBX: 00007f03cede5fa0 RCX: 00007f03ceb8efc9 [ 203.259037][ T8279] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 203.259046][ T8279] RBP: 00007f03cec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.259054][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.259062][ T8279] R13: 00007f03cede6038 R14: 00007f03cede5fa0 R15: 00007fffe2604858 [ 203.259082][ T8279] [ 203.419221][ T8280] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 203.679491][ T8263] kexec: Could not allocate control_code_buffer [ 203.764172][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.441'. [ 204.757145][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.448'. [ 205.614417][ T8328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.618765][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 205.630894][ T8328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.639378][ T8328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.670187][ T8328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.677953][ T8328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 205.830166][ T8332] netlink: 334 bytes leftover after parsing attributes in process `syz.3.453'. [ 205.871914][ T8329] netlink: 330 bytes leftover after parsing attributes in process `syz.2.452'. [ 206.199127][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 206.512130][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.519312][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.534910][ T8325] bridge_slave_0: entered allmulticast mode [ 206.559879][ T8325] bridge_slave_0: entered promiscuous mode [ 206.571775][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.579142][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.590520][ T8325] bridge_slave_1: entered allmulticast mode [ 206.620862][ T8325] bridge_slave_1: entered promiscuous mode [ 206.644217][ T8328] Bluetooth: hci0: command 0x0406 tx timeout [ 206.650521][ T8314] Bluetooth: hci3: command 0x0406 tx timeout [ 206.656539][ T8314] Bluetooth: hci1: command 0x0406 tx timeout [ 206.662602][ T8313] Bluetooth: hci2: command 0x0406 tx timeout [ 206.782818][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.805677][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.924970][ T8325] team0: Port device team_slave_0 added [ 206.967370][ T8325] team0: Port device team_slave_1 added [ 207.007364][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.016101][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.053844][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.066814][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.074093][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.160038][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.332940][ T8325] hsr_slave_0: entered promiscuous mode [ 207.357952][ T8325] hsr_slave_1: entered promiscuous mode [ 207.380322][ T8325] debugfs: 'hsr0' already exists in 'hsr' [ 207.388266][ T8325] Cannot create hsr debugfs directory [ 207.704555][ T8388] netlink: 186 bytes leftover after parsing attributes in process `syz.2.463'. [ 207.720268][ T8371] ima: policy update failed [ 207.731152][ T30] audit: type=1802 audit(4294967387.790:6): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.461" res=0 errno=0 [ 207.778543][ T6057] Bluetooth: hci7: command tx timeout [ 207.945356][ T8325] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.968082][ T8325] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.002622][ T8325] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 208.040262][ T8325] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.064228][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.6.466'. [ 208.077941][ T8394] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 208.086420][ T8394] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 208.318671][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.365975][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.392575][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.399805][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.476266][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.483519][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.182806][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.847447][ T6057] Bluetooth: hci7: command tx timeout [ 210.024151][ T8325] veth0_vlan: entered promiscuous mode [ 210.098610][ T8325] veth1_vlan: entered promiscuous mode [ 210.173152][ T8325] veth0_macvtap: entered promiscuous mode [ 210.194811][ T8325] veth1_macvtap: entered promiscuous mode [ 210.286465][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.324278][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.379452][ T6426] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.388694][ T6426] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.445119][ T6426] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.464319][ T6426] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.698490][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.731285][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.832296][ T7875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.849878][ T7875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.192920][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 211.353379][ T8468] FAULT_INJECTION: forcing a failure. [ 211.353379][ T8468] name failslab, interval 1, probability 0, space 0, times 0 [ 211.366918][ T8468] CPU: 1 UID: 0 PID: 8468 Comm: syz.7.449 Not tainted syzkaller #0 PREEMPT(full) [ 211.366947][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.366955][ T8468] Call Trace: [ 211.366961][ T8468] [ 211.366967][ T8468] dump_stack_lvl+0x16c/0x1f0 [ 211.366992][ T8468] should_fail_ex+0x512/0x640 [ 211.367006][ T8468] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 211.367026][ T8468] should_failslab+0xc2/0x120 [ 211.367040][ T8468] kmem_cache_alloc_noprof+0x75/0x6e0 [ 211.367059][ T8468] ? getname_flags.part.0+0x4c/0x550 [ 211.367078][ T8468] ? getname_flags.part.0+0x4c/0x550 [ 211.367092][ T8468] getname_flags.part.0+0x4c/0x550 [ 211.367108][ T8468] getname_flags+0x93/0xf0 [ 211.367126][ T8468] do_sys_openat2+0xb8/0x1d0 [ 211.367141][ T8468] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.367155][ T8468] ? __fget_files+0x204/0x3c0 [ 211.367178][ T8468] __x64_sys_openat+0x174/0x210 [ 211.367193][ T8468] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.367215][ T8468] do_syscall_64+0xcd/0xfa0 [ 211.367236][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.367250][ T8468] RIP: 0033:0x7f6138b8efc9 [ 211.367261][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.367281][ T8468] RSP: 002b:00007f6139982038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.367296][ T8468] RAX: ffffffffffffffda RBX: 00007f6138de6090 RCX: 00007f6138b8efc9 [ 211.367305][ T8468] RDX: 0000000000189002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 211.367314][ T8468] RBP: 00007f6138c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.367323][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.367331][ T8468] R13: 00007f6138de6128 R14: 00007f6138de6090 R15: 00007ffe9f5ed128 [ 211.367350][ T8468] [ 211.747011][ T8471] FAULT_INJECTION: forcing a failure. [ 211.747011][ T8471] name failslab, interval 1, probability 0, space 0, times 0 [ 211.783958][ T8471] CPU: 1 UID: 0 PID: 8471 Comm: syz.6.480 Not tainted syzkaller #0 PREEMPT(full) [ 211.783995][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.784010][ T8471] Call Trace: [ 211.784017][ T8471] [ 211.784026][ T8471] dump_stack_lvl+0x16c/0x1f0 [ 211.784069][ T8471] should_fail_ex+0x512/0x640 [ 211.784094][ T8471] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 211.784134][ T8471] should_failslab+0xc2/0x120 [ 211.784162][ T8471] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 211.784198][ T8471] ? __dquot_initialize+0x299/0xd50 [ 211.784240][ T8471] ? __d_alloc+0x32/0xae0 [ 211.784296][ T8471] ? __d_alloc+0x32/0xae0 [ 211.784331][ T8471] __d_alloc+0x32/0xae0 [ 211.784374][ T8471] d_alloc_pseudo+0x1c/0xc0 [ 211.784403][ T8471] alloc_file_pseudo+0xcf/0x230 [ 211.784431][ T8471] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 211.784472][ T8471] __shmem_file_setup+0x1a3/0x330 [ 211.784508][ T8471] shmem_zero_setup+0x93/0x1a0 [ 211.784544][ T8471] __mmap_region+0x2076/0x27a0 [ 211.784583][ T8471] ? __pfx___mmap_region+0x10/0x10 [ 211.784615][ T8471] ? finish_task_switch.isra.0+0x21c/0xc10 [ 211.784653][ T8471] ? rcu_is_watching+0x12/0xc0 [ 211.784688][ T8471] ? finish_task_switch.isra.0+0x221/0xc10 [ 211.784722][ T8471] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.784761][ T8471] ? finish_task_switch.isra.0+0x221/0xc10 [ 211.784830][ T8471] ? __pfx___schedule+0x10/0x10 [ 211.784910][ T8471] ? trace_cap_capable+0x18d/0x200 [ 211.784952][ T8471] mmap_region+0x1ab/0x3f0 [ 211.784985][ T8471] ? __get_unmapped_area+0x267/0x440 [ 211.785015][ T8471] do_mmap+0xa3e/0x1210 [ 211.785047][ T8471] ? __pfx_do_mmap+0x10/0x10 [ 211.785074][ T8471] ? __pfx_down_write_killable+0x10/0x10 [ 211.785110][ T8471] vm_mmap_pgoff+0x29e/0x470 [ 211.785143][ T8471] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 211.785178][ T8471] ? __x64_sys_futex+0x1e0/0x4c0 [ 211.785204][ T8471] ? __x64_sys_futex+0x1e9/0x4c0 [ 211.785236][ T8471] ksys_mmap_pgoff+0x7d/0x5c0 [ 211.785260][ T8471] ? xfd_validate_state+0x61/0x180 [ 211.785294][ T8471] ? __pfx_ksys_write+0x10/0x10 [ 211.785337][ T8471] __x64_sys_mmap+0x125/0x190 [ 211.785370][ T8471] do_syscall_64+0xcd/0xfa0 [ 211.785411][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.785437][ T8471] RIP: 0033:0x7f3343b8efc9 [ 211.785460][ T8471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.785483][ T8471] RSP: 002b:00007f33449d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 211.785506][ T8471] RAX: ffffffffffffffda RBX: 00007f3343de5fa0 RCX: 00007f3343b8efc9 [ 211.785522][ T8471] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 211.785537][ T8471] RBP: 00007f3343c11f91 R08: 0000000000000401 R09: 0000000000008000 [ 211.785554][ T8471] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 211.785568][ T8471] R13: 00007f3343de6038 R14: 00007f3343de5fa0 R15: 00007ffeb2896598 [ 211.785604][ T8471] [ 212.102696][ T6057] Bluetooth: hci7: command tx timeout [ 213.686639][ T8504] netlink: 25 bytes leftover after parsing attributes in process `syz.6.488'. [ 213.729153][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 213.745217][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 213.792960][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 213.841459][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 214.165411][ T6057] Bluetooth: hci7: command tx timeout [ 215.426796][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.503'. [ 215.494593][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.503'. [ 216.766131][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 216.861149][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 218.003503][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 218.697527][ T8629] Process accounting resumed [ 220.104426][ T8672] netlink: 334 bytes leftover after parsing attributes in process `syz.2.532'. [ 224.305506][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 224.317761][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 226.912693][ T8312] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 226.923919][ T8312] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 226.932359][ T8312] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 226.940371][ T8312] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 226.954487][ T8312] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 227.242946][ T8750] chnl_net:caif_netlink_parms(): no params data found [ 227.319456][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.326712][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.334523][ T8750] bridge_slave_0: entered allmulticast mode [ 227.342570][ T8750] bridge_slave_0: entered promiscuous mode [ 227.352878][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.360416][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.367786][ T8750] bridge_slave_1: entered allmulticast mode [ 227.375703][ T8750] bridge_slave_1: entered promiscuous mode [ 227.410041][ T8750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.424547][ T8750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.459144][ T8750] team0: Port device team_slave_0 added [ 227.467456][ T8750] team0: Port device team_slave_1 added [ 227.500405][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.507368][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.533981][ T8750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.546454][ T8750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.553429][ T8750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.579580][ T8750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.628092][ T8750] hsr_slave_0: entered promiscuous mode [ 227.635048][ T8750] hsr_slave_1: entered promiscuous mode [ 227.641728][ T8750] debugfs: 'hsr0' already exists in 'hsr' [ 227.647469][ T8750] Cannot create hsr debugfs directory [ 227.799106][ T8750] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 227.809572][ T8750] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 227.820957][ T8750] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 227.832579][ T8750] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 227.868204][ T8750] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.875349][ T8750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.882842][ T8750] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.890042][ T8750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.957669][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.980208][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.988354][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.008128][ T8750] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.023159][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.030344][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.046573][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.053747][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.394298][ T8750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.671900][ T8750] veth0_vlan: entered promiscuous mode [ 228.686493][ T8750] veth1_vlan: entered promiscuous mode [ 228.716015][ T8750] veth0_macvtap: entered promiscuous mode [ 228.727674][ T8750] veth1_macvtap: entered promiscuous mode [ 228.747882][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.759637][ T8750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.779080][ T6063] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.791043][ T6063] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.804724][ T6063] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.814110][ T6063] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.891617][ T6063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.899490][ T6063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.928542][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.938349][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.040274][ T8312] Bluetooth: hci8: command tx timeout [ 230.923374][ T8854] netlink: 338 bytes leftover after parsing attributes in process `syz.8.570'. [ 231.119992][ T8312] Bluetooth: hci8: command tx timeout [ 232.015423][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 232.029924][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 232.963266][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 233.200482][ T6057] Bluetooth: hci8: command tx timeout [ 233.209407][ T6057] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 233.218285][ T6057] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 233.226608][ T6057] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 233.234761][ T6057] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 233.244094][ T6057] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 233.411679][ T8886] chnl_net:caif_netlink_parms(): no params data found [ 233.485652][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.492873][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.503342][ T8886] bridge_slave_0: entered allmulticast mode [ 233.511739][ T8886] bridge_slave_0: entered promiscuous mode [ 233.519845][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.526993][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.534880][ T8886] bridge_slave_1: entered allmulticast mode [ 233.542214][ T8886] bridge_slave_1: entered promiscuous mode [ 233.574925][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.587486][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.621917][ T8886] team0: Port device team_slave_0 added [ 233.631542][ T8886] team0: Port device team_slave_1 added [ 233.660487][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.667921][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.694583][ T8886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.708674][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.715715][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.741677][ T8886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.786373][ T8886] hsr_slave_0: entered promiscuous mode [ 233.793164][ T8886] hsr_slave_1: entered promiscuous mode [ 233.799574][ T8886] debugfs: 'hsr0' already exists in 'hsr' [ 233.806712][ T8886] Cannot create hsr debugfs directory [ 233.959130][ T8886] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 233.974649][ T8886] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 233.986635][ T8886] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 233.997020][ T8886] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 234.032170][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.039361][ T8886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.046892][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.054036][ T8886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.118218][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.136542][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.145018][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.169318][ T8886] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.185876][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.193062][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.214306][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.221476][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.404993][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.616930][ T8886] veth0_vlan: entered promiscuous mode [ 234.631728][ T8886] veth1_vlan: entered promiscuous mode [ 234.664143][ T8886] veth0_macvtap: entered promiscuous mode [ 234.675243][ T8886] veth1_macvtap: entered promiscuous mode [ 234.695918][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.710796][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.726018][ T6063] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.738478][ T6063] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.749192][ T6063] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.761964][ T6063] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.838495][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.857784][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.887401][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.897992][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.283990][ T8312] Bluetooth: hci9: command tx timeout [ 235.290806][ T6057] Bluetooth: hci8: command tx timeout [ 236.648912][ T8950] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 236.669610][ T8952] random: crng reseeded on system resumption [ 236.825441][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.9.591'. [ 237.360802][ T8312] Bluetooth: hci9: command tx timeout [ 238.028022][ T8984] netlink: 334 bytes leftover after parsing attributes in process `syz.9.596'. [ 238.536391][ T6057] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 238.549001][ T6057] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 238.557392][ T6057] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 238.568271][ T6057] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 238.577445][ T6057] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 239.082206][ T9025] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 239.367369][ T9026] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 239.427393][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 239.450917][ T8312] Bluetooth: hci9: command tx timeout [ 239.483033][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 239.754206][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.9.607'. [ 239.910946][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.918204][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.931356][ T9001] bridge_slave_0: entered allmulticast mode [ 239.940663][ T9001] bridge_slave_0: entered promiscuous mode [ 239.950470][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.957806][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.965674][ T9001] bridge_slave_1: entered allmulticast mode [ 239.979487][ T9001] bridge_slave_1: entered promiscuous mode [ 240.046891][ T9063] netlink: 130 bytes leftover after parsing attributes in process `syz.2.609'. [ 240.084514][ T9053] netlink: set zone limit has 8 unknown bytes [ 240.112795][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.139594][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.353165][ T9001] team0: Port device team_slave_0 added [ 240.452482][ T9001] team0: Port device team_slave_1 added [ 240.525924][ T9075] ICMPv6: process `syz.9.612' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 240.618767][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.631061][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.658342][ T8312] Bluetooth: hci10: command tx timeout [ 240.672367][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.718289][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.736500][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.777318][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.788957][ T9081] netlink: 334 bytes leftover after parsing attributes in process `syz.2.613'. [ 240.913700][ T9001] hsr_slave_0: entered promiscuous mode [ 240.921768][ T9001] hsr_slave_1: entered promiscuous mode [ 240.928595][ T9001] debugfs: 'hsr0' already exists in 'hsr' [ 240.937354][ T9001] Cannot create hsr debugfs directory [ 241.172450][ T9001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.285814][ T9001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.471257][ T9001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.521506][ T8312] Bluetooth: hci9: command tx timeout [ 241.574981][ T9001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.598642][ T9119] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 241.909013][ T9001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.956876][ T9001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.999399][ T9001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.015926][ T9001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.146180][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.177848][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.192915][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.200117][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.234069][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.241245][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.568342][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.627891][ T9001] veth0_vlan: entered promiscuous mode [ 242.648213][ T9001] veth1_vlan: entered promiscuous mode [ 242.720369][ T8312] Bluetooth: hci10: command tx timeout [ 242.740225][ T9001] veth0_macvtap: entered promiscuous mode [ 242.777669][ T9001] veth1_macvtap: entered promiscuous mode [ 242.817092][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.844132][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.863474][ T9089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.899825][ T9089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.908576][ T9089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.942712][ T9089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.168381][ T9152] openvswitch: netlink: IP tunnel dst address not specified [ 243.172013][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.195004][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.254363][ T7875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.264329][ T7875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.412335][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 243.445830][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 244.186997][ T9161] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.202037][ T9161] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 244.221294][ T9161] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.227495][ T9161] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.240194][ T9161] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.246424][ T9161] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 244.257367][ T9161] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.264701][ T9161] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 244.278680][ T9161] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.286634][ T9161] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 244.301940][ T9161] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 244.314344][ T9161] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 244.321048][ T9161] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 244.331969][ T9161] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 244.357373][ T9161] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 244.369359][ T9161] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 244.382308][ T9161] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 244.394564][ T9161] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 244.404885][ T9161] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 244.418891][ T9161] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 244.434411][ T9161] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 244.442673][ T9161] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 244.461625][ T9161] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 244.476824][ T9161] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 244.486736][ T9161] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 244.496203][ T9161] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 244.504761][ T9161] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 244.511689][ T9161] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 244.524024][ T9161] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 245.539171][ T8312] Bluetooth: hci0: command 0x0406 tx timeout [ 246.239933][ T8312] Bluetooth: hci1: command 0x0406 tx timeout [ 246.320243][ T8312] Bluetooth: hci5: command 0x0c1a tx timeout [ 246.326381][ T6057] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.335404][ T8312] Bluetooth: hci3: command 0x0406 tx timeout [ 246.341848][ T6850] Bluetooth: hci2: command 0x0406 tx timeout [ 246.374020][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 246.400519][ T8312] Bluetooth: hci7: command 0x0c1a tx timeout [ 246.406663][ T6057] Bluetooth: hci6: command 0x0c1a tx timeout [ 246.484492][ T8312] Bluetooth: hci9: command 0x0c1a tx timeout [ 246.490725][ T6057] Bluetooth: hci8: command 0x0c1a tx timeout [ 246.560505][ T8312] Bluetooth: hci10: command 0x0419 tx timeout [ 246.655328][ T9241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 246.676478][ T9242] netlink: 'syz.9.640': attribute type 1 has an invalid length. [ 247.326223][ T8312] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 247.402214][ T6057] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 247.423509][ T6057] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 247.433518][ T6057] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 247.461805][ T6057] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 247.469657][ T6057] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 247.574699][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.644'. [ 247.600139][ T6057] Bluetooth: hci0: command 0x0406 tx timeout [ 247.651842][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.9.644'. [ 248.235803][ T9258] chnl_net:caif_netlink_parms(): no params data found [ 248.326887][ T6057] Bluetooth: hci1: command 0x0406 tx timeout [ 248.400004][ T6057] Bluetooth: hci3: command 0x0406 tx timeout [ 248.406057][ T6057] Bluetooth: hci4: command 0x0c1a tx timeout [ 248.413453][ T6050] Bluetooth: hci5: command 0x0c1a tx timeout [ 248.419547][ T8312] Bluetooth: hci2: command 0x0406 tx timeout [ 248.480771][ T8312] Bluetooth: hci7: command 0x0c1a tx timeout [ 248.486841][ T8312] Bluetooth: hci6: command 0x0c1a tx timeout [ 248.562120][ T8312] Bluetooth: hci9: command 0x0c1a tx timeout [ 248.563799][ T30] audit: type=1806 audit(4294967437.617:7): xattr=01 res=-22 [ 248.599371][ T9292] netlink: 280 bytes leftover after parsing attributes in process `syz.9.650'. [ 248.641080][ T8312] Bluetooth: hci10: command 0x0419 tx timeout [ 248.661373][ T9258] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.668740][ T9258] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.701554][ T9258] bridge_slave_0: entered allmulticast mode [ 248.712448][ T9258] bridge_slave_0: entered promiscuous mode [ 248.734399][ T9258] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.741803][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.749457][ T9258] bridge_slave_1: entered allmulticast mode [ 248.802574][ T9258] bridge_slave_1: entered promiscuous mode [ 249.056718][ T9258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.084316][ T9258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.176391][ T9258] team0: Port device team_slave_0 added [ 249.251269][ T9258] team0: Port device team_slave_1 added [ 249.511627][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.521307][ T8312] Bluetooth: hci8: command tx timeout [ 249.531044][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.596131][ T9258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.613330][ T9258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.620497][ T9258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.653443][ T9258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.879407][ T9325] FAULT_INJECTION: forcing a failure. [ 249.879407][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 249.901204][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 249.921909][ T9325] CPU: 1 UID: 0 PID: 9325 Comm: syz.1.657 Not tainted syzkaller #0 PREEMPT(full) [ 249.921946][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.921973][ T9325] Call Trace: [ 249.921983][ T9325] [ 249.921993][ T9325] dump_stack_lvl+0x16c/0x1f0 [ 249.922038][ T9325] should_fail_ex+0x512/0x640 [ 249.922063][ T9325] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 249.922100][ T9325] should_failslab+0xc2/0x120 [ 249.922127][ T9325] kmem_cache_alloc_noprof+0x75/0x6e0 [ 249.922160][ T9325] ? net_alloc_generic+0x1e/0x70 [ 249.922183][ T9325] ? copy_net_ns+0xe9/0x690 [ 249.922217][ T9325] ? copy_net_ns+0xe9/0x690 [ 249.922242][ T9325] copy_net_ns+0xe9/0x690 [ 249.922267][ T9325] ? copy_cgroup_ns+0x71/0x6b0 [ 249.922307][ T9325] create_new_namespaces+0x3ea/0xa90 [ 249.922355][ T9325] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 249.922396][ T9325] ksys_unshare+0x45b/0xa40 [ 249.922423][ T9325] ? __pfx_ksys_unshare+0x10/0x10 [ 249.922451][ T9325] ? xfd_validate_state+0x61/0x180 [ 249.922489][ T9325] __x64_sys_unshare+0x31/0x40 [ 249.922515][ T9325] do_syscall_64+0xcd/0xfa0 [ 249.922555][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.922581][ T9325] RIP: 0033:0x7f4d2998efc9 [ 249.922603][ T9325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.922627][ T9325] RSP: 002b:00007f4d2a89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 249.922652][ T9325] RAX: ffffffffffffffda RBX: 00007f4d29be5fa0 RCX: 00007f4d2998efc9 [ 249.922669][ T9325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 249.922686][ T9325] RBP: 00007f4d29a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 249.922711][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.922727][ T9325] R13: 00007f4d29be6038 R14: 00007f4d29be5fa0 R15: 00007ffcf778c138 [ 249.922764][ T9325] [ 249.980592][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 250.000727][ T9258] hsr_slave_0: entered promiscuous mode [ 250.156788][ T9258] hsr_slave_1: entered promiscuous mode [ 250.164124][ T9258] debugfs: 'hsr0' already exists in 'hsr' [ 250.170750][ T9258] Cannot create hsr debugfs directory [ 250.430655][ T9343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 250.462183][ T9344] netlink: set zone limit has 8 unknown bytes [ 250.488935][ T8312] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.497667][ T6057] Bluetooth: hci5: command 0x0c1a tx timeout [ 250.561014][ T8312] Bluetooth: hci6: command 0x0c1a tx timeout [ 250.567122][ T6057] Bluetooth: hci7: command 0x0c1a tx timeout [ 250.617631][ T9338] zswap: compressor @ not available [ 250.642875][ T8312] Bluetooth: hci9: command 0x0c1a tx timeout [ 250.724310][ T8312] Bluetooth: hci10: command 0x0419 tx timeout [ 250.809517][ T9348] netlink: 338 bytes leftover after parsing attributes in process `syz.2.662'. [ 250.844333][ T9258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.014087][ T9258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.168544][ T9258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.509249][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 251.563867][ T9258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.595823][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 251.608099][ T8312] Bluetooth: hci8: command tx timeout [ 251.809191][ T9365] netlink: zone id is out of range [ 251.829532][ T9365] netlink: zone id is out of range [ 251.854755][ T9365] netlink: zone id is out of range [ 251.876421][ T9365] netlink: zone id is out of range [ 251.890167][ T9365] netlink: zone id is out of range [ 251.918459][ T9258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.949525][ T9365] netlink: zone id is out of range [ 251.956277][ T9365] netlink: zone id is out of range [ 251.966907][ T9258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.969799][ T9365] netlink: zone id is out of range [ 251.978947][ T9365] netlink: zone id is out of range [ 252.011895][ T9258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.059015][ T9258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.285770][ T9258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.369107][ T9258] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.393779][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.401047][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.431432][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.438648][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.800195][ T8312] Bluetooth: hci10: command 0x0419 tx timeout [ 252.887848][ T9258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.992213][ T9258] veth0_vlan: entered promiscuous mode [ 253.008970][ T9258] veth1_vlan: entered promiscuous mode [ 253.097223][ T9258] veth0_macvtap: entered promiscuous mode [ 253.118342][ T9258] veth1_macvtap: entered promiscuous mode [ 253.197514][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.237247][ T9258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.458582][ T9088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.499029][ T9088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.560869][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 253.580613][ T9088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.655314][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 253.681377][ T8312] Bluetooth: hci8: command tx timeout [ 253.712386][ T9088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.117214][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.155408][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.243815][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.9.677'. [ 254.285286][ T6702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.304627][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.314128][ T6702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.418916][ T9417] bridge_slave_1 (unregistering): left allmulticast mode [ 254.439865][ T9417] bridge_slave_1 (unregistering): left promiscuous mode [ 254.467047][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.528305][ T9426] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 255.068198][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 255.071708][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 255.775110][ T8312] Bluetooth: hci8: command tx timeout [ 255.781078][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.793063][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.957022][ T9463] FAULT_INJECTION: forcing a failure. [ 255.957022][ T9463] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.981252][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.0.686 Not tainted syzkaller #0 PREEMPT(full) [ 255.981287][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.981311][ T9463] Call Trace: [ 255.981320][ T9463] [ 255.981329][ T9463] dump_stack_lvl+0x16c/0x1f0 [ 255.981371][ T9463] should_fail_ex+0x512/0x640 [ 255.981401][ T9463] _copy_from_iter+0x29f/0x1720 [ 255.981432][ T9463] ? __alloc_skb+0x200/0x380 [ 255.981468][ T9463] ? __pfx__copy_from_iter+0x10/0x10 [ 255.981494][ T9463] ? netlink_autobind.isra.0+0x158/0x370 [ 255.981534][ T9463] netlink_sendmsg+0x820/0xdd0 [ 255.981564][ T9463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.981594][ T9463] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 255.981629][ T9463] ____sys_sendmsg+0xa98/0xc70 [ 255.981660][ T9463] ? copy_msghdr_from_user+0x10a/0x160 [ 255.981698][ T9463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.981744][ T9463] ___sys_sendmsg+0x134/0x1d0 [ 255.981784][ T9463] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.981818][ T9463] ? __lock_acquire+0x622/0x1c90 [ 255.981887][ T9463] __sys_sendmsg+0x16d/0x220 [ 255.981925][ T9463] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.981986][ T9463] do_syscall_64+0xcd/0xfa0 [ 255.982025][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.982050][ T9463] RIP: 0033:0x7f58bcd8efc9 [ 255.982071][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.982094][ T9463] RSP: 002b:00007f58bdc48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.982118][ T9463] RAX: ffffffffffffffda RBX: 00007f58bcfe5fa0 RCX: 00007f58bcd8efc9 [ 255.982135][ T9463] RDX: 0000000000000080 RSI: 0000200000000a80 RDI: 0000000000000003 [ 255.982150][ T9463] RBP: 00007f58bdc48090 R08: 0000000000000000 R09: 0000000000000000 [ 255.982165][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.982180][ T9463] R13: 00007f58bcfe6038 R14: 00007f58bcfe5fa0 R15: 00007ffc8db11aa8 [ 255.982216][ T9463] [ 257.596920][ T9496] zswap: compressor not available [ 257.730429][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 258.420348][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 258.473363][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 258.856185][ T9519] FAULT_INJECTION: forcing a failure. [ 258.856185][ T9519] name failslab, interval 1, probability 0, space 0, times 0 [ 258.884807][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.1.697 Not tainted syzkaller #0 PREEMPT(full) [ 258.884844][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.884858][ T9519] Call Trace: [ 258.884867][ T9519] [ 258.884876][ T9519] dump_stack_lvl+0x16c/0x1f0 [ 258.884918][ T9519] should_fail_ex+0x512/0x640 [ 258.884941][ T9519] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 258.884969][ T9519] should_failslab+0xc2/0x120 [ 258.884995][ T9519] kmem_cache_alloc_noprof+0x75/0x6e0 [ 258.885029][ T9519] ? skb_clone+0x190/0x3f0 [ 258.885059][ T9519] ? skb_clone+0x190/0x3f0 [ 258.885079][ T9519] skb_clone+0x190/0x3f0 [ 258.885104][ T9519] netlink_deliver_tap+0xabd/0xd30 [ 258.885158][ T9519] netlink_unicast+0x64c/0x870 [ 258.885188][ T9519] ? __pfx_netlink_unicast+0x10/0x10 [ 258.885228][ T9519] netlink_sendmsg+0x8c8/0xdd0 [ 258.885259][ T9519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.885289][ T9519] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 258.885324][ T9519] ____sys_sendmsg+0xa98/0xc70 [ 258.885356][ T9519] ? copy_msghdr_from_user+0x10a/0x160 [ 258.885392][ T9519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.885439][ T9519] ___sys_sendmsg+0x134/0x1d0 [ 258.885478][ T9519] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.885513][ T9519] ? __lock_acquire+0x622/0x1c90 [ 258.885583][ T9519] __sys_sendmsg+0x16d/0x220 [ 258.885621][ T9519] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.885682][ T9519] do_syscall_64+0xcd/0xfa0 [ 258.885722][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.885747][ T9519] RIP: 0033:0x7f4d2998efc9 [ 258.885768][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.885792][ T9519] RSP: 002b:00007f4d2a89c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.885816][ T9519] RAX: ffffffffffffffda RBX: 00007f4d29be5fa0 RCX: 00007f4d2998efc9 [ 258.885833][ T9519] RDX: 0000000000000080 RSI: 0000200000000a80 RDI: 0000000000000003 [ 258.885848][ T9519] RBP: 00007f4d2a89c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.885863][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.885878][ T9519] R13: 00007f4d29be6038 R14: 00007f4d29be5fa0 R15: 00007ffcf778c138 [ 258.885914][ T9519] [ 259.751535][ T8312] Bluetooth: hci1: Malformed Event: 0x02 [ 260.263782][ T9538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.514685][ T9544] netlink: 338 bytes leftover after parsing attributes in process `syz.1.702'. [ 260.524701][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.532551][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.959612][ T9552] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 261.866855][ T9575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.710'. [ 263.712905][ T9615] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 264.726848][ T31] INFO: task kworker/u8:0:12 blocked for more than 163 seconds. [ 264.735584][ T31] Not tainted syzkaller #0 [ 264.744615][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.763352][ T31] task:kworker/u8:0 state:D stack:23448 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 264.794847][ T31] Workqueue: netns cleanup_net [ 264.808189][ T31] Call Trace: [ 264.847346][ T31] [ 264.857354][ T31] __schedule+0x1190/0x5de0 [ 264.874471][ T31] ? __lock_acquire+0x622/0x1c90 [ 264.890339][ T31] ? __pfx___schedule+0x10/0x10 [ 264.929562][ T31] ? find_held_lock+0x2b/0x80 [ 265.000145][ T31] ? schedule+0x2d7/0x3a0 [ 265.005486][ T31] schedule+0xe7/0x3a0 [ 265.009564][ T31] schedule_timeout+0x257/0x290 [ 265.015582][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 265.021273][ T31] ? mark_held_locks+0x49/0x80 [ 265.026064][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.031734][ T31] __wait_for_common+0x2fc/0x4e0 [ 265.036718][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 265.042508][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 265.047985][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.056348][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 265.080294][ T31] __flush_workqueue+0x3e2/0x1230 [ 265.085407][ T31] ? __pfx___might_resched+0x10/0x10 [ 265.091138][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 265.097587][ T31] rxrpc_destroy_all_locals+0x40/0x180 [ 265.104706][ T31] rxrpc_exit_net+0x8b/0xc0 [ 265.110592][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 265.116823][ T31] ops_undo_list+0x2ee/0xab0 [ 265.122329][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 265.127741][ T31] ? cleanup_net+0x347/0x8b0 [ 265.135396][ T31] ? idr_destroy+0x62/0x2e0 [ 265.141615][ T31] cleanup_net+0x41b/0x8b0 [ 265.147971][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 265.153585][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.159918][ T31] process_one_work+0x9cf/0x1b70 [ 265.164934][ T31] ? __pfx_netdevice_event_work_handler+0x10/0x10 [ 265.172929][ T31] ? __pfx_process_one_work+0x10/0x10 [ 265.178380][ T31] ? assign_work+0x1a0/0x250 [ 265.183464][ T31] worker_thread+0x6c8/0xf10 [ 265.188116][ T31] ? __pfx_worker_thread+0x10/0x10 [ 265.193682][ T31] kthread+0x3c5/0x780 [ 265.197789][ T31] ? __pfx_kthread+0x10/0x10 [ 265.203525][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.208344][ T31] ? __pfx_kthread+0x10/0x10 [ 265.213012][ T31] ret_from_fork+0x675/0x7d0 [ 265.217631][ T31] ? __pfx_kthread+0x10/0x10 [ 265.222296][ T31] ret_from_fork_asm+0x1a/0x30 [ 265.227095][ T31] [ 265.231039][ T31] [ 265.231039][ T31] Showing all locks held in the system: [ 265.238780][ T31] 3 locks held by kworker/u8:0/12: [ 265.244597][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 265.255094][ T31] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 265.265162][ T31] #2: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 265.275120][ T31] 1 lock held by khungtaskd/31: [ 265.280338][ T31] #0: ffffffff8e3c42e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 265.290336][ T31] 2 locks held by getty/5593: [ 265.295022][ T31] #0: ffff8880310130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 265.305545][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 265.315810][ T31] 1 lock held by syz.1.109/6586: [ 265.320813][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.330295][ T31] 1 lock held by syz.0.175/6899: [ 265.335223][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.345096][ T31] 1 lock held by syz.5.260/7453: [ 265.350120][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.359611][ T31] 2 locks held by kworker/u10:7/7875: [ 265.365762][ T31] #0: ffff888146ab3948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 265.376938][ T31] #1: ffffc9000af77d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 265.388525][ T31] 1 lock held by syz.4.366/7945: [ 265.393588][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.403152][ T31] 1 lock held by syz.7.449/8466: [ 265.408669][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.418257][ T31] 1 lock held by syz.3.523/8643: [ 265.423274][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.432755][ T31] 1 lock held by syz.6.542/8718: [ 265.437710][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.448399][ T31] 1 lock held by syz.8.572/8860: [ 265.453694][ T31] #0: ffff8880850ba488 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 265.464691][ T31] 1 lock held by syz.9.687/9472: [ 265.469769][ T31] #0: ffffffff900e6b30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 265.479326][ T31] [ 265.481729][ T31] ============================================= [ 265.481729][ T31] [ 265.490215][ T31] NMI backtrace for cpu 1 [ 265.490235][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 265.490265][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.490280][ T31] Call Trace: [ 265.490288][ T31] [ 265.490298][ T31] dump_stack_lvl+0x116/0x1f0 [ 265.490340][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 265.490371][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 265.490400][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 265.490434][ T31] watchdog+0xf3f/0x1170 [ 265.490470][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.490502][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.490551][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.490588][ T31] ? __kthread_parkme+0x19e/0x250 [ 265.490627][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.490657][ T31] kthread+0x3c5/0x780 [ 265.490692][ T31] ? __pfx_kthread+0x10/0x10 [ 265.490721][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.490753][ T31] ? __pfx_kthread+0x10/0x10 [ 265.490782][ T31] ret_from_fork+0x675/0x7d0 [ 265.490808][ T31] ? __pfx_kthread+0x10/0x10 [ 265.490836][ T31] ret_from_fork_asm+0x1a/0x30 [ 265.490880][ T31] [ 265.490889][ T31] Sending NMI from CPU 1 to CPUs 0: [ 265.613145][ C0] NMI backtrace for cpu 0 [ 265.613164][ C0] CPU: 0 UID: 0 PID: 9192 Comm: kworker/u10:33 Not tainted syzkaller #0 PREEMPT(full) [ 265.613194][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.613210][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 265.613238][ C0] RIP: 0010:stack_access_ok+0x53/0x200 [ 265.613272][ C0] Code: 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c 8d 6b 10 4c 8b 7b 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 <0f> 85 52 01 00 00 48 89 da 48 8b 4b 10 48 b8 00 00 00 00 00 fc ff [ 265.613296][ C0] RSP: 0018:ffffc90000006f50 EFLAGS: 00000246 [ 265.613313][ C0] RAX: dffffc0000000000 RBX: ffffc90000007000 RCX: ffffffff917d2374 [ 265.613329][ C0] RDX: 1ffff92000000e02 RSI: ffffc9002a787c20 RDI: ffffc90000007000 [ 265.613346][ C0] RBP: ffffc9002a787c20 R08: 0000000000000001 R09: 0000000000000000 [ 265.613360][ C0] R10: 0000000000000000 R11: 000000000005f656 R12: 0000000000000008 [ 265.613375][ C0] R13: ffffc90000007010 R14: ffffc90000007008 R15: ffffc9002a780000 [ 265.613391][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 265.613413][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.613429][ C0] CR2: 00007f4d29bb3ad8 CR3: 00000000760c6000 CR4: 00000000003526f0 [ 265.613444][ C0] Call Trace: [ 265.613451][ C0] [ 265.613463][ C0] unwind_next_frame+0x15c5/0x20a0 [ 265.613493][ C0] ? nsim_dev_trap_report_work+0x2b1/0xcf0 [ 265.613518][ C0] ? irq_exit_rcu+0x9/0x30 [ 265.613550][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 265.613586][ C0] arch_stack_walk+0x94/0x100 [ 265.613618][ C0] ? process_one_work+0x9cf/0x1b70 [ 265.613649][ C0] stack_trace_save+0x8e/0xc0 [ 265.613680][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 265.613715][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 265.613739][ C0] kasan_save_stack+0x33/0x60 [ 265.613772][ C0] ? kasan_save_stack+0x33/0x60 [ 265.613803][ C0] ? kasan_save_track+0x14/0x30 [ 265.613835][ C0] ? __kasan_save_free_info+0x3b/0x60 [ 265.613862][ C0] ? __kasan_slab_free+0x5f/0x80 [ 265.613882][ C0] ? kfree+0x2b8/0x6d0 [ 265.613907][ C0] ? ieee80211_inform_bss+0x77c/0x1140 [ 265.613935][ C0] ? cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 265.613971][ C0] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 265.614011][ C0] ? cfg80211_inform_bss_frame_data+0x26f/0x750 [ 265.614045][ C0] ? ieee80211_bss_info_update+0x310/0xab0 [ 265.614072][ C0] ? ieee80211_scan_rx+0x4cf/0xb30 [ 265.614102][ C0] ? ieee80211_rx_list+0x1b9b/0x2ab0 [ 265.614132][ C0] ? ieee80211_rx_napi+0xdc/0x410 [ 265.614162][ C0] ? ieee80211_handle_queued_frames+0xd5/0x130 [ 265.614188][ C0] ? tasklet_action_common+0x284/0x400 [ 265.614221][ C0] ? handle_softirqs+0x219/0x8e0 [ 265.614252][ C0] ? __irq_exit_rcu+0x109/0x170 [ 265.614282][ C0] ? irq_exit_rcu+0x9/0x30 [ 265.614312][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 265.614345][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.614371][ C0] ? clear_page_erms+0xb/0x20 [ 265.614394][ C0] ? post_alloc_hook+0x135/0x230 [ 265.614420][ C0] ? get_page_from_freelist+0x10a3/0x3a30 [ 265.614449][ C0] ? __alloc_frozen_pages_noprof+0x25f/0x2470 [ 265.614479][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 265.614501][ C0] ? new_slab+0x24a/0x360 [ 265.614525][ C0] ? ___slab_alloc+0xdc4/0x1ae0 [ 265.614550][ C0] ? __slab_alloc.constprop.0+0x63/0x110 [ 265.614577][ C0] ? __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 265.614612][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 265.614637][ C0] ? __alloc_skb+0x166/0x380 [ 265.614667][ C0] ? nsim_dev_trap_report_work+0x2b1/0xcf0 [ 265.614702][ C0] kasan_save_track+0x14/0x30 [ 265.614735][ C0] __kasan_save_free_info+0x3b/0x60 [ 265.614763][ C0] __kasan_slab_free+0x5f/0x80 [ 265.614785][ C0] kfree+0x2b8/0x6d0 [ 265.614809][ C0] ? ieee80211_inform_bss+0x77c/0x1140 [ 265.614840][ C0] ? ieee80211_inform_bss+0x77c/0x1140 [ 265.614867][ C0] ieee80211_inform_bss+0x77c/0x1140 [ 265.614898][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 265.614930][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 265.614966][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 265.615001][ C0] cfg80211_inform_single_bss_data+0x8ea/0x1df0 [ 265.615036][ C0] ? find_held_lock+0x2b/0x80 [ 265.615068][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 265.615104][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.615154][ C0] ? cfg80211_inform_bss_data+0x22b/0x3be0 [ 265.615188][ C0] cfg80211_inform_bss_data+0x22b/0x3be0 [ 265.615223][ C0] ? mark_held_locks+0x49/0x80 [ 265.615246][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.615278][ C0] ? ieee80211_rx_handlers+0xe7f/0x9a60 [ 265.615308][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 265.615341][ C0] ? ieee80211_rx_handlers+0xe7f/0x9a60 [ 265.615373][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 265.615412][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 265.615436][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 265.615468][ C0] ? stack_trace_save+0x8e/0xc0 [ 265.615499][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 265.615533][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 265.615563][ C0] ? __lock_acquire+0x622/0x1c90 [ 265.615588][ C0] ? ieee80211_prepare_and_rx_handle+0x1ac8/0x76b0 [ 265.615625][ C0] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 265.615666][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 265.615696][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 265.615729][ C0] ? find_held_lock+0x2b/0x80 [ 265.615758][ C0] ? find_held_lock+0x2b/0x80 [ 265.615790][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 265.615822][ C0] ieee80211_scan_rx+0x4cf/0xb30 [ 265.615849][ C0] ? ieee80211_clean_skb+0x1a6/0x740 [ 265.615880][ C0] ieee80211_rx_list+0x1b9b/0x2ab0 [ 265.615916][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 265.615947][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 265.615990][ C0] ieee80211_rx_napi+0xdc/0x410 [ 265.616021][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 265.616052][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.616085][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.616120][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 265.616148][ C0] tasklet_action_common+0x284/0x400 [ 265.616189][ C0] handle_softirqs+0x219/0x8e0 [ 265.616223][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 265.616259][ C0] __irq_exit_rcu+0x109/0x170 [ 265.616290][ C0] irq_exit_rcu+0x9/0x30 [ 265.616321][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 265.616354][ C0] [ 265.616361][ C0] [ 265.616369][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.616395][ C0] RIP: 0010:clear_page_erms+0xb/0x20 [ 265.616420][ C0] Code: 48 8d 7f 40 75 d9 90 e9 d3 4b 04 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 aa c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 [ 265.616442][ C0] RSP: 0018:ffffc9002a787470 EFLAGS: 00010246 [ 265.616459][ C0] RAX: 0000000000000000 RBX: ffff88808942d000 RCX: 00000000000007c0 [ 265.616475][ C0] RDX: fffffbfff1bb40aa RSI: fffffbfff1bb40a8 RDI: ffff88808942d840 [ 265.616490][ C0] RBP: ffffea0002250a00 R08: 0000000000001000 R09: 0000000000000000 [ 265.616505][ C0] R10: ffffed1011285000 R11: dffffc0000000000 R12: 00000000000d2820 [ 265.616520][ C0] R13: ffffea0002250c00 R14: 0000000000000003 R15: ffffea0002250b40 [ 265.616544][ C0] post_alloc_hook+0x135/0x230 [ 265.616573][ C0] get_page_from_freelist+0x10a3/0x3a30 [ 265.616610][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 265.616635][ C0] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 265.616666][ C0] ? find_held_lock+0x2b/0x80 [ 265.616696][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 265.616728][ C0] ? unwind_next_frame+0x3fe/0x20a0 [ 265.616757][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 265.616781][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 265.616812][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 265.616843][ C0] ? arch_stack_walk+0x94/0x100 [ 265.616875][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 265.616902][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.616933][ C0] ? policy_nodemask+0xea/0x4e0 [ 265.616957][ C0] alloc_pages_mpol+0x1fb/0x550 [ 265.616986][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 265.617009][ C0] ? get_freelist+0x1a8/0x1e0 [ 265.617032][ C0] ? find_held_lock+0x2b/0x80 [ 265.617063][ C0] new_slab+0x24a/0x360 [ 265.617089][ C0] ___slab_alloc+0xdc4/0x1ae0 [ 265.617117][ C0] ? __alloc_skb+0x166/0x380 [ 265.617153][ C0] ? __alloc_skb+0x166/0x380 [ 265.617184][ C0] ? __slab_alloc.constprop.0+0x63/0x110 [ 265.617211][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 265.617242][ C0] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 265.617277][ C0] ? __alloc_skb+0x166/0x380 [ 265.617307][ C0] ? rcu_watching_snap_stopped_since+0x80/0x110 [ 265.617343][ C0] ? kmalloc_reserve+0xef/0x2c0 [ 265.617367][ C0] kmalloc_reserve+0xef/0x2c0 [ 265.617393][ C0] __alloc_skb+0x166/0x380 [ 265.617424][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 265.617455][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 265.617482][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 265.617514][ C0] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 265.617545][ C0] process_one_work+0x9cf/0x1b70 [ 265.617578][ C0] ? __pfx_process_one_work+0x10/0x10 [ 265.617610][ C0] ? assign_work+0x1a0/0x250 [ 265.617636][ C0] worker_thread+0x6c8/0xf10 [ 265.617670][ C0] ? __pfx_worker_thread+0x10/0x10 [ 265.617697][ C0] kthread+0x3c5/0x780 [ 265.617722][ C0] ? __pfx_kthread+0x10/0x10 [ 265.617748][ C0] ? rcu_is_watching+0x12/0xc0 [ 265.617778][ C0] ? __pfx_kthread+0x10/0x10 [ 265.617803][ C0] ret_from_fork+0x675/0x7d0 [ 265.617829][ C0] ? __pfx_kthread+0x10/0x10 [ 265.617853][ C0] ret_from_fork_asm+0x1a/0x30 [ 265.617885][ C0] [ 265.642091][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 265.642115][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 265.642146][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 265.642162][ T31] Call Trace: [ 265.642176][ T31] [ 265.642186][ T31] dump_stack_lvl+0x3d/0x1f0 [ 265.642229][ T31] vpanic+0x640/0x6f0 [ 265.642260][ T31] panic+0xca/0xd0 [ 265.642285][ T31] ? __pfx_panic+0x10/0x10 [ 265.642313][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 265.642346][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 265.642378][ T31] ? watchdog+0xe48/0x1170 [ 265.642409][ T31] ? watchdog+0xe3b/0x1170 [ 265.642440][ T31] watchdog+0xe59/0x1170 [ 265.642476][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.642510][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.642538][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.642595][ T31] ? __kthread_parkme+0x19e/0x250 [ 265.642633][ T31] ? __pfx_watchdog+0x10/0x10 [ 265.642665][ T31] kthread+0x3c5/0x780 [ 265.642692][ T31] ? __pfx_kthread+0x10/0x10 [ 265.642722][ T31] ? rcu_is_watching+0x12/0xc0 [ 265.642754][ T31] ? __pfx_kthread+0x10/0x10 [ 265.642784][ T31] ret_from_fork+0x675/0x7d0 [ 265.642812][ T31] ? __pfx_kthread+0x10/0x10 [ 265.642840][ T31] ret_from_fork_asm+0x1a/0x30 [ 265.642882][ T31] [ 266.690525][ T31] Kernel Offset: disabled [ 266.694853][ T31] Rebooting in 86400 seconds..