last executing test programs: 18.78152982s ago: executing program 3 (id=100): socket(0xa, 0x1, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open$auto(0x0, 0x7e, 0x9, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1d, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 17.788582282s ago: executing program 3 (id=103): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async) timer_create$auto(0x3, 0x0, 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd700002dcdf2503000000040008"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x8000000000000000, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ffffffff7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x48816) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x4000000000e983, 0x8000000000000df, 0xeb1, r0, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) sched_get_priority_min$auto(0x40) (async) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) (async) socket(0x6, 0x2, 0x80000000) (async) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) 16.790345095s ago: executing program 3 (id=105): r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x54080, 0x0) close_range$auto(r0, r0, 0x20000) r1 = socket(0x2b, 0x3, 0x0) write$auto(r1, &(0x7f0000000140)='/proc/self/oom_adj\x00', 0x9) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x408008, 0x4, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x84, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, r3, 0x0, 0x1000, 0xf) fcntl$auto(r3, 0x408, 0xffffffff80000000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 14.70877003s ago: executing program 3 (id=111): socket(0xa, 0x1, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open$auto(0x0, 0x7e, 0x9, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1d, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 13.602427697s ago: executing program 3 (id=114): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x400180, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000180), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20044810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x100, 0x0) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) socket(0x18, 0x5, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000001}, 0x4880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0) 12.129929906s ago: executing program 3 (id=122): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000340), 0x10800, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x6, 0x80000000, 0xaef, 0x95f4da0a, 0x4461, 0xaa8f, 0x62, 0x80000000, 0x10000000000004, 0x400000006d3e, 0x5, 0x5, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x80, 0x400008, 0x4df, 0x18, 0xffffffffffffffff, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45b, 0x7c, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compaction_proactiveness\x00', 0x2800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(r1, 0x0, 0x7e) r2 = socket(0xa, 0x80000, 0x5) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="040026bd7000fbdbdf2510000000040008010400460006009500060000000600ab000254e7d37245d06ab05b0000000500890015000000"], 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x1) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) r4 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x2, 0x0) writev$auto(r4, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) close_range$auto(0x2, 0x8, 0x0) getpgrp(0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) clone$auto(0x35c25372, 0xf, 0x0, 0x0, 0x2) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x60282, 0x0) msgctl$auto_IPC_INFO(0x44, 0x3, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2, 0x57e, 0xffff8001}, 0x0, 0x0, 0x0, 0x9, 0x400, 0xfffffffffffffff9, 0x2, 0x18, 0x0, 0xfff8}) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) write$auto(r5, 0x0, 0x100082) 6.385868058s ago: executing program 0 (id=141): unshare$auto(0x40000080) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000004, 0x8}) adjtimex$auto(&(0x7f0000000280)={0xf, 0x0, 0xb, 0x100000001, 0x7c, 0x1, 0x2, 0x0, 0xe, 0x0, 0x10001, {0xf, 0x6}, 0x7ffffffffffffffe, 0x3a9d, 0x5, 0xb, 0x0, 0x4, 0x1, 0x7, 0x7, 0x5, 0x1015c8}) adjtimex$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000040)={0x1ff, 0x0, 0x4, 0x2, 0x5, 0x2, 0x3, 0x0, 0x0, 0x9b, 0x4, {0x81, 0x3}, 0x7f, 0x9, 0x9, 0xe5c6, 0x0, 0x5, 0x1, 0x2, 0x6, 0x3, 0x9}) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) set_mempolicy_home_node$auto(0x0, 0x10001, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6e) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) prctl$auto(0x3e, 0x100000000002002, 0x0, 0x80001, 0x0) unshare$auto(0x40000080) r0 = clone3$auto(&(0x7f0000000140)={0x2, 0xb54f, 0x7, 0xb, 0x9, 0xe4, 0x7ff, 0xb, 0x0, 0x4, 0x7fffffffffffffff}, 0x100000001) waitid$auto_P_PGID(0x2, r0, &(0x7f00000001c0)={@_si_pad}, 0xd20, &(0x7f0000000380)={{0x100000000, 0x8000000000000001}, {0x7, 0xd}, 0x90d, 0x0, 0x3, 0x80000001, 0x1, 0x80000001, 0x6, 0x1, 0x1, 0x3ff, 0x0, 0x0, 0x6, 0xa8}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 5.622136604s ago: executing program 0 (id=142): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r1, 0x2284, 0x0) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r2, 0x6, 0xffffffffffffffff) ioctl$auto(0x20000000000003, 0x8946, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x753, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x40000b}, 0xfff}, 0x5, 0x311) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x20681, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x40008, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00"}, 0x6, 0x8, 0x7, @raw=0x1, @enumerated={0x4, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x9e, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f00000000c0)={@inferred=r6, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)="f4", 0x1) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) add_key$auto(&(0x7f0000000040)='\xfe\xff$\x9aS8\x93\xa0\xde\xf3#y\xf9;\xe2B~j\x13\xa8\x83b\xc6hSP\xba', &(0x7f0000000000), 0x0, 0x7aef, 0x30) 4.565596579s ago: executing program 0 (id=146): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x40880, 0x0) r1 = socket(0x18, 0x80000, 0x0) connect$auto(r1, 0x0, 0x1e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4610, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r7, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x68a80, 0x0) mmap$auto(0x100000000, 0x2020007, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, r2, 0x7) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0x0, 0x2}, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r9 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r9, 0x40383d0c, 0x0) unshare$auto(0x40000080) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) 3.112031038s ago: executing program 2 (id=150): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') r0 = socket(0x1e, 0x2, 0x0) getsockopt$auto(r0, 0x10f, 0x84, 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x0, 0x5, 0x4, 0x0) 2.802336904s ago: executing program 1 (id=151): r0 = prctl$auto(0x53564d41, 0x7, 0xffffffffffffffff, 0x3, 0x80000000f4ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002e00), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x101082, 0x0) r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r1, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/66, 0x7f) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mem/full/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/58, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x40402, 0x0) write$auto(0x3, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), r6) read$auto(0x3, 0x0, 0x9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r3) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), r3) 2.65636621s ago: executing program 2 (id=152): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x1}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x73}]}, 0x50}, 0x1, 0x0, 0x0, 0x44048020}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB='$\b\x00U', @ANYRES16=r0, @ANYBLOB="000229bd7000fedbdf2514000000080004000a0000000800060001000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000811) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x1}, 0x789dec78, &(0x7f0000000040)={0x5, 0x2}, &(0x7f0000000080)={0x7}, 0x8) write$auto_v4l2_fops_v4l2_dev(r3, &(0x7f00000000c0)="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", 0x1000) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/clear_refs\x00', 0x480300, 0x0) close_range$auto(r3, r4, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001240), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001280)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000012c0)={'caif0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'syzkaller1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r5, &(0x7f0000001440)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="000328bd7000fedbdf250300000008000800", @ANYRES32=r7, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r8, @ANYBLOB="540001860000000800010009000000080002005abb00000800010097730000080002000700000008000100fb96bb18080002001400000008000200830900000800010009a2030034000180080002000500000008000100ffff0000080002000000700008000100fcffffff08000100ffffffff080001000700000008000800"/140, @ANYRES32=r9, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 2.530044143s ago: executing program 1 (id=153): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x102, 0x0) write$auto_proc_fail_nth_operations_base(r0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r1 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0xb, 0x0, 0x40, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0xebd, 0xfffffffffffffffa, 0x40) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2082, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r4) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, 0x0, 0x400c080) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x487, 0x400, 0x9}]}) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r7, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='S', 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) getsockopt$auto(r1, 0x5, 0x7, 0xfffffffffffffffe, 0x0) 2.426319542s ago: executing program 2 (id=154): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r1, 0x2284, 0x0) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x17f, 0x7, 0xd, 0x5, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000004, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r2, 0x6, 0xffffffffffffffff) ioctl$auto(0x20000000000003, 0x8946, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x753, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x40000b}, 0xfff}, 0x5, 0x311) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x20681, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x40008, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00"}, 0x6, 0x8, 0x7, @raw=0x1, @enumerated={0x4, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x9e, 0x5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f00000000c0)={@inferred=r6, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)="f4", 0x1) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) add_key$auto(&(0x7f0000000040)='\xfe\xff$\x9aS8\x93\xa0\xde\xf3#y\xf9;\xe2B~j\x13\xa8\x83b\xc6hSP\xba', &(0x7f0000000000), 0x0, 0x7aef, 0x30) 1.750302518s ago: executing program 1 (id=155): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xff69, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010a2bbd7000fbdbdf25010000000e0004004e2d", @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x40d4) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x80002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x6, 0x9}, 0x7f}, 0x803, 0x0) 1.376660895s ago: executing program 0 (id=156): madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r0) semctl$auto_IPC_INFO(0xffc9, 0xfffff801, 0x3, 0xfffffffffffffffa) mlockall$auto(0x5) getsockopt$auto(0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) statmount$auto(0x0, 0x0, 0x9, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/devspec\x00', 0x101000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/devspec\x00', 0x101000, 0x0) read$auto(0x3, 0x0, 0x80) mprotect$auto(0x200000000004, 0x80611e, 0x8008) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(0xffffffffffffffff, 0x1, &(0x7f0000000240)='\x01\xe7\x95\x13\x89C\xa1\xb6\xa4\xd8\xec\x8aT\x9f\xc9\x82\x1bco\xb1\xd5P\x15\xa55G;\x80\x99g\xd7\xaa/L\xb2\xb3\tW\x91\xcb\rkC\xf5\xff\xc6[`\xc5\xcb=i\xd5\xfb\xe6m\x83!\x8e\xd6\xcf\x96\xfe\xa3\xaa@m\xe2]\x11\x9fX\x16\r', &(0x7f0000000080)="10f1341ffcab01a7ef3d969bd2771a4f8fad24999d7f0c0000000012efd37c5ab05d0d00000000000000bfcdafe7358876c2", 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x2003f0, 0x15) preadv$auto(0x40000000000003, 0x0, 0x6, 0x3f, 0x5) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) socket(0x2, 0x3, 0xa) (async) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x30, 0x0, &(0x7f0000000140)=0x402) (async) getsockopt$auto(r3, 0x0, 0x30, 0x0, &(0x7f0000000140)=0x402) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, &(0x7f00000000c0)={&(0x7f00000008c0), 0x9}, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) 1.376204945s ago: executing program 1 (id=157): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x110) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, 0x0, 0x200) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x2400, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/swaps\x00', 0x2a0500, 0x0) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x108800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x4, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0xe7cd654cc22ed4b4, 0x0) 898.314776ms ago: executing program 0 (id=158): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4000040) r4 = socket(0xf, 0x3, 0x2) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r6 = socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0x20c, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x12000400005, 0xdf, 0x9b72, 0x2, 0x2) mprotect$auto(0x110c238000, 0x1, 0x3) select$auto(0xab, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffff46a, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d42, 0x6, 0x4000000000002, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) dup3$auto(r6, r6, 0xa) r7 = getpgid$auto(0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), r8) fcntl$auto(r4, 0x7, r7) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0x8, 0x0) 855.135386ms ago: executing program 2 (id=159): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_adj\x00', 0x28400, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) open_by_handle_at$auto(r1, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) writev$auto(r0, &(0x7f0000000180)={0x0, 0x200}, 0x3) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) 798.791719ms ago: executing program 1 (id=160): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/event-fork\x00', 0x141602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x19, 0x10000000000005, 0x100008, 0x6, 0x10005) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getsid$auto(0x0) wait4$auto(r1, 0x0, 0x2, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8953, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) unlink$auto(&(0x7f0000000080)='./file0\x00') read$auto(0x3, 0x0, 0x80) getrusage$auto(0x5, &(0x7f00000000c0)={{0x2, 0x3}, {0xffff, 0x3}, 0x4, 0x4, 0x352d, 0x7f, 0x2, 0x3, 0x8, 0x81, 0x8000000000000001, 0x2800000000000000, 0x7fffffff, 0xff, 0xfffffffffffffffb, 0x7}) 703.23583ms ago: executing program 2 (id=161): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2}, 0x1fe, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fdatasync$auto(r0) ioctl$auto_KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000140)={0x5}) 235.552686ms ago: executing program 2 (id=162): socket(0xa, 0x1, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r0, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 109.765095ms ago: executing program 0 (id=163): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x2, 0x400008, 0x0, 0x9b72, 0xffffffffffffffff, 0xbfff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) shmctl$auto_IPC_STAT(0x1, 0x2, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000b2abd7000fddbdf252a0000001f0016001c3093494b6b6374313f959fc48606c1e73a99e76dacb2eb4910d40006000006000a00880d00006a08fd6db08a2d41f2ae36dac4185105de567737cc9594c030f55e4be915d1a9bfae6f797f7c7a97f9b4dc6cb3d594af7405fda2181ca646affc2a4e96e152246e4770bcc50af1a7ba41fcfd4c17dbfd0632a7b1148160972815c61542c39cbb387222e422374e290f085ac3c61a21355ddfe4c4340f6d05738beda7c8fe8be3545db49e5f10103aec03a68d"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) sendmsg$auto_IEEE802154_LIST_PHY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000ffdbdf252000000013ede68e0500130008000000050029000100000008002400"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4c040) mmap$auto(0x0, 0x408, 0x3, 0x20000000eb1, 0x401, 0x4000008000) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) read$auto(r3, 0x0, 0x1000000020) setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x20000) ioctl$auto_TUNGETIFF(r2, 0x800454d2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x105c0, 0x0) add_key$auto(&(0x7f00000000c0)='\x06\x06\xff\x86E;\x97d\x14P\x8a\x80\x83\x9d+(\\\xee\xab\xddI\xc8fc^\x16\x05k\x1dV{\xb5\x97^z@\xf7\x89\xb1\x97MNA\'\xe6o\xc1L\x1d\xac\x80\x87\x8e\xd5AN\xcd\xe9\v~\xd3\xc0\xc7h\xbe\xec\xdb\x9c\x9bJs\x90i\x16\xac^<\b\xe8!\x91\xb9*3l\x90\xfb\x88#\xf4\xf8\xd2w\xc5I\xae\x87\xcd__R\xa9\xaa\xdd\x14s\x00'/119, 0x0, &(0x7f0000000240), 0x2, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fanotify_init$auto(0x602, 0x1) unshare$auto(0x42) r4 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r4, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') 0s ago: executing program 1 (id=164): openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x80800, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async) socket(0x1e, 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x8eba8eb442f05cb1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rpc/auth.rpcsec.context/flush\x00', 0x8f3b7a51b8162d21, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/tsf\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) writev$auto(0x3, 0x0, 0x8) (async) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x4000000) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/arch_status\x00', 0x8203, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2a401, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 97.055776][ T976] cfg80211: failed to load regulatory.db [ 98.531399][ T5819] cgroup: Unknown subsys name 'net' [ 98.708608][ T5819] cgroup: Unknown subsys name 'cpuset' [ 98.718100][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.672787][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.916085][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.933373][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.953380][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.962477][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.973405][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.999176][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.010046][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.033675][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.054127][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.074471][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.082911][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.113152][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.123353][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.131674][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.136943][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.139842][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.149827][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.161874][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.162135][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.177400][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.678749][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 103.951881][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 103.992312][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 104.058644][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.068596][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.076171][ T5833] bridge_slave_0: entered allmulticast mode [ 104.085462][ T5833] bridge_slave_0: entered promiscuous mode [ 104.120373][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 104.140000][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.147262][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.154678][ T5833] bridge_slave_1: entered allmulticast mode [ 104.162224][ T5833] bridge_slave_1: entered promiscuous mode [ 104.345680][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.352918][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.360775][ T5836] bridge_slave_0: entered allmulticast mode [ 104.368725][ T5836] bridge_slave_0: entered promiscuous mode [ 104.379979][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.395718][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.402927][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.410257][ T5839] bridge_slave_0: entered allmulticast mode [ 104.418716][ T5839] bridge_slave_0: entered promiscuous mode [ 104.427372][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.434770][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.441971][ T5836] bridge_slave_1: entered allmulticast mode [ 104.450313][ T5836] bridge_slave_1: entered promiscuous mode [ 104.459369][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.491754][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.499062][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.506753][ T5839] bridge_slave_1: entered allmulticast mode [ 104.514840][ T5839] bridge_slave_1: entered promiscuous mode [ 104.624331][ T5833] team0: Port device team_slave_0 added [ 104.648241][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.666694][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.679323][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.690977][ T5833] team0: Port device team_slave_1 added [ 104.697699][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.705309][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.712647][ T5843] bridge_slave_0: entered allmulticast mode [ 104.720418][ T5843] bridge_slave_0: entered promiscuous mode [ 104.731295][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.787402][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.794718][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.802576][ T5843] bridge_slave_1: entered allmulticast mode [ 104.810684][ T5843] bridge_slave_1: entered promiscuous mode [ 104.865316][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.872319][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.898378][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.930012][ T5839] team0: Port device team_slave_0 added [ 104.939569][ T5836] team0: Port device team_slave_0 added [ 104.949869][ T5836] team0: Port device team_slave_1 added [ 104.956625][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.964090][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.990909][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.028549][ T5839] team0: Port device team_slave_1 added [ 105.068072][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.075182][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.101569][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.118057][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.134300][ T5845] Bluetooth: hci0: command tx timeout [ 105.158875][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.166016][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.192718][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.207477][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.213557][ T5845] Bluetooth: hci3: command tx timeout [ 105.220635][ T5141] Bluetooth: hci2: command tx timeout [ 105.222205][ T5845] Bluetooth: hci1: command tx timeout [ 105.277010][ T5833] hsr_slave_0: entered promiscuous mode [ 105.283950][ T5833] hsr_slave_1: entered promiscuous mode [ 105.306885][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.316522][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.342892][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.356190][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.363480][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.389931][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.466495][ T5836] hsr_slave_0: entered promiscuous mode [ 105.472976][ T5836] hsr_slave_1: entered promiscuous mode [ 105.479251][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.487803][ T5836] Cannot create hsr debugfs directory [ 105.515359][ T5843] team0: Port device team_slave_0 added [ 105.567136][ T5843] team0: Port device team_slave_1 added [ 105.640111][ T5839] hsr_slave_0: entered promiscuous mode [ 105.647024][ T5839] hsr_slave_1: entered promiscuous mode [ 105.654368][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.661974][ T5839] Cannot create hsr debugfs directory [ 105.699130][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.706511][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.732607][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.778401][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.785914][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.812066][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.001030][ T5843] hsr_slave_0: entered promiscuous mode [ 106.007613][ T5843] hsr_slave_1: entered promiscuous mode [ 106.018930][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.027133][ T5843] Cannot create hsr debugfs directory [ 106.290145][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.305302][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.329978][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.365552][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.451801][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.474951][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.506638][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.531192][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.591437][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.610857][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.637756][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.651888][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.781270][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.805821][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.821698][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.835273][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.847653][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.911876][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.950295][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.957663][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.999512][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.006749][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.021991][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.095290][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.135024][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.142209][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.164879][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.172057][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.213321][ T5845] Bluetooth: hci0: command tx timeout [ 107.262665][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.293396][ T5845] Bluetooth: hci2: command tx timeout [ 107.294068][ T5141] Bluetooth: hci3: command tx timeout [ 107.304190][ T5845] Bluetooth: hci1: command tx timeout [ 107.378215][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.411904][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.437566][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.444820][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.465659][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.472827][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.577891][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.650812][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.658037][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.695555][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.702768][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.816324][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.969855][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.049997][ T5833] veth0_vlan: entered promiscuous mode [ 108.081251][ T5833] veth1_vlan: entered promiscuous mode [ 108.278634][ T5836] veth0_vlan: entered promiscuous mode [ 108.292093][ T5833] veth0_macvtap: entered promiscuous mode [ 108.326998][ T5833] veth1_macvtap: entered promiscuous mode [ 108.342779][ T5836] veth1_vlan: entered promiscuous mode [ 108.416464][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.440423][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.451962][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.480770][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.506855][ T5836] veth0_macvtap: entered promiscuous mode [ 108.518451][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.528489][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.537609][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.546553][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.563997][ T5836] veth1_macvtap: entered promiscuous mode [ 108.652100][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.664637][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.677024][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.724153][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.737572][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.750125][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.786027][ T5839] veth0_vlan: entered promiscuous mode [ 108.809289][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.818964][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.825779][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.836904][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.839255][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.856511][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.870472][ T5843] veth0_vlan: entered promiscuous mode [ 108.929805][ T5839] veth1_vlan: entered promiscuous mode [ 108.946570][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.949608][ T5843] veth1_vlan: entered promiscuous mode [ 108.960887][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.092794][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.114860][ T5843] veth0_macvtap: entered promiscuous mode [ 109.125654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.148002][ T5843] veth1_macvtap: entered promiscuous mode [ 109.148314][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.254664][ T5839] veth0_macvtap: entered promiscuous mode [ 109.277528][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.282058][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.293627][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.305087][ T5845] Bluetooth: hci0: command tx timeout [ 109.311991][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.323273][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.333855][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.347005][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.360358][ T5839] veth1_macvtap: entered promiscuous mode [ 109.373913][ T5845] Bluetooth: hci1: command tx timeout [ 109.373969][ T5842] Bluetooth: hci3: command tx timeout [ 109.384988][ T5141] Bluetooth: hci2: command tx timeout [ 109.419675][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.431176][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.442320][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.454316][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.466634][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.479404][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.488639][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.497855][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.507256][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.624790][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.656722][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.680646][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.692573][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.704745][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.715803][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.727933][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.771876][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.792485][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.803840][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.816430][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.826361][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.837379][ T5899] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.837469][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.867984][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.928586][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.946290][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.979004][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.006249][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.352882][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.367401][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.414138][ T5842] Bluetooth: hci1: unexpected event 0x30 length: 47 > 3 [ 110.618909][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.630278][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.656361][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.685870][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.777033][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.804476][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.374129][ T5842] Bluetooth: hci0: command tx timeout [ 111.462959][ T5842] Bluetooth: hci3: command tx timeout [ 111.468450][ T5842] Bluetooth: hci2: command tx timeout [ 111.474348][ T5141] Bluetooth: hci1: command tx timeout [ 111.920696][ T5934] program syz.0.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.023918][ T5934] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.059388][ T5936] Zero length message leads to an empty skb [ 113.952160][ T5972] mmap: syz.2.17 (5972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.364333][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.402491][ T5978] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 114.466327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.577618][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 114.847229][ T5982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.875580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.987845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.245520][ T5996] process 'syz.0.21' launched './file0' with NULL argv: empty string added [ 116.255356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 116.513799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.373590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.382558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.795480][ T6013] random: crng reseeded on system resumption [ 119.040957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.051363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.303163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.182846][ T5141] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 121.190820][ T5141] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 122.192595][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 122.200330][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 123.636503][ T6097] program syz.3.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.662805][ T6097] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 124.683968][ T6113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 124.984699][ T6113] hsr0: entered allmulticast mode [ 125.041762][ T6113] hsr_slave_0: entered allmulticast mode [ 125.106605][ T6113] hsr_slave_1: entered allmulticast mode [ 125.394992][ T6121] FAULT_INJECTION: forcing a failure. [ 125.394992][ T6121] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.426618][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.2.46 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 125.426662][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.426684][ T6121] Call Trace: [ 125.426694][ T6121] [ 125.426709][ T6121] dump_stack_lvl+0x16c/0x1f0 [ 125.426766][ T6121] should_fail_ex+0x512/0x640 [ 125.426820][ T6121] _copy_from_user+0x2e/0xd0 [ 125.426873][ T6121] kvm_arch_dev_ioctl+0x3c9/0x760 [ 125.426915][ T6121] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 125.426955][ T6121] ? do_vfs_ioctl+0x512/0x1990 [ 125.427010][ T6121] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.427068][ T6121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 125.427114][ T6121] kvm_dev_ioctl+0x787/0x1ad0 [ 125.427161][ T6121] ? find_held_lock+0x2b/0x80 [ 125.427191][ T6121] ? hook_file_ioctl_common+0x145/0x410 [ 125.427230][ T6121] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 125.427273][ T6121] ? __fget_files+0x20e/0x3c0 [ 125.427307][ T6121] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 125.427349][ T6121] __x64_sys_ioctl+0x193/0x200 [ 125.427398][ T6121] do_syscall_64+0xcd/0x230 [ 125.427447][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.427480][ T6121] RIP: 0033:0x7f307618e969 [ 125.427505][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.427540][ T6121] RSP: 002b:00007f307707b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.427570][ T6121] RAX: ffffffffffffffda RBX: 00007f30763b5fa0 RCX: 00007f307618e969 [ 125.427590][ T6121] RDX: 0000200000000140 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 125.427609][ T6121] RBP: 00007f307707b090 R08: 0000000000000000 R09: 0000000000000000 [ 125.427628][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.427646][ T6121] R13: 0000000000000000 R14: 00007f30763b5fa0 R15: 00007fff1f3a2b38 [ 125.427687][ T6121] [ 125.744449][ T5842] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 127.287486][ T6146] udc dummy_udc.0: soft-connect without a gadget driver [ 128.033607][ T6151] random: crng reseeded on system resumption [ 129.449470][ T6172] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 130.171768][ T6192] netlink: 186 bytes leftover after parsing attributes in process `syz.2.61'. [ 130.614954][ T5842] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 131.099951][ T6213] program syz.3.67 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.164269][ T6213] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.414548][ T6212] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.510916][ T6236] netlink: 504 bytes leftover after parsing attributes in process `syz.3.70'. [ 132.810089][ T5842] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 132.818685][ T5842] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 134.029945][ T6266] syz.3.77 (6266) used greatest stack depth: 19400 bytes left [ 134.340722][ T6276] program syz.2.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.350268][ T6276] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 136.045650][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 136.053397][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 136.290583][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.87'. [ 137.887015][ T6333] program syz.2.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.899928][ T6333] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 138.043355][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.049967][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.855601][ T5141] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 139.864958][ T5141] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 141.283367][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 141.289296][ T6398] program syz.0.102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.302195][ T6398] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 141.735350][ T6397] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 143.632448][ T6421] FAULT_INJECTION: forcing a failure. [ 143.632448][ T6421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.692955][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.1.109 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 143.692989][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.693002][ T6421] Call Trace: [ 143.693009][ T6421] [ 143.693018][ T6421] dump_stack_lvl+0x16c/0x1f0 [ 143.693057][ T6421] should_fail_ex+0x512/0x640 [ 143.693096][ T6421] _copy_from_user+0x2e/0xd0 [ 143.693134][ T6421] kvm_dev_ioctl_get_cpuid+0x43f/0x700 [ 143.693167][ T6421] ? __might_fault+0xe3/0x190 [ 143.693195][ T6421] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 143.693236][ T6421] kvm_arch_dev_ioctl+0x3f8/0x760 [ 143.693265][ T6421] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 143.693296][ T6421] ? do_vfs_ioctl+0x512/0x1990 [ 143.693343][ T6421] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 143.693390][ T6421] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.693423][ T6421] kvm_dev_ioctl+0x787/0x1ad0 [ 143.693455][ T6421] ? find_held_lock+0x2b/0x80 [ 143.693476][ T6421] ? hook_file_ioctl_common+0x145/0x410 [ 143.693505][ T6421] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 143.693535][ T6421] ? __fget_files+0x20e/0x3c0 [ 143.693560][ T6421] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 143.693589][ T6421] __x64_sys_ioctl+0x193/0x200 [ 143.693624][ T6421] do_syscall_64+0xcd/0x230 [ 143.693670][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.693694][ T6421] RIP: 0033:0x7fa0c9d8e969 [ 143.693711][ T6421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.693732][ T6421] RSP: 002b:00007fa0cab93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.693754][ T6421] RAX: ffffffffffffffda RBX: 00007fa0c9fb5fa0 RCX: 00007fa0c9d8e969 [ 143.693769][ T6421] RDX: 0000200000000140 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 143.693782][ T6421] RBP: 00007fa0cab93090 R08: 0000000000000000 R09: 0000000000000000 [ 143.693796][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.693809][ T6421] R13: 0000000000000000 R14: 00007fa0c9fb5fa0 R15: 00007ffffa4fbc18 [ 143.693837][ T6421] [ 144.304484][ T5842] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 144.313908][ T5842] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 144.519931][ T6432] program syz.2.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.549676][ T6432] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 145.309984][ T6438] binder: 6437:6438 ioctl c0306201 2000000000c0 returned -14 [ 145.838746][ T6451] FAULT_INJECTION: forcing a failure. [ 145.838746][ T6451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.885925][ T6451] CPU: 1 UID: 0 PID: 6451 Comm: syz.2.118 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 145.885968][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.885985][ T6451] Call Trace: [ 145.885996][ T6451] [ 145.886008][ T6451] dump_stack_lvl+0x16c/0x1f0 [ 145.886055][ T6451] should_fail_ex+0x512/0x640 [ 145.886104][ T6451] _copy_from_user+0x2e/0xd0 [ 145.886152][ T6451] kvm_dev_ioctl_get_cpuid+0x43f/0x700 [ 145.886194][ T6451] ? __might_fault+0xe3/0x190 [ 145.886228][ T6451] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 145.886288][ T6451] kvm_arch_dev_ioctl+0x3f8/0x760 [ 145.886326][ T6451] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 145.886362][ T6451] ? do_vfs_ioctl+0x512/0x1990 [ 145.886404][ T6451] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 145.886457][ T6451] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.886501][ T6451] kvm_dev_ioctl+0x787/0x1ad0 [ 145.886544][ T6451] ? find_held_lock+0x2b/0x80 [ 145.886572][ T6451] ? hook_file_ioctl_common+0x145/0x410 [ 145.886607][ T6451] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 145.886648][ T6451] ? __fget_files+0x20e/0x3c0 [ 145.886680][ T6451] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 145.886716][ T6451] __x64_sys_ioctl+0x193/0x200 [ 145.886759][ T6451] do_syscall_64+0xcd/0x230 [ 145.886804][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.886832][ T6451] RIP: 0033:0x7f307618e969 [ 145.886854][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.886880][ T6451] RSP: 002b:00007f307707b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.886907][ T6451] RAX: ffffffffffffffda RBX: 00007f30763b5fa0 RCX: 00007f307618e969 [ 145.886925][ T6451] RDX: 0000200000000140 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 145.886947][ T6451] RBP: 00007f307707b090 R08: 0000000000000000 R09: 0000000000000000 [ 145.886963][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.886980][ T6451] R13: 0000000000000000 R14: 00007f30763b5fa0 R15: 00007fff1f3a2b38 [ 145.887015][ T6451] [ 147.727692][ T6486] program syz.1.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.738330][ T6486] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 148.821440][ T5842] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 148.829000][ T5842] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 149.958967][ T6518] program syz.0.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.968457][ T6518] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 150.067129][ T6521] FAULT_INJECTION: forcing a failure. [ 150.067129][ T6521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.121138][ T6521] CPU: 0 UID: 0 PID: 6521 Comm: syz.2.129 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 150.121182][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.121200][ T6521] Call Trace: [ 150.121211][ T6521] [ 150.121223][ T6521] dump_stack_lvl+0x16c/0x1f0 [ 150.121273][ T6521] should_fail_ex+0x512/0x640 [ 150.121328][ T6521] _copy_to_user+0x32/0xd0 [ 150.121380][ T6521] kvm_dev_ioctl_get_cpuid+0x51a/0x700 [ 150.121431][ T6521] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 150.121489][ T6521] kvm_arch_dev_ioctl+0x3f8/0x760 [ 150.121532][ T6521] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 150.121572][ T6521] ? do_vfs_ioctl+0x512/0x1990 [ 150.121619][ T6521] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 150.121677][ T6521] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.121725][ T6521] kvm_dev_ioctl+0x787/0x1ad0 [ 150.121772][ T6521] ? find_held_lock+0x2b/0x80 [ 150.121804][ T6521] ? hook_file_ioctl_common+0x145/0x410 [ 150.121844][ T6521] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 150.121892][ T6521] ? __fget_files+0x20e/0x3c0 [ 150.121928][ T6521] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 150.121976][ T6521] __x64_sys_ioctl+0x193/0x200 [ 150.122026][ T6521] do_syscall_64+0xcd/0x230 [ 150.122076][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.122108][ T6521] RIP: 0033:0x7f307618e969 [ 150.122132][ T6521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.122161][ T6521] RSP: 002b:00007f307707b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.122191][ T6521] RAX: ffffffffffffffda RBX: 00007f30763b5fa0 RCX: 00007f307618e969 [ 150.122212][ T6521] RDX: 0000200000000140 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 150.122230][ T6521] RBP: 00007f307707b090 R08: 0000000000000000 R09: 0000000000000000 [ 150.122247][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.122265][ T6521] R13: 0000000000000000 R14: 00007f30763b5fa0 R15: 00007fff1f3a2b38 [ 150.122307][ T6521] [ 151.231886][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 151.239975][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 151.723666][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'. [ 152.164480][ T6550] bond0: (slave bond_slave_0): Releasing backup interface [ 152.533951][ T6557] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6557] [ 153.605256][ T6580] program syz.0.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.614936][ T6580] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 154.640460][ T6594] FAULT_INJECTION: forcing a failure. [ 154.640460][ T6594] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 154.657523][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.0.146 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 154.657567][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.657586][ T6594] Call Trace: [ 154.657596][ T6594] [ 154.657608][ T6594] dump_stack_lvl+0x16c/0x1f0 [ 154.657662][ T6594] should_fail_ex+0x512/0x640 [ 154.657718][ T6594] should_fail_alloc_page+0xe7/0x130 [ 154.657765][ T6594] prepare_alloc_pages+0x3c2/0x610 [ 154.657817][ T6594] ? rcu_is_watching+0x12/0xc0 [ 154.657854][ T6594] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 154.657918][ T6594] ? rcu_is_watching+0x12/0xc0 [ 154.657950][ T6594] ? cgroup_rstat_updated+0x2a/0xb20 [ 154.658015][ T6594] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.658063][ T6594] ? lru_gen_add_folio+0x1a4/0xef0 [ 154.658111][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 154.658157][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 154.658200][ T6594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.658250][ T6594] ? policy_nodemask+0xea/0x4e0 [ 154.658296][ T6594] alloc_pages_mpol+0x1fb/0x550 [ 154.658352][ T6594] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 154.658392][ T6594] ? __lock_acquire+0x5ca/0x1ba0 [ 154.658442][ T6594] folio_alloc_mpol_noprof+0x36/0x2f0 [ 154.658489][ T6594] vma_alloc_folio_noprof+0xed/0x1e0 [ 154.658534][ T6594] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 154.658592][ T6594] do_pte_missing+0x223d/0x3fb0 [ 154.658637][ T6594] __handle_mm_fault+0x103d/0x2a40 [ 154.658684][ T6594] ? __pfx___handle_mm_fault+0x10/0x10 [ 154.658716][ T6594] ? __pte_offset_map_lock+0x155/0x2f0 [ 154.658763][ T6594] ? find_held_lock+0x2b/0x80 [ 154.658793][ T6594] ? find_held_lock+0x2b/0x80 [ 154.658852][ T6594] handle_mm_fault+0x3fe/0xad0 [ 154.658900][ T6594] __get_user_pages+0x771/0x36f0 [ 154.658964][ T6594] ? __pfx_mt_find+0x10/0x10 [ 154.659014][ T6594] ? __pfx___get_user_pages+0x10/0x10 [ 154.659083][ T6594] populate_vma_page_range+0x278/0x3a0 [ 154.659120][ T6594] ? __pfx_populate_vma_page_range+0x10/0x10 [ 154.659152][ T6594] ? __pfx_find_vma_intersection+0x10/0x10 [ 154.659206][ T6594] ? do_mmap+0x69c/0x11b0 [ 154.659262][ T6594] __mm_populate+0x1d8/0x380 [ 154.659296][ T6594] ? __pfx___mm_populate+0x10/0x10 [ 154.659332][ T6594] ? up_write+0x1b2/0x520 [ 154.659386][ T6594] vm_mmap_pgoff+0x362/0x450 [ 154.659440][ T6594] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 154.659501][ T6594] ? __x64_sys_futex+0x1e0/0x4c0 [ 154.659536][ T6594] ? __x64_sys_futex+0x1e9/0x4c0 [ 154.659579][ T6594] ksys_mmap_pgoff+0x7d/0x5c0 [ 154.659630][ T6594] ? rcu_is_watching+0x12/0xc0 [ 154.659663][ T6594] __x64_sys_mmap+0x125/0x190 [ 154.659701][ T6594] do_syscall_64+0xcd/0x230 [ 154.659755][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.659788][ T6594] RIP: 0033:0x7ff1d478e969 [ 154.659821][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.659872][ T6594] RSP: 002b:00007ff1d5637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 154.659908][ T6594] RAX: ffffffffffffffda RBX: 00007ff1d49b5fa0 RCX: 00007ff1d478e969 [ 154.659929][ T6594] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 154.659949][ T6594] RBP: 00007ff1d4810ab1 R08: 0000000000000002 R09: 0000000000008000 [ 154.659968][ T6594] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 154.659987][ T6594] R13: 0000000000000000 R14: 00007ff1d49b5fa0 R15: 00007ffd838c3958 [ 154.660030][ T6594] [ 155.141584][ T5141] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 156.649838][ T6619] FAULT_INJECTION: forcing a failure. [ 156.649838][ T6619] name failslab, interval 1, probability 0, space 0, times 1 [ 156.685869][ T6620] program syz.2.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.726485][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.1.153 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 156.726540][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.726559][ T6619] Call Trace: [ 156.726571][ T6619] [ 156.726583][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 156.726638][ T6619] should_fail_ex+0x512/0x640 [ 156.726684][ T6619] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 156.726723][ T6619] should_failslab+0xc2/0x120 [ 156.726766][ T6619] __kmalloc_cache_noprof+0x6a/0x3e0 [ 156.726801][ T6619] ? __alloc_workqueue+0xda2/0x1810 [ 156.726850][ T6619] __alloc_workqueue+0xda2/0x1810 [ 156.726906][ T6619] alloc_workqueue+0xd2/0x200 [ 156.726949][ T6619] ? __pfx_alloc_workqueue+0x10/0x10 [ 156.727000][ T6619] ? rcu_is_watching+0x12/0xc0 [ 156.727032][ T6619] ? trace_kmalloc+0x2b/0xd0 [ 156.727077][ T6619] ? do_raw_spin_lock+0x12c/0x2b0 [ 156.727127][ T6619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.727182][ T6619] ieee80211_register_hw+0x1e18/0x4020 [ 156.727224][ T6619] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 156.727270][ T6619] ? __debug_object_init+0x211/0x3d0 [ 156.727313][ T6619] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 156.727357][ T6619] ? find_held_lock+0x2b/0x80 [ 156.727391][ T6619] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.727439][ T6619] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 156.727479][ T6619] ? __hrtimer_setup+0x176/0x280 [ 156.727541][ T6619] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 156.727626][ T6619] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 156.727695][ T6619] hwsim_new_radio_nl+0xb51/0x12c0 [ 156.727754][ T6619] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 156.727819][ T6619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 156.727871][ T6619] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 156.727935][ T6619] genl_family_rcv_msg_doit+0x206/0x2f0 [ 156.727989][ T6619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 156.728041][ T6619] ? trace_cap_capable+0x18d/0x200 [ 156.728085][ T6619] ? bpf_lsm_capable+0x9/0x10 [ 156.728120][ T6619] ? security_capable+0x7e/0x260 [ 156.728155][ T6619] ? ns_capable+0xd7/0x110 [ 156.728193][ T6619] genl_rcv_msg+0x55c/0x800 [ 156.728249][ T6619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.728298][ T6619] ? __pfx___dev_queue_xmit+0x10/0x10 [ 156.728331][ T6619] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 156.728385][ T6619] ? __lock_acquire+0xaa4/0x1ba0 [ 156.728439][ T6619] netlink_rcv_skb+0x16d/0x440 [ 156.728484][ T6619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.728545][ T6619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.728612][ T6619] ? __pfx_down_read+0x10/0x10 [ 156.728646][ T6619] ? netlink_deliver_tap+0x1ae/0xd30 [ 156.728693][ T6619] genl_rcv+0x28/0x40 [ 156.728737][ T6619] netlink_unicast+0x53a/0x7f0 [ 156.728786][ T6619] ? __pfx_netlink_unicast+0x10/0x10 [ 156.728826][ T6619] ? __lock_acquire+0xaa4/0x1ba0 [ 156.728882][ T6619] netlink_sendmsg+0x8d1/0xdd0 [ 156.728935][ T6619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.728996][ T6619] ____sys_sendmsg+0xa98/0xc70 [ 156.729046][ T6619] ? copy_msghdr_from_user+0x10a/0x160 [ 156.729087][ T6619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.729143][ T6619] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 156.729200][ T6619] ___sys_sendmsg+0x134/0x1d0 [ 156.729244][ T6619] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.729343][ T6619] __sys_sendmsg+0x16d/0x220 [ 156.729385][ T6619] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.729423][ T6619] ? __x64_sys_futex+0x1e0/0x4c0 [ 156.729484][ T6619] do_syscall_64+0xcd/0x230 [ 156.729548][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.729582][ T6619] RIP: 0033:0x7fa0c9d8e969 [ 156.729608][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.729640][ T6619] RSP: 002b:00007fa0cab72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.729672][ T6619] RAX: ffffffffffffffda RBX: 00007fa0c9fb6080 RCX: 00007fa0c9d8e969 [ 156.729694][ T6619] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 156.729715][ T6619] RBP: 00007fa0c9e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 156.729735][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.729753][ T6619] R13: 0000000000000000 R14: 00007fa0c9fb6080 R15: 00007ffffa4fbc18 [ 156.729797][ T6619] [ 157.160593][ T6620] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.995932][ T6634] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 157.995932][ T6634] M' is too long [ 158.031014][ T6634] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 158.031014][ T6634] W ' is too long [ 158.419313][ T6645] can: request_module (can-proto-3) failed. [ 159.271738][ T3527] ------------[ cut here ]------------ [ 159.277318][ T3527] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 159.514409][ T3527] WARNING: CPU: 1 PID: 3527 at net/mac80211/driver-ops.c:255 drv_get_tsf+0x1c7/0x780 [ 159.524532][ T3527] Modules linked in: [ 159.528664][ T3527] CPU: 1 UID: 0 PID: 3527 Comm: kworker/u8:9 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 159.541152][ T3527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.551343][ T3527] Workqueue: events_unbound cfg80211_wiphy_work [ 159.557666][ T3527] RIP: 0010:drv_get_tsf+0x1c7/0x780 [ 159.562998][ T3527] Code: 0f 84 3d 05 00 00 e8 58 cb e2 f6 49 81 c4 20 01 00 00 e8 4c cb e2 f6 44 89 f2 4c 89 e6 48 c7 c7 00 be e3 8c e8 2a ae a2 f6 90 <0f> 0b 90 90 e8 30 cb e2 f6 4c 89 ea 48 b8 00 00 00 00 00 fc ff df [ 159.583158][ T3527] RSP: 0018:ffffc9000c4a7b98 EFLAGS: 00010286 [ 159.589269][ T3527] RAX: 0000000000000000 RBX: ffff888024b64d80 RCX: ffffffff817a94a8 [ 159.597750][ T3527] RDX: ffff8880326d3c00 RSI: ffffffff817a94b5 RDI: 0000000000000001 [ 159.605823][ T3527] RBP: ffff88807fbb8e40 R08: 0000000000000001 R09: 0000000000000000 [ 159.613993][ T3527] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888024b64120 [ 159.621979][ T3527] R13: ffff888024b65728 R14: 0000000000000000 R15: ffff88807fbb86a8 [ 159.630415][ T3527] FS: 0000000000000000(0000) GS:ffff888124aea000(0000) knlGS:0000000000000000 [ 159.639738][ T3527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.646671][ T3527] CR2: 0000001b306bcff8 CR3: 0000000032d74000 CR4: 00000000003526f0 [ 159.654704][ T3527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.662757][ T3527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.671116][ T3527] Call Trace: [ 159.674695][ T3527] [ 159.677692][ T3527] ieee80211_if_fmt_tsf+0x42/0x70 [ 159.682838][ T3527] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 159.689543][ T3527] wiphy_locked_debugfs_read_work+0xe6/0x1c0 [ 159.695875][ T3527] ? trace_wiphy_work_run+0x190/0x210 [ 159.701279][ T3527] cfg80211_wiphy_work+0x3dc/0x550 [ 159.706461][ T3527] process_one_work+0x9cc/0x1b70 [ 159.711456][ T3527] ? __pfx_process_one_work+0x10/0x10 [ 159.716956][ T3527] ? assign_work+0x1a0/0x250 [ 159.721590][ T3527] worker_thread+0x6c8/0xf10 [ 159.726687][ T3527] ? __kthread_parkme+0x19e/0x250 [ 159.731866][ T3527] ? __pfx_worker_thread+0x10/0x10 [ 159.737320][ T3527] kthread+0x3c5/0x780 [ 159.741456][ T3527] ? __pfx_kthread+0x10/0x10 [ 159.746162][ T3527] ? __pfx_kthread+0x10/0x10 [ 159.750899][ T3527] ? __pfx_kthread+0x10/0x10 [ 159.755695][ T3527] ? __pfx_kthread+0x10/0x10 [ 159.760360][ T3527] ? rcu_is_watching+0x12/0xc0 [ 159.765235][ T3527] ? __pfx_kthread+0x10/0x10 [ 159.770293][ T3527] ret_from_fork+0x48/0x80 [ 159.775213][ T3527] ? __pfx_kthread+0x10/0x10 [ 159.779871][ T3527] ret_from_fork_asm+0x1a/0x30 [ 159.784833][ T3527] [ 159.787897][ T3527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.795219][ T3527] CPU: 1 UID: 0 PID: 3527 Comm: kworker/u8:9 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 159.807421][ T3527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.817615][ T3527] Workqueue: events_unbound cfg80211_wiphy_work [ 159.823886][ T3527] Call Trace: [ 159.827176][ T3527] [ 159.830123][ T3527] dump_stack_lvl+0x3d/0x1f0 [ 159.834749][ T3527] panic+0x71c/0x800 [ 159.838719][ T3527] ? __pfx_panic+0x10/0x10 [ 159.843179][ T3527] ? show_trace_log_lvl+0x29b/0x3e0 [ 159.848434][ T3527] ? check_panic_on_warn+0x1f/0xb0 [ 159.853588][ T3527] ? drv_get_tsf+0x1c7/0x780 [ 159.858205][ T3527] check_panic_on_warn+0xab/0xb0 [ 159.863175][ T3527] __warn+0xf6/0x3c0 [ 159.867101][ T3527] ? drv_get_tsf+0x1c7/0x780 [ 159.871731][ T3527] report_bug+0x3c3/0x580 [ 159.876107][ T3527] ? drv_get_tsf+0x1c7/0x780 [ 159.880745][ T3527] handle_bug+0x184/0x210 [ 159.885092][ T3527] exc_invalid_op+0x17/0x50 [ 159.889643][ T3527] asm_exc_invalid_op+0x1a/0x20 [ 159.894541][ T3527] RIP: 0010:drv_get_tsf+0x1c7/0x780 [ 159.899799][ T3527] Code: 0f 84 3d 05 00 00 e8 58 cb e2 f6 49 81 c4 20 01 00 00 e8 4c cb e2 f6 44 89 f2 4c 89 e6 48 c7 c7 00 be e3 8c e8 2a ae a2 f6 90 <0f> 0b 90 90 e8 30 cb e2 f6 4c 89 ea 48 b8 00 00 00 00 00 fc ff df [ 159.919437][ T3527] RSP: 0018:ffffc9000c4a7b98 EFLAGS: 00010286 [ 159.925532][ T3527] RAX: 0000000000000000 RBX: ffff888024b64d80 RCX: ffffffff817a94a8 [ 159.933531][ T3527] RDX: ffff8880326d3c00 RSI: ffffffff817a94b5 RDI: 0000000000000001 [ 159.941533][ T3527] RBP: ffff88807fbb8e40 R08: 0000000000000001 R09: 0000000000000000 [ 159.949533][ T3527] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888024b64120 [ 159.957532][ T3527] R13: ffff888024b65728 R14: 0000000000000000 R15: ffff88807fbb86a8 [ 159.965545][ T3527] ? __warn_printk+0x198/0x350 [ 159.970365][ T3527] ? __warn_printk+0x1a5/0x350 [ 159.975175][ T3527] ? drv_get_tsf+0x1c6/0x780 [ 159.979802][ T3527] ieee80211_if_fmt_tsf+0x42/0x70 [ 159.984860][ T3527] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 159.991577][ T3527] wiphy_locked_debugfs_read_work+0xe6/0x1c0 [ 159.997600][ T3527] ? trace_wiphy_work_run+0x190/0x210 [ 160.003002][ T3527] cfg80211_wiphy_work+0x3dc/0x550 [ 160.008145][ T3527] process_one_work+0x9cc/0x1b70 [ 160.013140][ T3527] ? __pfx_process_one_work+0x10/0x10 [ 160.018571][ T3527] ? assign_work+0x1a0/0x250 [ 160.023231][ T3527] worker_thread+0x6c8/0xf10 [ 160.027966][ T3527] ? __kthread_parkme+0x19e/0x250 [ 160.033032][ T3527] ? __pfx_worker_thread+0x10/0x10 [ 160.038379][ T3527] kthread+0x3c5/0x780 [ 160.042495][ T3527] ? __pfx_kthread+0x10/0x10 [ 160.047143][ T3527] ? __pfx_kthread+0x10/0x10 [ 160.051772][ T3527] ? __pfx_kthread+0x10/0x10 [ 160.056402][ T3527] ? __pfx_kthread+0x10/0x10 [ 160.061047][ T3527] ? rcu_is_watching+0x12/0xc0 [ 160.065876][ T3527] ? __pfx_kthread+0x10/0x10 [ 160.070509][ T3527] ret_from_fork+0x48/0x80 [ 160.074958][ T3527] ? __pfx_kthread+0x10/0x10 [ 160.079590][ T3527] ret_from_fork_asm+0x1a/0x30 [ 160.084414][ T3527] [ 160.087598][ T3527] Kernel Offset: disabled [ 160.092024][ T3527] Rebooting in 86400 seconds..