last executing test programs: 2m28.331054396s ago: executing program 2 (id=3440): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), r1) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000084) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x55, &(0x7f0000000100)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x80006, 0x8c48, 0x7, 0x3, 0x7f, 0x0, 0x2}, {0x100, 0x1, 0x52, 0x81, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) socket(0xa, 0x2, 0x3a) socket(0xa, 0x3, 0x73) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000480)='-_', 0x2) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000180)=@prog_bind_map={r0, r4, 0x10000}, 0x401) socket(0x11, 0x3, 0x80000001) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) socket(0x23, 0x5, 0x0) write$auto(r0, 0x0, 0x9) ioctl$auto_XFS_IOC_ALLOCSP64(r5, 0x40305824, &(0x7f0000000440)={0x1, 0xa71, 0x7ff, 0x0, 0x7, 0xffffffffffffffff}) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) 2m18.162513918s ago: executing program 32 (id=3413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0xa00, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m12.598700348s ago: executing program 33 (id=3440): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), r1) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000084) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x55, &(0x7f0000000100)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x80006, 0x8c48, 0x7, 0x3, 0x7f, 0x0, 0x2}, {0x100, 0x1, 0x52, 0x81, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) socket(0xa, 0x2, 0x3a) socket(0xa, 0x3, 0x73) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000480)='-_', 0x2) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000180)=@prog_bind_map={r0, r4, 0x10000}, 0x401) socket(0x11, 0x3, 0x80000001) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) socket(0x23, 0x5, 0x0) write$auto(r0, 0x0, 0x9) ioctl$auto_XFS_IOC_ALLOCSP64(r5, 0x40305824, &(0x7f0000000440)={0x1, 0xa71, 0x7ff, 0x0, 0x7, 0xffffffffffffffff}) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) 2m1.769501463s ago: executing program 34 (id=3487): openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) bpf$auto(0x5, 0x0, 0x102) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r2 = gettid() kill$auto(r2, 0x11) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x6f29, 0x0) eventfd2$auto(0x1, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) io_uring_setup$auto(0x6, 0x0) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, 0x0, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 1m45.75399253s ago: executing program 35 (id=3523): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), r1) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000084) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x55, &(0x7f0000000100)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x80006, 0x8c48, 0x7, 0x3, 0x7f, 0x0, 0x2}, {0x100, 0x1, 0x52, 0x81, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) socket(0xa, 0x2, 0x3a) socket(0xa, 0x3, 0x73) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000480)='-_', 0x2) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000180)=@prog_bind_map={r0, r4, 0x10000}, 0x401) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) 1m38.553570548s ago: executing program 36 (id=3581): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc9, 0xfffffffffffffffc, 0xfd72) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x2f, 0x0, 0x8, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, r1, 0xb) close_range$auto(0x2, 0x8, 0x0) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x311, 0x3, 0x1, 0x7, 0x8}, 0x55) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) ioctl$auto_IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1}) preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffdffd}, 0x8, 0x400000000000008, 0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98008ad77639f6474b62d65c35b867a2d71000", @ANYRES16=r0, @ANYBLOB="000125bd7000fbdbdf25410000000500e40003000000690049017ccac710d7333fc387cb30a4a9b07ba3a34ba80ce991b4404f4fe3e960ac0c0ccc74e2b41333b984c38e6726186896f34616d809c6885e10909ed43f7f28d143b37422289dcc561628606f678a176ab2d8fc4c62245d5e1e8e4ef1cc1cda8850acd7f64f0000000006001000050000000500d6000d000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) io_uring_setup$auto(0x6, 0x0) 1m38.029402177s ago: executing program 5 (id=3584): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x14, r1, 0xb81, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x120cd7613cc307e3, 0x0) getcwd$auto(0x0, 0x8000000000000000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) 1m37.698529156s ago: executing program 5 (id=3585): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@query={@target_fd=r1, 0x3ca, 0x6, 0x1, 0x6, @count=0x9c4b, 0x0, 0x2000003, 0x7fffffff, 0xdb, 0x7a7c}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x98) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xb5, 0x3, 0x0, 0x1, [@generic="54c4df7993ab4ef2c3ac4da4548fbb86f09c4b9dc85d10340a4b12f7423659acc9691bc960e5ae44acc430b0d3d02e7089b028864fb31445108bc0be80859b0d78e86773a78576b4ff3fec6ae948e471630b73f8a25d5ece91c37f79dcbd6741da9fbe5107bee686bce0c385ab7d7eaea31414b32650014c18c757e10342ea0193096000415b681f3491d6535b8c5b3a0f94009c37bd89bd497a59d91c6a651519fb52706b7fc5c8d3424d3d758809", @generic="fb47"]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8987719882884f00000000000800"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) socket(0x18, 0x800, 0xa) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/33t\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x4, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x10001, 0x7, 0x5, 0x8}, 0x10) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) preadv2$auto(r3, &(0x7f0000000000)={&(0x7f00000001c0)="6dab7d23b42052df0a55cb3773d3ed2e45fc88c65fd32fb3ff2b47691b077f69b79eb55b7571f41691439d712a97fb331ab0755d4070a6a73916a1fa75424b2bb3b6c7e3a1b1e351fa", 0xad2}, 0xffffffffffffff0e, 0x9, 0x9, 0x8) r6 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) socket(0x2a, 0x2, 0x6) accept$auto(0x3, 0x0, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="54030000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf250100000000000000", @ANYRES32=r4, @ANYBLOB="8401088080012b8008006800", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="140002006970365f767469300000000000000000"], 0x354}, 0x1, 0x0, 0x0, 0x40081}, 0x20000010) write$auto(r6, 0x0, 0xc3) 1m37.247788929s ago: executing program 5 (id=3587): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) r0 = epoll_create1$auto(0x80) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "e9ec30326289e7"}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x2, 0x0) (async) socket(0x28, 0x1, 0x0) (async) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) unshare$auto(0x40000080) (async) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x4, 0x70bd28, 0x47a, {}, [@NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xe3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x801, r5, 0x0) (async) unshare$auto(0x5e) (async) epoll_ctl$auto(0x5, 0x3, r3, 0x0) 1m36.500954965s ago: executing program 5 (id=3589): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/028/001\x00', 0x6a801, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket(0xa, 0x5, 0x0) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x0) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x154) socket(0xa, 0x2, 0x88) bpf$auto(0x2000000, &(0x7f0000000400)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r2, 0x100, @old_prog_fd=r2}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f0000000380)=@raw_tracepoint={0x5, r0, 0x0, 0x6}, 0xc) bind$auto(0xffffffffffffffff, 0x0, 0x69) ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000100)=0x7) bpf$auto(0x5, &(0x7f0000000180)=@query={@target_ifindex, 0x1007ff, 0x5, 0x40, 0x10, @count=0x1, 0x0, 0x8001, 0xffff, 0x1f2b, 0x6}, 0x3d) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 1m36.365180239s ago: executing program 5 (id=3590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf2503000000040007800c0002000500000000000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8880) 1m36.243881979s ago: executing program 5 (id=3591): close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x1c12c2, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) bpf$auto_BPF_OBJ_GET(0x7, 0x0, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(0x0, 0x400fe, 0xd, 0x0) mlockall$auto(0x5) ioctl$auto(0xffffffffffffffff, 0x4818620f, 0x9) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100085) 1m29.100699329s ago: executing program 8 (id=3583): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x3, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0xfbfffffc) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(0x0, 0x2, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) signalfd4$auto(r0, &(0x7f0000000100)={0x5}, 0x6c, 0x6) pread64$auto(r0, 0x0, 0x6, 0xbdc2) ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto_FIONBIO(0xffffffffffffffff, 0x5421, 0x692) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x4, 0x10007}, {0x9}}, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="176a6ea9000f0d7c01a3d6e74e2b955de7380ecdc08a8e440007a12244859ab4a13ff28eb1e525f0f1b5243eab4479", 0x2}, 0x7) 1m28.702821383s ago: executing program 8 (id=3601): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ustat$auto(0x2, &(0x7f0000000040)={0x40, 0xe, "4a7992b5b008", "058b3af53e9b"}) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) splice$auto(r1, 0x0, r1, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x6, 0x2a, 0x0, 0x4) unshare$auto(0x40000080) setsockopt$auto_SO_BUSY_POLL_BUDGET(r0, 0x0, 0x46, &(0x7f0000000140)='\xab\xcfT}\x89Ht\x8e\x93[\x00', 0x1002) unshare$auto(0x5) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000080)=0xcadc) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xae6745d864f4ca5e, 0x0) ioctl$auto_USBDEVFS_CONTROL32(r3, 0xc0105500, &(0x7f0000000080)={0x2, 0x1, 0x101, 0x0, 0x3, 0x4, 0x69}) mmap$auto(0x0, 0x2020009, 0x8, 0x13, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xfffffffffffffff9, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sched_setaffinity$auto(0x0, 0x4, &(0x7f0000000240)=0x6) futex$auto(0x0, 0x88, 0x901, 0x0, 0x0, 0x7ffffffc) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mprotect$auto(0x200000000000, 0x806121, 0xc) futex$auto(&(0x7f00000000c0)=0x2a08, 0xc, 0x1, 0x0, 0x0, 0x2a09) 1m27.338766165s ago: executing program 8 (id=3604): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x7}, 0x880}, 0x7, 0x4008) 1m26.26376323s ago: executing program 8 (id=3607): mmap$auto(0x0, 0x4, 0xc, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd77a2fcdbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) unshare$auto(0x40000080) read$auto(0x3, 0x0, 0x6dca) 1m24.452258764s ago: executing program 8 (id=3612): socket(0x2c, 0x80000, 0x3a) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x7, 0xe, 0xeb1, 0x403, 0x8000) r0 = clone$auto(0x52, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) unshare$auto(0x40000080) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x5, 0x9, 0x40, 0x6, 0x0, 0x3ff, 0x10, 0x240, 0x4, 0x1, 0x2, 0x5, 0x405, 0x0, 0x4]}, &(0x7f00000001c0)={[0x40, 0x1000, 0x8, 0x4, 0x52, 0x669, 0x1, 0xffffffffffffffff, 0x8, 0x2bce, 0xffffffff80000000, 0x800000a793, 0x8003, 0x6, 0x4, 0x67]}, &(0x7f0000000040)={0x2, 0x5}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="d375ccb4eb6e441ff2c64884aaf6431441298afb7026c98cfd7416e8a35d70be8ac9870ed083a07a429d9c1cf206027fb78ca628844ffd557f98d36cfec6c300690f0f21550aa02c9db89f4c61d01528fe29cf96efc8238981a59dc5c3110f2889cc69cc4a05be7fc726f16db1fcc738c29c48a9cf", @ANYRES16=r4, @ANYBLOB="000329bd7000fbdbdf2508000000080016000300000008000b00050000000800020003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r5 = timerfd_create$auto_CLOCK_TAI(0xb, 0xe) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8100002", @ANYRES16=r4, @ANYBLOB="020025bd7000fbdbdf2501000000480004804400078026006200d9a808f8c3153767a3b68c9f9e5d03c0513c8bcf348fb710dfccd83d8281c34f462f000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00A\x00', @ANYRES32=r0, @ANYBLOB="0400048004000100080009000080000010000d005b2a405b242d212b2724262e4c10188008008000", @ANYRES32=r5, @ANYBLOB="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"], 0x10c8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1b0026bd7000fddb78785b702717e119579776626c0908d518df2500080000000000000c00038007001480045cbdba1a8486c3048745124a792300a561ed188d66802d72db4f0f7373e084447970b8ad9c205673c7364a0c8f7e2699f8d7389c2783ec69d06b00000000000000000000000000001d1af60cd60504a181935dcfc59c"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 1m23.864038064s ago: executing program 8 (id=3613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0xe00, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m21.162354528s ago: executing program 37 (id=3591): close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x1c12c2, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) bpf$auto_BPF_OBJ_GET(0x7, 0x0, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(0x0, 0x400fe, 0xd, 0x0) mlockall$auto(0x5) ioctl$auto(0xffffffffffffffff, 0x4818620f, 0x9) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100085) 1m8.493072948s ago: executing program 38 (id=3613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0xe00, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 59.780847664s ago: executing program 9 (id=3649): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1002}, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x13b, 0x800, 0x0, 0x10, 0x1120) sysinfo$auto(0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="f3886344f852a860fbe82ea2a70af7f06ec59ad922f8a6ff2987e59bd51c35a9176e0b5beb5dfee50ae504c1ea41b85b7a477b46896ad7d0136e99e4d5538d03a75ba40280a57239177396", @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20040880) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x24302, 0x0) mmap$auto(0x3, 0x2000a, 0x10000000000df, 0xeb2, r1, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/event2\x00', 0x4a404, 0x0) socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D2\x00', 0x20201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x4a0101, 0x0) ppoll$auto(&(0x7f00000000c0)={r4, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) socket(0x15, 0xa, 0x3) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x127882, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)='7', 0x1) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x0, 0x8004, 0x6, 0xff}) 58.555755078s ago: executing program 9 (id=3650): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f00000002c0)=0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'pim6reg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x52bdd1176b291738}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}]}, 0xc0}}, 0x4000) r4 = socket(0x23, 0x2, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto(r4, 0x89ef, 0x74) r5 = open(&(0x7f0000000280)='./cgroup\x00', 0x0, 0x64) setfsuid$auto(0xee01) fchdir$auto(r5) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008) r6 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/0:0:0:0\x00', 0x400000, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000001c0)="532ce32d1de03ad5f841a7fd65f22f31523af967fd50b7f039a487a9bbb4994d5bf14f91b2e26eb0670fa0240152cc505514ff78be49f84adaf8517c15fa65808709649ed253b537cb7df2996aaedf9efe0ce3c0c64c00cc31d1f7810112b11b5b142896497ecc60384eacffb2dff2385a485f11ffe3fabf6887bcb5049085067bf49acacd2221da4fb401b7d068484b1f8811eb9a947678c0ac3777c767b3238a8848495106a3d4d7e1596c2d256bf25614a11b0a5dc79d5b6c4f0c02583ab680d26704a1d8ed44bb7b9a93e4aee9cae5666a9f8d59d6c116ab2a49db1dec058f8ff9d86344c66341b29784d3cc06") 57.996598098s ago: executing program 9 (id=3653): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x2b, 0x1, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000001280)={&(0x7f0000000280)="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", 0x5}, 0x2, 0x5, 0x8d) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x100) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) rseq$auto(0x0, 0x8000, 0x0, 0x6) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) init_module$auto(0x0, 0xffff9, 0x0) setsockopt$auto(r1, 0x6, 0xa, 0x0, 0xfb3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x8) set_robust_list$auto(0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) recvmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x6, 0x0, 0x4, 0x6}, 0x1) socket(0xf, 0x6, 0x80000001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00002095", @ANYRES16=r3, @ANYBLOB="100025bd7000fbdbdf252000000008000500050000000c0002800800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x40001) 57.496258963s ago: executing program 9 (id=3654): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) epoll_create$auto(0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x200000, 0x6, 0x40003) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 56.22875019s ago: executing program 9 (id=3657): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x6, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) open(&(0x7f0000000200)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x0, 0x6f) r1 = fanotify_init$auto(0x5, 0x0) setuid$auto(0x1f) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) r2 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwflags\x00', 0x101741, 0x0) write$auto_hwflags_ops_debugfs(r2, 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r3, &(0x7f0000000000)=""/43, 0xfedf) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000000), 0x55) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 55.726992786s ago: executing program 9 (id=3658): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0xffffffffffffffff) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) 45.014085128s ago: executing program 7 (id=3684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_I2C_SMBUS(r3, 0x720, 0xfffffffffffffffe) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_RADIO_NAME={0x43, 0x11, '\x00\x87B\xfeP\xc6\xae\x16\x8eC\x9f\xdf*x$\xe5\xc1\x9b\xfd\x94\x8bY\xb5\xcb]\x1f\x1cR&\xf1v^g\xfe[\x822\x01E^(ZZ\xf9\xb1O\x8e\xf6-`r~\x86\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000008, 0x3, 0x6}, 0x0, 0x7ffffffff000, 0x0) setsockopt$auto(r1, 0x14f, 0x1, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x1e, 0x4, 0x0) unshare$auto(0x8000000) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r8 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r8, 0x10f, 0x87, 0x0, 0x14) madvise$auto(0x100, 0x3, 0x50d) r9 = fcntl$auto(r5, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xbc, 0x0, 0x10, 0x3, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r5}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, @NETDEV_A_DMABUF_QUEUES={0x3c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x2}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x4}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x4}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x11b8402}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2d}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xa72}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xa86}]}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xfffffffb}]}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r5}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r5}, @NETDEV_A_DMABUF_QUEUES={0x34, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x6}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x40}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xff}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xe}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x200}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) connect$auto(r7, &(0x7f00000001c0)=@can={0x1d, r6}, 0x7) r10 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), r9) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r10, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd700002dcdf25100000000c00018008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80014) 44.525784146s ago: executing program 3 (id=3686): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="daea86555ac48410b696b12fc3189404815ec007b21251e80055aac3f672476cdc3fcd19058a712cb9f38ff2ba383b972fe1bf1c4d0a9e83dfdbf6fcc37eed990647df3f398810e89138922f2ee7bf3b9760cb8ac3a6999504309d474db588b385573bae3112b32cc4489eccbc8c8ba7210dd4127e549ceba0e58c94b02ad882ba20fd2cb7bec109b7d7b1f855f7c4d7961500fbc866a3b9a47e3fb7144d0864bea45519fdb83ce9264ebc3b8269bf0a63943ff835651bd7df5c1db83953d55bbb0b8580525f4aa92585fd3b5eea9cd2ad66d43718c74200a7cd6db1aa4d84705afe", @ANYRES16=0x0, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r0, @ANYBLOB="0c002d800400df80dd118e6d"], 0x28}}, 0x4000000) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000010c0)=0xffffffffffffffff) socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(r1, 0x0, 0x7fffffff) r3 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/ht40allow_map\x00', 0xc9400, 0x0) read$auto(r3, &(0x7f0000000040)='^{-!S\x84\x00', 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.usage_all\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/27, 0x1b) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1001, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x0, 0x831c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0x6}, 0x2, 0x0, 0x7, 0x200a505}, 0x800}, 0x800007, 0x4008) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0x39, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4) close_range$auto(0x2, 0xa, 0x0) 44.392200471s ago: executing program 7 (id=3687): sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) r0 = bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001880)=""/4101, 0x1005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x29, 0x2, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffdffd}, 0x6, 0x400000000000008, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) arch_prctl$auto_ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x10) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x89f2, 0x24) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x20048004) 42.988395349s ago: executing program 3 (id=3689): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x800000f, 0x0, 0x50000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x210101, 0x0) bind$auto(r2, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x55) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip_vs_stats_percpu\x00', 0x8002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) ioctl$auto_HDIO_GETGEO(r0, 0x301, &(0x7f00000001c0)) 42.574483054s ago: executing program 7 (id=3690): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x9000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) setsockopt$auto(r0, 0x6, 0x5, 0x0, 0x40) 42.34298171s ago: executing program 7 (id=3692): ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000440)="0db1eb") ioctl$auto_SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), r2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x82502, 0x0) mmap$auto(0x0, 0x2000c, 0xde, 0x20eb8, r3, 0x8000) ioctl$auto(0x3, 0x5424, 0x38) r4 = io_uring_setup$auto(0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'netpci0\x00'}) sendmsg$auto_OVS_VPORT_CMD_NEW(r4, 0x0, 0x48800) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0xe8}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/etherd/err\x00', 0x0, 0x0) read$auto_aoe_fops_aoechr(r5, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000040)='\xd3{\x00', 0x7904) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40000000e983, 0x6, 0x14, 0xffffffffffffffff, 0x4) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x2, 0x17, 0x7, 0x9b72, 0x7, 0x80000028000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22241, 0xd1) 41.963892869s ago: executing program 3 (id=3693): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x7ff, &(0x7f0000000000)=0x100000000, 0x8a12000000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000000080)=0xe7da) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r1, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x10) 41.664643627s ago: executing program 3 (id=3694): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0xa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto(r3, 0xc0905664, r3) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="1bab51ad7fb32dd40fae52360ccd9874d5b56c24ce271bec5a233f39481664828a", 0x8) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x10000009, 0x69ce, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) 40.679467304s ago: executing program 39 (id=3658): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0xffffffffffffffff) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) 40.640252891s ago: executing program 7 (id=3697): keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x280080, 0x0) close_range$auto(r0, 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) bind$auto(0x3, 0x0, 0x5) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) shmctl$auto_SHM_UNLOCK(0x9, 0xc, &(0x7f00000002c0)={{0xfffffeff, 0xffffffffffffffff, 0xee01, 0x200, 0x2, 0x0, 0xfe7}, 0x81, 0x79, 0xffffffffffffffff, 0x4, @inferred, @inferred, 0x9, 0x0, &(0x7f0000000040)="1b67229e6fd05d08ab3c6ff80d5d76d3e8d76b32ed6684a880dbe6af23ab4ac79ed7bd1bdc881b10ad533bba665375fcb80e5f9044314cd712dd87e395cb7983ddf5fc4981c46efd253036f6a7268d22b3c281", &(0x7f00000000c0)="e54708f2e88aa8ebb7cdb70960e2a61e9a622c7e13784b9bb7eb2bf8a69233247cb6f622295374cdd6dd171d2b68b0a2be8115f0659735632d581f"}) r2 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) read$auto_hwsim_fops_ps_(r2, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000180)={0x2a6, 0x7, 0x3ff}, 0x3, 0xaa) keyctl$auto(0x800, r1, 0xffffffffffffffff, 0x5092, 0x2) 40.498441793s ago: executing program 3 (id=3698): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0xa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto(r3, 0xc0905664, r3) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) fsconfig$auto_FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="1bab51ad7fb32dd40fae52360ccd9874d5b56c24ce271bec5a233f39481664828a", 0x8) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x10000009, 0x69ce, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) 40.49657743s ago: executing program 7 (id=3699): socket(0x11, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x5) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) 39.14615064s ago: executing program 3 (id=3704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0xf00, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 36.389275968s ago: executing program 2 (id=3696): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fbdbdf25970000001000b00056cb2f3473a2d7a7feb36dc3120014010000000005002f010d000000"], 0x34}, 0x1, 0x0, 0x0, 0x80c0}, 0x11) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x9, 0x200, 0x800000000100002, 0x40000407, 0x2, 0xc, 0x2, 0x19, 0x20000000009, 0x7}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 36.252625326s ago: executing program 2 (id=3709): mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x10001, 0x830) openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_page_alloc/space\x00', 0x240, 0x0) 36.147523862s ago: executing program 2 (id=3710): mmap$auto(0x0, 0x3ff, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="06000000", @ANYRES16=r2, @ANYRES8=r1, @ANYRES16=r2, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x809c) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000005, &(0x7f0000000040)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x5) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x18, 0x5, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x2, 0x3, 0x9, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) ioctl$auto(0x3, 0x800005411, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x8001, 0x20009, 0x200e2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x40000000000a5, 0x8000) 34.777417452s ago: executing program 2 (id=3715): r0 = socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x6000, 0x0) clone$auto(0xfffffffffffffffc, 0x8001, &(0x7f0000001200)=0xd, 0x0, 0x7) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0xb4300, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/locals\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/ip_vs_conn\x00', 0x20440, 0x0) close_range$auto(0x2, 0x8000, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/mounts\x00', 0x80, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x11, 0x0) readv$auto(r1, &(0x7f0000001940)={&(0x7f0000001900), 0x80000001}, 0xed) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 34.63091053s ago: executing program 2 (id=3716): r0 = syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r1 = socket(0x11, 0x3, 0x0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r2, 0x6) (async) r3 = fsopen$auto(&(0x7f0000000080)=':&.@\x00', 0x1) (async) waitid$auto_P_PGID(0x2, r0, &(0x7f0000000240)={@siginfo_0_0={0xa08, 0x2, 0x3ff, @_sigpoll={0xb, r1}}}, 0x6, &(0x7f00000002c0)={{0xfff, 0x1ff}, {0x8, 0x6}, 0x400, 0x9, 0x3, 0x10000, 0x1, 0x7, 0x0, 0x42c, 0x7ff, 0x61c4aa8b, 0xfffffffffffffffe, 0x10, 0xfffffffffffffffd, 0xff}) (async) writev$auto(r1, &(0x7f0000000040)={&(0x7f0000000180)="1797a62bf8f971b5313fcd1e419cc27d3b95ff604188d7a0f30d75b4b3d44f55ec83b5d1891e53468e58b8d9e683b654bd979fede6f63476d5af718628822c84afd6894a07fc643bb9b120be576b9659a9265bfaa14c84aa93e416e4a496a5c42a2b51314a42ee9a9b89764adca4f9aa1bed7da2c2ed29e69daf5b31855d21337312e49ba7a0c44efea43141ec36d7f73320", 0x20000}, 0x9) r4 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r4, 0x1) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) fcntl$auto_F_DUPFD_QUERY(r1, 0x403, r5) (async) r6 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), r4) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240080d1}, 0x20000044) flock$auto(r5, 0x2) (async) flock$auto(r5, 0x2) close_range$auto(r1, 0xffffffffffffffff, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000004c0)="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", 0x4) 24.677473779s ago: executing program 40 (id=3699): socket(0x11, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x5) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) 23.977936264s ago: executing program 41 (id=3704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0xf00, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 19.503785911s ago: executing program 42 (id=3716): r0 = syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r1 = socket(0x11, 0x3, 0x0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r2, 0x6) (async) r3 = fsopen$auto(&(0x7f0000000080)=':&.@\x00', 0x1) (async) waitid$auto_P_PGID(0x2, r0, &(0x7f0000000240)={@siginfo_0_0={0xa08, 0x2, 0x3ff, @_sigpoll={0xb, r1}}}, 0x6, &(0x7f00000002c0)={{0xfff, 0x1ff}, {0x8, 0x6}, 0x400, 0x9, 0x3, 0x10000, 0x1, 0x7, 0x0, 0x42c, 0x7ff, 0x61c4aa8b, 0xfffffffffffffffe, 0x10, 0xfffffffffffffffd, 0xff}) (async) writev$auto(r1, &(0x7f0000000040)={&(0x7f0000000180)="1797a62bf8f971b5313fcd1e419cc27d3b95ff604188d7a0f30d75b4b3d44f55ec83b5d1891e53468e58b8d9e683b654bd979fede6f63476d5af718628822c84afd6894a07fc643bb9b120be576b9659a9265bfaa14c84aa93e416e4a496a5c42a2b51314a42ee9a9b89764adca4f9aa1bed7da2c2ed29e69daf5b31855d21337312e49ba7a0c44efea43141ec36d7f73320", 0x20000}, 0x9) r4 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r4, 0x1) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) fcntl$auto_F_DUPFD_QUERY(r1, 0x403, r5) (async) r6 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), r4) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240080d1}, 0x20000044) flock$auto(r5, 0x2) (async) flock$auto(r5, 0x2) close_range$auto(r1, 0xffffffffffffffff, 0x0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000004c0)="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", 0x4) 9.7699411s ago: executing program 1 (id=3762): write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) seccomp$auto_SECCOMP_SET_MODE_STRICT(0x0, 0x3, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) bpf$auto(0x5, &(0x7f0000000100)=@test={0xffffffffffffffff, 0x3, 0x8, 0x1, 0x4, 0x3, 0x7, 0x5ccc, 0x4, 0xfffffffc, 0x47fff, 0x3a45, 0x5e59, 0x5, 0xffff}, 0x101) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x2, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socket(0x2c, 0x80000, 0xfffffffd) socketcall$auto_SYS_SHUTDOWN(0xd, 0x0) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/quota_mem_pressure_us\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f00000023c0)=0xf6, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x3, 0x8000) connect$auto(0x3, &(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) 7.424568436s ago: executing program 1 (id=3769): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) sendfile$auto(r1, r1, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/idle\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000000)='72\xa1\x84\xbd0\x00f\x19\x1c\xc7k\x00\x00\x00\x00', 0x7) write$auto(r5, 0x0, 0x1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7e, 0x0, 0x60}}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b", 0x6) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000200)=@link_detach, 0x5b) 6.163478477s ago: executing program 1 (id=3774): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) time$auto(0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000014c0)={{0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)="e4fd469cc1d5fadfd8ad60b7", 0x8000, 0x0, 0x0}, {[0x200, 0x4, 0x2, 0x7]}, 0x7ff, 0x8001, 0x0}) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, &(0x7f0000000000)) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) r4 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) read$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000003dc0)=""/167, 0xa7) read$auto(r3, 0x0, 0x4b) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) read$auto_proc_page_owner_threshold_(r1, &(0x7f0000000040)=""/123, 0x7b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram10/queue/discard_max_hw_bytes\x00', 0x68e00, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) writev$auto(r5, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000180)={0x2, 0x2, 0x4a47, 0x81, 0x9f, 0x8, 0x0}) 5.487571996s ago: executing program 0 (id=3776): r0 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/ieee80211/phy8/hwsim/dfs_simulate_radar\x00', 0x8000, 0x0) recvfrom$auto(r0, &(0x7f00000004c0)="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", 0x1, 0x101, &(0x7f00000005c0)=@phonet={0x23, 0x3, 0x4, 0x5}, &(0x7f0000000640)=0x9) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) setregid$auto(0x81, 0x5) unshare$auto(0x7) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) rseq$auto(&(0x7f0000000200)={0xe, 0x402, 0xfb82, 0x3, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) pipe$auto(0x0) msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x8, 0x333, 0x25}, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x8, 0x2, 0x81, 0xbe, 0x1400000, 0xf, 0xfd6c, 0x1, 0x3, @inferred, @inferred=0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r2, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r2, 0x4, 0x6, 0x101, 0x1, r2, 0xffffffffffffffff}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SG_SET_TIMEOUT2(r3, 0x2201, &(0x7f0000000680)="dbe1d4028b379cf387de318108063fc06fa7528d65a80040bd82e1fe3000e21f8f38b225893989b4ed46") close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r4 = waitid$auto_P_ALL(0x0, 0x8, &(0x7f0000000100)={@_si_pad}, 0x0, &(0x7f0000000240)={{0x2, 0x3}, {0xbc10, 0x5}, 0x3, 0x8, 0x9, 0x3, 0x5b3b, 0x8, 0x7, 0x5, 0x6c, 0x6, 0x4, 0x1, 0x2}) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000400)={{0x0, 0x0, r1, 0x6, 0x1000, 0x2, 0x2}, 0x0, 0x0, 0x1, 0x6, @raw=0x4, @inferred=r4, 0x81, 0x0, &(0x7f0000000300)="22e15a75fde2e0d0d5c2de70b01d70a91b8cb427eef836e651eee1946f412d2ed0d6f6e741dc95b789d26d37fa50bbe2dd08e8faae99f4a478ea59775d83b64d447715fba2ebf5ef93cc7084c08b90f47287001d838b6d58358721f77ead8574b4ab900b09761894ec9811f5f0845a56681d85a0263c220dbe22ab25cb470e464814736c59a233570e323033e0b5ef3955fa4300196946e85d7166ddf557bc1db703505e3a746a61714286807a7ff37f19e196f4c466d83cf97bb3f154c6ae4467c5bbf0d99196ae166ad8dee548ff951c60967fbe58c3c28fe180f2f2c498ed05d4872ae46648248472b32a70e3ae7dfe71395273", &(0x7f0000000180)="7ef2d28b10f8dd4d8d788e3143a5e6cddcd78c18c16a8d9c4608edf6cbd1fd6523a8c235c73c794690f24d8bda4990a223ec47daa24cd0e85a4a59aa826e2641ff78c9a2d1ec92a59c8deb537061574a6bd630ea22d66f4bdc7f6faf97470761"}) vmsplice$auto(0xffffffffffffffff, 0x0, 0x5, 0x1) clone$auto(0x7ffc, 0x101, &(0x7f0000000600)=0x8000, 0x0, 0x9) 5.364684867s ago: executing program 0 (id=3777): unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x244, r2, 0x1, 0x60bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_PUBLIC_KEY={0x20, 0x4, "b2491d53bd113cd5d81994a5fd79f363fdbfce01651b2a4cadbf92c9"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x6}, @WGDEVICE_A_PEERS={0x1f4, 0x8, 0x0, 0x1, [@typed={0x8, 0xfc, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x134, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x14c}, @nested={0x145, 0x130, 0x0, 0x1, [@generic="7222cca0a6e563607635d3dcb6b16542857d6348246b0b51b854526b5762b464ce8e34146d972ebfa22232507e8e9609d03b6f1652eedef15d3f7ec43fed305ba1dd0f776902e05500478176f5ad8b255a3111ac8b19900bdcf933745598bbb7054e995a89019a1970ae05d635e3b818f1e86b82d7bda5542e04beda074e0f06d435b1205b5a1f36fc22b091b35d4f2f42ecb83ef300671f4649220606ea1057944bb1e86ef17ed1fdeb98a34d23837ba529cc", @generic="230f90bfdcd50a1619e77c461630411e3f8193e36cb1dcfd0f37e0914c286fba97ba75946ebe2b01a123a6172e40f87d15978a92e09eba8b109a24f1e17dd6fdbb4dedd1be2bd55f9f367312f64427bed7274f96ac4c250402ded177cff68af8028aa49c99c5f0d1e44a9d5b0819e0e3517fe82b8b3c77e685707427252a30d3d68f1600a7bbdb93ca0dc7552a68"]}, @typed={0x8a, 0x18, 0x0, 0x0, @binary="fccfb542306678f5f1877c3cb77da4c015736c1bab88ce6620057eb501aea864df229def82e46ff162a2fc1c2f4900462be9243a7514cfef7cf542b60fedf9e5bac05bcc204ca73b20c22e0aaf9e3cf61d18b79bc2eb2e683f94a11ddbf4d468ee090612d87b18d4eda68f790cb84cd2e046bb3b07a0edd14b4deb5fcd6579a9a653c5d4f3be"}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000811}, 0x890) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty36\x00', 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/bus/hid/drivers/hid-alps/new_id\x00', 0x200000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, 0x0, 0x4000040) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af13, r5) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) syslog$auto(0xc63d2a6, 0x0, 0x10001) write$auto(0x3, 0x0, 0xfffffdef) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0xee01, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100105}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.108743734s ago: executing program 4 (id=3778): mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000040)={0x18, @raw, 0x4, 0x787c31ce, 0x6}, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)={0x0, 0xc7, {0xfffffffb, 0x7, 0x5, 0x0, 0x0, 0x1, 0x101, 0x7, 0x2}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x10b201, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') setns(r2, 0x10000000) read$auto(r1, 0x0, 0x5) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x2a1, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0xfffffffd, 0x1, 0x40, 0x76c5, 0x100008, 0x100000000}}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) io_uring_setup$auto(0x5, 0x0) r5 = getpid() msgctl$auto_IPC_SET(0x65c, 0x1, &(0x7f0000000300)={{0x4, 0x0, 0xee01, 0x6, 0xfffffffc}, &(0x7f0000000240)=0x3, &(0x7f00000002c0)=0x3, 0x8000000000000000, 0x40, 0xe, 0x3, 0xc, 0x7f, 0xdf, 0x101, @raw=0x7, @inferred=r5}) fstat$auto(r4, &(0x7f00000003c0)={0xd, 0xa, 0xfffffffffffffff8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000, 0x7fffffffffffffff, 0x4, 0x67d, 0x88, 0x1, 0x61b4, 0x80000001, 0x0, 0x4}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr$auto(r8, 0x0, 0x7b) msgctl$auto(0x101, 0x9, &(0x7f0000000500)={{0x67, r6, r7, 0x90f, 0x9, 0x8, 0x8}, &(0x7f0000000480)=0x7, &(0x7f00000004c0)=0x3, 0x0, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0x2, 0x9, @inferred=r8, @raw=0x2}) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000380)="751c2090", 0xffffffff}, 0x6, 0x0) rt_tgsigqueueinfo$auto(r5, 0x0, 0xffff7fff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) 4.883072895s ago: executing program 6 (id=3779): socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1/accept_redirects\x00', 0x1a3080, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) setsockopt$auto(r0, 0x2, 0xfffffffe, 0x0, 0xe) socket(0x22, 0x2, 0x2) unshare$auto(0x40000080) sysfs$auto(0x2, 0xe, 0x7) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) landlock_restrict_self$auto(r0, 0x642) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x1, 0x480, 0x0, &(0x7f0000000040)=0x18) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x19, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) pread64$auto(r5, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) sendfile$auto(r4, r4, 0x0, 0x6) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/veth0/gc_stale_time\x00', 0x80400, 0x0) read$auto(r7, 0x0, 0x1ff) write$auto(r6, 0x0, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x100, 0x0) fanotify_init$auto(0x6, 0x2000000000002) 4.479927401s ago: executing program 4 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r0) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x20000041) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x2, 0x0) (async) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x2, 0x0) close_range$auto(0x2, r2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pidfd_open$auto(0x1, 0x0) (async) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x0) (async) setns(r3, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000180)="77d742e7ce8d66ca2c3de4b96040789e8ada625072efad78d0f0b4920925caec4b4b2b9289b410c11c814cc933013c704471bb496ab26ff365d540ca8c5d02cd910b30adcc4e11218886140a76e004b2ee5a0b4db1a43d27304ad9b12c2ade25f1874da8217e13544e51c4ce4ae652886856d1b1c4ecc31ed8120fd6071fc50a50c4cddd9cac93") r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mq_unlink$auto(&(0x7f0000000040)='%-}-)}\'[)\x00') getpid() r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb1\x00', 0x111000, 0x0) write$auto(r5, 0x0, 0x51e) (async) write$auto(r5, 0x0, 0x51e) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b200, 0x0) close_range$auto(0x2, r7, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_CREATE_VM(r7, 0x41a0ae8d, 0x0) 3.890265202s ago: executing program 6 (id=3781): close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, &(0x7f00000000c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x98\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400000000000004}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x60000, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/3/affinity_hint\x00', 0x2080, 0x0) read$auto(r5, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0xc9e3) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) writev$auto(r1, &(0x7f00000000c0)={&(0x7f0000000080), 0x8}, 0x94) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r2) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f0000000180)={{0x6, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x7, 0x5}, &(0x7f0000000280)=0x7, &(0x7f0000000140)=0x7, 0x4, 0x0, 0x6, 0x5, 0x6, 0x0, 0x7, 0xa03e, @raw=0xfffffffc, @raw=0x8}) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x1488, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0xe7, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @fd=r1}]}]}, @TIPC_NLA_PUBL={0x1461, 0x3, 0x0, 0x1, [@generic="7bbfe8db3f9fb46a3e75e0eeacc8a6ed46f6dbdbf5e0012ca75bc6bebfcb776b4fd20725b95702534ccbf3aa93f895edd047644043", @nested={0xd6, 0x151, 0x0, 0x1, [@generic="ba40e3", @typed={0xa, 0x13a, 0x0, 0x0, @str=',{@.-\x00'}, @generic="569d44f661857936aede8c7fae48bab5cbeaa53808ddc092a051eb37d6fa4fb8ec64c5a60cb210cdf66bcce51c354a9cfacb2c509875c27dec7f83eba206677dbda7910f484059bc67f7c7f9", @nested={0x4, 0x5d}, @generic="d084ba51efd0", @generic="c1db133c8cdc409467cd93e1dabf9c53263bc9c255343ed2c0475fcfedf402dba9afbcd583a19da68f64f4f618cc5d67b426ecd7db281e35b1589080501f90dc08465de00852b09e5400ee337a1c718dc5740c92530b9d1c13b1c042e2fa234f1667c3601c68fdaac8cdadfa89"]}, @nested={0x1008, 0xe, 0x0, 0x1, [@typed={0x1004, 0x78, 0x0, 0x0, @binary="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"}]}, @generic="26c3b4e38cbe0d2a5a06a628cba63014e3a0f52c21929894310a160bbc620d7dd189eda329983793f759dbe47d91ac875231c9cf5d86de41ec19c9d3e64b793d1f7b342661e57ae344bd631cbc11c6507c195105881a19de6bdb21ffcc1544ce8a8b9e78b9d1c949120a2a2f5e61f6d1e7cb57c330c37837adfc737ade4ec08d463255e557cbc6176c2f7a5f6839229b76bedbff6610c78a413f2ce87f2fb489", @nested={0x1a9, 0xd0, 0x0, 0x1, [@generic="ad2a88ebbea1e1aca6d9619846f5e892f89904b14e9be9f7f2e1afbeca44523f974a3e6f7b9fdd60c82d454f356fa42c1e1eab2e36b811107c76887870680b2bc43b9a5c93fa3bb535c417bc95c827fd00ef2e5d181fd1597c8c094d50bc3a330c51103ee69cf1eb1788e839ae9bbff93df30209b43383fd25c10a50167de159536464e3a754048fb4a293cbe98c1aa1412947d432da7755a8967edb35e52abe53cc654996c40e5f9c446809362a52cd97a1b5a272e4874192a48c8c83cbd0c19746055564b033762c1a953374baabd25733719c5dc4f381bbeeffedbf40a268f9bd557bce783419cd3497b8e7f23f7b40537f", @generic="ebe05baf4389570dd6df4dba371338956290ac50a8adef6cdff78f984477da0d55115836e506e2cb0351ff3a3fc64c1fb4131ec39926f1dcfb72656e2f93d20fcd8c7af9e1da7b2e06be342a18df3c2da26e854bf41ad5", @generic="a29e5496cb4806619aed2d8208066f5978f1ec5a5293633cd07a993dd1c985", @generic, @generic="20be8de1dc7df9538227ed9dd79fc452292bcd968f50e8e0f8ee8f8ec2df41cc41d9d909764f4537939a49ad5b7ab2af7bfda5565c37511ad06957ff"]}, @generic="322fd6ab63ff069dc334db497e1af2bff9960f56f18e155ea66419421bae1cb4df3e7d304dfbcc0d7e75996be989b19321565bda9e90cb0a90ebcdf28ac06b1bbb5bee3d64dfa1acc6e988ffb1b4d4346935645ce50d9006a9b73cd8d0a00c70f376259df323c0ac24b49d898f16a8110578d5721ff460433a6d823fbbe6e1a8f08b6c0ac637c289a1d54e0f2c7076eceaa39428e72e722076cfd2720551fef4053c57553442ee18cd791e2b5de41b044094a63e3ec1efa361458f7ad594002f22350e6e9c4786fc0811ff756d75539e9fe63540e2ddfbd62b7d517a33903cb6456fd7b897bd12d366e436595e1d012604975d43", @typed={0x8, 0x4d, 0x0, 0x0, @uid=r7}]}]}, 0x1488}, 0x1, 0x0, 0x0, 0x68854}, 0x0) 3.571210907s ago: executing program 0 (id=3782): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac4203cbd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d55745eff6aa689e859dcaeff39bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54de46e25986315b30956face49e26e8dcbcc9e1363627a9f38a2ee8304307dab4013d77f4c337551e2a6ac230788513cdd15e734263e4973c75757d9809c510977adc3be6c5b110597b09c7dad1f54e4506744710b53221e4a7982ac4c59bfae6370258b5af7864a4ca680addd736e35da579cc0e975e6cdefa3d082c8b4b10b205415c32797d9450c002895c9b40", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0x9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xb9442, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) ioctl$auto(0x3, 0x40104d06, 0x5) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x201, 0x2, 0x13, 0x1) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 3.350497911s ago: executing program 6 (id=3783): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x58) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) 3.165008235s ago: executing program 4 (id=3784): sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) r0 = bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001880)=""/4101, 0x1005) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffdffd}, 0x6, 0x400000000000008, 0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) arch_prctl$auto_ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x10) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0xffffffffffffffff, 0x89f2, 0x24) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x20048004) 2.616030684s ago: executing program 6 (id=3785): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2a, 0x2, 0xb) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x401, 0x38, 0x0, &(0x7f0000000200)=0x7) r1 = fcntl$auto(r0, 0x5, 0x6) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17) socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x4, 0x20086, 0x0, &(0x7f0000000000)=0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) unshare$auto(0x40000080) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf257e0000001905083e0c313710cd7e89ac876ab7a2f8d254e800b12b4c52f0627f8de878caf9e40edd6b2ab5833263fffacca5bfe46ad050b717ef2a167e1352c2bccadd0866a5723c3bec0ee706e77f200085c24876f0065e0ed2d78d18386bb9028ec1f9cb812a408036"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_SAR_SPEC={0x38, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x34, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r9 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r9, 0xaf01, 0x5) ioctl$auto(r9, 0x4008af03, r6) 2.050711719s ago: executing program 0 (id=3786): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5715, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyx1\x00', 0x0, 0x0) 1.796585825s ago: executing program 0 (id=3787): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xa2001, 0x0) socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x15, 0x80000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xa083, 0x0) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x7, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x26, 0x80002, 0xf230) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) ioprio_get$auto(0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x10000040eb2, 0x402, 0x300000000000) get_mempolicy$auto(0x0, 0x0, 0xfffffffffffffffe, 0x99d6, 0x3) 1.782379478s ago: executing program 4 (id=3788): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0x8000000000000000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) sysfs$auto(0x9, 0x9, 0x6) 1.645077584s ago: executing program 1 (id=3789): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) open(&(0x7f0000000100)='.\x00', 0x40000, 0x104) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x29, 0x20, 0x0, 0x8002) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe2, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x40, 0x2000000000007, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) prctl$auto_PR_SET_VMA(0x53564d41, 0x3, 0x6, 0x9, 0x4) 1.456269407s ago: executing program 4 (id=3790): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/error_log\x00', 0xb81, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x7, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x6, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) process_vm_readv$auto(0x0, 0x0, 0x40000000001, 0x0, 0xa, 0x0) (async) process_vm_readv$auto(0x0, 0x0, 0x40000000001, 0x0, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) (async) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x8, 0xa, 0x3, 0x81, 0xffffffff, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x20000800001, 0xffffffff, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x8, 0x81) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x8, 0xa, 0x3, 0x81, 0xffffffff, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x20000800001, 0xffffffff, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x8, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) pipe2$auto(0x0, 0x80) (async) pipe2$auto(0x0, 0x80) 1.267579768s ago: executing program 1 (id=3791): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0xff}}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1398a0584259c607}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0xc, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r2) 827.740718ms ago: executing program 1 (id=3792): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) socket(0x18, 0x4, 0x3) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = set_tid_address$auto(&(0x7f0000000040)) prctl$auto(0x2, 0x8, r1, 0xe, 0xfa91) io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getgroups$auto(0xeda, 0x0) socket(0x2, 0x5, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getdents64$auto(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x4, 0x5, 0xd4, "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"}, 0x200) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendto$auto(r2, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) 545.949472ms ago: executing program 6 (id=3793): r0 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50cec64145b4bba0fb98cf4aa35ee2bd0bf021741c0000000000000000000000fb00000000f751fe56685b3121cc708e887c2ce186eb03942ba226934341c877e3bb89133f2b409cb9d415e23f502ecace6c3c7092a6976db9362dc6090833bdf0bf1e86848d73f7e1d053e810fe476ab3b075dae841d84c12ebed0a8b06b1ab12dec1599464abe6276933f308edc45530b234ea79f397a56dcae45d5ffd42acd2ed", @ANYRES16=r0, @ANYBLOB="00082bbd7000fddbdf250100000008000400010000000800030072000000"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 324.985393ms ago: executing program 4 (id=3794): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0x9, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40b4ff741f26f506}, 0x0) socket(0x11, 0x80000, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xa, 0x8}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000300)="69fe2a70e9e3e358b5082752e45ac5807307b309e75d51e97694c4f0051faff4d061d0b61de510521ecb40ab8cb4f0b3c4aff1bd2efce00b823f9ae7dbd9ee850308ffea565e0df78fe1c421a38e2227e4fd8e3f44d1bd7d1c97d05c0ae255645a0828f4f63c540adaf928e09c1d277d46b0fb1a8d4afeb23cd1b4a404b3f6072a2c883942abe357a6d71833bc9d163d48c44b8e59bf010309181630222ca71f9a867d796cf474060c471e87eeda8c7cd7af477804518a48aa296cfa5f9231808e4de7e67870bacf19b70d9be375a5d4131fe12e790cb170aae38d99d500c8cc9e73222ad67b40888ba762a871", 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x4, &(0x7f0000000180)="8fd10000000ab5918cbd14a2bb007c0422179fc57d40f9ce2c232a45113a4dce327a5ba4b9a2df97f83458a1dfae97c686003806378c", 0x5, 0x1400}, 0x5}, 0x2, 0x100fe) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xb9442, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chown$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x40104d06, 0x5) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x201, 0x2, 0x13, 0x1) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 259.015086ms ago: executing program 6 (id=3795): mmap$auto(0x47, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5 1 [ 938.384123][T15207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 938.400212][T15207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 938.411203][T15207] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 938.420154][T15207] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 938.722659][T20426] input: f as /devices/virtual/input/input75 [ 938.830587][T20429] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 938.948121][T20423] chnl_net:caif_netlink_parms(): no params data found [ 939.200987][T20423] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.235649][T20423] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.260610][T20423] bridge_slave_0: entered allmulticast mode [ 939.286662][T20423] bridge_slave_0: entered promiscuous mode [ 939.315946][T20423] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.348643][T20423] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.377564][T20423] bridge_slave_1: entered allmulticast mode [ 939.414992][T20423] bridge_slave_1: entered promiscuous mode [ 939.531284][T20423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.584049][T20423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.693903][T20423] team0: Port device team_slave_0 added [ 939.725580][T20423] team0: Port device team_slave_1 added [ 939.909474][T20423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.919177][T15207] Bluetooth: hci3: command tx timeout [ 939.947829][T20423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.040334][T20423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.089052][T20423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.108315][T20423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.158189][T20442] netlink: 'syz.4.3497': attribute type 6 has an invalid length. [ 940.195330][T20442] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3497'. [ 940.214961][T20423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.373822][T20423] hsr_slave_0: entered promiscuous mode [ 940.401161][T20423] hsr_slave_1: entered promiscuous mode [ 940.424141][T20423] debugfs: 'hsr0' already exists in 'hsr' [ 940.446997][T20423] Cannot create hsr debugfs directory [ 940.477647][T15207] Bluetooth: hci5: command tx timeout [ 941.098489][T20423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 941.128376][T20423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 941.283237][T20423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 941.378268][T20423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 941.680448][T20423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.747504][T20423] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.793629][T12423] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.801606][T12423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.892949][T12423] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.900840][T12423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.997428][T15207] Bluetooth: hci3: command tx timeout [ 942.070661][T20423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 942.120118][T20423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.555090][T15207] Bluetooth: hci5: command tx timeout [ 942.696159][T16113] udevd[16113]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 942.944610][T20423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.852181][T20423] veth0_vlan: entered promiscuous mode [ 943.901794][T20423] veth1_vlan: entered promiscuous mode [ 944.014798][T20423] veth0_macvtap: entered promiscuous mode [ 944.054103][T20423] veth1_macvtap: entered promiscuous mode [ 944.120825][T20423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.167098][T20423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.217683][T18222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.276879][T18222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.304018][T18222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.422413][T18222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.537373][T12423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.585562][T12423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.635385][T15207] Bluetooth: hci5: command tx timeout [ 944.676165][T12431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.703315][T12431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.955024][T20515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3509'. [ 946.491647][T20526] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.3511: iget: checksum invalid [ 946.622039][T20526] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 946.716512][T15207] Bluetooth: hci5: command tx timeout [ 946.735571][T20526] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.3511: iget: checksum invalid [ 946.808231][T20526] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 946.900937][T20526] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.3511: iget: checksum invalid [ 946.991238][T20526] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 947.088518][T20526] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.3511: iget: checksum invalid [ 947.198111][T20526] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 947.297677][T20526] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 947.464536][T20526] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 948.017492][T20542] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 8 with max blocks 2 with error 117 [ 948.150937][T20542] EXT4-fs (sda1): This should not happen!! Data will be lost [ 948.150937][T20542] [ 949.650162][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 949.662682][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 949.676427][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 949.685121][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 949.693917][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 950.525254][T20578] chnl_net:caif_netlink_parms(): no params data found [ 950.657708][T20592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3528'. [ 950.703640][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 950.756892][T20592] netlink: 'syz.5.3528': attribute type 19 has an invalid length. [ 950.777975][T20592] netlink: 226 bytes leftover after parsing attributes in process `syz.5.3528'. [ 950.904057][T20578] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.926263][T20578] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.949100][T20578] bridge_slave_0: entered allmulticast mode [ 950.988592][T20578] bridge_slave_0: entered promiscuous mode [ 951.053469][T20578] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.061561][T20578] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.135367][T20578] bridge_slave_1: entered allmulticast mode [ 951.156713][T20578] bridge_slave_1: entered promiscuous mode [ 951.304793][T20578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.343713][T20578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.458726][T20578] team0: Port device team_slave_0 added [ 951.495349][T20578] team0: Port device team_slave_1 added [ 951.753944][T20578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.761703][T20578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.796100][ T5837] Bluetooth: hci6: command tx timeout [ 951.891306][T20578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.976017][T20578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.999925][T20578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.109205][T20578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.314292][T20578] hsr_slave_0: entered promiscuous mode [ 952.362189][T20578] hsr_slave_1: entered promiscuous mode [ 952.369020][T20578] debugfs: 'hsr0' already exists in 'hsr' [ 952.405957][T20578] Cannot create hsr debugfs directory [ 952.528658][T20604] hub 1-0:1.0: USB hub found [ 952.659183][T20604] hub 1-0:1.0: 1 port detected [ 953.233338][T20578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 953.329278][T20578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 953.374863][T20578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 953.415646][T20578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 953.700207][T20578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.764602][T20578] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.827885][T12428] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.835964][T12428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.846198][ T5837] Bluetooth: hci6: command tx timeout [ 953.916966][T12428] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.925066][T12428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.030701][T20578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 954.198990][ T30] audit: type=1400 audit(4294967304.843:50): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=20624 comm="syz.5.3535" [ 954.582660][T20578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.158766][T20578] veth0_vlan: entered promiscuous mode [ 955.189290][T20578] veth1_vlan: entered promiscuous mode [ 955.282112][T20578] veth0_macvtap: entered promiscuous mode [ 955.312725][T20578] veth1_macvtap: entered promiscuous mode [ 955.403156][T20578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.441791][T20578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.496624][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.533247][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.584758][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.666603][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.910175][ T5837] Bluetooth: hci6: command tx timeout [ 955.925137][T12428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.961071][T12428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.045381][T12428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.081227][T12428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.985675][T20661] __vm_enough_memory: pid: 20661, comm: syz.5.3539, bytes: 4398046511104 not enough memory for the allocation [ 957.140722][T20661] FAULT_INJECTION: forcing a failure. [ 957.140722][T20661] name failslab, interval 1, probability 0, space 0, times 0 [ 957.219672][T20661] CPU: 0 UID: 0 PID: 20661 Comm: syz.5.3539 Not tainted syzkaller #0 PREEMPT(full) [ 957.219699][T20661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 957.219710][T20661] Call Trace: [ 957.219727][T20661] [ 957.219734][T20661] dump_stack_lvl+0x16c/0x1f0 [ 957.219760][T20661] should_fail_ex+0x512/0x640 [ 957.219786][T20661] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 957.219807][T20661] should_failslab+0xc2/0x120 [ 957.219832][T20661] kmem_cache_alloc_noprof+0x75/0x6e0 [ 957.219850][T20661] ? getname_flags.part.0+0x4c/0x550 [ 957.219881][T20661] ? getname_flags.part.0+0x4c/0x550 [ 957.219904][T20661] getname_flags.part.0+0x4c/0x550 [ 957.219936][T20661] getname_flags+0x93/0xf0 [ 957.219952][T20661] do_sys_openat2+0xb8/0x1d0 [ 957.220090][T20661] ? __pfx_do_sys_openat2+0x10/0x10 [ 957.220122][T20661] ? find_held_lock+0x2b/0x80 [ 957.220147][T20661] __x64_sys_openat+0x174/0x210 [ 957.220174][T20661] ? __pfx___x64_sys_openat+0x10/0x10 [ 957.220209][T20661] do_syscall_64+0xcd/0xfa0 [ 957.220232][T20661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.220251][T20661] RIP: 0033:0x7f759c98f6c9 [ 957.220269][T20661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.220286][T20661] RSP: 002b:00007f759d80b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 957.220303][T20661] RAX: ffffffffffffffda RBX: 00007f759cbe5fa0 RCX: 00007f759c98f6c9 [ 957.220315][T20661] RDX: 0000000000004040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 957.220326][T20661] RBP: 00007f759ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 957.220337][T20661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.220348][T20661] R13: 00007f759cbe6038 R14: 00007f759cbe5fa0 R15: 00007ffdba3b7248 [ 957.220371][T20661] [ 957.857770][T20670] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 957.889397][T20670] input: as /devices/virtual/input/input76 [ 958.008097][T20654] Bluetooth: hci6: command tx timeout [ 958.349863][T20686] netlink: 350 bytes leftover after parsing attributes in process `syz.1.3546'. [ 958.501972][T20690] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 958.540439][T20690] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 958.589147][T20671] Bluetooth: hci5: unexpected event 0x35 length: 13 > 6 [ 958.599180][T20690] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3547'. [ 959.430755][T20710] vivid-003: ================= START STATUS ================= [ 959.486537][T20710] vivid-003: Radio HW Seek Mode: Bounded [ 959.520570][T20710] vivid-003: Radio Programmable HW Seek: false [ 959.527377][T20710] vivid-003: RDS Rx I/O Mode: Block I/O [ 959.605571][T20710] vivid-003: Generate RBDS Instead of RDS: false [ 959.637782][T20710] vivid-003: RDS Reception: true [ 959.662888][T20710] vivid-003: RDS Program Type: 0 inactive [ 959.685362][T20710] vivid-003: RDS PS Name: inactive [ 959.708926][T20710] vivid-003: RDS Radio Text: inactive [ 959.735292][T20710] vivid-003: RDS Traffic Announcement: false inactive [ 959.763239][T20710] vivid-003: RDS Traffic Program: false inactive [ 959.788192][T20710] vivid-003: RDS Music: false inactive [ 959.817865][T20710] vivid-003: ================== END STATUS ================== [ 959.835874][T20701] bond0: option fail_over_mac: invalid value () [ 961.284817][T20732] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 961.940541][T16113] udevd[16113]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 962.056622][T20743] device-mapper: ioctl: Invalid ioctl structure: name , dev 4 [ 962.378225][T20748] netlink: 504 bytes leftover after parsing attributes in process `syz.5.3559'. [ 962.682809][T20754] input: f as /devices/virtual/input/input77 [ 962.935703][T20759] bridge0: port 2(syz_tun) entered blocking state [ 962.984610][T20759] bridge0: port 2(syz_tun) entered disabled state [ 963.008041][T20759] syz_tun: entered allmulticast mode [ 963.031726][T20759] syz_tun: entered promiscuous mode [ 963.054877][T20759] bridge0: port 2(syz_tun) entered blocking state [ 963.062100][T20759] bridge0: port 2(syz_tun) entered forwarding state [ 963.496966][T20767] FAULT_INJECTION: forcing a failure. [ 963.496966][T20767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.616452][T20767] CPU: 0 UID: 0 PID: 20767 Comm: syz.5.3565 Not tainted syzkaller #0 PREEMPT(full) [ 963.616478][T20767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 963.616488][T20767] Call Trace: [ 963.616494][T20767] [ 963.616501][T20767] dump_stack_lvl+0x16c/0x1f0 [ 963.616525][T20767] should_fail_ex+0x512/0x640 [ 963.616555][T20767] _copy_to_user+0x32/0xd0 [ 963.616584][T20767] simple_read_from_buffer+0xcb/0x170 [ 963.616613][T20767] proc_fail_nth_read+0x197/0x240 [ 963.616633][T20767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.616653][T20767] ? rw_verify_area+0xcf/0x6c0 [ 963.616669][T20767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.616687][T20767] vfs_read+0x1e4/0xcf0 [ 963.616708][T20767] ? __pfx___mutex_lock+0x10/0x10 [ 963.616729][T20767] ? __pfx_vfs_read+0x10/0x10 [ 963.616753][T20767] ? __fget_files+0x20e/0x3c0 [ 963.616779][T20767] ksys_read+0x12a/0x250 [ 963.616797][T20767] ? __pfx_ksys_read+0x10/0x10 [ 963.616821][T20767] do_syscall_64+0xcd/0xfa0 [ 963.616842][T20767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.616876][T20767] RIP: 0033:0x7f759c98e0dc [ 963.616891][T20767] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 963.616907][T20767] RSP: 002b:00007f759d80b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 963.616927][T20767] RAX: ffffffffffffffda RBX: 00007f759cbe5fa0 RCX: 00007f759c98e0dc [ 963.616938][T20767] RDX: 000000000000000f RSI: 00007f759d80b0a0 RDI: 0000000000000003 [ 963.616948][T20767] RBP: 00007f759d80b090 R08: 0000000000000000 R09: 0000000000000000 [ 963.616958][T20767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.616967][T20767] R13: 00007f759cbe6038 R14: 00007f759cbe5fa0 R15: 00007ffdba3b7248 [ 963.616989][T20767] [ 963.829565][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.452294][T20770] FAULT_INJECTION: forcing a failure. [ 964.452294][T20770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 964.487443][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.125327][T20770] CPU: 0 UID: 0 PID: 20770 Comm: syz.6.3566 Not tainted syzkaller #0 PREEMPT(full) [ 965.125368][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 965.125379][T20770] Call Trace: [ 965.125385][T20770] [ 965.125393][T20770] dump_stack_lvl+0x16c/0x1f0 [ 965.125420][T20770] should_fail_ex+0x512/0x640 [ 965.125451][T20770] should_fail_alloc_page+0xe7/0x130 [ 965.125477][T20770] prepare_alloc_pages+0x3c2/0x610 [ 965.125500][T20770] ? rcu_is_watching+0x12/0xc0 [ 965.125522][T20770] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 965.125543][T20770] ? rcu_is_watching+0x12/0xc0 [ 965.125560][T20770] ? trace_mm_page_alloc+0x11f/0x1a0 [ 965.125585][T20770] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 965.125606][T20770] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 965.125628][T20770] ? is_bpf_text_address+0x8a/0x1a0 [ 965.125652][T20770] ? bpf_ksym_find+0x124/0x1c0 [ 965.125672][T20770] ? is_bpf_text_address+0x94/0x1a0 [ 965.125695][T20770] ? kernel_text_address+0x8d/0x100 [ 965.125722][T20770] ? __kernel_text_address+0xd/0x40 [ 965.125737][T20770] ? unwind_get_return_address+0x59/0xa0 [ 965.125763][T20770] alloc_pages_bulk_noprof+0x71c/0x1410 [ 965.125780][T20770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 965.125810][T20770] ? policy_nodemask+0xea/0x4e0 [ 965.125835][T20770] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 965.125854][T20770] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 965.125886][T20770] kasan_populate_vmalloc+0x112/0x2d0 [ 965.125905][T20770] ? alloc_vmap_area+0x8b5/0x29e0 [ 965.125930][T20770] alloc_vmap_area+0x960/0x29e0 [ 965.125960][T20770] ? __pfx_alloc_vmap_area+0x10/0x10 [ 965.125988][T20770] __get_vm_area_node+0x1ca/0x330 [ 965.126015][T20770] __vmalloc_node_range_noprof+0x271/0x1480 [ 965.126040][T20770] ? kernel_clone+0xfc/0x930 [ 965.126067][T20770] ? kernel_clone+0xfc/0x930 [ 965.126099][T20770] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 965.126128][T20770] ? rcu_is_watching+0x12/0xc0 [ 965.126148][T20770] ? kernel_clone+0xfc/0x930 [ 965.126167][T20770] __vmalloc_node_noprof+0xad/0xf0 [ 965.126190][T20770] ? kernel_clone+0xfc/0x930 [ 965.126212][T20770] copy_process+0x2c77/0x76a0 [ 965.126243][T20770] ? __pfx_copy_process+0x10/0x10 [ 965.126263][T20770] ? futex_private_hash_put+0x176/0x300 [ 965.126288][T20770] ? futex_private_hash_put+0x18a/0x300 [ 965.126314][T20770] kernel_clone+0xfc/0x930 [ 965.126335][T20770] ? __pfx_futex_wake+0x10/0x10 [ 965.126366][T20770] ? __pfx_kernel_clone+0x10/0x10 [ 965.126400][T20770] __do_sys_clone+0xce/0x120 [ 965.126421][T20770] ? __pfx___do_sys_clone+0x10/0x10 [ 965.126452][T20770] ? xfd_validate_state+0x61/0x180 [ 965.126484][T20770] do_syscall_64+0xcd/0xfa0 [ 965.126506][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.126523][T20770] RIP: 0033:0x7f8dc3d8f6c9 [ 965.126538][T20770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.126554][T20770] RSP: 002b:00007f8dc4c2efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 965.126571][T20770] RAX: ffffffffffffffda RBX: 00007f8dc3fe5fa0 RCX: 00007f8dc3d8f6c9 [ 965.126581][T20770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000 [ 965.126591][T20770] RBP: 00007f8dc3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 965.126600][T20770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 965.126610][T20770] R13: 00007f8dc3fe6038 R14: 00007f8dc3fe5fa0 R15: 00007ffdeda0f7c8 [ 965.126633][T20770] [ 965.657597][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.652318][T20654] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 966.766471][T20793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 966.894449][T20793] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 967.135314][T20800] FAULT_INJECTION: forcing a failure. [ 967.135314][T20800] name failslab, interval 1, probability 0, space 0, times 0 [ 967.176363][T20793] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 967.195556][T20793] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 967.241414][T20800] CPU: 0 UID: 0 PID: 20800 Comm: syz.5.3572 Not tainted syzkaller #0 PREEMPT(full) [ 967.241441][T20800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 967.241451][T20800] Call Trace: [ 967.241457][T20800] [ 967.241465][T20800] dump_stack_lvl+0x16c/0x1f0 [ 967.241491][T20800] should_fail_ex+0x512/0x640 [ 967.241518][T20800] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 967.241539][T20800] should_failslab+0xc2/0x120 [ 967.241562][T20800] kmem_cache_alloc_noprof+0x75/0x6e0 [ 967.241579][T20800] ? __pmd_alloc+0xbf/0x8b0 [ 967.241606][T20800] ? __pmd_alloc+0xbf/0x8b0 [ 967.241627][T20800] __pmd_alloc+0xbf/0x8b0 [ 967.241652][T20800] __handle_mm_fault+0xada/0x2aa0 [ 967.241682][T20800] ? mt_find+0x3e2/0xa20 [ 967.241703][T20800] ? __pfx___handle_mm_fault+0x10/0x10 [ 967.241728][T20800] ? __pfx_mt_find+0x10/0x10 [ 967.241759][T20800] ? find_vma+0xbf/0x140 [ 967.241778][T20800] ? __pfx_find_vma+0x10/0x10 [ 967.241800][T20800] handle_mm_fault+0x589/0xd10 [ 967.241836][T20800] ? __pkru_allows_pkey+0x11/0xb0 [ 967.241870][T20800] do_user_addr_fault+0x7a6/0x1370 [ 967.241889][T20800] ? rcu_is_watching+0x12/0xc0 [ 967.241910][T20800] exc_page_fault+0x64/0xc0 [ 967.241930][T20800] asm_exc_page_fault+0x26/0x30 [ 967.241947][T20800] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 967.241972][T20800] Code: c4 10 e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 [ 967.241995][T20800] RSP: 0018:ffffc9000be1fd60 EFLAGS: 00050202 [ 967.242010][T20800] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 967.242020][T20800] RDX: fffff520017c3fba RSI: 0000000000000000 RDI: ffffc9000be1fdd0 [ 967.242030][T20800] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520017c3fba [ 967.242040][T20800] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 967.242049][T20800] R13: ffffc9000be1fdd0 R14: 0000000000000000 R15: 0000000000000000 [ 967.242070][T20800] _copy_from_user+0x98/0xd0 [ 967.242098][T20800] do_sock_getsockopt+0x3ca/0x440 [ 967.242121][T20800] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 967.242140][T20800] ? __fget_files+0x204/0x3c0 [ 967.242157][T20800] ? 0xffffffffff600000 [ 967.242178][T20800] __sys_getsockopt+0x123/0x1b0 [ 967.242206][T20800] ? 0xffffffffff600000 [ 967.242220][T20800] __x64_sys_getsockopt+0xbd/0x160 [ 967.242249][T20800] ? do_syscall_64+0x91/0xfa0 [ 967.242267][T20800] ? lockdep_hardirqs_on+0x7c/0x110 [ 967.242285][T20800] do_syscall_64+0xcd/0xfa0 [ 967.242305][T20800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.242321][T20800] RIP: 0033:0x7f759c98f6c9 [ 967.242333][T20800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.242348][T20800] RSP: 002b:00007f759d80b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 967.242364][T20800] RAX: ffffffffffffffda RBX: 00007f759cbe5fa0 RCX: 00007f759c98f6c9 [ 967.242374][T20800] RDX: 0000000000000005 RSI: 0000000000000114 RDI: 0000000000000006 [ 967.242383][T20800] RBP: 00007f759ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.242393][T20800] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 967.242403][T20800] R13: 00007f759cbe6038 R14: 00007f759cbe5fa0 R15: 00007ffdba3b7248 [ 967.242423][T20800] ? 0xffffffffff600000 [ 967.242442][T20800] [ 969.300388][T20815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3575'. [ 969.402481][T20815] veth0_macvtap: left promiscuous mode [ 969.417354][T20815] macvtap0: entered promiscuous mode [ 969.429242][T20815] macvtap0: entered allmulticast mode [ 969.485108][T20784] chnl_net:caif_netlink_parms(): no params data found [ 969.949079][T20770] syz.6.3566: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 970.084851][T20784] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.093323][T20784] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.101220][T20784] bridge_slave_0: entered allmulticast mode [ 970.143065][T20793] Bluetooth: hci7: command tx timeout [ 970.153913][T20770] CPU: 0 UID: 0 PID: 20770 Comm: syz.6.3566 Not tainted syzkaller #0 PREEMPT(full) [ 970.153937][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 970.153948][T20770] Call Trace: [ 970.153953][T20770] [ 970.153960][T20770] dump_stack_lvl+0x16c/0x1f0 [ 970.153984][T20770] warn_alloc+0x248/0x3a0 [ 970.154003][T20770] ? __pfx_warn_alloc+0x10/0x10 [ 970.154021][T20770] ? kfree+0x2b8/0x6d0 [ 970.154042][T20770] ? __get_vm_area_node+0x2cd/0x330 [ 970.154069][T20770] ? __get_vm_area_node+0x2cd/0x330 [ 970.154090][T20770] ? __get_vm_area_node+0x208/0x330 [ 970.154118][T20770] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 970.154150][T20770] ? kernel_clone+0xfc/0x930 [ 970.154176][T20770] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 970.154205][T20770] ? rcu_is_watching+0x12/0xc0 [ 970.154225][T20770] ? kernel_clone+0xfc/0x930 [ 970.154245][T20770] __vmalloc_node_noprof+0xad/0xf0 [ 970.154268][T20770] ? kernel_clone+0xfc/0x930 [ 970.154290][T20770] copy_process+0x2c77/0x76a0 [ 970.154320][T20770] ? __pfx_copy_process+0x10/0x10 [ 970.154340][T20770] ? futex_private_hash_put+0x176/0x300 [ 970.154365][T20770] ? futex_private_hash_put+0x18a/0x300 [ 970.154390][T20770] kernel_clone+0xfc/0x930 [ 970.154410][T20770] ? __pfx_futex_wake+0x10/0x10 [ 970.154435][T20770] ? __pfx_kernel_clone+0x10/0x10 [ 970.154467][T20770] __do_sys_clone+0xce/0x120 [ 970.154487][T20770] ? __pfx___do_sys_clone+0x10/0x10 [ 970.154517][T20770] ? xfd_validate_state+0x61/0x180 [ 970.154548][T20770] do_syscall_64+0xcd/0xfa0 [ 970.154569][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.154586][T20770] RIP: 0033:0x7f8dc3d8f6c9 [ 970.154601][T20770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.154617][T20770] RSP: 002b:00007f8dc4c2efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 970.154634][T20770] RAX: ffffffffffffffda RBX: 00007f8dc3fe5fa0 RCX: 00007f8dc3d8f6c9 [ 970.154645][T20770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000 [ 970.154655][T20770] RBP: 00007f8dc3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 970.154665][T20770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 970.154674][T20770] R13: 00007f8dc3fe6038 R14: 00007f8dc3fe5fa0 R15: 00007ffdeda0f7c8 [ 970.154695][T20770] [ 970.154701][T20770] Mem-Info: [ 970.434709][T20784] bridge_slave_0: entered promiscuous mode [ 970.454179][T20784] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.461983][T20784] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.489880][T20784] bridge_slave_1: entered allmulticast mode [ 970.506810][T20784] bridge_slave_1: entered promiscuous mode [ 970.514003][T20835] ptrace attach of "./syz-executor exec"[20423] was attempted by ""[20835] [ 970.678974][T20827] bridge0: port 2(syz_tun) entered disabled state [ 970.723342][T20827] syz_tun (unregistering): left allmulticast mode [ 970.730433][T20827] syz_tun (unregistering): left promiscuous mode [ 970.776564][T20827] bridge0: port 2(syz_tun) entered disabled state [ 970.899371][T20770] active_anon:17017 inactive_anon:5 isolated_anon:0 [ 970.899371][T20770] active_file:7475 inactive_file:55046 isolated_file:0 [ 970.899371][T20770] unevictable:768 dirty:561 writeback:0 [ 970.899371][T20770] slab_reclaimable:12108 slab_unreclaimable:104224 [ 970.899371][T20770] mapped:48213 shmem:1354 pagetables:1236 [ 970.899371][T20770] sec_pagetables:0 bounce:0 [ 970.899371][T20770] kernel_misc_reclaimable:0 [ 970.899371][T20770] free:1236419 free_pcp:27925 free_cma:0 [ 970.959289][T20784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.999135][T20784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.132006][T20770] Node 0 active_anon:66716kB inactive_anon:20kB active_file:29900kB inactive_file:220044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172364kB dirty:2240kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12976kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 971.170494][T20845] FAULT_INJECTION: forcing a failure. [ 971.170494][T20845] name failslab, interval 1, probability 0, space 0, times 0 [ 971.186048][T20784] team0: Port device team_slave_0 added [ 971.204677][T20784] team0: Port device team_slave_1 added [ 971.222500][T20845] CPU: 0 UID: 0 PID: 20845 Comm: syz.5.3582 Not tainted syzkaller #0 PREEMPT(full) [ 971.222525][T20845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 971.222535][T20845] Call Trace: [ 971.222541][T20845] [ 971.222547][T20845] dump_stack_lvl+0x16c/0x1f0 [ 971.222572][T20845] should_fail_ex+0x512/0x640 [ 971.222598][T20845] ? fs_reclaim_acquire+0xae/0x150 [ 971.222622][T20845] should_failslab+0xc2/0x120 [ 971.222646][T20845] __kmalloc_noprof+0xdd/0x880 [ 971.222673][T20845] ? tomoyo_encode2+0x100/0x3e0 [ 971.222696][T20845] ? tomoyo_encode2+0x100/0x3e0 [ 971.222714][T20845] tomoyo_encode2+0x100/0x3e0 [ 971.222736][T20845] tomoyo_encode+0x29/0x50 [ 971.222753][T20845] tomoyo_realpath_from_path+0x18f/0x6e0 [ 971.222780][T20845] tomoyo_path_number_perm+0x245/0x580 [ 971.222806][T20845] ? tomoyo_path_number_perm+0x237/0x580 [ 971.222836][T20845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 971.222865][T20845] ? find_held_lock+0x2b/0x80 [ 971.222902][T20845] ? find_held_lock+0x2b/0x80 [ 971.222918][T20845] ? hook_file_ioctl_common+0x145/0x410 [ 971.222941][T20845] ? __fget_files+0x20e/0x3c0 [ 971.222961][T20845] security_file_ioctl+0x9b/0x240 [ 971.222980][T20845] __x64_sys_ioctl+0xb7/0x210 [ 971.223007][T20845] do_syscall_64+0xcd/0xfa0 [ 971.223028][T20845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.223045][T20845] RIP: 0033:0x7f759c98f6c9 [ 971.223059][T20845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.223076][T20845] RSP: 002b:00007f759d7ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.223093][T20845] RAX: ffffffffffffffda RBX: 00007f759cbe6090 RCX: 00007f759c98f6c9 [ 971.223104][T20845] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 971.223114][T20845] RBP: 00007f759d7ea090 R08: 0000000000000000 R09: 0000000000000000 [ 971.223124][T20845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.223133][T20845] R13: 00007f759cbe6128 R14: 00007f759cbe6090 R15: 00007ffdba3b7248 [ 971.223155][T20845] [ 971.223171][T20845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 971.502411][T20770] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:5456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 971.601102][T20770] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 971.651329][T20770] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 971.658263][T20770] Node 0 DMA32 free:1081936kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:66736kB inactive_anon:20kB active_file:29900kB inactive_file:220044kB unevictable:1536kB writepending:2284kB zspages:0kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:91336kB local_pcp:91336kB free_cma:0kB [ 971.724158][T20784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.731812][T20784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.767451][T20770] lowmem_reserve[]: 0 0 1 1 1 [ 971.782140][T20770] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 971.842400][T20784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.882108][T20770] lowmem_reserve[]: 0 0 0 0 0 [ 971.890819][T20784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.902611][T20770] Node 1 Normal free:3905640kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11412kB local_pcp:11412kB free_cma:0kB [ 971.952222][T20784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.021989][T20784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.035678][T20770] lowmem_reserve[]: 0 0 0 0 0 [ 972.040949][T20770] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 972.089941][T20770] Node 0 DMA32: 1808*4kB (UM) 620*8kB (M) 877*16kB (M) 230*32kB (UME) 386*64kB (UME) 355*128kB (UM) 183*256kB (UME) 128*512kB (UME) 55*1024kB (UME) 7*2048kB (UME) 187*4096kB (UM) = 1052720kB [ 972.198986][T20770] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 972.214116][T20784] hsr_slave_0: entered promiscuous mode [ 972.226125][T20793] Bluetooth: hci7: command tx timeout [ 972.252472][T20784] hsr_slave_1: entered promiscuous mode [ 972.267828][T20770] Node 1 Normal: 88*4kB (UME) 17*8kB (UME) 18*16kB (UME) 199*32kB (UME) 80*64kB (UME) 15*128kB (UME) 1*256kB (U) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 948*4096kB (M) = 3905640kB [ 972.292484][T20784] debugfs: 'hsr0' already exists in 'hsr' [ 972.298803][T20784] Cannot create hsr debugfs directory [ 972.337489][T20848] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 972.362486][T20770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.397193][T20671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 972.407665][T20671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 972.416631][T20671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 972.425061][T20671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 972.434335][T20671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 972.481335][T20770] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 972.521841][T20770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 972.596007][T20770] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 972.632401][T20770] 63865 total pagecache pages [ 972.641747][T20770] 3 pages in swap cache [ 972.670113][T20770] Free swap = 124984kB [ 972.677739][T20770] Total swap = 124996kB [ 972.701939][T20770] 2097051 pages RAM [ 972.712833][T20770] 0 pages HighMem/MovableOnly [ 972.733559][T20770] 428687 pages reserved [ 972.749526][T20770] 0 pages cma reserved [ 973.175926][T20784] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 973.243337][T20784] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 973.276039][T20784] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 973.325558][T20784] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 973.374767][T20849] chnl_net:caif_netlink_parms(): no params data found [ 973.811608][T20849] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.824009][T20849] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.848470][T20849] bridge_slave_0: entered allmulticast mode [ 973.881880][T20849] bridge_slave_0: entered promiscuous mode [ 973.968358][T20849] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.026146][T20849] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.056487][T20849] bridge_slave_1: entered allmulticast mode [ 974.084366][T20849] bridge_slave_1: entered promiscuous mode [ 974.150229][T20849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.180294][T20849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.296425][T20849] team0: Port device team_slave_0 added [ 974.304831][T20793] Bluetooth: hci7: command tx timeout [ 974.417618][T20849] team0: Port device team_slave_1 added [ 974.474668][T20784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.539624][T20849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.548003][T20793] Bluetooth: hci1: command tx timeout [ 974.567411][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.647610][T20849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.695432][T20849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.710307][T20849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.780448][T20849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.927264][T20849] hsr_slave_0: entered promiscuous mode [ 974.945900][T20849] hsr_slave_1: entered promiscuous mode [ 974.961545][T20849] debugfs: 'hsr0' already exists in 'hsr' [ 974.979397][T20849] Cannot create hsr debugfs directory [ 975.095623][T20784] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.209198][T20895] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 975.387344][T20672] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.395267][T20672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.442555][T20672] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.450450][T20672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.683962][T20784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 975.724932][T20784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.185599][T20905] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3595: iget: checksum invalid [ 976.294596][T20905] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 976.360670][T20905] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3595: iget: checksum invalid [ 976.380983][T20793] Bluetooth: hci7: command tx timeout [ 976.411732][T20905] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 976.448482][T20905] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3595: iget: checksum invalid [ 976.506078][T20784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.520234][T20905] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 976.553322][T20849] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 976.579298][T20905] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3595: iget: checksum invalid [ 976.603371][T20849] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 976.621099][T20793] Bluetooth: hci1: command tx timeout [ 976.635551][T20905] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 976.674567][T20849] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 976.713846][T20905] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 976.745166][T20849] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 976.761547][T20905] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 977.087143][T20849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.193656][T20849] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.266231][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.274169][T20655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.344461][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.352334][T20655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.488973][T20784] veth0_vlan: entered promiscuous mode [ 977.536778][T20849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 977.612885][T20784] veth1_vlan: entered promiscuous mode [ 977.754368][T20784] veth0_macvtap: entered promiscuous mode [ 977.800184][T20784] veth1_macvtap: entered promiscuous mode [ 977.872560][T20784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.942437][T20784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.084545][T20702] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.154441][T20702] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.199740][T20702] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.295396][T20702] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.411358][T20849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.453803][T20672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.526156][T20672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.664827][T20672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.701672][T20793] Bluetooth: hci1: command tx timeout [ 978.716537][T20672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.520776][T20849] veth0_vlan: entered promiscuous mode [ 979.613962][T20849] veth1_vlan: entered promiscuous mode [ 979.918576][T20849] veth0_macvtap: entered promiscuous mode [ 980.020972][T20849] veth1_macvtap: entered promiscuous mode [ 980.115365][T20849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.184342][T20849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.255462][T20818] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.292585][T20818] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.369510][T20818] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.413203][T20818] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.697373][T20657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.747654][T20657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.778921][T20793] Bluetooth: hci1: command tx timeout [ 980.873992][T20657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.912010][T20657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.394549][T20966] ima: policy update failed [ 981.409774][ T30] audit: type=1802 audit(4294967332.067:51): pid=20966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.3583" res=0 errno=0 [ 981.907326][T20973] random: crng reseeded on system resumption [ 983.649121][T16113] udevd[16113]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 983.888848][T20992] FAULT_INJECTION: forcing a failure. [ 983.888848][T20992] name failslab, interval 1, probability 0, space 0, times 0 [ 984.076033][T20992] CPU: 0 UID: 0 PID: 20992 Comm: syz.6.3606 Not tainted syzkaller #0 PREEMPT(full) [ 984.076058][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 984.076069][T20992] Call Trace: [ 984.076076][T20992] [ 984.076083][T20992] dump_stack_lvl+0x16c/0x1f0 [ 984.076107][T20992] should_fail_ex+0x512/0x640 [ 984.076133][T20992] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 984.076154][T20992] should_failslab+0xc2/0x120 [ 984.076177][T20992] kmem_cache_alloc_noprof+0x75/0x6e0 [ 984.076195][T20992] ? ptlock_alloc+0x1f/0x70 [ 984.076224][T20992] ? ptlock_alloc+0x1f/0x70 [ 984.076247][T20992] ptlock_alloc+0x1f/0x70 [ 984.076272][T20992] pte_alloc_one+0x84/0x350 [ 984.076292][T20992] __pte_alloc+0x6d/0x380 [ 984.076312][T20992] ? __pfx___pte_alloc+0x10/0x10 [ 984.076332][T20992] ? __pfx___might_resched+0x10/0x10 [ 984.076350][T20992] ? move_page_tables+0x546/0x4230 [ 984.076367][T20992] ? alloc_new_pud+0x217/0x320 [ 984.076384][T20992] move_page_tables+0x2372/0x4230 [ 984.076405][T20992] ? __pfx_copy_vma+0x10/0x10 [ 984.076426][T20992] ? __pfx_move_page_tables+0x10/0x10 [ 984.076442][T20992] ? register_lock_class+0x41/0x4c0 [ 984.076477][T20992] ? finish_task_switch.isra.0+0x21c/0xc10 [ 984.076498][T20992] copy_vma_and_data+0x24e/0x790 [ 984.076517][T20992] ? __pfx_copy_vma_and_data+0x10/0x10 [ 984.076539][T20992] ? __vma_enter_locked+0x163/0x3f0 [ 984.076566][T20992] ? find_held_lock+0x2b/0x80 [ 984.076584][T20992] ? move_vma+0x52e/0x1770 [ 984.076598][T20992] ? __vm_enough_memory+0x184/0x3f0 [ 984.076624][T20992] move_vma+0x540/0x1770 [ 984.076644][T20992] ? __pfx_move_vma+0x10/0x10 [ 984.076664][T20992] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 984.076687][T20992] ? cap_mmap_addr+0x4b/0x120 [ 984.076710][T20992] ? bpf_lsm_mmap_addr+0x9/0x10 [ 984.076729][T20992] ? security_mmap_addr+0x6c/0x1e0 [ 984.076746][T20992] ? __get_unmapped_area+0x267/0x440 [ 984.076777][T20992] ? vrm_set_new_addr+0x208/0x290 [ 984.076796][T20992] mremap_to+0x1b7/0x450 [ 984.076813][T20992] do_mremap+0xd89/0x2020 [ 984.076831][T20992] ? futex_private_hash_put+0x18a/0x300 [ 984.076872][T20992] ? futex_hash_put+0x3e/0x50 [ 984.076896][T20992] ? futex_wake+0x1ad/0x530 [ 984.076925][T20992] ? __pfx_do_mremap+0x10/0x10 [ 984.076939][T20992] ? __pfx_futex_wake+0x10/0x10 [ 984.076970][T20992] ? ksys_write+0x190/0x250 [ 984.077001][T20992] __do_sys_mremap+0x119/0x170 [ 984.077018][T20992] ? __pfx___do_sys_mremap+0x10/0x10 [ 984.077041][T20992] ? __x64_sys_futex+0x1e0/0x4c0 [ 984.077079][T20992] do_syscall_64+0xcd/0xfa0 [ 984.077101][T20992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.077120][T20992] RIP: 0033:0x7f8dc3d8f6c9 [ 984.077136][T20992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.077152][T20992] RSP: 002b:00007f8dc4c0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 984.077169][T20992] RAX: ffffffffffffffda RBX: 00007f8dc3fe6090 RCX: 00007f8dc3d8f6c9 [ 984.077181][T20992] RDX: 0000000000003fd6 RSI: 0000000000000007 RDI: 0000000000000000 [ 984.077191][T20992] RBP: 00007f8dc3e11f91 R08: 0000000020000000 R09: 0000000000000000 [ 984.077202][T20992] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 984.077212][T20992] R13: 00007f8dc3fe6128 R14: 00007f8dc3fe6090 R15: 00007ffdeda0f7c8 [ 984.077235][T20992] [ 984.528394][T20991] Invalid ELF header magic: != ELF [ 985.169542][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3607'. [ 985.397367][T21006] bcache: register_bcache() error : failed to open device [ 986.918443][T21025] input: f as /devices/virtual/input/input78 [ 986.990701][T21020] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3614'. [ 987.053681][T21020] veth0_macvtap: left promiscuous mode [ 987.085762][T21020] macvtap0: entered promiscuous mode [ 987.109458][T21020] macvtap0: entered allmulticast mode [ 987.957303][T21037] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3617'. [ 990.033257][T20671] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 990.046693][T20671] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 990.056659][T20671] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 990.069913][T20671] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 990.079887][T20671] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 991.569624][T21063] chnl_net:caif_netlink_parms(): no params data found [ 992.013849][T21063] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.042476][T21063] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.050405][T21063] bridge_slave_0: entered allmulticast mode [ 992.114836][T21063] bridge_slave_0: entered promiscuous mode [ 992.136375][T20671] Bluetooth: hci8: command tx timeout [ 992.153634][T21063] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.195892][T21063] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.238993][T21060] Invalid ELF header magic: != ELF [ 992.247043][T21063] bridge_slave_1: entered allmulticast mode [ 992.273389][T21063] bridge_slave_1: entered promiscuous mode [ 992.685027][T21063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.733206][T21063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.993301][T21063] team0: Port device team_slave_0 added [ 993.034265][T21063] team0: Port device team_slave_1 added [ 993.076706][T21077] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3622'. [ 993.192397][T21077] veth0_macvtap: left promiscuous mode [ 993.291663][T21077] macvtap0: entered promiscuous mode [ 993.318225][T21077] macvtap0: entered allmulticast mode [ 993.361875][T21063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.403170][T21063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.588044][T21063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.728008][T21084] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 993.877102][T21063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.905661][T21063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.060695][T21063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.113284][T21083] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3624: iget: checksum invalid [ 994.210483][T21083] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 994.225175][T20671] Bluetooth: hci8: command tx timeout [ 994.321085][T21083] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3624: iget: checksum invalid [ 994.429590][T21083] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 994.455853][T21063] hsr_slave_0: entered promiscuous mode [ 994.501861][T21063] hsr_slave_1: entered promiscuous mode [ 994.536376][T21063] debugfs: 'hsr0' already exists in 'hsr' [ 994.553791][T21083] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3624: iget: checksum invalid [ 994.570818][T21063] Cannot create hsr debugfs directory [ 994.696483][T21083] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 994.881333][T21083] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3624: iget: checksum invalid [ 994.981718][T21083] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 995.096587][T21083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 995.176019][T21083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 995.841852][T21063] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 995.936788][T21063] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 996.074832][T21063] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 996.128816][T21063] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 996.291087][T20671] Bluetooth: hci8: command tx timeout [ 996.759153][T21063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.867287][T21063] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.960441][T20653] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.968334][T20653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.059303][T20653] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.067278][T20653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.238754][T21063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 997.340385][T21063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 997.997055][T20653] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.304225][T20653] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.333539][T21133] netlink: 504 bytes leftover after parsing attributes in process `syz.6.3631'. [ 998.370585][T20671] Bluetooth: hci8: command tx timeout [ 998.534555][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.542729][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.564164][T20653] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.640755][T21063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.012014][T20653] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.593349][T20653] bridge_slave_1: left allmulticast mode [ 999.638595][T20653] bridge_slave_1: left promiscuous mode [ 999.685996][T20653] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.734418][T20653] bridge_slave_0: left allmulticast mode [ 999.768942][T20653] bridge_slave_0: left promiscuous mode [ 999.798810][T20653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.029708][ T30] audit: type=1800 audit(4294967350.696:52): pid=21160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3635" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1000.910574][T21172] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1001.291344][T20653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.319693][T20653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.345071][T20653] bond0 (unregistering): Released all slaves [ 1001.718621][T21063] veth0_vlan: entered promiscuous mode [ 1002.249798][T21063] veth1_vlan: entered promiscuous mode [ 1002.307606][T21186] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3638: iget: checksum invalid [ 1002.453585][T21186] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1002.501668][T20653] hsr_slave_0: left promiscuous mode [ 1002.517341][T20653] hsr_slave_1: left promiscuous mode [ 1002.561787][T20653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.615429][T20653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.625235][T21186] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3638: iget: checksum invalid [ 1002.673818][T20653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.723179][T20653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.780556][T21186] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1002.830812][T20793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1002.843503][T20793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1002.863055][T20793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1002.876213][T20793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1002.885786][T20793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1002.933035][T20653] veth1_macvtap: left promiscuous mode [ 1002.959238][T20653] veth0_macvtap: left promiscuous mode [ 1003.001064][T20653] veth1_vlan: left promiscuous mode [ 1003.021810][T21186] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3638: iget: checksum invalid [ 1003.037828][T20653] veth0_vlan: left promiscuous mode [ 1003.138486][T21186] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1003.309438][T21186] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3638: iget: checksum invalid [ 1003.405004][T21186] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1003.474097][T21186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1003.520880][T21186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1004.275591][T20653] team0 (unregistering): Port device team_slave_1 removed [ 1004.347645][T20653] team0 (unregistering): Port device team_slave_0 removed [ 1004.881530][T21063] veth0_macvtap: entered promiscuous mode [ 1004.900101][T21211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3641: iget: checksum invalid [ 1004.947634][T20793] Bluetooth: hci5: command tx timeout [ 1004.979483][T21063] veth1_macvtap: entered promiscuous mode [ 1004.993825][T21211] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1005.043840][T21063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.061640][T21211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3641: iget: checksum invalid [ 1005.140502][T21063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.151516][T21211] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1005.205962][T21211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3641: iget: checksum invalid [ 1005.292482][T21211] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1005.340908][T20657] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.358002][T21211] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3641: iget: checksum invalid [ 1005.383281][T20657] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.423876][T21211] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1005.487424][T21211] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1005.506015][T20657] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.526215][T20657] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.539336][T21211] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1005.840301][T21051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.909386][T21051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.094253][T20657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.164526][T20657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.202574][T21226] bond0: option resend_igmp: invalid value (0x00060000) [ 1006.246726][T21226] bond0: option resend_igmp: allowed values 0 - 255 [ 1006.497614][T21197] chnl_net:caif_netlink_parms(): no params data found [ 1007.007508][T20793] Bluetooth: hci5: command tx timeout [ 1007.243978][T21197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.278820][T21197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.300161][T21197] bridge_slave_0: entered allmulticast mode [ 1007.324963][T21197] bridge_slave_0: entered promiscuous mode [ 1007.364792][T21197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.387967][T21197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.406414][T21197] bridge_slave_1: entered allmulticast mode [ 1007.428078][T21197] bridge_slave_1: entered promiscuous mode [ 1007.549409][T21197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.595909][T21197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.720926][T21197] team0: Port device team_slave_0 added [ 1007.752701][T21197] team0: Port device team_slave_1 added [ 1007.871153][T21197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.907547][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.088449][T21197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.339757][T21197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.383369][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.570520][T21197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.788084][T21266] zswap: compressor 000 not available [ 1009.084451][T20793] Bluetooth: hci5: command tx timeout [ 1009.435968][T21197] hsr_slave_0: entered promiscuous mode [ 1009.484180][T21197] hsr_slave_1: entered promiscuous mode [ 1009.503908][T21197] debugfs: 'hsr0' already exists in 'hsr' [ 1009.511066][T21197] Cannot create hsr debugfs directory [ 1011.163655][T20793] Bluetooth: hci5: command tx timeout [ 1011.382148][T21197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.705125][T21197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.886325][T21300] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1011.934410][T21300] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1012.168656][T21197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.393437][T21197] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.866183][T21197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1012.934233][T21197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1013.040007][T21197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1013.102751][T21197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1013.473296][T21197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.567690][T21197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.651249][T20657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.659291][T20657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.720746][T20657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.728616][T20657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.112263][T21333] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3655: iget: checksum invalid [ 1014.197045][T21333] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1014.317588][T21333] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3655: iget: checksum invalid [ 1014.426702][T21333] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1014.499879][T21333] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3655: iget: checksum invalid [ 1014.591758][T21333] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1014.648057][T21333] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3655: iget: checksum invalid [ 1014.713131][T21333] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1014.800719][T21333] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1014.880645][T21333] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1014.908871][T21197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.156651][T21197] veth0_vlan: entered promiscuous mode [ 1015.259577][T21197] veth1_vlan: entered promiscuous mode [ 1015.438459][T16113] udevd[16113]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1015.467342][T21197] veth0_macvtap: entered promiscuous mode [ 1015.519421][T21197] veth1_macvtap: entered promiscuous mode [ 1015.596493][T21197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.630595][T21197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.689903][T20653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.710914][T20653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.744172][T20653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.778662][T20653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.797012][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3663'. [ 1015.948866][T20653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.994659][T20653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.066889][T20653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.089035][T20653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.767642][T21385] FAULT_INJECTION: forcing a failure. [ 1016.767642][T21385] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.810433][T21388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1016.833832][T21385] CPU: 0 UID: 0 PID: 21385 Comm: syz.6.3668 Not tainted syzkaller #0 PREEMPT(full) [ 1016.833858][T21385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1016.833869][T21385] Call Trace: [ 1016.833877][T21385] [ 1016.833884][T21385] dump_stack_lvl+0x16c/0x1f0 [ 1016.833910][T21385] should_fail_ex+0x512/0x640 [ 1016.833937][T21385] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1016.833969][T21385] should_failslab+0xc2/0x120 [ 1016.833993][T21385] __kmalloc_cache_noprof+0x72/0x780 [ 1016.834030][T21385] ? __pfx___mutex_lock+0x10/0x10 [ 1016.834051][T21385] ? pty_common_install+0xdf/0xb30 [ 1016.834082][T21385] ? pty_common_install+0xdf/0xb30 [ 1016.834108][T21385] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1016.834129][T21385] pty_common_install+0xdf/0xb30 [ 1016.834159][T21385] ? __pfx_pty_install+0x10/0x10 [ 1016.834187][T21385] tty_init_dev.part.0+0x9c/0x500 [ 1016.834209][T21385] tty_open+0xa4f/0xf90 [ 1016.834233][T21385] ? __pfx_tty_open+0x10/0x10 [ 1016.834257][T21385] ? chrdev_open+0x58c/0x6a0 [ 1016.834281][T21385] ? __pfx_tty_open+0x10/0x10 [ 1016.834300][T21385] chrdev_open+0x234/0x6a0 [ 1016.834322][T21385] ? __pfx_chrdev_open+0x10/0x10 [ 1016.834343][T21385] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1016.834367][T21385] do_dentry_open+0x982/0x1530 [ 1016.834387][T21385] ? __pfx_chrdev_open+0x10/0x10 [ 1016.834412][T21385] vfs_open+0x82/0x3f0 [ 1016.834440][T21385] path_openat+0x1de4/0x2cb0 [ 1016.834465][T21385] ? __pfx_path_openat+0x10/0x10 [ 1016.834486][T21385] ? __lock_acquire+0xb8a/0x1c90 [ 1016.834512][T21385] do_filp_open+0x20b/0x470 [ 1016.834532][T21385] ? __pfx_do_filp_open+0x10/0x10 [ 1016.834566][T21385] ? alloc_fd+0x471/0x7d0 [ 1016.834589][T21385] do_sys_openat2+0x11b/0x1d0 [ 1016.834614][T21385] ? __pfx_do_sys_openat2+0x10/0x10 [ 1016.834647][T21385] __x64_sys_openat+0x174/0x210 [ 1016.834673][T21385] ? __pfx___x64_sys_openat+0x10/0x10 [ 1016.834708][T21385] do_syscall_64+0xcd/0xfa0 [ 1016.834729][T21385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.834746][T21385] RIP: 0033:0x7f8dc3d8f6c9 [ 1016.834761][T21385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.834778][T21385] RSP: 002b:00007f8dc4c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1016.834795][T21385] RAX: ffffffffffffffda RBX: 00007f8dc3fe5fa0 RCX: 00007f8dc3d8f6c9 [ 1016.834807][T21385] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1016.834817][T21385] RBP: 00007f8dc3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1016.834828][T21385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.834839][T21385] R13: 00007f8dc3fe6038 R14: 00007f8dc3fe5fa0 R15: 00007ffdeda0f7c8 [ 1016.834868][T21385] [ 1017.462749][T21388] veth0_macvtap: left promiscuous mode [ 1017.476612][T21388] macvtap0: entered promiscuous mode [ 1017.503470][T21388] macvtap0: entered allmulticast mode [ 1021.468809][T21421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1021.514697][T21421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1021.593224][T21421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1021.709605][T21421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1021.723959][T21421] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1021.784822][T21421] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1021.856223][T21421] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1021.856322][T21421] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1021.933384][T21421] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1021.984641][T21421] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1021.984734][T21421] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1022.077786][T21421] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1022.135069][T21421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1022.135124][T21421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1022.308458][T21421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1022.319913][T21421] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1022.320027][T21421] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1022.408014][T21421] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1022.525043][T21421] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1022.525145][T21421] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1022.576435][T21421] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1023.511224][T20793] Bluetooth: hci0: command 0x0c1a tx timeout [ 1023.557615][T20793] Bluetooth: hci4: command 0x0c1a tx timeout [ 1023.644916][T20793] Bluetooth: hci2: command 0x0c1a tx timeout [ 1023.717129][T20793] Bluetooth: hci3: command 0x0c1a tx timeout [ 1023.877290][T20793] Bluetooth: hci6: command 0x0c1a tx timeout [ 1023.920473][T21462] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1024.036120][T20793] Bluetooth: hci7: command 0x0c1a tx timeout [ 1024.196270][T20793] Bluetooth: hci1: command 0x0c1a tx timeout [ 1024.355911][T20793] Bluetooth: hci8: command 0x0c1a tx timeout [ 1024.548354][T21479] random: crng reseeded on system resumption [ 1024.597355][T20793] Bluetooth: hci5: command 0x0c1a tx timeout [ 1025.434621][T21494] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1025.526935][T21494] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1025.582158][T21494] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1025.660736][T21494] page_type: f5(slab) [ 1025.682883][T21494] raw: 00fff00000000040 ffff88813ffa7140 dead000000000100 dead000000000122 [ 1025.745533][T21494] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1025.780772][T21494] head: 00fff00000000040 ffff88813ffa7140 dead000000000100 dead000000000122 [ 1025.799216][T20793] Bluetooth: hci3: command 0x0c1a tx timeout [ 1025.856401][T21503] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1025.869172][T21494] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1025.925331][T21494] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1025.956229][T20793] Bluetooth: hci6: command 0x0c1a tx timeout [ 1025.995085][T21494] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1026.009013][T21503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1026.047712][T21494] page dumped because: unmovable page [ 1026.086295][T21494] page_owner tracks the page as allocated [ 1026.112308][T21494] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1119, tgid 1119 (kworker/u8:5), ts 595122231699, free_ts 594924988294 [ 1026.146686][T20793] Bluetooth: hci7: command 0x0c1a tx timeout [ 1026.258718][T21494] post_alloc_hook+0x1c0/0x230 [ 1026.276247][T20793] Bluetooth: hci1: command 0x0c1a tx timeout [ 1026.297693][T21494] get_page_from_freelist+0x10a3/0x3a30 [ 1026.334851][T21494] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1026.372368][T21494] alloc_pages_mpol+0x1fb/0x550 [ 1026.398979][T21494] new_slab+0x24a/0x360 [ 1026.434822][T20793] Bluetooth: hci8: command 0x0c1a tx timeout [ 1026.443073][T21494] ___slab_alloc+0xdae/0x1a60 [ 1026.466090][T21494] __slab_alloc.constprop.0+0x63/0x110 [ 1026.489941][T21494] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 1026.532790][T21494] kmalloc_reserve+0xef/0x2c0 [ 1026.550960][T21494] __alloc_skb+0x166/0x380 [ 1026.569005][T21494] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1026.592788][T21494] process_one_work+0x9cf/0x1b70 [ 1026.629983][T21494] worker_thread+0x6c8/0xf10 [ 1026.644499][T21494] kthread+0x3c5/0x780 [ 1026.654755][T21494] ret_from_fork+0x675/0x7d0 [ 1026.667623][T21494] ret_from_fork_asm+0x1a/0x30 [ 1026.682249][T20793] Bluetooth: hci5: command 0x0c1a tx timeout [ 1026.693187][T21494] page last free pid 14597 tgid 14596 stack trace: [ 1026.710504][T21494] __free_frozen_pages+0x7df/0x1160 [ 1026.731354][T21494] __put_partials+0x130/0x170 [ 1026.743663][T21494] qlist_free_all+0x4d/0x120 [ 1026.764631][T21494] kasan_quarantine_reduce+0x195/0x1e0 [ 1026.774922][T21494] __kasan_slab_alloc+0x69/0x90 [ 1026.780379][T21494] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1026.799828][T21494] __kernfs_new_node+0xd2/0x8e0 [ 1026.812995][T21494] kernfs_new_node+0x13c/0x1e0 [ 1026.831910][T21494] __kernfs_create_file+0x53/0x350 [ 1026.845179][T21494] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1026.861659][T21494] internal_create_group+0x578/0xf30 [ 1026.874600][T21494] internal_create_groups+0x9d/0x150 [ 1026.880455][T21494] device_add+0x6d1/0x1aa0 [ 1026.898023][T21494] netdev_register_kobject+0x1a9/0x3d0 [ 1026.904080][T21494] register_netdevice+0x13dc/0x2270 [ 1026.924756][T21494] register_netdev+0x34/0x50 [ 1027.081958][T21514] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3687: iget: checksum invalid [ 1027.155423][T21514] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1027.220784][T21514] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3687: iget: checksum invalid [ 1027.284177][T21514] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1027.363922][T21514] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3687: iget: checksum invalid [ 1027.414753][T21514] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1027.445054][T21514] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.7.3687: iget: checksum invalid [ 1027.490628][T21514] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1027.490663][T21514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1027.490681][T21514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1027.876065][T20793] Bluetooth: hci3: command 0x0c1a tx timeout [ 1028.036151][T20793] Bluetooth: hci6: command 0x0c1a tx timeout [ 1028.053622][T21545] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1028.194573][T20793] Bluetooth: hci7: command 0x0c1a tx timeout [ 1028.361108][T20793] Bluetooth: hci1: command 0x0c1a tx timeout [ 1028.515631][T20793] Bluetooth: hci8: command 0x0c1a tx timeout [ 1028.754393][T20793] Bluetooth: hci5: command 0x0c1a tx timeout [ 1029.015976][T21560] FAULT_INJECTION: forcing a failure. [ 1029.015976][T21560] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.107951][T21560] CPU: 0 UID: 0 PID: 21560 Comm: syz.6.3695 Not tainted syzkaller #0 PREEMPT(full) [ 1029.107977][T21560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1029.107989][T21560] Call Trace: [ 1029.107995][T21560] [ 1029.108003][T21560] dump_stack_lvl+0x16c/0x1f0 [ 1029.108028][T21560] should_fail_ex+0x512/0x640 [ 1029.108062][T21560] ? fs_reclaim_acquire+0xae/0x150 [ 1029.108087][T21560] should_failslab+0xc2/0x120 [ 1029.108111][T21560] __kmalloc_noprof+0xdd/0x880 [ 1029.108140][T21560] ? tomoyo_encode2+0x100/0x3e0 [ 1029.108163][T21560] ? tomoyo_encode2+0x100/0x3e0 [ 1029.108181][T21560] tomoyo_encode2+0x100/0x3e0 [ 1029.108203][T21560] tomoyo_encode+0x29/0x50 [ 1029.108222][T21560] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1029.108248][T21560] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1029.108277][T21560] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1029.108325][T21560] ? do_raw_spin_lock+0x12c/0x2b0 [ 1029.108358][T21560] tomoyo_file_open+0x6b/0x90 [ 1029.108382][T21560] security_file_open+0x84/0x1e0 [ 1029.108401][T21560] do_dentry_open+0x596/0x1530 [ 1029.108427][T21560] vfs_open+0x82/0x3f0 [ 1029.108454][T21560] path_openat+0x1de4/0x2cb0 [ 1029.108480][T21560] ? __pfx_path_openat+0x10/0x10 [ 1029.108500][T21560] ? __lock_acquire+0xb8a/0x1c90 [ 1029.108525][T21560] do_filp_open+0x20b/0x470 [ 1029.108544][T21560] ? __pfx_do_filp_open+0x10/0x10 [ 1029.108578][T21560] ? alloc_fd+0x471/0x7d0 [ 1029.108601][T21560] do_sys_openat2+0x11b/0x1d0 [ 1029.108625][T21560] ? __pfx_do_sys_openat2+0x10/0x10 [ 1029.108649][T21560] ? fput+0x9b/0xd0 [ 1029.108670][T21560] ? __sys_sendmsg+0x18c/0x220 [ 1029.108696][T21560] __x64_sys_openat+0x174/0x210 [ 1029.108728][T21560] ? __pfx___x64_sys_openat+0x10/0x10 [ 1029.108762][T21560] do_syscall_64+0xcd/0xfa0 [ 1029.108784][T21560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.108801][T21560] RIP: 0033:0x7f8dc3d8f6c9 [ 1029.108815][T21560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.108832][T21560] RSP: 002b:00007f8dc4c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1029.108850][T21560] RAX: ffffffffffffffda RBX: 00007f8dc3fe5fa0 RCX: 00007f8dc3d8f6c9 [ 1029.108861][T21560] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1029.108872][T21560] RBP: 00007f8dc3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.108882][T21560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.108892][T21560] R13: 00007f8dc3fe6038 R14: 00007f8dc3fe5fa0 R15: 00007ffdeda0f7c8 [ 1029.108915][T21560] [ 1029.108935][T21560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1029.944365][T20671] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1029.959583][T20671] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1029.969396][T20671] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1029.978073][T20671] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1029.991054][T20671] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1030.061793][T21560] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1030.282158][T21574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3700'. [ 1030.556044][T21568] chnl_net:caif_netlink_parms(): no params data found [ 1030.826937][T21568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.846968][T21568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.865149][T21568] bridge_slave_0: entered allmulticast mode [ 1030.890371][T21568] bridge_slave_0: entered promiscuous mode [ 1030.904724][T21568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.934574][T21568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.968709][T21568] bridge_slave_1: entered allmulticast mode [ 1031.018242][T21568] bridge_slave_1: entered promiscuous mode [ 1031.099658][T21590] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3703'. [ 1031.122037][T21568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.148587][T21590] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3703'. [ 1031.164794][T21568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.200461][T21568] team0: Port device team_slave_0 added [ 1031.211138][T21568] team0: Port device team_slave_1 added [ 1031.254944][T21568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.263381][T21568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.293202][T21568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.306739][T21568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.316480][T21568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.350572][T21568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.410913][T21568] hsr_slave_0: entered promiscuous mode [ 1031.419714][T21568] hsr_slave_1: entered promiscuous mode [ 1031.430273][T21568] debugfs: 'hsr0' already exists in 'hsr' [ 1031.438032][T21568] Cannot create hsr debugfs directory [ 1031.592595][T21568] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.659978][T21568] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.723515][T21568] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.787001][T21568] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.032594][T20671] Bluetooth: hci9: command tx timeout [ 1032.058950][T21568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1032.109459][T21568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1032.138672][T21568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1032.166554][T21568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1032.342722][T21568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.396169][T21568] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.421612][T20818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.429526][T20818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.480937][T20818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.488816][T20818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.983677][T21568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.094493][T21568] veth0_vlan: entered promiscuous mode [ 1033.128516][T21568] veth1_vlan: entered promiscuous mode [ 1033.197669][T21568] veth0_macvtap: entered promiscuous mode [ 1033.220807][T21568] veth1_macvtap: entered promiscuous mode [ 1033.277503][T21568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.318542][T21568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.358631][T20655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.403906][T20655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.447515][T20655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.503517][T20655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.607307][T20657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.643972][T20657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.721202][T21050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.740848][T21050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.937388][T21616] netlink: 98 bytes leftover after parsing attributes in process `syz.6.3708'. [ 1033.967480][T21616] netlink: 50 bytes leftover after parsing attributes in process `syz.6.3708'. [ 1034.111420][T20671] Bluetooth: hci9: command tx timeout [ 1034.289719][T21627] FAULT_INJECTION: forcing a failure. [ 1034.289719][T21627] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.378106][T21627] CPU: 0 UID: 0 PID: 21627 Comm: syz.2.3710 Not tainted syzkaller #0 PREEMPT(full) [ 1034.378133][T21627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1034.378144][T21627] Call Trace: [ 1034.378150][T21627] [ 1034.378157][T21627] dump_stack_lvl+0x16c/0x1f0 [ 1034.378183][T21627] should_fail_ex+0x512/0x640 [ 1034.378209][T21627] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1034.378230][T21627] should_failslab+0xc2/0x120 [ 1034.378253][T21627] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1034.378272][T21627] ? __d_alloc+0x32/0xae0 [ 1034.378296][T21627] ? __d_alloc+0x32/0xae0 [ 1034.378314][T21627] __d_alloc+0x32/0xae0 [ 1034.378336][T21627] d_alloc_pseudo+0x1c/0xc0 [ 1034.378360][T21627] alloc_file_pseudo+0xcf/0x230 [ 1034.378386][T21627] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1034.378410][T21627] ? alloc_fd+0x471/0x7d0 [ 1034.378430][T21627] sock_alloc_file+0x50/0x210 [ 1034.378450][T21627] __sys_socket+0x1c0/0x260 [ 1034.378474][T21627] ? __pfx___sys_socket+0x10/0x10 [ 1034.378496][T21627] ? xfd_validate_state+0x61/0x180 [ 1034.378519][T21627] ? __pfx_ksys_write+0x10/0x10 [ 1034.378542][T21627] __x64_sys_socket+0x72/0xb0 [ 1034.378563][T21627] ? lockdep_hardirqs_on+0x7c/0x110 [ 1034.378582][T21627] do_syscall_64+0xcd/0xfa0 [ 1034.378603][T21627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.378620][T21627] RIP: 0033:0x7fb16b78f6c9 [ 1034.378634][T21627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.378651][T21627] RSP: 002b:00007fb16c5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1034.378668][T21627] RAX: ffffffffffffffda RBX: 00007fb16b9e6180 RCX: 00007fb16b78f6c9 [ 1034.378679][T21627] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 1034.378689][T21627] RBP: 00007fb16b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1034.378699][T21627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.378710][T21627] R13: 00007fb16b9e6218 R14: 00007fb16b9e6180 R15: 00007fffbe4e4eb8 [ 1034.378731][T21627] [ 1036.190015][T20671] Bluetooth: hci9: command tx timeout [ 1036.999987][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'. [ 1037.013710][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3719'. [ 1038.269592][T20671] Bluetooth: hci9: command tx timeout [ 1038.548283][T21667] FAULT_INJECTION: forcing a failure. [ 1038.548283][T21667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.564389][T21667] CPU: 0 UID: 0 PID: 21667 Comm: syz.6.3725 Not tainted syzkaller #0 PREEMPT(full) [ 1038.564414][T21667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1038.564425][T21667] Call Trace: [ 1038.564431][T21667] [ 1038.564438][T21667] dump_stack_lvl+0x16c/0x1f0 [ 1038.564463][T21667] should_fail_ex+0x512/0x640 [ 1038.564493][T21667] _copy_from_user+0x2e/0xd0 [ 1038.564522][T21667] copy_msghdr_from_user+0x98/0x160 [ 1038.564540][T21667] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1038.564561][T21667] ? __pfx__kstrtoull+0x10/0x10 [ 1038.564586][T21667] ___sys_sendmsg+0xfe/0x1d0 [ 1038.564603][T21667] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.564630][T21667] ? find_held_lock+0x2b/0x80 [ 1038.564661][T21667] __sys_sendmmsg+0x200/0x420 [ 1038.564681][T21667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1038.564704][T21667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1038.564734][T21667] ? fput+0x9b/0xd0 [ 1038.564758][T21667] ? ksys_write+0x1ac/0x250 [ 1038.564777][T21667] ? __pfx_ksys_write+0x10/0x10 [ 1038.564816][T21667] __x64_sys_sendmmsg+0x9c/0x100 [ 1038.564833][T21667] ? lockdep_hardirqs_on+0x7c/0x110 [ 1038.564852][T21667] do_syscall_64+0xcd/0xfa0 [ 1038.564875][T21667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.564892][T21667] RIP: 0033:0x7f8dc3d8f6c9 [ 1038.564907][T21667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.564924][T21667] RSP: 002b:00007f8dc4c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1038.564941][T21667] RAX: ffffffffffffffda RBX: 00007f8dc3fe5fa0 RCX: 00007f8dc3d8f6c9 [ 1038.564952][T21667] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1038.564963][T21667] RBP: 00007f8dc4c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.564973][T21667] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.564984][T21667] R13: 00007f8dc3fe6038 R14: 00007f8dc3fe5fa0 R15: 00007ffdeda0f7c8 [ 1038.565005][T21667] [ 1039.247360][T21676] FAULT_INJECTION: forcing a failure. [ 1039.247360][T21676] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1039.262122][T21676] CPU: 0 UID: 0 PID: 21676 Comm: syz.6.3728 Not tainted syzkaller #0 PREEMPT(full) [ 1039.262147][T21676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1039.262157][T21676] Call Trace: [ 1039.262164][T21676] [ 1039.262171][T21676] dump_stack_lvl+0x16c/0x1f0 [ 1039.262195][T21676] should_fail_ex+0x512/0x640 [ 1039.262226][T21676] get_futex_key+0x1d0/0x1560 [ 1039.262252][T21676] ? __pfx_get_futex_key+0x10/0x10 [ 1039.262274][T21676] ? __mutex_trylock_common+0xe9/0x250 [ 1039.262304][T21676] futex_wake+0xea/0x530 [ 1039.262333][T21676] ? __pfx_futex_wake+0x10/0x10 [ 1039.262358][T21676] ? __lock_acquire+0xb8a/0x1c90 [ 1039.262390][T21676] do_futex+0x1e3/0x350 [ 1039.262414][T21676] ? __pfx_do_futex+0x10/0x10 [ 1039.262436][T21676] ? __might_fault+0xe3/0x190 [ 1039.262459][T21676] mm_release+0x24e/0x300 [ 1039.262479][T21676] do_exit+0x68e/0x2bf0 [ 1039.262507][T21676] ? __pfx_do_exit+0x10/0x10 [ 1039.262531][T21676] ? do_raw_spin_lock+0x12c/0x2b0 [ 1039.262557][T21676] ? find_held_lock+0x2b/0x80 [ 1039.262578][T21676] do_group_exit+0xd3/0x2a0 [ 1039.262604][T21676] get_signal+0x2671/0x26d0 [ 1039.262631][T21676] ? __pfx_get_signal+0x10/0x10 [ 1039.262650][T21676] ? do_futex+0x122/0x350 [ 1039.262674][T21676] ? __pfx_do_futex+0x10/0x10 [ 1039.262699][T21676] arch_do_signal_or_restart+0x8f/0x790 [ 1039.262722][T21676] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1039.262749][T21676] ? xfd_validate_state+0x61/0x180 [ 1039.262773][T21676] ? __pfx_ksys_write+0x10/0x10 [ 1039.262797][T21676] exit_to_user_mode_loop+0x85/0x130 [ 1039.262825][T21676] do_syscall_64+0x426/0xfa0 [ 1039.262846][T21676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.262863][T21676] RIP: 0033:0x7f8dc3d8f6c9 [ 1039.262878][T21676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.262895][T21676] RSP: 002b:00007f8dc4c2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1039.262912][T21676] RAX: fffffffffffffe00 RBX: 00007f8dc3fe5fa8 RCX: 00007f8dc3d8f6c9 [ 1039.262923][T21676] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8dc3fe5fa8 [ 1039.262934][T21676] RBP: 00007f8dc3fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1039.262945][T21676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.262955][T21676] R13: 00007f8dc3fe6038 R14: 00007ffdeda0f6e0 R15: 00007ffdeda0f7c8 [ 1039.262977][T21676] [ 1039.617052][T21678] FAULT_INJECTION: forcing a failure. [ 1039.617052][T21678] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.633287][T21678] CPU: 0 UID: 0 PID: 21678 Comm: syz.6.3729 Not tainted syzkaller #0 PREEMPT(full) [ 1039.633313][T21678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1039.633334][T21678] Call Trace: [ 1039.633340][T21678] [ 1039.633347][T21678] dump_stack_lvl+0x16c/0x1f0 [ 1039.633372][T21678] should_fail_ex+0x512/0x640 [ 1039.633399][T21678] ? __kmalloc_noprof+0xca/0x880 [ 1039.633429][T21678] should_failslab+0xc2/0x120 [ 1039.633453][T21678] __kmalloc_noprof+0xdd/0x880 [ 1039.633481][T21678] ? alloc_pipe_info+0x1ec/0x590 [ 1039.633506][T21678] ? alloc_pipe_info+0x1ec/0x590 [ 1039.633525][T21678] alloc_pipe_info+0x1ec/0x590 [ 1039.633548][T21678] splice_direct_to_actor+0x77d/0xa30 [ 1039.633567][T21678] ? __pfx_direct_splice_actor+0x10/0x10 [ 1039.633586][T21678] ? __pfx_aa_file_perm+0x10/0x10 [ 1039.633607][T21678] ? find_held_lock+0x2b/0x80 [ 1039.633625][T21678] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1039.633641][T21678] ? get_pid_task+0xfc/0x250 [ 1039.633671][T21678] do_splice_direct+0x174/0x240 [ 1039.633688][T21678] ? __pfx_do_splice_direct+0x10/0x10 [ 1039.633706][T21678] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1039.633738][T21678] ? rw_verify_area+0xcf/0x6c0 [ 1039.633756][T21678] do_sendfile+0xb06/0xe50 [ 1039.633778][T21678] ? __pfx_do_sendfile+0x10/0x10 [ 1039.633796][T21678] ? __fget_files+0x20e/0x3c0 [ 1039.633819][T21678] __x64_sys_sendfile64+0x1d8/0x220 [ 1039.633841][T21678] ? ksys_write+0x1ac/0x250 [ 1039.633859][T21678] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1039.633889][T21678] do_syscall_64+0xcd/0xfa0 [ 1039.633910][T21678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.633928][T21678] RIP: 0033:0x7f8dc3d8f6c9 [ 1039.633943][T21678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.633961][T21678] RSP: 002b:00007f8dc4c2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1039.633979][T21678] RAX: ffffffffffffffda RBX: 00007f8dc3fe5fa0 RCX: 00007f8dc3d8f6c9 [ 1039.633990][T21678] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1039.634001][T21678] RBP: 00007f8dc4c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.634011][T21678] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1039.634026][T21678] R13: 00007f8dc3fe6038 R14: 00007f8dc3fe5fa0 R15: 00007ffdeda0f7c8 [ 1039.634048][T21678] [ 1040.400504][T21688] bcache: register_bcache() error : failed to open device [ 1040.591444][T21691] random: crng reseeded on system resumption [ 1041.030833][T21695] FAULT_INJECTION: forcing a failure. [ 1041.030833][T21695] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.077728][T21695] CPU: 0 UID: 0 PID: 21695 Comm: syz.6.3735 Not tainted syzkaller #0 PREEMPT(full) [ 1041.077756][T21695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1041.077766][T21695] Call Trace: [ 1041.077773][T21695] [ 1041.077781][T21695] dump_stack_lvl+0x16c/0x1f0 [ 1041.077806][T21695] should_fail_ex+0x512/0x640 [ 1041.077832][T21695] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1041.077853][T21695] should_failslab+0xc2/0x120 [ 1041.077877][T21695] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1041.077894][T21695] ? vm_area_dup+0x27/0x8d0 [ 1041.077925][T21695] ? vm_area_dup+0x27/0x8d0 [ 1041.077950][T21695] vm_area_dup+0x27/0x8d0 [ 1041.077978][T21695] __split_vma+0x18e/0x1070 [ 1041.078008][T21695] ? __pfx___split_vma+0x10/0x10 [ 1041.078040][T21695] ? __pfx_mas_prev+0x10/0x10 [ 1041.078066][T21695] vms_gather_munmap_vmas+0x3aa/0x1340 [ 1041.078098][T21695] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1041.078125][T21695] ? move_page_tables+0xf9e/0x4230 [ 1041.078154][T21695] do_vmi_align_munmap+0x286/0x7e0 [ 1041.078173][T21695] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1041.078220][T21695] do_vmi_munmap+0x204/0x3e0 [ 1041.078239][T21695] move_vma+0xb5f/0x1770 [ 1041.078259][T21695] ? __pfx_move_vma+0x10/0x10 [ 1041.078287][T21695] ? vrm_set_new_addr+0x208/0x290 [ 1041.078305][T21695] mremap_to+0x1b7/0x450 [ 1041.078333][T21695] do_mremap+0xd89/0x2020 [ 1041.078351][T21695] ? futex_private_hash_put+0x18a/0x300 [ 1041.078375][T21695] ? futex_hash_put+0x3e/0x50 [ 1041.078395][T21695] ? futex_wake+0x1ad/0x530 [ 1041.078423][T21695] ? __pfx_do_mremap+0x10/0x10 [ 1041.078438][T21695] ? __pfx_futex_wake+0x10/0x10 [ 1041.078469][T21695] ? ksys_write+0x190/0x250 [ 1041.078493][T21695] __do_sys_mremap+0x119/0x170 [ 1041.078511][T21695] ? __pfx___do_sys_mremap+0x10/0x10 [ 1041.078534][T21695] ? __x64_sys_futex+0x1e0/0x4c0 [ 1041.078571][T21695] do_syscall_64+0xcd/0xfa0 [ 1041.078592][T21695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.078610][T21695] RIP: 0033:0x7f8dc3d8f6c9 [ 1041.078626][T21695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.078642][T21695] RSP: 002b:00007f8dc4c0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1041.078660][T21695] RAX: ffffffffffffffda RBX: 00007f8dc3fe6090 RCX: 00007f8dc3d8f6c9 [ 1041.078671][T21695] RDX: 0000000000003fd6 RSI: 0000000000000007 RDI: 0000000000000000 [ 1041.078681][T21695] RBP: 00007f8dc3e11f91 R08: 0000000020000000 R09: 0000000000000000 [ 1041.078691][T21695] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1041.078701][T21695] R13: 00007f8dc3fe6128 R14: 00007f8dc3fe6090 R15: 00007ffdeda0f7c8 [ 1041.078724][T21695] [ 1042.015991][T21694] Invalid ELF header magic: != ELF [ 1044.722975][T21712] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1045.629226][T21715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3741'. [ 1045.657597][T21715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.716261][T21715] bridge_slave_1 (unregistering): left allmulticast mode [ 1045.735207][T21715] bridge_slave_1 (unregistering): left promiscuous mode [ 1045.756964][T21715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.002851][T20793] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1046.014228][T20793] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1046.023851][T20793] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1046.039768][T20793] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1046.048264][T20793] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1046.533436][T21718] chnl_net:caif_netlink_parms(): no params data found [ 1046.819857][T20671] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1046.832890][T20671] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1046.842143][T20671] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1046.851722][T20671] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1046.861477][T20671] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1047.048270][T21718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.064868][T21718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.087515][T21718] bridge_slave_0: entered allmulticast mode [ 1047.106043][T21718] bridge_slave_0: entered promiscuous mode [ 1047.139587][T21718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.165041][T21718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.183456][T21718] bridge_slave_1: entered allmulticast mode [ 1047.203534][T21718] bridge_slave_1: entered promiscuous mode [ 1047.283603][T21718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.320585][T21718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.413125][T21718] team0: Port device team_slave_0 added [ 1047.433700][T21718] team0: Port device team_slave_1 added [ 1047.522632][T21718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.544285][T21718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.614219][T21718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.656051][T21718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.684509][T21718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.764342][T21718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.975753][T21718] hsr_slave_0: entered promiscuous mode [ 1048.022945][T21718] hsr_slave_1: entered promiscuous mode [ 1048.075317][T21718] debugfs: 'hsr0' already exists in 'hsr' [ 1048.081656][T21718] Cannot create hsr debugfs directory [ 1048.111760][T20671] Bluetooth: hci10: command tx timeout [ 1048.226650][T21727] chnl_net:caif_netlink_parms(): no params data found [ 1048.335786][T16113] udevd[16113]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1048.485835][T21727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.504360][T21727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.530710][T21727] bridge_slave_0: entered allmulticast mode [ 1048.554662][T21727] bridge_slave_0: entered promiscuous mode [ 1048.582026][T21751] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3746: iget: checksum invalid [ 1048.614506][T21727] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.634265][T21751] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1048.647395][T21727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.655624][T21751] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3746: iget: checksum invalid [ 1048.681838][T21727] bridge_slave_1: entered allmulticast mode [ 1048.691372][T21727] bridge_slave_1: entered promiscuous mode [ 1048.698227][T21751] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1048.719785][T21751] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3746: iget: checksum invalid [ 1048.760816][T21751] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1048.789542][T21751] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3746: iget: checksum invalid [ 1048.807030][T21718] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.821690][T21751] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1048.851761][T21751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1048.875897][T21751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1048.897067][T21727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.912430][T20671] Bluetooth: hci11: command tx timeout [ 1048.945464][T21718] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.970923][T21727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.008193][T21727] team0: Port device team_slave_0 added [ 1049.036256][T21718] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.057768][T21727] team0: Port device team_slave_1 added [ 1049.194207][T21727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.223180][T21727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.311306][T21727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.347761][T21727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.366937][T21727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.405770][T21727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.590010][T21727] hsr_slave_0: entered promiscuous mode [ 1049.625631][T21727] hsr_slave_1: entered promiscuous mode [ 1049.660216][T21727] debugfs: 'hsr0' already exists in 'hsr' [ 1049.682371][T21727] Cannot create hsr debugfs directory [ 1049.752279][T21718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.045949][T21718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.150979][T21758] zswap: compressor not available [ 1050.183029][T20671] Bluetooth: hci10: command tx timeout [ 1050.276227][T21718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.322246][T21718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1050.985252][T20793] Bluetooth: hci11: command tx timeout [ 1051.016347][T21727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.216235][T21727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.311734][T21727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.332198][T20671] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1051.346102][T20671] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1051.356138][T20671] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1051.366788][T20671] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1051.379538][T20671] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1051.493955][T21727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.577962][T21718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.658939][T21718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.754212][T20657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.762129][T20657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.851266][T20657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.859216][T20657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.000441][T21727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1052.053827][T21727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1052.084558][T21727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1052.163477][T21727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1052.263995][T20671] Bluetooth: hci10: command tx timeout [ 1052.440054][T21773] chnl_net:caif_netlink_parms(): no params data found [ 1052.769004][T21773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.813971][T21773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.849107][T21773] bridge_slave_0: entered allmulticast mode [ 1052.868878][T21773] bridge_slave_0: entered promiscuous mode [ 1052.910958][T21718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.939912][T21773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.958666][T21773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.969182][T21773] bridge_slave_1: entered allmulticast mode [ 1052.977376][T21773] bridge_slave_1: entered promiscuous mode [ 1053.058957][T21727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.069420][T20671] Bluetooth: hci11: command tx timeout [ 1053.093455][T21773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.133772][T21773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.262176][T21773] team0: Port device team_slave_0 added [ 1053.286750][T21727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.310345][T21773] team0: Port device team_slave_1 added [ 1053.392188][T21773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.405753][T21773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.440682][T21773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.460261][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.468165][T20655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.483245][T20671] Bluetooth: hci12: command tx timeout [ 1053.497223][T21773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.506753][T21773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.540998][T21773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.574491][T21718] veth0_vlan: entered promiscuous mode [ 1053.594356][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.602350][T20655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.679064][T21718] veth1_vlan: entered promiscuous mode [ 1053.733025][T21773] hsr_slave_0: entered promiscuous mode [ 1053.761990][T21773] hsr_slave_1: entered promiscuous mode [ 1053.770945][T21773] debugfs: 'hsr0' already exists in 'hsr' [ 1053.811684][T21773] Cannot create hsr debugfs directory [ 1054.007152][T21718] veth0_macvtap: entered promiscuous mode [ 1054.093174][T21718] veth1_macvtap: entered promiscuous mode [ 1054.239252][T21718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.258548][ T5932] Process accounting resumed [ 1054.304589][T21718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.341415][T20671] Bluetooth: hci10: command tx timeout [ 1054.426353][T20818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.532780][T21773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.622528][T20818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.725286][T21773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.791877][T20818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.840641][T20818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.945231][T21773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.005236][T21727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.113486][T21773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.143222][T20671] Bluetooth: hci11: command tx timeout [ 1055.189762][T20818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.237821][T20818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.357938][T20655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.400965][T20655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.542971][T20671] Bluetooth: hci12: command tx timeout [ 1055.771718][T21773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1055.834918][T21773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1055.915259][T21773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1055.939505][T21773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1056.045973][T21727] veth0_vlan: entered promiscuous mode [ 1056.173503][T21727] veth1_vlan: entered promiscuous mode [ 1056.307158][T21727] veth0_macvtap: entered promiscuous mode [ 1056.368437][T21727] veth1_macvtap: entered promiscuous mode [ 1056.444381][T21773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.486583][T21727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.542946][T21727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.581826][T21773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.612693][T20818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.634902][T20818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.670361][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.678185][T20655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.755033][T20818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.780729][T20818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.827765][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.835684][T20655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.105925][T21773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1057.164153][T21773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.296126][T20818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.354373][T20818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.491147][T21050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.523489][T21050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.620987][T20671] Bluetooth: hci12: command tx timeout [ 1057.931145][T21844] random: crng reseeded on system resumption [ 1057.973909][T21773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.255422][T21773] veth0_vlan: entered promiscuous mode [ 1058.391552][T21773] veth1_vlan: entered promiscuous mode [ 1058.556013][T21773] veth0_macvtap: entered promiscuous mode [ 1058.610640][T21773] veth1_macvtap: entered promiscuous mode [ 1058.705600][T21773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.795797][T21773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.893639][T20655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.933400][T20655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.999874][T20655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.044664][T20655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.305789][T20671] Bluetooth: hci10: unexpected event 0x3e length: 728 > 260 [ 1059.305816][T20671] Bluetooth: hci10: unexpected subevent 0x03 length: 727 > 9 [ 1059.426224][T21859] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1059.701453][T20671] Bluetooth: hci12: command tx timeout [ 1059.758141][T20655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.822761][T20655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.919931][T20653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.933986][T21867] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1059.952050][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.962834][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.995982][T20653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.987819][T21904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3769: iget: checksum invalid [ 1063.045345][T21904] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1063.152768][T21904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3769: iget: checksum invalid [ 1063.252136][T21908] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1063.276632][T21904] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1063.336977][T21904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3769: iget: checksum invalid [ 1063.412449][T21904] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1063.479377][T21904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.3769: iget: checksum invalid [ 1063.535088][T21904] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1063.602701][T21904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1063.661465][T21904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1064.268355][T16113] udevd[16113]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1064.813133][T21930] input: jJǸ-9%vJ86 as /devices/virtual/input/input80 [ 1065.403692][T21930] usb usb24: usbfs: process 21930 (syz.1.3774) did not claim interface 0 before use [ 1065.833160][T21948] ptp ptp0: max value is 20 [ 1067.137233][T16113] udevd[16113]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1067.477337][T21981] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3784: iget: checksum invalid [ 1067.539879][T21981] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1067.641168][T21981] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3784: iget: checksum invalid [ 1067.700176][T21981] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1067.753160][T21981] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3784: iget: checksum invalid [ 1067.830971][T21981] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1067.894856][T21981] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.3784: iget: checksum invalid [ 1067.984323][T21981] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1068.051946][T21981] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1068.124584][T21981] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1068.306761][T21988] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3785: iget: checksum invalid [ 1068.521371][T21988] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1068.583864][T21996] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1068.765116][T21988] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3785: iget: checksum invalid [ 1068.909727][T21988] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1069.004255][T21988] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3785: iget: checksum invalid [ 1069.088777][T21988] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1069.219884][T21988] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.3785: iget: checksum invalid [ 1069.314066][T21988] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1069.409003][T21988] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1069.464127][T21988] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1070.175818][ T31] INFO: task syz.2.3440:20181 blocked for more than 143 seconds. [ 1070.186792][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1070.230248][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1070.295504][ T31] task:syz.2.3440 state:D stack:27592 pid:20181 tgid:20180 ppid:14841 task_flags:0x400140 flags:0x00080006 [ 1070.360641][T22030] FAULT_INJECTION: forcing a failure. [ 1070.360641][T22030] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.375815][ T31] Call Trace: [ 1070.393090][ T31] [ 1070.402786][ T31] __schedule+0x1190/0x5de0 [ 1070.425152][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 1070.437117][T22030] CPU: 0 UID: 0 PID: 22030 Comm: syz.0.3796 Not tainted syzkaller #0 PREEMPT(full) [ 1070.437143][T22030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1070.437154][T22030] Call Trace: [ 1070.437160][T22030] [ 1070.437168][T22030] dump_stack_lvl+0x16c/0x1f0 [ 1070.437192][T22030] should_fail_ex+0x512/0x640 [ 1070.437219][T22030] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1070.437249][T22030] should_failslab+0xc2/0x120 [ 1070.437273][T22030] __kmalloc_cache_noprof+0x72/0x780 [ 1070.437299][T22030] ? __pfx___mutex_lock+0x10/0x10 [ 1070.437320][T22030] ? pty_common_install+0xdf/0xb30 [ 1070.437351][T22030] ? pty_common_install+0xdf/0xb30 [ 1070.437376][T22030] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1070.437396][T22030] pty_common_install+0xdf/0xb30 [ 1070.437426][T22030] ? __pfx_pty_install+0x10/0x10 [ 1070.437453][T22030] tty_init_dev.part.0+0x9c/0x500 [ 1070.437475][T22030] tty_open+0xa4f/0xf90 [ 1070.437499][T22030] ? __pfx_tty_open+0x10/0x10 [ 1070.437519][T22030] ? chrdev_open+0x10b/0x6a0 [ 1070.437543][T22030] ? __pfx_tty_open+0x10/0x10 [ 1070.437562][T22030] chrdev_open+0x234/0x6a0 [ 1070.437582][T22030] ? __pfx_apparmor_file_open+0x10/0x10 [ 1070.437608][T22030] ? __pfx_chrdev_open+0x10/0x10 [ 1070.437630][T22030] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1070.437653][T22030] do_dentry_open+0x982/0x1530 [ 1070.437673][T22030] ? __pfx_chrdev_open+0x10/0x10 [ 1070.437697][T22030] vfs_open+0x82/0x3f0 [ 1070.437724][T22030] path_openat+0x1de4/0x2cb0 [ 1070.437750][T22030] ? __pfx_path_openat+0x10/0x10 [ 1070.437770][T22030] ? __lock_acquire+0xb8a/0x1c90 [ 1070.437797][T22030] do_filp_open+0x20b/0x470 [ 1070.437816][T22030] ? __pfx_do_filp_open+0x10/0x10 [ 1070.437851][T22030] ? alloc_fd+0x471/0x7d0 [ 1070.437874][T22030] do_sys_openat2+0x11b/0x1d0 [ 1070.437898][T22030] ? __pfx_do_sys_openat2+0x10/0x10 [ 1070.437931][T22030] __x64_sys_openat+0x174/0x210 [ 1070.437957][T22030] ? __pfx___x64_sys_openat+0x10/0x10 [ 1070.437991][T22030] do_syscall_64+0xcd/0xfa0 [ 1070.438012][T22030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.438029][T22030] RIP: 0033:0x7f853fb8f6c9 [ 1070.438045][T22030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.438068][T22030] RSP: 002b:00007f8540abf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1070.438089][T22030] RAX: ffffffffffffffda RBX: 00007f853fde5fa0 RCX: 00007f853fb8f6c9 [ 1070.438101][T22030] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1070.438111][T22030] RBP: 00007f853fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1070.438122][T22030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.438132][T22030] R13: 00007f853fde6038 R14: 00007f853fde5fa0 R15: 00007fff440f1e08 [ 1070.438156][T22030] [ 1070.743567][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.895931][ T31] ? __sys_sendmsg+0x16d/0x220 [ 1070.901665][ T31] ? do_syscall_64+0xcd/0xfa0 [ 1070.906925][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.913721][ T31] ? __lock_acquire+0x622/0x1c90 [ 1070.919290][ T31] ? __pfx___schedule+0x10/0x10 [ 1070.925480][ T31] ? find_held_lock+0x2b/0x80 [ 1070.930689][ T31] ? schedule+0x2d7/0x3a0 [ 1070.938209][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1070.945174][ T31] schedule+0xe7/0x3a0 [ 1070.949676][ T31] schedule_preempt_disabled+0x13/0x30 [ 1070.955757][ T31] __mutex_lock+0x818/0x1060 [ 1070.960824][ T31] ? __alloc_skb+0x166/0x380 [ 1070.965932][ T31] ? rcu_is_watching+0x11/0xc0 [ 1070.971169][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1070.977664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1070.983238][ T31] ? __build_skb_around+0x278/0x3b0 [ 1070.988977][ T31] ? skb_put+0x138/0x1b0 [ 1070.993690][ T31] ? __nlmsg_put+0x152/0x1c0 [ 1070.998767][ T31] ? nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1071.005431][ T31] nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1071.011572][ T31] ? kmem_cache_free+0x2d4/0x6c0 [ 1071.017052][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1071.024890][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1071.033073][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1071.041885][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1071.049243][ T31] ? __dev_queue_xmit+0xaf1/0x4490 [ 1071.055048][ T31] ? genl_get_cmd+0x194/0x580 [ 1071.060260][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 1071.066155][ T31] genl_rcv_msg+0x55c/0x800 [ 1071.071135][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1071.076774][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1071.083519][ T31] netlink_rcv_skb+0x158/0x420 [ 1071.088865][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1071.094476][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1071.100299][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1071.106382][ T31] genl_rcv+0x28/0x40 [ 1071.110964][ T31] netlink_unicast+0x5aa/0x870 [ 1071.116258][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1071.122074][ T31] ? __pfx___might_resched+0x10/0x10 [ 1071.128325][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1071.134128][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.142750][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1071.150087][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1071.155425][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1071.161443][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1071.214281][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1071.277637][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1071.294243][ T31] ? futex_private_hash_put+0x176/0x300 [ 1071.300377][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1071.324244][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a1f1c00: rx timeout, send abort [ 1071.336753][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a1f1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1071.407934][ T31] ? __lock_acquire+0x622/0x1c90 [ 1071.432387][ T31] __sys_sendmsg+0x16d/0x220 [ 1071.437467][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1071.472298][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1071.477820][ T31] do_syscall_64+0xcd/0xfa0 [ 1071.493129][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.499644][ T31] RIP: 0033:0x7f757b38f6c9 [ 1071.506122][ T31] RSP: 002b:00007f757c2d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.515851][ T31] RAX: ffffffffffffffda RBX: 00007f757b5e5fa0 RCX: 00007f757b38f6c9 [ 1071.525150][ T31] RDX: 0000000004000084 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1071.534467][ T31] RBP: 00007f757b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.544178][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.554781][ T31] R13: 00007f757b5e6038 R14: 00007f757b5e5fa0 R15: 00007fff3032bdb8 [ 1071.565868][ T31] [ 1071.569394][ T31] [ 1071.569394][ T31] Showing all locks held in the system: [ 1071.578352][ T31] 3 locks held by kworker/0:1/10: [ 1071.592156][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1071.606742][ T31] #1: ffffc900000f7d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1071.619174][ T31] #2: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1071.682140][ T31] 1 lock held by khungtaskd/31: [ 1071.687503][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1071.730859][ T31] 2 locks held by kworker/u8:26/12431: [ 1071.737809][ T31] #0: ffff8881405c2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1071.756026][ T31] #1: ffffc900046cfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1071.770457][ T31] 2 locks held by syz-executor/16090: [ 1071.777697][ T31] #0: ffff88807f8ec0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1071.804985][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1071.832087][ T31] 2 locks held by kworker/u8:31/18208: [ 1071.838130][ T31] #0: ffff8881405c2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1071.868707][ T31] #1: ffffc9000bab7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1071.881740][ T31] 2 locks held by syz.3.3413/20092: [ 1071.887687][ T31] #0: ffffffff9018e790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1071.897185][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1071.908623][ T31] 2 locks held by syz.2.3440/20181: [ 1071.917496][ T31] #0: ffffffff9018e790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1071.928776][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1071.942327][ T31] 2 locks held by getty/20364: [ 1071.948859][ T31] #0: ffff88814c6240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1071.964863][ T31] #1: ffffc900023882f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1071.978230][ T31] 2 locks held by syz.4.3523/20568: [ 1071.984240][ T31] #0: ffffffff9018e790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1071.993499][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c6/0x7c0 [ 1072.004736][ T31] 2 locks held by kworker/u11:0/20653: [ 1072.010779][ T31] #0: ffff8881405c2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1072.026890][ T31] #1: ffffc9000bbefd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1072.041076][ T31] 4 locks held by kworker/u11:2/20657: [ 1072.050687][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1072.067171][ T31] #1: ffffc90004847d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1072.079660][ T31] #2: ffffffff900d45d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 1072.090588][ T31] #3: ffffffff8e3cfa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1072.108027][ T31] 2 locks held by syz-executor/20784: [ 1072.114211][ T31] #0: ffff88807ad8a0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1072.126513][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1072.140127][ T31] 2 locks held by syz.8.3613/21018: [ 1072.149210][ T31] #0: ffffffff9018e790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1072.165907][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1072.178817][ T31] 2 locks held by syz-executor/21063: [ 1072.185037][ T31] #0: ffff888027b0c0e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1072.197123][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1072.208143][ T31] 2 locks held by syz-executor/21568: [ 1072.214338][ T31] #0: ffff88808d8a20e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1072.226214][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1072.237635][ T31] 2 locks held by syz.3.3704/21592: [ 1072.247133][ T31] #0: ffffffff9018e790 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1072.270811][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1072.284814][ T31] 1 lock held by syz.1.3792/22015: [ 1072.290436][ T31] #0: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1072.302473][ T31] 1 lock held by syz.4.3794/22023: [ 1072.308202][ T31] #0: ffffffff900d45d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 1072.319023][ T31] 1 lock held by syz.6.3795/22026: [ 1072.325784][ T31] #0: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1072.511448][ T31] [ 1072.549019][ T31] ============================================= [ 1072.549019][ T31] [ 1072.613028][ T31] NMI backtrace for cpu 0 [ 1072.613047][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1072.613068][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1072.613084][ T31] Call Trace: [ 1072.613090][ T31] [ 1072.613097][ T31] dump_stack_lvl+0x116/0x1f0 [ 1072.613121][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1072.613145][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1072.613165][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1072.613192][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1072.613219][ T31] watchdog+0xf3f/0x1170 [ 1072.613239][ T31] ? rcu_is_watching+0x12/0xc0 [ 1072.613259][ T31] ? __pfx_watchdog+0x10/0x10 [ 1072.613273][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1072.613294][ T31] ? __kthread_parkme+0x19e/0x250 [ 1072.613318][ T31] ? __pfx_watchdog+0x10/0x10 [ 1072.613333][ T31] kthread+0x3c5/0x780 [ 1072.613359][ T31] ? __pfx_kthread+0x10/0x10 [ 1072.613385][ T31] ? rcu_is_watching+0x12/0xc0 [ 1072.613403][ T31] ? __pfx_kthread+0x10/0x10 [ 1072.613429][ T31] ret_from_fork+0x675/0x7d0 [ 1072.613454][ T31] ? __pfx_kthread+0x10/0x10 [ 1072.613480][ T31] ret_from_fork_asm+0x1a/0x30 [ 1072.613513][ T31] [ 1072.755113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.288873][T20657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.474097][T20657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.603248][T20657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.732554][T20657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.991137][T20657] bridge_slave_1: left allmulticast mode [ 1073.997373][T20657] bridge_slave_1: left promiscuous mode [ 1074.032819][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.054021][T20657] bridge_slave_0: left allmulticast mode [ 1074.060251][T20657] bridge_slave_0: left promiscuous mode [ 1074.080014][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.813444][T20657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.835793][T20657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.847757][T20657] bond0 (unregistering): Released all slaves [ 1075.194861][T20657] hsr_slave_0: left promiscuous mode [ 1075.212767][T20657] hsr_slave_1: left promiscuous mode [ 1075.235515][T20657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.250563][T20657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.275226][T20657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.311365][T20657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.366233][T20657] veth1_macvtap: left promiscuous mode [ 1075.400355][T20657] veth0_macvtap: left promiscuous mode [ 1075.431002][T20657] veth1_vlan: left promiscuous mode [ 1075.465541][T20657] veth0_vlan: left promiscuous mode [ 1076.388427][T20657] team0 (unregistering): Port device team_slave_1 removed [ 1076.448372][T20657] team0 (unregistering): Port device team_slave_0 removed [ 1077.287775][T20657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.386059][T20657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.490308][T20657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.598773][T20657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.861343][T20657] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.965736][T20657] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.060747][T20657] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.150361][T20657] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.433181][T20657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.551683][T20657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.642061][T20657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.735695][T20657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.949813][T20657] bridge_slave_1: left allmulticast mode [ 1078.956069][T20657] bridge_slave_1: left promiscuous mode [ 1078.984424][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.996329][T20657] bridge_slave_0: left allmulticast mode [ 1079.021500][T20657] bridge_slave_0: left promiscuous mode [ 1079.029492][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.063109][T20657] bridge_slave_0: left allmulticast mode [ 1079.079205][T20657] bridge_slave_0: left promiscuous mode [ 1079.086297][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.126275][T20657] bridge_slave_1: left allmulticast mode [ 1079.158701][T20657] bridge_slave_1: left promiscuous mode [ 1079.164973][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.197849][T20657] bridge_slave_0: left allmulticast mode [ 1079.226078][T20657] bridge_slave_0: left promiscuous mode [ 1079.240732][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.930580][T20657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.946369][T20657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.960113][T20657] bond0 (unregistering): Released all slaves