last executing test programs: 3m28.571070471s ago: executing program 32 (id=2456): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'rose0\x00', 0x0}) r4 = waitid$auto_P_ALL(0x0, 0x0, &(0x7f0000000240)={@siginfo_0_0={0x1, 0x3, 0xe, @_sigsys={&(0x7f00000001c0)="12e2fdbb6532cac08e0eeca37b5c2c64ba93bbc191487655c91eb40636f09079e5ca02be38a0593c93b2c72816476292f8d85d97ba70bdb88b52dc1a607acb27eb27428ea0b4a4497b88", 0x4, 0x4}}}, 0x7fbf1323, &(0x7f00000002c0)={{0x8000000000000001, 0x7}, {0x67b2}, 0x3, 0x8, 0x10001, 0x54a, 0xcf63, 0x0, 0x13, 0x4, 0xa, 0x5, 0x0, 0x7, 0x8, 0x8000000000000001}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_NAME={0x9, 0x1, 'nfsd\x00'}, @OVS_DP_ATTR_NAME={0x8, 0x1, '#+)\x00'}, @OVS_DP_ATTR_USER_FEATURES={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x44) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0xf4240) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) futex_waitv$auto(0x0, 0x1, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) write$auto(0x3, 0x0, 0xfdef) r9 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m41.493239678s ago: executing program 2 (id=2671): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r0, 0x0, 0x402, 0x101, &(0x7f0000000040)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) socket(0x80000000000000a, 0x2, 0x0) (async) sendto$auto(r0, 0x0, 0x402, 0x101, &(0x7f0000000040)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) (async) 2m40.707521388s ago: executing program 2 (id=2673): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0xe0440, 0x0) write$auto(r0, &(0x7f0000000300)='8f\r\x1a\x9a?\xdd`\xfa\xa3\x90vd\x8a#jt\x94x\x02\xc4\n(\xedl\x1c\x98\xb6\xeb\x11Q\x00\xf8\x92\xf1:\xb5#\x04>Q-\xd5\xa7w\xf5y\x94/!\xade\x00r\xbc\t(,O\b\xee\x93\xae\x8b\xf4\x1d\nS\x91\x1c\xdd\xcf\xe5\xad6\xe1\xc2\xde\x87g{\xb5\x91\a\xa4\xbf\xe4\x1do\xef\xd1W\xe3\xc4\xc8\xd3z\xbc{\xba\b\xeb9[\xf7', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2, 0x4, 0xb1, r3, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) socket(0x1d, 0x2, 0x2) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat$auto(&(0x7f0000000040)='./file0\x00', 0x200) write$auto_proc_coredump_filter_operations_base(r5, &(0x7f00000000c0)="840f0db4", 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r6, 0x1002, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 2m37.467604787s ago: executing program 2 (id=2680): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m36.44797483s ago: executing program 2 (id=2683): mmap$auto(0x6, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x24040890) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200efc9d3"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x4, 0x0, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4110000", @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x11c4}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x802) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x40000400000073, 0x9, 0x852d, 0xeb0, 0xfffffffffffffffa, 0x1000) mmap$auto(0xfffffffffffffffd, 0x200004, 0x4100000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6) mmap$auto(0x0, 0x0, 0x7ffffffe, 0xeb1, 0x401, 0x7fff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x7ff) unlinkat$auto(r1, &(0x7f00000001c0)='./file0\x00', 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) 2m21.312582984s ago: executing program 33 (id=2683): mmap$auto(0x6, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x24040890) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200efc9d3"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x4, 0x0, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4110000", @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x11c4}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x802) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x40000400000073, 0x9, 0x852d, 0xeb0, 0xfffffffffffffffa, 0x1000) mmap$auto(0xfffffffffffffffd, 0x200004, 0x4100000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x7ff) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6) mmap$auto(0x0, 0x0, 0x7ffffffe, 0xeb1, 0x401, 0x7fff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) openat$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x7ff) unlinkat$auto(r1, &(0x7f00000001c0)='./file0\x00', 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) 1m37.980366687s ago: executing program 34 (id=2795): r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0xffffffffffffffff, r0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000007", @ANYRES16=r2, @ANYBLOB="000429bd700002dcdd25030000000400080004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(r1, &(0x7f00000000c0)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x2b, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r4, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRESDEC=r4, @ANYBLOB="7459d94ee9698c8d0d6457e95d01ed067745278106037ae83c962044bff45dbf3b9dbae6af0aad651b966e4eee961d0e6e1ee4de4052319b71fe6e56804b647fc5e4fdd05491e7cf2bb09c2bd523acd76b32660898b6a18d5c73060f4c6ea239492df520", @ANYRESOCT=r0, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r5, 0xc0b45545, 0x0) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r6 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r6, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r6, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000340)='\xac\x00\xdd\xf3s\xe4Q\xb3\xa4\xac\"\xeb\xe5e>R2\xde\x7f\xc9\x06\xfeaY\xfc\x1e\x98\x10\x91@:P\b{\x88(\xc5\x84\xec~\x9a|\xb3Q\xcf\x8bg\xfc!\x00\'\x96?\xb18\xfc\x17(0xee00, 0x0, 0x5, 0x0, 0x6, 0xc48}, &(0x7f0000000040)=0x81, &(0x7f00000000c0)=0x3, 0x7, 0x1, 0x2, 0x8, 0x91, 0xff01, 0xfff7, 0x7, @raw=0x8, @inferred=0x0}) msgctl$auto_IPC_INFO(0x8, 0x3, &(0x7f0000000280)={{0xf, r1, r2, 0x2, 0x7f, 0x3, 0x7ff}, &(0x7f0000000100), &(0x7f0000000240)=0x80, 0x4, 0x4, 0xe661, 0x5, 0x570, 0xc, 0x9b1, 0x6, @inferred=r3, @inferred=r3}) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x1, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xce\xb1Z|\xffGP\x97)\xcf\a\xfb\\j\xaa\x18\n\xb2\x04n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15S\xd0\x83\xd2lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcbW(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/usb/usbmon/35t\x00', 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200040d1) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) creat$auto(&(0x7f0000000100)='./file0\x00', 0x2b11) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) 1m24.943622912s ago: executing program 6 (id=2870): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m24.488369517s ago: executing program 6 (id=2871): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) connect$auto(r0, &(0x7f0000000000)=@rc={0x1f, @none, 0xac}, 0x6) connect$auto(r0, 0x0, 0x52) r1 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000040)=0x2) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ROUTER={0xa, 0x1d, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xfffffffffffff610, 0x8b, 0x14, r1, 0x8001) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r2, &(0x7f0000000380)="703a3a82d9e5cc7c2ceda8d50bfc", 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r4, &(0x7f00000002c0)=""/51, 0x33) ioctl$auto_IMADDTIMER(r4, 0x80044940, &(0x7f0000000540)=0x5) madvise$auto(0x1ffff000, 0x7, 0x100000000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000280)=""/65, 0x41) 1m21.672619184s ago: executing program 7 (id=2875): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)="f915e8c2ea377492788bb03ccd2cf1575f5cf49c73b06f64d7c7dc391e7439459d92c3c8cbad6abb4dd5c0b41a25459ca44e40f74d", 0x4) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dd3040000dbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd12\x00', 0x10000, 0x0) mmap$auto(0x2, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) read$auto(0xffffffffffffffff, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) pread64$auto(r0, 0x0, 0x4, 0x7fff) 1m20.307188568s ago: executing program 7 (id=2878): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250300000006000600810000000600070000800000060006000e0000000a000500000000000000000800000000aaaaaaaaaaaa00000a000500aaaaaaaaaa4000000800030040000000f8ff0100", @ANYRES32=0x0, @ANYBLOB="08000400"], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x400002, &(0x7f00000002c0)={0x0, 0xc7}, 0x6, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x400000fe) 1m19.173601893s ago: executing program 7 (id=2880): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m18.529705812s ago: executing program 7 (id=2881): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000020) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x4000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101000, 0x0) ptrace$auto(0x20000000000008b, 0x0, 0x4, 0x100) setreuid$auto(0x1, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc8201, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="0a1b9a3c", 0x4) socket(0x10, 0x2, 0x4) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2aa01, 0x0) ioctl$auto(r2, 0xc0585611, r2) mmap$auto(0x2, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x2010000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) ioctl$auto(0x3, 0x40044900, 0xffffffffffffffff) 1m16.842779262s ago: executing program 7 (id=2885): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m15.13293192s ago: executing program 7 (id=2888): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5f0027617c680b39b053272335"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xffffff9e) 1m8.988027197s ago: executing program 37 (id=2871): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) connect$auto(r0, &(0x7f0000000000)=@rc={0x1f, @none, 0xac}, 0x6) connect$auto(r0, 0x0, 0x52) r1 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000040)=0x2) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ROUTER={0xa, 0x1d, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xfffffffffffff610, 0x8b, 0x14, r1, 0x8001) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r2, &(0x7f0000000380)="703a3a82d9e5cc7c2ceda8d50bfc", 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r4, &(0x7f00000002c0)=""/51, 0x33) ioctl$auto_IMADDTIMER(r4, 0x80044940, &(0x7f0000000540)=0x5) madvise$auto(0x1ffff000, 0x7, 0x100000000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000280)=""/65, 0x41) 1m0.9329859s ago: executing program 8 (id=2917): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000000)={0x3, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [], {0x2, 0x2005, 0x2, 0x8, 0x400, 0xb533, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x86fe, 0x0, 0x0, 0xb1}}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = open(0x0, 0xcd1e23e41b02d660, 0x154) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) socket(0x2, 0x3, 0xa) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x18, 0xa, 0x1) close_range$auto(0x2, 0x8000, 0x0) socket(0x9, 0x80000, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') socket(0x80000000000000a, 0x2, 0x0) 59.831599107s ago: executing program 38 (id=2888): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5f0027617c680b39b053272335"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xffffff9e) 59.812223629s ago: executing program 8 (id=2920): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='nbd\x00', 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(r0, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x800) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000200", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 59.637591019s ago: executing program 9 (id=2898): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 59.264030125s ago: executing program 8 (id=2922): socket(0x2c, 0x3, 0x3a) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae78, r1) 59.148193724s ago: executing program 9 (id=2923): socket(0x2, 0x3, 0xa) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x807fff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x1, 0x2) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x8001, 0x0) socketpair$auto(0x8, 0x2, 0x80000001, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202402, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 58.585014007s ago: executing program 8 (id=2925): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) connect$auto(r0, &(0x7f0000000000)=@rc={0x1f, @none, 0xac}, 0x6) connect$auto(r0, 0x0, 0x52) r1 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000040)=0x2) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ROUTER={0xa, 0x1d, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xfffffffffffff610, 0x8b, 0x14, r1, 0x8001) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x3, 0xff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r3, &(0x7f00000002c0)=""/51, 0x33) ioctl$auto_IMADDTIMER(r3, 0x80044940, &(0x7f0000000540)=0x5) madvise$auto(0x1ffff000, 0x7, 0x100000000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000280)=""/65, 0x41) 57.962561584s ago: executing program 8 (id=2926): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 57.563981033s ago: executing program 8 (id=2927): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2aa01, 0x0) ioctl$auto(r0, 0xc0585611, r0) 50.693979674s ago: executing program 1 (id=2939): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/active_slave\x00', 0x204481, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/41, 0x29) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) ppoll$auto(0x0, 0xf3, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/slab/kmalloc-64/skip_kfence\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/12, 0xc) socket(0x5, 0x80000, 0x2000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) sendfile$auto(r4, r4, 0x0, 0xef0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0xfffffc01, 0x4, &(0x7f00000002c0)="9cb0e925b6c933c1e84975dc16630bb8b0f266d7793d8229a9d6a5dfa1591faeb97caa277628e870ede4c8395f417b1d493e45805b63a07812b75f6cd4492fdea991c15d4023d9c188cadd85207071510b6e83adfd4a4c3357c9090be67ea8", 0x9) sendfile$auto(0x1, 0x3, 0x0, 0xd551) 49.273426452s ago: executing program 1 (id=2940): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='nbd\x00', 0x4) r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x470000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/misc/rdma_cm/uevent\x00', 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) getsockopt$auto_SO_GET_FILTER(r0, 0x2, 0x1a, &(0x7f0000000100)='+\x00', &(0x7f0000000140)=0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) pread64$auto(r2, 0x0, 0x1fffe001, 0xb) read$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x800) mmap$auto(0xffffffffffffffff, 0x20009, 0x7, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) setregid$auto(0x81, 0x5) clone$auto(0x7fff, 0xff, &(0x7f0000000600)=0x8000, 0x0, 0x7) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r3, 0x0, 0xfff) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x382, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x1, 0x106) setsockopt$auto(r5, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x14}}, 0x10) 48.19776494s ago: executing program 1 (id=2943): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) (async) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) mq_timedsend$auto(r0, 0x0, 0x6, 0xc91, &(0x7f00000000c0)={0x6, 0x7}) (async) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) gettid() (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) (async) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) 47.230022515s ago: executing program 1 (id=2944): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x7, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) socket(0x10, 0x2, 0x0) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x900, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/queues/tx-0/tx_maxrate\x00', 0x10b142, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="1b0025bdb42d057000fddbdf"], 0x18}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 45.466850036s ago: executing program 1 (id=2949): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 45.191282092s ago: executing program 1 (id=2950): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000001080)={0x12c0, r2, 0xe21, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x53, 0x6, 0x0, 0x1, [@generic="06db4164c657fb64c2378a1c97592fe2fbd0f2c004e6611c16926fd53f103cc04abdce11c1d1a915f8100cbafa1cf5a37a488b95b15f6d20fd0db69a6dc5f4cd456b427e7d95ba212ef6caf3a8a4f9"]}, @TIPC_NLA_NAME_TABLE={0x1ff, 0x8, 0x0, 0x1, [@generic="32ec91ef2f1b9de070465ac3ae74b027519838aca39162200658a6683967d879d27b289f43b2d53da1a532242dc1847a9a9519f792c40ac79bdb1fe68bbd", @generic="f138d346943ea8e8ebcdaee088c14585331720c3628833a9a4784e17fb4bdb8a30346e569452a374f9b5fa23311fabc5c8926e4f7e50aa897d25632a4e69e6ae1983f329c962e8a845743a2b9e1d90eba30d8e8e035d9faeb12eeb031121e002442177c7b2cf2ccc83233fcd04a8a7f175339e7f01bb49", @generic="5ed41fe5233b71493f603c8475f74d055706a5148c0ee109ff598cb02ad9a6b6afef6ecee692cf026a1369a947ae288024943931ea79aa6d07d6c65d813e", @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x1}, @nested={0xbe, 0x2, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @str='pim6reg\x00'}, @generic="c753484efa112d6aecc0f7cc298a81cecdf217cec90b59fc1f9e2cec494eba555f8d045480b77f76bb32b9821e41f8571cd71aa5f42a147d1e72989e0bd2faae786066d27884530ad1e8440fe1ed85db128f4ea5a3bc473e933b84beaa7e1d2271cdb21f6e6abcdf046af3a2f5f8cbdcfcccbba9be0c9f1f0f48dde25388cf05e4b6e740ef0988d9961ad70e33b211544a55ae7f8f46bc8ab0b02059797078be6e9c37800e7553f10867", @nested={0x4, 0x98}]}, @nested={0x3f, 0xc1, 0x0, 0x1, [@generic="4eb9ef37fe1cbf74a8c0d83f646cc72ddc3c1d94e9e918164f2d3b56ff15ad881aa0639be3385ddaca99173eda9ab95012eac1", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@broadcast}]}]}, @TIPC_NLA_BEARER={0x51, 0x1, 0x0, 0x1, [@generic="64439d8c76f68272573a49888f84685fdcc29751c43e9e1bc1a66a7cb11f5336a84db200ccbd34c59ac0502e8a474bf2b78665716f41cde748c55d6a325b1bf1c9f27eddfa730b4f1d88b468ad"]}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "627a63c1fd0938441336190392bce60945dbc690271d5a6de904af4261fa51a6f86dcdf0d09f28d8bce725a8186f7399ae0128ae1622eabde346c2a1e9012304407185d4e23f043e390a2dbe1a882b98f3795532b53aac3350d09db00dc873fe1aeb600f144b4bd11ecbbb0f5b1ea73ad46239bc0058de1e04951f878b0e90394b501c0a213c91db8d49eead3c1248eb21c6797482810673ce2409fa54c34f92075569f166aed86f4e001620d9cbedb9921a6fc429df1e17333c14caebf7acf2c60c9a8abba442b4f3f5965a2ebd5e01f65099cadb14da39797759a0be0dfd8eaa01622233157b44a9a664f9ef1ed1896c1abea7a835885e073286a369ebdb20e9caba6ad779a70a82369f92240c2f3c4181198fad4657f29973c41d5713746680010e8012465f53c406dbcae75624652417e0668edc71238734478c7a90f4c7a480e96dbef7106f99f5d611468cbd6a43d3ad0a928cbd2260abd8dfdd89f2e778f7e349d4ab32780f4c9c5859cbd5131e2a333df268d41bd70282a34f4a282f146b7c10cb340bef724eeacd061a554cc4fb013c649aad0999fce6252d4b879cdd292e4a3a07b9531d55686f85aa98c6b8ebcc98ac4d29969dcf58d72865ee21074b0aa6c2459e92bff314532e58bfdacf03292e73a5bc58032130ed59446ae61c96b435ad1371b404128e977a59c74ea094c2fc6e9583725b70f37fbccf0a364941d4cfe02d99c108beb4d408ad896797df4c2cc112c32f99069efe6fe7a380007f20345054b1d4a4b9c6fbc6a5c574323e36d31ad2968ddd0c52ce826ebb96d465e4c7ae533adc55e25039556d0fd2c1178b388a47ac781d144b193529d11fe5a694ab14cad1d1597aae6a9cc49338c33e870b662f181c7cbf8ffe52ab72ce80ec1a03dc1b409003fdaa9a13c3e3d6313d199233b5f2ee3535f0d3ce291e95be49cfe47c69d8e613c7bb01ae59e37a15335ce485e73a0924ba067638f8a9b3b118fbe0e4f81e476258dfb4f5cfa0c28340080bffa164a228de7a9f62be910a2beb0e4a6b058049a2f2ce6dffa22f8cad950b36b7b4873fd90e0de25bcaebcea40a8529ab4605d2727291cd4aaa889c50b805feaefe44ccfd1d89a0cbb4a05073316908d004c6b7253061cdbbcee89ad19a4afb492a8d2b4bfd598509c4336f7694606ae995174034420641ec53f727b0930d8dfc37b2420edb85ba24308ef89c7b8263b232512eafbda76f25656613a1fe3542f16bbd6a441e98067e102b133ad1be9a51c582dd2358897754771196e56052a8e04d3ec7c54b89252b078a87571aaad78a43258be30c4636608c9461696b546171398b3991eca6988aa0405b72f87c308fb8604a56c0135f410e0cc8dde455ed48b814f649e4fb2efe1effb52d0051d43f0a90d6f112ac81b9b70b55052d2872e4180e1a468817fcb8873e0db5dbe0463e7008a595417e928df491a3b970a23276d5dda2a2cb49ba3238cb8fe85a5ec8434d9104c01270b7f88a8f70539d60ddad8c5ccad8551dbb1126b5043085d0f80fbadf913eda95d4ded013d4043991cfff6c0873b028c1c211f78940698562edbb96f9bb00c3af8d68ae9725d8e9a844757562eb354ebb1756c9e66793c1338696a33f61230b195fab43855d5170a4d96de8535fe976260be5100ee5fcca2801fc1a2993aa1684df933bda4b9fe253341e37bc43a02e257b6032ac7a08fe16682c420ae5b34057435d1dd9049afa03e35fa7d5dd09e6be660bb3dd8db4f8e83208894917f3f47f0ef1e2f430f34693858a31f8c60be1e67babd84dc99fd511a4dbbdfe22e20189c5559c01544012bf652d797a2c609bb8b78b36a742bbb551862b951c40fb817f3e8ad3fa4fd0f1655d69a7f0bae23bb1d3758a95ba5c62e7cbe22ed6febca7c21c5d41b2629a3cbc87ac96fab9a04bbcf19fca9fb7de8a633d16043f7be542f50b6d9994daf96e8311ec0063f7d889647b4208fe0b5742f179483c2c871b961b77e53f63b701ddbc7cb124ce8b5f7d902323dfb3fcf2b2da8e6f842888a1efb7135fdc37bf7909572539ae5c386f2fd0a90f223476c62146056670656c00479d4ae0c6454d793e4008d4e9ad4e034c47d553883113d5599455a9e184f835925e13de1c4ac2ee07a1c97f47510f637c1aab167c6a4c4b9d1e1ec8b0bddcd251184707403ab735f33782de67f6900e889a136696f8744cbd424e1d8dc3d1ed73fbf9c597ff852711a3993e3f8b6625f6b07e5c8989274f21c5a568fa7ee2cc8fbc6b8b81e09be784d4cce3f1491d87d4a37ba49c4f683d7a82faf8b53b8ffb1edd4ae5306e592781bdd912f3a6e1462efc284339287c355736c75e7e04230a49415d06d27952a8b8209f05a50604dc38512d9e9b44943cd2d5cb3791b60c65f4526ff336b4b8358482dafb77f8d9b062b2c90be91da145dbf612bb336a5dfb1fbd3957a7480c5f6f66bb7ac85b9bbabc5ff414c62dd90facc4d7ab144bd15a1dabf219d9e682847a32013dfc416d6e5c9e4323ec02468c16099de3a9dbfb25e75baee6f1c70a2e9ed23c5585f35d0bf7cd787ab3ba42b54b5c63c5e84caad065ccf8313f9a926e50a0a2f5f26bccb8abda06ada225b37d1043ac2388577e5ba405a16151ba7c6ee2a750d760c08ac4b30a6844d94a7f70f929b08ae2132b1e109af917a6f08f7afddfaf7373e19b2bb3d569818d722a0e7807e86f2f34a162c66d87fc3e88f86e9bb5a06f4f38e75ebb1cb7e79b8cd5b4908303cedca3c2ac9f55af6f50fdded0f85a8262314a565722e5f13a92ed934298c198de3af2de1ba66e20629fc3160fc9ede3121e2b42e7609b004156b39f4f51e8aef7a7507631d5344533777d2fb6cc2976fb7a9faa4eea40ced2ccd6d9355e09a1866585e35d2670fd205bac7b50e43b434c3fe14a2bf6916bd11b688e2b74a439adbbf1f3a5a942ad3fc0013480f654314d72374ff6183b2080625370eb03a5498479eba05f16bfb823f86513bb1ed9c3f37497bafb76501c1ecb9d061a8c007000943d93dcdcfb11a87e907f73a87c0718817322b4b92400900f1a3d4cbc4bfd3d3644ce0f27ac9b0180129a3bb1124628fb9559981245ca108666d81a33401d9aed3105761b27a738c7377459895d67f417fa2a974f1af94bbeb83b5953f252379ec14574356ccb21a8eb15140072d48c851b390c18ceb1598b1cf86e46904b611742358b28bda2d2baa85c576ff0ee53feac2caf8303d2e0770cb9018b976008b186059ea05a330586850c5db73804197e3e35460fef7be63efcf15747f7f676b69ddd6ae92fe8131927c8fd92301f020856acaf059d56736c9910e045cd00459843916ca20a54f967e5d7eb1d04e346c5e75afdfd5ae2a5253ef229c4bcbc6cce70bda25725370ee5d5cca4edc955f5f3f2488ba95575c563c045cbd00c42f0642c448880b155402ba1898ded5f41f0a903fc7ae92d5a3d263490aa7e5d35ce807af1fe9eb4a61ccb02d4bac184177e5a78f5b880836b808346a76e833ae84a0842193b3149329f3c4e3238390366c51839edf8499eed5894d3fa8e1be8e203c0277e007a9fcbf0e2848a9324e6ff9b99fea1f0a7dfa43d5f905deddb72becbf7c158cc05337222dd56ddb25b0dfa925307de27849294c6f31ac7a51f50173e0c5d5adbb42f521baa550cba442a0a15a1f8843d05ea713fc6b87619e64028c6527f8881e34ad1cef09b4fdc0abcc87ae543927cad71dd21d0401a36f4bf8b48cba944806dfb7a3e52a08fd6650708fc4e199cb333c2f6527674014149267711e7e797f1cd569436c797413c1f0159b427b4225cc3a032b7949c8d8c3337e3bbdb49621339a25052a339efae834251aa663a75674ebbd271bad11d61bb3284acbcee54d2b4922be91002ba50eb8a5269bd2bf7d26031da41ba799aef8436409c0ae74914a5e4a06d6a2e0eaba06111dd981abf914544b05156ba9ebed44280edcc9f74bc174f186b75d4eae74b4267d6c52258a8e6ff7e31da19af30a4ae449853987b13934fb33db2092ec718f3dc9c5a456972aa6689dd37a3c3524b908b2158d684acfba7bc2ce72210e60ad49426727f2e0c85b62a48daaa9cdb746bc47a00eae233d6e17664a6dc9ed26ff8d80a8701ef5370e9e1b93a43f8d6ce5b7ebe992c8385e21cd50f7a3e72937168287f6793979d8f24ca00cfd77886091f46f2f8b921c567189a999d6b87ab91167da9a235465f6d1c4876919563b46a40ae1f1b23ddcd8c86c9b84786760a2b1127789e0579fe282a588eaa56ce8a5c2d7ab79501b37883b57205e34307884ec526e9a006613342ff22c6a1fad98d09d630915889185e46eb617c532b756042ecc1db66c257f53f82cf9bb21c436d21338d6f19de5d89f1189fba7f0d51e8330b735dd24191c5b281a74810ac974ab0faf69dc3d846e41275566b61c236e8394b2b251ff9c72b8c9fe51cbc450feb58c99f8ce7cb4b343ff8d8089eb75cf8e96efd1781df1166c56ba76a7e6e81bd228637e567e1dda383c3048c0e46fe3c00d87120b71d6a896f545b9cc8f05758d4992f7bfef0157be760f2bb9c1fb48242d29a2b358b35ce36443a6adab7a27c6a1d5f4952e6b6b45be85a9a16206cc8bc733cfd38b7d6108f82d83f2d48c7bf31a2220f5f36f64755bc601f26eb93ee8bb6e2a26cb85d7718b66d06a170d03abf3280023302199bd69251c60091a95dcf5a8196cccdf1671a195c1b4e718c3092c6987dcabb950c876b6ce09d6d6d2ef7749c4a9a10b1bdbbcc5a59341afcd61f74a87d441b5537aa52ef12761f5838acc2d88fb7836a8b28c2c6ac2500800b2ab939f8c494b5df7ba40b5af1a62c5a2ebf9f64ae40733233be29b3214ee801a62e0751b0fdf2a5b679a85a73ad3699b0ff23912ad15487090ca03c2fd29849cc8cfac9f73bca65312c8043bed8d7622c69c0a2fa2dfc9a3112a9cd6539fa29ed074d9a1518be0cafada9e147788a11744327e64b413a279e3da195de0ef63a243a32d629bc3db92d6592527e9fdc39285a228aa3f6d3866c20bd30f79e729d0ed2a9db5b8d7dc490b34f0a72291b62513ddb22387a6287b81e09e35b6345149d7e7a9cb9a99b7dede3d1a4a1c47cb842ba3f368244b9bd36dff916376cf7c95b722c324b4e8835732ed13e9d3ba24b9b465e4884a64f9736cd19910d50ac620edc533019d0e2b076893f1ad89b61c2f7eb959fba1c89f4624b3fbe7734134e8ebb2fb8430cc9654ad379a8c073361b0c1a8bd99242c3a5265dc1b9070bf7e793a79ce76a71b566fd607702fe66bad294f8b21ac2be67560417483c88cec4302bccf5a86d45613c93091b4885c231e398eb1ece79277e847757172750c835ad98ac288ec828e5bdeaa2c9afdbdc4bf713955be9f49445ac0d88015a43d5f7b0d357d5207ab871bae65edb594fac20b56fa8fddf66915cb309ca1e29c214a5867fb1872e09ee2fbd6f12b91f03c72b0288da7bb35490ba2a00c623ffec6984ad5b64ca9e6d798b0f7a96fe1f02ca5a83803d1498eaa9c5a1ebe13473af6e76627d1c48914a9e42252a88931922b7ad7cbd907320fe0a37fcc9d3a58d8c65cbf4898f695f5a5028105fce2bdd2be5620bc22a06cac9f4ca8531a52dadc2bd4a558fb497d0f5e7796df8157038d86043a3a96c36536bd4fcde29c30d9d027e71e48ccdf077ae789ee2fa10723ae3b529f2f0ca30a4e8e17795fabcbd3d966dc3d8129f3ccfcc6ccc34fd20b28bd58761e6acbc3d53601cb0eeca8adff8817425"}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8000e, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x1, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x10, 0x6d3e, 0x9, 0x7, 0x10000]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) sysfs$auto(0x2, 0x16, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0xb, 0x9067, 0x18c, 0x6d, 0x0, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x2001007, 0x1, 0x2, 0xe, 0x5, @attach_prog_fd, 0x166, 0x7fb, 0x6, 0xa, 0x47ffffff, 0xa7c2}, 0x102) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) connect$auto(0x3, 0x0, 0x54) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0) sysfs$auto(0x5, 0x7, 0x9) 43.42804349s ago: executing program 39 (id=2923): socket(0x2, 0x3, 0xa) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x807fff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x1, 0x2) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x8001, 0x0) socketpair$auto(0x8, 0x2, 0x80000001, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202402, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 42.216370237s ago: executing program 40 (id=2927): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2aa01, 0x0) ioctl$auto(r0, 0xc0585611, r0) 35.866499606s ago: executing program 2 (id=2952): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 35.412080568s ago: executing program 2 (id=2962): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3a) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103841, 0x0) write$auto(r2, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) inotify_init1$auto(0x401) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) write$auto(0x3, 0x0, 0xfdef) write$auto_dfs_global_fops_debug(r0, &(0x7f0000000d80)='0', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000002c0)="ddc47ce8", 0x4) 26.46607862s ago: executing program 0 (id=2988): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x18af33f3098bcb63, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r1, r1, 0x0, 0x10000800000003) fcntl$auto(0x3, 0x4, 0xa553) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 25.469325221s ago: executing program 0 (id=2990): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000009, 0xfc) unshare$auto(0x40000080) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161340, 0x130) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/address_mask\x00', 0x88100, 0x0) socket(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40801, 0x175) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop4/size\x00', 0x40000, 0x0) finit_module$auto(0xffffffffffffffff, 0x0, 0x2006) ptrace$auto(0xd, r2, 0x4, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000140)={0x10a5, 0xffff, 0x98, 0x4, 0x3, 0x6, 0x3ff, 0x8000, 0x2b0e, 0x6, 0x9, 0xffff, 0x3, 0x9, 0x6ff5}) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x48401, 0x0) ioctl$auto(r5, 0x901064af, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x80003, 0xffd, 0x8000000008012, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000100)={0x0, 0xffff}, 0x1) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000300)="9a0050c109d0a32a27f9cdecc9cd2dc000282894a3f24477a83300ee06733424dded15d0e33edae3f869402bae70dbd1b53a9c6db30f487a13da4702c002a0b71362cb3c98f3610f57bb69e7", 0x4c) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x100) ioctl$auto_BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)="a6e934c3ba4e7f911525fcd0064de3bdd6fcd70b1b5e59f9a20cc8df434f7c74a17361ccddb96b59e96506f27a0db9e9f8900730fd682f1f9de2666faf0ad435b3bc1b66c906b36c25936cd290f61a234071287383726c5fc92a253b353f0c16d4c2f330903446c36600fe24cc741c4045e8188e5e069542e4856ae2c330d7b6705707c1d3a81e86ba0f2678544cd3db5ae6c21d1f2f0317c6634bedfbf39035c64255c8695395a0e8bc624e761ddf0971be4f36ced3760dcf61d18a1e081374306e63f4ab7818d28b0147dbb71717cc3f") listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xffffffffffffff94, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) socket(0x23, 0x4, 0x0) sendfile$auto(r6, r6, 0x0, 0xffffffff) 24.674019275s ago: executing program 0 (id=2991): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='nbd\x00', 0x4) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(r0, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x800) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00000000003f00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 23.627932421s ago: executing program 0 (id=2993): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000080)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x8f3b7a51b8162ca1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="5ced", 0x2) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) readv$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x10000000, 0x1004, 0x10e3, 0xf030, 0xffffffffffffffff, 0x7) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) 23.291184461s ago: executing program 0 (id=2994): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty36\x00', 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000040) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/available_events\x00', 0x8200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x400c080) rt_sigqueueinfo$auto(0x0, 0x0, 0x0) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) rseq$auto(&(0x7f0000000200)={0x4, 0x6, 0x8, 0x8, 0x1, 0xd, "0a93ac1008304396d4e194b388be2a0db923fec4b61f6656a0d43b5a2937429408cb997482975ea367c7d7c5c5077fc705b3cb6c2597e205a466302d9ba84fc428bf9e68b35a8e2aaaf74664c1313166913cbd98aaf4933af72ef16a44f6012254409835b6773fcb56fca81102058898bc32ff30b49467721028d163d237fda629fc2687ac52f9804b4241eed18ce7a9ff092564cc83b31b34497faa88a5261284a26aba2c3b4c0cc322980f5d4ed9ed07bbc543b3d5902d4e3444e3ac90dc1ebf95d4b4ecd719597b9bf611110fdf619fd718e44ae2653944bd5e9fd6ffeb5d6d5843e518d6cf0b28cf68d0e0449396"}, 0x9, 0xbe0, 0x0) 20.185021784s ago: executing program 42 (id=2962): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3a) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x565) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103841, 0x0) write$auto(r2, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setsockopt$auto_SO_PASSCRED(r1, 0x1, 0x10, &(0x7f00000001c0)='/dev/dsp1\x00', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) epoll_create$auto(0x2) epoll_pwait$auto(r6, 0x0, 0x3, 0x7, &(0x7f00000000c0)={0x800}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1000000000000d, 0x8fd6, 0x9, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40200, 0x0) 3.342563943s ago: executing program 3 (id=3059): mmap$auto(0x6, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video3\x00', 0x40080, 0x0) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') r1 = creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x20) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) close_range$auto(0x0, r2, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0xf0ffffffffffff) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nbd14\x00', 0x80441, 0x0) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0ro\x00', 0x40a00, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r5, 0x80044d07, &(0x7f0000000080)=0x4) pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$auto_BLKIOMIN(r4, 0x1278, 0x1000000000000) write$auto_proc_uid_map_operations_base(r1, &(0x7f0000000340)="5da798c72b73710a0ca6697e57ae9fcb9e69a23d6a836b7d44ddfc926adfbcf93c362f8a0ec573904c91223bee53eb4baaf80b0919de0015721484a666f31f9c4b72ffaa78e8dd0500525fffdc8d358cfe1e8b75feb2ff146b2a3583fb1dfa76c559a078fa3f5dc7eca2947608411c774989da5b1db84ea64cc606b8046f2ca80d35", 0x82) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x6, &(0x7f0000000280)=@query={@target_ifindex, 0x4, 0xf, 0xc137, 0x5a1, @prog_cnt=0x400000, 0x0, 0x1, 0x8000, 0x7, 0x3}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x6, 0x84) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000440), 0x44c001, 0x0) ioctl$auto(0x1, 0x541b, 0x8) 3.072079465s ago: executing program 4 (id=3060): msgctl$auto_IPC_INFO(0x0, 0x3, &(0x7f00000001c0)={{0x4, 0xee00, 0x0, 0x5, 0x0, 0x6, 0xc48}, 0x0, &(0x7f00000000c0)=0x3, 0x7, 0x1, 0x2, 0x8, 0x91, 0xff01, 0xfff7, 0x7, @raw=0x8}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x10, 0x1, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xce\xb1Z|\xffGP\x97)\xcf\a\xfb\\j\xaa\x18\n\xb2\x04n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15S\xd0\x83\xd2lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcbW(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/usb/usbmon/35t\x00', 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r0, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200040d1) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) lseek$auto(0x3, 0x2, 0x4) creat$auto(&(0x7f0000000100)='./file0\x00', 0x2b11) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) 2.895029693s ago: executing program 5 (id=3061): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe800000000900"}, 0x1b) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) 2.772562099s ago: executing program 3 (id=3062): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000020) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x4000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101000, 0x0) ptrace$auto(0x20000000000008b, 0x0, 0x4, 0x100) setreuid$auto(0x1, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc8201, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="0a1b9a3c", 0x4) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi3\x00', 0x2aa01, 0x0) ioctl$auto(r2, 0xc0585611, r2) 2.624067294s ago: executing program 4 (id=3063): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)="f915e8c2ea377492788bb03ccd2cf1575f5cf49c73b06f64d7c7dc391e7439459d92c3c8cbad6abb4dd5c0b41a25459ca44e40f74d", 0x4) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dd3040060dbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd12\x00', 0x10000, 0x0) mmap$auto(0x2, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) read$auto(0xffffffffffffffff, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) pread64$auto(r0, 0x0, 0x4, 0x7fff) 2.567745215s ago: executing program 5 (id=3064): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x204, 0x0, 0x20, 0x9, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_GROUPS={0x4}, @ETHTOOL_A_STATS_GROUPS={0x99, 0x3, 0x0, 0x1, [@nested={0x10, 0xb2, 0x0, 0x1, [@nested={0x4, 0xc9}, @nested={0x4, 0xfb}, @nested={0x4, 0xdc}]}, @generic="5586142f27e1f075c13fa515093ed35c03a38d95ff3256e6289e16b247448598e5000635f3b34a89ad6b1c21f8b0a961515b48e6e1424f1844832a484dfe5eef574df4f0a59e0db520bb87f08e3d5aa22c827dc9e743fe72e502c85ec79fad74edcbbceaa2b825caa4328413722bf9375ac82aa4e5c21826a0f88bcc339d72d6c0741f8738"]}, @ETHTOOL_A_STATS_GROUPS={0x6b, 0x3, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xde, 0x0, 0x0, @fd=r0}, @generic="de54fe6c39751b2001f4d0c484e94d3333cbd46ec93534243283", @generic="cc3db7c9855bb6023c574f3a76b33c3fc0836836d50ff93c150e9bb4a38e7dee9aaf5fc5eb8d916a97e09fb75d5ae0c7ef", @typed={0xc, 0x144, 0x0, 0x0, @u64=0xd9}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x9}, @ETHTOOL_A_STATS_GROUPS={0xda, 0x3, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}, @generic="e68a102221f00880861b9f3caac6a2fdfddd541b767617ef2d68ad9fae321a109eb61ab5dfd7e4e2198008d146f3d4d4923ffd2461c9833d01e763ee66939d7c5a4142dacb50d347a6b68e7a468cc1858aa7a78b208dc26a09a18bf2d914fec02ee9fe60d7cc0ac2d71b23cf3e1ba17855602fddaee9e2b50750a0427c27804f08d62d1090749ff59ad9972c1d000be18643fd7a8a2df6cae9eb698f41f1932afd9fb4f55694628f2ce2863f36f41699348c78d9b54ceef89b73445559477eb5d23b", @generic, @typed={0xc, 0xbf, 0x0, 0x0, @u64=0x4}]}]}, 0x204}}, 0x4050) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(r2, 0x3, 0x2a, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000240), 0x400) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x2, 0x4) 1.351514346s ago: executing program 4 (id=3065): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/mcfilter6\x00', 0x121080, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x325141, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000001140)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x100000000, 0x0, 0x50b301a, 0x2c, 0xf164, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x0) socket(0x2, 0x2, 0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mount$auto(&(0x7f00000011c0)='netdevsim0\x00', &(0x7f0000001200)='./file0\x00', &(0x7f0000001280)='({[^^\x00', 0x5, &(0x7f0000000240)="9cb17a3833aa263b2ec21af9c3b9069595c1bf33050fbfcd6aa18a21b12809a0673643e9265f3ff33ff5a1c16565b27eb628750e08116ffd1f494d6b766ba42cd398701c3767379f7822122adfcd425cf837812a36f41290e430deb382d803684d64436d51523b52ab08a8f3205331cfaf06f5e7781f73dd6b87d942f6f8ddb629f93307fe53f14846932c4a751e06c62c05f86a6345ce04cfe5310aee0b07f40da82be56041f5da3ad4c3237c2718fb57aaba0de7b6c43342dede161c6d28ae86f1a571d8f94d1435d570fea1b7a6be04d1668365fafd0d") sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x7fff, 0x1, 0xfffffffffffffffa, 0x9b72, r1, 0x0) close_range$auto(r3, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r4 = pipe$auto(0x0) dup2$auto(0x5, r0) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r4, 0x0, 0x80000001, 0x9) io_uring_setup$auto(0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) getsockopt$auto(r1, 0x6, 0xfffff8f3, &(0x7f0000000000)='/dev/ttyS2\x00', &(0x7f0000000100)=0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/wlan1/proxy_delay\x00', 0x1a5182, 0x0) 1.219494424s ago: executing program 3 (id=3066): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x108002, 0x0) r0 = socket(0x2, 0x2, 0x1) getsockopt$auto(r0, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', &(0x7f0000000080)=0x9) epoll_create$auto(0x3e) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x6) socketpair$auto(0x9, 0x2, 0xb, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x80047437, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r3, r4, 0x0, 0x4000000007) ioctl$auto_PPPIOCSMRU(r2, 0x40047438, 0x0) 1.062111747s ago: executing program 4 (id=3067): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)="f915e8c2ea377492788bb03ccd2cf1575f5cf49c73b06f64d7c7dc391e7439459d92c3c8cbad6abb4dd5c0b41a2545", 0x4) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dd3040000dbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd12\x00', 0x10000, 0x0) mmap$auto(0x2, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) read$auto(0xffffffffffffffff, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) pread64$auto(r0, 0x0, 0x4, 0x7fff) 59.455868ms ago: executing program 4 (id=3068): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x1000) (async) r3 = socket(0x21, 0x2, 0x1000) mmap$auto(0x0, 0x9c7, 0x9, 0x11, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/ip_vs_ftp/parameters/ports\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7e21) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7e21) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r5, 0x4b68, 0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/149, 0x95) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket(0x1d, 0x0, 0x0) (async) r7 = socket(0x1d, 0x0, 0x0) mmap$auto(0x52, 0x20009, 0xdf, 0xeb1, r6, 0x2e) read$auto(r6, 0x0, 0x80000000006) stat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfffffffffffffffc, 0x13, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x200800}, 0x4, 0x4008) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8, &(0x7f00000002c0)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x200800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) (async) r8 = socket(0x29, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) socket(0x8, 0x2, 0x0) (async) r9 = socket(0x8, 0x2, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)="c010b5") sendmsg$auto_NL80211_CMD_GET_REG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0xfffffffffffeffff, 0xeb1, r4, 0x8001) recvmmsg$auto(r7, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x80000001}, 0x803}, 0xfffffff9, 0xe, 0x0) ioctl$auto(r8, 0x89f1, 0x24) (async) ioctl$auto(r8, 0x89f1, 0x24) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0cd9085d3a5ad44d86d1", @ANYRES16=r0, @ANYBLOB="01002abd7000fddbdf250200000008000300", @ANYRESOCT=r5, @ANYBLOB="0800400003000800c06f51cc0d351d11f057486ba92c446241ecb04f9c9b03f4c803e6f6553b7a4d641ef61f651f3ef2d21e293de2f62d21d0d4b3b21b7cdac6b511d2ff20fa49e90145a2"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) 0s ago: executing program 3 (id=3069): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)="f915e8c2ea377492788bb03ccd2cf1575f5cf49c73b06f64d7c7dc391e7439459d92c3c8cbad6abb4dd5c0b41a25459ca44e40f74d", 0x4) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dd304fff0dbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd12\x00', 0x10000, 0x0) mmap$auto(0x2, 0x400008, 0x6, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) read$auto(0xffffffffffffffff, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) write$auto_nvmf_dev_fops_fabrics(r0, 0x0, 0x0) pread64$auto(r0, 0x0, 0x4, 0x7fff) kernel console output (not intermixed with test programs): (slave bond_slave_1): Releasing backup interface [ 720.430816][T14186] bond0 (unregistering): Released all slaves [ 720.469355][T16360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.684171][T14186] HSR: left promiscuous mode [ 720.888866][T16360] team0: Port device team_slave_0 added [ 720.950812][T16360] team0: Port device team_slave_1 added [ 720.969213][T14783] Bluetooth: hci3: command tx timeout [ 721.255447][T16360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.268880][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.295158][T16360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.437956][T16462] 0x000200000001-0xa29656a63616329 : "" [ 721.443898][T16462] mtd: partition "" is out of reach -- disabled [ 721.509323][T16462] ftl_cs: FTL header not found. [ 721.580000][T16360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.587022][T16360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.626320][T16360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.972479][T16360] hsr_slave_0: entered promiscuous mode [ 721.992596][T16360] hsr_slave_1: entered promiscuous mode [ 723.049161][T14783] Bluetooth: hci3: command tx timeout [ 723.835314][T16503] kAFS: Invalid Command on /proc/fs/afs/cells file [ 723.985889][T16360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 723.995539][T16513] 0x000200000001-0xa29656a63616329 : "" [ 724.023735][T16513] mtd: partition "" is out of reach -- disabled [ 724.032874][T16519] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 724.079658][T16513] ftl_cs: FTL header not found. [ 724.090451][T16360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 724.126771][T16360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 724.174100][T16518] erspan0: entered allmulticast mode [ 724.306394][T16360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 724.642065][T14186] hsr_slave_0: left promiscuous mode [ 724.655819][T14186] hsr_slave_1: left promiscuous mode [ 724.671114][T14186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.690047][T14186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.701665][T14186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.709531][T14186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.754071][T14186] veth1_vlan: left promiscuous mode [ 724.760305][T14186] veth0_vlan: left promiscuous mode [ 725.461136][T16548] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 726.199350][T14186] team0 (unregistering): Port device team_slave_1 removed [ 726.304045][T14186] team0 (unregistering): Port device team_slave_0 removed [ 727.650936][T16360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.897965][T16360] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.435342][T14196] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.442653][T14196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.490970][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.498322][T14177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.365629][T16606] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.751375][T16360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.081088][T16622] erspan0: entered allmulticast mode [ 730.098023][T16360] veth0_vlan: entered promiscuous mode [ 730.147902][T16360] veth1_vlan: entered promiscuous mode [ 730.204418][T16360] veth0_macvtap: entered promiscuous mode [ 730.218737][T16360] veth1_macvtap: entered promiscuous mode [ 730.278022][T16360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.303451][T16360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.346954][ T4581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.371432][ T4581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.445209][ T4581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.649955][ T4581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.805591][T14182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.827387][T14182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.022703][T14182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.058004][T14182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.335453][T16637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 731.608681][T16640] 0x000200000001-0xa29656a63616329 : "" [ 731.615269][T16640] mtd: partition "" is out of reach -- disabled [ 731.653664][T16640] ftl_cs: FTL header not found. [ 732.477551][T16656] 0x000200000001-0xa29656a63616329 : "" [ 732.500316][T16656] mtd: partition "" is out of reach -- disabled [ 732.548381][T16656] ftl_cs: FTL header not found. [ 733.451574][T16675] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 733.792244][T16677] 0x000200000001-0xa29656a63616329 : "" [ 733.809518][T16677] mtd: partition "" is out of reach -- disabled [ 733.875762][T16677] ftl_cs: FTL header not found. [ 734.789560][T16695] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2457'. [ 736.983808][T16763] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81637b0a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 736.999781][T16763] Call Trace: [ 737.003120][T16763] [ 737.006139][T16763] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 737.013202][T16763] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 737.019240][T16763] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 737.025822][T16763] mce_cpu_restart+0xd9/0x1f0 [ 737.030534][T16763] ? __pfx_mce_cpu_restart+0x10/0x10 [ 737.035862][T16763] smp_call_function_many_cond+0x122a/0x1600 [ 737.041991][T16763] ? __pfx_mce_cpu_restart+0x10/0x10 [ 737.047317][T16763] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 737.053181][T16763] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 737.059553][T16763] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 737.065647][T16763] ? __pfx_mce_cpu_restart+0x10/0x10 [ 737.070965][T16763] on_each_cpu_cond_mask+0x40/0x90 [ 737.076132][T16763] set_bank+0x240/0x3a0 [ 737.080333][T16763] ? __pfx_set_bank+0x10/0x10 [ 737.085074][T16763] ? find_held_lock+0x2b/0x80 [ 737.089793][T16763] ? __pfx_set_bank+0x10/0x10 [ 737.094640][T16763] dev_attr_store+0x55/0x80 [ 737.099249][T16763] ? __pfx_dev_attr_store+0x10/0x10 [ 737.104569][T16763] sysfs_kf_write+0xf2/0x150 [ 737.109201][T16763] kernfs_fop_write_iter+0x3af/0x570 [ 737.114522][T16763] ? __pfx_sysfs_kf_write+0x10/0x10 [ 737.119769][T16763] vfs_write+0x7d3/0x11d0 [ 737.124174][T16763] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 737.130038][T16763] ? __pfx___mutex_lock+0x10/0x10 [ 737.135118][T16763] ? __pfx_vfs_write+0x10/0x10 [ 737.140033][T16763] ksys_write+0x12a/0x250 [ 737.144504][T16763] ? __pfx_ksys_write+0x10/0x10 [ 737.149515][T16763] do_syscall_64+0xcd/0x4b0 [ 737.154087][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.160032][T16763] RIP: 0033:0x7f654678eec9 [ 737.164592][T16763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.184420][T16763] RSP: 002b:00007f65476a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.192877][T16763] RAX: ffffffffffffffda RBX: 00007f65469e6270 RCX: 00007f654678eec9 [ 737.200894][T16763] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 737.209093][T16763] RBP: 00007f6546811f91 R08: 0000000000000000 R09: 0000000000000000 [ 737.217275][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.225397][T16763] R13: 00007f65469e6308 R14: 00007f65469e6270 R15: 00007ffe2feed568 [ 737.233427][T16763] [ 737.671169][T16773] FAULT_INJECTION: forcing a failure. [ 737.671169][T16773] name failslab, interval 1, probability 0, space 0, times 0 [ 737.718491][T16773] CPU: 0 UID: 0 PID: 16773 Comm: syz.2.2468 Not tainted syzkaller #0 PREEMPT(full) [ 737.718546][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 737.718568][T16773] Call Trace: [ 737.718580][T16773] [ 737.718594][T16773] dump_stack_lvl+0x16c/0x1f0 [ 737.718644][T16773] should_fail_ex+0x512/0x640 [ 737.718694][T16773] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 737.718738][T16773] should_failslab+0xc2/0x120 [ 737.718790][T16773] kmem_cache_alloc_noprof+0x75/0x6e0 [ 737.718827][T16773] ? vm_area_dup+0x27/0x8d0 [ 737.718870][T16773] ? vm_area_dup+0x27/0x8d0 [ 737.718900][T16773] vm_area_dup+0x27/0x8d0 [ 737.718938][T16773] dup_mmap+0x86f/0x2280 [ 737.719006][T16773] ? __pfx_dup_mmap+0x10/0x10 [ 737.719087][T16773] copy_process+0x3f0c/0x76a0 [ 737.719154][T16773] ? __pfx_copy_process+0x10/0x10 [ 737.719201][T16773] ? futex_private_hash_put+0x176/0x300 [ 737.719254][T16773] ? futex_private_hash_put+0x18a/0x300 [ 737.719328][T16773] kernel_clone+0xfc/0x930 [ 737.719374][T16773] ? __pfx_futex_wake+0x10/0x10 [ 737.719405][T16773] ? __pfx_kernel_clone+0x10/0x10 [ 737.719506][T16773] __do_sys_clone+0xce/0x120 [ 737.719556][T16773] ? __pfx___do_sys_clone+0x10/0x10 [ 737.719603][T16773] ? ksys_unshare+0x687/0xa40 [ 737.719674][T16773] ? xfd_validate_state+0x61/0x180 [ 737.719718][T16773] do_syscall_64+0xcd/0x4b0 [ 737.719764][T16773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.719799][T16773] RIP: 0033:0x7f654678eec9 [ 737.719828][T16773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.719861][T16773] RSP: 002b:00007f65476e9fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 737.719893][T16773] RAX: ffffffffffffffda RBX: 00007f65469e6090 RCX: 00007f654678eec9 [ 737.719916][T16773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360011 [ 737.719937][T16773] RBP: 00007f6546811f91 R08: 0000000000000000 R09: 0000000000000000 [ 737.719958][T16773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 737.719979][T16773] R13: 00007f65469e6128 R14: 00007f65469e6090 R15: 00007ffe2feed568 [ 737.720025][T16773] [ 739.316446][T16796] kAFS: Invalid Command on /proc/fs/afs/cells file [ 740.117824][T16797] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 740.485428][T16809] random: crng reseeded on system resumption [ 740.746195][T16811] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2479'. [ 740.767755][T16811] netlink: 98 bytes leftover after parsing attributes in process `syz.0.2479'. [ 740.806533][T16811] netlink: 98 bytes leftover after parsing attributes in process `syz.0.2479'. [ 740.953225][T16816] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 741.284430][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 741.565562][T16824] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 745.447987][T16881] 0x000200000001-0xa29656a63616329 : "" [ 745.458161][T16881] mtd: partition "" is out of reach -- disabled [ 745.473202][T16881] ftl_cs: FTL header not found. [ 745.773980][T16889] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 747.233677][T16903] block nbd0: Unsupported socket: should be TCP or UNIX. [ 747.514265][T16911] 0x000200000001-0xa29656a63616329 : "" [ 747.569514][T16911] mtd: partition "" is out of reach -- disabled [ 747.670011][T16911] ftl_cs: FTL header not found. [ 749.044964][T16924] FAULT_INJECTION: forcing a failure. [ 749.044964][T16924] name failslab, interval 1, probability 0, space 0, times 0 [ 749.063472][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 749.114292][T16924] CPU: 1 UID: 0 PID: 16924 Comm: syz.3.2504 Not tainted syzkaller #0 PREEMPT(full) [ 749.114327][T16924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 749.114342][T16924] Call Trace: [ 749.114350][T16924] [ 749.114360][T16924] dump_stack_lvl+0x16c/0x1f0 [ 749.114395][T16924] should_fail_ex+0x512/0x640 [ 749.114431][T16924] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 749.114462][T16924] should_failslab+0xc2/0x120 [ 749.114497][T16924] kmem_cache_alloc_noprof+0x75/0x6e0 [ 749.114522][T16924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.114549][T16924] ? mas_preallocate+0xe6a/0x11f0 [ 749.114586][T16924] ? mas_preallocate+0xe6a/0x11f0 [ 749.114616][T16924] mas_preallocate+0xe6a/0x11f0 [ 749.114653][T16924] ? __pfx_mas_preallocate+0x10/0x10 [ 749.114684][T16924] ? rcu_is_watching+0x12/0xc0 [ 749.114722][T16924] ? anon_vma_name+0x81/0x2f0 [ 749.114763][T16924] __split_vma+0x34a/0x1070 [ 749.114791][T16924] ? __pfx___split_vma+0x10/0x10 [ 749.114824][T16924] ? lock_acquire+0x179/0x350 [ 749.114866][T16924] vms_gather_munmap_vmas+0x1cb/0x1340 [ 749.114891][T16924] ? move_page_tables+0x140d/0x4230 [ 749.114920][T16924] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 749.114945][T16924] ? move_page_tables+0xf9e/0x4230 [ 749.114986][T16924] do_vmi_align_munmap+0x286/0x7e0 [ 749.115016][T16924] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 749.115084][T16924] do_vmi_munmap+0x204/0x3e0 [ 749.115121][T16924] move_vma+0xb5f/0x1770 [ 749.115152][T16924] ? __pfx_move_vma+0x10/0x10 [ 749.115194][T16924] ? vrm_set_new_addr+0x208/0x290 [ 749.115222][T16924] mremap_to+0x1b7/0x450 [ 749.115249][T16924] do_mremap+0x13a8/0x2020 [ 749.115281][T16924] ? futex_private_hash_put+0x170/0x300 [ 749.115324][T16924] ? __pfx_do_mremap+0x10/0x10 [ 749.115357][T16924] ? do_writev+0x218/0x340 [ 749.115391][T16924] __do_sys_mremap+0x119/0x170 [ 749.115418][T16924] ? __pfx___do_sys_mremap+0x10/0x10 [ 749.115452][T16924] ? __x64_sys_futex+0x1e0/0x4c0 [ 749.115507][T16924] do_syscall_64+0xcd/0x4b0 [ 749.115539][T16924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.115565][T16924] RIP: 0033:0x7f97e1f8eec9 [ 749.115584][T16924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.115608][T16924] RSP: 002b:00007f97e2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 749.115631][T16924] RAX: ffffffffffffffda RBX: 00007f97e21e5fa0 RCX: 00007f97e1f8eec9 [ 749.115647][T16924] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000004000 [ 749.115662][T16924] RBP: 00007f97e2011f91 R08: 0000000100000000 R09: 0000000000000000 [ 749.115677][T16924] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 749.115691][T16924] R13: 00007f97e21e6038 R14: 00007f97e21e5fa0 R15: 00007ffc4f45a9a8 [ 749.115722][T16924] [ 749.921131][T16940] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.191902][T16940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 751.178614][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 751.190350][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 751.198901][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 751.207551][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 751.216695][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 752.026629][T16949] chnl_net:caif_netlink_parms(): no params data found [ 753.225935][T16949] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.239734][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.247531][T16949] bridge_slave_0: entered allmulticast mode [ 753.285610][T16949] bridge_slave_0: entered promiscuous mode [ 753.296527][T14783] Bluetooth: hci2: command tx timeout [ 753.322212][T16949] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.329820][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.337231][T16949] bridge_slave_1: entered allmulticast mode [ 753.346720][T16949] bridge_slave_1: entered promiscuous mode [ 753.442824][T16962] zswap: compressor not available [ 753.582990][T16949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.652682][T16949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.034717][T16949] team0: Port device team_slave_0 added [ 754.064129][T16949] team0: Port device team_slave_1 added [ 754.643933][T16949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.688442][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.879415][T16949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.952861][T16949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.981907][T16949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.070011][T16949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.083759][T16993] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 755.307412][T16995] bridge0: port 3(gretap0) entered blocking state [ 755.314463][T16995] bridge0: port 3(gretap0) entered disabled state [ 755.327045][T16995] gretap0: entered allmulticast mode [ 755.345999][T16995] gretap0: entered promiscuous mode [ 755.369550][T14783] Bluetooth: hci2: command tx timeout [ 755.410201][T16995] bridge0: port 3(gretap0) entered blocking state [ 755.416795][T16995] bridge0: port 3(gretap0) entered forwarding state [ 755.456417][T16949] hsr_slave_0: entered promiscuous mode [ 755.517057][T16949] hsr_slave_1: entered promiscuous mode [ 755.530149][T16949] debugfs: 'hsr0' already exists in 'hsr' [ 755.540411][T16949] Cannot create hsr debugfs directory [ 755.677756][T16999] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 756.447884][T16949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.462774][T16949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.498108][T16949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 756.536876][T16949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 756.800328][T16949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.863163][T16949] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.936671][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.943882][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.074236][T14178] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.081504][T14178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.183158][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 757.251020][T17018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 757.264895][T17018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 757.386238][T17018] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 757.451457][T14783] Bluetooth: hci2: command tx timeout [ 757.754353][T17018] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 757.921402][T17018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 757.927613][T17018] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 758.049415][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.055763][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.161438][T17018] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 758.225880][T17018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 758.285594][T17018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 758.347835][T17018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 758.401324][T16949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.501988][T17018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 758.547215][T17018] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 758.584480][T17018] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 759.289937][T14783] Bluetooth: hci4: command 0x0c1a tx timeout [ 759.289975][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 759.533571][T17058] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input64 [ 759.939201][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 760.167260][T16949] veth0_vlan: entered promiscuous mode [ 760.249240][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 760.267254][T16949] veth1_vlan: entered promiscuous mode [ 760.560469][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 760.571451][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 760.768771][T16949] veth0_macvtap: entered promiscuous mode [ 760.806718][T16949] veth1_macvtap: entered promiscuous mode [ 761.134043][T16949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.236271][T16949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.245041][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 761.337583][T14194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.368191][T14194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.377734][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 761.501214][T14194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.536099][T14194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.009310][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 762.010876][T14187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.125514][T14187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.329315][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 762.501293][T14187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.537395][T14187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.649577][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 763.459310][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 764.089330][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 764.411036][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 764.729722][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 765.690087][T17132] 0x000200000001-0xa29656a63616329 : "" [ 765.695805][T17132] mtd: partition "" is out of reach -- disabled [ 765.771401][T17132] ftl_cs: FTL header not found. [ 765.924903][T17136] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2547'. [ 765.955895][T17136] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2547'. [ 765.999857][T17136] netlink: 290 bytes leftover after parsing attributes in process `syz.4.2547'. [ 767.005828][T17161] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 771.021566][T17242] 0x000200000001-0xa29656a63616329 : "" [ 771.027360][T17242] mtd: partition "" is out of reach -- disabled [ 771.055739][T17242] ftl_cs: FTL header not found. [ 772.720993][T17276] sd 0:0:1:0: PR command failed: 1026 [ 772.754651][T17276] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 772.803632][T17276] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 773.996658][T17296] 0x000200000001-0xa29656a63616329 : "" [ 774.025340][T17296] mtd: partition "" is out of reach -- disabled [ 774.058513][T17296] ftl_cs: FTL header not found. [ 774.194520][T17302] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2584'. [ 774.964620][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'. [ 776.342305][T17324] bond0: invalid ARP target specified [ 776.367986][T17341] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 776.605599][T17347] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 776.780898][T17354] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 778.745060][T17395] FAULT_INJECTION: forcing a failure. [ 778.745060][T17395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.759770][T17395] CPU: 1 UID: 0 PID: 17395 Comm: syz.2.2606 Not tainted syzkaller #0 PREEMPT(full) [ 778.759818][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 778.759839][T17395] Call Trace: [ 778.759849][T17395] [ 778.759863][T17395] dump_stack_lvl+0x16c/0x1f0 [ 778.759914][T17395] should_fail_ex+0x512/0x640 [ 778.759971][T17395] _copy_to_user+0x32/0xd0 [ 778.760029][T17395] simple_read_from_buffer+0xcb/0x170 [ 778.760092][T17395] proc_fail_nth_read+0x197/0x240 [ 778.760135][T17395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.760181][T17395] ? rw_verify_area+0xcf/0x6c0 [ 778.760217][T17395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 778.760259][T17395] vfs_read+0x1e1/0xcf0 [ 778.760321][T17395] ? __pfx___mutex_lock+0x10/0x10 [ 778.760368][T17395] ? __pfx_vfs_read+0x10/0x10 [ 778.760423][T17395] ? __fget_files+0x20e/0x3c0 [ 778.760476][T17395] ksys_read+0x12a/0x250 [ 778.760517][T17395] ? __pfx_ksys_read+0x10/0x10 [ 778.760573][T17395] do_syscall_64+0xcd/0x4b0 [ 778.760622][T17395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.760657][T17395] RIP: 0033:0x7f654678d8dc [ 778.760687][T17395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 778.760723][T17395] RSP: 002b:00007f654770b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 778.760773][T17395] RAX: ffffffffffffffda RBX: 00007f65469e5fa0 RCX: 00007f654678d8dc [ 778.760797][T17395] RDX: 000000000000000f RSI: 00007f654770b0a0 RDI: 0000000000000005 [ 778.760819][T17395] RBP: 00007f654770b090 R08: 0000000000000000 R09: 0000000000000000 [ 778.760840][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.760861][T17395] R13: 00007f65469e6038 R14: 00007f65469e5fa0 R15: 00007ffe2feed568 [ 778.760906][T17395] [ 779.221968][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2602'. [ 781.936398][T17438] 0x000200000001-0xa29656a63616329 : "" [ 781.962458][T17438] mtd: partition "" is out of reach -- disabled [ 782.013521][T17445] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 782.088626][T17438] ftl_cs: FTL header not found. [ 782.873695][T17458] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 783.883479][T17468] 0x000200000001-0xa29656a63616329 : "" [ 783.889229][T17468] mtd: partition "" is out of reach -- disabled [ 783.936427][T17468] ftl_cs: FTL header not found. [ 784.851151][T17489] can: request_module (can-proto-0) failed. [ 786.890172][T17528] 0x000200000001-0xa29656a63616329 : "" [ 786.895976][T17528] mtd: partition "" is out of reach -- disabled [ 786.948477][T17528] ftl_cs: FTL header not found. [ 787.976553][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2639'. [ 788.940129][T17567] futex_wake_op: syz.3.2643 tries to shift op by -9; fix this program [ 792.344647][T17627] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 792.448651][T17630] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 796.331064][T17665] netlink: 'syz.2.2665': attribute type 27 has an invalid length. [ 796.360948][T17665] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2665'. [ 797.135593][T17685] zswap: compressor not available [ 798.094359][T17701] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2674'. [ 801.661815][T17742] can: request_module (can-proto-5) failed. [ 803.947268][T17780] 0x000200000001-0xa29656a63616329 : "" [ 803.953072][T17780] mtd: partition "" is out of reach -- disabled [ 804.031629][T17780] ftl_cs: FTL header not found. [ 804.386784][T17791] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 805.005763][T17795] kafs: addr_prefs: Invalid Command [ 807.781277][T17828] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 808.986374][T17818] HfR: entered promiscuous mode [ 815.545946][T17891] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 815.810331][T17891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 815.838185][T17891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 815.871371][T17891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 815.881021][T17891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 816.139294][T17891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 817.857455][T17149] Bluetooth: hci4: command 0x0c1a tx timeout [ 817.863769][T17149] Bluetooth: hci1: command 0x0406 tx timeout [ 817.929222][T17127] Bluetooth: hci3: command 0x0c1a tx timeout [ 817.935431][T17127] Bluetooth: hci0: command 0x0c1a tx timeout [ 818.169760][T17930] Bluetooth: hci2: command 0x0c1a tx timeout [ 818.408633][T17149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 818.424280][T17149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 818.434695][T17149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 818.443464][T17149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 818.451725][T17149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 819.465216][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.471800][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.490372][T17149] Bluetooth: hci5: command tx timeout [ 821.305070][T17938] chnl_net:caif_netlink_parms(): no params data found [ 821.463085][T17971] 0x000200000001-0xa29656a63616329 : "" [ 821.469171][T17971] mtd: partition "" is out of reach -- disabled [ 821.490213][T17971] ftl_cs: FTL header not found. [ 822.579103][T17149] Bluetooth: hci5: command tx timeout [ 823.458885][T17938] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.487866][T17938] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.512795][T17938] bridge_slave_0: entered allmulticast mode [ 823.531332][T17938] bridge_slave_0: entered promiscuous mode [ 823.610685][T17938] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.632489][T17938] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.650714][T17938] bridge_slave_1: entered allmulticast mode [ 823.659574][T17938] bridge_slave_1: entered promiscuous mode [ 823.695374][T17968] can0: slcan on ttyS2. [ 824.649294][T17149] Bluetooth: hci5: command tx timeout [ 824.882844][T17988] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 824.895989][T17938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.991586][T17966] can0 (unregistered): slcan off ttyS2. [ 824.997877][T17988] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 825.022088][T17938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.051982][T17988] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 825.457525][T17993] FAULT_INJECTION: forcing a failure. [ 825.457525][T17993] name failslab, interval 1, probability 0, space 0, times 0 [ 825.589101][T17993] CPU: 0 UID: 0 PID: 17993 Comm: syz.3.2735 Not tainted syzkaller #0 PREEMPT(full) [ 825.589146][T17993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 825.589166][T17993] Call Trace: [ 825.589176][T17993] [ 825.589189][T17993] dump_stack_lvl+0x16c/0x1f0 [ 825.589238][T17993] should_fail_ex+0x512/0x640 [ 825.589288][T17993] ? __kmalloc_noprof+0xca/0x880 [ 825.589323][T17993] ? __pfx_sc_fop_open+0x10/0x10 [ 825.589362][T17993] should_failslab+0xc2/0x120 [ 825.589409][T17993] __kmalloc_noprof+0xdd/0x880 [ 825.589446][T17993] ? __seq_open_private+0x22/0xd0 [ 825.589501][T17993] ? __pfx_sc_fop_open+0x10/0x10 [ 825.589540][T17993] ? __seq_open_private+0x22/0xd0 [ 825.589591][T17993] ? __kasan_kmalloc+0xaa/0xb0 [ 825.589629][T17993] __seq_open_private+0x22/0xd0 [ 825.589680][T17993] sc_common_open+0x6b/0x200 [ 825.589724][T17993] full_proxy_open_regular+0x1b9/0x360 [ 825.589785][T17993] do_dentry_open+0x97f/0x1530 [ 825.589828][T17993] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 825.589888][T17993] vfs_open+0x82/0x3f0 [ 825.589945][T17993] path_openat+0x1de4/0x2cb0 [ 825.590012][T17993] ? __pfx_path_openat+0x10/0x10 [ 825.590064][T17993] do_filp_open+0x20b/0x470 [ 825.590103][T17993] ? __pfx_do_filp_open+0x10/0x10 [ 825.590173][T17993] ? alloc_fd+0x471/0x7d0 [ 825.590218][T17993] do_sys_openat2+0x11b/0x1d0 [ 825.590271][T17993] ? __pfx_do_sys_openat2+0x10/0x10 [ 825.590339][T17993] __x64_sys_openat+0x174/0x210 [ 825.590394][T17993] ? __pfx___x64_sys_openat+0x10/0x10 [ 825.590468][T17993] do_syscall_64+0xcd/0x4b0 [ 825.590514][T17993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.590549][T17993] RIP: 0033:0x7f97e1f8eec9 [ 825.590576][T17993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.590609][T17993] RSP: 002b:00007f97e2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 825.590641][T17993] RAX: ffffffffffffffda RBX: 00007f97e21e5fa0 RCX: 00007f97e1f8eec9 [ 825.590663][T17993] RDX: 0000000000088080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 825.590685][T17993] RBP: 00007f97e2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 825.590705][T17993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.590725][T17993] R13: 00007f97e21e6038 R14: 00007f97e21e5fa0 R15: 00007ffc4f45a9a8 [ 825.590768][T17993] [ 826.061578][T17938] team0: Port device team_slave_0 added [ 826.070557][T17938] team0: Port device team_slave_1 added [ 826.519951][T17938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.530466][T17938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.661481][T17938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.736484][T17149] Bluetooth: hci5: command tx timeout [ 826.777435][T17938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.852068][T17938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.885848][T18015] FAULT_INJECTION: forcing a failure. [ 826.885848][T18015] name failslab, interval 1, probability 0, space 0, times 0 [ 826.922436][T18015] CPU: 0 UID: 0 PID: 18015 Comm: syz.4.2738 Not tainted syzkaller #0 PREEMPT(full) [ 826.922485][T18015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 826.922507][T18015] Call Trace: [ 826.922520][T18015] [ 826.922534][T18015] dump_stack_lvl+0x16c/0x1f0 [ 826.922582][T18015] should_fail_ex+0x512/0x640 [ 826.922633][T18015] ? __kmalloc_noprof+0xca/0x880 [ 826.922672][T18015] should_failslab+0xc2/0x120 [ 826.922725][T18015] __kmalloc_noprof+0xdd/0x880 [ 826.922761][T18015] ? sk_prot_alloc+0x1a8/0x2a0 [ 826.922803][T18015] ? sk_prot_alloc+0x1a8/0x2a0 [ 826.922838][T18015] sk_prot_alloc+0x1a8/0x2a0 [ 826.922890][T18015] sk_alloc+0x36/0xc20 [ 826.922941][T18015] pptp_create+0x32/0x340 [ 826.922974][T18015] pppox_create+0x15c/0x2c0 [ 826.923031][T18015] __sock_create+0x338/0x8d0 [ 826.923079][T18015] __sys_socket+0x14d/0x260 [ 826.923118][T18015] ? fdget_pos+0x2b8/0x370 [ 826.923159][T18015] ? __pfx___sys_socket+0x10/0x10 [ 826.923201][T18015] ? xfd_validate_state+0x61/0x180 [ 826.923231][T18015] ? __pfx_ksys_write+0x10/0x10 [ 826.923282][T18015] __x64_sys_socket+0x72/0xb0 [ 826.923321][T18015] ? lockdep_hardirqs_on+0x7c/0x110 [ 826.923362][T18015] do_syscall_64+0xcd/0x4b0 [ 826.923407][T18015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.923443][T18015] RIP: 0033:0x7f323018eec9 [ 826.923472][T18015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.923507][T18015] RSP: 002b:00007f3230fbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 826.923540][T18015] RAX: ffffffffffffffda RBX: 00007f32303e6360 RCX: 00007f323018eec9 [ 826.923563][T18015] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 826.923583][T18015] RBP: 00007f3230211f91 R08: 0000000000000000 R09: 0000000000000000 [ 826.923605][T18015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.923626][T18015] R13: 00007f32303e63f8 R14: 00007f32303e6360 R15: 00007ffec4098b08 [ 826.923672][T18015] [ 826.989717][T17938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.396524][T17938] hsr_slave_0: entered promiscuous mode [ 827.422107][T17938] hsr_slave_1: entered promiscuous mode [ 827.469200][T17938] debugfs: 'hsr0' already exists in 'hsr' [ 827.475681][T17938] Cannot create hsr debugfs directory [ 828.711540][T17938] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 828.802431][T17938] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 828.876419][T17938] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 828.922537][T17938] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 829.503642][T17938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.655442][T17938] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.727693][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.735078][T17160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.812387][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.819690][T17160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.016328][T17938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 830.354755][T18067] aoe: could not set interface list: too many interfaces [ 830.530280][T18072] erspan0: entered allmulticast mode [ 830.867013][T17938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.720379][T18085] can: request_module (can-proto-0) failed. [ 831.845020][T18091] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 831.889364][T17938] veth0_vlan: entered promiscuous mode [ 831.937458][T17938] veth1_vlan: entered promiscuous mode [ 832.047072][T17938] veth0_macvtap: entered promiscuous mode [ 832.081770][T17938] veth1_macvtap: entered promiscuous mode [ 832.164823][T17938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.240013][T17938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.268217][T17128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.286126][T17128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.346808][T17283] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.378451][T17283] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.389841][T18087] FAULT_INJECTION: forcing a failure. [ 832.389841][T18087] name fail_futex, interval 1, probability 0, space 0, times 0 [ 832.430644][T18087] CPU: 0 UID: 0 PID: 18087 Comm: syz.0.2745 Not tainted syzkaller #0 PREEMPT(full) [ 832.430689][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 832.430711][T18087] Call Trace: [ 832.430722][T18087] [ 832.430734][T18087] dump_stack_lvl+0x16c/0x1f0 [ 832.430783][T18087] should_fail_ex+0x512/0x640 [ 832.430837][T18087] get_futex_key+0x293/0x1560 [ 832.430891][T18087] ? __pfx_get_futex_key+0x10/0x10 [ 832.430939][T18087] ? __mutex_trylock_common+0xe9/0x250 [ 832.431003][T18087] futex_wake+0xea/0x530 [ 832.431041][T18087] ? __pfx_futex_wake+0x10/0x10 [ 832.431094][T18087] do_futex+0x1e3/0x350 [ 832.431148][T18087] ? __pfx_do_futex+0x10/0x10 [ 832.431196][T18087] ? __might_fault+0xe3/0x190 [ 832.431243][T18087] mm_release+0x24e/0x300 [ 832.431287][T18087] do_exit+0x68e/0x2bf0 [ 832.431316][T18087] ? pipe_unlock+0x62/0x70 [ 832.431370][T18087] ? __pfx_do_exit+0x10/0x10 [ 832.431399][T18087] ? do_raw_spin_lock+0x12c/0x2b0 [ 832.431433][T18087] ? find_held_lock+0x2b/0x80 [ 832.431481][T18087] do_group_exit+0xd3/0x2a0 [ 832.431513][T18087] get_signal+0x2671/0x26d0 [ 832.431572][T18087] ? __pfx_get_signal+0x10/0x10 [ 832.431615][T18087] ? do_sendfile+0x4ea/0xe50 [ 832.431663][T18087] arch_do_signal_or_restart+0x8f/0x790 [ 832.431713][T18087] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 832.431772][T18087] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 832.431829][T18087] exit_to_user_mode_loop+0x85/0x130 [ 832.431866][T18087] do_syscall_64+0x419/0x4b0 [ 832.431911][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.431945][T18087] RIP: 0033:0x7f486e78eec9 [ 832.431971][T18087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.432004][T18087] RSP: 002b:00007f486f64f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 832.432037][T18087] RAX: fffffffffffffe00 RBX: 00007f486e9e6090 RCX: 00007f486e78eec9 [ 832.432059][T18087] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 832.432081][T18087] RBP: 00007f486e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 832.432102][T18087] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 832.432124][T18087] R13: 00007f486e9e6128 R14: 00007f486e9e6090 R15: 00007ffe15e9d878 [ 832.432167][T18087] [ 832.786766][T17160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.794715][T17160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.837132][T17160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.845527][T17160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.973677][T18100] 0x000200000001-0xa29656a63616329 : "" [ 833.064022][T18100] mtd: partition "" is out of reach -- disabled [ 833.104567][T18100] ftl_cs: FTL header not found. [ 833.205164][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 835.252954][T18140] FAULT_INJECTION: forcing a failure. [ 835.252954][T18140] name failslab, interval 1, probability 0, space 0, times 0 [ 835.266156][T18140] CPU: 0 UID: 0 PID: 18140 Comm: syz.5.2755 Not tainted syzkaller #0 PREEMPT(full) [ 835.266199][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.266219][T18140] Call Trace: [ 835.266232][T18140] [ 835.266246][T18140] dump_stack_lvl+0x16c/0x1f0 [ 835.266298][T18140] should_fail_ex+0x512/0x640 [ 835.266354][T18140] should_failslab+0xc2/0x120 [ 835.266399][T18140] kmem_cache_alloc_noprof+0x75/0x6e0 [ 835.266430][T18140] ? pcpu_alloc_noprof+0x949/0x14c0 [ 835.266459][T18140] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 835.266517][T18140] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 835.266571][T18140] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 835.266637][T18140] idr_get_free+0x528/0xa30 [ 835.266688][T18140] idr_alloc_u32+0x190/0x2f0 [ 835.266731][T18140] ? __pfx_idr_alloc_u32+0x10/0x10 [ 835.266771][T18140] ? lock_acquire+0x179/0x350 [ 835.266832][T18140] idr_alloc_cyclic+0x10b/0x230 [ 835.266872][T18140] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 835.266907][T18140] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 835.266944][T18140] ? lsm_blob_alloc+0x2b/0x90 [ 835.266994][T18140] map_create+0x143e/0x27e0 [ 835.267043][T18140] ? __pfx_map_create+0x10/0x10 [ 835.267090][T18140] ? __might_fault+0xe3/0x190 [ 835.267126][T18140] ? __might_fault+0xe3/0x190 [ 835.267161][T18140] ? __might_fault+0x13b/0x190 [ 835.267216][T18140] __sys_bpf+0x3d9d/0x4980 [ 835.267254][T18140] ? futex_private_hash_put+0x18a/0x300 [ 835.267308][T18140] ? __pfx___sys_bpf+0x10/0x10 [ 835.267346][T18140] ? __pfx_futex_wait+0x10/0x10 [ 835.267398][T18140] ? do_futex+0x122/0x350 [ 835.267461][T18140] ? fput+0x9b/0xd0 [ 835.267511][T18140] ? xfd_validate_state+0x61/0x180 [ 835.267541][T18140] ? __pfx_ksys_write+0x10/0x10 [ 835.267587][T18140] __x64_sys_bpf+0x78/0xc0 [ 835.267624][T18140] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.267664][T18140] do_syscall_64+0xcd/0x4b0 [ 835.267710][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.267744][T18140] RIP: 0033:0x7f7ce6f8eec9 [ 835.267771][T18140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.267805][T18140] RSP: 002b:00007f7ce7ec9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 835.267837][T18140] RAX: ffffffffffffffda RBX: 00007f7ce71e5fa0 RCX: 00007f7ce6f8eec9 [ 835.267860][T18140] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 835.267881][T18140] RBP: 00007f7ce7011f91 R08: 0000000000000000 R09: 0000000000000000 [ 835.267901][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.267922][T18140] R13: 00007f7ce71e6038 R14: 00007f7ce71e5fa0 R15: 00007ffc0cf4dfa8 [ 835.267962][T18140] [ 835.537230][ C0] vkms_vblank_simulate: vblank timer overrun [ 836.285276][T18162] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 836.802385][T18166] FAULT_INJECTION: forcing a failure. [ 836.802385][T18166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.874880][T18166] CPU: 1 UID: 0 PID: 18166 Comm: syz.4.2763 Not tainted syzkaller #0 PREEMPT(full) [ 836.874924][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 836.874938][T18166] Call Trace: [ 836.874946][T18166] [ 836.874956][T18166] dump_stack_lvl+0x16c/0x1f0 [ 836.874990][T18166] should_fail_ex+0x512/0x640 [ 836.875027][T18166] _copy_from_user+0x2e/0xd0 [ 836.875063][T18166] get_timespec64+0x8b/0x1b0 [ 836.875097][T18166] ? __pfx_get_timespec64+0x10/0x10 [ 836.875138][T18166] __x64_sys_futex+0x288/0x4c0 [ 836.875176][T18166] ? __pfx___x64_sys_futex+0x10/0x10 [ 836.875227][T18166] ? ksys_write+0x1ac/0x250 [ 836.875255][T18166] ? __pfx_ksys_write+0x10/0x10 [ 836.875291][T18166] do_syscall_64+0xcd/0x4b0 [ 836.875323][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.875347][T18166] RIP: 0033:0x7f323018eec9 [ 836.875365][T18166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.875388][T18166] RSP: 002b:00007f3231042038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 836.875410][T18166] RAX: ffffffffffffffda RBX: 00007f32303e5fa0 RCX: 00007f323018eec9 [ 836.875426][T18166] RDX: 0000000000000008 RSI: 0000000000000086 RDI: 0000000000000000 [ 836.875440][T18166] RBP: 00007f3231042090 R08: 0000000000000000 R09: 0000000000000007 [ 836.875454][T18166] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 836.875468][T18166] R13: 00007f32303e6038 R14: 00007f32303e5fa0 R15: 00007ffec4098b08 [ 836.875498][T18166] [ 837.572938][T18188] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2766'. [ 837.757620][T18188] veth1_macvtap: left promiscuous mode [ 837.913410][T18188] macsec0: entered promiscuous mode [ 837.978773][T18188] macsec0: entered allmulticast mode [ 839.588352][T18217] block nbd7: not configured, cannot reconfigure [ 839.737374][T18222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2771'. [ 841.188274][T18239] 0x000200000001-0xa29656a63616329 : "" [ 841.229086][T18239] mtd: partition "" is out of reach -- disabled [ 841.236185][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 841.309714][T18239] ftl_cs: FTL header not found. [ 841.590068][T18247] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 841.678073][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'. [ 841.986044][T18253] [U] [ 841.988911][T18253] [U] [ 841.991664][T18253] [U] [ 841.994390][T18253] [U] [ 842.011295][T18253] [U] [ 842.014096][T18253] [U] [ 842.016811][T18253] [U] [ 842.019545][T18253] [U] [ 842.077649][T18258] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2782'. [ 842.209409][T18253] [U] [ 842.212216][T18253] [U] [ 842.214982][T18253] [U] [ 842.217753][T18253] [U] [ 842.226312][T18253] [U] [ 842.229124][T18253] [U] [ 842.231904][T18253] [U] [ 842.234764][T18253] [U] [ 842.243883][T18253] [U] [ 842.246670][T18253] [U] [ 842.249515][T18253] [U] [ 842.252232][T18253] [U] [ 842.259712][T18253] [U] [ 842.262601][T18253] [U] [ 842.265328][T18253] [U] [ 842.268067][T18253] [U] [ 842.286195][T18258] veth1_macvtap: left promiscuous mode [ 842.327638][T18253] [U] [ 842.330452][T18253] [U] [ 842.333227][T18253] [U] [ 842.335977][T18253] [U] [ 842.365895][T18258] macsec0: entered promiscuous mode [ 842.399063][T18253] [U] [ 842.401969][T18253] [U] [ 842.404812][T18253] [U] [ 842.407569][T18253] [U] [ 842.419967][T18253] [U] [ 842.422768][T18253] [U] [ 842.425532][T18253] [U] [ 842.428382][T18253] [U] [ 842.431362][T18253] [U] [ 842.434143][T18253] [U] [ 842.436919][T18253] [U] [ 842.439718][T18253] [U] [ 842.448607][T18258] macsec0: entered allmulticast mode [ 842.598615][T18253] [U] [ 842.601430][T18253] [U] [ 842.604172][T18253] [U] [ 842.606950][T18253] [U] [ 842.615602][T18253] [U] [ 842.618418][T18253] [U] [ 842.621186][T18253] [U] [ 842.623917][T18253] [U] [ 842.773376][T18253] [U] [ 842.776182][T18253] [U] [ 842.778932][T18253] [U] [ 842.781682][T18253] [U] [ 842.785231][T18253] [U] [ 842.788011][T18253] [U] [ 842.790855][T18253] [U] [ 842.793588][T18253] [U] [ 842.798660][T18253] [U] [ 842.801522][T18253] [U] [ 842.804451][T18253] [U] [ 842.807210][T18253] [U] [ 842.853568][T18253] [U] [ 842.856360][T18253] [U] [ 842.859097][T18253] [U] [ 842.861850][T18253] [U] [ 842.876212][T18253] [U] [ 842.879178][T18253] [U] [ 842.881914][T18253] [U] [ 842.884645][T18253] [U] [ 842.929184][T18253] [U] [ 842.932075][T18253] [U] [ 842.934849][T18253] [U] [ 842.937602][T18253] [U] [ 842.946208][T18253] [U] [ 842.949001][T18253] [U] [ 842.951755][T18253] [U] [ 842.954508][T18253] [U] [ 842.998912][T18253] [U] [ 843.001681][T18253] [U] [ 843.004510][T18253] [U] [ 843.007268][T18253] [U] [ 843.014442][T18266] HfR: entered promiscuous mode [ 843.095357][T18253] [U] [ 843.098164][T18253] [U] [ 843.100947][T18253] [U] [ 843.103723][T18253] [U] [ 843.131648][T18253] [U] [ 843.134461][T18253] [U] [ 843.137226][T18253] [U] [ 843.140153][T18253] [U] [ 843.205144][T18253] [U] [ 843.207953][T18253] [U] [ 843.210718][T18253] [U] [ 843.213485][T18253] [U] [ 843.217118][T18253] [U] [ 843.219867][T18253] [U] [ 843.222609][T18253] [U] [ 843.225956][T18253] [U] [ 843.229965][T18253] [U] [ 843.232747][T18253] [U] [ 843.235508][T18253] [U] [ 843.238275][T18253] [U] [ 843.241904][T18253] [U] [ 843.244679][T18253] [U] [ 843.247472][T18253] [U] [ 843.250219][T18253] [U] [ 843.253837][T18253] [U] [ 843.256619][T18253] [U] [ 843.259363][T18253] [U] [ 843.262103][T18253] [U] [ 843.312140][T18253] [U] [ 843.315287][T18253] [U] [ 843.318043][T18253] [U] [ 843.320811][T18253] [U] [ 843.375079][T18253] [U] [ 843.377885][T18253] [U] [ 843.380643][T18253] [U] [ 843.383576][T18253] [U] [ 843.395000][T18253] [U] [ 843.397822][T18253] [U] [ 843.400597][T18253] [U] [ 843.403379][T18253] [U] [ 843.418913][T18253] [U] [ 843.421768][T18253] [U] [ 843.424528][T18253] [U] [ 843.427301][T18253] [U] [ 843.495636][T18253] [U] [ 843.498555][T18253] [U] [ 843.501309][T18253] [U] [ 843.511439][T18278] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 843.544198][T18253] [U] [ 843.732491][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2784'. [ 843.880310][T18285] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 844.534569][T18292] can: request_module (can-proto-5) failed. [ 844.984754][T18313] can: request_module (can-proto-5) failed. [ 845.195173][T18326] FAULT_INJECTION: forcing a failure. [ 845.195173][T18326] name failslab, interval 1, probability 0, space 0, times 0 [ 845.263342][T18326] CPU: 0 UID: 0 PID: 18326 Comm: syz.4.2794 Not tainted syzkaller #0 PREEMPT(full) [ 845.263381][T18326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 845.263396][T18326] Call Trace: [ 845.263404][T18326] [ 845.263413][T18326] dump_stack_lvl+0x16c/0x1f0 [ 845.263453][T18326] should_fail_ex+0x512/0x640 [ 845.263488][T18326] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 845.263519][T18326] should_failslab+0xc2/0x120 [ 845.263554][T18326] kmem_cache_alloc_noprof+0x75/0x6e0 [ 845.263581][T18326] ? __kernfs_new_node+0xd2/0x8e0 [ 845.263621][T18326] ? __kernfs_new_node+0xd2/0x8e0 [ 845.263658][T18326] __kernfs_new_node+0xd2/0x8e0 [ 845.263694][T18326] ? __pfx___kernfs_new_node+0x10/0x10 [ 845.263734][T18326] ? find_held_lock+0x2b/0x80 [ 845.263764][T18326] ? kernfs_root+0xee/0x2a0 [ 845.263802][T18326] kernfs_new_node+0x13c/0x1e0 [ 845.263850][T18326] __kernfs_create_file+0x53/0x350 [ 845.263881][T18326] sysfs_add_file_mode_ns+0x207/0x3c0 [ 845.263921][T18326] internal_create_group+0x578/0xf30 [ 845.263964][T18326] ? __pfx_internal_create_group+0x10/0x10 [ 845.264011][T18326] sysfs_slab_add+0x1a9/0x1f0 [ 845.264041][T18326] do_kmem_cache_create+0x5bb/0x740 [ 845.264082][T18326] __kmem_cache_create_args+0x202/0x3c0 [ 845.264112][T18326] mon_text_open+0x333/0x510 [ 845.264148][T18326] ? __pfx_mon_text_open+0x10/0x10 [ 845.264185][T18326] ? __pfx_mon_text_ctor+0x10/0x10 [ 845.264225][T18326] ? __pfx_apparmor_file_open+0x10/0x10 [ 845.264260][T18326] ? lockdown_is_locked_down+0x3f/0x130 [ 845.264293][T18326] ? bpf_lsm_locked_down+0x9/0x10 [ 845.264332][T18326] ? __pfx_mon_text_open+0x10/0x10 [ 845.264364][T18326] full_proxy_open_regular+0x1b9/0x360 [ 845.264404][T18326] do_dentry_open+0x97f/0x1530 [ 845.264436][T18326] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 845.264479][T18326] vfs_open+0x82/0x3f0 [ 845.264519][T18326] path_openat+0x1de4/0x2cb0 [ 845.264558][T18326] ? __pfx_path_openat+0x10/0x10 [ 845.264596][T18326] do_filp_open+0x20b/0x470 [ 845.264643][T18326] ? __pfx_do_filp_open+0x10/0x10 [ 845.264694][T18326] ? alloc_fd+0x471/0x7d0 [ 845.264729][T18326] do_sys_openat2+0x11b/0x1d0 [ 845.264766][T18326] ? __pfx_do_sys_openat2+0x10/0x10 [ 845.264806][T18326] ? __sys_sendmsg+0x18c/0x220 [ 845.264856][T18326] __x64_sys_openat+0x174/0x210 [ 845.264895][T18326] ? __pfx___x64_sys_openat+0x10/0x10 [ 845.264947][T18326] do_syscall_64+0xcd/0x4b0 [ 845.264979][T18326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.265004][T18326] RIP: 0033:0x7f323018eec9 [ 845.265024][T18326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.265048][T18326] RSP: 002b:00007f3231000038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 845.265071][T18326] RAX: ffffffffffffffda RBX: 00007f32303e6180 RCX: 00007f323018eec9 [ 845.265087][T18326] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 845.265102][T18326] RBP: 00007f3230211f91 R08: 0000000000000000 R09: 0000000000000000 [ 845.265117][T18326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.265132][T18326] R13: 00007f32303e6218 R14: 00007f32303e6180 R15: 00007ffec4098b08 [ 845.265163][T18326] [ 845.598237][T18326] SLUB: Unable to add cache mon_text_ffff88803f2a6c00 to sysfs [ 845.877319][T18337] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 846.605362][T18348] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 846.801136][T18350] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 847.258342][T18353] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 848.673568][T18378] can: request_module (can-proto-5) failed. [ 850.671411][T18409] can: request_module (can-proto-5) failed. [ 851.534535][T18418] binder: 18417:18418 ioctl 40046210 0 returned -14 [ 852.276358][T18434] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 853.343538][T18447] can: request_module (can-proto-5) failed. [ 853.475605][T18451] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2826'. [ 853.494522][T18451] veth1_macvtap: left promiscuous mode [ 853.500579][T18451] macsec0: entered promiscuous mode [ 853.508023][T18451] macsec0: entered allmulticast mode [ 854.061211][T18457] FAULT_INJECTION: forcing a failure. [ 854.061211][T18457] name failslab, interval 1, probability 0, space 0, times 0 [ 854.076444][T18457] CPU: 1 UID: 0 PID: 18457 Comm: syz.3.2828 Not tainted syzkaller #0 PREEMPT(full) [ 854.076476][T18457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.076493][T18457] Call Trace: [ 854.076510][T18457] [ 854.076523][T18457] dump_stack_lvl+0x16c/0x1f0 [ 854.076568][T18457] should_fail_ex+0x512/0x640 [ 854.076613][T18457] ? fs_reclaim_acquire+0xae/0x150 [ 854.076665][T18457] should_failslab+0xc2/0x120 [ 854.076712][T18457] __kmalloc_noprof+0xdd/0x880 [ 854.076744][T18457] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 854.076792][T18457] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 854.076830][T18457] tomoyo_realpath_from_path+0xc2/0x6e0 [ 854.076872][T18457] ? tomoyo_profile+0x47/0x60 [ 854.076920][T18457] tomoyo_path_number_perm+0x245/0x580 [ 854.076969][T18457] ? tomoyo_path_number_perm+0x237/0x580 [ 854.077032][T18457] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 854.077086][T18457] ? find_held_lock+0x2b/0x80 [ 854.077160][T18457] ? find_held_lock+0x2b/0x80 [ 854.077200][T18457] ? hook_file_ioctl_common+0x145/0x410 [ 854.077243][T18457] ? __fget_files+0x20e/0x3c0 [ 854.077286][T18457] security_file_ioctl+0x9b/0x240 [ 854.077320][T18457] __x64_sys_ioctl+0xb7/0x210 [ 854.077373][T18457] do_syscall_64+0xcd/0x4b0 [ 854.077418][T18457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.077470][T18457] RIP: 0033:0x7f97e1f8eec9 [ 854.077496][T18457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.077529][T18457] RSP: 002b:00007f97e2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.077560][T18457] RAX: ffffffffffffffda RBX: 00007f97e21e5fa0 RCX: 00007f97e1f8eec9 [ 854.077581][T18457] RDX: 00000000000001e6 RSI: 00000000800064be RDI: 0000000000000003 [ 854.077603][T18457] RBP: 00007f97e2d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 854.077624][T18457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.077644][T18457] R13: 00007f97e21e6038 R14: 00007f97e21e5fa0 R15: 00007ffc4f45a9a8 [ 854.077689][T18457] [ 854.078133][T18457] ERROR: Out of memory at tomoyo_realpath_from_path. [ 854.420568][T18460] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 854.498284][T18462] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 854.586356][T18464] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 854.701489][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2830'. [ 855.859625][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2833'. [ 855.897965][T18478] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 856.716576][T18485] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 856.888885][T18487] can: request_module (can-proto-5) failed. [ 859.028529][T18501] 0x000200000001-0xa29656a63616329 : "" [ 859.035371][T18501] mtd: partition "" is out of reach -- disabled [ 859.050028][T18501] ftl_cs: FTL header not found. [ 859.270513][T18506] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 860.783537][T17930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 860.795268][T17930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 860.809426][T17930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 860.818547][T17930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 860.829232][T17930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 861.092967][T18520] chnl_net:caif_netlink_parms(): no params data found [ 861.208114][T18520] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.216854][T18520] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.224982][T18520] bridge_slave_0: entered allmulticast mode [ 861.233766][T18520] bridge_slave_0: entered promiscuous mode [ 861.250016][T18520] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.257885][T18520] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.265367][T18520] bridge_slave_1: entered allmulticast mode [ 861.274618][T18520] bridge_slave_1: entered promiscuous mode [ 861.362968][T18520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.376733][T18520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.429837][T18520] team0: Port device team_slave_0 added [ 861.438039][T18520] team0: Port device team_slave_1 added [ 861.508280][T18520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.516866][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.560001][T18520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.589372][T18520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.601078][T18520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.796487][T18520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.916433][T18520] hsr_slave_0: entered promiscuous mode [ 861.924928][T18520] hsr_slave_1: entered promiscuous mode [ 861.934601][T18520] debugfs: 'hsr0' already exists in 'hsr' [ 861.941746][T18520] Cannot create hsr debugfs directory [ 862.313353][T18520] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 862.332235][T18520] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 862.345257][T18520] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 862.369960][T18520] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 862.555768][T18520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.620297][T18520] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.680271][T18311] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.687428][T18311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.723045][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.730240][T17160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.889277][T17930] Bluetooth: hci6: command tx timeout [ 863.165876][T18520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.763817][T18520] veth0_vlan: entered promiscuous mode [ 863.786855][T18520] veth1_vlan: entered promiscuous mode [ 863.847312][T18520] veth0_macvtap: entered promiscuous mode [ 863.875359][T18520] veth1_macvtap: entered promiscuous mode [ 863.906315][T18520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.928376][T18520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.971362][T17160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.992357][T17160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.041519][T17160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.073260][T17160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.130865][T17160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.148665][T17160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.195642][T18311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.203891][T18311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.402839][T17149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 864.432410][T17149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 864.442828][T17149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 864.456884][T17149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 864.468028][T17149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 864.969292][T17149] Bluetooth: hci6: command tx timeout [ 865.104211][T18567] chnl_net:caif_netlink_parms(): no params data found [ 865.333646][T18567] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.358237][T18567] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.382558][T18567] bridge_slave_0: entered allmulticast mode [ 865.391158][T18567] bridge_slave_0: entered promiscuous mode [ 865.432900][T18567] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.456073][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.470778][T18567] bridge_slave_1: entered allmulticast mode [ 865.479490][T18567] bridge_slave_1: entered promiscuous mode [ 865.567508][T18567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.589177][T18567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.677635][T18567] team0: Port device team_slave_0 added [ 865.702842][T18567] team0: Port device team_slave_1 added [ 865.841840][T18567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.855701][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.885710][T18567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.972247][T18567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.979639][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.006038][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.028038][T18567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.219622][T18567] hsr_slave_0: entered promiscuous mode [ 866.227393][T18567] hsr_slave_1: entered promiscuous mode [ 866.234964][T18567] debugfs: 'hsr0' already exists in 'hsr' [ 866.253179][T18567] Cannot create hsr debugfs directory [ 866.569092][T17149] Bluetooth: hci7: command tx timeout [ 867.058920][T17149] Bluetooth: hci6: command tx timeout [ 867.179200][T18617] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2859'. [ 867.362949][T17930] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 867.374463][T17930] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 867.382919][T17930] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 867.426657][T17930] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 867.436959][T17930] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 867.835958][T18567] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 867.880066][T18567] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 867.949140][T18567] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 868.001873][T18613] ERROR: Out of memory at tomoyo_memory_ok. [ 868.012140][T18567] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 868.663240][T17149] Bluetooth: hci7: command tx timeout [ 868.695682][T18567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.727526][T18567] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.756905][T18637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 868.975060][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.982368][T17160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.030898][T18621] chnl_net:caif_netlink_parms(): no params data found [ 869.063480][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.070720][T17160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.130200][T17149] Bluetooth: hci6: command tx timeout [ 869.533847][T17149] Bluetooth: hci8: command tx timeout [ 870.066169][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.088746][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.115474][T18621] bridge_slave_0: entered allmulticast mode [ 870.140686][T18621] bridge_slave_0: entered promiscuous mode [ 870.242507][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.250583][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.257909][T18621] bridge_slave_1: entered allmulticast mode [ 870.267114][T18621] bridge_slave_1: entered promiscuous mode [ 870.378201][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.421661][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.558946][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 870.627374][T18621] team0: Port device team_slave_0 added [ 870.728916][T17149] Bluetooth: hci7: command tx timeout [ 870.846597][T18621] team0: Port device team_slave_1 added [ 871.058374][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.080311][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.132343][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.188993][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.228394][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.255824][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.270505][T18668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2865'. [ 871.334525][T18668] sd 0:0:1:0: PR command failed: 1026 [ 871.341380][T18668] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 871.353576][T18668] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 871.374989][T18567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.609090][T17149] Bluetooth: hci8: command tx timeout [ 871.963117][T18621] hsr_slave_0: entered promiscuous mode [ 871.980137][T18621] hsr_slave_1: entered promiscuous mode [ 871.986763][T18621] debugfs: 'hsr0' already exists in 'hsr' [ 871.998627][T18621] Cannot create hsr debugfs directory [ 872.808724][T17149] Bluetooth: hci7: command tx timeout [ 873.201398][T18567] veth0_vlan: entered promiscuous mode [ 873.308196][T18567] veth1_vlan: entered promiscuous mode [ 873.315660][T18703] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 873.542240][T18621] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 873.584394][T18567] veth0_macvtap: entered promiscuous mode [ 873.618654][T18621] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 873.648048][T18621] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 873.693986][T17149] Bluetooth: hci8: command tx timeout [ 873.704322][T18567] veth1_macvtap: entered promiscuous mode [ 873.718063][T18621] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 873.735364][T18709] can: request_module (can-proto-5) failed. [ 873.904356][T18567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.935259][T18567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.968707][T17129] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.025683][T17129] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.067965][T17129] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.078262][T17129] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.379899][T18311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.422727][T18311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.470432][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.525438][T17129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.551839][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.552280][T17129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.594576][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.601883][T17129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.681561][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.688827][T17129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.716470][T18735] rtc_cmos 00:00: Alarms can be up to one day in the future [ 874.964157][T18735] ERROR: Out of memory at tomoyo_memory_ok. [ 875.011091][T18735] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/161/file0' not defined. [ 875.207432][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 875.231118][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 875.259010][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 875.287549][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 875.309379][ T5906] rtc rtc0: __rtc_set_alarm: err=-22 [ 875.790384][T17149] Bluetooth: hci8: command tx timeout [ 876.030985][T18754] Console: switching to colour frame buffer device 4x6 [ 876.263344][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.390471][T18761] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 876.971635][T18776] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 877.599358][T18621] veth0_vlan: entered promiscuous mode [ 877.665118][T18621] veth1_vlan: entered promiscuous mode [ 878.470055][T18621] veth0_macvtap: entered promiscuous mode [ 878.505343][T18621] veth1_macvtap: entered promiscuous mode [ 878.533580][T18794] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2878'. [ 878.600730][T18794] veth1_macvtap: left promiscuous mode [ 878.619047][T18794] macsec0: entered promiscuous mode [ 878.630815][T18794] macsec0: entered allmulticast mode [ 878.708840][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.751073][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.831366][T17130] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.844722][T17130] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.892090][T17130] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.915401][T17130] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.508552][T17283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.524722][T17283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.824730][T17160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.894880][T17160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.919456][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.925886][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.564172][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2882'. [ 881.855906][T18822] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 882.849117][T18827] can: request_module (can-proto-5) failed. [ 887.936588][T18871] 0x000200000001-0xa29656a63616329 : "" [ 887.948412][T18871] mtd: partition "" is out of reach -- disabled [ 888.017359][T18871] ftl_cs: FTL header not found. [ 888.256594][T18879] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 888.405053][T18881] ERROR: Out of memory at tomoyo_memory_ok. [ 888.472699][T18878] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 888.580460][T18878] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 890.191542][T17149] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 890.203982][T17149] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 890.213772][T17149] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 890.231556][T17149] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 890.242579][T17149] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 891.037883][T18896] chnl_net:caif_netlink_parms(): no params data found [ 891.395877][T18896] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.417318][T18896] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.424798][T18896] bridge_slave_0: entered allmulticast mode [ 891.434196][T18896] bridge_slave_0: entered promiscuous mode [ 891.444990][T18896] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.452979][T18896] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.461758][T18896] bridge_slave_1: entered allmulticast mode [ 891.470094][T18913] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 891.480117][T18896] bridge_slave_1: entered promiscuous mode [ 891.595749][T18896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.664699][T18896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.796285][T18896] team0: Port device team_slave_0 added [ 891.824213][T18896] team0: Port device team_slave_1 added [ 892.004317][T18896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.049887][T18896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.099611][T18896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.176592][T18896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.222703][T18896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.330443][T17149] Bluetooth: hci9: command tx timeout [ 892.403595][T18896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.756032][T18896] hsr_slave_0: entered promiscuous mode [ 892.774430][T18896] hsr_slave_1: entered promiscuous mode [ 892.790934][T18896] debugfs: 'hsr0' already exists in 'hsr' [ 892.796748][T18896] Cannot create hsr debugfs directory [ 893.940099][T18896] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 894.040212][T18896] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 894.140151][T18896] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 894.248700][T18896] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 894.409417][T17149] Bluetooth: hci9: command tx timeout [ 894.600204][T18896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.713578][T18896] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.839316][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.846572][T17160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.065675][T18312] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.072976][T18312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.772348][T18896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.332909][T18974] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 896.488506][T17149] Bluetooth: hci9: command tx timeout [ 896.619394][T18980] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2913'. [ 896.862648][T18896] veth0_vlan: entered promiscuous mode [ 896.899676][T18896] veth1_vlan: entered promiscuous mode [ 896.912106][T18982] 0x000200000001-0xa29656a63616329 : "" [ 896.924580][T18982] mtd: partition "" is out of reach -- disabled [ 896.946853][T18982] ftl_cs: FTL header not found. [ 897.359024][T18896] veth0_macvtap: entered promiscuous mode [ 897.438596][T18896] veth1_macvtap: entered promiscuous mode [ 897.542476][T18896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.636058][T18896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.736953][T18311] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.803102][T18311] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.962086][T17160] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.101583][T17160] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.199822][T19002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2918'. [ 898.268091][T17160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.309711][T17160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.571173][T17149] Bluetooth: hci9: command tx timeout [ 898.630047][T17160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.637948][T17160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.182998][T19013] can: request_module (can-proto-5) failed. [ 899.544863][T17930] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 899.556401][T17930] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 899.566490][T17930] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 899.590156][T17930] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 899.611867][T17127] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 899.887141][T19028] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 899.925264][T19029] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 900.046895][T19028] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 900.669210][T19022] chnl_net:caif_netlink_parms(): no params data found [ 900.726743][T19036] can: request_module (can-proto-5) failed. [ 900.945206][T19022] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.952634][T19022] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.961866][T19022] bridge_slave_0: entered allmulticast mode [ 901.021674][T19022] bridge_slave_0: entered promiscuous mode [ 901.033345][T19022] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.069092][T19022] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.076482][T19022] bridge_slave_1: entered allmulticast mode [ 901.090166][T19022] bridge_slave_1: entered promiscuous mode [ 901.214853][T19022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.251617][T19022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.342553][T19022] team0: Port device team_slave_0 added [ 901.353166][T19022] team0: Port device team_slave_1 added [ 901.468456][T19022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.475531][T19022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.559359][T19022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.582039][T19022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.589198][T19022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.617678][T19022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.688649][T17127] Bluetooth: hci10: command tx timeout [ 901.845809][T19022] hsr_slave_0: entered promiscuous mode [ 901.860593][T19022] hsr_slave_1: entered promiscuous mode [ 901.877607][T19022] debugfs: 'hsr0' already exists in 'hsr' [ 901.884505][T19022] Cannot create hsr debugfs directory [ 902.183060][T19022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.322090][T19022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.445871][T19022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.737008][T19022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.083892][T19022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 903.129713][T19022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 903.176140][T19022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 903.209851][T19022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 903.346243][T19022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.378200][T19059] 0x000200000001-0xa29656a63616329 : "" [ 903.394197][T19022] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.401321][T19059] mtd: partition "" is out of reach -- disabled [ 903.417463][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.424745][T17129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.439364][T19059] ftl_cs: FTL header not found. [ 903.468097][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.475491][T17129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.775396][T17127] Bluetooth: hci10: command tx timeout [ 904.047223][T19022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.133844][T19022] veth0_vlan: entered promiscuous mode [ 904.159300][T19022] veth1_vlan: entered promiscuous mode [ 904.222166][T19022] veth0_macvtap: entered promiscuous mode [ 904.241660][T19022] veth1_macvtap: entered promiscuous mode [ 904.315310][T19022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.435959][T19022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.484507][T17130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.511133][T17130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.534448][T17130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.592777][T17130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.878171][T17129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.916282][T17129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.086694][T17129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.099097][T17129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.242571][T19076] 0x000200000001-0xa29656a63616329 : "" [ 905.258501][T19076] mtd: partition "" is out of reach -- disabled [ 905.271940][T19080] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2919'. [ 905.301804][T19076] ftl_cs: FTL header not found. [ 905.371587][T19080] veth1_macvtap: left promiscuous mode [ 905.377274][T19080] macsec0: entered promiscuous mode [ 905.503298][T19080] macsec0: entered allmulticast mode [ 905.853624][T17127] Bluetooth: hci10: command tx timeout [ 906.033973][T19086] sock: sock_set_timeout: `syz.3.2934' (pid 19086) tries to set negative timeout [ 906.069761][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 906.221365][T19090] netlink: 'syz.3.2934': attribute type 1 has an invalid length. [ 906.437284][T19095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 907.162480][T19102] ptrace attach of "./syz-executor exec"[19022] was attempted by "./syz-executor exec"[19102] [ 907.936741][T17127] Bluetooth: hci10: command tx timeout [ 910.140985][T19132] ERROR: Out of memory at tomoyo_memory_ok. [ 911.758445][T19152] FAULT_INJECTION: forcing a failure. [ 911.758445][T19152] name failslab, interval 1, probability 0, space 0, times 0 [ 911.781988][T19152] CPU: 1 UID: 0 PID: 19152 Comm: syz.3.2945 Not tainted syzkaller #0 PREEMPT(full) [ 911.782040][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 911.782063][T19152] Call Trace: [ 911.782076][T19152] [ 911.782091][T19152] dump_stack_lvl+0x16c/0x1f0 [ 911.782146][T19152] should_fail_ex+0x512/0x640 [ 911.782199][T19152] ? fs_reclaim_acquire+0xae/0x150 [ 911.782255][T19152] should_failslab+0xc2/0x120 [ 911.782308][T19152] kmem_cache_alloc_noprof+0x75/0x6e0 [ 911.782348][T19152] ? __pfx_map_id_range_down+0x10/0x10 [ 911.782386][T19152] ? security_inode_alloc+0x3b/0x2b0 [ 911.782450][T19152] ? security_inode_alloc+0x3b/0x2b0 [ 911.782503][T19152] security_inode_alloc+0x3b/0x2b0 [ 911.782560][T19152] inode_init_always_gfp+0xce4/0x1030 [ 911.782609][T19152] alloc_inode+0x86/0x240 [ 911.782678][T19152] sock_alloc+0x40/0x280 [ 911.782714][T19152] __sock_create+0xc1/0x8d0 [ 911.782764][T19152] __sys_socket+0x14d/0x260 [ 911.782807][T19152] ? __pfx___sys_socket+0x10/0x10 [ 911.782850][T19152] ? xfd_validate_state+0x61/0x180 [ 911.782895][T19152] __x64_sys_socket+0x72/0xb0 [ 911.782936][T19152] ? lockdep_hardirqs_on+0x7c/0x110 [ 911.782978][T19152] do_syscall_64+0xcd/0x4b0 [ 911.783027][T19152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.783063][T19152] RIP: 0033:0x7f97e1f8eec9 [ 911.783092][T19152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.783127][T19152] RSP: 002b:00007f97e2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 911.783158][T19152] RAX: ffffffffffffffda RBX: 00007f97e21e5fa0 RCX: 00007f97e1f8eec9 [ 911.783182][T19152] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 911.783203][T19152] RBP: 00007f97e2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 911.783224][T19152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.783245][T19152] R13: 00007f97e21e6038 R14: 00007f97e21e5fa0 R15: 00007ffc4f45a9a8 [ 911.783290][T19152] [ 911.785463][T19152] socket: no more sockets [ 912.514915][T19155] can: request_module (can-proto-5) failed. [ 912.679994][T19160] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 913.096655][T19165] can: request_module (can-proto-5) failed. [ 915.476856][T17149] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 915.488134][T17149] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 915.512402][T17149] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 915.526421][T17149] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 915.545177][T17149] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 915.882447][T19176] chnl_net:caif_netlink_parms(): no params data found [ 916.023603][T19176] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.031084][T19176] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.038926][T19176] bridge_slave_0: entered allmulticast mode [ 916.047397][T19176] bridge_slave_0: entered promiscuous mode [ 916.058290][T19176] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.065695][T19176] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.074304][T19176] bridge_slave_1: entered allmulticast mode [ 916.082883][T19176] bridge_slave_1: entered promiscuous mode [ 916.145754][T19176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.161738][T19176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.240761][T19176] team0: Port device team_slave_0 added [ 916.260857][T19176] team0: Port device team_slave_1 added [ 916.431140][T19176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.440120][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.467705][T19176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.492153][T19176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.511609][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.574427][T19176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.717520][T19176] hsr_slave_0: entered promiscuous mode [ 916.735459][T19176] hsr_slave_1: entered promiscuous mode [ 916.753162][T19176] debugfs: 'hsr0' already exists in 'hsr' [ 916.765994][T19176] Cannot create hsr debugfs directory [ 916.876924][T17127] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 916.890951][T17127] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 916.912203][T17127] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 916.929105][T17127] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 916.937170][T17127] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 917.299799][T19176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.316599][T19197] openvswitch: netlink: IPv6 tunnel dst address is zero [ 917.452276][T19176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.495894][T19199] ERROR: Out of memory at tomoyo_memory_ok. [ 917.570082][T19199] FAULT_INJECTION: forcing a failure. [ 917.570082][T19199] name failslab, interval 1, probability 0, space 0, times 0 [ 917.583007][T19199] CPU: 1 UID: 0 PID: 19199 Comm: syz.3.2957 Not tainted syzkaller #0 PREEMPT(full) [ 917.583057][T19199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 917.583080][T19199] Call Trace: [ 917.583091][T19199] [ 917.583106][T19199] dump_stack_lvl+0x16c/0x1f0 [ 917.583159][T19199] should_fail_ex+0x512/0x640 [ 917.583209][T19199] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 917.583265][T19199] should_failslab+0xc2/0x120 [ 917.583318][T19199] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 917.583368][T19199] ? __ip_vs_sctp_init+0x37/0x80 [ 917.583418][T19199] ? kmemdup_noprof+0x29/0x60 [ 917.583457][T19199] kmemdup_noprof+0x29/0x60 [ 917.583498][T19199] ? __pfx___ip_vs_sctp_init+0x10/0x10 [ 917.583539][T19199] __ip_vs_sctp_init+0x37/0x80 [ 917.583581][T19199] ip_vs_protocol_net_init+0x191/0x300 [ 917.583626][T19199] __ip_vs_init+0x239/0x520 [ 917.583673][T19199] ? __pfx___ip_vs_init+0x10/0x10 [ 917.583717][T19199] ops_init+0x1e2/0x5f0 [ 917.583778][T19199] setup_net+0x100/0x390 [ 917.583843][T19199] ? __pfx_setup_net+0x10/0x10 [ 917.583902][T19199] ? debug_mutex_init+0x37/0x70 [ 917.583951][T19199] copy_net_ns+0x2f8/0x690 [ 917.583995][T19199] create_new_namespaces+0x3ea/0xa90 [ 917.584054][T19199] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 917.584107][T19199] ksys_unshare+0x45b/0xa40 [ 917.584161][T19199] ? __pfx_ksys_unshare+0x10/0x10 [ 917.584216][T19199] ? xfd_validate_state+0x61/0x180 [ 917.584259][T19199] __x64_sys_unshare+0x31/0x40 [ 917.584313][T19199] do_syscall_64+0xcd/0x4b0 [ 917.584360][T19199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.584398][T19199] RIP: 0033:0x7f97e1f8eec9 [ 917.584426][T19199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.584462][T19199] RSP: 002b:00007f97e2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 917.584495][T19199] RAX: ffffffffffffffda RBX: 00007f97e21e5fa0 RCX: 00007f97e1f8eec9 [ 917.584518][T19199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 917.584538][T19199] RBP: 00007f97e2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 917.584557][T19199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.584578][T19199] R13: 00007f97e21e6038 R14: 00007f97e21e5fa0 R15: 00007ffc4f45a9a8 [ 917.584624][T19199] [ 917.648818][T17127] Bluetooth: hci11: command tx timeout [ 917.855090][T19176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.889192][T19193] chnl_net:caif_netlink_parms(): no params data found [ 917.965977][T19176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.110965][T19193] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.121811][T19193] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.165172][T19193] bridge_slave_0: entered allmulticast mode [ 918.205758][T19193] bridge_slave_0: entered promiscuous mode [ 918.220834][T19193] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.231027][T19193] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.247462][T19193] bridge_slave_1: entered allmulticast mode [ 918.258595][T19193] bridge_slave_1: entered promiscuous mode [ 918.421600][T19193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.453566][T19193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.467977][T19176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 918.517373][T19176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 918.537032][T19193] team0: Port device team_slave_0 added [ 918.545203][T19176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 918.564682][T19193] team0: Port device team_slave_1 added [ 918.572449][T19176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 918.631343][T19193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.639337][T19193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.666728][T19193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.685042][T19193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.692642][T19193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.720852][T19193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.819111][T19193] hsr_slave_0: entered promiscuous mode [ 918.826451][T19193] hsr_slave_1: entered promiscuous mode [ 918.840836][T19193] debugfs: 'hsr0' already exists in 'hsr' [ 918.847506][T19193] Cannot create hsr debugfs directory [ 918.968690][T17127] Bluetooth: hci12: command tx timeout [ 919.198956][T19176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.324993][T19193] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.386141][T19176] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.436046][T19193] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.457774][T18312] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.465038][T18312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.596990][T19193] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.655610][T18312] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.662915][T18312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.810229][T19193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 919.889552][T19193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 919.940486][T17127] Bluetooth: hci11: command tx timeout [ 919.956186][T19193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 919.995668][T19193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 920.580846][T19193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.724207][T19193] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.791189][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.798415][T17130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.919597][T18311] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.926779][T18311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.048807][T17127] Bluetooth: hci12: command tx timeout [ 921.224511][T19176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.482893][T19176] veth0_vlan: entered promiscuous mode [ 921.507237][T19176] veth1_vlan: entered promiscuous mode [ 921.622843][T19176] veth0_macvtap: entered promiscuous mode [ 921.644681][T19176] veth1_macvtap: entered promiscuous mode [ 921.745983][T19176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.781184][T19176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.824615][T18311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.894017][T18311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.918749][T16691] svc: failed to register nfsdv3 RPC service (errno 512). [ 921.936385][T18311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.938444][T16691] svc: failed to register nfsaclv3 RPC service (errno 512). [ 921.961522][T18311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.010156][T17127] Bluetooth: hci11: command tx timeout [ 922.152195][T19193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.177890][T17129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.199544][T17129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.333423][T17129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.346995][T17129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.582390][T19193] veth0_vlan: entered promiscuous mode [ 922.705435][T19193] veth1_vlan: entered promiscuous mode [ 922.859399][T19251] can: request_module (can-proto-5) failed. [ 922.898661][T19193] veth0_macvtap: entered promiscuous mode [ 922.980147][T19193] veth1_macvtap: entered promiscuous mode [ 923.098079][T19193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.112676][T19193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.131417][T17127] Bluetooth: hci12: command tx timeout [ 923.200773][T17129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.253375][T17129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.265936][T17129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.286427][T17129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.472898][T17129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.494432][T17129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.563236][T18311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.572933][T18311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.098415][T17127] Bluetooth: hci11: command tx timeout [ 924.167971][T19263] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input69 [ 924.236017][T19263] FAULT_INJECTION: forcing a failure. [ 924.236017][T19263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.252443][T19263] CPU: 1 UID: 0 PID: 19263 Comm: syz.3.2964 Not tainted syzkaller #0 PREEMPT(full) [ 924.252488][T19263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.252509][T19263] Call Trace: [ 924.252520][T19263] [ 924.252533][T19263] dump_stack_lvl+0x16c/0x1f0 [ 924.252579][T19263] should_fail_ex+0x512/0x640 [ 924.252632][T19263] strncpy_from_user+0x3b/0x2e0 [ 924.252684][T19263] getname_flags.part.0+0x2d1/0x550 [ 924.252744][T19263] getname_flags+0x93/0xf0 [ 924.252780][T19263] __x64_sys_symlink+0x65/0x90 [ 924.252823][T19263] do_syscall_64+0xcd/0x4b0 [ 924.252868][T19263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.252903][T19263] RIP: 0033:0x7f97e1f8eec9 [ 924.252933][T19263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.252965][T19263] RSP: 002b:00007f97e2d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 924.252996][T19263] RAX: ffffffffffffffda RBX: 00007f97e21e5fa0 RCX: 00007f97e1f8eec9 [ 924.253018][T19263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 924.253038][T19263] RBP: 00007f97e2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.253058][T19263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.253079][T19263] R13: 00007f97e21e6038 R14: 00007f97e21e5fa0 R15: 00007ffc4f45a9a8 [ 924.253122][T19263] [ 924.415602][T19264] ICMPv6: process `syz.3.2964' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 925.209367][T17127] Bluetooth: hci12: command tx timeout [ 925.750534][T19278] mtrr: base(0x64000000000) is not aligned on a size(0x0000) boundary [ 926.030583][T19286] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 926.755033][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 927.609593][T19304] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 928.819605][T19321] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 929.164637][T17149] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 929.233002][T17149] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 929.333782][T17149] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 929.348429][T17149] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 929.416597][T17149] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 929.975242][T19342] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 930.013160][T19329] chnl_net:caif_netlink_parms(): no params data found [ 930.219501][T19329] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.243600][T19329] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.259358][T19329] bridge_slave_0: entered allmulticast mode [ 930.287115][T19329] bridge_slave_0: entered promiscuous mode [ 930.298077][T19329] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.307172][T19329] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.315333][T19329] bridge_slave_1: entered allmulticast mode [ 930.327081][T19329] bridge_slave_1: entered promiscuous mode [ 930.334882][T19351] random: crng reseeded on system resumption [ 930.420461][T19329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.443193][T19329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.517484][T19329] team0: Port device team_slave_0 added [ 930.539951][T19329] team0: Port device team_slave_1 added [ 930.658884][T19329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.666663][T19329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.716144][T19329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.741817][T19329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.749076][T19329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.784172][T19329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.964902][T19329] hsr_slave_0: entered promiscuous mode [ 930.976563][T19329] hsr_slave_1: entered promiscuous mode [ 930.990397][T19329] debugfs: 'hsr0' already exists in 'hsr' [ 930.996566][T19329] Cannot create hsr debugfs directory [ 931.216329][T19368] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 931.526304][T19329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.539764][T17149] Bluetooth: hci13: command tx timeout [ 931.825706][T19329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.045688][T19329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.362170][T19329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.733449][T19329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 932.769697][T19329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 932.797777][T19329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 932.857175][T19329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 933.110901][ T30] audit: type=1804 audit(4294967337.110:31): pid=19390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2990" name="/newroot/11/file0" dev="tmpfs" ino=74 res=1 errno=0 [ 933.608731][T17149] Bluetooth: hci13: command tx timeout [ 933.834153][T19329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.887305][T19329] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.024357][T17160] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.031875][T17160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.133781][T17160] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.141470][T17160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.882109][T19329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 934.937755][T19329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 935.592669][T19329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.688553][T17149] Bluetooth: hci13: command tx timeout [ 936.032383][T19329] veth0_vlan: entered promiscuous mode [ 936.071157][T19329] veth1_vlan: entered promiscuous mode [ 936.177861][T19329] veth0_macvtap: entered promiscuous mode [ 936.192338][T19329] veth1_macvtap: entered promiscuous mode [ 936.230446][T19329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.265893][T19329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.286469][T17280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.286723][T17280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.286803][T17280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.286874][T17280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.488422][T18311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.501712][T18311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.550562][T17280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.560549][T17280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.734014][T19433] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 937.637467][T19445] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 937.768436][T17149] Bluetooth: hci13: command tx timeout [ 938.930458][T19467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 938.959241][T19467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 938.966330][T19467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 938.972789][T19467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 939.052575][T19467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 939.077512][T19467] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 939.118505][T19467] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 939.176230][T19467] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 939.202040][T19467] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 939.231589][T19467] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 939.303709][T19467] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 939.327223][T19467] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 939.346367][T19467] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 939.359846][T19467] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 939.372303][T19467] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 939.386448][T19467] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 939.397719][T19467] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 939.429457][T19467] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 939.438690][T19467] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 939.452838][T19467] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 939.474492][T19467] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 939.484934][T19467] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 939.500633][T19467] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 939.522644][T19467] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 939.530552][T19467] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 939.545253][T19467] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 939.555532][T19467] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 939.569390][T19467] Bluetooth: hci12: Opcode 0x0406 failed: -4 [ 939.583825][T19467] Bluetooth: hci12: Opcode 0x0406 failed: -4 [ 939.595170][T19467] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 939.640332][T19467] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 939.652910][T19467] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 939.693259][T17127] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 939.736278][ T5848] Process accounting resumed [ 939.736438][T17127] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 939.798511][T17127] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 939.821411][T17127] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 939.835417][T17127] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 940.351913][T19489] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 940.371972][T19489] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 940.461709][T19476] chnl_net:caif_netlink_parms(): no params data found [ 940.699393][T19476] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.713538][T19476] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.722212][T19476] bridge_slave_0: entered allmulticast mode [ 940.728660][T17149] Bluetooth: hci1: command 0x0406 tx timeout [ 940.750717][T19476] bridge_slave_0: entered promiscuous mode [ 940.760433][T19476] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.769162][T19476] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.776844][T19476] bridge_slave_1: entered allmulticast mode [ 940.787755][T19476] bridge_slave_1: entered promiscuous mode [ 940.861587][T19476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.914813][T19476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.970331][T17149] Bluetooth: hci0: command 0x0c1a tx timeout [ 940.976433][T17127] Bluetooth: hci4: command 0x0c1a tx timeout [ 940.976727][T19498] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 941.022183][T19498] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.4.3011: 7 [ 941.040640][T19476] team0: Port device team_slave_0 added [ 941.069357][T17127] Bluetooth: hci3: command 0x0c1a tx timeout [ 941.129234][T17127] Bluetooth: hci2: command 0x0c1a tx timeout [ 941.135467][T17149] Bluetooth: hci5: command 0x0c1a tx timeout [ 941.169765][T19476] team0: Port device team_slave_1 added [ 941.208772][T17149] Bluetooth: hci6: command 0x0c1a tx timeout [ 941.335104][T19476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.348351][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.368855][T17149] Bluetooth: hci7: command 0x0c1a tx timeout [ 941.426437][T19476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.457897][T17149] Bluetooth: hci9: command 0x0c1a tx timeout [ 941.461489][T19476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.465588][T17149] Bluetooth: hci8: command 0x0c1a tx timeout [ 941.484053][T19505] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 941.500197][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.527409][T19476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.529135][T17149] Bluetooth: hci11: command 0x0c1a tx timeout [ 941.544558][T17127] Bluetooth: hci10: command 0x0c1a tx timeout [ 941.632859][T17149] Bluetooth: hci13: command 0x0c1a tx timeout [ 941.639106][T17127] Bluetooth: hci12: command 0x0c1a tx timeout [ 941.957409][T17127] Bluetooth: hci14: command tx timeout [ 942.040039][T19476] hsr_slave_0: entered promiscuous mode [ 942.059771][T19476] hsr_slave_1: entered promiscuous mode [ 942.080956][T19476] debugfs: 'hsr0' already exists in 'hsr' [ 942.101820][T19476] Cannot create hsr debugfs directory [ 942.342663][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.351551][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.748327][T19476] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.959113][T19476] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.040883][T19476] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.168521][T19476] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.208537][T17127] Bluetooth: hci5: command 0x0c1a tx timeout [ 943.288560][T17127] Bluetooth: hci6: command 0x0c1a tx timeout [ 943.449494][T17127] Bluetooth: hci7: command 0x0c1a tx timeout [ 943.528419][T17127] Bluetooth: hci8: command 0x0c1a tx timeout [ 943.534525][T17127] Bluetooth: hci9: command 0x0c1a tx timeout [ 943.609883][T17149] Bluetooth: hci10: command 0x0c1a tx timeout [ 943.617942][T17127] Bluetooth: hci11: command 0x0c1a tx timeout [ 943.653688][T19476] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 943.667180][T19476] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 943.687711][T19476] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 943.695507][T17127] Bluetooth: hci12: command 0x0c1a tx timeout [ 943.709609][T17149] Bluetooth: hci13: command 0x0c1a tx timeout [ 943.737200][T19476] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 944.011454][T17127] Bluetooth: hci14: command tx timeout [ 944.186162][T19476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.232610][T19476] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.266216][T18311] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.273444][T18311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.306187][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.313398][T17130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.994043][T19476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.289809][T17127] Bluetooth: hci5: command 0x0c1a tx timeout [ 945.368736][T17127] Bluetooth: hci6: command 0x0c1a tx timeout [ 945.530106][T17127] Bluetooth: hci7: command 0x0c1a tx timeout [ 945.608656][T17149] Bluetooth: hci9: command 0x0c1a tx timeout [ 945.614863][T17149] Bluetooth: hci8: command 0x0c1a tx timeout [ 945.670761][T19476] veth0_vlan: entered promiscuous mode [ 945.696354][T17149] Bluetooth: hci11: command 0x0c1a tx timeout [ 945.702677][T17127] Bluetooth: hci10: command 0x0c1a tx timeout [ 945.723885][T19476] veth1_vlan: entered promiscuous mode [ 945.768757][T17149] Bluetooth: hci12: command 0x0c1a tx timeout [ 945.775046][T17149] Bluetooth: hci13: command 0x0c1a tx timeout [ 945.824799][T19476] veth0_macvtap: entered promiscuous mode [ 945.829165][T19576] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 945.845920][T19476] veth1_macvtap: entered promiscuous mode [ 945.889740][T19476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.918359][T19476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.960476][T17281] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.989740][T17281] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.045273][T17281] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.054740][T17281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.088429][T17149] Bluetooth: hci14: command tx timeout [ 946.158882][T19580] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 946.272199][T17281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.286474][T17281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.433830][T18315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.448646][T18315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.168943][T17149] Bluetooth: hci14: command tx timeout [ 949.190553][T19620] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 949.268520][T19621] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 949.889769][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'. [ 950.740939][T19639] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 951.711353][T17127] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 951.724130][T17127] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 951.735032][T17127] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 951.748354][T17127] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 951.756484][T17127] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 952.231104][T19659] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 952.427564][T19666] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 952.851696][T19652] chnl_net:caif_netlink_parms(): no params data found [ 953.224471][T19672] random: crng reseeded on system resumption [ 953.394915][T19652] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.462027][T19652] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.487270][T19652] bridge_slave_0: entered allmulticast mode [ 953.510358][T19652] bridge_slave_0: entered promiscuous mode [ 953.540928][T19652] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.559596][T19652] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.579922][T19652] bridge_slave_1: entered allmulticast mode [ 953.599428][T19652] bridge_slave_1: entered promiscuous mode [ 953.824942][T19652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.851746][T17127] Bluetooth: hci15: command tx timeout [ 953.920385][T19652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.173993][T19652] team0: Port device team_slave_0 added [ 954.224727][T19652] team0: Port device team_slave_1 added [ 954.497267][T19652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.518425][T19652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.628185][T19652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.830443][T19652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.847738][T19652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.972483][T19652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.994201][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3058'. [ 955.390198][T19652] hsr_slave_0: entered promiscuous mode [ 955.430729][T19652] hsr_slave_1: entered promiscuous mode [ 955.461814][T19652] debugfs: 'hsr0' already exists in 'hsr' [ 955.518096][T19652] Cannot create hsr debugfs directory [ 955.611404][T19719] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 955.928187][T17127] Bluetooth: hci15: command tx timeout [ 957.105703][T19652] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.435289][T19652] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.008301][T17127] Bluetooth: hci15: command tx timeout [ 958.327526][T19652] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.338257][ T31] INFO: task syz-executor:16360 blocked for more than 142 seconds. [ 958.338293][ T31] Not tainted syzkaller #0 [ 958.338313][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.338329][ T31] task:syz-executor state:D stack:24152 pid:16360 tgid:16360 ppid:1 task_flags:0x400140 flags:0x00080002 [ 958.338444][ T31] Call Trace: [ 958.338457][ T31] [ 958.338479][ T31] __schedule+0x1190/0x5de0 [ 958.338537][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 958.338606][ T31] ? __pfx___schedule+0x10/0x10 [ 958.338656][ T31] ? find_held_lock+0x2b/0x80 [ 958.338704][ T31] ? schedule+0x2d7/0x3a0 [ 958.338746][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 958.338802][ T31] schedule+0xe7/0x3a0 [ 958.338840][ T31] schedule_preempt_disabled+0x13/0x30 [ 958.338891][ T31] __mutex_lock+0x818/0x1060 [ 958.338932][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 958.338986][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 958.339048][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 958.339107][ T31] ? net_generic+0xea/0x2a0 [ 958.339165][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 958.339217][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 958.339274][ T31] nfsd_umount+0x48/0xe0 [ 958.339330][ T31] deactivate_locked_super+0xc1/0x1a0 [ 958.339373][ T31] deactivate_super+0xde/0x100 [ 958.339414][ T31] cleanup_mnt+0x225/0x450 [ 958.339455][ T31] task_work_run+0x14d/0x240 [ 958.339498][ T31] ? __pfx_task_work_run+0x10/0x10 [ 958.339540][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 958.339591][ T31] exit_to_user_mode_loop+0xec/0x130 [ 958.339632][ T31] do_syscall_64+0x419/0x4b0 [ 958.339682][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.339722][ T31] RIP: 0033:0x7f65467901f7 [ 958.339751][ T31] RSP: 002b:00007ffe2feec7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 958.339787][ T31] RAX: 0000000000000000 RBX: 00007f6546811d7d RCX: 00007f65467901f7 [ 958.339812][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2feec8b0 [ 958.339834][ T31] RBP: 00007ffe2feec8b0 R08: 0000000000000000 R09: 0000000000000000 [ 958.339865][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2feed940 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 958.339887][ T31] R13: 00007f6546811d7d R14: 00000000000c3b9e R15: 00007ffe2feed980 [ 958.339943][ T31] [ 958.340041][ T31] [ 958.340041][ T31] Showing all locks held in the system: [ 958.340057][ T31] 2 locks held by kworker/0:0/9: [ 958.340082][ T31] 1 lock held by khungtaskd/31: [ 958.340102][ T31] #0: ffffffff8e1c2220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 958.340241][ T31] 2 locks held by syz-executor/15937: [ 958.340262][ T31] #0: ffff88803b0e00e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.340363][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.340470][ T31] 2 locks held by syz-executor/16360: [ 958.340492][ T31] #0: ffff888030b8c0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.340591][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.340697][ T31] 2 locks held by syz.1.2456/16691: [ 958.340719][ T31] #0: ffffffff8ff8c250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 958.340817][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 958.340915][ T31] 2 locks held by syz-executor/16949: [ 958.340936][ T31] #0: ffff8880295800e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.341032][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.341136][ T31] 3 locks held by kworker/u10:3/17130: [ 958.341156][ T31] #0: ffff88801b069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 958.341255][ T31] #1: ffffc9000d877d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 958.341344][ T31] #2: ffffffff8fee8908 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 958.341437][ T31] 2 locks held by syz-executor/17938: [ 958.341459][ T31] #0: ffff88802ed940e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.341555][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.341660][ T31] 2 locks held by syz-executor/18520: [ 958.341681][ T31] #0: ffff888031cf80e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.341777][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.341888][ T31] 2 locks held by syz-executor/18567: [ 958.364275][ T31] #0: ffff8880762a60e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.364385][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.364489][ T31] 2 locks held by syz-executor/18621: [ 958.364508][ T31] #0: ffff88805a04a0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.364603][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.364710][ T31] 2 locks held by syz-executor/18896: [ 958.364730][ T31] #0: ffff88802faa00e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.364824][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.364940][ T31] 2 locks held by syz-executor/19022: [ 958.364962][ T31] #0: ffff88807d3f40e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.365056][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.365159][ T31] 2 locks held by syz-executor/19176: [ 958.365179][ T31] #0: ffff88807a0500e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.365274][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.365377][ T31] 2 locks held by syz-executor/19193: [ 958.365398][ T31] #0: ffff888031b580e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 958.365491][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 958.365594][ T31] 4 locks held by syz-executor/19329: [ 958.365619][ T31] 11 locks held by syz-executor/19652: [ 958.365641][ T31] 1 lock held by syz.5.3064/19731: [ 958.365663][ T31] [ 958.365672][ T31] ============================================= [ 958.365672][ T31] [ 959.059255][ T31] NMI backtrace for cpu 1 [ 959.059281][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 959.059317][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.059336][ T31] Call Trace: [ 959.059346][ T31] [ 959.059359][ T31] dump_stack_lvl+0x116/0x1f0 [ 959.059402][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 959.059455][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 959.059508][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 959.059563][ T31] watchdog+0xf3f/0x1170 [ 959.059604][ T31] ? rcu_is_watching+0x12/0xc0 [ 959.059644][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.059675][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 959.059716][ T31] ? __kthread_parkme+0x19e/0x250 [ 959.059763][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.059798][ T31] kthread+0x3c5/0x780 [ 959.059838][ T31] ? __pfx_kthread+0x10/0x10 [ 959.059872][ T31] ? rcu_is_watching+0x12/0xc0 [ 959.059908][ T31] ? __pfx_kthread+0x10/0x10 [ 959.059940][ T31] ret_from_fork+0x56a/0x730 [ 959.059969][ T31] ? __pfx_kthread+0x10/0x10 [ 959.060000][ T31] ret_from_fork_asm+0x1a/0x30 [ 959.060060][ T31] [ 959.060072][ T31] Sending NMI from CPU 1 to CPUs 0: [ 959.186885][ C0] NMI backtrace for cpu 0 [ 959.186918][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 959.186950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.186971][ C0] Workqueue: events_power_efficient gc_worker [ 959.187006][ C0] RIP: 0010:write_comp_data+0x11/0x90 [ 959.187036][ C0] Code: 96 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 a7 83 c0 11 <65> 8b 05 b8 83 c0 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 959.187069][ C0] RSP: 0018:ffffc900000e7b50 EFLAGS: 00000293 [ 959.187089][ C0] RAX: 0000000000000000 RBX: 0000000000040000 RCX: ffffffff8979f202 [ 959.187107][ C0] RDX: ffff88801da88000 RSI: 000000000002f728 RDI: 0000000000000004 [ 959.187125][ C0] RBP: ffffffff9ad173ac R08: 0000000000000004 R09: 000000000002f728 [ 959.187148][ C0] R10: 0000000000040000 R11: 0000000000000000 R12: ffff888024000000 [ 959.187165][ C0] R13: 000000000002f728 R14: dffffc0000000000 R15: 0000000000001770 [ 959.187183][ C0] FS: 0000000000000000(0000) GS:ffff888124e6f000(0000) knlGS:0000000000000000 [ 959.187209][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.187228][ C0] CR2: 00007feea869bd58 CR3: 0000000078bfe000 CR4: 00000000003526f0 [ 959.187246][ C0] Call Trace: [ 959.187256][ C0] [ 959.187266][ C0] gc_worker+0x342/0x16e0 [ 959.187297][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 959.187341][ C0] ? __pfx_gc_worker+0x10/0x10 [ 959.187373][ C0] ? rcu_is_watching+0x12/0xc0 [ 959.187410][ C0] process_one_work+0x9cc/0x1b70 [ 959.187446][ C0] ? __pfx_process_srcu+0x10/0x10 [ 959.187475][ C0] ? __pfx_process_one_work+0x10/0x10 [ 959.187510][ C0] ? assign_work+0x1a0/0x250 [ 959.187538][ C0] worker_thread+0x6c8/0xf10 [ 959.187576][ C0] ? __pfx_worker_thread+0x10/0x10 [ 959.187604][ C0] kthread+0x3c5/0x780 [ 959.187630][ C0] ? __pfx_kthread+0x10/0x10 [ 959.187656][ C0] ? rcu_is_watching+0x12/0xc0 [ 959.187689][ C0] ? __pfx_kthread+0x10/0x10 [ 959.187716][ C0] ret_from_fork+0x56a/0x730 [ 959.187742][ C0] ? __pfx_kthread+0x10/0x10 [ 959.187768][ C0] ret_from_fork_asm+0x1a/0x30 [ 959.187816][ C0] [ 959.588076][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 959.595022][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 959.604279][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.614391][ T31] Call Trace: [ 959.617713][ T31] [ 959.620688][ T31] dump_stack_lvl+0x3d/0x1f0 [ 959.625345][ T31] vpanic+0x640/0x6f0 [ 959.629378][ T31] panic+0xca/0xd0 [ 959.633227][ T31] ? __pfx_panic+0x10/0x10 [ 959.637684][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 959.643124][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 959.649352][ T31] ? watchdog+0xe48/0x1170 [ 959.653824][ T31] ? watchdog+0xe3b/0x1170 [ 959.658302][ T31] watchdog+0xe59/0x1170 [ 959.662610][ T31] ? rcu_is_watching+0x12/0xc0 [ 959.667449][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.672185][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 959.677797][ T31] ? __kthread_parkme+0x19e/0x250 [ 959.682898][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.687640][ T31] kthread+0x3c5/0x780 [ 959.691773][ T31] ? __pfx_kthread+0x10/0x10 [ 959.696415][ T31] ? rcu_is_watching+0x12/0xc0 [ 959.701415][ T31] ? __pfx_kthread+0x10/0x10 [ 959.706150][ T31] ret_from_fork+0x56a/0x730 [ 959.710797][ T31] ? __pfx_kthread+0x10/0x10 [ 959.715427][ T31] ret_from_fork_asm+0x1a/0x30 [ 959.720273][ T31] [ 959.723678][ T31] Kernel Offset: disabled [ 959.728068][ T31] Rebooting in 86400 seconds..